- dovecot - dovecot.org

[Dovecot] SSL only for external connections
by Simon Brereton 30 Sep '11

30 Sep '11

Hi I'm running dovecot 1:1.2.15-7 and php webmail application is throwing errors when connecting to IMAP with TLS. Is there away to disable SSL/TLS for localhost connections? I googled, but didn't see anything specific. Can I assume that it's as simple as setting ssl_listen = to the external IP address(es) and leaving listen = * as it is? Thanks. Simon

1 0

[Dovecot] Panic: file lmtp-proxy.c: line 370 (lmtp_proxy_output_timeout): assertion failed: (proxy->data_input->eof)
by mailing lists 30 Sep '11

30 Sep '11

Hello all, today I got this crash from dovecot (2.0.14) Sep 29 14:09:32 imap1 dovecot: lmtp(17693): Panic: file lmtp-proxy.c: line 370 (lmtp_proxy_output_timeout): assertion failed: (proxy->data_input->eof) Sep 29 14:09:32 imap1 dovecot: lmtp(17693): Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0(+0x3f9aa) [0x7f18f10299aa] -> /usr/lib64/dovecot/libdovecot.so.0(+0x3f9f6) [0x7f18f10299f6] -> /usr/lib64/dovecot/libdovecot.so.0(i_fatal+0) [0x7f18f1003211] -> dovecot/lmtp(+0x7a4f) [0x7f18f1982a4f] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handle_timeouts+0xcb) [0x7f18f103590b] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run+0x5b) [0x7f18f103680b] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7f18f1035768] -> /usr/lib64/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f18f1023423] -> dovecot/lmtp(main+0x183) [0x7f18f197fa93] -> /lib64/libc.so.6(__libc_start_main+0xfd) [0x7f18f0ca8b7d] -> dovecot/lmtp(+0x4819) [0x7f18f197f819] Sep 29 14:09:32 imap1 dovecot: master: Error: service(lmtp): child 17693 killed with signal 6 (core dumps disabled) /-----------------/ # dovecot -n -c /etc/dovecot-director/dovecot.conf # 2.0.14: /etc/dovecot-director/dovecot.conf # OS: Linux 2.6.34.7-0.7-xen x86_64 openSUSE 11.3 (x86_64) auth_debug = yes auth_verbose = yes base_dir = /var/run/dovecot-director/ director_mail_servers = 100.1.245.101 100.1.245.105 director_servers = 100.1.245.101:9091 100.1.245.105:9091 100.1.241.204:9091 disable_plaintext_auth = no doveadm_proxy_port = 24245 lmtp_proxy = yes mail_debug = yes mail_fsync = always mail_gid = 5000 mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = acl mail_uid = 5000 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mmap_disable = yes passdb { args = proxy=y nopassword=y driver = static } plugin { acl = vfile sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap lmtp pop3 service auth { unix_listener auth-userdb { group = vmail mode = 0666 user = vmail } } service director { fifo_listener login/proxy-notify { mode = 0666 } inet_listener { port = 9091 } unix_listener director-userdb { mode = 0666 } unix_listener login/director { mode = 0666 } } service doveadm { inet_listener { port = 24245 } } service imap-login { executable = imap-login director inet_listener imap { port = 10143 } } service lmtp { inet_listener lmtp { port = 1024 } } service pop3-login { executable = pop3-login director inet_listener pop3 { port = 10110 } } ssl = no verbose_proctitle = yes protocol lmtp { auth_socket_path = director-userdb passdb { args = proxy=y nopassword=y port=24 driver = static } } protocol imap { mail_max_userip_connections = 100 } local 100.1.245.101/28/28 { doveadm_password = secret }

2 1

[Dovecot] Error message in log
by Knute Johnson 30 Sep '11

30 Sep '11

I'm getting the following message in my log; dovecot: IMAP(knute): fchown(/home/knute/mail/.imap/INBOX/dovecot.index.cache.lock, -1, 8(mail)) failed: Operation not permitted (egid=1000(knute), group based on /var/mail/knute): 1 Time(s) dovecot: IMAP(knute): fchown(/home/knute/mail/.imap/INBOX/dovecot.index.log.newlock, -1, 8(mail)) failed: Operation not permitted (egid=1000(knute), group based on /var/mail/knute): 2 Time(s) dovecot: IMAP(knute): fchown(/home/knute/mail/.imap/INBOX/dovecot.index.tmp, -1, 8(mail)) failed: Operation not permitted (egid=1000(knute), group based on /var/mail/knute): 4 Time(s) I got these once before on the /var/mail/user files and changed the permissions to 600. /home/knute/mail/.imap/INBOX is 770 and the index files are 600. Is this a problem with the directory privilege? Thanks, -- Knute Johnson knute2011(a)knutejohnson.com

1 0

[Dovecot] Broken mail clients? [MIME] Long attachment encoded filenames (for non-ASCII characters etc)
by Andrew Richards 30 Sep '11

30 Sep '11

Hi, I've noticed a possible minor issue with long encoded filenames for attachments where these filenames are split across multiple lines. My understanding of character encoding and MIME is not as good as it should be, so I may easily have got this all mixed up, in which case sorry for the noise... Although I understand the preferred method for handling filenames split across multiple lines (because they're too long to fit on one line in the message) is that suggested in RFC2184/2231, so for example, filename*0*=iso-8859-1''accented_characters_here_%EA%CA%E6 filename*1=etc%2Epdf I find that some mail clients do this instead, filename="=?ISO-8859-1?Q?accented_characters_here_=EA=CA=E6?= =?ISO-8859-1?Q?etc=2Epdf?=" In Dovecot this results in, 0 fetch 25 body * 25 FETCH (BODY (("text" "plain" ("charset" "ISO-8859-1") NIL NIL "7bit" 239 8)("application" "pdf" ("name" "=?ISO-8859-1?Q?accented_characters_here_=EA=CA=E6?= =?ISO-8859-1?Q?etc=2Epdf?=") NIL NIL "base64" 219130) "mixed")) esp. note the unwanted space - or in fact the sequence ?= =? between the two sections of the filename. I think a possible tweak for Dovecot would be to combine the filename parts in this situation to remove the ?= =?. I'm not sure if an IMAP client should know to combine the parts in their current format. FWIW I see that Courier does the same as Dovecot in this situation. I think the 'alternative' method of splitting filenames I'm raising breaks RFC2047 (details below), but unfortunately this method is used by some large email generators like gmail - also details below. Key bits from RFC2047 section 5 part (3) re. only a single encoded-word ('phrase') being allowed for a MIME Content-Type / Content-Disposition: phrase = 1*( encoded-word / word ) An 'encoded-word' MUST NOT be used in parameter of a MIME Content-Type or Content-Disposition field, or in any structured field body except within a 'comment' or 'phrase'. Here are the mail clients I noted this issue with (original filenames destroyed because I've been examining my client's emails for this issue - with their permission), (AOL) X-Mailer: Webmail 33953-STANDARD Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="=?utf-8?Q?abcde?= =?utf-8?Q?abcde=C3=A9abcde.jpg?=" Content-Type: image/jpeg; name="=?utf-8?Q?abcde?= =?utf-8?Q?abcde=C3=A9abcde.jpg?=" Gmail: Content-Type: application/pdf; name="=?ISO-8859-1?Q?with_a_=EA=CA=E6_super=2Dlong_name_that=27s_bound?= =?ISO-8859-1?Q?_to_overflow_a_line_boundary_to_test_gmail=2Epdf?=" Content-Disposition: attachment; filename="=?ISO-8859-1?Q?with_a_=EA=CA=E6_super=2Dlong_name_that=27s_bound?= =?ISO-8859-1?Q?_to_overflow_a_line_boundary_to_test_gmail=2Epdf?=" X-Mailer: YahooMailWebService/0.8.113.313619 Content-Type: application/vnd.openxmlformats- officedocument.wordprocessingml.document; name="=?utf-8?B?base64encodedstring?= =?utf-8?B?base64encodedstring?=" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="=?utf-8?B?base64encodedstring?= =?utf-8?B?base64encodedstring?=" X-Mailer: Lotus Notes Release 6.5.5 November 30, 2005: Content-type: application/pdf; name="=?ISO-8859-1?Q?abcde=E9abcde=E9abcde=E9?= =?ISO-8859-1?Q?abcde=2Cl=2Epdf?=" Content-Disposition: attachment; filename="=?ISO-8859-1?Q?abcde=E9abcde=E9_abcde=E9?= =?ISO-8859-1?Q?abcde=2Cl=2Epdf?=" Content-ID: <20__=snip> Content-transfer-encoding: base64 X-Mailer: Lotus Domino Web Server Release 6.5.5FP1 HF551 November 27, 2007: Content-type: application/pdf; name="=?windows-1252?Q?abcde_=28=E9?= =?windows-1252?Q?=29=2Epdf?=" Content-Disposition: attachment; filename="=?windows-1252?Q?abcde_=28=E9?= =?windows-1252?Q?=29=2Epdf?=" Content-transfer-encoding: base64 Timo also noted the same style of filename encoding in Apple Mail in the previous thread I started, it would be interesting to try Apple Mail with a very long filename to cause it to split across multiple lines and see how it encodes the filename then, > Looks like Apple Mail also sends: > > Content-Type: application/octet-stream; > > name="=?iso-8859-1?Q?p=E4=E4?=" Best regards, Andrew.

2 2

[Dovecot] Long attachment encoded filenames (for non-ASCII characters etc) in MIME headers & corresponding Dovecot behaviour
by Andrew Richards 30 Sep '11

30 Sep '11

(Correction: Subject was confused) Hi, I've noticed a possible minor issue with long encoded filenames for attachments where these filenames are split across multiple lines. My understanding of character encoding and MIME is not as good as it should be, so I may easily have got this all mixed up, in which case sorry for the noise... Although I understand the preferred method for handling filenames split across multiple lines (because they're too long to fit on one line in the message) is that suggested in RFC2184/2231, so for example, filename*0*=iso-8859-1''accented_characters_here_%EA%CA%E6 filename*1=etc%2Epdf I find that some mail clients do this instead, filename="=?ISO-8859-1?Q?accented_characters_here_=EA=CA=E6?= =?ISO-8859-1?Q?etc=2Epdf?=" In Dovecot this results in, 0 fetch 25 body * 25 FETCH (BODY (("text" "plain" ("charset" "ISO-8859-1") NIL NIL "7bit" 239 8)("application" "pdf" ("name" "=?ISO-8859-1?Q?accented_characters_here_=EA=CA=E6?= =?ISO-8859-1?Q?etc=2Epdf?=") NIL NIL "base64" 219130) "mixed")) esp. note the unwanted space - or in fact the sequence ?= =? between the two sections of the filename. I think a possible tweak for Dovecot would be to combine the filename parts in this situation to remove the ?= =?. I'm not sure if an IMAP client should know to combine the parts in their current format. FWIW I see that Courier does the same as Dovecot in this situation. I think the 'alternative' method of splitting filenames I'm raising breaks RFC2047 (details below), but unfortunately this method is used by some large email generators like gmail - also details below. Key bits from RFC2047 section 5 part (3) re. only a single encoded-word ('phrase') being allowed for a MIME Content-Type / Content-Disposition: phrase = 1*( encoded-word / word ) An 'encoded-word' MUST NOT be used in parameter of a MIME Content-Type or Content-Disposition field, or in any structured field body except within a 'comment' or 'phrase'. Here are the mail clients I noted this issue with (original filenames destroyed because I've been examining my client's emails for this issue - with their permission), (AOL) X-Mailer: Webmail 33953-STANDARD Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="=?utf-8?Q?abcde?= =?utf-8?Q?abcde=C3=A9abcde.jpg?=" Content-Type: image/jpeg; name="=?utf-8?Q?abcde?= =?utf-8?Q?abcde=C3=A9abcde.jpg?=" Gmail: Content-Type: application/pdf; name="=?ISO-8859-1?Q?with_a_=EA=CA=E6_super=2Dlong_name_that=27s_bound?= =?ISO-8859-1?Q?_to_overflow_a_line_boundary_to_test_gmail=2Epdf?=" Content-Disposition: attachment; filename="=?ISO-8859-1?Q?with_a_=EA=CA=E6_super=2Dlong_name_that=27s_bound?= =?ISO-8859-1?Q?_to_overflow_a_line_boundary_to_test_gmail=2Epdf?=" X-Mailer: YahooMailWebService/0.8.113.313619 Content-Type: application/vnd.openxmlformats- officedocument.wordprocessingml.document; name="=?utf-8?B?base64encodedstring?= =?utf-8?B?base64encodedstring?=" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="=?utf-8?B?base64encodedstring?= =?utf-8?B?base64encodedstring?=" X-Mailer: Lotus Notes Release 6.5.5 November 30, 2005: Content-type: application/pdf; name="=?ISO-8859-1?Q?abcde=E9abcde=E9abcde=E9?= =?ISO-8859-1?Q?abcde=2Cl=2Epdf?=" Content-Disposition: attachment; filename="=?ISO-8859-1?Q?abcde=E9abcde=E9_abcde=E9?= =?ISO-8859-1?Q?abcde=2Cl=2Epdf?=" Content-ID: <20__=snip> Content-transfer-encoding: base64 X-Mailer: Lotus Domino Web Server Release 6.5.5FP1 HF551 November 27, 2007: Content-type: application/pdf; name="=?windows-1252?Q?abcde_=28=E9?= =?windows-1252?Q?=29=2Epdf?=" Content-Disposition: attachment; filename="=?windows-1252?Q?abcde_=28=E9?= =?windows-1252?Q?=29=2Epdf?=" Content-transfer-encoding: base64 Timo also noted the same style of filename encoding in Apple Mail in the previous thread I started, it would be interesting to try Apple Mail with a very long filename to cause it to split across multiple lines and see how it encodes the filename then, > Looks like Apple Mail also sends: > > Content-Type: application/octet-stream; > > name="=?iso-8859-1?Q?p=E4=E4?=" Best regards, Andrew.

1 0

[Dovecot] Dovecot failing to parse some UTF-8 encoded attachment filenames, returning empty string instead
by Andrew Richards 30 Sep '11

30 Sep '11

Hi, I'm seeing a strange problem with some attachment filenames that are UTF-8 encoded. The problem seems to be related to spaces and/or unusual characters in filenames, like accented characters (or perhaps just to filenames if UTF-8 encoded; I've not explored that fully). These filenames are shown as empty strings in IMAP using Dovecot. I've attached a sample message that exhibits this problem, trimmed down to fairly bare essentials. By comparison I find that (for example) Courier happily returns the filename (still encoded). Although I suspect the problem lies within Dovecot, it may be an underlying Unicode or other component that's at the root of the problem. I can replicate this by putting the attached message in a mailbox (I'm using Maildir format mailboxes, so I just drop the raw file in Maildir/new and change the ownership of the file to match the mailbox owner). Then a pretend IMAP session to show the problem, $ telnet localhost 143 Trying ::1... Connected to localhost. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN] Dovecot ready. 0 login some.one(a)test.domain password 0 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS] Logged in 0 select inbox * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft \*)] Flags permitted. * 4 EXISTS * 0 RECENT * OK [UNSEEN 1] First unseen. * OK [UIDVALIDITY 1316621730] UIDs valid * OK [UIDNEXT 8] Predicted next UID * OK [HIGHESTMODSEQ 1] Highest 0 OK [READ-WRITE] Select completed. 0 fetch 4 body * 4 FETCH (BODY (("text" "html" ("charset" "iso-8859-15") NIL NIL "base64" 278 5)("application" "octet-stream" ("name" "") NIL NIL "base64" 18) "mixed")) 0 OK Fetch completed. 0 logout * BYE Logging out 0 OK Logout completed. Connection closed by foreign host. $ especially note the ("name" "") part showing a supposedly empty filename. I've observed this behaviour on the following versions of Dovecot, - 1.2.9 on Ubuntu 10.04LTS (pre-compiled version) - 1.2.17 on Fedora 13 (pre-compiled version) - 2.0.15 on Fedora 13 (from source) I don't think the Dovecot configuration is relevant, but I've put it below for good measure for the 2.0.15 setup. Any ideas on what might be causing this? Best regards, Andrew. # dovecot -n # 2.0.15: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.34.9-69.fc13.i686.PAE i686 Fedora release 13 (Goddard) auth_debug = yes default_login_user = nobody log_path = /var/log/dovecot.log passdb { args = /usr/local/bin/checkcdb driver = checkpassword } protocols = imap pop3 service auth { user = root } service imap-login { inet_listener imap { ssl = no } } service pop3-login { inet_listener pop3 { ssl = no } } ssl = no userdb { driver = prefetch }

2 4

[Dovecot] Virtual Folder configuration problem. [FIXED]
by Terry Carmen 29 Sep '11

29 Sep '11

Well, it took a ton of time and research, but I finally have a working Unread virtual mailbox on Dovecot 2.x on Centos 6.0. I have no idea if it's optimal or correct, but it works perfectly and doesn't raise any errors or warnings. Here's what I ended up with: dovecot.conf: Add the following: mail_plugins = $mail_plugins virtual namespace { type = private prefix = virtual. separator = . location = virtual:~/Maildir/virtual } 10-mail.conf: Add the following: # default namespace namespace { separator = . prefix = inbox = yes } 20-imap.conf: Add the following: protocol imap { mail_plugins = $mail_plugins virtual } 15-lda.conf: Add the following: protocol lda { mail_plugins = $mail_plugins virtual } Restart dovecot. Reload your mail client. Dovecot will create ~/Maildir/virtual cd ~/Maildir/virtual mkdir Unread Use your favorite editor and create a file named "dovecot-virtual" contaiing: # ~/Maildir/virtual/unseen/dovecot-virtual INBOX INBOX.* -INBOX.Trash unseen Save the file and restart your mail client. Go to "Subscriptions" in your mail client and subscribe to the Unseen folder. You should now have a virtual folder that contains all your unread mail, except for the contents of the Trash folder. Enjoy! -- Terry Carmen CNY Support, LLC https://www.cnysupport.com

1 0

[Dovecot] Error message
by Knute Johnson 29 Sep '11

29 Sep '11

I'm getting the following message in my log; dovecot: IMAP(knute): fchown(/home/knute/mail/.imap/INBOX/dovecot.index.cache.lock, -1, 8(mail)) failed: Operation not permitted (egid=1000(knute), group based on /var/mail/knute): 1 Time(s) dovecot: IMAP(knute): fchown(/home/knute/mail/.imap/INBOX/dovecot.index.log.newlock, -1, 8(mail)) failed: Operation not permitted (egid=1000(knute), group based on /var/mail/knute): 2 Time(s) dovecot: IMAP(knute): fchown(/home/knute/mail/.imap/INBOX/dovecot.index.tmp, -1, 8(mail)) failed: Operation not permitted (egid=1000(knute), group based on /var/mail/knute): 4 Time(s) I got these once before on the /var/mail/user files and changed the permissions to 600. /home/knute/mail/.imap/INBOX is 770 and the index files are 600. Is this a problem with the directory privilege? Thanks, -- Knute Johnson

1 0

[Dovecot] "Waiting for authentication process to respond" for invalid users with auth_dovecot
by Ibrahim Harrani 29 Sep '11

29 Sep '11

Hi, I am testing dovecot 2.0.13 and 2.0.14 with qmail-ldap and auth_dovecot patch. If i login to dovecot (pop3/imap) with correct user and password. no problem, I can login immediately. but if I try with nonexistant user, dovecot does not immediate answer, wait for a while and says "Waiting for authentication process to respond." auth_dovecot process remains working in the background. How can I avoid this situation? # telnet 0 143 Trying 0.0.0.0... Connected to 0. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN] Dovecot ready. o login validuser validpass o OK [CAPABILITY IMAP4rev1 LITERAL+ SASL o login validuser wrongpass o NO [UNAVAILABLE] Temporary authentication failure. o login non-existant anypass * OK Waiting for authentication process to respond.. Here is output of dovecot -n # OS: Linux 2.6.32-71.el6.x86_64 x86_64 CentOS Linux release 6.0 (Final) auth_debug = yes auth_verbose = yes base_dir = /var/run/dovecot disable_plaintext_auth = no first_valid_gid = 100 last_valid_gid = 65000 last_valid_uid = 65000 listen = * log_path = /var/log/dovecot mail_debug = yes mail_location = maildir:~/Maildir passdb { args =/opt/qmail/smtp/bin/auth_dovecot ./Maildir/ driver = checkpassword } plugin { mechanisms = plain login quota = maildir } protocols = imap pop3 service imap-login { inet_listener imaps { port = 993 ssl = yes } process_min_avail = 1 } service imap-postlogin { executable = script-login /opt/qmail/scripts/dovecotpostlogin.sh } service imap { executable = imap imap-postlogin } service pop3-login { inet_listener pop3s { port = 995 ssl = yes } process_min_avail = 1 } ssl_cert = </etc/ssl/certs/mail.pem ssl_cipher_list = ALL ssl_key = </etc/ssl/private/mail.pem userdb { driver = prefetch } verbose_proctitle = yes verbose_ssl = yes protocol imap { mail_plugins = quota ssl_cert = </etc/ssl/certs/mail.pem ssl_key = </etc/ssl/private/mail.pem } protocol pop3 { mail_plugins = quota ssl_cert = </etc/ssl/certs/mail.pem ssl_key = </etc/ssl/private/mail.pem }

2 2

[Dovecot] outlook 2007 very slow.
by Kui Zhang 29 Sep '11

29 Sep '11

Hello I have a user with 2500+ sub folders. Total mailboxes size is around 6G. (mdbox, dovecot 2:2.0.14) Syncing/Receiving appears to be slow, with outlook 2007. He does not want to switch to an alternative, due to various reasons. I did not find any error logs indicate issues. during idle, imap process appears to loop at adding inotify watches to all folders. I found outlook-idle in wiki, but it is obsolete. doveconf: Warning: Obsolete setting in /etc/dovecot/conf.d/20-imap.conf:55: imap_client_workarounds=outlook-idle is no longer necessary Any one else having similar issue? Anything else I should do to narrow down the issue? Thanks KuiZ

8 16

[Dovecot] Messages not deleted from mbox
by venom00 29 Sep '11

29 Sep '11

Hello, I've two accounts on my mail server, and from my client (Evolution) I've set up two configurations. If I dowload mail one account at a time everything works fine, but if I download both of them at the same time I'm not able to delete downloaded messages, so I download them twice, three times and counting to infinity. On th client side everything looks good: ----------------------------------------------------- LIST +OK 1 messages: 1 485 . UIDL +OK 1 000000704e57eebd . RETR 1 +OK 485 octets Message here... . DELE 1 +OK Marked to be deleted. QUIT +OK Logging out, messages deleted. ----------------------------------------------------- On the server side I've enabled debug logging but nothing relevant comes up, except sometimes an error: Panic: Message unexpectedly expunged from index Full log: http://pastebin.com/raw.php?i=bBizx9tm But most of the times there are no errors and simply the message is not deleted. I'm using mbox format in /var/spool/mail/%u. The dovecot user has read-write access to the folder (even because, as I said, if download an account at once everything works fine). I think it's about locking, I've tried several lock methods but always the same result and I can't see dead locks from lsof, fuser or ls (for dotlocks). Thanks in advance, venom00

1 0

[Dovecot] Dovecot and NTLM problem
by Pavel Obr 28 Sep '11

28 Sep '11

Hallo, i am trying setup dovecot 2.0.9 with NTLM. I tested succesfully winbind with winbind -k, ntlm-auth with ntlm_auth --username=pavel. But I cannot authenticate in Dovecot. My log show these lines: Sep 28 22:16:25 srv-pat dovecot: auth: Debug: auth client connected (pid=6002) Sep 28 22:16:25 srv-pat dovecot: auth: Debug: client in: AUTH#0111#011NTLM#011service=imap#011lip=192.168.7.67#011rip=192.168.100.141#011lport=143#011rport=5109 Sep 28 22:16:25 srv-pat dovecot: auth: Debug: client out: CONT#0111#011 Sep 28 22:16:25 srv-pat dovecot: auth: Fatal: execv(/usr/bin/ntlm_auth) failed: Permission denied Sep 28 22:16:25 srv-pat dovecot: auth: Error: winbind: ntlm_auth exited with exit code 84 Sep 28 22:16:25 srv-pat dovecot: auth: Debug: client in: CONT#0111#011TlRMTVNTUAABAAAAB4IIAAAAAAAAAAAAAAAAAAAAAAA= Sep 28 22:16:25 srv-pat dovecot: auth: Error: winbind(?,192.168.100.141): write(out_pipe) failed: Broken pipe Sep 28 22:16:27 srv-pat dovecot: auth: Debug: client out: FAIL#0111 Do you know what that is mean "Fatal: execv(/usr/bin/ntlm_auth) failed: Permission denied" ? What is exit code 84 - "Error: winbind: ntlm_auth exited with exit code 84"? My dovecot -n: # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-131.12.1.el6.x86_64 x86_64 Scientific Linux release 6.1 (Carbon) auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain ntlm login auth_use_winbind = yes auth_username_format = %n mail_home = /data/vmail/%d/%n mail_location = mdbox:~/mail mbox_write_locks = fcntl passdb { driver = pam } protocols = pop3 imap lmtp ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = uid=501 gid=501 home=/data/vmail/%d/%n allow_all_users=yes driver = static } Thank you, Pavel

1 0

[Dovecot] deliver LDA issue with setuid-root
by Daminto Lie 28 Sep '11

28 Sep '11

Hi, I am getting the following error message when trying to implement LDA Dovecot 1.2.9 with virtual users: Sep 28 15:59:33 server1 postfix/pipe[3041]: 28BEC2400A1: to=<msmith(a)example.com>, relay=dovecot, delay=2361, delays=2361/0.01/0/0.03, dsn=4.3.0, status=deferred (temporary failure. Command output: /usr/lib/dovecot/deliver must not be both world-executable and setuid-root. This allows root exploits. See http://wiki.dovecot.org/LDA#multipleuids ) I do not know if I need to change the group to secmail. Currently, I have as follows -rwsr-xr-x 1 root root 933796 2011-06-10 05:36 deliver Can I change it to any other group apart from secmail? and what does it mean by world-executable? Sorry if I ask a silly question here but keen to learn more about linux. Here is my dovecot.conf log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap listen: *:143 ssl: no disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login verbose_proctitle: yes first_valid_uid: 106 last_valid_uid: 200 mail_privileged_group: mail mail_location: maildir:/home/vmail/%u/Maildir mbox_write_locks: fcntl dotlock mail_plugins: quota imap_quota imap_client_workarounds: outlook-idle delay-newmail netscape-eoh tb-extra-mailbox-sep lda: postmaster_address: postmaster(a)example.com mail_plugins: quota sendmail_path: /usr/lib/sendmail rejection_reason: Your message to <%t> was automatically rejected:%n%r auth default: mechanisms: plain login username_format: %Lu verbose: yes debug: yes debug_passwords: yes passdb: driver: pam passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf userdb: driver: prefetch userdb: driver: passwd userdb: driver: static args: uid=106 gid=1010 home=/home/vmail/%u socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: mail master: path: /var/run/dovecot-auth-master mode: 432 user: vmail group: vmail plugin: quota: maildir quota_rule: *:storage=3GB quota_rule2: Trash:storage=20%% quota_rule3: Spam:storage=10%% quota_warning: storage=95%% /usr/local/bin/quota-warning.sh 95 quota_warning2: storage=80%% /usr/local/bin/quota-warning.sh 80 Here is my master.cf # delivery through dovecot dovecot unix - n n - - pipe flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/deliver -f ${sender} -d ${recipient} Any help would be greatly appreciated. Thank you

2 1

[Dovecot] Dsync Removing Subscriptions Entries
by Asai 28 Sep '11

28 Sep '11

Greetings, In learning to get Dsync to work, I see a lot of this type of warning in the logs: dsync-remote(user(a)domain.org): Warning: Subscriptions file /vmail/domain/user/subscriptions: Removing invalid entry: INBOX/SOME folder When I ran a test this morning on the backed up emails on the remote server with Thunderbird, I did indeed see that many of the subscribed folders were not present in TB, although the directories and data were indeed present on the remote server. The subscriptions file on the remote server had the omissions which Dsync warned about. These maildir folders seem to work fine on the main server. Can someone help me to understand how to make the sync without omissions in the subscriptions file? -- *Asai* Global Change Multi-Media Internet Application Development IT and Networking Services 520-398-2542

1 0

[Dovecot] Controling users access ?
by Frank Bonnet 28 Sep '11

28 Sep '11

Hello We are going to split our mailhub in two :-) one for students and one for the others Does Dovecot 2 provide some mechanisms to filter users's' login ? a flat file would be enough for my usage ( I use pam_ldap nss_ldap with nsswitch ) thanks

1 0

[Dovecot] 2.0.14 IPC client_limit reached error
by Tom Pawlowski 28 Sep '11

28 Sep '11

Hi Timo, Upgraded to 2.0.14 last night for the director-related features and I noticed an oddity in the logs: Sep 28 09:53:21 director2 dovecot: master: Warning: service(ipc): client_limit reached, client connections are being dropped Sep 28 09:53:56 director1 dovecot: master: Warning: service(ipc): client_limit reached, client connections are being dropped Sep 28 09:54:23 director2 dovecot: master: Warning: service(ipc): client_limit reached, client connections are being dropped Sep 28 09:55:07 director1 dovecot: master: Warning: service(ipc): client_limit reached, client connections are being dropped Sep 28 09:55:24 director2 dovecot: master: Warning: service(ipc): client_limit reached, client connections are being dropped Sep 28 09:56:08 director1 dovecot: master: Warning: service(ipc): client_limit reached, client connections are being dropped Sep 28 09:56:25 director2 dovecot: master: Warning: service(ipc): client_limit reached, client connections are being dropped Sep 28 09:57:10 director1 dovecot: master: Warning: service(ipc): client_limit reached, client connections are being dropped Sep 28 09:57:26 director2 dovecot: master: Warning: service(ipc): client_limit reached, client connections are being dropped These warnings are only being printed out by the directors. Both the directors and imap/pop3 servers have init scripts with the following ulimits set in the start sections: ulimit -s unlimited ulimit -n 30000 ulimit -u 30000 (We'd get alerts long before resource consumption became an issue) I've been watching the established imap/pop3 connection count on both directors for the past hour and a half and despite these warnings, those counts have grown continuously. The other weird thing is, according the configuration (attached), the ipc service has a client_limit of 0 by default, so we shouldn't be hitting a ceiling anyway, correct? So are these false warnings or something to be concerned about? -- Tom Pawlowski OIT-CSS System Administrator office: Hill 147 email: tompru(a)jla.rutgers.edu phone: (732) 445-2634

1 0

[Dovecot] Problems running Dovecot 1.2.17 on AIX
by ra＠rz.uni-frankfurt.de 28 Sep '11

28 Sep '11

Hello, we have a problem getting Dovecot 1.2.17 to work on one of our AIX-Machines (AIX 5.3). Dovecot compiles fine, but if we try to run it we get strange library dependency problems such as the following: [root@localhost dovecot-test]# /local/dovecot-test/sbin/dovecot -F -c /local/dovecot-test/etc/dovecot.clients.conf Edlopen(/local/dovecot-test/lib/dovecot/imap/lib01_acl_plugin.so) failed: rtld: 0712-001 Symbol bsearch_strcmp was referenced from module /local/dovecot-test/lib/dovecot/imap/lib01_acl_plugin.so(), but a runtime definition of the symbol was not found. rtld: 0712-001 Symbol safe_mkstemp_group was referenced from module /local/dovecot-test/lib/dovecot/imap/lib01_acl_plugin.so(), but a runtime definition of the symbol was not found. rtld: 0712-001 Symbol mail_user_module_register was referenced from module /local/dovecot-test/lib/dovecot/imap/lib01_acl_plugin.so(), but a runtime definition of the symbol was not found. rtld: 0712-001 Symbol dict_iterate_init was referenced from module /local/dovecot-test/lib/dovecot/imap/lib01_acl_plugin.so(), but a runtime definition of the symbol was not found. rtld: 0712-001 Symbol dict_iterate was referenced from module /local/dovecot-test/lib/dovecot/imap/lib01_acl_plugin.so(), but a runtime definition of the symbol was not found. rtld: 0712-001 Symbol dict_iterate_deinit was referenced from module /local/dovecot-test/lib/dovecot/imap/lib01_acl_plugin.so(), but a runtime definition of the symbol was not found. rtld: 0712-001 Symbol i_strcmp_p was referenced from module /local/dovecot-test/lib/dovecot/imap/lib01_acl_plugin.so(), but a runtime definition of the symbol was not found. Additional errors occurred but are not reported. FCouldn't load required plugins We tried to use the compiler-script as described on the wiki (http://wiki1.dovecot.org/AixPluginsSupport) and we tried to compile dovecot with gcc instead of xlc. We even tried it on another host running AIX 5.3 but dovecot still fails with the runtime linker complaining about missing runtime definitions. Any hint/help would be appreciated. Thanks in advance Manuel

1 0

[Dovecot] Virtual Folder configuration problem.
by Terry Carmen 28 Sep '11

28 Sep '11

I'm attempting to create a virtual inbox that contains all unread messages from the user's Maildir. I created a conf file called 80-virtual.conf containing: mail_plugins = $mail_plugins virtual namespace { prefix = virtual/ separator = / location = virtual:~/Maildir/virtual } And created the /home/username/Maildir/virtual/unseen/dovecot-virtual file which contains: # ~/Maildir/virtual/unseen/dovecot-virtual * unseen However it doesn't work and the maillog file contains: dovecot: imap(username): Error: user username: Initialization failed: namespace configuration error: inbox=yes namespace missing This is with dovecot 2.0.beta6 (3156315704ef) Does anybody have any suggestions? Thanks! Terry

3 4

[Dovecot] Duplicates when switching from Qpopper to Dovecot pop3
by Tristan Goguen 28 Sep '11

28 Sep '11

Hi All, Our test users re-download the mail they've left on the server when they switch from Qpopper to Dovecot. Qpopper includes the X-UIDL header - X-UIDL: X8V"!E)<"!58?"!"9C"! - on read messages. Any suggestions are appreciated. I've included my dovecot configuration. Thank you, Tristan --- Tristan Tristan Goguen CEO, ILAP® T: 416-250-5600 ext. 205 F: 416-250-6755 tgoguen(a)ilap.com www.ilap.com --- # 2.0.14: /etc/dovecot.conf # OS: SunOS 5.10 sun4v auth_cache_size = 1048575 B auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.+-_@ auth_username_format = %Ln auth_verbose = yes base_dir = /usr/local/var/run/dovecot/ disable_plaintext_auth = no first_valid_uid = 100 log_path = /var/log/dovecot.log login_greeting = mail_access_groups = mail mail_fsync = never mail_location = mbox:~/mail:INBOX=/var/mail/%1u/%1.1u/%u mbox_dotlock_change_timeout = 1 mins mbox_min_index_size = 1 B mbox_read_locks = dotlock mbox_write_locks = dotlock mmap_disable = yes passdb { driver = shadow } protocols = pop3 service pop3-login { client_limit = 10 inet_listener pop3 { address = 216.223.136.7 port = 110 } process_limit = 128 process_min_avail = 5 service_count = 0 vsz_limit = 512 M } shutdown_clients = no ssl = no userdb { args = blocking=yes driver = passwd } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_enable_last = yes pop3_lock_session = yes pop3_reuse_xuidl = yes pop3_save_uidl = yes }

1 1

[Dovecot] Create userdir on dovecot login --- solved
by Andreas Cieslak 27 Sep '11

27 Sep '11

Sorted out the problem, which was already solved in an older forum post of dovecot. In the file /usr/local/etc/dovecot/conf.d/auth-system.conf.ext I set Passdb { Driver = pam args = session=yes dovecot } Unfortunately this didnt work because when I log in with a user xy, the user dovecot became the owner of the userdir. When I modified the file /usr/local/etc/dovecot/conf.d/auth-system.conf.ext like this: Passdb { Driver = pam # args = session=yes dovecot } And gave anyone (for testing) the permission to write to home. That worked! At least put the ldap-users in a group and gave that group writing permissions to home. Finished! -----Ursprüngliche Nachricht----- Von: dovecot-bounces(a)dovecot.org [mailto:dovecot-bounces@dovecot.org] Im Auftrag von Andreas Cieslak Gesendet: Donnerstag, 22. September 2011 15:41 An: dovecot(a)dovecot.org Betreff: [Dovecot] Create userdir on dovecot login Hi List, I am trying to set up automated userdir-creation on login via squirrelmail or email-client with a dovecot backend. The users are first imported on an openldap directory on the same server as the dovecot runs on. Authentication on the dovecot mail system via pam_ldap works properly. Tried already to integrate some advices from the dovecot wiki like Passdb { Driver = pam args = session=yes dovecot } But the homedir creation works only when the user logs onto the machine. When I try to log in via Squirrel on the dovecot no homedir is created and there is following message in the logs: auth: Error: pam(cieslak,193.175.157.121): pam_open_session() failed: Permission denied I think its something about the user rights, but dont really know where to search for the needle Here is the config of my environment root@server:/home# dovecot -n # 2.0.13: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-686 i686 Debian 6.0.2 auth_debug = yes auth_mechanisms = login plain auth_verbose = yes first_valid_uid = 1000 hostname = server info_log_path = /var/log/dovecot-info last_valid_uid = 10000 listen = * log_path = /var/log/dovecot mail_access_groups = mail mail_debug = yes mail_full_filesystem_access = yes mail_location = maildir:~/Maildir mbox_write_locks = fcntl passdb { args = session=yes dovecot driver = pam } postmaster_address = mailaddress service auth-worker { group = shadow user = $default_internal_user } service auth { user = $default_internal_user } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } process_min_avail = 0 service_count = 0 vsz_limit = 256 M } service lmtp { unix_listener lmtp { mode = 0666 } } service pop3-login { inet_listener pop3s { port = 995 ssl = yes } } ssl_ca = </usr/local/etc/dovecot/ca ssl_cert = </usr/local/etc/dovecot/crt ssl_key = </usr/local/etc/dovecot/key userdb { driver = passwd } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } dovecot --version 2.0.13 The configuration of the pam module /etc/pam.d/dovecot looks like @include common-auth @include common-account @include common-session The common session has the line session required pam_mkhomedir.so skel=/etc/skel umask=0077 I would appreciate any hints. Andreas

1 0

[Dovecot] deliver agent and index/control files
by Nerijus Kislauskas 27 Sep '11

27 Sep '11

Hi Timo and others, We use Dovecot in Kaunas University of Technology in Lithuania. For now our LDA is Postfix and POP/IMAP server is Dovecot. We would like to implement dovecot deliver as LDA. Everything is ok exept one small thing: deliver is creating dovecot.index.log in wrong place In dovecot config files we have: ... mail_location = maildir:/var/mail/%Ln:INDEX=/var/indexes/%Ln:CONTROL=/var/indexes/%Ln ... As you can see, mail and index/control files are in different partitions. and deliver log: deliver(nerijus.kislauskas(a)ktu.lt): maildir: data=/var/mail/nerkisl deliver(nerijus.kislauskas(a)ktu.lt): maildir++: root=/var/mail/nerkisl, index=, control=, inbox=/var/mail/nerkisl That is why dovecot.index.log is created in /var/mail/nerkisl, and not in /var/indexes/nerkisl. How can we fix this? -- Sincerely, Nerijus Kislauskas KTU ITPI, LitNET NOC Studentu g. 48a - 101, Kaunas tel.: (8~37) 30 06 45 mob. tel.: 8-614-93889 e-mail.: nerijus.kislauskas(a)ktu.lt

1 1

[Dovecot] Subscription File
by Carlos Mennens 26 Sep '11

26 Sep '11

I had a use lose 20 folders on their mail account. I was able to pull them back from a restore and dumped them all back on the server in her Maildir. The problem is she doesn't see them on her Thunderbird or Outlook client. I checked to make sure I put them back into the correct directory and I did as well as verify permissions aren't weird. I then noticed a file called 'subscriptions' in her Maildir directory. She appears to only be seeing folders that are listed in this 'subscriptions' file. My question is how do I update this file? If I delete it, will Dovecot re-generate the file with the correct subscription entries? I don't understand what to do but I'm hoping I don't have to edit the file by hand...that seems way too cumbersome.

3 6

[Dovecot] how to disable quota for second namespace?
by Udo Lembke 26 Sep '11

26 Sep '11

Hi all, I have a second namespace as archive, where no quota should be active (work with type = shared). But if I change the type to private the quota will allways count. My dovecot version is the 2.0.13. I have tried things like this: plugin { quota_rule = *:storage=500M quota_rule2 = Trash:storage=+100M quota_rule3 = Sent:storage=+50M quota_rule4 = ns=archiv/%u/:ignore } It's also doesn't work with "quota_rule4 = archiv/%u/:ignore" The namespace: namespace { type = private separator = / prefix = "archiv/%u/" location = maildir:/var/data/archiv/%d/%n:INDEX=/var/data/indexes/archiv/%u:LAYOUT=fs inbox = no hidden = no subscriptions = no list = yes } Even if I define the namespace for quota I see the quota-value also in the "root": plugin { quota = maildir:User quota quota2 = maildir:Archiv quota:ns=archiv/%u/ } doveadm quota get -u test(a)example.com Quota name Type Value Limit % User quota STORAGE 1587135 512000 309 User quota MESSAGE 13346 - 0 Archiv quota STORAGE 1359379 - 0 Archiv quota MESSAGE 10577 - 0 du -ks /var/data/mail/example.com/test 234364 /var/data/mail/example.com/test du -ks /var/data/archiv/example.com/test 1383792 /var/data/archiv/example.com/test Now is the big question, how can I reach such an output? doveadm quota get -u test(a)example.com Quota name Type Value Limit % User quota STORAGE 227756 512000 44 User quota MESSAGE 2769 - 0 Archiv quota STORAGE 1359379 - 0 Archiv quota MESSAGE 10577 - 0 I can't believe that's only possible with a shared namespace, or? Any hints are welcome. Best regards Udo

1 1

[Dovecot] "doveadm log reopen" don't reopen seperate lmtp log
by Henrik Larsson 25 Sep '11

25 Sep '11

Dear all I have setup separate pop3/imap log "/var/log/dovecot" and lmtp delivery log "/var/log/dovecot-deliver". After rotating logfiles, i run "doveadm log reopen". I see that my pop3/imap log "/var/log/dovecot" is used straight away, but my lmpt log "/var/log/dovecot-deliver" isn't used at first. After some time, usually a few minutes, logs are being written to this file anyway. But if I compare this to my maillog, it misses some deliveries just after the log rotation. Is there any problems with this configuration that should be corrected? --cut-- # doveconf -n # 2.0.15: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 8.2-STABLE amd64 auth_mechanisms = plain login digest-md5 cram-md5 first_valid_uid = 125 hostname = mail.larsson.it listen = * log_path = /var/log/dovecot mail_plugins = fts fts_squat zlib mail_privileged_group = postfix mail_temp_dir = /var/db/dovecot managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date namespace { inbox = yes location = prefix = separator = . type = private } namespace { hidden = yes inbox = no list = no location = prefix = INBOX. separator = . type = private } passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { fts = squat fts_squat = partial=4 full=10 sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap pop3 lmtp sieve service auth-worker { user = $default_internal_user } service auth { unix_listener /home/mail/postfix/private/auth { group = postfix mode = 0666 user = postfix } } service lmtp { executable = lmtp -L unix_listener /home/mail/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } ssl_cert = </etc/ssl/mail-chained.crt ssl_key = </etc/ssl/mail.key userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lmtp { log_path = /var/log/dovecot-deliver mail_plugins = fts fts_squat zlib sieve } protocol lda { mail_plugins = fts fts_squat zlib sieve } protocol imap { mail_plugins = fts fts_squat zlib imap_zlib } --cut-- Best regards Henrik Larsson

1 0

[Dovecot] dsync doubts
by Piotr NetExpert 24 Sep '11

24 Sep '11

Hi everyone, I want to backup mailboxes to another server. A usage information for dsync says "... <remote dsync command>". Does it mean I need dsync installed on the other server too? Now when I try to run dsync I receive: # dsync -v -D -u abc backup ssh user(a)other.server dsync(username): Debug: Effective uid=123, gid=123, home=/path/abc dsync(username): Debug: maildir++: root=/path/abc, index=, control=, inbox=/path/abc dsync-local(abc): Debug: Namespace : Using permissions from /path/abc: mode=0700 gid=-1 Password: server: not found dsync-local(abc): Error: read() from worker server failed: EOF What could be wrong? How can I check what it wants to do and cannot? I cannot find more information I need in a wiki page of dsync. -- pozdrawiam Piotr Szafarczyk http://www.netexpert.pl

3 3

[Dovecot] tiny doc bug report
by Jeff Rogers 23 Sep '11

23 Sep '11

First timer, I'm installing dovecot-2.0.15. I ran configure; make; sudo make install The INSTALL file then says: --- Rename configuration file: mv /usr/local/etc/dovecot-example.conf /usr/local/etc/dovecot.conf Read through, and make needed modifications. --- The example configuration file is not installed in that location. Presumably it is now installed as /usr/local/share/doc/dovecot/example-config/dovecot.conf Unless this path difference is a quirk of my local system, the INSTALL directions should be fixed to avoid confusion. Thanks, -J

1 0

[Dovecot] Using Dsync for Incremental Sync
by Asai 23 Sep '11

23 Sep '11

Greetings, We have about 26 GB of email which we're trying to sync nightly to a remote server, but what I just read from a post from Timo awhile back is that it's not possible because dsync relies on message GUIDs which aren't available in the IMAP protocol. It seems that this is still the case, is there anything on the horizon for this to change? -- *Asai* Global Change Multi-Media Internet Application Development IT and Networking Services 520-398-2542

2 3

[Dovecot] How to port this dovecot-1.x configuration file to dovecot-2.x
by forumer＠smartmobili.com 23 Sep '11

23 Sep '11

Hi, I am trying to move from dovecot-1.x to dovecot 2.1 but I have this error : Sep 23 16:04:13 lda: Error: userdb lookup: connect(/var/run/dovecot/auth-master) failed: Permission denied (euid=5000(vmail) egid=5000(vmail) missing +r perm: /var/run/dovecot/auth-master, dir owned by 0:0 mode=0755) and I dont' manage to find information about how to translate this old configuration part: socket listen { master { # Master socket provides access to userdb information. It's typically # used to give Dovecot's local delivery agent access to userdb so it # can find mailbox locations. path = /var/run/dovecot/auth-master mode = 0600 # Default user/group is the one who started dovecot-auth (root) user = vmail #group = } client { # The client socket is generally safe to export to everyone. Typical use # is to export it to your SMTP server so it can do SMTP AUTH lookups # using it. path = /var/run/dovecot/auth-client mode = 0660 } Thanks

2 1

[Dovecot] (2.1 recent:) fts_decoder
by Lutz Preßler 23 Sep '11

23 Sep '11

Hello again, test setup as in previous messages. With fts = lucene, I enabled the adapted decode2text.sh (at least I tried...) as suggested in the comment section. On dovecot-start /var/run/dovecot/decode2text socket is created with sufficiant permissions (rw for anybody), but decode2text.sh is not started (it's rx for anybody). When creating lucene indexes, I cannot see it executed either (and no attachment-only content is findable afterwards). No errors with mail_debug - if I change fts_decoder to a nonexistant value, that's logged. Lutz

2 1

[Dovecot] 64.31.19.48 attempt to break into my computer
by Rick Baartman 23 Sep '11

23 Sep '11

>From my secure log: Sep 19 01:16:44 lin12 dovecot-auth: pam_unix(dovecot:auth): check pass; user unknown Sep 19 01:16:44 lin12 dovecot-auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser= rhost=::ffff:64.31.19.48 Sep 19 01:16:44 lin12 dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user aaron Sep 19 01:16:45 lin12 dovecot-auth: pam_unix(dovecot:auth): check pass; user unknown Sep 19 01:16:45 lin12 dovecot-auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser= rhost=::ffff:64.31.19.48 Sep 19 01:16:45 lin12 dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user abby etc. Literally, 30,000 user names attempted. -- rick baartman TRIUMF 4004 Wesbrook Mall Vancouver, BC V6T2A3

10 17

Re: [Dovecot] 64.31.19.48 attempt to break into my computer
by Alex 23 Sep '11

23 Sep '11

It is a great tool. Unfortunately dovecot allows infinate incorrect logins during a single session. When fail2ban has firewalled the ip its pointless as the rule only affects new sessions, not established ones. I am disappointed that the author of dovecot has no interest in adding a feature that closes the session after x auth failures. It would certainly make tools like fail2ban more effective. ----- Reply message ----- From: "John Alexander" <john.alexander(a)preachain.org> Date: Fri, Sep 23, 2011 00:13 Subject: [Dovecot] 64.31.19.48 attempt to break into my computer To: <dovecot(a)dovecot.org> Fail2Ban is an excellent tool to deal with this sort of thing. On Mon, 19 Sep 2011 10:05:47 -0700, Rick Baartman wrote > >From my secure log: > > Sep 19 01:16:44 lin12 dovecot-auth: pam_unix(dovecot:auth): check > pass; user unknown > Sep 19 01:16:44 lin12 dovecot-auth: pam_unix(dovecot:auth): > authentication failure; logname= uid=0 euid=0 tty=dovecot ruser= > rhost=::ffff:64.31.19.48 > Sep 19 01:16:44 lin12 dovecot-auth: pam_succeed_if(dovecot:auth): > error retrieving information about user aaron

3 2

[Dovecot] Dovecot 1.x vs 2.x
by Lee Standen 22 Sep '11

22 Sep '11

Hi All, I'm currently in the planning stages for a technology refresh for a very large mail installation, and looking at using Dovecot with LDA/Sieve/FTS_Solr and a number of other plugins to give our users some great features. Currently, our standard distribution is Ubuntu Lucid, which has Dovecot 1.x included with it in pre-built packages, and Dovecot 2.x is in the upcoming Oneiric beta coming out next month. My question is, are there any compelling reasons why we should gravitate towards running Dovecot 2.x beyond the fact it's the "latest and greatest" version? What features would we miss that we're likely to want or need on a very large installation (i'm talking dozens of VM's, over 1 million mailboxes). Thanks

1 0

[Dovecot] Dovecot 1.2, problem with SQL quota and mail aliases
by Jacek Osiecki 22 Sep '11

22 Sep '11

Hello, I have a small server running dovecot 1.2 (still not balsy enough to switch to 2.0 - virtual sql accounts, managesieve etc.). There are no local users - only ones defined in the SQL database, and everything else (including quota) is defined in SQL db too. Dovecot is used as IMAP daemon, and dovecot-lda is responsible for delivery (in order to make use of sieve and managesieve). I know that my configuration might be a bit ancient, but this is not referring to any bug (at least I think so) and rather to errors I've made in configuration. Several users have reported, that they are running out of quota even though their mailboxes are empty. I thought these were some single cases, but recently I discovered that this situation occurs when: - user john(a)domain.com has a mail alias, eg. john.smith(a)domain.com - he logs in to the imap account (using MUA or webmail) using his alias (john.smith(a)domain.com) In effect, all incoming emails for john(a)domain.com are increasing the counters (both "bytes" and "messages"), but since user logs in using john.smith(a)domain.com - anything he deletes from the mailbox decreases the records for john.smith(a)domain.com. Finally, John has two records: +---------------------------+-----------+----------+ | username | bytes | messages | +---------------------------+-----------+----------+ | john.smith(a)domain.com | -5488133 | -13 | | john(a)domain.com | 341411029 | 1111 | +---------------------------+-----------+----------+ The record for john(a)domain.com finaly reaches the quota limit - and even removing all emails does not help. My /etc/dovecot/dovecot-dict-quota.conf looks like this: map { pattern = priv/quota/storage table = quota username_field = username value_field = bytes } map { pattern = priv/quota/messages table = quota username_field = username value_field = messages } And my question is: what is used as "username"? Always the username given wher user logs in? Is there a way to provide some dictionary to translate all aliases to the real username? Best regards, -- Jacek Osiecki joshua(a)ceti.pl GG:3828944 I don't want something I need. I want something I want.

3 4

[Dovecot] Shared Namespace
by Tom Clark 22 Sep '11

22 Sep '11

Is there anyway of limiting a shared namespace to a domain? E.g. mailbox.com and mailbox2.com are setup with vpopmail. We've got a shared namespace but only want the ability on mailbox.com. Thanks, Tom

2 4

[Dovecot] Trouble getting lda to gzip incomming mails (zlib plugin)
by Helge Milde 22 Sep '11

22 Sep '11

Hi! I've followed the guide at http://wiki2.dovecot.org/Plugins/Zlib to try to make Dovecot gzip incomming mails, but it doesn't seem to work. I've made pop/imap read gzipped files, and this seems to work perfectly, but LDA is still saving incomming mails in plain text. There's not too much information out there regarding the zlib module, so I'm not sure where to start debugging the problem, and was hoping someone could point me in the right direction. The only mention of zlib when LDA is delivering a file: Sep 20 15:51:19 mail dovecot: deliver(helgemil): Module loaded: /usr/lib/dovecot/modules/lda/lib20_zlib_plugin.so The most relevant lines from dovecot.conf: mail_debug = yes protocols = imap pop3 imaps pop3s mail_location = maildir:~/Maildir mail_privileged_group = mail max_mail_processes = 1024 mail_process_size = 512 protocol imap { mail_max_userip_connections = 50 mail_plugins = fts fts_squat zlib } protocol pop3 { pop3_uidl_format = %08Xu%08Xv mail_max_userip_connections = 50 mail_plugins = zlib } protocol lda { postmaster_address = postmaster(a)monsternett.no mail_plugins = sieve zlib mail_plugin_dir = /usr/lib/dovecot/modules/lda sieve_global_dir = /etc/dovecot/sieve/ sieve_global_path = /etc/dovecot/sieve/default.sieve } plugin { zlib_save_level = 6 zlib_save = gz fts = squat sieve = ~/dovecot.sieve sieve_dir = ~/ } -- Helge Milde, 69701808 www.monsternett.no

3 5

[Dovecot] Create userdir on dovecot login
by Andreas Cieslak 22 Sep '11

22 Sep '11

Hi List, I am trying to set up automated userdir-creation on login via squirrelmail or email-client with a dovecot backend. The users are first imported on an openldap directory on the same server as the dovecot runs on. Authentication on the dovecot mail system via pam_ldap works properly. Tried already to integrate some advices from the dovecot wiki like Passdb { Driver = pam args = session=yes dovecot } But the homedir creation works only when the user logs onto the machine. When I try to log in via Squirrel on the dovecot no homedir is created and there is following message in the logs: auth: Error: pam(cieslak,193.175.157.121): pam_open_session() failed: Permission denied I think its something about the user rights, but dont really know where to search for the needle Here is the config of my environment root@server:/home# dovecot -n # 2.0.13: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-686 i686 Debian 6.0.2 auth_debug = yes auth_mechanisms = login plain auth_verbose = yes first_valid_uid = 1000 hostname = server info_log_path = /var/log/dovecot-info last_valid_uid = 10000 listen = * log_path = /var/log/dovecot mail_access_groups = mail mail_debug = yes mail_full_filesystem_access = yes mail_location = maildir:~/Maildir mbox_write_locks = fcntl passdb { args = session=yes dovecot driver = pam } postmaster_address = mailaddress service auth-worker { group = shadow user = $default_internal_user } service auth { user = $default_internal_user } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } process_min_avail = 0 service_count = 0 vsz_limit = 256 M } service lmtp { unix_listener lmtp { mode = 0666 } } service pop3-login { inet_listener pop3s { port = 995 ssl = yes } } ssl_ca = </usr/local/etc/dovecot/ca ssl_cert = </usr/local/etc/dovecot/crt ssl_key = </usr/local/etc/dovecot/key userdb { driver = passwd } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } dovecot --version 2.0.13 The configuration of the pam module /etc/pam.d/dovecot looks like @include common-auth @include common-account @include common-session The common-session has the line session required pam_mkhomedir.so skel=/etc/skel umask=0077 I would appreciate any hints. Andreas

1 0

Re: [Dovecot] IMAP delete logs
by James isolder 22 Sep '11

22 Sep '11

Since enabling the mail_plugins = mail_log. I now get an error. Is there anything else I need to check adn how I can put the dovecot into debug mode so I can get more info about where it is failing. dovecot not running? (check /var/run/dovecot//master.pid). Starting dovecot. Error: imap dump-capability process returned 1 Fkevent(EV_ADD, 0) failed: Operation not supported by device Fatal: Invalid configuration in /usr/local/etc/dovecot.conf # 1.2.17: /usr/local/etc/dovecot.conf # OS: FreeBSD 7.0-RELEASE i386 base_dir: /var/run/dovecot/ protocols: imap pop3 listen(default): *:1143 listen(imap): *:1143 listen(pop3): *:1110 ssl: no disable_plaintext_auth: no login_dir: /var/run/dovecot//login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login login_log_format_elements: pid=%p rsock=%r:%b lsock=%l:%a proto=%s user=%u auth_method=%m secure=%c login_log_format: role=proxy realm=test %$: %s login_process_per_connection: no login_processes_count: 50 login_max_processes_count: 5120 login_max_connections: 512 max_mail_processes: 6144 mail_max_userip_connections(imap): 8 mail_max_userip_connections(pop3): 10 verbose_proctitle: yes first_valid_uid: 1000 first_valid_gid: 1000 mail_privileged_group: mail mail_location: mbox:~/mail/:INBOX=/var/mail/%u mail_debug: yes maildir_copy_preserve_filename: yes mail_executable(default): /usr/local/libexec/dovecot/rawlog /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/rawlog /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/rawlog /usr/local/libexec/dovecot/pop3 mail_plugins(default): mail_log mail_plugins(imap): mail_log mail_plugins(pop3): mail_plugin_dir: /usr/local/lib/dovecot/pop3 mail_log_max_lines_per_sec: 0 pop3_enable_last(default): yes pop3_enable_last(imap): yes pop3_enable_last(pop3): no pop3_client_workarounds(default): outlook-no-nuls oe-ns-eoh pop3_client_workarounds(imap): outlook-no-nuls oe-ns-eoh pop3_client_workarounds(pop3): auth default: mechanisms: plain login cache_ttl: 0 cache_negative_ttl: 0 worker_max_count: 60 process_size: 512 passdb: driver: sql args: /usr/local/etc/dovecot-proxy.sql socket: type: listen client: path: /var/run/dovecot/auth-client mode: 432 master: path: /var/run/dovecot/auth-master mode: 384 plugin: mail_log_events: delete undelete expunge copy mailbox_delete mailbox_rename On Wed, 14 Sep 2011 14:40:21 +0200 "mailing(a)securitylabs.it" <mailing(a)securitylabs.it> wrote > Il 14/09/2011 07:48, James isolder ha scritto: > > Version - 1.2.17 > > > > Is there a way to include message or folder deletion logs in the dovecot > > log > > files. > > > > > > Yes, you can use the mail logger plugin: > > http://wiki.dovecot.org/Plugins/MailLog ____________________________________________________________ South Africas premier free email service - www.webmail.co.za For super low premiums, click here. http://www.dialdirect.co.za/?vdn=15828

2 1

[Dovecot] Create userdir on dovecot login
by Andreas Cieslak 22 Sep '11

22 Sep '11

Hi List, I am trying to set up automated userdir-creation on login via squirrelmail or email-client with a dovecot backend. The users are first imported on an openldap directory on the same server as the dovecot runs on. Authentication on the dovecot mail system via pam_ldap works properly. Tried already to integrate some advices from the dovecot wiki like Passdb { Driver = pam args = session=yes dovecot } But the homedir creation works only when the user logs onto the machine. When I try to log in via Squirrel on the dovecot no homedir is created and there is following message in the logs: auth: Error: pam(cieslak,193.175.157.121): pam_open_session() failed: Permission denied I think its something about the user rights, but dont really know where to search for the needle Here is the config of my environment root@server:/home# dovecot -n # 2.0.13: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-686 i686 Debian 6.0.2 auth_debug = yes auth_mechanisms = login plain auth_verbose = yes first_valid_uid = 1000 hostname = server info_log_path = /var/log/dovecot-info last_valid_uid = 10000 listen = * log_path = /var/log/dovecot mail_access_groups = mail mail_debug = yes mail_full_filesystem_access = yes mail_location = maildir:~/Maildir mbox_write_locks = fcntl passdb { args = session=yes dovecot driver = pam } postmaster_address = mailaddress service auth-worker { group = shadow user = $default_internal_user } service auth { user = $default_internal_user } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } process_min_avail = 0 service_count = 0 vsz_limit = 256 M } service lmtp { unix_listener lmtp { mode = 0666 } } service pop3-login { inet_listener pop3s { port = 995 ssl = yes } } ssl_ca = </usr/local/etc/dovecot/ca ssl_cert = </usr/local/etc/dovecot/crt ssl_key = </usr/local/etc/dovecot/key userdb { driver = passwd } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } dovecot --version 2.0.13 The configuration of the pam module /etc/pam.d/dovecot looks like @include common-auth @include common-account @include common-session The common session has the line session required pam_mkhomedir.so skel=/etc/skel umask=0077 I would appreciate any hints. Andreas

1 0

[Dovecot] Webmail architecture : questions about cache and storage backend
by forumer＠smartmobili.com 22 Sep '11

22 Sep '11

Hi, I have some questions about dovecot-2.1 and need some advice about software architecture. My company plans to develop a kind of Document Managing System (DMS) and one of its module is a webmail that is currently in a pre-alpha stage (if you are curious you can have a look here http://kairos.smartmobili.com/ but don't be surprised if it doesn't work and please do not use IE for now). From my personal analysis that I am sure is incomplete we have the following options to handle emails storage and cache: 1) Do not use a cache and rely on dovecot performance to retrieve email's header in real time. Actually don't know if it's that simple because we might need to have a transformed version of emails to be able to display them more easily in the webmail. In this case this option is not really possible. 2) Use new dovecot-2.1 imap backend and develop a kind of dummy imap server listening to a custom port and storing emails inside a mongoDB database. Advantage is it allow replication very easily. 3) Wait for dovecot2.x to implement a NoSQL storage. Will it happen soon ? If you have other suggestions or ideas I would be happy to hear them. Vincent R.

2 1

[Dovecot] Restoring mail
by Knute Johnson 22 Sep '11

22 Sep '11

I solved it myself, I forgot about the folders in the /home/user/mail directory. So kindly disregard my panicky message from before. -- Knute Johnson

1 0

[Dovecot] Help restoring imap mail
by Knute Johnson 22 Sep '11

22 Sep '11

My mailserver blew up today with a power hit. I've created a new server and have dovecot running and I want to restore my mail. I have a copy of the file that was in /var/mail. I set the new dovecot config up the same as the old one and copied the mail file over. I can see the INBOX mail but none of the rest of it. I'm running 1.2.15 under Ubuntu server 11.04. I'm using Thunderbird as my client running on XP. Any help would be greatly appreciated. Thanks, -- Knute Johnson

1 0

[Dovecot] global ACL inheritances
by Kui Zhang 22 Sep '11

22 Sep '11

Hello I am trying to prevent people from actively delete lazy expunged messages. ACL in following file does not appears to apply to existing or new mailboxes. dovecot/acls/.EXPUNGED/.DEFAULT owner lripk Am I missing something, or is it due to ACL inheritances support? mail_plugins = acl plugin { ... acl = vfile:/etc/dovecot/acls ... } Thank KuiZ

1 0

[Dovecot] Sieve: Vacation, handle and variable
by René Neumann 21 Sep '11

21 Sep '11

Hi *, I am adding a generic way for vacation-replies in my sieve setup. There I set the handle and the reason using variables (see end of mail). My simple question now is: Though variable expansion is not done for subject and reason, is it done for the handle? Because else there seems no way in configuring the vacation action via variables. I tried to read the code for this extension, but ... well ... the whole sieve implementation is way more complicated then I figured ^^. Thus I take the question to the list. Thanks, René ----- default.sieve ----- require [..., "include", "variables"]; # set this to the text you want to get included in the vacation-mail global ["vacation", "vhandle"]; set "vhandle" ""; set "vacation" ""; [...] include :personal "vacation"; ----- vacation.sieve ----- require ["variables", "include", "vacation"]; # this is set in the including script global ["vacation", "vhandle"]; if string :is "${vacation}" "" { return; } # ensure we have a handle if string :is "${vhandle}" "" { set "vhandle" "${vacation}"; } if header :matches "subject" "*" { set "sbj" "Out of office [was: ${1}]"; vacation :addresses [...] :from "..." :days 7 :handle "${vhandle}" :subject "${sbj}" "${vacation}"; } -------------------------

2 4

[Dovecot] About using Dovecot indexes with Thunderbird/kmail
by Anton Aylward 21 Sep '11

21 Sep '11

I have Dovecot running well on my Mandriva mail hub, handing out IMAP to the household LAN. This is 1.2.15. Eventually I'll upgrade the OS and get 2.x, but this is working fine. So this question is really about the mail readers I use and how they make use of Dovecot. I have Thunderbird on my laptop and KMail2 on my desktop. Dovecot indexes. GOOD! The trouble is that the mail readers want their own indexes :-( I wish that Thunderbird would NOT index mail on my laptop, but it does. I wish Kmail2 would not use nepomuk/akonadi to index the mail but it does. Why can't they both believe the indexes used by Dovecot? Is this an unreasonable request? -- "We stand behind all of our products, except for the manure spreader." -- Corporate motto of an equipment manufacturer

3 6

[Dovecot] Login problem via webmail and outlook
by Ankit Gupta 21 Sep '11

21 Sep '11

Hi Mentors, Please help, our users are not able to login into their mailbox account using either outlook or webmail. Please find logs from /var/log/maillog Jan 17 10:45:40 elct dovecot: imap-login: Aborted login: user=<ismail>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Jan 17 10:49:17 elct dovecot: imap-login: Aborted login: user=<ismail>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Jan 17 11:02:57 elct dovecot: imap-login: Aborted login: user=<ismail>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Jan 17 11:03:03 elct dovecot: imap-login: Aborted login: user=<ismail>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Jan 17 11:10:08 elct dovecot: imap-login: Aborted login: user=<ismail>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Jan 17 11:10:14 elct dovecot: imap-login: Aborted login: user=<ismail>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Please help it is urgent. -- Regards Ankit Gupta, Tel: | M: +91 - 9650594790

2 1

[Dovecot] dovecot-virtual folder configuration
by Pierre 21 Sep '11

21 Sep '11

Hi all, Long story short, I'd like to configure a folder containing: INBOX (some other folders) -> unseen emails from these folders + all other emails (also seen) from the same thread -> seen emails from these folders, but only the recent ones + all other emails from the same thread I tried: # inthread refs (or (or recent unseen) recent ) inthread refs unseen # inthread refs (or unseen ( recent seen) ) # inthread refs recent unseen # inthread refs unseen #inthread refs recent (or unseen ) # inthread refs (recent seen (or unseen )) # (inthread refs (or unseen) recent seen) #( inthread refs (or (or recent unseen) flagged) ) without success. Where could I find proper,understandable doc for this? Could anybody help me on configuring such rule(s) ? Thanks a lot in adavance, Pierre

2 3

[Dovecot] Why can NOT login as root
by jana1972＠centrum.cz 20 Sep '11

20 Sep '11

Hi i use Dovecot and it works ok for users except for root user. It is impossible to login as root Here is a log Sep 10 10:15:44 auth: Debug: Loading modules from directory: /usr/local/lib/dovecot/auth Sep 10 10:15:44 auth: Debug: auth client connected (pid=18077) Sep 10 10:15:44 auth: Debug: client in: AUTH 1 PLAIN service=imap secured lip=212.97.133.82 rip=212.97.133.82 lport=143 rport=34645 resp=<hidden> Sep 10 10:15:44 auth: Debug: Loading modules from directory: /usr/local/lib/dovecot/auth Sep 10 10:15:44 auth: Debug: pam(root,212.97.133.82): lookup service=dovecot Sep 10 10:15:44 auth: Debug: pam(root,212.97.133.82): #1/1 style=1 msg=Password: Sep 10 10:15:44 auth: Debug: client out: OK 1 user=root Sep 10 10:15:44 auth: Debug: master in: REQUEST 2889482241 18077 1 3500554cf70742dfc0515671c7671bbd Sep 10 10:15:44 auth: Debug: passwd(root,212.97.133.82): lookup Sep 10 10:15:44 auth: Debug: master out: USER 2889482241 root system_groups_user=root uid=0 gid=0 home=/root Sep 10 10:15:44 imap-login: Info: Login: user=<root>, method=PLAIN, rip=212.97.133.82, lip=212.97.133.82, mpid=18082, secured Sep 10 10:15:44 imap: Error: user root: Invalid settings in userdb: userdb returned 0 as uid Sep 10 10:15:44 imap: Error: Invalid user settings. Refer to server log for more information. Can anyone help? Thanks LL.

7 8

[Dovecot] 2.1: problems compiling fts-lucene - CLucene git version necessary?
by Lutz Preßler 20 Sep '11

20 Sep '11

Hello! I have problems recompiling the Debian squeeze auto build packages with "--with-lecene". Is the git (2.3) version of CLucene necessary? Debian includes 0.9.21b, which does not work. Lutz

2 4

[Dovecot] Default permissions on newly created maildir
by Alex 20 Sep '11

20 Sep '11

Hi Guys, I am setting up SQL auth for mail. Auth works fine, I notice that if no maildir exists for the authenticated user, it is created automatically (depending on the homedir specified in the sql table entry). The problem is that it creates the dir with "700" permissions which is causing grief for my MTA when it comes time for it to try and drop mail there. If I chmod the dir to 770 things work fine. How do I change the default permissions that dovecot uses whenever it creates a new mail account?

1 0

[Dovecot] ODBC support
by list＠airstreamcomm.net 19 Sep '11

19 Sep '11

I was wondering if ODBC support was on the road map for Dovecot, or if it has ever been discussed? Thanks.

1 0

[Dovecot] Deleted mailboxes with lazy_expunge
by Angel L. Mateo 19 Sep '11

19 Sep '11

Hello, I'm trying to configure lazy_expunge plugin (as a way to provide easy backup for mails). This is my configuration (as explained in dovecot wiki): # Default namespace namespace { prefix = separator = / inbox = yes } # namespaces for lazy_expunge plugin: namespace { prefix = .EXPUNGED/ separator = / location = maildir:~/Maildir/expunged } namespace { prefix = .DELETED/ separator = / location = maildir:~/Maildir/deleted } namespace { prefix = .DELETED/.EXPUNGED/ separator = / location = maildir:~/Maildir/deleted/expunged lazy_expunge = .EXPUNGED/ .DELETED/ .DELETED/.EXPUNGED/ I use just one namespace because I don't want to differentiate between deleting mails or deleting mailboxes, but I have the same problem using the 3 namespaces. With this configuration, when a user connects, if he doesn't have the expunged folder, dovecot logs: Sep 16 10:53:35 myotis30 dovecot: imap(angel.luis): Debug: Namespace : type=private, prefix=.EXPUNGED/, sep=/, inbox=no, hidden=no, list=yes, subscriptions=yes location=maildir:~/Maildir/expunged Sep 16 10:53:35 myotis30 dovecot: imap(angel.luis): Debug: maildir++: root=/home/alumnos/46/113246/Maildir/expunged, index=, control=, inbox= Sep 16 10:53:35 myotis30 dovecot: imap(angel.luis): Debug: Namespace .EXPUNGED/: Permission lookup failed from /home/alumnos/46/113246/Maildir/expunged Sep 16 10:53:35 myotis30 dovecot: imap(angel.luis): Debug: Namespace .EXPUNGED/: Using permissions from /home/alumnos/46/113246/Maildir/expunged: mode=0700 gid=-1 and the expunged folder is created (without the cur, new neither tmp folders). When I delete a message in the INBOX folder (for example), dovecot logs: Sep 16 10:57:19 myotis30 dovecot: imap(angel.luis): Debug: Namespace .EXPUNGED/: Permission lookup failed from /home/alumnos/46/113246/Maildir/expunged/.INBOX Sep 16 10:57:19 myotis30 dovecot: imap(angel.luis): Debug: Namespace .EXPUNGED/: Using permissions from /home/alumnos/46/113246/Maildir/expunged: mode=0700 gid=-1 Sep 16 10:57:19 myotis30 dovecot: imap(angel.luis): Debug: Namespace .EXPUNGED/: Permission lookup failed from /home/alumnos/46/113246/Maildir/expunged/.INBOX Sep 16 10:57:19 myotis30 dovecot: imap(angel.luis): Debug: Namespace .EXPUNGED/: Using permissions from /home/alumnos/46/113246/Maildir/expunged: mode=0700 gid=-1 and the message is stored in the expunge namespace (that is an imap INBOX folder is created in the namespace, with its cur, new and tmp, and the message is stored). But when I try to delete a whole imap folder (in the example I delete it from trash folder because I use thunderbird and it previously move the folder to trash), dovecot logs: Sep 16 11:45:46 myotis30 dovecot: imap(angel.luis): Debug: Namespace .DELETED/: Using permissions from /home/alumnos/46/113246/Maildir/deleted: mode=0700 gid=-1 Sep 16 11:45:46 myotis30 dovecot: imap(angel.luis): Debug: Namespace .DELETED/: Permission lookup failed from /home/alumnos/46/113246/Maildir/deleted/.Trash.kk-20110916-114546 Sep 16 11:45:46 myotis30 dovecot: imap(angel.luis): Debug: Namespace .DELETED/: Using permissions from /home/alumnos/46/113246/Maildir/deleted: mode=0700 gid=-1 Sep 16 11:45:46 myotis30 dovecot: imap(angel.luis): Debug: Namespace .DELETED/: Permission lookup failed from /home/alumnos/46/113246/Maildir/deleted/.Trash.kk-20110916-114546 Sep 16 11:45:46 myotis30 dovecot: imap(angel.luis): Debug: Namespace .DELETED/: Using permissions from /home/alumnos/46/113246/Maildir/deleted: mode=0700 gid=-1 and my mail client reports the error "[CANNOT] Can't rename mailboxes accross specified storages" and the mail folder isn't created in the DELETED namespace. Any idea? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información _o) y las Comunicaciones Aplicadas (ATICA) / \\ http://www.um.es/atica _(___V Tfo: 868887590 Fax: 868888337

2 5

[Dovecot] convert maildrop filter to sieve
by Aleksandar Lazic 19 Sep '11

19 Sep '11

Dear list member, does anybody have a script which can convert maildrop filter to sive filter? BR Aleks

2 2

Re: [Dovecot] v2.0.15 released
by Micah Anderson 19 Sep '11

19 Sep '11

"Simon Brereton" <simon.brereton(a)buongiorno.com> writes: > I'll bite.. But it's probably not your concern. When will we be able > to get stable 2.x packages for Debian? Apt installs 1.2.15-7 2.x packages are available in Debian Wheezy and Sid. A backport to Squeeze (stable) will be made once the 1.x transition packages make it into Wheezy (~10 days from now). micah

1 0

[Dovecot] default_pass_scheme = PLAIN and blank password
by Gary V 18 Sep '11

18 Sep '11

I'm using Dovecot 1.2.15 on Ubuntu, but I think this applies to other versions as well. I store user info and passwords in MySQL. It appears 'default_pass_scheme = PLAIN' allows blank passwords. My question is: Is this a bug or is this by design? If it is by design, is there a setting that I'm not aware of that changes this behavior? Of course let me know if you need additional info on the setup I'm using. Thank you, Gary V

1 0

[Dovecot] v2.1.alpha2 released
by Timo Sirainen 17 Sep '11

17 Sep '11

http://dovecot.org/releases/2.1/alpha/dovecot-2.1.alpha2.tar.gz http://dovecot.org/releases/2.1/alpha/dovecot-2.1.alpha2.tar.gz.sig This is actually looking rather stable. I'm still calling it "alpha" in case I think of doing some more API changes, but I think the next one will be called "beta1", hopefully soon followed by "rc1". - Statistics gathering improvements (more fields) and fixes. - Lots of imapc fixes and improvements - Fixes to handling shared namespaces - Several other fixes

3 4

[Dovecot] Auth protocol and XMPP
by Kim Alvefur 17 Sep '11

17 Sep '11

Hello. I've written an authentication backend for the XMPP server Prosody, which makes it use Dovecots auth socket and protocol, and letting the client use any SASL mechanism Dovecot offers. However, setups using the full user@domain as authnid won't work, due to most XMPP clients assuming that the authnid is the localpart. I want to avoid hardcoding it to PLAIN, or otherwise doing MITM/rewrites if possible. (There exists an older auth backend that does just that already) Ideas? -- Kim Alvefur <zash(a)zash.se>

1 0

[Dovecot] Detecting duplicate messages with sieve
by Aleksandar Lazic 17 Sep '11

17 Sep '11

Dear Listmember, I use http://www.courier-mta.org/reformail.html for "Detecting duplicate messages" ### The -D option implements a simple way to delete duplicate messages in incoming mail. filename is a file that will be approximately 'len' bytes long. This file will be used by reformail to save message IDs seen in recent mail. reformail reads the message on standard input. If the message has a Message-ID: header that's already in the cache file, reformail terminates with the exit code set to 0. Otherwise, reformail terminates with the exit code set to 1. ### ### my entry in mailfilter `reformail -D 8192 $HOME/.msg.cache` if ($RETURNCODE == 0) { /^From: *!.*/ FROM1=${MATCH2} /^Subject: *!.*/ log "$FROM (${FROM1}) => Not Delivered duplicate MSG-ID. Subject ${MATCH2}\n" exit } ### Is there a similar feature in sieve or can I still use the upper setup? Another question is about to add this header line in every mail. xfilter "${REFORMAIL} -a\"Lines: $LINES\"" Thanks for your help. BR Aleks

2 2

[Dovecot] Sieve envelope :detail "to" "extention" does not deliver to fileinto destination
by Aleksandar Lazic 17 Sep '11

17 Sep '11

Dear Listmember. I resend this with different Subject so that the spamfilter does not drop the mail, I hope ;-) I try to migrate from my current courier-mta setup fo postfix dovecot setup. I use the following scirpt to filter to the destination mailbox. ### /var/vmail/none.at/al/.dovecot.sieve # from http://wiki.dovecot.org/LDA/Sieve require ["fileinto", "envelope", "subaddress", "include"]; include "lists.sieve"; if envelope :detail "to" "work" { fileinto "INBOX.work"; } ### ### /var/vmail/none.at/al/sieve/lists.sieve require ["fileinto", "subaddress", "envelope" ]; if envelope :detail "to" "pdnsusers" { fileinto "Lists.pdnsusers"; } ### postfix/master ### dovecot unix - n n - - pipe flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/deliver -f ${sender} -d ${user}@${nexthop} -a ${original_recipient} # flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/deliver -f ${sender} -d ${user}@${nexthop} -m ${extension} -a ${original_recipient} ### Log ### Sep 11 21:47:48 lvps46-163-74-15 postfix/smtpd[7788]: connect from Sep 11 21:48:12 lvps46-163-74-15 postfix/smtpd[7788]: 495EF9FECAF9: Sep 11 21:48:27 lvps46-163-74-15 postfix/cleanup[7795]: 495EF9FECAF9: message-id=<> Sep 11 21:48:27 lvps46-163-74-15 postfix/qmgr[7785]: 495EF9FECAF9: from=<al(a)bitrace.net>, size=268, nrcpt=1 (queue active) Sep 11 21:48:27 lvps46-163-74-15 dovecot: lda: Debug: Loading modules from directory: /usr/lib/dovecot/modules Sep 11 21:48:27 lvps46-163-74-15 dovecot: lda: Debug: Module loaded: /usr/lib/dovecot/modules/lib90_sieve_plugin.so Sep 11 21:48:27 lvps46-163-74-15 dovecot: lda: Debug: auth input: al(a)none.at uid=5000 gid=5000 home=/var/vmail/none.at/al Sep 11 21:48:27 lvps46-163-74-15 dovecot: lda(al(a)none.at): Debug: Effective uid=5000, gid=5000, home=/var/vmail/none.at/al Sep 11 21:48:27 lvps46-163-74-15 dovecot: lda(al(a)none.at): Debug: maildir: root exists (/var/vmail/none.at/al/Maildir) Sep 11 21:48:27 lvps46-163-74-15 dovecot: lda(al(a)none.at): Debug: maildir++: root=/var/vmail/none.at/al/Maildir, index=, control=, inbox=/var/vmail/none.at/al/Maildir, alt= Sep 11 21:48:27 lvps46-163-74-15 dovecot: lda(al(a)none.at): Debug: none: root=, index=, control=, inbox=, alt= Sep 11 21:48:27 lvps46-163-74-15 dovecot: lda(al(a)none.at): Debug: Destination address: al-pdnsuser(a)none.at (source: -a parameter) Sep 11 21:48:27 lvps46-163-74-15 dovecot: lda(al(a)none.at): Debug: sieve: using sieve path for user's script: /var/vmail/none.at/al/.dovecot.sieve Sep 11 21:48:27 lvps46-163-74-15 dovecot: lda(al(a)none.at): Debug: sieve: opening script /var/vmail/none.at/al/.dovecot.sieve Sep 11 21:48:27 lvps46-163-74-15 dovecot: lda(al(a)none.at): Debug: sieve: script binary /var/vmail/none.at/al/.dovecot.svbin successfully loaded Sep 11 21:48:27 lvps46-163-74-15 dovecot: lda(al(a)none.at): Debug: sieve: binary save: not saving binary /var/vmail/none.at/al/.dovecot.svbin, because it is already stored Sep 11 21:48:27 lvps46-163-74-15 dovecot: lda(al(a)none.at): Debug: sieve: executing script from /var/vmail/none.at/al/.dovecot.svbin Sep 11 21:48:27 lvps46-163-74-15 dovecot: lda(al(a)none.at): sieve: msgid=unspecified: stored mail into mailbox 'INBOX' Sep 11 21:48:27 lvps46-163-74-15 postfix/pipe[7797]: 495EF9FECAF9: to=<al-pdnsuser(a)none.at>, relay=dovecot, delay=28, delays=28/0.02/0/0.22, dsn=2.0.0, status=sent (delivered via dovecot service) Sep 11 21:48:27 lvps46-163-74-15 postfix/qmgr[7785]: 495EF9FECAF9: removed Sep 11 21:48:28 lvps46-163-74-15 postfix/smtpd[7788]: disconnect from xxx ### dovecot -n => attachment dovecot_-n ~#: egrep -v '^(#|$)' /etc/dovecot/dovecot-sql.conf #### driver = mysql connect = host=127.0.0.1 dbname=mailserver user=$USER \ password=$PASSWORD default_pass_scheme = PLAIN-MD5 password_query = SELECT user_email AS user, \ user_password AS password \ FROM virtual_users WHERE user_email='%u'; #### Due to the fact that I'am new to dovecot and sieve I hope anybody can help the solve this issue. My target is to filter the mailinglists based on address extention or is it better to filter on to header? Is there a 'log' or 'print' command in the sieve filter or how can I write a message to the log file? Many thanks for your help BR Aleks

3 9

Re: [Dovecot] v2.0.15 released
by Eduardo M KALINOWSKI 17 Sep '11

17 Sep '11

On Sex, 16 Set 2011, Simon Brereton wrote: > I'll bite.. But it's probably not your concern. When will we be > able to get stable 2.x packages for Debian? Apt installs 1.2.15-7 In Debian stable? Only when the next stable version (wheezy) is released. Not in squeeze. Though perhaps a backport might appear. -- Colors may fade in time. Eduardo M KALINOWSKI eduardo(a)kalinowski.com.br

3 3

Re: [Dovecot] imapc and imap_acl
by Lutz Preßler 16 Sep '11

16 Sep '11

On Tue, 13 Sep 2011, Lutz Preßler wrote: > On Di, 13 Sep 2011, Timo Sirainen wrote: > > You mean you'd want local ACLs that apply to imapc mailboxes? > Yes, exactly. Great for "integrating" legacy IMAP servers without e.g. > ACL support. ... but as long as imapc parameters are global that's of no real use, I just realized... > > I think that should work. For example if you set: > > > > mail_location = imapc:~/imapc > > Then for mailbox foo/bar the ACL file should be in ~/imapc/.foo.bar/dovecot-acl > It almost works: > Sep 13 18:37:58 hhh dovecot: imap(4482, uuu): Error: file_dotlock_open(/home/uuu/Maildir/gmail/.[Gmail].Alle Nachrichten > /dovecot-acl) failed: No such file or directory > After manually creating the ".[Gmail].Alle Nachrichten" directory, SETACL > succeeds. ... so this does not really matter yet. Lutz

1 0

[Dovecot] sharing of non-INBOX namespaces? Re: imapc and imap_acl
by Lutz Preßler 16 Sep '11

16 Sep '11

Hi, On Tue, 13 Sep 2011, Lutz Preßler wrote: > On Di, 13 Sep 2011, Timo Sirainen wrote: > > You mean you'd want local ACLs that apply to imapc mailboxes? > Yes, exactly. Great for "integrating" legacy IMAP servers without e.g. > ACL support. > > I think that should work. For example if you set: > > > > mail_location = imapc:~/imapc > Oh, had not realized that a path argument is possible for imapc:. There are > even index file then... > > > > Then for mailbox foo/bar the ACL file should be in ~/imapc/.foo.bar/dovecot-acl > It almost works: > Sep 13 18:37:58 hhh dovecot: imap(4482, uuu): Error: file_dotlock_open(/home/uuu/Maildir/gmail/.[Gmail].Alle Nachrichten > /dovecot-acl) failed: No such file or directory > After manually creating the ".[Gmail].Alle Nachrichten" directory, SETACL > succeeds. Ok, I thought I tested accessing the mailbox afterwards, too - but I probably had not. I have a more general problem now: shared mailboxes from any "non-INBOX" namespace are not available to other users. That's not only with virtual or imapc namespaces, but also tested with two Maildir ones: namespace personal { inbox = yes location = maildir:~/Maildir prefix = INBOX. type = private } namespace second { inbox = no location = maildir:~/Maildir2 prefix = INBOX.second. type = private } namespace others { type = shared separator = . prefix = INBOX.shared.%%u. location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u #location = maildir:/home/%%n/Maildir:INDEX=~/Maildir/shared/%%u subscriptions = no list = children } [...] I can as user1 SETACL INBOX.second.box ~user1/Maildir2/dovecot-acl-list contains "1316082286 box" ~user1/Maildir2/.box/dovecot-acl contains "user=testuser lrs" (as does ~user1/Maildir/.in2007/dovecot-acl) The shared mailboxes dict contains shared/shared-boxes/user/testuser/user1 1 But - as testuser - 0 list "" "*" * LIST (\HasChildren) "." "INBOX" * LIST (\HasNoChildren) "." "INBOX.test" * LIST (\HasNoChildren) "." "INBOX.second" * LIST (\Noselect \HasChildren) "." "INBOX.shared.user1" * LIST (\HasNoChildren) "." "INBOX.virtual" * LIST (\HasNoChildren) "." "INBOX.shared.user1.in2007" 0 OK List completed. INBOX.shared.user1.second.box is missing. Also 0 select INBOX.shared.user1.second.box * OK [CLOSED] Previous mailbox closed. 0 NO Mailbox doesn't exist: second.box Log shows then: Sep 15 12:39:48 host dovecot: imap(8796, testuser): Debug: acl vfile: file /etc/dovecot/global-acls/INBOX.shared.user1.second.box not found Sep 15 12:39:48 host dovecot: imap(8796, testuser): Debug: acl vfile: file /home/user1/Maildir/.second.box/dovecot-acl not found ... not searching for the acl file correctly. Thought I tested this with earlier (2.0) versions. Changed group set up inbetween, but this does not seem relevant. Regards, Lutz

2 4

Re: [Dovecot] v2.0.15 released
by Odhiambo Washington 16 Sep '11

16 Sep '11

I think someone else is responsible for the Debianization of Dovecot, not Timo. On Fri, Sep 16, 2011 at 19:05, Simon Brereton <simon.brereton(a)buongiorno.com > wrote: > -----Original Message----- > From: dovecot-bounces(a)dovecot.org [mailto:dovecot-bounces@dovecot.org] On > Behalf Of Timo Sirainen > > http://dovecot.org/releases/2.0/dovecot-2.0.15.tar.gz > http://dovecot.org/releases/2.0/dovecot-2.0.15.tar.gz.sig > > + doveadm altmove: Added -r parameter to move mails back to primary > storage. > - v2.0.14: Index reading could have eaten a lot of memory in some > situations > - doveadm index no longer affects future caching decisions > - mbox: Fixed crash during mail delivery when mailbox didn't yet > have > GUID assigned to it. > - zlib+mbox: Fetching last message from compressed mailboxes > crashed. > - lib-sql: Fixed load balancing and error handling when multiple > hosts > are used. > > > ----------- > > I'll bite.. But it's probably not your concern. When will we be able to > get stable 2.x packages for Debian? Apt installs 1.2.15-7 > > Thanks. > > Simon > (Sorry about breaking the quotes) > > -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ I can't hear you -- I'm using the scrambler. Please consider the environment before printing this email.

1 0

[Dovecot] v2.0.15 released
by Timo Sirainen 16 Sep '11

16 Sep '11

http://dovecot.org/releases/2.0/dovecot-2.0.15.tar.gz http://dovecot.org/releases/2.0/dovecot-2.0.15.tar.gz.sig + doveadm altmove: Added -r parameter to move mails back to primary storage. - v2.0.14: Index reading could have eaten a lot of memory in some situations - doveadm index no longer affects future caching decisions - mbox: Fixed crash during mail delivery when mailbox didn't yet have GUID assigned to it. - zlib+mbox: Fetching last message from compressed mailboxes crashed. - lib-sql: Fixed load balancing and error handling when multiple hosts are used.

2 1

[Dovecot] Dsync Permissions Issue
by Asai 16 Sep '11

16 Sep '11

Greetings, I recently upgraded Dovecot from 1.2 to 2.0.14, for purposes of using Dsync to migrate emails from one server to another. I'm using MySQL for authentication. However I get this error message when I try to run Dsync, and after looking around for an answer, I'm at a bit of a loss: [root@triata ~]# dsync -v -u asai(a)globalchangemusic.org backup ssh -p22222 vmail(a)xx.xxx.xx.xxx dsync -u asai(a)globalchangemusic.org vmail(a)xx.xxx.xx.xxx's password: dsync(vmail): Error: userdb lookup: connect(/var/run/dovecot/auth-userdb) failed: Permission denied (euid=1001(vmail) egid=1001(vmail) missing +r perm: /var/run/dovecot/auth-userdb, euid is not dir owner) dsync(vmail): Fatal: User lookup failed: Internal error occurred. Refer to server log for more information. dsync-local(asai(a)globalchangemusic.org): Error: read() from worker server failed: EOF Config as follows: [root@triata ~]# doveconf -n # 2.0.14: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-92.1.10.el5.xs5.0.0.39xen x86_64 CentOS release 5 (Final) ext3 auth_mechanisms = plain login mail_home = /vmail/%d/%n/home mail_location = maildir:/vmail/%d/%n managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date namespace { inbox = yes location = prefix = separator = / type = private } passdb { args = /etc/dovecot-mysql.conf driver = sql } plugin { sieve = /vmail/%d/%n/sievescript } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-master { group = vmail mode = 0660 user = vmail } unix_listener auth-userdb { group = vmail mode = 0666 user = vmail } user = root } ssl_cert = </etc/ssl/triata.globalchangemultimedia.net/mailserver/smtpd.pem ssl_key = </etc/ssl/triata.globalchangemultimedia.net/mailserver/smtpd.pem userdb { driver = passwd } userdb { args = /etc/dovecot-mysql.conf driver = sql } protocol lda { hostname = triata.globalchangemultimedia.net mail_plugin_dir = /usr/lib64/dovecot/ mail_plugins = sieve postmaster_address = postmaster(a)globalchangemultimedia.net } --

2 2

[Dovecot] unexpected LSUB / LIST (SUBSCRIBED) output Re: Panic: file mailbox-list-subscriptions.c: line 66 (mailbox_list_subscription_fill_one): assertion failed: (ns!= NULL && (ns->flags & NAMESPACE_FLAG_AUTOCREATED) != 0)
by Lutz Preßler 16 Sep '11

16 Sep '11

On Thu, 15 Sep 2011, Timo Sirainen wrote: > On Wed, 2011-09-14 at 12:10 +0200, Lutz Preßler wrote: > > imap(2717, testuser): Panic: file mailbox-list-subscriptions.c: line > > 66 (mailbox_list_subscription_fill_one): assertion failed: (ns!= NULL > > && (ns->flags & NAMESPACE_FLAG_AUTOCREATED) != 0) > > > Fixed: http://hg.dovecot.org/dovecot-2.1/rev/309a707c22c0 No assertion anymore. 0 login testuser password [...] 0 list "" "*" * LIST (\HasChildren) "." "INBOX" * LIST (\HasNoChildren) "." "INBOX.test" * LIST (\Noselect \HasChildren) "." "INBOX.shared.user1" * LIST (\HasNoChildren) "." "INBOX.virtual" * LIST (\HasNoChildren) "." "INBOX.shared.user1.in2007" 0 OK List completed. 0 lsub "" "*" * LSUB (\Noselect) "." "INBOX.shared.user1" 0 OK Lsub completed. 0 list (subscribed) "" "*" * LIST (\NonExistent) "." "INBOX.shared.user1" 0 OK List completed. >>> ~testuser/Maildir/subscription is empty here 0 subscribe INBOX.shared.user1.in2007 0 OK Subscribe completed. 0 lsub "" "*" * LSUB (\Noselect) "." "INBOX.shared.user1" * LSUB () "." "INBOX.shared.user1.in2007" 0 OK Lsub completed. 0 list (subscribed) "" "*" * LIST (\NonExistent) "." "INBOX.shared.user1" * LIST (\Subscribed) "." "INBOX.shared.user1.in2007" 0 OK List completed. >>> ~testuser/Maildir/subscription now contains "shared.user1.in2007" Is this "INBOX.shared.user1" LSUB/LIST output correct? Lutz

2 1

[Dovecot] Shared folder not listing
by Tom Clark 16 Sep '11

16 Sep '11

Hi Timo, I've got a weird problem on our dovecot. We're trying to setup private shared folder access. I have 2 users. tom(a)mailbox.com and system(a)mailbox.com. I have set the ACL's on all the folders (and subfolders) on system(a)mailbox.com. However, I'm not getting any of them listed when I check tom(a)mailbox.com <mailto:tom@mailbox.com's> 's IMAP folders. Our configuration is below (we're migrating from Courier hence the INBOX.): In 10-mail.conf: namespace { type = private prefix = INBOX. separator = . inbox = yes list = yes hidden = yes } namespace { type = shared separator = . prefix = INBOX.Shared.%%u location = maildir:%%h/Maildir:INDEX=~/Maildir/Shared/%%u subscriptions = no list = children } mail_plugins = acl protocol imap { mail_plugins = $mail_plugins imap_acl } In 90-acl.conf: plugin { #acl = vfile:/etc/dovecot/acls:cache_secs=300 acl = vfile } # To let users LIST mailboxes shared by other users, Dovecot needs a # shared mailbox dictionary. For example: plugin { acl_shared_dict = file:/var/vpopmail/domains/%d/shared-mailboxes } Have I missed anthing!?!? Thanks in advance! Tom

3 4

Re: [Dovecot] dovecot Digest, Vol 101, Issue 26
by Alan Brown 15 Sep '11

15 Sep '11

> From: Timo Sirainen <tss(a)iki.fi> > Subject: Re: [Dovecot] general advice sought > Message-ID: <1315830847.7326.48.camel@hurina> > Content-Type: text/plain; charset="ISO-8859-15" > > On Mon, 2011-09-12 at 13:11 +0100, Alan Brown wrote: >> I'd like to hear the thoughts of list members on which type of storage >> method seems "best" for inboxes and for folders. >> >> The filesystem is GFS2 and for various reasons I can't change it. > .. >> If I migrate to other formats (eg mdbox), then it needs to be able to be >> done on the fly. (Taking the mailservers down for a day won't go down >> well, even an hour raises howls). > > Have you had any trouble with Dovecot's index files in your current > setup? Any errors at all? Zero. The issues which have arisen are: 1: Really slow access to messages in large folders (GFS2 issue) 2: Users trashing their inbox then demanding we drop everything to restore "all my important mail" > If not, I'd think mdbox will work fine. You > can do it incrementally per-user (and you really should try it first > with only a few users). http://wiki2.dovecot.org/Tools/Dsync explains > how to do it on the fly. I thought so too, just wanted to hear opinions on doing it vs other approaches. :)

1 0

[Dovecot] Warning: Subscriptions file .. Removing invalid entry:
by Jan-Frode Myklebust 15 Sep '11

15 Sep '11

One of our dovecot-servers (v2.0.14) got a bit too busy last evening: Sep 13 20:39:18 popimap1 dovecot: master: Warning: service(pop3-login): process_limit reached, client connections are being dropped then logged a few: Sep 13 20:39:20 popimap1 dovecot: pop3(XXXXXXXXX(a)YYYYY.YY): Warning: I/O leak: 0x3829233d20 (10) Sep 13 20:39:20 popimap1 dovecot: pop3(XXXXXXXXX(a)YYYYY.YY): Warning: Timeout leak: 0x3829233ce0 Sep 13 20:39:20 popimap1 dovecot: pop3(ZZZZZ.ZZZZZ(a)ZZZZZZ.ZZ): Warning: I/O leak: 0x3829233d20 (10) Sep 13 20:39:20 popimap1 dovecot: pop3(ZZZZZ.ZZZZZ(a)ZZZZZZ.ZZ): Warning: Timeout leak: 0x3829233ce0 Sep 13 20:39:20 popimap1 dovecot: pop3(YYYYYYY(a)YYYY.YYY): Warning: I/O leak: 0x3829233d20 (10) Sep 13 20:39:20 popimap1 dovecot: pop3(YYYYYYY(a)YYYY.YYY): Warning: Timeout leak: 0x3829233ce0 Sep 13 20:39:20 popimap1 dovecot: pop3-postlogin: Error: Fatal: fd_send() failed: Broken pipe Sep 13 20:39:20 popimap1 dovecot: pop3-postlogin: Error: Fatal: fd_send() failed: Broken pipe and: Error: net_connect_unix(/var/run/dovecot/pop3-postlogin) failed: Resource temporarily unavailable but what has me a bit worried is these: imap(user(a)xxx.xxx): Warning: Subscriptions file /path/to/user(a)xxx.xxx/subscriptions: Removing invalid entry: .Sent imap(user(a)xxx.xxx): Warning: Subscriptions file /path/to/user(a)xxx.xxx/subscriptions: Removing invalid entry: .Spam imap(user(a)xxx.xxx): Warning: Subscriptions file /path/to/user(a)xxx.xxx/subscriptions: Removing invalid entry: .Drafts imap(user(a)xxx.xxx): Warning: Subscriptions file /path/to/user(a)xxx.xxx/subscriptions: Removing invalid entry: .Trash which happened for a two users during this high load periode. Looking at their mail directory I can't see why these should be invalid? They're there, has sane permissions and contains messages.. -jf

2 3

[Dovecot] multiple "imapc namespaces" Re: imapc and imap_acl
by Lutz Preßler 15 Sep '11

15 Sep '11

On Tue, 13 Sep 2011, Lutz Preßler wrote: > On Di, 13 Sep 2011, Timo Sirainen wrote: > > mail_location = imapc:~/imapc > Oh, had not realized that a path argument is possible for imapc:. There are > even index file then... What about taking imapc parameters/credentials optionally from a file in this directory (like dovecot-virtual)? Lutz

2 1

[Dovecot] LDA panics without sieve script
by Jürgen Obermann 15 Sep '11

15 Sep '11

The dovecot lda panics with "Trying to sync mailbox INBOX with open transactions" if a user has no sieve script defined. Debugging shows: Sep 14 19:49:26 server dovecot: [ID 583609 local0.debug] lda(userxx): Debug: sieve: user's script path /home/grp/userxx/.dovecot.sieve doesn't exist (using global script path in stead) Sep 14 19:49:26 server dovecot: [ID 583609 local0.debug] lda(userxx): Debug: sieve: user has no valid personal script Sep 14 19:49:26 server dovecot: [ID 583609 local0.debug] lda(userxx): Debug: sieve: no scripts to execute: reverting to default delivery. Sep 14 19:49:26 server dovecot: [ID 583609 local0.crit] lda(userxx): Panic: Trying to sync mailbox INBOX with open transactions Sep 14 19:49:26 server dovecot: [ID 583609 local0.error] lda(userxx): Error: Raw backtrace: 0xff1cc2ac -> 0xff1cbb70 -> 0xff2a6474 -> 0xff2a668c -> 0xff2fa444 -> 0xff2a63c8 -> 0xff2668ec -> 0xff266f74 -> 0xff26741c -> 0x12720 -> 0x11948 I then did create an empty sieve script file with touch /home/grp/userxx/.dovecot.sieve and after that lda worked: Sep 14 19:50:55 server dovecot: [ID 583609 local0.debug] lda(userxx): Debug: sieve: using sieve path for user's script: /home/grp/userxx/.dovecot.sieve Sep 14 19:50:55 server dovecot: [ID 583609 local0.debug] lda(userxx): Debug: sieve: opening script /home/grp/userxx/.dovecot.sieve Sep 14 19:50:55 server dovecot: [ID 583609 local0.debug] lda(userxx): Debug: sieve: script /home/grp/userxx/.dovecot.sieve successfully compiled Sep 14 19:50:55 server dovecot: [ID 583609 local0.debug] lda(userxx): Debug: sieve: executing script from /home/grp/userxx/.dovecot.sieve Sep 14 19:50:56 server dovecot: [ID 583609 local0.info] lda(userxx): save: box=INBOX, uid=6, msgid=<201109141750.p8EHotbE015854(a)server.hrz.uni-giessen.de>, size=1035 Sep 14 19:50:56 server dovecot: [ID 583609 local0.debug] lda(userxx): Debug: box=/var/mail/userxx mount=/var/mail match=yes Sep 14 19:50:56 server dovecot: [ID 583609 local0.info] lda(userxx): sieve: msgid=<201109141750.p8EHotbE015854(a)server.hrz.uni-giessen.de>: stored mail into mailbox 'INBOX' I think the lda worked in previous releases without a sieve script file in the users home directory. dovecot -n output is: # 2.0.14: /opt/local/etc/dovecot/dovecot.conf # OS: SunOS 5.10 sun4v auth_debug = yes auth_debug_passwords = yes auth_verbose = yes disable_plaintext_auth = no listen = server.hrz.uni-giessen.de localhost mail_debug = yes mail_fsync = always mail_location = mbox:~/Mail:INBOX=/var/mail/%u mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = mail_log notify quota mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mmap_disable = yes namespace { inbox = yes location = prefix = separator = / type = private } namespace { hidden = yes list = no location = prefix = Mail/ separator = / subscriptions = yes type = private } passdb { driver = pam } passdb { args = /opt/local/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { autocreate = Trash autocreate2 = caughtspam autocreate3 = Sent autosubscribe = Trash autosubscribe2 = caughtspam autosubscribe3 = Sent mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size quota = fs:Home-Verzeichnis:noenforcing quota2 = fs:INBOX:noenforcing:mount=/var/mail sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = postmaster(a)hrz.uni-giessen.de protocols = imap pop3 lmtp sieve sendmail_path = /usr/lib/sendmail service auth { client_limit = 11120 } service imap-login { process_min_avail = 16 service_count = 0 vsz_limit = 640 M } service imap { process_limit = 4096 vsz_limit = 1 G } ssl_cert = </etc/ssl/server.crt ssl_key = </etc/ssl/server.key syslog_facility = local0 userdb { driver = passwd } version_ignore = yes protocol lda { info_log_path = log_path = mail_plugins = mail_log notify quota sieve } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep mail_max_userip_connections = 20 mail_plugins = mail_log notify quota autocreate imap_quota } protocol lmtp { mail_plugins = mail_log notify quota sieve } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xv%08Xu } -- Hochschulrechenzentrum der | Mail: Juergen.Obermann(a)hrz.uni-giessen.de Justus-Liebig-Universitaet | WWW: http://www.uni-giessen.de/obermann/ Heinrich-Buff-Ring 44 | Tel: 0641-99-13054 (0641-99-13001) D-35392 Giessen, Germany | Fax: 0641-99-13009

3 2

[Dovecot] Maildir "locking"
by Attila Nagy 15 Sep '11

15 Sep '11

Hello, I'm looking for the alternative of qmail's chmod -t (sticky bit on the maildir root) for Dovecot. What I'm trying to achieve with this lock: - Dovecot lmtp should give back a temporary error (so the email will be deferred and re-delivered later) - all other Dovecot daemons (pop, imap) should work as usual, but should not alter maildir contents (they can modify their own files, like indexes, logs etc) What is the best way to do this? If there is no such thing currently, would it be hard to implement the sticky bit checking on the root? Thanks,

2 6

[Dovecot] imapc vs auth-userdb security
by Lutz Preßler 15 Sep '11

15 Sep '11

Hello, with imapc settings coming from userdb (individual configuration necessary) there exists a security problem if access to auth-userdb socket is given to normal (shell) users: testuser@host:~$ doveadm user user1 userdb: lpmail uid : 1000 gid : 1111 home : /home/user1 namespace : gmail namespace/gmail/list: yes namespace/gmail/subscriptions: no namespace/gmail/separator: . namespace/gmail/prefix: INBOX.gmail. namespace/gmail/location: imapc:~/Maildir/gmail imapc_host: imap.gmail.com imapc_user: someuser(a)gmail.com imapc_password: cleartextpassword! imapc_ssl : imaps imapc_ssl_ca_dir: /etc/ssl/certs imapc_port: 993 Lutz

2 3

[Dovecot] Which dovecot-antispam with dovecot 2?
by Svoop 14 Sep '11

14 Sep '11

Hi I'm a little confused as there are two repos for the dovecot-antispam plugin. Eugene's hg repo is explicitly labeled "for Dovecot 2", but the Johannes' git repo has commits later in date: hg: http://wiki2.dovecot.org/Plugins/Antispam git: http://git.sipsolutions.net/?p=dovecot-antispam.git I guess the unrelease hg code ist the one for Dovecot 2, but what is Eugene's 1.4 code for? Thanks!

2 1

[Dovecot] Shredding instead of deleting
by Mike Cardwell 14 Sep '11

14 Sep '11

Hi, I have a wishlist item. Is there an appropriate place for me to post it? Basically, I would like to know that my email isn't recoverable from the local disk on the mail server after I delete it. So instead of just deleting the file from my Maildir, I'd like the option to exist for Dovecot to shred it.. Ie, overwrite the file with random data and/or null bytes before deletion. In the same way that GNU shred behaves: https://www.gnu.org/software/coreutils/manual/html_node/shred-invocation.ht… -- Mike Cardwell https://grepular.com/ https://twitter.com/mickeyc Professional http://cardwellit.com/ http://linkedin.com/in/mikecardwell PGP.mit.edu 0018461F/35BC AF1D 3AA2 1F84 3DC3 B0CF 70A5 F512 0018 461F

4 8

Re: [Dovecot] Mails repopping
by Michael M Slusarz 14 Sep '11

14 Sep '11

Quoting Simon Brereton <simon.brereton(a)buongiorno.com>: >> -----Original Message----- >> From: dovecot-bounces(a)dovecot.org [mailto:dovecot- >> bounces(a)dovecot.org] On Behalf Of Simon Brereton >> > -----Original Message----- >> > From: Timo Sirainen [mailto:tss@iki.fi] On Fri, 2011-09-09 at 13:07 >> > -0400, Simon Brereton wrote: >> > >> > > I have a server that's been running Courier for about 6 years and >> > in >> > > all that time I think I've only ever had 1 issues where an entire >> > mail >> > > box was repopped by a webmail client. However, since moving to a >> > new >> > > server and dovecot 4 weeks ago, I've now had the webmail client >> > repop >> > > this account 4 times (there are about 230 mails in the account). >> > > >> > > Is there a setting I need to tighten to prevent/remedy this? I >> > have >> > > no idea if it's happening on other accounts, but this is one that >> I >> > > see. The format is maildir. There has been no changes to the >> > webmail >> > > client. >> > >> > dovecot -n output would have been nice. Also do you see anything in >> > error logs? >> >> Ah. My apologies of course. Here it is.. >> >> mail:~# dovecot -n >> # 1.2.15: /etc/dovecot/dovecot.conf >> # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.2 ext3 >> log_timestamp: %Y-%m-%d %H:%M:%S >> protocols: imap imaps pop3 pop3s >> ssl_ca_file: /etc/ssl/keys/rhodes-ca.crt >> ssl_cert_file: /etc/ssl/keys/mail.domain.net.crt >> ssl_key_file: /etc/ssl/private/mail.domain.net.key >> disable_plaintext_auth: no >> login_dir: /var/run/dovecot/login >> login_executable(default): /usr/lib/dovecot/imap-login >> login_executable(imap): /usr/lib/dovecot/imap-login >> login_executable(pop3): /usr/lib/dovecot/pop3-login >> mail_privileged_group: mailsystem >> mail_location: maildir:/var/spool/mail/virtual/%d/%n >> maildir_very_dirty_syncs: yes >> mbox_write_locks: fcntl dotlock >> mail_executable(default): /usr/lib/dovecot/imap >> mail_executable(imap): /usr/lib/dovecot/imap >> mail_executable(pop3): /usr/lib/dovecot/pop3 >> mail_plugins(default): quota imap_quota >> mail_plugins(imap): quota imap_quota >> mail_plugins(pop3): quota >> mail_plugin_dir(default): /usr/lib/dovecot/modules/imap >> mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap >> mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 >> imap_client_workarounds(default): outlook-idle delay-newmail >> imap_client_workarounds(imap): outlook-idle delay-newmail >> imap_client_workarounds(pop3): >> pop3_client_workarounds(default): >> pop3_client_workarounds(imap): >> pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh >> lda: >> postmaster_address: postmaster(a)domain.net >> mail_plugins: quota >> log_path: >> info_log_path: >> deliver_log_format: msgid=%m: %f: %$ >> auth default: >> mechanisms: plain login >> user: mailsystem >> verbose: yes >> passdb: >> driver: sql >> args: /etc/dovecot/dovecot-sql.conf >> userdb: >> driver: prefetch >> userdb: >> driver: static >> args: uid=999 gid=115 home=/var/spool/mail/virtual/%d/%n >> allow_all_users=yes >> socket: >> type: listen >> client: >> path: /var/spool/postfix/private/auth >> mode: 432 >> user: postfix >> group: mailsystem >> master: >> path: /var/run/dovecot/auth-master >> mode: 432 >> user: mailsystem >> group: mailsystem >> plugin: >> quota: maildir >> >> Could you make dovecot -n munge the certificate and postmaster email >> addresses? I'm not comfortable with that floating on the internet.. >> >> The only thing I have in the logs is 2 sessions where mail was popped >> (note, it doesn't even add up to the 183 messages in the mail box). >> But those sessions are vastly longer than the regular ones (tens of >> minutes compared to a few seconds). Since both IPs are on the back- >> bone, that's quite a while to download 100 mails (none of which are >> over >> >> Sep 11 21:36:25 mail dovecot: pop3-login: Login: >> user=<user(a)domain.com>, method=PLAIN, rip=64.88.168.84, >> lip=83.170.65.xxx, TLS Sep 11 21:36:34 mail dovecot: >> POP3(user(a)domain.com): Disconnected: Logged out top=0/0, retr=0/0, >> del=0/183, size=14025971 Sep 11 21:43:44 mail dovecot: pop3-login: >> Login: user=<user(a)domain.com>, method=PLAIN, rip=64.88.168.84, >> lip=83.170.65.xxx, TLS Sep 11 21:44:54 mail dovecot: >> POP3(user(a)domain.com): Disconnected: Logged out top=0/0, retr=0/0, >> del=0/183, size=14025971 Sep 11 21:52:31 mail dovecot: pop3-login: >> Login: user=<user(a)domain.com>, method=PLAIN, rip=64.88.168.84, >> lip=83.170.65.xxx, TLS Sep 11 22:56:01 mail dovecot: >> POP3(user(a)domain.com): Disconnected: Logged out top=0/0, >> retr=100/9182678, del=0/183, size=14025971 Sep 11 23:08:58 mail >> dovecot: pop3-login: Login: user=<user(a)domain.com>, method=PLAIN, >> rip=64.88.168.84, lip=83.170.65.xxx, TLS Sep 11 23:37:57 mail >> dovecot: POP3(user(a)domain.com): Disconnected: Logged out top=0/0, >> retr=75/4748674, del=0/183, size=14025971 Sep 12 00:04:11 mail >> dovecot: pop3-login: Login: user=<user(a)domain.com>, method=PLAIN, >> rip=64.88.168.84, lip=83.170.65.xxx, TLS Sep 12 00:04:26 mail >> dovecot: POP3(user(a)domain.com): Disconnected: Logged out top=0/0, >> retr=0/0, del=0/183, size=14025971 Sep 12 00:07:40 mail dovecot: >> pop3-login: Login: user=<user(a)domain.com>, method=PLAIN, >> rip=64.88.168.84, lip=83.170.65.xxx, TLS Sep 12 00:07:53 mail >> dovecot: POP3(user(a)domain.com): Disconnected: Logged out top=0/0, >> retr=0/0, del=0/183, size=14025971 >> >> >> > If you're using the default pop3_uidl_format it'll rely on IMAP >> UIDs >> > to stay the same, and I guess it's possible that due to some other >> > problem they change (that should be logged as an error/warning >> > though). >> > >> > You could try setting pop3_uidl_format=%f, but it will cause >> everyone >> > to redownload mails. With newer Dovecot versions you could set >> > pop3_save_uidl=yes and when you think everyone's downloaded mails >> once >> > you can safely change the pop3_uidl_format. >> >> Sorry, I'm very new to dovecot and I'm not sure I understand. I >> presume because neither of those keys are in the dovecot -n output >> that they are as the defaults, yes? The account is indeed accessed >> by IMAP as well (from a mobile device mostly), but I don't see >> anything fishy there either. How could I see if the IMAP UIDs have >> changed? >> >> Sep 11 21:20:32 mail dovecot: IMAP(user(a)domain.com): Connection >> closed bytes=1095/8292 >> >> Sep 11 21:26:03 mail dovecot: imap-login: Login: >> user=<user(a)domain.com>, method=PLAIN, rip=174.252.83.244, >> lip=83.170.65.xxx, TLS Sep 11 22:11:20 mail dovecot: >> IMAP(user(a)domain.com): Disconnected for inactivity bytes=725/5638 Sep >> 11 22:17:10 mail dovecot: imap-login: Login: user=<user(a)domain.com>, >> method=PLAIN, rip=174.252.83.244, lip=83.170.65.xxx, TLS Sep 11 >> 23:12:06 mail dovecot: IMAP(user(a)domain.com): Disconnected for >> inactivity bytes=1471/11025 Sep 11 23:23:22 mail dovecot: imap-login: >> Login: user=<user(a)domain.com>, method=PLAIN, rip=174.252.83.244, >> lip=83.170.65.xxx, TLS Sep 11 23:52:52 mail dovecot: >> IMAP(user(a)domain.com): Connection closed bytes=1841/13679 Sep 12 >> 00:08:47 mail dovecot: imap-login: Login: user=<user(a)domain.com>, >> method=PLAIN, rip=174.252.83.244, lip=83.170.65.xxx, TLS Sep 12 >> 01:19:05 mail dovecot: imap-login: Login: user=<user(a)domain.com>, >> method=PLAIN, rip=174.252.83.244, lip=83.170.65.xxx, TLS Sep 12 >> 02:57:01 mail dovecot: IMAP(user(a)domain.com): Connection closed >> bytes=2713/60026 Sep 12 02:57:01 mail dovecot: IMAP(user(a)domain.com): >> Connection closed bytes=2688/18635 >> >> >> There are no errors or warnings in the mail log (I have one shared >> log file for postfix, amavis and dovecot). Reading the notes for >> pop3_save_uidl it doesn't seem to be a dangerous option - should I >> turn that on? Why will it force everyone to redownload mails >> (there's nothing about it on the wiki)? >> >> Thanks! >> >> Simon > > Any help would be appreciated. What do you mean by "repopped"? You mean downloading the entire data of the messages from the POP3 server? This is expected behavior when using a stateless (e.g. webmail) client. Kind of the whole reason you don't use POP3 in the first place. Although caching can help. e.g., Here's what the first connection to the server looks like (this is using IMP 5 on a mailstore with 82 messages): S (1315951197.4976): +OK Dovecot ready. C (1315951197.513): [AUTH PLAIN Command - username: slusarz] S (1315951197.5319): +OK Logged in. C (1315951197.5325): STAT S (1315951197.5328): +OK 82 482351 C (1315951197.5348): UIDL S (1315951197.5354): +OK S (1315951197.5354): 1 000000014935d409 S (1315951197.5354): 2 000000024935d409 S (1315951197.5354): 3 000000114935d409 [...] S (1315951197.5363): 82 000000824935d409 S (1315951197.5363): . C (1315951197.9582): TOP 1 0 S (1315951198.0411): From user(a)domain.com Thu Jun 22 11:16:26 2006 [...] S (1315951198.0416): . [...] C (1315951199.0607): LIST S (1315951199.061): +OK 82 messages: S (1315951199.061): 1 118630 [...] S (1315951199.0619): . We need to grab all headers so we can build the envelope information (needed to produce the mailbox listing). And the LIST command grabs the size information (also used in the mailbox listing). But remember that the full headers will need to be redownloaded *EVERY* time you reload the page unless some sort of caching is enabled in the client. That's just the nature of POP3. (IMAP has the same sort of issues - if the stateless client does not cache, the envelope information must be downloaded on every access. However, with IMAP, the network traffic is reduced - you can download only the needed information, not all header text - and IMAP servers have the ability to cache this information behind the scenes due to the abstraction of the API.). This is where caching is pretty much essential on the webmail side. If caching is enabled, the best-case scenario is that the the webmail server only needs to grab the list of UIDLs on every POP3 server access going forward - if the UIDL list has not changed, we know the mailbox hasn't changed and the cached information is still valid. (CONDSTORE/QRESYNC extensions for IMAP make this synchronization check even more efficient in IMAP) michael

2 1

[Dovecot] General IMAP Question
by Gerald LaMontagne 14 Sep '11

14 Sep '11

Hi- I'm developing an IMAP client library in lua and tried using a literal form of the STATUS command. Dovecot rejected the command. I was successfully able to use a literal form of the LOGIN command, so I have some confidence in my code working properly. Is this correct and, if so, is there a list of IMAP commands that don't support the literal form? I searched hi and lo for something, but have been unable to find an answer. Thanks for your time. Regards- Gerry LaMontagne

2 1

[Dovecot] IMAP delete logs
by James isolder 14 Sep '11

14 Sep '11

Version - 1.2.17 Is there a way to include message or folder deletion logs in the dovecot log files. Thanks in advance. ____________________________________________________________ South Africas premier free email service - www.webmail.co.za For super low premiums, click here. http://www.dialdirect.co.za/?vdn=15828

2 1

[Dovecot] New plugin for Pigeonhole Sieve: sieve_pipe
by Stephan Bosch 14 Sep '11

14 Sep '11

Hello, I've finished up work on a new plugin for Pigeonhole Sieve: sieve_pipe. It adds a new Sieve extension (vnd.dovecot.pipe) providing a new action command that provides the possibility to pipe messages to external programs (e.g. shell scripts). The programs available to this command are explicitly limited and subject to administrator configuration. The plugin can currently only be downloaded from the Mercurial repository: http://hg.rename-it.nl/pigeonhole-0.2-sieve-pipe Check the README/INSTALL files in the repository or the new wiki page for more information: http://hg.rename-it.nl/pigeonhole-0.2-sieve-pipe/raw-file/tip/README http://hg.rename-it.nl/pigeonhole-0.2-sieve-pipe/raw-file/tip/INSTALL http://master.wiki2.dovecot.org/Pigeonhole/Sieve/Plugins/Pipe The specification of the vnd.dovecot.pipe extension can be found here: http://hg.rename-it.nl/pigeonhole-0.2-sieve-pipe/raw-file/tip/doc/rfc/spec-… I'd still call this thing very much experimental, so be sure to test it extensively first. Don't hesitate to notify me when there are any problems. Regards, Stephan.

1 0

Re: [Dovecot] Mails repopping
by Simon Brereton 14 Sep '11

14 Sep '11

> -----Original Message----- > From: dovecot-bounces(a)dovecot.org [mailto:dovecot- > bounces(a)dovecot.org] On Behalf Of Simon Brereton > > -----Original Message----- > > From: Timo Sirainen [mailto:tss@iki.fi] On Fri, 2011-09-09 at 13:07 > > -0400, Simon Brereton wrote: > > > > > I have a server that's been running Courier for about 6 years and > > in > > > all that time I think I've only ever had 1 issues where an entire > > mail > > > box was repopped by a webmail client. However, since moving to a > > new > > > server and dovecot 4 weeks ago, I've now had the webmail client > > repop > > > this account 4 times (there are about 230 mails in the account). > > > > > > Is there a setting I need to tighten to prevent/remedy this? I > > have > > > no idea if it's happening on other accounts, but this is one that > I > > > see. The format is maildir. There has been no changes to the > > webmail > > > client. > > > > dovecot -n output would have been nice. Also do you see anything in > > error logs? > > Ah. My apologies of course. Here it is.. > > mail:~# dovecot -n > # 1.2.15: /etc/dovecot/dovecot.conf > # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.2 ext3 > log_timestamp: %Y-%m-%d %H:%M:%S > protocols: imap imaps pop3 pop3s > ssl_ca_file: /etc/ssl/keys/rhodes-ca.crt > ssl_cert_file: /etc/ssl/keys/mail.domain.net.crt > ssl_key_file: /etc/ssl/private/mail.domain.net.key > disable_plaintext_auth: no > login_dir: /var/run/dovecot/login > login_executable(default): /usr/lib/dovecot/imap-login > login_executable(imap): /usr/lib/dovecot/imap-login > login_executable(pop3): /usr/lib/dovecot/pop3-login > mail_privileged_group: mailsystem > mail_location: maildir:/var/spool/mail/virtual/%d/%n > maildir_very_dirty_syncs: yes > mbox_write_locks: fcntl dotlock > mail_executable(default): /usr/lib/dovecot/imap > mail_executable(imap): /usr/lib/dovecot/imap > mail_executable(pop3): /usr/lib/dovecot/pop3 > mail_plugins(default): quota imap_quota > mail_plugins(imap): quota imap_quota > mail_plugins(pop3): quota > mail_plugin_dir(default): /usr/lib/dovecot/modules/imap > mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap > mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 > imap_client_workarounds(default): outlook-idle delay-newmail > imap_client_workarounds(imap): outlook-idle delay-newmail > imap_client_workarounds(pop3): > pop3_client_workarounds(default): > pop3_client_workarounds(imap): > pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh > lda: > postmaster_address: postmaster(a)domain.net > mail_plugins: quota > log_path: > info_log_path: > deliver_log_format: msgid=%m: %f: %$ > auth default: > mechanisms: plain login > user: mailsystem > verbose: yes > passdb: > driver: sql > args: /etc/dovecot/dovecot-sql.conf > userdb: > driver: prefetch > userdb: > driver: static > args: uid=999 gid=115 home=/var/spool/mail/virtual/%d/%n > allow_all_users=yes > socket: > type: listen > client: > path: /var/spool/postfix/private/auth > mode: 432 > user: postfix > group: mailsystem > master: > path: /var/run/dovecot/auth-master > mode: 432 > user: mailsystem > group: mailsystem > plugin: > quota: maildir > > Could you make dovecot -n munge the certificate and postmaster email > addresses? I'm not comfortable with that floating on the internet.. > > The only thing I have in the logs is 2 sessions where mail was popped > (note, it doesn't even add up to the 183 messages in the mail box). > But those sessions are vastly longer than the regular ones (tens of > minutes compared to a few seconds). Since both IPs are on the back- > bone, that's quite a while to download 100 mails (none of which are > over > > Sep 11 21:36:25 mail dovecot: pop3-login: Login: > user=<user(a)domain.com>, method=PLAIN, rip=64.88.168.84, > lip=83.170.65.xxx, TLS Sep 11 21:36:34 mail dovecot: > POP3(user(a)domain.com): Disconnected: Logged out top=0/0, retr=0/0, > del=0/183, size=14025971 Sep 11 21:43:44 mail dovecot: pop3-login: > Login: user=<user(a)domain.com>, method=PLAIN, rip=64.88.168.84, > lip=83.170.65.xxx, TLS Sep 11 21:44:54 mail dovecot: > POP3(user(a)domain.com): Disconnected: Logged out top=0/0, retr=0/0, > del=0/183, size=14025971 Sep 11 21:52:31 mail dovecot: pop3-login: > Login: user=<user(a)domain.com>, method=PLAIN, rip=64.88.168.84, > lip=83.170.65.xxx, TLS Sep 11 22:56:01 mail dovecot: > POP3(user(a)domain.com): Disconnected: Logged out top=0/0, > retr=100/9182678, del=0/183, size=14025971 Sep 11 23:08:58 mail > dovecot: pop3-login: Login: user=<user(a)domain.com>, method=PLAIN, > rip=64.88.168.84, lip=83.170.65.xxx, TLS Sep 11 23:37:57 mail > dovecot: POP3(user(a)domain.com): Disconnected: Logged out top=0/0, > retr=75/4748674, del=0/183, size=14025971 Sep 12 00:04:11 mail > dovecot: pop3-login: Login: user=<user(a)domain.com>, method=PLAIN, > rip=64.88.168.84, lip=83.170.65.xxx, TLS Sep 12 00:04:26 mail > dovecot: POP3(user(a)domain.com): Disconnected: Logged out top=0/0, > retr=0/0, del=0/183, size=14025971 Sep 12 00:07:40 mail dovecot: > pop3-login: Login: user=<user(a)domain.com>, method=PLAIN, > rip=64.88.168.84, lip=83.170.65.xxx, TLS Sep 12 00:07:53 mail > dovecot: POP3(user(a)domain.com): Disconnected: Logged out top=0/0, > retr=0/0, del=0/183, size=14025971 > > > > If you're using the default pop3_uidl_format it'll rely on IMAP > UIDs > > to stay the same, and I guess it's possible that due to some other > > problem they change (that should be logged as an error/warning > > though). > > > > You could try setting pop3_uidl_format=%f, but it will cause > everyone > > to redownload mails. With newer Dovecot versions you could set > > pop3_save_uidl=yes and when you think everyone's downloaded mails > once > > you can safely change the pop3_uidl_format. > > Sorry, I'm very new to dovecot and I'm not sure I understand. I > presume because neither of those keys are in the dovecot -n output > that they are as the defaults, yes? The account is indeed accessed > by IMAP as well (from a mobile device mostly), but I don't see > anything fishy there either. How could I see if the IMAP UIDs have > changed? > > Sep 11 21:20:32 mail dovecot: IMAP(user(a)domain.com): Connection > closed bytes=1095/8292 > > Sep 11 21:26:03 mail dovecot: imap-login: Login: > user=<user(a)domain.com>, method=PLAIN, rip=174.252.83.244, > lip=83.170.65.xxx, TLS Sep 11 22:11:20 mail dovecot: > IMAP(user(a)domain.com): Disconnected for inactivity bytes=725/5638 Sep > 11 22:17:10 mail dovecot: imap-login: Login: user=<user(a)domain.com>, > method=PLAIN, rip=174.252.83.244, lip=83.170.65.xxx, TLS Sep 11 > 23:12:06 mail dovecot: IMAP(user(a)domain.com): Disconnected for > inactivity bytes=1471/11025 Sep 11 23:23:22 mail dovecot: imap-login: > Login: user=<user(a)domain.com>, method=PLAIN, rip=174.252.83.244, > lip=83.170.65.xxx, TLS Sep 11 23:52:52 mail dovecot: > IMAP(user(a)domain.com): Connection closed bytes=1841/13679 Sep 12 > 00:08:47 mail dovecot: imap-login: Login: user=<user(a)domain.com>, > method=PLAIN, rip=174.252.83.244, lip=83.170.65.xxx, TLS Sep 12 > 01:19:05 mail dovecot: imap-login: Login: user=<user(a)domain.com>, > method=PLAIN, rip=174.252.83.244, lip=83.170.65.xxx, TLS Sep 12 > 02:57:01 mail dovecot: IMAP(user(a)domain.com): Connection closed > bytes=2713/60026 Sep 12 02:57:01 mail dovecot: IMAP(user(a)domain.com): > Connection closed bytes=2688/18635 > > > There are no errors or warnings in the mail log (I have one shared > log file for postfix, amavis and dovecot). Reading the notes for > pop3_save_uidl it doesn't seem to be a dangerous option - should I > turn that on? Why will it force everyone to redownload mails > (there's nothing about it on the wiki)? > > Thanks! > > Simon Any help would be appreciated. Thanks. Simon

1 0

[Dovecot] quota percents
by Micah Anderson 13 Sep '11

13 Sep '11

I've noticed that http://wiki2.dovecot.org/Quota/Configuration is out of date, it says: plugin { quota = maildir:User quota quota_rule = *:storage=1GB # 10% of 1GB = 100MB quota_rule2 = Trash:storage=10%% # 20% of 1GB = 200MB quota_rule3 = Spam:storage=20%% } but if you use the '10%%' notation, dovecot complains, and *also* incorrectly: dovecot: imap(test(a)example.net): Warning: quota root mail quota rule Trash:bytes=10%: obsolete configuration for rule 'bytes=10%' should be changed to 'bytes=+10%' its incorrect because if you change it to what it suggests ('+10%') it wont work because that wont be 10% more, rather, it is set to bytes=+10: dovecot: imap(test(a)example.net): Debug: Quota rule: root=mail quota mailbox=Trash bytes=+10 messages=0 clearly, that isn't right... so I guess it needs to be changed to '+10%%', setting that provides: dovecot: imap(test(a)example.net): Debug: Quota rule: root=mail quota mailbox=* bytes=2211724 messages=0 dovecot: imap(test(a)example.net): Debug: Quota rule: root=mail quota mailbox=Trash bytes=+221172 (10%) messages=0 that seems ok, its saying the Trash mailbox is set to have 221172bytes (215 kilobytes) of quota. So, clearly http://wiki2.dovecot.org/Quota/Configuration needs to be updated. However, it doesn't seem to work in practice, because I have a user that is at 99% of quota, with nothing in the Trash who cannot move a 77KB message into the Trash without getting the quota_exceeded message and refusing to move it. so... how do I get this to work? thanks! micah --

2 4

[Dovecot] any drawbacks with using Mailbox sharing with symlinks???
by Maciek Jackowski 13 Sep '11

13 Sep '11

are there any drawbacks with using Mailbox sharing with symlinks??? based on: http://wiki.dovecot.org/SharedMailboxes/Symlinks I got virtual users with same permission unix user/group and didnt noticed any drawbacks yet but i want to ask

1 0

[Dovecot] Migrating a dovecot setup from one server to another
by James Carr 13 Sep '11

13 Sep '11

Hi All, I have a server with a dovecot + postfix setup and unfortunately the server is EOL'd. I have built a new ubuntu server out and I'm in the process of migrating everything over. In migrating the dovecot setup over, this is the list of items I have done: install dovecot, postfix, etc on the new server copy configuration files over copy /var/spool and /var/mail over Is there anything else I need to consider before switching MX records to point to the new server? Thanks, James

1 0

[Dovecot] imapc and imap_acl
by Lutz Preßler 13 Sep '11

13 Sep '11

Hello (Timo), yes, I know... maybe it's a bit far fetched, but I do have a use case. Would it be (reasonably easily) possible to implement IMAP ACL support for "imported" imapc namespaces/mailboxes? There is no local directory (like with the virtual plugin) yet... Greetings, Lutz -- Lutz Preßler <Lutz.Pressler(a)SerNet.DE> http://www.SerNet.DE/ SerNet Service Network GmbH, Bahnhofsallee 1b, D-37081 Göttingen Tel.: +49-551-370000-2, FAX: +49-551-370000-9 AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen

2 2

[Dovecot] Dovecot and Lustre FS
by Christian Gregoire 13 Sep '11

13 Sep '11

Hello, Right now, I'm using Exim and a customized version of an old (10 years old) Atmail POP3 server written in Perl, with ~10000 mailboxes located on a Lustre file system. So far so good. Though, I plan to migrate from Atmail to Dovecot, to provide our customers with IMAP support. Has anyone any experience with Dovecot on Lustre FS ? Thanks Christian

3 4

[Dovecot] Problem with configuring dovecot to take namespaces from database
by Marcin Mirosław 13 Sep '11

13 Sep '11

Hello! I'd like to set up dovecot to keep namespaces in database, keep more than one namespace per user. I try to create the simplest rule (even without tuple in db table) to get new namespace, unfortunately it doesn't work. My user_query is: SELECT '/dane/domeny/%d/mail/%n/' as home, dovecot_typ_skrzynki ||':'|| '/dane/domeny/%d/mail/%n/' ||'.'|| dovecot_typ_skrzynki as mail_location, '*:bytes='||quota_mb||'M' as quota_rule , 'test33/location=mdbox:~/.mdbox/test33/' as "namespace/test3/prefix" In debug log i'm getting: Debug: master out: USER#0111#011user@examle.com#011home=/dane/domeny/mejor.pl/mail/marcin/#011mail_location=maildir:/dane/domeny/mejor.pl/mail/marcin/.maildir#011quota_rule=*:bytes=0M#011namespace/test3/prefix=test33/location=mdbox:~/.mdbox/test33/ If i knew how it should look like the line in auth debug log for working configuration it could be easier for me to write correct sql query. May i please for advice?

2 12

[Dovecot] MySQL, map files
by Steve Fatula 13 Sep '11

13 Sep '11

I'll try and break up my questions the other day about extdata that went unanswered into pieces in the hopes it will be more specific and clear. In general, I am trying to figure out the syntax of the map statement and what is allowed in that statement. So, by map statement, I mean for example perhaps the dovecot-dict-expire.conf.ext file as shown in the doc. Is the syntax the same for the various types of files (quota vs expire)? Is there syntax to allow the specification of a different key? If so, where is this documented. I have an existing table I want to use, not the table shown in the doc. The reason I am asking is I have seen web pages that reference all sorts of statements within the map statement, and I have no idea where they are documented. Specifically, I see an example here (which is LDAP), look in section 3: http://dovecot.org/patches/1.2/ldap/HOWTO_dictldap+extdata.txt You will see lots of statements, not sure which ones can be used for MySQL (instead of LDAP). So, would like to find a list of ALL valid syntax within the map.

2 4

[Dovecot] 2.1: imapc SUBSCRIBE problem
by Lutz Preßler 13 Sep '11

13 Sep '11

On Fri, 09 Sep 2011, Lutz Preßler wrote: > LIST is now working correctly in my setup, but SUBSCRIBE ist not. > With subscriptions=no, as written (but same behaviour with subscriptions=yes), > SUBSCRIBE INBOX.gmail.INBOX (or others) yields > 0 NO [SERVERBUG] Internal error occurred. Refer to server log for more information. [2011-09-09 16:39:40] > logging (with mail_debug=yes) only > Sep 9 16:39:40 host dovecot: imap(1143, user): Error: stat((null)) failed: Bad address After putting (with subscriptions=no) an entry manually into the root subscriptions file, everything including UNSUBSCRIBE works fine. Lutz

2 5

Re: [Dovecot] director ignoring director_mail_servers for lmtp connections
by mailing lists 13 Sep '11

13 Sep '11

Hello, it works!! I was missing this line "auth_socket_path = director-userdb" Sep 13 10:26:12 imap1 dovecot: auth: Debug: master in: PASS 1 user001(a)example.com service=lmtp lip=100.180.245.101 lport=1024 8 Sep 13 10:26:12 imap1 dovecot: auth: Debug: static(user001(a)example.com,100.180.242.38): lookup Sep 13 10:26:12 imap1 dovecot: auth: Debug: password(user001(a)example.com,100.180.242.38): Credentials: Sep 13 10:26:12 imap1 dovecot: auth: Debug: master out: PASS 1 user=user001(a)example.com proxy port=24 Sep 13 10:26:12 imap1 dovecot: lmtp(29659): Debug: auth input: user=user001(a)example.com proxy port=24 host=100.180.245.101 proxy_refresh=450 Sep 13 10:26:12 imap1 dovecot: lmtp(29658): Debug: none: root=, index=, control=, inbox=, alt= Sep 13 10:26:12 imap1 dovecot: lmtp(29658): Connect from 100.180.245.101 full config for the archives: # dovecot -c /etc/dovecot-director/dovecot.conf -n # 2.0.14: /etc/dovecot-director/dovecot.conf # OS: Linux 2.6.34.7-0.7-xen x86_64 openSUSE 11.3 (x86_64) auth_debug = yes auth_debug_passwords = yes auth_verbose = yes auth_verbose_passwords = plain base_dir = /var/run/dovecot-director/ director_mail_servers = 100.180.245.101 director_servers = 100.180.245.101 disable_plaintext_auth = no lmtp_proxy = yes mail_debug = yes mail_fsync = always mail_gid = 5000 mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = acl mail_uid = 5000 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy ine mmap_disable = yes passdb { args = proxy=y nopassword=y driver = static } plugin { acl = vfile sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap lmtp service auth { unix_listener auth-userdb { group = vmail mode = 0666 user = vmail } } service director { fifo_listener login/proxy-notify { mode = 0666 } inet_listener { port = 9090 } unix_listener director-userdb { mode = 0666 } unix_listener login/director { mode = 0666 } } service imap-login { executable = imap-login director inet_listener imap { port = 10143 } } service lmtp { inet_listener lmtp { port = 1024 } } ssl = no verbose_proctitle = yes protocol lmtp { auth_socket_path = director-userdb passdb { args = proxy=y nopassword=y port=24 driver = static } } protocol imap { mail_max_userip_connections = 100 }

1 0

[Dovecot] Quota fs (don't start script quota-warning.sh)
by Peter Ignatov 13 Sep '11

13 Sep '11

Hi, # doveadm -Dv quota get -u pit doveadm(pit): Debug: auth input: pit system_groups_user=pit uid=500 gid=500 home=/home/pit doveadm(pit): Debug: Effective uid=500, gid=500, home=/home/pit doveadm(pit): Debug: Quota root: name=INBOX backend=fs args=mount=/var/spool/mail doveadm(pit): Debug: Quota rule: root=INBOX mailbox=* bytes=19922944 messages=0 doveadm(pit): Debug: Quota warning: bytes=3984588 (20%) messages=0 reverse=no command=quota-warning 20 pit doveadm(pit): Debug: fs: root=/home/pit/mail, index=, control=, inbox=/var/spool/mail/pit doveadm(pit): Debug: fs quota add mailbox dir = /var/spool/mail doveadm(pit): Debug: fs quota block device = /dev/mapper/mpath1p1 doveadm(pit): Debug: fs quota mount point = /var/spool/mail doveadm(pit): Debug: fs quota mount type = ext2 Quota name Type Value Limit % INBOX STORAGE 4824 19456 24 But don't start script quota-warning.sh: #!/bin/sh PERCENT=$1 USER=$2 cat << EOF | /usr/libexec/dovecot/dovecot-lda -d $USER -o "plugin/quota=fs:INBOX:mount=/var/spool/mail:noenforcing" From: postmaster(a)domen.org Subject: quota warning Your mailbox is now $PERCENT% full. EOF #dovecot -n # 2.0.13: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-274.3.1.el5.asp121 x86_64 Red Hat Enterprise Linux Server release 5.6 (Tikanga) disable_plaintext_auth = no listen = * log_path = /var/log/dovecot.log mail_debug = yes mail_location = mbox:~/mail:INBOX=/var/spool/mail/%u mail_plugins = quota mail_privileged_group = mail mbox_write_locks = fcntl passdb { driver = pam } plugin { quota = fs:INBOX:mount=/var/spool/mail quota_rule = *:storage=19456 quota_warning = storage=20%% quota-warning 20 %u } protocols = pop3 service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { mode = 0666 } user = root } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } verbose_proctitle = yes protocol lda { mail_plugins = quota } protocol imap { mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota }

2 1

Re: [Dovecot] director ignoring director_mail_servers for lmtp connections
by mailing lists 13 Sep '11

13 Sep '11

On 09/13/2011 08:34 AM, Jan-Frode Myklebust wrote: > On Mon, Sep 12, 2011 at 04:55:51PM +0100, mailing lists wrote: >> >> director_mail_servers = 101.180.245.101 >> director_servers = 101.180.245.101 it works with imap connections, so I assumed it also would do it for lmtp. Sep 13 09:04:03 imap1 dovecot: imap-login: proxy(user001): started proxying to 10.180.245.101:143: user=<user001>, method=PLAIN, rip=::1, lip=: :1, secured > Is this a loop maybe? director_mail_servers should list all > your backend dovecot servers, space separated. Here's mine: > > director_mail_servers = 192.168.42.7 192.168.42.8 192.168.42.9 192.168.42.10 192.168.42.11 192.168.42.28 192.168.42.29 using only one director and backend would be fine for tests purposes (as it was with imap and not loops were formed) What I don't understand is why director insists in providing a proxy host from passdb when all it needs to do is pick the ones in director_mail_servers ¿? Sep 12 17:14:13 imap1 dovecot: lmtp(25682): Error: proxy: host not given please could you post you lmtp configuration??

1 0

[Dovecot] director ignoring director_mail_servers for lmtp connections
by mailing lists 13 Sep '11

13 Sep '11

Hello, Following Jan-Frode's advise I am trying this configuration: {postfix} ---lmtp---> {director} ---lmtp---> {dovecot} so I have two dovecot instances for director/proxy and lmtp delivery on ports 1024 and 24 respectively. whilst for imap connections I can specify a pool of imap backend servers via 'director_mail_servers' it seems is not possible with lmtp. Sep 12 17:14:13 imap1 dovecot: auth: Debug: master in: PASS 1 user001(a)example.com service=lmtp lip=::1 lport=1024 rip=::1 rpor5 Sep 12 17:14:13 imap1 dovecot: auth: Debug: static(user001@example.com,::1): lookup Sep 12 17:14:13 imap1 dovecot: auth: Debug: password(user001@eexample.com,::1): Credentials: Sep 12 17:14:13 imap1 dovecot: auth: Debug: master out: PASS 1 user=user001(a)example.com proxy port=24 Sep 12 17:14:13 imap1 dovecot: lmtp(25682): Debug: auth input: user=user001(a)example.com proxy port=24 Sep 12 17:14:13 imap1 dovecot: lmtp(25682): Error: proxy: host not given Sep 12 17:14:13 imap1 dovecot: lmtp(25682): Debug: Loading modules from directory: /usr/lib64/dovecot/modules Sep 12 17:14:13 imap1 dovecot: lmtp(25682): Debug: Module loaded: /usr/lib64/dovecot/modules/lib01_acl_plugin.so Sep 12 17:14:13 imap1 dovecot: auth: Debug: master in: USER 2 user001(a)example.com service=lmtp lip=::1 rip=::1 Sep 12 17:14:13 imap1 dovecot: auth: Debug: static(user001@example.com,::1): lookup Sep 12 17:14:13 imap1 dovecot: auth: Debug: password(user001@example.com,::1): Credentials: Sep 12 17:14:13 imap1 dovecot: auth: Debug: master out: USER 2 user001(a)example.com Sep 12 17:14:13 imap1 dovecot: lmtp(25682): Debug: auth input: user001(a)example.com Sep 12 17:14:43 imap1 dovecot: lmtp(25682): Disconnect from ::1: Client quit (in RCPT TO) how I can redirect incoming lmtp request to backend lmtp servers (and not just one)? what I'm missing here? /----------/ # dovecot -c /etc/dovecot-director/dovecot.conf -n # 2.0.14: /etc/dovecot-director/dovecot.conf # OS: Linux 2.6.34.7-0.7-xen x86_64 openSUSE 11.3 (x86_64) auth_debug = yes auth_debug_passwords = yes auth_verbose = yes auth_verbose_passwords = plain base_dir = /var/run/dovecot-director/ director_mail_servers = 101.180.245.101 director_servers = 101.180.245.101 disable_plaintext_auth = no lmtp_proxy = yes mail_debug = yes mail_fsync = always mail_gid = 5000 mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = acl mail_uid = 5000 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mmap_disable = yes passdb { args = proxy=y nopassword=y driver = static } plugin { acl = vfile sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap lmtp service auth { unix_listener auth-userdb { group = vmail mode = 0666 user = vmail } } service director { fifo_listener login/proxy-notify { mode = 0666 } inet_listener { port = 9090 } unix_listener director-userdb { mode = 0666 } unix_listener login/director { mode = 0666 } } service imap-login { executable = imap-login director inet_listener imap { port = 10143 } } service lmtp { inet_listener lmtp { port = 1024 } } ssl = no verbose_proctitle = yes protocol lmtp { passdb { args = proxy=y nopassword=y port=24 driver = static } } protocol imap { mail_max_userip_connections = 100 }

2 1

[Dovecot] signal 11 crash, sometimes, during mbox bz2 decompression
by Mike Brown 13 Sep '11

13 Sep '11

Hello again, I'm running dovecot 1.2.16 from the ports collection on FreeBSD 8.1-STABLE, amd64. To enable IMAP read-only access to gzip or bzip2 compressed mbox files, I added the following to my dovecot.conf, in the protocol imap { ... } section: mail_plugins = zlib My compressed mbox files are all .bz2 files in an 'old' subdirectory of my main mail directory. I am trying to access them with Thunderbird. I 'subscribed' to them just fine, and at first I thought it was working, but I just got lucky on the first couple I accessed. Dovecot actually fails to decompress them about 90% of the time, seemingly at random; the same box will not work a bunch of times, then work once, then not work again and again. When it works, sometimes only some of the messages get transmitted. Most of the failures are accompanied by this pair of messages in my log: Aug 16 00:25:33 myhost dovecot: dovecot: child 943 (imap) killed with signal 11 (core not dumped - set mail_drop_priv_before_exec=yes) Aug 16 00:25:33 myhost kernel: pid 943 (imap), uid 1001: exited on signal 11 Some of the failures have only the "exited on signal 11" message. The very first failure had this: Aug 16 00:22:47 myhost dovecot: IMAP(mike): Next message unexpectedly lost from mbox file (read-only mbox stream) at 2761 (cached) Aug 16 00:22:47 myhost dovecot: IMAP(mike): read(mail, uid=2) failed: Invalid argument Is this a problem with dovecot? Let me know if/how I can help, or what other info you need. Thanks, Mike

2 4

[Dovecot] two little fixes for 2.0.14
by Mike Abbott 13 Sep '11

13 Sep '11

--- a/dovecot/src/lib-index/mail-index-view.c +++ b/dovecot/src/lib-index/mail-index-view.c @@ -9,7 +9,7 @@ void mail_index_view_clone(struct mail_index_view *dest, const struct mail_index_view *src) { - memset(dest, 0, sizeof(dest)); + memset(dest, 0, sizeof(*dest)); dest->refcount = 1; dest->v = src->v; dest->index = src->index; --- a/dovecot/src/lib-storage/mail-storage-service.c +++ b/dovecot/src/lib-storage/mail-storage-service.c @@ -870,7 +870,7 @@ } user = p_new(user_pool, struct mail_storage_service_user, 1); - memset(user_r, 0, sizeof(user_r)); + memset(user_r, 0, sizeof(*user_r)); user->pool = user_pool; user->input = *input; user->input.userdb_fields = NULL;

2 1

[Dovecot] Custom error messages.
by Lauro C. 12 Sep '11

12 Sep '11

I am using Dovecot 1.2.9. Is it possible to have custom error messages? I want to translate some of the messages (for instance mailbox full), so it can be more user friendly. I already use the quota warning feature. But I need to translate the messages anyways, is it possible? Lauro

2 1

[Dovecot] Possible to Customize File Naming Scheme?
by Dave Stubbs 12 Sep '11

12 Sep '11

Hello all, [Sorry if this has been covered already - I searched back a little way in the archive and didn't find anything recent on the topic.] I'm wondering if it is possible to customize the way dovecot creates or modifies filenames in the maildir directories? I'm watching how my mail system works, and I see that procmail creates a new file in the <folder>/new directory, each time an email is received. This file is some complex combination of UIDs and things, suffixed by the server name. So far, the filename has alphanumerics, a couple underscores, and a dot or two only. But once dovecot gets it's hands on the file and moves it to the <folder>/cur directory, it starts doing "terrible" things to the file name. Now, the filename starts to have "evil" things in it, like colons and commas. Is there a way to change this? I'm asking this primarily because I use dovecot as a massive long-term email archiving system. One of the things one needs to be able to do when running a long-term archive like this is keep things as simple and accessible as possible. The reason I use maildir is that I totally buy into the "one email, one file" idea - it means I don't have to store messages in big consolidated database files that are changeable with each new version of the vendor's software release (such as exchange DBs or Outlook PST files) or that are horrible performers (such as mbox). One of the nice things about the maildir "each email is a separate file" idea is that you are not limited to maildir or dovecot or any other piece of software to handle, read, and process the files. For instance, I would like to backup my maildir by using rsync to synchronize my dovecot-managed maildir to a Windows server running NFS. From there the files are synchronized via Windows DFS ( to which there is no open source solution that is even close) to several other servers around the continent. Only thing: The evil commas and colons in the filenames are anathema to Windows. So instead I tar the maildir folders to tgz files on the windows server, and the tgz's are synchronized to other DR sites. If I could do without the need for tar (mandated solely because of the colons and commas in the dovecot filename scheme) I could minimize the time to backup (only synchronizing changes) and suddenly I would have a lot of other benefits opened up. One simple one would be that if I could configure dovecot to append the .eml extension to the end of every file (technically each file in a maildir is an eml file regardless of the extension being present or not - eml is just a raw mail file just like what you'd find in a maildir) I would have instant access to them using Search Server Express, which can read eml files but strongly prefers to use extentions to recognize files as such. To be clear: I'm not requesting that dovecot's file naming convention be changed to match my quirky requirements - I'm just asking if it could be made configurable, so I could change it to match my needs and others could change it to match theirs. In the interests of REALLY being able to use the elegantly simple idea of each mail being a separate file, I'm trying to get more out of that great pile of folders and files I'm amassing in my mail archive server. The more use I can make of them with other software other than dovecot (i.e. data crawling, indexing, easy recovery in a catastrophe, etc) the more valuable this format is. Is this possible?

3 4

[Dovecot] How to get rid of sub-folders ?
by Spyros Tsiolis 12 Sep '11

12 Sep '11

Hello, OK, no answers on my previous e-mail. I'll rephrase it. How can I get rid of subfolders on a users' tree-like structure on dovecot ? Which file must I "touch" ? TIA, s. ---- "I merely function as a channel that filters music through the chaos of noise" - Vangelis

2 2

[Dovecot] userdb static & Quota from LDAP?
by Christian Schmidt 12 Sep '11

12 Sep '11

Hi all, I just configured Dovecot 2.0.14 for "virtual" (i.e. non-system-) users: passdb { driver = ldap args = /etc/dovecot/conf.d/ldap-passdb.ext } userdb { driver = static args = uid=vmail gid=vmail home=/var/maildir/%u } Works fine so far - thanks for this great piece of software, Timo!!! Now I'd like to add per-user quotas that will also be stored in the LDAP directory, and I'm not sure how to put things together. IMHO quota is the only "userdb information" requested from LDAP, and I'd like to leave all the other "userdb pieces" as the are. I changed the userdb definition to: userdb { driver = ldap args = /etc/dovecot/conf.d/ldap-userdb.ext } My /etc/dovecot/conf.d/ldap-userdb.ext contains (along other lines): user_attrs = uid=vmail,gid=vmail,home=/var/maildir/%u,mailQuota=quota=quota_rule=*:storage=%$ My quota configuration looks like this: plugin { quota = maildir:Mailbox-Quota quota_rule = *:storage=1G quota_warning = storage=80%% /usr/local/bin/quotawarn.sh 80 %u quota_warning2 = storage=95%% /usr/local/bin/quotawarn.sh 95 %u } Using this setup, "doveadm quota get -u username" doesn't reveal any quota information (except from the "headings"). Instead, dovecot logs: doveadm(username): Fatal: GID 0 isn't permitted When switching back to userdb static, I receive the correct (but also) static quota information. What am I doing wrong? Thank you very much, Christian Schmidt -- question = ( to ) ? be : ! be; -- Wm. Shakespeare

3 2

[Dovecot] Attacking Dovecot
by Nikos Papadopoulos 12 Sep '11

12 Sep '11

Hello, I am using Dovecot ver.1.0.7 on an x86 server with RedHat Linux Enterprise 5 and the following configuration: # 1.0.7: /etc/dovecot.conf protocols: pop3 login_dir: /var/run/dovecot/login login_executable: /usr/libexec/dovecot/pop3-login mail_location: mbox:~/mail:INBOX=/var/mail/%u mail_executable: /usr/libexec/dovecot/pop3 mail_plugin_dir: /usr/lib/dovecot/pop3 pop3_client_workarounds: outlook-no-nuls oe-ns-eoh auth default: passdb: driver: pam userdb: driver: passwd It seems that my mail server is being attacked by someone who tries to retrieve users' credentials. Please read below an output of logwatch. dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user sandra dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user tanya dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user tanya dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user dark dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user dark dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user gibson dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user frank dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user frank Besides, some of the local users receive "spam" emails, which seem to be sent by another local user. Please assist me on how to prevent the aforementioned attack. Best Regards, Nikos

3 2

[Dovecot] dovecot 2.0.12: mdbox & quota=dirsize
by Роман Захров 12 Sep '11

12 Sep '11

#doveconf -v ...................... quota = dirsize:User quota quota_debug = yes quota_exceeded_message = message quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u ............................ # du --max-depth=1 -h 311M ./storage 20K ./sieve 7,8M ./mailboxes 319M . # doveadm quota get -u myuser Quota name Type Value Limit % User quota STORAGE 7948 399360 2 # then i change ./dovecot-2.0.12/src/plugins/quota/quota-dirsize.c 165-- </span>path = mailbox_list_get_path(namespaces[i]->list, NULL, 166-- MAILBOX_LIST_PATH_TYPE_MAILBOX); 165++ </span>path = mailbox_list_get_path(namespaces[i]->list, NULL, 166++ MAILBOX_LIST_PATH_TYPE_DIR); # doveadm quota get -u myuser Quota name Type Value Limit % User quota STORAGE 325885 399360 81 #

3 2

Re: [Dovecot] Mails repopping
by Simon Brereton 12 Sep '11

12 Sep '11

> -----Original Message----- > From: dovecot-bounces(a)dovecot.org [mailto:dovecot- > bounces(a)dovecot.org] On Behalf Of Simon Brereton > > -----Original Message----- > > From: Timo Sirainen [mailto:tss@iki.fi] On Fri, 2011-09-09 at 13:07 > > -0400, Simon Brereton wrote: > > > > > I have a server that's been running Courier for about 6 years and > > in > > > all that time I think I've only ever had 1 issues where an entire > > mail > > > box was repopped by a webmail client. However, since moving to a > > new > > > server and dovecot 4 weeks ago, I've now had the webmail client > > repop > > > this account 4 times (there are about 230 mails in the account). > > > > > > Is there a setting I need to tighten to prevent/remedy this? I > > have > > > no idea if it's happening on other accounts, but this is one that > I > > > see. The format is maildir. There has been no changes to the > > webmail > > > client. > > > > dovecot -n output would have been nice. Also do you see anything in > > error logs? > > Ah. My apologies of course. Here it is.. > > mail:~# dovecot -n > # 1.2.15: /etc/dovecot/dovecot.conf > # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.2 ext3 I've only just noticed that installing from apt-get on Debian 64-bit installs Dovecot 1.2 - does anyone know when 2.x will be available via apt? Simon

1 0

Re: [Dovecot] Mails repopping
by Timo Sirainen 12 Sep '11

12 Sep '11

On Fri, 2011-09-09 at 13:07 -0400, Simon Brereton wrote: > I have a server that's been running Courier for about 6 years and in > all that time I think I've only ever had 1 issues where an entire mail > box was repopped by a webmail client. However, since moving to a new > server and dovecot 4 weeks ago, I've now had the webmail client repop > this account 4 times (there are about 230 mails in the account). > > Is there a setting I need to tighten to prevent/remedy this? I have > no idea if it's happening on other accounts, but this is one that I > see. The format is maildir. There has been no changes to the webmail > client. dovecot -n output would have been nice. Also do you see anything in error logs? If you're using the default pop3_uidl_format it'll rely on IMAP UIDs to stay the same, and I guess it's possible that due to some other problem they change (that should be logged as an error/warning though). You could try setting pop3_uidl_format=%f, but it will cause everyone to redownload mails. With newer Dovecot versions you could set pop3_save_uidl=yes and when you think everyone's downloaded mails once you can safely change the pop3_uidl_format.

2 1

[Dovecot] Dsync and hidden files
by Dick Middleton 12 Sep '11

12 Sep '11

Hi, I'm in the process of changing from Dovecot v1 to v2 and changing to mdbox in the process. I've come across a little problem which I was hoping there would be a workaround for. There are sieve config files in the home directories which are hidden files. Dsync croaks when it finds one of these because they are not mbox format. It would be nice if they were ignored (or copied unchanged). Is there another way to deal with them other than by deleting thm? Dick

2 2

[Dovecot] problem migrating from maildir to dbox
by Ramón Frontera 12 Sep '11

12 Sep '11

Hello, we want to migrate Mail folders from Maildir to dbox without downtime. We change the mail_location to dbox in 10-mail.conf and restart dovecot. After that we use dsync -u user mirror maildir:~/Maildir. The problem is that if INBOX exists the dsync create a new folder with name like b5893c0a93ff694e551200002dfa3112 Can I migrate to the existing INBOX? or How can I merge the 2 INBOX folders? Thanks for your help! Regards, -- Ramon

3 7

[Dovecot] general advice sought
by Alan Brown 12 Sep '11

12 Sep '11

I'd like to hear the thoughts of list members on which type of storage method seems "best" for inboxes and for folders. The filesystem is GFS2 and for various reasons I can't change it. Inboxes - currently Mbox format. Some users have upwards of 5000 messages in there (the largest is about 18k entries) and thanks to attachments some inboxes are 40-200Mb with a few sitting at 2-3Gb. (Suicidal, I know but enforcing rules is politik-laden and getting academics to behave sensibly is like herding cats) Folders: Mdir format. Thanks to GFS2 filesystem limitations(*) I'm currently enforcing a limit of 4000 messages/folder. It'd be nice to have a "better" way of storing these which doesn't drive up backup loads tremendously. The mail spool has around 6 million files in the folders, covering about 400Gb. GFS2 filesystem limitations are painful. While there are no hard limits, It really doesn't cope well with a lot of files in any given directory thanks to limitations in the way that cluster locking is propagated, There are marked slowdowns about 100 files, this becomes awful above 1000 and effectively unusable above about 8000 entries as the entire IO system gets halted momentarily when such directories are opened and the directory may take up to 5 minutes to return a "ls" result. Some users had upwards of 80k files in their mail folders (~40k messages) and accessing these brought the entire system to a halt. If I migrate to other formats (eg mdbox), then it needs to be able to be done on the fly. (Taking the mailservers down for a day won't go down well, even an hour raises howls). Any suggestions?

2 1

[Dovecot] 2.1: imapc LIST problem / usage question
by Lutz Preßler 12 Sep '11

12 Sep '11

----- Forwarded message from SerNet Support Lutz Preßler <support(a)SerNet.DE> ----- From: SerNet Support Lutz Preßler <support(a)SerNet.DE> Subject: 2.1: imapc LIST problem / usage question To: dovecot(a)dovecot.org Date: Fri, 9 Sep 2011 12:00:46 +0200 Organization: SerNet Service Network GmbH Hello, 2.1.alpha1 (latest Debian auto build on amd64) As a test, namespace for gmail integration set up by userdb with userdb_namespace=gmail userdb_namespace/gmail/list=yes userdb_namespace/gmail/subscriptions=no userdb_namespace/gmail/separator=. userdb_namespace/gmail/prefix=INBOX.gmail. userdb_namespace/gmail/location=imapc: userdb_imapc_host=imap.gmail.com userdb_imapc_user=ixxxxx(a)gmail.com userdb_imapc_password=xxxxx userdb_imapc_ssl=imaps userdb_imapc_ssl_ca_dir=/etc/ssl/certs userdb_imapc_port=993 (but having the namespace set up in config file makes no difference). This works in principle. I can e.g. 0 select "INBOX.gmail.[Gmail].Alle Nachrichten" * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft \*)] Flags permitted. * 31 EXISTS * 0 RECENT * OK [UNSEEN 1] First unseen. * OK [UIDVALIDITY 1] UIDs valid * OK [UIDNEXT 19689] Predicted next UID * OK [NOMODSEQ] No permanent modsequences 0 OK [READ-WRITE] Select completed. and even use the gmail mailboxes within dovecot-virtual files! But: LIST seems broken: 0 list "" "*" * LIST (\HasChildren) "." "INBOX" * LIST (\HasNoChildren) "." "INBOX.privat" * LIST (\HasChildren) "." "INBOX.test" * LIST (\HasNoChildren) "." "INBOX.test.test2" * LIST (\HasNoChildren) "." "INBOX.Trash" * LIST (\HasNoChildren) "." "INBOX.in2009" [...] * LIST (\Noselect \HasChildren) "." "INBOX.gmail" * LIST (\HasNoChildren) "." "Arbeit" * LIST (\HasNoChildren) "." "Belege" * LIST (\HasNoChildren) "." "Privat" * LIST (\HasNoChildren) "." "Reisen" * LIST (\Noselect \HasNoChildren) "." "[Gmail]" * LIST (\HasNoChildren) "." "[Gmail]/Alle Nachrichten" * LIST (\HasNoChildren) "." "[Gmail]/Entw&-APw-rfe" * LIST (\HasNoChildren) "." "[Gmail]/Gesendet" * LIST (\HasNoChildren) "." "[Gmail]/Markiert" * LIST (\HasNoChildren) "." "[Gmail]/Papierkorb" * LIST (\HasNoChildren) "." "[Gmail]/Spam" * LIST (\HasNoChildren) "." "[Gmail]/Wichtig" * LIST (\HasChildren) "." "INBOX.virtual" * LIST (\HasNoChildren) "." "INBOX.virtual.week" * LIST (\HasNoChildren) "." "INBOX.virtual.sent" * LIST (\HasNoChildren) "." "INBOX.virtual.allin" 0 OK List completed. For the Gmail mailboxe the INBOX.gmail prefix is missing and / is used as separator. Second question: Is there a way to include multiple imapc instances/ namespaces with e.g. different destinations servers? I don't see how because imapc_* parameters seem to be global (now), but it would be a very useful feature. Greetings, Lutz

2 5

[Dovecot] Read-only mbox files
by Tim Bishop 12 Sep '11

12 Sep '11

Hi all, I'm using Dovecot 1.2.16 (I can upgrade to 2.0 if need be) and I'm having trouble stopping Dovecot from modifying mbox files. The setup is that my main namespace points at my Maildir mail folders. In addition to this I have a second namespace that points at some old archived mbox folders. I rarely need to access these folders, but when I do Dovecot modifies the files (adding UID headers, etc). What I'd like to do is make it so that Dovecot can't change these files. I thought there might be a setting to mark a mail_location as read-only, but I can't find anything like that. I've looked at ACLs too, but they seem to be more about user access that what Dovecot can do to files. I could just do this at the filesystem level, but I'd feel a bit happier about working with Dovecot rather than trying to work around it. Does anyone have any suggestions? Thank you for reading. Tim. -- Tim Bishop http://www.bishnet.net/tim/ PGP Key: 0x5AE7D984

2 1

[Dovecot] setacl on complete mailbox
by Tobias Hachmer 12 Sep '11

12 Sep '11

Hi List, how can I grant a user full control on another mailbox (the complete mailbox with all folder and subfolders). With the setacl command I could do this but first I have to list all folders and then I have to do one setacl command for each folder. Is there a command to this in one line? Also for new created folders? Greetz, Tobias

2 1

[Dovecot] NO Unknown subscription namespace.
by mailing lists 12 Sep '11

12 Sep '11

Hello, what this message means? "NO Unknown subscription namespace." the shared namespace is visible and I can fetch messages from it, but subscription fails with the above message. (user002 is sharing the folder named docs-users002 with user user001) # telnet localhost 143 Trying ::1... Connected to localhost. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN] Dovecot ready. . login user001 secret . OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS ACL RIGHTS=texk] Logged in . list "shared." "*" * LIST (\Noselect \HasChildren) "." "shared.user002" . OK List completed. . list "shared.user002." "*" * LIST (\HasNoChildren) "." "shared.user002.docs-user002" . OK List completed. . list "shared.user002.docs-user002." "*" . OK List completed. . select "shared.user002.docs-user002" * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft)] Flags permitted. * 2 EXISTS * 0 RECENT * OK [UIDVALIDITY 1315765265] UIDs valid * OK [UIDNEXT 3] Predicted next UID * OK [HIGHESTMODSEQ 3] Highest . OK [READ-WRITE] Select completed. . fetch 1 all * 1 FETCH (FLAGS (\Seen) INTERNALDATE "24-Nov-2009 11:58:34 +0100" RFC822.SIZE 3734 ENVELOPE ("Tue, 24 Nov 2009 07:58:34 -0400 (AST)" "Thank you for registering for the Red Hat Virtual Experience" (("support(a)virtualevents365.com" NIL "support" "virtualevents365.com")) (("support(a)virtualevents365.com" NIL "support" "virtualevents365.com")) (("support(a)virtualevents365.com" NIL "support" "virtualevents365.com")) (("damocles-(a)hotmail.com" NIL "damocles-" "hotmail.com")) NIL NIL NIL "<6955854.2731259063914762.JavaMail.root(a)app130.vs.int.cgsinc.ca>")) . OK Fetch completed. . subscribe "shared.user002.docs-user002" . NO Unknown subscription namespace. . logout * BYE Logging out . OK Logout completed. Connection closed by foreign host. /----------------/ namespace { inbox = yes location = prefix = INBOX. separator = . subscriptions = yes } namespace { list = yes location = maildir:/var/virtual-maildir/%%n prefix = shared.%%n. separator = . subscriptions = no type = shared }

2 1

[Dovecot] Quota fs (ignore mount)
by Peter Ignatov 12 Sep '11

12 Sep '11

>> Well .. I'm not entirely sure if the current behavior is good or not, but what you need to do to get it working is to add two quota roots. One for /home/pit/mail (i.e. without specifying mount=) and another for the INBOX's /var/spool/mail. > Don't work... :-( After I installed version 2.0.13 - mount is correct: # doveadm -Dv quota get -u pit doveadm(pit): Debug: auth input: pit system_groups_user=pit uid=500 gid=500 home=/home/pit doveadm(pit): Debug: Effective uid=500, gid=500, home=/home/pit doveadm(pit): Debug: Quota root: name=INBOX backend=fs args=mount=/var/spool/mail doveadm(pit): Debug: Quota rule: root=INBOX mailbox=* bytes=19922944 messages=0 doveadm(pit): Debug: Quota warning: bytes=3984588 (20%) messages=0 reverse=no command=quota-warning 20 pit doveadm(pit): Debug: fs: root=/home/pit/mail, index=, control=, inbox=/var/spool/mail/pit doveadm(pit): Debug: fs quota add mailbox dir = /var/spool/mail doveadm(pit): Debug: fs quota block device = /dev/mapper/mpath1p1 doveadm(pit): Debug: fs quota mount point = /var/spool/mail doveadm(pit): Debug: fs quota mount type = ext2 Quota name Type Value Limit % INBOX STORAGE 4824 19456 24 But now don't work script quota-warning.sh: #!/bin/sh PERCENT=$1 USER=$2 cat << EOF | /usr/libexec/dovecot/dovecot-lda -d $USER -o "plugin/quota=fs:INBOX:mount=/var/spool/mail:noenforcing" From: postmaster(a)domen.org Subject: quota warning Your mailbox is now $PERCENT% full. EOF #dovecot -n # 2.0.13: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-274.3.1.el5.asp121 x86_64 Red Hat Enterprise Linux Server release 5.6 (Tikanga) disable_plaintext_auth = no listen = * log_path = /var/log/dovecot.log mail_debug = yes mail_location = mbox:~/mail:INBOX=/var/spool/mail/%u mail_plugins = quota mail_privileged_group = mail mbox_write_locks = fcntl passdb { driver = pam } plugin { quota = fs:INBOX:mount=/var/spool/mail quota_rule = *:storage=19456 quota_warning = storage=20%% quota-warning 20 %u } protocols = pop3 service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { mode = 0666 } user = root } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } verbose_proctitle = yes protocol lda { mail_plugins = quota } protocol imap { mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota }

1 0

[Dovecot] Sieve envelope :detail "to" "xxx" does not deliver to fileinto destination
by Aleksandar Lazic 11 Sep '11

11 Sep '11

Dear Listmember. I try to migrate from my current courier-mta setup fo postfix dovecot setup. I use the following scirpt to filter to the destination mailbox. ### /var/vmail/none.at/al/sieve/lists.sieve require ["fileinto", "subaddress", "envelope" ]; if envelope :detail "to" "pdnsusers" { fileinto "Lists.pdnsusers"; } ### postfix/master ### dovecot unix - n n - - pipe flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/deliver -f ${sender} -d ${user}@${nexthop} -a ${original_recipient} # flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/deliver -f ${sender} -d ${user}@${nexthop} -m ${extension} -a ${original_recipient} ### Log ### Sep 11 21:47:48 lvps46-163-74-15 postfix/smtpd[7788]: connect from Sep 11 21:48:12 lvps46-163-74-15 postfix/smtpd[7788]: 495EF9FECAF9: Sep 11 21:48:27 lvps46-163-74-15 postfix/cleanup[7795]: 495EF9FECAF9: message-id=<> Sep 11 21:48:27 lvps46-163-74-15 postfix/qmgr[7785]: 495EF9FECAF9: from=<al(a)bitrace.net>, size=268, nrcpt=1 (queue active) Sep 11 21:48:27 lvps46-163-74-15 dovecot: lda: Debug: Loading modules from directory: /usr/lib/dovecot/modules Sep 11 21:48:27 lvps46-163-74-15 dovecot: lda: Debug: Module loaded: /usr/lib/dovecot/modules/lib90_sieve_plugin.so Sep 11 21:48:27 lvps46-163-74-15 dovecot: lda: Debug: auth input: al(a)none.at uid=5000 gid=5000 home=/var/vmail/none.at/al Sep 11 21:48:27 lvps46-163-74-15 dovecot: lda(al(a)none.at): Debug: Effective uid=5000, gid=5000, home=/var/vmail/none.at/al Sep 11 21:48:27 lvps46-163-74-15 dovecot: lda(al(a)none.at): Debug: maildir: root exists (/var/vmail/none.at/al/Maildir) Sep 11 21:48:27 lvps46-163-74-15 dovecot: lda(al(a)none.at): Debug: maildir++: root=/var/vmail/none.at/al/Maildir, index=, control=, inbox=/var/vmail/none.at/al/Maildir, alt= Sep 11 21:48:27 lvps46-163-74-15 dovecot: lda(al(a)none.at): Debug: none: root=, index=, control=, inbox=, alt= Sep 11 21:48:27 lvps46-163-74-15 dovecot: lda(al(a)none.at): Debug: Destination address: al-pdnsuser(a)none.at (source: -a parameter) Sep 11 21:48:27 lvps46-163-74-15 dovecot: lda(al(a)none.at): Debug: sieve: using sieve path for user's script: /var/vmail/none.at/al/.dovecot.sieve Sep 11 21:48:27 lvps46-163-74-15 dovecot: lda(al(a)none.at): Debug: sieve: opening script /var/vmail/none.at/al/.dovecot.sieve Sep 11 21:48:27 lvps46-163-74-15 dovecot: lda(al(a)none.at): Debug: sieve: script binary /var/vmail/none.at/al/.dovecot.svbin successfully loaded Sep 11 21:48:27 lvps46-163-74-15 dovecot: lda(al(a)none.at): Debug: sieve: binary save: not saving binary /var/vmail/none.at/al/.dovecot.svbin, because it is already stored Sep 11 21:48:27 lvps46-163-74-15 dovecot: lda(al(a)none.at): Debug: sieve: executing script from /var/vmail/none.at/al/.dovecot.svbin Sep 11 21:48:27 lvps46-163-74-15 dovecot: lda(al(a)none.at): sieve: msgid=unspecified: stored mail into mailbox 'INBOX' Sep 11 21:48:27 lvps46-163-74-15 postfix/pipe[7797]: 495EF9FECAF9: to=<al-pdnsuser(a)none.at>, relay=dovecot, delay=28, delays=28/0.02/0/0.22, dsn=2.0.0, status=sent (delivered via dovecot service) Sep 11 21:48:27 lvps46-163-74-15 postfix/qmgr[7785]: 495EF9FECAF9: removed Sep 11 21:48:28 lvps46-163-74-15 postfix/smtpd[7788]: disconnect from xxx ### dovecot -n => attachment dovecot_-n Due to the fact that I'am new to dovecot and sieve I hope anybody can help the solve this issue. My target is to filter the mailinglists based on address extention or is it better to filter on to header? Is there a 'log' or 'print' command in the sieve filter or how can I write a message to the log file? Many thanks for your help BR Aleks

1 0

[Dovecot] Filter Mail to Pipe to External Program
by Andriy Moraru 11 Sep '11

11 Sep '11

Hello all! How do I add a filter that would pipe the mail message (containing a certain "To:" field) to some other program? I am running Dovecot 1.0.15. Thanks!

2 1

[Dovecot] sieve and pattern matching
by David Newman 11 Sep '11

11 Sep '11

Dovecot 1.2.17 What is the sieve syntax for matching text somewhere in a subject line, but not at the beginning of the line? Background: Multiple machines each send a message with the subject of "<hostname> operations run" to a mail server. The <hostname> value is different for each sender. This sieve filter does not match any message: require ["fileinto","envelope","reject","vacation","imapflags","relational","co mparator-i;ascii-numeric","regex","notify"]; require ["body", "fileinto", "regex"]; # currentops reports if header :contains "Subject" ".* operations run" { fileinto "currentops"; stop; } However, a similar filter will match if, and only if, the string occurs at the beginning of the subject line. The various sieve help pages I've found suggest that pattern matching anywhere in the subject line should work, not just at the beginning. How to achieve this? TIA dn

2 2

[Dovecot] Annoying "feature" in dovecot/pidgeonhole - include depth limitation
by Mihai Moldovan 11 Sep '11

11 Sep '11

Hi all, I'm using dovecot 2.0.14 build on Debian. The maintainers obviously patch the dovecot source so that it uses the pidgeonhole sieve system. Today I ran into a very annoying issue: I created several sieve scripts and interlinked via the include command, only to find dovecot spewing this error message at me: SWREG Newsletter: line 14: error: cannot nest includes deeper than 10 levels. As far as I could see this limitation is hardcoded to a depth of 10 and can only be changed at compile time. Why is it in place? I understand that you CAN create loops via the include command and limiting the inclusion depth is a way to circumvent loops - but ten is a very low value and the fact that you can't change it via a config file or sorta is even worse. My "fix" so far has been ignoring this, i.e. not returning false. I'm pretty sure that's not the best way to do it but it seems to be working so far. I'd really like to hear your opinion on this issue. Best regards, Mihai **

3 3

[Dovecot] Sieve, before script - Can it include "personal" scripts?
by Steve Fatula 11 Sep '11

11 Sep '11

Using sieve_before, can the script it references include a file from the personal space? I want to set some parameters (by user using the variables extension) there to control what the before script does, so, every user would have the file in their personal include space. If not, is there another way? Can the sieve_before and sieve_global_path be set from userdb extra fields?

2 1

[Dovecot] BestPractice to migrate imap mailbox from one machine to another
by Tobias Hachmer 10 Sep '11

10 Sep '11

Hi list, currently I use dovecot v1.2.15 with maildir++ mailboxes. (Debian Squeeze) I want to set up a different server with dovecot v2, also maildir++ mailboxes. (also Debian Squeeze) What is the best way to copy the existing mailboxes from the older machine running dovecot v1.2.15 to the new naked machine? Greetz, Tobias

6 12

[Dovecot] debug user's message retrieval
by Костырев Александр Алекс еевич 10 Sep '11

10 Sep '11

Hi there! Is there any method to log user's activity with pop3 service? I'll try to explain situation: In maillog I saw that my dovecot lmtp saved four letters in user's mailbox. After a while I got a call from that user saying that he received nothing. Is there any method to log that that user RETR every single letter, maybe with full names of letter's id or something like that?

3 5

Re: [Dovecot] Mails repopping
by Simon Brereton 09 Sep '11

09 Sep '11

> -----Original Message----- > From: Charles Marcus [mailto:CMarcus@Media-Brokers.com] > Sent: Friday, September 09, 2011 2:51 PM > On 2011-09-09 1:07 PM, Simon Brereton <simon.brereton(a)buongiorno.com> > wrote: > > I have a server that's been running Courier for about 6 years and > in > > all that time I think I've only ever had 1 issues where an entire > mail > > box was repopped by a webmail client. > > I don't understand... > > Webmail doesn't speak 'pop' (that I've ever heard of)... so how does > a webmail client 'repop' emails? What webmail is this? It's Horde webmail. Webmail does pop. Yahoo and Gmail do it too. When I first set up the server, it did it on first login - obviously because the server had changed but it's doing it once a week now (and in fact, it did it twice today). It's not fatal, no one will die. It is a PITA though. Simon

1 0

[Dovecot] Mails repopping
by Simon Brereton 09 Sep '11

09 Sep '11

HI I don't know if this is a dovecot issue or a client one. But as Dovecot is the most recent change, I'll start here. I have a server that's been running Courier for about 6 years and in all that time I think I've only ever had 1 issues where an entire mail box was repopped by a webmail client. However, since moving to a new server and dovecot 4 weeks ago, I've now had the webmail client repop this account 4 times (there are about 230 mails in the account). Is there a setting I need to tighten to prevent/remedy this? I have no idea if it's happening on other accounts, but this is one that I see. The format is maildir. There has been no changes to the webmail client. Thanks. Simon

1 0

Re: [Dovecot] 2.1: imapc LIST problem / usage question
by Lutz Preßler 09 Sep '11

09 Sep '11

On Fr, 09 Sep 2011, Lutz Preßler wrote: > On Fr, 09 Sep 2011, Timo Sirainen wrote: > > > On Fri, 2011-09-09 at 12:01 +0200, Lutz Preßler wrote: > [...] > > > For the Gmail mailboxe the INBOX.gmail prefix is missing and / is used > > > as separator. > > > > Fixed in hg. > Thanks. LIST is now working correctly in my setup, but SUBSCRIBE ist not. With subscriptions=no, as written (but same behaviour with subscriptions=yes), SUBSCRIBE INBOX.gmail.INBOX (or others) yields 0 NO [SERVERBUG] Internal error occurred. Refer to server log for more information. [2011-09-09 16:39:40] logging (with mail_debug=yes) only Sep 9 16:39:40 host dovecot: imap(1143, user): Error: stat((null)) failed: Bad address Lutz

1 0

[Dovecot] Quota fs (ignore mount)
by Peter Ignatov 09 Sep '11

09 Sep '11

> I set "quota: fs:INBOX:noenforcing:mount=/var/spool/mail", but receive: "fs quota add storage dir = /home/pit/mail"... > Why ? Well .. I'm not entirely sure if the current behavior is good or not, but what you need to do to get it working is to add two quota roots. One for /home/pit/mail (i.e. without specifying mount=) and another for the INBOX's /var/spool/mail. Don't work... :-( # dovecot -n # 1.2.17: /etc/dovecot.conf # OS: Linux 2.6.18-274.el5.asp121 x86_64 Red Hat Enterprise Linux Server release 5.6 (Tikanga) log_path: /var/log/dovecot.log protocols: pop3 pop3s listen: * login_dir: /var/run/dovecot/login login_executable: /usr/libexec/dovecot/pop3-login verbose_proctitle: yes mail_location: mbox:~/mail:INBOX=/var/spool/mail/%u mail_debug: yes mail_executable: /usr/libexec/dovecot/pop3 mail_plugins: quota mail_plugin_dir: /usr/lib64/dovecot/pop3 auth default: passdb: driver: pam userdb: driver: passwd plugin: quota: fs:INBOX:noenforcing quota2: fs:boxes:noenforcing:mount=/var/spool/mail quota_rule: *:storage=10240 quota_rule2: *:storage=15000 dovecot.log: ------------ Sep 09 16:13:46 pop3-login: Info: Login: user=<pit>, method=PLAIN, rip=192.168.3.10, lip=192.168.6.3, TLS Sep 09 16:13:46 POP3(pit): Info: Loading modules from directory: /usr/lib64/dovecot/pop3 Sep 09 16:13:46 POP3(pit): Info: Module loaded: /usr/lib64/dovecot/pop3/lib10_quota_plugin.so Sep 09 16:13:46 POP3(pit): Info: Effective uid=500, gid=500, home=/home/pit Sep 09 16:13:46 POP3(pit): Info: Quota root: name=INBOX backend=fs args=noenforcing Sep 09 16:13:46 POP3(pit): Info: Quota rule: root=INBOX mailbox=* bytes=10485760 messages=0 Sep 09 16:13:46 POP3(pit): Info: Quota rule: root=INBOX mailbox=* bytes=15360000 messages=0 Sep 09 16:13:46 POP3(pit): Info: Quota root: name=boxes backend=fs args=noenforcing:mount=/var/spool/mail Sep 09 16:13:46 POP3(pit): Info: mbox: data=~/mail:INBOX=/var/spool/mail/pit Sep 09 16:13:46 POP3(pit): Info: fs: root=/home/pit/mail, index=, control=, inbox=/var/spool/mail/pit Sep 09 16:13:46 POP3(pit): Info: fs quota add storage dir = /home/pit/mail Sep 09 16:13:46 POP3(pit): Info: fs quota block device = /dev/cciss/c0d0p3 Sep 09 16:13:46 POP3(pit): Info: fs quota mount point = / Sep 09 16:13:46 POP3(pit): Info: fs quota mount type = ext3 Sep 09 16:13:46 POP3(pit): Info: Disconnected: Logged out top=0/0, retr=0/0, del=0/2, size=1249

1 0

Re: [Dovecot] Shared Mailboxes with VirtualUsers and mail_location retrieved from ldap
by mailing lists 09 Sep '11

09 Sep '11

and for the time that user001 execute the imap 'list' command, this is the log trace in dovecot: Sep 9 13:09:12 imap1 dovecot: imap(user001): Debug: Namespace : type=shared, prefix=shared.%u., sep=., inbox=no, hidden=no, list=children, subscriptions=no location=maildir:%h/mailSubDir:INDEX=~/mailSubDir/shared/%u Sep 9 13:09:12 imap1 dovecot: imap(user001): Debug: shared: root=/var/run/dovecot/, index=, control=, inbox=, alt= [...] Sep 9 13:10:44 imap1 dovecot: auth: Debug: master in: USER 1 user002 service=lib-storage Sep 9 13:10:44 imap1 dovecot: auth: Debug: ldap(user002): user search: base=dc=example,dc=com scope=subtree filter=(&(objectClass=CourierMailAccount)(uid=user002)) fields=mailbox,homeFilter Sep 9 13:10:44 imap1 dovecot: auth: Debug: ldap(user002): result: mailbox(mail=maildir:/var/maildir/%$)=vol05/4/40/user002 homeFilter(home)=/var/mailfilter/vol05/4/40/user002 Sep 9 13:10:44 imap1 dovecot: auth: Debug: master out: USER 1 user002 mail=maildir:/var/maildir/vol05/4/40/user002 home=/var/mailfilter/vol05/4/40/user002 Sep 9 13:10:44 imap1 dovecot: imap(user001): Debug: auth input: user002 mail=maildir:/var/maildir/vol05/4/40/user002 home=/var/mailfilter/vol05/4/40/user002 Sep 9 13:10:44 imap1 dovecot: imap(user001): Debug: maildir++: root=/var/mailfilter/vol05/4/40/user002/mailSubDir, index=/var/mailfilter/vol04/4/46/user001/mailSubDir/shared/user002, control=, inbox=/var/mailfilter/vol05/4/40/user002/mailSubDir, alt= Sep 9 13:10:44 imap1 dovecot: imap(user001): Debug: acl: initializing backend with data: vfile Sep 9 13:10:44 imap1 dovecot: imap(user001): Debug: acl: acl username = user001 Sep 9 13:10:44 imap1 dovecot: imap(user001): Debug: acl: owner = 0 Sep 9 13:10:44 imap1 dovecot: imap(user001): Debug: acl vfile: Global ACL directory: (none) Sep 9 13:10:44 imap1 dovecot: imap(user001): Debug: acl: Mailbox not in dovecot-acl-list: shared.user002.INBOX

1 0

Re: [Dovecot] Shared Mailboxes with VirtualUsers and mail_location retrieved from ldap
by mailing lists 09 Sep '11

09 Sep '11

(I'm sorry for breaking the thread with each mail) On 09/09/2011 10:04 AM, Jan-Frode Myklebust wrote: > On Fri, Sep 09, 2011 at 08:18:40AM +0100, mailing lists wrote: >> >> and how to I might configure dovecot to use the mail directory as a subdirectory of the home directory? >> >> this way all lookups for home (with %%h fetched from ldap) will return the correct locationand mail will be in (i.e.) ~/mailSubDir >> >> is this configuration possible? > > In the main dovecot.conf: > > mail_location = maildir:~/mailSubDir > > In the ldap-config: > > user_attrs = homeFilter=home and which is the value for the location directive in namespace declaration ?? namespace { list = children location = maildir:%%h/mailSubDir:INDEX=~/mailSubDIr/shared/%%u prefix = shared.%%u. separator = . subscriptions = no type = shared } with the above conf. no shared folders are seen by tests users and afaik %%h is retrieved from ldap. this is that I had done until now: # telnet localhost 143 Trying ::1... Connected to localhost. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN] Dovecot ready. . login user001 secret . OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT CHILDREN NAME . create INBOX.docs-user001 . OK Create completed. . setacl INBOX.docs-user001 user002 lr . OK Setacl complete. . logout * BYE Logging out . OK Logout completed. Connection closed by foreign host. # telnet localhost 143 Trying ::1... Connected to localhost. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN] Dovecot ready. . login user002 secret . OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT CHILDREN NAME . create INBOX.docs-user002 . OK Create completed. . setacl INBOX.docs-user002 user001 lr . OK Setacl complete. . logout * BYE Logging out . OK Logout completed. Connection closed by foreign host. # cat /var/maildir/shared-mailboxes shared/shared-boxes/user/user002/user001 1 shared/shared-boxes/user/user002/user002 1 shared/shared-boxes/user/user001/user001 1 shared/shared-boxes/user/user001/user002 1 # cat /var/maildir/vol04/4/46/user001/.docs-user001/dovecot-acl user=user002 lr # cat /var/maildir/vol05/4/40/user002/.docs-user002/dovecot-acl user=user001 lr # telnet localhost 143 Trying ::1... Connected to localhost. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN] Dovecot ready. . login user001 secret . OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS ACL RIGHTS=texk] Logged in . namespace * NAMESPACE (("INBOX." ".")) (("shared." ".")) NIL . OK Namespace completed. . list "shared." "*" . OK List completed. /--------------/ # grep ^[^#] /etc/dovecot/dovecot-ldap.conf.ext uris = ldap://ldap.example.com dn = cn=testuser,dc=example,dc=com dnpass = secret sasl_bind = no tls = no auth_bind = yes ldap_version = 3 base = dc=example,dc=com deref = never scope = subtree user_attrs = mailbox=mail=maildir:/var/maildir/%$,homeFilter=home user_filter = (&(objectClass=CourierMailAccount)(uid=%u)) pass_filter = (&(objectClass=CourierMailAccount)(uid=%u)) # dovecot -n # 2.0.14: /etc/dovecot/dovecot.conf # OS: Linux 2.6.34.7-0.7-xen x86_64 openSUSE 11.3 (x86_64) auth_debug = yes auth_debug_passwords = yes auth_verbose = yes auth_verbose_passwords = plain base_dir = /var/run/dovecot/ disable_plaintext_auth = no mail_debug = yes mail_fsync = always mail_gid = 5000 mail_location = maildir:~/mailSubDir mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = acl mail_uid = 5000 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mmap_disable = yes namespace { inbox = yes location = prefix = INBOX. separator = . } namespace { list = children location = maildir:%%h/mailSubDir:INDEX=~/mailSubDir/shared/%%u prefix = shared.%%u. separator = . subscriptions = no type = shared } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile acl_shared_dict = file:/var/maildir/shared-mailboxes sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap lmtp service lmtp { inet_listener lmtp { port = 24 } unix_listener lmtp { user = vmail } } ssl = no userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } verbose_proctitle = yes protocol lmtp { mail_plugins = acl } protocol lda { mail_plugins = acl } protocol imap { mail_max_userip_connections = 100 mail_plugins = acl imap_acl autocreate }

1 0

Re: [Dovecot] Shared Mailboxes with VirtualUsers and mail_location retrieved from ldap
by mailing lists 09 Sep '11

09 Sep '11

On 09/08/2011 03:07 PM, Timo Sirainen wrote: > On Thu, 2011-09-08 at 12:14 +0100, mailing lists wrote: > >> yes, my virtual users have separate directories for home and mail. >> Their locations are stored in ldap attributes (with random generated >> paths), so a flat scheme like /var/maildr/%%u isn't valid. > > Sorry, you're out of luck with that kind of a setup. Only the %%h can > look up a home directory from LDAP. Maybe some day in future there will > be other variables that can be looked up. and how to I might configure dovecot to use the mail directory as a subdirectory of the home directory? this way all lookups for home (with %%h fetched from ldap) will return the correct locationand mail will be in (i.e.) ~/mailSubDir is this configuration possible?

2 1

[Dovecot] lmtp -- save failed to INBOX: BUG: Unknown internal error
by Jan-Frode Myklebust 09 Sep '11

09 Sep '11

I've had 18 instances of this error the last 24 hours: Sep 8 08:56:00 popimap1 dovecot:: lmtp(10529, first.last(a)example.om) mGdAOtdlaE4hKQAAg/aw4w: msgid=<B8FA3D5B230184409450D51D522678404E5052(a)ASP-EX02.ASP.lan>: save failed to INBOX: BUG: Unknown internal error 17 on lmtp-server A, and one on lmtp-server B. On server A it was a message with 55 recepients, where 17 failed initially -- and the was then successfully delivered. lmtp pid 10529, 08:55:57-08:56:01 - 11 successfull deliveries, 17 BUGs lmtp pid 10609, 08:56:00 - 1 successfull deliveries lmtp pid 31291, 08:56:06 - 2 successfull deliveries lmtp pid 10482, 08:56:04-06 - 3 successfull deliveries lmtp pid 6738, 08:56:06 - 1 successfull deliveries lmtp pid 24488, 08:56:06-07 - 5 successfull deliveries lmtp pid 7101, 08:56:01-07 - 19 successfull deliveries lmtp pid 21330, 08:56:08 - 1 successfull deliveries lmtp pid 2177, 08:56:09 - 3 successfull deliveries lmtp pid 7085, 08:56:10 - 3 successfull deliveries lmtp pid 6633, 08:56:08-10 - 6 successfull deliveries The one on lmtp-server B was a different msgid from A, and also had several recepients (6). It was successfully delivered to the recepient that initially failed the same second. Config here: # 2.0.14: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-194.26.1.el5 x86_64 Red Hat Enterprise Linux Server release 5.5 (Tikanga) auth_verbose = yes auth_verbose_passwords = sha1 disable_plaintext_auth = no mail_gid = 3000 mail_location = maildir:~/:INDEX=/indexes/%1u/%1.1u/%u mail_plugins = quota mail_uid = 3000 mmap_disable = yes namespace { inbox = yes location = prefix = INBOX. type = private } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { quota = maildir:User quota } service auth-worker { user = $default_internal_user } service auth { client_limit = 4396 } service imap-login { inet_listener imap { address = * port = 143 } } service imap { executable = /usr/local/sbin/imap-wrapper.sh process_limit = 2048 } service lmtp { client_limit = 1 inet_listener lmtp { address = * port = 24 } process_limit = 25 } service pop3-login { inet_listener pop3 { address = * port = 110 } } service pop3 { executable = /usr/local/sbin/pop-wrapper.sh process_limit = 2048 } ssl = no userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol lmtp { mail_plugins = quota } protocol imap { imap_client_workarounds = delay-newmail mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = UID%u-%v } -jf

2 7

[Dovecot] copy and empty userA folder1, append to /var/mail/userB
by mathog 08 Sep '11

08 Sep '11

Dovecot 2.0.13 on a 64 bit linux. We have an archiver account on one machine. Most mailing lists that handles go directly to it and everything is fine. However, there is one campus list that will only send to real people. So for that one I subscribed. When one of these messages comes in, which is 1-2x per week, I copy it to an export folder and then manually run a script which does: cat ~me/mail/export >>/var/mail/archiver echo "" > ~me/mail/export That worked fine on our last system, but dovecot doesn't like it. It leaves the imap indices for the export mailbox in an inconsistent state, so that roundcube (through dovecot) refuses to drop messages into it. The error message roundcube emits is: ServerError: Mailbox isn't a valid mbox file. Presumably the second half is from dovecot. I need a supported way to go about this, so that the next time one comes in I can copy to that folder again. The export mailbox is always completely emptied. It would suffice if there was some way to force dovecot to create "empty"" .imap/export: dovecot.index.cache dovecot.index.log files. Note this isn't a problem for the archiver itself, since it doesn't have any imap indexed files. Suggestions? Thank you, David Mathog mathog(a)caltech.edu Manager, Sequence Analysis Facility, Biology Division, Caltech

2 2

Re: [Dovecot] Shared Mailboxes with VirtualUsers and mail_location retrieved from ldap
by mailing lists 08 Sep '11

08 Sep '11

Hello, On 09/07/2011 07:22 PM, Timo Sirainen wrote: > On 6.9.2011, at 14.27, mailing lists wrote: >> At this point I need shared mailboxes but since user mail/home locations are ldap attributes, how is it supposed I must configure this for shared mailboxes? >> >> for the users' mail/home directories I set this line: >> >> user_attrs = mailbox=mail=maildir:/var/maildir/%$,homeFilter=home > > Are home dirs and mail dirs related in any way? The only way you can get it working is by using home dirs, e.g.: > > user_attrs = mailbox=home=/var/maildir/%$ yes, my virtual users have separate directories for home and mail. Their locations are stored in ldap attributes (with random generated paths), so a flat scheme like /var/maildr/%%u isn't valid. for typical (virtual) users the location returned looks like: Sep 8 12:48:33 imap1 dovecot: auth: Debug: ldap(user012,::1): result: mailbox(mail=maildir:/var/maildir/%$)=vol06/1/15/user012 homeFilter(home)=/var/mailfilter/vol06/1/15/user012 ... Sep 8 12:54:50 imap1 dovecot: imap(user012): Debug: maildir++: root=/var/maildir/vol06/1/15/user012, index=, control=, inbox=/var/maildir/vol06/1/15/user012, alt= > Then in dovecot.conf: > > mail_location = maildir:~/ > >> namespace { >> type = shared >> separator = / >> prefix = shared/%%u/ >> subscriptions = no >> list = children > > location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u this is that I see in logs and not shared folders are seen by imap clients: Sep 8 12:57:11 imap1 dovecot: imap(user012): Debug: Namespace : type=shared, prefix=shared.%u., sep=., inbox=no, hidden=no, list=children, subscriptions=no location=maildir:%h/Maildir:INDEX=~/Maildir/shared/%u Sep 8 12:57:11 imap1 dovecot: imap(user012): Debug: shared: root=/var/run/dovecot/, index=, control=, inbox=, alt= Sep 8 12:57:11 imap1 dovecot: imap(user012): Debug: acl: initializing backend with data: vfile I fail to understand how %%u is retrieved from ldap... /----------/ # dovecot -n # 2.0.14: /etc/dovecot/dovecot.conf # OS: Linux 2.6.34.7-0.7-xen x86_64 openSUSE 11.3 (x86_64) auth_debug = yes auth_debug_passwords = yes auth_verbose = yes auth_verbose_passwords = plain base_dir = /var/run/dovecot/ disable_plaintext_auth = no mail_debug = yes mail_fsync = always mail_gid = 5000 mail_location = maildir:~/ mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = acl mail_uid = 5000 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mmap_disable = yes namespace { inbox = yes location = prefix = INBOX. separator = . } namespace { list = children location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u prefix = shared.%%u. separator = . subscriptions = no type = shared } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile acl_shared_dict = file:/var/maildir/shared-mailboxes sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap ssl = no userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } verbose_proctitle = yes protocol imap { mail_max_userip_connections = 100 mail_plugins = acl imap_acl autocreate }

2 1

Re: [Dovecot] is it necessary lmtp and director to avoid index corruption in mail delivery?
by mailing lists 08 Sep '11

08 Sep '11

JF, thank you for the reply. I'm just curious how to big players fix this problem, which seems impact systems with shared storage. Have a nice day. On 09/07/2011 12:59 PM, Jan-Frode Myklebust wrote: > On Wed, Sep 07, 2011 at 11:26:28AM +0100, mailing lists wrote: >> Hello all, >> If I have several postfix/dovecot-lda boxes with shared nfs storage, >> how director helps in this scenario? > > The director can help by directing each unique user to the same backend > server for each delivery, which should give you better performance > (indexes cached in memory on only one machine instead of on all, > inotify will work for IMAP NOTIFY), and also avoid some apparent race > conditions that has lead to index corruption when several nodes are > writing to the same mailbox at the same time. > >> is it necesary to use lmtp instead of dovecot-lda? > > Yes. > > >> With postfix/dovecot-lda boxes incoming mail happens at the smtp layer >> but director redirects are working in the lmtp/imap/pop3 layer. > > Right. > > With LMTP you can have dovecot listening on the network (port 24/tcp) > for incoming mail. No need for postfix on the backend mailstorage > servers. > > Our setups has been: > > Mailgw[1-14] ---smtp--> dovecot-server[1-5] (postfix + dovecot/lda) > > and used MX priorities to make all deliveries go to the same > dovecot-server with the others as backup. > > $ dig mx deliver.example.com +short > 10 dove2.example.com. > 15 dove3.example.com. > 20 dove4.example.com. > 25 dove5.example.com. > 5 dove1.example.com. > > > Now I'm moving towards: > > Mailgw[1-14] ---lmtp--> dovecot-server[1-5] (dovecot/lmtp) > > but worry that the index corruption might hit me again.. Ideally > I want: > > Mailgw[1-14] ---lmtp--> directors --lmtp--> dovecot-server[1-5] (dovecot/lmtp) > > but lmtp-proxying seems to have bugs (ref: my latest mails to this > list). > > > -jf

1 0

[Dovecot] limit number of simultaneous lmtp deliveries ?
by Jan-Frode Myklebust 08 Sep '11

08 Sep '11

We have quite a few frontend mail gateways that deliver incoming email trough our dovecot director (lmtp proxy) to the backend lmtp servers, and are seeing this logged on the frontend mail gateways: Sep 5 10:51:56 mailgw1 postfix/lmtp[23443]: 0E2F41C01A: to=<me(a)example.com>, relay=loadbalancers.example.com[192.168.42.15]:24, delay=61, delays=0.02/0.3/31/30, dsn=4.4.0, status=deferred (host loadbalancers.example.com[192.168.42.15] said: 451 4.4.0 Remote server not answering (DATA output timeout) (in reply to end of DATA command)) It's a bit unclear to me if this leads to duplicate deliveries, or just delayed deliveries, but -- is there any way to limit the number of simultanous deliveries on either the dovecot director or the backend lmtp-servers ? Will "process_limit=10" work for "service lmtp"? -jf

2 4

[Dovecot] test
by Adrian Stoica 08 Sep '11

08 Sep '11

Hello i use dovecot 2.0.14 , with exim 4.76 using dovecot-lda. We have the following problem: when I receive mail from the site http://www.transfer.ro, which is a file transfer site, most emails appear to be empty. Empty rows appear in email body slipped through the existing, and this makemy mail client to show me an empty mail. You can see the content only by viewing the message source. instead of "- np4e68592849da7 Content-type: text / plain, charset = utf-8 " appear "- np4e68592849da7 Content-type: text / plain, charset = utf-8 " , and that blank line spoil everything. You can check if there is somethingwrong ?

2 2

[Dovecot] ManageSieve with SSL/TLS only
by Karol Babioch 08 Sep '11

08 Sep '11

Hi, I'm quite new to Dovecot and ManageSieve, so probably I've missed something, although I couldn't find any hints in the wiki. I'm interested in running ManageSieve with SSL/TLS only. So is there any way to reject any non encrypted connections? I couldn't find any parameter for this purpose. I'm currently using dovecot 1.2.15 provided with Debian Squeeze, but I couldn't find any parameter in the 2.0 branch neither. Best regards, Karol Babioch

2 1

[Dovecot] Shared Mailboxes with VirtualUsers and mail_location retrieved from ldap
by mailing lists 07 Sep '11

07 Sep '11

Hello, I spend a couple of days configurating a new installation of dovecot 2.0.14 with virtual accounts and NFS storage for maildir home/mail directories. At this point I need shared mailboxes but since user mail/home locations are ldap attributes, how is it supposed I must configure this for shared mailboxes? for the users' mail/home directories I set this line: user_attrs = mailbox=mail=maildir:/var/maildir/%$,homeFilter=home creating a namespace like the below one for shared mbx throw a lot of errors: namespace { type = shared separator = / prefix = shared/%%u/ subscriptions = no list = children #location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u location = mailbox=mail=maildir:/var/maildir/%$ } I would like to hear if anyone has this configuration running. Thank you. /--------------/ uris = ldap://ldap.example.com dn = cn=user,ou=People,dc=example,dc=com dnpass = secret sasl_bind = no tls = no auth_bind = yes ldap_version = 3 base = dc=example,dc=com deref = never scope = subtree user_attrs = mailbox=mail=maildir:/var/maildir/%$,homeFilter=home user_filter = (&(objectClass=CourierMailAccount)(uid=%u)) pass_filter = (&(objectClass=CourierMailAccount)(uid=%u)) # dovecot -n # 2.0.14: /etc/dovecot/dovecot.conf # OS: Linux 2.6.34.7-0.7-xen x86_64 openSUSE 11.3 (x86_64) auth_debug = yes auth_debug_passwords = yes auth_verbose = yes auth_verbose_passwords = plain base_dir = /var/run/dovecot/ disable_plaintext_auth = no mail_debug = yes mail_fsync = always mail_gid = 5000 mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = acl mail_uid = 5000 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mmap_disable = yes namespace { list = children location = mailbox=mail=maildir:/var/maildir/%$ prefix = shared/%%u/ separator = / subscriptions = no type = shared } namespace { inbox = yes location = prefix = INBOX. separator = . } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap ssl = no userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } verbose_proctitle = yes protocol imap { mail_max_userip_connections = 100 mail_plugins = acl imap_acl autocreate }

2 1

[Dovecot] Quota fs (ignore mount)
by Peter Ignatov 07 Sep '11

07 Sep '11

Hi, I set "quota: fs:INBOX:noenforcing:mount=/var/spool/mail", but receive: "fs quota add storage dir = /home/pit/mail"... Why ? In fstab: /dev/mapper/mpath1p1 /var/spool/mail ext2 usrquota 0 0 In dovecot.log: Sep 06 15:02:00 pop3-login: Info: Login: user=<pit>, method=PLAIN, rip=192.168.3.10, lip=192.168.6.3, TLS Sep 06 15:02:00 POP3(pit): Info: Loading modules from directory: /usr/lib64/dovecot/pop3 Sep 06 15:02:00 POP3(pit): Info: Module loaded: /usr/lib64/dovecot/pop3/lib10_quota_plugin.so Sep 06 15:02:00 POP3(pit): Info: Effective uid=500, gid=500, home=/home/pit Sep 06 15:02:00 POP3(pit): Info: Quota root: name=INBOX backend=fs args=noenforcing:mount=/var/spool/mail Sep 06 15:02:00 POP3(pit): Info: Quota rule: root=INBOX mailbox=* bytes=10485760 messages=0 Sep 06 15:02:00 POP3(pit): Info: Quota warning: bytes=9961472 (95%) messages=0 command=/usr/local/bin/quota-warning.sh 95 Sep 06 15:02:00 POP3(pit): Info: mbox: data=~/mail:INBOX=/var/spool/mail/pit Sep 06 15:02:00 POP3(pit): Info: fs: root=/home/pit/mail, index=, control=, inbox=/var/spool/mail/pit Sep 06 15:02:00 POP3(pit): Info: fs quota add storage dir = /home/pit/mail Sep 06 15:02:00 POP3(pit): Info: fs quota block device = /dev/cciss/c0d0p3 Sep 06 15:02:00 POP3(pit): Info: fs quota mount point = / Sep 06 15:02:00 POP3(pit): Info: fs quota mount type = ext3 Sep 06 15:02:01 POP3(pit): Info: Disconnected: Logged out top=0/0, retr=0/0, del=0/2, size=1249 dovecot --version 1.2.17 dovecot -n # 1.2.17: /etc/dovecot.conf # OS: Linux 2.6.18-274.el5.asp121 x86_64 Red Hat Enterprise Linux Server release 5.6 (Tikanga) log_path: /var/log/dovecot.log protocols: pop3 pop3s listen: * login_dir: /var/run/dovecot/login login_executable: /usr/libexec/dovecot/pop3-login verbose_proctitle: yes mail_location: mbox:~/mail:INBOX=/var/spool/mail/%u mail_debug: yes mail_executable: /usr/libexec/dovecot/pop3 mail_plugins: quota mail_plugin_dir: /usr/lib64/dovecot/pop3 auth default: passdb: driver: pam userdb: driver: passwd plugin: quota: fs:INBOX:noenforcing:mount=/var/spool/mail quota_rule: *:storage=10240 quota_warning: storage=95%% /usr/local/bin/quota-warning.sh 95

2 1

[Dovecot] Sieve "header :value" test does not work
by Tom Hendrikx 07 Sep '11

07 Sep '11

hi, After following some examples and searching for sieve samples in this ml history, I'm quite sure that the following sieve snippet should give no surprises: if header :value "ge" :comparator "i;ascii-numeric" "X-Header-Name" "0.99" { /* do something */ } However the Pigeonhole Sieve 0.2.3 on dovecot 2.0.14 gives me following error: test: line 3: error: unknown tagged argument ':value' for the header test (reported only once at first occurence). test: error: validation failed. What obvious mistake am I failing to see here? -- Tom

2 5

[Dovecot] is it necessary lmtp and director to avoid index corruption in mail delivery?
by mailing lists 07 Sep '11

07 Sep '11

Hello all, If I have several postfix/dovecot-lda boxes with shared nfs storage, how director helps in this scenario? is it necesary to use lmtp instead of dovecot-lda? With postfix/dovecot-lda boxes incoming mail happens at the smtp layer but director redirects are working in the lmtp/imap/pop3 layer.

2 1

Re: [Dovecot] error in logs, but system appears to work
by Joseph Tam 07 Sep '11

07 Sep '11

Chris Hoogendyk writes: > So, looking at my other system that has been running dovecot for over a > year, I see that the entries are mostly 0600, but there are a few 0660. > The system I was just implementing has mostly 0660, but some 0600. We > had seen occasional similar errors on the other system. Been there, done that. Timo already gave an explanation of why 0600 gets rid of the problem. I'll add a reminder that you'll need to track down the reason why mailboxes are created user:mail/0660 in the first place. It's usually done by the LDA when creating a brand new mailbox (for example, Solaris's mail.local). If you've replaced your LDA with Dovecot's deliver, then this won't be a problem anymore. You may also have to scour your userbase's personal mail collection for mailboxes that has 1) mode 0660, and 2) group membership the user is not a part of, and fix up the permissions. Such a thing could happen if you've reassigned a user's GID. Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] Quotas not recalculating
by Kyle Brantley 07 Sep '11

07 Sep '11

Hello all -- I have an interesting issue, where the quotas are refusing the recalculate for anyone on my server. # doveadm quota get -u kyle(a)averageurl.com Quota name Type Value Limit % storage=540672 STORAGE 0 - 0 storage=540672 MESSAGE 0 - 0 # doveadm quota recalc -u kyle(a)averageurl.com # doveadm quota get -u kyle(a)averageurl.com Quota name Type Value Limit % storage=540672 STORAGE 0 - 0 storage=540672 MESSAGE 0 - 0 # du -sh /var/mail/vhosts/averageurl.com/kyle 512M /var/mail/vhosts/averageurl.com/kyle The IMAP client (Thunderbird) state that the user has no quotas in place at all. Now, if I copy the maildirsize file from another user to this user account, the quotas display in the IMAP client. At this point, however, trying to recalc the quota does nothing. Any help with this would be appreciated, config below... --Kyle # doveconf -n # 2.0.beta6 (3156315704ef): /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-71.29.1.el6.x86_64 x86_64 CentOS Linux release 6.0 (Final) ext4 auth_gssapi_hostname = imap.mail.averageurl.com auth_krb5_keytab = /etc/dovecot/krb5.keytab auth_mechanisms = plain login gssapi digest-md5 cram-md5 first_valid_uid = 502 last_valid_uid = 502 mail_debug = yes mail_location = maildir:/var/mail/vhosts/%d/%n mail_plugins = $mail_plugins quota mbox_write_locks = fcntl passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { quota = maildir:Quota sieve = /var/mail/vhosts/%d/%n/.sieve sieve_dir = /var/mail/vhosts/%d/%n/sieve/ } protocols = imap lmtp sieve service auth { unix_listener auth-userdb { group = mailstore mode = 0660 } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service imap { process_limit = 128 } service lmtp { unix_listener lmtp { mode = 0666 } } service managesieve-login { inet_listener sieve { port = 4190 } process_min_avail = 0 service_count = 1 } ssl_ca = </etc/pki/tls/certs/AverageURL.crt ssl_cert = </etc/pki/dovecot/certs/imap.mail.averageurl.com.crt ssl_key = </etc/pki/dovecot/private/imap.mail.averageurl.com.pem.insecure userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lda { mail_plugins = $mail_plugins sieve } protocol imap { mail_max_userip_connections = 20 mail_plugins = $mail_plugins imap_quota } protocol lmtp { mail_plugins = $mail_plugins sieve } protocol sieve { mail_max_userip_connections = 2 managesieve_max_line_length = 65536 } # cat /etc/dovecot/dovecot-sql.conf.ext driver = mysql connect = host=/var/lib/mysql/mysql.sock user=<snip> password=<snip> dbname=<snip> user_query = SELECT 502 AS uid, 502 AS gid, "/var/mail/vhosts/%d/%n" AS home, concat("maildir:storage=", floor(m.quota/1024)) AS quota FROM vmailboxes m, vhosts h WHERE `m`.`username` = '%n' AND `m`.`domain` = `h`.`UUID` AND `h`.`vhost` = '%d' default_pass_scheme = PLAIN password_query = SELECT aes_decrypt(`m`.`password`, <snip>) AS password FROM vmailboxes m, vhosts h WHERE `m`.`username` = '%n' AND `m`.`domain` = `h`.`UUID` AND `h`.`vhost` = '%d'

3 6

[Dovecot] dumb Q: how to search for email hack attempts ?
by Voytek 07 Sep '11

07 Sep '11

one of the users thinks someone hacked his email, I don't have time this morning to analyze mail logs in detail, but does some one has some tips to simply searching mail logs for multiple log in attempts, etc, I'd appreciate some grepping for failed logins show give some clues ?

2 1

[Dovecot] error in logs, but system appears to work
by Chris Hoogendyk 06 Sep '11

06 Sep '11

I'm bringing up a system with dovecot that has been running for years with uw-imap. In making the switch, I put a tail on the log file, made the switch, and sent a test mail and received it. I was able to receive mail with no apparent difficulties, but the log file was disconcerting. A number of users connected during the few minutes I had it running, and for each of them there was an error, e.g., "chown ~user/mail/.imap/INBOX failed: Operation not permitted" and "mkdir ~user/mail/.imap/INBOX failed: not owner". But those directories and files appeared to have been made. The first of those errors finishes with "group based on /var/mail/user". That makes no sense. I'm hoping someone can give me an idea what might cause this. Here are the log entries in debug mode and the directories for one such user: Sep 2 17:31:33 eclogite dovecot: [ID 583609 local2.info] auth(default): new auth connection: pid=7248 Sep 2 17:31:43 eclogite dovecot: [ID 583609 local2.info] auth(default): client in: AUTH 1 PLAIN service=pop3 secured lip=128.119.45.20 rip=128.119.45.9 lport=995 rport=53865 resp=AGVicmFkbGV5AFJvd2luZzEzKg== Sep 2 17:31:43 eclogite dovecot: [ID 583609 local2.info] auth(default): shadow(ebradley,128.119.45.9): lookup Sep 2 17:31:43 eclogite dovecot: [ID 583609 local2.info] auth(default): client out: OK 1 user=ebradley Sep 2 17:31:43 eclogite dovecot: [ID 583609 local2.info] auth(default): master in: REQUEST 37 7248 1 Sep 2 17:31:43 eclogite dovecot: [ID 583609 local2.info] auth(default): passwd(ebradley,128.119.45.9): lookup Sep 2 17:31:43 eclogite dovecot: [ID 583609 local2.info] auth(default): master out: USER 37 ebradley system_groups_user=ebradley uid=6633 gid=100 home=/u1/home/grad/ebradley Sep 2 17:31:43 eclogite dovecot: [ID 583609 local2.info] POP3(ebradley): Effective uid=6633, gid=100, home=/u1/home/grad/ebradley Sep 2 17:31:43 eclogite dovecot: [ID 583609 local2.info] POP3(ebradley): mbox: data=~/mail:INBOX=/var/mail/ebradley Sep 2 17:31:43 eclogite dovecot: [ID 583609 local2.info] POP3(ebradley): fs: root=/u1/home/grad/ebradley/mail, index=, control=, inbox=/var/mail/ebradley Sep 2 17:31:43 eclogite dovecot: [ID 583609 local2.info] POP3(ebradley): Namespace : Using permissions from /u1/home/grad/ebradley/mail: mode=0700 gid=-1 Sep 2 17:31:43 eclogite dovecot: [ID 583609 local2.error] POP3(ebradley): chown(/u1/home/grad/ebradley/mail/.imap/INBOX, -1, 6(mail)) failed: Operation not permitted (egid=100(geolgrad), group based on /var/mail/ebradley) Sep 2 17:31:43 eclogite dovecot: [ID 583609 local2.error] POP3(ebradley): mkdir(/u1/home/grad/ebradley/mail/.imap/INBOX) failed: Not owner Sep 2 17:31:43 eclogite dovecot: [ID 583609 local2.info] pop3-login: Login: user=<ebradley>, method=PLAIN, rip=128.119.45.9, lip=128.119.45.20, TLS When I looked at their home directory, I found: drwx------ 4 ebradley geolgrad 512 Jul 28 2009 /u1/home/grad/ebradley drwx------ 4 ebradley geolgrad 512 Sep 2 17:31 /u1/home/grad/ebradley/mail drwx------ 3 ebradley geolgrad 512 Sep 2 17:31 /u1/home/grad/ebradley/mail/.imap drwxrwx--- 2 ebradley geolgrad 512 Sep 2 17:31 /u1/home/grad/ebradley/mail/.imap/INBOX -rw-rw---- 1 ebradley mail 9484323 Sep 6 15:16 /var/mail/ebradley My dovecot configuration is at the end. The other pieces are sendmail, milter-greylist, mimedefang, etc. -- --------------- Chris Hoogendyk - O__ ---- Systems Administrator c/ /'_ --- Biology& Geology Departments (*) \(*) -- 140 Morrill Science Center ~~~~~~~~~~ - University of Massachusetts, Amherst <hoogendyk(a)bio.umass.edu> --------------- Erdös 4 # dovecot -a # 1.2.17: /usr/local/etc/dovecot.conf Warning: fd limit 256 is lower than what Dovecot can use under full load (more than 768). Either grow the limit or change login_max_processes_count and max_mail_processes settings # OS: SunOS 5.9 sun4u base_dir: /var/run/dovecot/ log_path: info_log_path: log_timestamp: %b %d %H:%M:%S syslog_facility: local2 protocols: imaps pop3s listen: * ssl_listen: * ssl: required ssl_ca_file: /etc/mail/certs/ca-bundle.crt ssl_cert_file: /etc/mail/certs/sendmail.pem ssl_key_file: /etc/mail/certs/sendmail.pem ssl_key_password: ssl_parameters_regenerate: 168 ssl_cipher_list: ssl_cert_username_field: commonName ssl_verify_client_cert: no disable_plaintext_auth: yes verbose_ssl: no shutdown_clients: yes nfs_check: yes version_ignore: no login_dir: /var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login login_user: dovecot login_greeting: ready. login_log_format_elements: user=<%u> method=%m rip=%r lip=%l %c login_log_format: %$: %s login_process_per_connection: yes login_chroot: yes login_trusted_networks: login_process_size: 64 login_processes_count: 3 login_max_processes_count: 128 login_max_connections: 256 valid_chroot_dirs: mail_chroot: max_mail_processes: 512 mail_max_userip_connections(default): 10 mail_max_userip_connections(imap): 10 mail_max_userip_connections(pop3): 3 verbose_proctitle: no first_valid_uid: 1000 last_valid_uid: 0 first_valid_gid: 98 last_valid_gid: 0 mail_access_groups: mail_privileged_group: mail mail_uid: mail_gid: mail_location: mbox:~/mail:INBOX=/var/mail/%u mail_cache_fields: mail_never_cache_fields: imap.envelope mail_cache_min_mail_count: 0 mailbox_idle_check_interval: 30 mail_debug: yes mail_full_filesystem_access: no mail_max_keyword_length: 50 mail_save_crlf: no mmap_disable: no dotlock_use_excl: yes fsync_disable: no mail_nfs_storage: no mail_nfs_index: no mailbox_list_index_disable: yes lock_method: fcntl maildir_stat_dirs: no maildir_copy_with_hardlinks: yes maildir_copy_preserve_filename: no maildir_very_dirty_syncs: no mbox_read_locks: fcntl mbox_write_locks: dotlock fcntl mbox_lock_timeout: 300 mbox_dotlock_change_timeout: 120 mbox_min_index_size: 0 mbox_dirty_syncs: yes mbox_very_dirty_syncs: no mbox_lazy_writes: yes dbox_rotate_size: 2048 dbox_rotate_min_size: 16 dbox_rotate_days: 1 mail_drop_priv_before_exec: no mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_process_size: 256 mail_plugins: mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 mail_log_prefix: %Us(%u): mail_log_max_lines_per_sec: 10 imap_max_line_length: 65536 imap_capability: imap_client_workarounds: imap_logout_format: bytes=%i/%o imap_id_send: imap_id_log: imap_idle_notify_interval: 120 pop3_no_flag_updates: no pop3_enable_last: no pop3_reuse_xuidl(default): no pop3_reuse_xuidl(imap): no pop3_reuse_xuidl(pop3): yes pop3_save_uidl: no pop3_lock_session: no pop3_uidl_format(default): %08Xu%08Xv pop3_uidl_format(imap): %08Xu%08Xv pop3_uidl_format(pop3): %08Xv%08Xu pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh pop3_logout_format: top=%t/%p, retr=%r/%b, del=%d/%m, size=%s dict_db_config: dict_process_count: 1 auth default: mechanisms: plain realms: default_realm: cache_size: 0 cache_ttl: 3600 cache_negative_ttl: 3600 executable: /usr/local/libexec/dovecot/dovecot-auth user: root chroot: username_chars: abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_ username_translation: username_format: master_user_separator: anonymous_username: anonymous krb5_keytab: gssapi_hostname: winbind_helper_path: /usr/bin/ntlm_auth failure_delay: 2 verbose: yes debug: yes debug_passwords: yes ssl_require_client_cert: no ssl_username_from_cert: no use_winbind: no count: 1 worker_max_count: 30 process_size: 256 passdb: driver: shadow args: deny: no pass: no master: no userdb: driver: passwd args: #

2 3

[Dovecot] Extdata plugin, MySQL
by Steve Fatula 06 Sep '11

06 Sep '11

Does someone have an example of configuring the Pigeonhole Sieve Extdata plugin with MySQL dict? Particularly, the map and what key might be used in this? The doc in the wiki isn;t clear at all to me when one wants to use MySQL store. The file in the doc folder of the mercurial repository is basically what I want to do, in that RFC, it's bascially looking for a discard_spam setting, I presume by user whose Sieve script is running. So, what would the sql mapping file look like? What lookup key is used? I can't really find any map documentation for the syntax, can a special key be used, perhaps, I need to append a value to the user if that is the key? Can this data be accessed via the dictionary proxy to make access more efficient? While I don't want to discard spam based on the setting in the database, I DO want to not move to the spam folder based on a setting stored in an existing MySQL database. So, very similar idea. I want to use an existing database, but, the key is username + a certain constant value for another field. Am hoping this can be mapped as well. Steve

1 0

[Dovecot] Mail files?
by Knute Johnson 05 Sep '11

05 Sep '11

I have a Ubuntu server running dovecot 1.2.9 with mail in mbox. There are mail files in /var/mail/user and there are mail files in /home/user/mail that correspond to the IMAP folders. In the config file details below it shows mail_location: mbox:~/mail:INBOX=/var/mail/%u, does that put the INBOX in /var/mail? Is INBOX in /var/mail/user to allow local delivery or something? If I was using POP3 instead would all the mail be in the INBOX? Can I backup these files by just copying and if a file is destroyed, copy them back? # 1.2.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-33-generic i686 Ubuntu 10.04.3 LTS log_timestamp: %Y-%m-%d %H:%M:%S protocols: imaps ssl_cert_file: /etc/ssl/certs/ssl-cert-snakeoil.pem ssl_key_file: /etc/ssl/private/ssl-cert-snakeoil.key login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login mail_max_userip_connections: 16 mail_privileged_group: mail mail_location: mbox:~/mail:INBOX=/var/mail/%u mbox_write_locks: fcntl dotlock imap_capability: IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS auth default: passdb: driver: pam userdb: driver: passwd Thanks, -- Knute Johnson knute2011(a)knutejohnson.com

3 4

[Dovecot] 2.1.alpha1: SIGSEGV on EXPUNGE
by Lutz Preßler 05 Sep '11

05 Sep '11

Hi, I upgraded my test installation from Debian lenny with latest 2.0.14 auto builds to squeeze with v2.1.alpha1 (amd64) auto builds. (From /var/log/mail.log: Sep 5 12:34:45 pressler dovecot: master: Dovecot v2.1.alpha1 starting up (core dumps disabled) No hg hash tag in log output anymore?) Now the imap processes segfault on every EXPUNGE command: Excerpt from telnet session: 0 store 1585:1585 flags \Deleted * 1585 FETCH (FLAGS (\Deleted)) 0 OK Store completed. 0 expunge Log output: Sep 5 15:40:59 pressler dovecot: imap(2580, lpmail): delete: box=INBOX, uid=34722, msgid=<E1R0ZJW-00FrF7-0U(a)intern.SerNet.DE>, size=1980, vsize=2031, from=Lutz Pressler <Lutz.Pressler(a)SerNet.DE>, flags=(\Deleted) Sep 5 15:41:22 pressler dovecot: imap(2580, lpmail): expunge: box=INBOX, uid=34722, msgid=<E1R0ZJW-00FrF7-0U(a)intern.SerNet.DE>, size=1980, vsize=2031, from=Lutz Pressler <Lutz.Pressler(a)SerNet.DE>, flags=(\Deleted) Sep 5 15:41:22 pressler dovecot: master: Error: service(imap): child 2580 killed with signal 11 (core dumps disabled) Also happens with mail_log plugin disabled. Any idea? Configuration on request (or tests with core dumps enabled). Regards, Lutz -- Lutz Preßler <Lutz.Pressler(a)SerNet.DE> http://www.SerNet.DE/ SerNet Service Network GmbH, Bahnhofsallee 1b, D-37081 Göttingen Tel.: +49-551-370000-2, FAX: +49-551-370000-9 AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen

2 1

[Dovecot] v2.1.alpha1 released
by Timo Sirainen 05 Sep '11

05 Sep '11

http://dovecot.org/releases/2.1/alpha/dovecot-2.1.alpha1.tar.gz http://dovecot.org/releases/2.1/alpha/dovecot-2.1.alpha1.tar.gz.sig So it's time for the first alpha version of Dovecot v2.1. There are no huge intrusive changes, so I expect v2.1.0 to be released this year (maybe even in a few months?) The biggest changes are related to full text search handling. I'll probably still make some changes to it and its configuration. Also it wouldn't be difficult to add more backends, does anyone want to add Xapian support for Dovecot? :) Mailbox list indexes are intended to improve performance of IMAP STATUS command lookups, since they could be simply looked up from the index without even opening the mailbox. TODO related to this: 1) optimize virtual mailbox handling so that it doesn't need to actually open all of the mailboxes' index files, it can simply look at the mailbox list index for changes. 2) Implement IMAP NOTIFY extension using this. Statistics tracking can be used to look at what's happening currently in your system and also its history. You can look at what's happening in command/session/user/domain/ip level. "doveadm stats top" gives a list of currently running sessions and sorts them by whichever is using the most disk io/cpu/whatever. "doveadm stats dump" followed by one of the levels shows you a raw dump of everything stored in that level. It would be nice if someone wrote a pretty Ajaxy HTML stats browser where you could zoom in/out of levels. I'd also like to hear if anyone has suggestions on how to improve what stats are gathered or how they could be exported. (I've thought about SNMP, but I'm not entirely sure how to export the data nicely using it.) Finally here's the NEWS file: * Plugins now use UTF-8 mailbox names rather than mUTF-7: acl, autocreate, expire, trash, virtual * auth_username_format default changed to %Lu. If you really want case sensitive usernames, set it back to empty. * Solr full text search backend changed to use mailbox GUIDs instead of mailbox names, requiring reindexing everything. solr_old backend can be used with old indexes to avoid reindexing, but it doesn't support some newer features. + imapc (= IMAP client) storage allows using a remote IMAP server to be used as storage. This allows using Dovecot as a smart (caching) proxy or using dsync to do migration from remote IMAP server. + Mailbox indexing via queuing indexer service (required for Lucene) + Lucene full text search (FTS) backend rewritten with support for different languages + FTS finally supports "OR" search operation + FTS supports indexing attachments via external programs + IMAP FUZZY extension, supported by Lucene and Solr FTS backends + Mailbox list indexes + Statistics tracking via stats service. Exported via doveadm stats. + Autocreate plugin creates/subscribes mailboxes physically only when the mailbox is opened for the first time. Mailbox listing shows the autocreated mailboxes even if they don't physically exist. + Password and user databases now support default_fields and override_fields settings to specify template defaults/overrides. - listescape plugin works perfectly now

7 28

[Dovecot] Possible signed/unsigned bug in libdovecot-storage (2:2.0.14 )
by Kui Zhang 05 Sep '11

05 Sep '11

Hello We are getting following errors when moving mail from inbox to any folder. "Message has been copied too many times (32767+1)" lazy_expunge is enabled. Error messages seems to be from libdovecot-storage. Any one can confirm the bug? or knows of a work around? Thanks K.Z

2 5

[Dovecot] User tries to move folder, then looses it
by Spyros Tsiolis 05 Sep '11

05 Sep '11

Hello, Well, this is kind of difficult to explain. I have this user that keeps making mistakes on his pc and sometimes I don't know if I should believe her or not. Anywhoo, this time round, she managed to loose a whole folder on Thunderbird. She claims she tried to move the folder from a tree directory structure (see : sub-sub-folder) she created for herself to another place underneath "root". Additionaly, she managed to mangle things up since she used on TB characters like "/" "\" and "&" . So thunderbird refuses to access those sub-folders on the folder tree and I cannot rename them (in order to have later access). Here's dovecot info : -------------------------------------------------------------------------- # 1.2.16: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-194.17.4.el5 i686 CentOS release 5.5 (Final) ext3 base_dir: /var/run/dovecot/ log_path: /var/log/dovecot/dovecot.log info_log_path: /var/log/dovecot/dovecot-info.log ssl_parameters_regenerate: 48 verbose_ssl: yes login_dir: /var/run/dovecot//login login_executable: /usr/local/dovecot/libexec/dovecot/imap-login login_greeting: * Dovecot ready * login_max_processes_count: 64 mail_location: maildir:/var/MailRoot/domains/%d/%n/Maildir mail_plugins: zlib auth default: verbose: yes debug: yes debug_passwords: yes passdb: driver: passwd-file args: /etc/dovecot/passwd passdb: driver: pam userdb: driver: static args: uid=vmail gid=vmail home=/home/vmail/%u userdb: driver: passwd -------------------------------------------------------------------------- TIA, s. ---- "I merely function as a channel that filters music through the chaos of noise" - Vangelis

1 0

[Dovecot] Trash Plugin
by Aydın Demirel 05 Sep '11

05 Sep '11

ReHi; I have a question about trash plugin. I added following lines into dovecot.conf: quota_rule = *:storage=2048000 quota_rule2 = Trash:storage=1MB quota_rule3 = SPAM:ignore When I set *:storage line as default quota_rule , There is no problem.. But when I removed this line and set Trash:storage as default quota_rule, plugin is not working.. That I said, Do I have to add *:storage line as first default line in config line? Regards.. -- *Aydın Demirel Endersys Ltd. Sistem Destek Mühendisi/ System Support Engineer* * *<<Endersys is the first Advanced Business Partner of Red Hat in Turkey! http://www.europe.redhat.com/partners/endersys/>> Phone : +90 216 470 9423 | GSM : +90 530 401 8203 Fax : +90 216 470 9508 | Web : http://www.endersys.com <http://www.endersys.com/> Blog : http://blog.endersys.com <http://blog.endersys.com/> Twitter : http://www.twitter.com/endersys LPI : The #1 Linux Certification for IT Professionals LPI (Linux Professional Institute) Turkey http://www.lpi-turkey.com <http://www.lpi-turkey.com/>

2 2

[Dovecot] v2.1 stats documentation
by Timo Sirainen 04 Sep '11

04 Sep '11

http://wiki2.dovecot.org/Statistics

1 0

[Dovecot] Thunderbird caching problem
by Chris Cappuccio 03 Sep '11

03 Sep '11

Using a fairly simple dovecot config (which obviously needs some max limit tweaking) we have problems with IMAP synchronization between thunderbird clients. Two TB clients in the same IMAP mailbox will, from time to time, show different views of the same INBOX folders, when TB caching is enabled. The only fix is to right-click on the folder, go to "Properties" and use the "Repair Folder" option which repairs the local TB .msf cache file. Is there any server-side fix/workaround that would keep TB from regularly going out-of-sync ? This happens with TB3 and newer versions, in concert with either dovecot 1 or 2. The obvious fix is to disable TB local caching, which unfortunately also disables certain search features and can be a pain for large mailboxes. # dovecot -n # 2.0.13: /etc/dovecot/dovecot.conf doveconf: Warning: service auth { client_limit=4096 } is lower than required under max. load (7168) doveconf: Warning: service anvil { client_limit=2048 } is lower than required under max. load (3075) # OS: OpenBSD 5.0 amd64 ffs auth_default_realm = dovecot.org auth_mechanisms = plain digest-md5 cram-md5 apop auth_username_translation = :@ default_client_limit = 2048 default_internal_user = _dovecot default_login_user = _dovenull default_process_limit = 1024 disable_plaintext_auth = no first_valid_gid = 125 first_valid_uid = 125 mail_location = maildir:/mail/%d/%n/ managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mbox_write_locks = fcntl mmap_disable = yes passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_global_path = /etc/dovecot/default.sieve } protocols = imap pop3 lmtp sieve service auth { unix_listener auth-userdb { user = mail } } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } ssl_cert = </etc/balls/balls-cert.pem ssl_key = </etc/balls/balls-key.pem userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lda { mail_plugins = sieve } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep tb-lsub-flags mail_max_userip_connections = 50 } protocol pop3 { mail_max_userip_connections = 50 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_save_uidl = yes pop3_uidl_format = %v-%u }

4 4

[Dovecot] Control of \Seen flags dovecot 1.2.9
by Kristen J. Webb 03 Sep '11

03 Sep '11

Hi All, I have public mailboxes working with ACL's now, and I'm testing the ACL behavior. I've added lrws to two users so they can check off the messages they have read. I'm using CONTROL and INDEX in the location parameter for the namespace. It appears that if one user marks a message as read, all users see that message read. Is there any way to configure dovecot, so that each user maintains their own view of read messages? Relevant config (i think): namespace private { separator = / prefix = location = maildir:/home/vmail/%d/%n/Maildir:LAYOUT=fs inbox = yes } namespace public { separator = / prefix = Public/ location = maildir:/home/vmail/Public:LAYOUT=fs:CONTROL=/home/vmail/%d/%n/Maildir/Public:INDEX=/home/vmail/%d/%n/Maildir/Public subscriptions = no } -- Mr. Kristen J. Webb Teradactyl LLC. PHONE: 1-505-242-1091 EMAIL: kwebb(a)teradactyl.com VISIT: http://www.teradactyl.com Home of the True incremental Backup System

1 1

[Dovecot] Can't got mail by OUTLOOK for a half million mails account
by Dong Ding 02 Sep '11

02 Sep '11

Hi, I used postfix always_bcc to backup mail. And up to now the backup account has half million mails in cur/, when I first time tried to receive the mail by outlook, it failed , no responds. Does any one has some good idea to deal with this problem? Thanks

4 3

[Dovecot] Kerberos GSSAPI - proper item name in keytab
by Stanislav Klinkov 02 Sep '11

02 Sep '11

Hello, ALL. I am trying to organize a transparent single sign-on concept for my Active Directory users into Dovecot via IMAP. On the user's desktop I use Thunderbird 6.0 as a mail client (MUA), Windows XP as an operating system. Domain is controlled by Windows 2008 Server SP2 with Active Directory. I have installed on my Mail server Debian GNU/Linux 6.0.2 (Squeeze) and Dovecot 2.0.13 from official "wheezy" repositories of it with all dependencies. I ran into in a problem with generating proper "/etc/krb5.keytab" file for successful kerberos authentication against AD controller. I has performed all the steps described in official dovecot wiki here: http://wiki2.dovecot.org/Authentication/Kerberos I have generated a service ticket with name "imap/efim.test.local(a)MYORG.LAN" exactly as described in wiki. ("MYORG.LAN" is my kerberos realm.) But this does not work. I see in debug logs something like this: ******** main service logs ******** Aug 29 16:05:14 auth: Info: gssapi(?,192.168.4.12): While processing incoming data: Unspecified GSS failure. Minor code may provide more information Aug 29 16:05:14 auth: Info: gssapi(?,192.168.4.12): While processing incoming data: Wrong principal in request ************************************* ******** auth debug logs ********* Aug 29 16:05:14 auth: Debug: gssapi(?,192.168.4.12): Obtaining credentials for imap(a)efim.test.local Aug 29 16:05:14 auth: Debug: client out: CONT 1 Aug 29 16:05:14 auth: Debug: client in: CONT<hidden> Aug 29 16:05:16 auth: Debug: client out: FAIL 1 ************************************* But (!). If I define << auth_gssapi_hostname = "$ALL" >> instead of << auth_gssapi_hostname = efim.test.local >> then everything works fine. I decided to find out where is the problem, so I dig into source code of gssapi module, "mech-gssapi.c". For versions 2.0.13 and 2.0.14 of dovecot I see there the following: ********* mech-gssapi.c ********* static OM_uint32 obtain_service_credentials(struct auth_request *request, gss_cred_id_t *ret_r) /* blah-blah-blah */ principal_name = t_str_new(128); str_append(principal_name, service_name); str_append_c(principal_name, '@'); str_append(principal_name, request->set->gssapi_hostname); auth_request_log_debug(request, "gssapi", "Obtaining credentials for %s", str_c(principal_name)); inbuf.length = str_len(principal_name); inbuf.value = str_c_modifiable(principal_name); major_status = gss_import_name(&minor_status, &inbuf, GSS_C_NT_HOSTBASED_SERVICE, &gss_principal); ********************************* So, according to source code, Dovecot tries to find in krb5.keytab a principal named "imap@hostname". However wiki says to create the principal named "imap/hostname@REALM". Please, clarify where is the error: in source code, in wiki, or I have misunderstood something. Respectfully, Stanislav Klinkov.

7 19

[Dovecot] OT - small hd recommendation
by Daniel L. Miller 02 Sep '11

02 Sep '11

A little OT - but I've seen a few opinions voiced here by various admins and I'd like to benefit. Currently running a single combined server for multiple operations - fileserver, mailserver, webserver, virtual server, and whatever else pops up. Current incarnation of the machine, after the last rebuild, is an AMD Opteron 4180 with a Supermicro MB using ATI SB700 chipset - which means it supports SATA 3.0. Current storage is one o/s drive, and a 4-drive RAID10 array. The RAID10 is using the Linux softraid via mdadm. The drives are Seagates - ST3160811AS. So it's 320GB of storage, and SATA 1.5. I'm seeing some warnings & errors in my logs & dmesg - and Google tells me this can the result of several factors, including the hard drives. I haven't seen any SMART warnings as yet - but I am getting a little nervous and thinking about upgrading the storage. At this time, I'm just interested in recommendations for hard drives & partitioning strategy. At the time I created the RAID10 array - I was still in the early stages of learning these technologies (not that I know that much more now!) so I probably didn't take advantage of any of the advanced settings such as stripe size, cluster size, etc. I am using XFS. As part of the potential upgrade, I'm considering changing to RAID6 - seems a bit more efficient use of space. I see no reason for SSD - I think a set of reasonable 7200rpm drives should be just fine. What I don't know is, compared to my current 4 drive RAID10 with SATA 1.5, would even a single SATA 3 drive be comparable in terms of seek performance? Should I stick with the RAID-10? -- Daniel

6 7

[Dovecot] thunderbird and subscriptions with sieve
by Kristen J. Webb 02 Sep '11

02 Sep '11

Hi All, I'm a newbie trying to move mail out of my ISP onto a ubuntu (lucid) dovecot 1.2.9 server. Is there any way to automatically add folders created by sieve (GNU Mailutils 2.1) to the subscriptions file for a user? I'm currently testing spam, and if sieve created the folder with the first message, the thunderbird user does not see the new folder. Even more interesting, if the user then tries to create the Spam directory it thunderbird seems to quietly ignore the request and the user still cannot see the folder, but I digress... I can manually subscribe with thunderbird, but this won't scale for more complex sieve later by making the user responsible for finding everything. I can turn off subscription view in advanced settings on thunderbird, but we are trying to wean ourselves of of individual mail clients and I don't want to have to test this everywhere. Many thanks in advance! Kris -- Mr. Kristen J. Webb Teradactyl LLC. PHONE: 1-505-242-1091 EMAIL: kwebb(a)teradactyl.com VISIT: http://www.teradactyl.com Home of the True incremental Backup System

6 6

[Dovecot] dovecot imap permission denied
by Daminto Lie 02 Sep '11

02 Sep '11

Hi, I received the following error from mail.log Aug 31 13:50:57 server1 dovecot: IMAP(mike_lee): mkdir(/home/mike_lee/Maildir/.INBOX.Sent/cur) failed: Permission denied (euid=1004 egid=1003(companyusergroup) missing +w perm: /home) What I have tried to do is changing the permission for /home by typing "sudo chmod 755 /home" and this does not work. What does it mean by missing +w perm: /home? and wonder how to get around it? This is what I have in main.cf from Postfix myhostname = server1 myorigin = /etc/mailname relayhost = mynetworks = 127.0.0.0/8, 192.168.1.0/24 inet_interfaces = all inet_protocols = ipv4 home_mailbox = Maildir/ smtpd_sasl_type = dovecot #smtpd_sasl_path = private/auth-client smtpd_sasl_path = private/auth smtpd_sasl_auth_enable = yes smtpd_recipient_restrictions = permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination #smtpd_sender_login_maps = ldap:/etc/postfix/ldap_senders.cf broken_sasl_auth_clients = yes #dovecot_destination_recipient_limit = 1 debug_peer_list = 127.0.0.1 debug_peer_level = 5 Any help is very much appreciated. Thank you

2 6

[Dovecot] sieve vacation problem (discarding)
by Lampa 02 Sep '11

02 Sep '11

Hello, i'm using 1.2.15 version on debian. I'm getting "discarding vacation response for message implicitly delivered to <user(a)domain.com>" I have domain domain.com which has alias do-main.com. When sending email to main domain (domain.com) seems to be ok, but for aliased domain getting discard ;( I tried "scary things" from http://www.dovecot.org/list/dovecot/2009-August/042360.html require ["vacation", "variables", "envelope"]; if envelope :matches "to" "*" { set "envto" "${1}"; vacation :days 1 :addresses ["${envto}"] :subject "Out of order..." "Body message"; } Is implemented :addresses ["*"] in later 1.2 version ? Where is problem? What i must to do to get this thing working ? Upgrading to version 2.x isn't solution for me now. Thank you for advices and help. -- Lampa

2 1

Re: [Dovecot] Password query returned multiple matches
by Arne K. Haaje 01 Sep '11

01 Sep '11

Wednesday 31. August 2011 11.44.03 skrev Simon Brereton : > > -----Original Message----- > > From: Timo Sirainen [mailto:tss@iki.fi] > > > > On 31.8.2011, at 18.19, Simon Brereton wrote: > > > Aug 30 22:41:45 mail dovecot: auth-worker(default): > > sql(sbrereton(a)domain.co.uk,64.88.168.84): Password query returned > > multiple matches > > .. > > > > > password_query = SELECT EmailAdd AS user, Password AS password, > > > > concat('/var/spool/mail/virtual/',MailDirLoc) as userdb_home, 999 as > > userdb_uid, 115 as userdb_gid FROM MailAccounts WHERE Username='%u' > > AND active = '1'; > > > > > Since the EmailAdd is unique I don't see how it can return multiple > > > > matches. > > > > You're querying with Username, not with EmailAdd, and apparently > > there are multiple rows where Username='sbrereton(a)domain.co.uk'. > > Well, what do you know - there are two Usernames that at the same! I have > no idea how that happened. You could change or add the index for Username column to UNIQUE. That will ensure it does not happen again :) Arne -- Arne K. Haaje - Dr Linux http://www.drlinux.no/ ::: arne(a)drlinux.no LinkedIn: http://no.linkedin.com/pub/arne-haaje/27/189/bb

1 0

[Dovecot] Segmentation fault in dovecot director lmtp service
by Reinhard Vicinus 01 Sep '11

01 Sep '11

Hi, the lmtp service of our dovecot director installation quits with a segmentation fault if a lot of mails are simultaneously delivered. For example if the postfix mailqueue is filled (for whatever reason) and postqueue -f is run the lmtp service quits with a segmentation fault: Program terminated with signal 11, Segmentation fault. #0 o_stream_cork (stream=0x0) at ostream.c:75 75 if (unlikely(stream->closed)) (gdb) backtrace #0 o_stream_cork (stream=0x0) at ostream.c:75 #1 0x00007fa6e6af45d9 in lmtp_client_send_more (client=0x2435870) at lmtp-client.c:596 #2 0x0000000002434170 in ?? () #3 0x00000000004070d9 in proxy_send_more (proxy=0x2435870) at lmtp-proxy.c:390 #4 lmtp_proxy_data_input (proxy=0x2435870) at lmtp-proxy.c:444 #5 0x00007fa6e6af456f in lmtp_client_send_data (client=0x24347a0) at lmtp-client.c:306 #6 0x0000000002434f98 in ?? () #7 0xffffffffe6af73c5 in ?? () #8 0x0000000002434840 in ?? () #9 0x0000000000000000 in ?? () I don't have any ideas why the stream is 0. The configuration of the dovecot director installation is attached. Please let me know if i shall provide any more information or test something. Kind regards Reinhard

4 5

[Dovecot] Crash in director/lmtp-proxy (lmtp_proxy_output_timeout)
by Jan-Frode Myklebust 01 Sep '11

01 Sep '11

FYI, we saw one panic on our director/lmtp-proxy yesterday. It's running dovecot v2.0.13, so it very well might have been fixed already.., but here it is anyway: Aug 31 11:33:31 loadbalancer1 dovecot:: lmtp(4119): Panic: file lmtp-proxy.c: line 370 (lmtp_proxy_output_timeout): assertion failed: (proxy->data_input->eof) Aug 31 11:33:31 loadbalancer1 dovecot:: lmtp(4119): Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0 [0x3aabc3bb70] -> /usr/lib64/dovecot/libdovecot.so.0 [0x3aabc3bbc6] -> /usr/lib64/dovecot/libdovecot.so.0 [0x3aabc3b083] -> dovecot/lmtp [0x406c90] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handle_timeouts+0xcd) [0x3aabc46a8d] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run+0x68) [0x3aabc47a48] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_run+0x2d) [0x3aabc466fd] -> /usr/lib64/dovecot/libdovecot.so.0(master_service_run+0x13) [0x3aabc34fe3] -> dovecot/lmtp(main+0x144) [0x404034] -> /lib64/libc.so.6(__libc_start_main+0xf4) [0x32ae81d994] -> dovecot/lmtp [0x403e39] Aug 31 11:33:31 loadbalancer1 dovecot:: master: Error: service(lmtp): child 4119 killed with signal 6 (core dumps disabled) On postfix side at the same time, we saw a few different messages about: postfix/lmtp[5178]:: 849FD1C024: lost connection with loadbalancers.example.com[192.168.42.15] while sending end of data -- message may be sent more than once so I suspect this crash took down all active lmtp-proxyed connections. -jf

1 0

[Dovecot] lmtp bouncing -- Invalid parameters (in reply to MAIL FROM command)
by Jan-Frode Myklebust 01 Sep '11

01 Sep '11

I just configured postfix' virtual_transport to point at my dovecot director, but am seeing occational problems like this: Aug 31 11:50:06 smtpgw postfix/lmtp[5339]: 69E2F5410D: to=<email(a)example.net>, relay=loadbalancers.example.net[192.168.42.17]:24, delay=0.15, delays=0.14/0.01/0/0, dsn=5.5.4, status=bounced (host loadbalancers.example.net[192.168.42.17] said: 501 5.5.4 Invalid parameters (in reply to MAIL FROM command)) but can't find anything interesting in the dovecot logs.. Anybody have ideas for how to make postfix play nice with dovecot's lmtp ? smtpgws% rpm -q postfix postfix-2.3.3-2.1.el5_2 loadbalancers% rpm -q dovecot dovecot-2.0.13-2 backendmailstorers% rpm -q dovecot dovecot-2.0.13-2 -jf

2 3

[Dovecot] Proprietary mail storage.
by Alex Cherniak 01 Sep '11

01 Sep '11

I have a large existing read-only collection of mails packaged in individual zip files as <rfc822 file>+<some additional info>. Is it possible (and how difficult) to create a proprietary plugin (like gzip) which will open a zip file, extract mail and pass it back to Dovecot? Where do I start? If plugin is not the right approach, what is? Another question is how will this affect Dovecot performance and how to avoid any significant degradation. Any help is appreciated.Thanks.

3 9

Re: [Dovecot] Multiple domains to one inbox and temporary redirects...
by Nick Rosier 01 Sep '11

01 Sep '11

Simon Brereton wrote: > Hi > > Can anyone point me to a howto to arrange for multiple domains to deliver to one inbox with Dovecot? For example, user1(a)example.com and user1(a)example.net should both be delivered to /var/spool/mail/virtual/example.net/user1 > > Currently, I have the dovecot LDA set as: > > dovecot unix - n n - - pipe > flags=DRhu user=mailsystem argv=/usr/lib/dovecot/deliver -f ${sender} -d ${user}@${nexthop} > > > and in dovecot.conf: > > mail_location: maildir:/var/spool/mail/virtual/%d/%n > > For some domains only, I need to override that mail_location. > > > Related to that, when user1 leave and user2 would like to receive user1's email, how can I get it so that email to user1(a)example.com is delivered to user2(a)example.com? Previously when I was using Postfix to deliver the mails, I could change the maildirloc in the DB - but I’m not sure how to accomplish this with dovecot LDA. > > I'm using Postfixadmin to manage users and have server alias-domains. All mail sent to an alias-domain is delivered to the other domain. Quite easy if you've got postfixadmin already setup. Otherwise I think you could configure virtual_alias_maps in postfix to something like hash:virtual_domains virtual_domains: @example.net @example.com N.

4 3

[Dovecot] sorting order changed during migration from courier
by Micah Anderson 01 Sep '11

01 Sep '11

Hello, I've been working to migrate to dovecot (debian stable: 1:1.2.15-7) from courier (debian old-stable: 4.4.0-2). I've setup everything and migrated a test user over to the new system, and ran the courier-dovecot-migrate.pl script. The user is using alpine (the free version of pine) and their sort order changed on move to dovecot. Originally it was the default in alpine, which is to sort based on arrival. If he changes the sort order in alpine to sort based on date, then things are back to how he expects it. I noticed that there are no known issues with pine (http://wiki.dovecot.org/Clients#Pine) Ideally, I would prefer if all the users who are migrated aren't presented with a different sort order than they were used to, as the support burden will be quite high. What is it about this migration that could have caused that, and more importantly, how can I fix it? I moved the mail from the original system to this system via rsync -a. The old system was an i686 machine and ext3, this new one is amd64 and ext4. thanks for any ideas! micah # dovecot -n # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.2 protocols: imap imaps pop3 pop3s disable_plaintext_auth: no verbose_ssl: yes login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_greeting: howdy, ready. login_processes_count: 10 login_max_processes_count: 256 first_valid_uid: 8 last_valid_uid: 8 first_valid_gid: 8 last_valid_gid: 8 mail_uid: 8 mail_gid: 8 mail_location: maildir:~/ maildir_copy_preserve_filename: yes maildir_very_dirty_syncs: yes mbox_write_locks: fcntl dotlock mail_executable(default): /maildir/postlogin_imap mail_executable(imap): /maildir/postlogin_imap mail_executable(pop3): /maildir/postlogin_pop mail_process_size: 512 mail_plugins(default): expire quota imap_quota mail_plugins(imap): expire quota imap_quota mail_plugins(pop3): expire quota mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 imap_client_workarounds(default): tb-extra-mailbox-sep delay-newmail imap_client_workarounds(imap): tb-extra-mailbox-sep delay-newmail imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh namespace: type: private separator: . prefix: INBOX. inbox: yes list: yes subscriptions: yes lda: postmaster_address: postmaster(a)riseup.net auth default: default_realm: riseup.net verbose: yes passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: prefetch dict: expire: mysql:/etc/dovecot/dovecot-dict-expire.conf --

1 0

[Dovecot] mail spool filesystem
by Julio Cesar Covolato 31 Aug '11

31 Aug '11

Hi! I´m about to migrate a system whith 5000 accounts whith (~ 500GB) from "postfix/courier-imap/maildrop/mysql" to a new hardware whith "postfix/dovecot/dovecot/mysql". I´ll make a separate partition (raid 1) for the mail spool (/var/spool/vmail) and want to now what type of filesystem to use on it to increase performance. I read that XFS is a good choice, but is not too reliable... Any sugestions? Thanks in advance, -- ----------------------------- _ Julio Cesar Covolato 0v0<julio(a)psi.com.br> /(_)\ F: 55-11-3129-3366 ^ ^ PSI INTERNET -----------------------------

15 19

[Dovecot] Multiple domains to one inbox and temporary redirects...
by Simon Brereton 31 Aug '11

31 Aug '11

Hi Can anyone point me to a howto to arrange for multiple domains to deliver to one inbox with Dovecot? For example, user1(a)example.com and user1(a)example.net should both be delivered to /var/spool/mail/virtual/example.net/user1 Currently, I have the dovecot LDA set as: dovecot unix - n n - - pipe flags=DRhu user=mailsystem argv=/usr/lib/dovecot/deliver -f ${sender} -d ${user}@${nexthop} and in dovecot.conf: mail_location: maildir:/var/spool/mail/virtual/%d/%n For some domains only, I need to override that mail_location. Related to that, when user1 leave and user2 would like to receive user1's email, how can I get it so that email to user1(a)example.com is delivered to user2(a)example.com? Previously when I was using Postfix to deliver the mails, I could change the maildirloc in the DB - but I’m not sure how to accomplish this with dovecot LDA. Again, any pointers would be welcome. Thanks. Simon

1 0

Re: [Dovecot] Password query returned multiple matches
by Timo Sirainen 31 Aug '11

31 Aug '11

On 31.8.2011, at 18.19, Simon Brereton wrote: > Aug 30 22:41:45 mail dovecot: auth-worker(default): sql(sbrereton(a)domain.co.uk,64.88.168.84): Password query returned multiple matches .. > password_query = SELECT EmailAdd AS user, Password AS password, concat('/var/spool/mail/virtual/',MailDirLoc) as userdb_home, 999 as userdb_uid, 115 as userdb_gid FROM MailAccounts WHERE Username='%u' AND active = '1'; > > Since the EmailAdd is unique I don't see how it can return multiple matches. You're querying with Username, not with EmailAdd, and apparently there are multiple rows where Username='sbrereton(a)domain.co.uk'.

2 1

[Dovecot] Password query returned multiple matches
by Simon Brereton 31 Aug '11

31 Aug '11

Hi After successfully setting up dovecot, I see this error in the logs. Aug 30 22:41:45 mail dovecot: auth-worker(default): sql(sbrereton(a)domain.co.uk,64.88.168.84): Password query returned multiple matches Aug 30 22:41:52 mail dovecot: pop3-login: Aborted login (auth failed, 1 attempts): user=<sbrereton(a)domain.co.uk>, method=PLAIN, rip=64.88.168.84, lip=127.0.0.1, TLS Can you tell me what it means or what I should look for? In my dovecot-sql.conf I have this query: password_query = SELECT EmailAdd AS user, Password AS password, concat('/var/spool/mail/virtual/',MailDirLoc) as userdb_home, 999 as userdb_uid, 115 as userdb_gid FROM MailAccounts WHERE Username='%u' AND active = '1'; Since the EmailAdd is unique I don't see how it can return multiple matches. Thanks. Simon

1 0

[Dovecot] [PATCH] Indexing mail attachments with Dovecot + Solr
by Antonio Perez-Aranda 31 Aug '11

31 Aug '11

Indexing mail attachments with Dovecot + Solr. This patch has been tested with these versions: * dovecot 2.0.9 * apache-solr 1.4.1 This is a patch for the fts-solr plugin (that indexes mail messages for Dovecot with Solr). In main stream, the plugin does not index attachments; With this patch, you can index mails and their attachments (pdf, docs, openoffice docs...) . You can get others goodies with this patch and the Solr Config provided, like Synonyms and Stemming (Spanish by default). Attachment indexing is provided by Solr Cell and Tika (ExtractingRequestHandler) * http://wiki.apache.org/solr/ExtractingRequestHandler Synonyms and Stemming are provided by SnowballPorterFilterFactory from Solr Language Analysis: * http://wiki.apache.org/solr/LanguageAnalysis We have tested Solr with Tomcat and Jetty. Tomcat is better to handle UTF-8 and bigger POSTS. Attachments file format supported * http://tika.apache.org/0.9/formats.html At present, attachments in attachments (like, for example, attachments in fordwarded "eml" attachments) are not indexed. Also, keep in mind that there are many types of files, and many variants of the same file type. Per Example, some pdf files are "not readable" by solr pdf reader. Config: There are two new options added to fts_solr property: * index-attachments Enable attachments indexing. * manual-update Avoid index on user search. You can trigger indexing using doveadm search or doveadm index commands. There is a new property for the section plugin to filter the mimetypes that you want to index. * fts_solr_mimetype files with this mimetype will be sent to solr. After integrating solr directory in your solr config, and building Dovecot with fts-solr support and with fts-solr-attachments-r885.patch applied, you can update your dovecot config by adding to your dovecot.conf: ... mail_pluings = $mail_plugins fts fts_solr plugin { fts = solr fts_solr = url=http://solrhost:8983/solr/ break-imap-search index-attachments fts_solr_mimetype = application/x-pdf application/vnd.openxmlformats-officedocument.wordprocessingml.document } ... -- Antonio Pérez-Aranda Alcaide aperezaranda(a)yaco.es Yaco Sistemas S.L. http://www.yaco.es/ C/ Rioja 5, 41001 Sevilla Teléfono +34 954 50 00 57 Fax +34 954 50 09 29

3 5

[Dovecot] auth: Error: LDAP: Connection lost to LDAP server, reconnecting
by Angel L. Mateo 31 Aug '11

31 Aug '11

Hello, I continue debugging my problems with my update to dovecot 2.x :-( I have dovecot 2.0.13 running in ubuntu 10.04 (lucid) x64. My users are in a ldap directory. The problem is that I have a lot of errors like: Aug 24 23:07:32 myotis28 dovecot: auth-worker(default): LDAP: Connection lost to LDAP server, reconnecting I have seen in the mail list a patch for 1.2 (http://hg.dovecot.org/dovecot-1.2/rev/355d5a40f7a7) to ignore these logs when the disconnection is because of idle timeouts. As far as I could see in this patch and 2.0.13 source code, this patch is already applied in 2.0. So I guess that the disconnection is for other problem, isn't it? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información _o) y las Comunicaciones Aplicadas (ATICA) / \\ http://www.um.es/atica _(___V Tfo: 868887590 Fax: 868888337

2 11

Re: [Dovecot] : error while loading shared libraries: libdovecot.so.0 (arm cross compile)
by Joseph Tam 31 Aug '11

31 Aug '11

"Stephen Feyrer" <stephen.feyrer(a)btinternet.com> writes: > I've made a new attempt at build Dovecot. The build and then install > processes appeared to work find. Then when I try to run Dovecot it > reports the error: > > /share/MD0_DATA/optware/opt/sbin/dovecot: error while loading shared > libraries: libdovecot.so.0: cannot open shared object file: No such file > or directory In cases like this where I have no clue where an executable is trying to load a library from, run a process trace tool (strace, truss, etc.) and you can see all the library run paths it's trying before failing. Joseph Tam <jtam.home(a)gmail.com>

3 7

[Dovecot] Message flags
by Ralf Hildebrandt 30 Aug '11

30 Aug '11

How do I set message flags in sieve rules in such a way that e.g. Thunderbird is displaying the mail as "important"? Is there a list of hwo flags are interpreted by different IMAP clients? -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebrandt(a)charite.de | http://www.charite.de

5 5

[Dovecot] Sub-folder outside of the mail store
by Simon Brereton 30 Aug '11

30 Aug '11

Hi How do I create an IMAP folder that links to a folder outside of the mail store? For example, I have all domains under /var/spool/mail/virtual/domains.net/ and users under /var/spool/mail/virtual/domains.net/user Amavis delivers quarantine mail to /var/spool/mail/quarantine I would like one user (postmaster) to have a folder /var/spool/mail/virtual/domains.net/postmaster/.Quarantine and link it to that folder - is that possible? Is it safe? The client the postmaster uses can then reinject and deliver the mail if need be (i.e. it's safe or the attachment has been stripped). Thanks. Simon

1 0

Re: [Dovecot] File Permissions and delivery
by Timo Sirainen 30 Aug '11

30 Aug '11

On Mon, 2011-08-29 at 11:14 -0400, Simon Brereton wrote: > Aug 29 15:59:14 mail dovecot: deliver(simon(a)lydiard.net): stat(/var/spool/mail/virtual/domain.net/simon/tmp) failed: Permission denied (euid=999(mailsystem) egid=115(mailsystem) missing +x perm: /var/spool/mail/virtual) > > Even if I make EVERTHING under /var/spool/mail/virtual/* owned by mailsystem:mailsystem - and reload postfix and restart doevcot. But you didn't change the /var/spool/mail/virtual directory itself? (Like the error message says.)

2 1

[Dovecot] Virtual user and post-login 2.0.13
by Pelle Svensson 30 Aug '11

30 Aug '11

Hi I tried several variants of suggestions but I can't get it working dovecot-info.log: =========== Aug 25 17:37:48 imap-login: Info: Login: user=<vuser>, method=PLAIN, rip=192.168.1.xx, lip=192.168.1.xx, mpid=11264 Aug 25 17:37:48 imap(vuser): Info: Post-login script denied access to user vuser dovecot.log ======== Aug 25 17:31:28 imap-postlogin: Error: script-login: Error: user pmp(a)bredband.net: Error reading configuration: net_connect_unix(/var/run/dovecot/config) failed: Permission denied Aug 25 17:31:28 imap-postlogin: Error: script-login: Fatal: Internal error occurred. Refer to server log for more information. Aug 25 17:31:28 log: Error: service(imap-postlogin): child 11082 returned error 89 (Fatal failure) dovecot.conf ======== protocols = imap pop3 base_dir = /var/run/dovecot/ log_path = /var/log/dovecot.log info_log_path = /var/log/dovecot-info.log ssl = no # v1.2+, for older versions use: ssl_disable = yes disable_plaintext_auth = no mail_location = maildir:/home/fetchmail/mailroot/dummy pop3_uidl_format = %08Xu%08Xv !include conf.d/*.conf !include_try local.conf mail_uid=500 mail_gid=500 auth_verbose = yes auth_debug=yes auth_debug_passwords=yes mail_debug=yes # Optional tried with this!!! service config { unix_listener config { group = dovecot mode = 0660 } } service imap { # tell imap to do post-login lookup using a socket called "imap-postlogin" executable = imap imap-postlogin # Optional tried with this!!! user=dovecot } # The service name below doesn't actually matter. service imap-postlogin { # all post-login scripts are executed via script-login binary executable = script-login /home/fetchmail/dovecot-postlogin.sh # the script process runs as the user specified here (v2.0.14+): # Optional tried with this!!! # user=dovecot # user = $default_internal_user # this UNIX socket listener must use the same name as given to imap executable # Optional tried with this!!! #unix_listener imap-postlogin { #} } users ==== vuser:{PLAIN}pass:500:500::/home/fetchmail::userdb_mail=maildir:/home/fetchmail/mailroot/vuser-root allow_nets=192.168.1.0/24 ls -l /home/fetchmail/dovecot-postlogin.sh -rwxrwxrwx. 1 dovecot root 108 Aug 25 17:08 dovecot-postlogin.sh Any suggestions are very welcome!! /Thanks

3 4

[Dovecot] Dovecot service needs a second restart after boot - euid is not dir owner
by Pelle Svensson 30 Aug '11

30 Aug '11

After reboot dovecot service need a restart. dovecot service starts as S99dovecot with only S99rc-local coming up. After boot following error is filled up in dovecot.log Aug 28 11:33:12 imap(vuser): Error: open(/home/fetchmail/mailroot/map/dovecot.index.log) failed: Permission denied (euid=500(vuser) egid=500(vuser) missing +r perm: /home/fetchmail/mailroot/map/dovecot.index.log, euid is not dir owner) Aug 28 11:33:12 imap(vuser): Error: file_dotlock_create(/home/fetchmail/mailroot/map/dovecot-uidlist) failed: Permission denied (euid=500(fetchmail) egid=500(fetchmail) missing +w perm: /home/fetchmail/mailroot/map, euid is not dir owner) Aug 28 11:33:12 imap(vuser): Error: open(/home/fetchmail/mailroot/map/dovecot-uidlist) failed: Permission denied After Linux has booted you just issue service dovecot restart And everything is back to normal and no error. Running on a Pentium 800MHz not too fast pc

2 2

[Dovecot] ldap authentication
by Daminto Lie 30 Aug '11

30 Aug '11

Hi, I have got Postfix, Dovecot IMAP and squirrelmail up and running on my ubuntu server 10.04 for a testing purpose. My question is in order to be able to login, do I need to create user accounts for each users on the server? I have about 20 users at the moment, and it's going to take time. I was thinking of using LDAP and have the dovecot authentication through LDAP. This way, I do not have to create accounts for 20 users on the server. The dovecot can just authenticate users by looking them up against the LDAP. I wonder if anyone would be able to share some guides as to how to set it up to work with Postfix and Dovecot. Thank you

1 0

[Dovecot] dovecot w/ libwrap on fbsd
by Gelu Lupas 30 Aug '11

30 Aug '11

Dovecot with libwrap doesn't work on FreeBSD for some reason or another. I have these lines in my /etc/hosts.allow: ALL: LOCAL 127.0.0.1: allow pop3: ALL: allow ALL: ALL: deny Yet when you try to telnet to localhost, port 110 this is what happens: Aug 29 22:48:38 dodo dovecot: pop3-login: Error: connect(tcpwrap) failed: Permission denied I also tried auth_debug=yes to see what's wrong but it only shows the processes which handled the connection, no extra info with the reason why it failed. Here's the config: # 2.0.13: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 7.4-RELEASE i386 auth_mechanisms = plain login base_dir = /var/run/dovecot/ disable_plaintext_auth = no dotlock_use_excl = no first_valid_uid = 1000 listen = * login_access_sockets = tcpwrap login_greeting = login_log_format_elements = user=<%u> method=%m rip=%r lip=%l %c mail_location = mbox:~/Mail/:INBOX=/var/mail/%u mail_log_prefix = "%Us(%u): " mail_privileged_group = mail maildir_copy_with_hardlinks = no passdb { driver = pam } protocols = pop3 service auth { executable = /usr/local/libexec/dovecot/auth unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = root vsz_limit = 64 M } service imap-login { chroot = login client_limit = 128 process_limit = 32 process_min_avail = 3 service_count = 1 user = dovecot vsz_limit = 32 M } service imap { drop_priv_before_exec = no process_limit = 128 vsz_limit = 256 M } service pop3-login { chroot = login client_limit = 128 process_limit = 32 process_min_avail = 3 service_count = 1 user = dovecot vsz_limit = 32 M } service pop3 { drop_priv_before_exec = no process_limit = 128 vsz_limit = 256 M } service tcpwrap { unix_listener login/tcpwrap { group = $default_login_user mode = 0600 user = $default_login_user } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_cipher_list = ALL:!LOW ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } verbose_proctitle = yes protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } protocol lda { postmaster_address = postmaster(a)europrima.ro sendmail_path = /usr/sbin/sendmail }

2 1

[Dovecot] : error while loading shared libraries: libdovecot.so.0 (arm cross compile)
by Stephen Feyrer 29 Aug '11

29 Aug '11

Hi. I've made a new attempt at build Dovecot. The build and then install processes appeared to work find. Then when I try to run Dovecot it reports the error: /share/MD0_DATA/optware/opt/sbin/dovecot: error while loading shared libraries: libdovecot.so.0: cannot open shared object file: No such file or directory To get a better idea of what's going on, I added --enable-devel-checks at ./configure and then ran gdb: # gdb --args dovecot -F GNU gdb 6.8 [snip] This GDB was configured as "arm-none-linux-gnueabi"... (no debugging symbols found) (gdb) run Starting program: /share/MD0_DATA/optware/opt/sbin/dovecot -F (no debugging symbols found) /share/MD0_DATA/optware/opt/sbin/dovecot: error while loading shared libraries: libdovecot.so.0: cannot open shared object file: No such file or directory Program exited with code 0177. (gdb) bt full No stack. (gdb) quit By the way on a separate but related note, adding --enable-maintiner-mode introduced a new problem also relating to libdovecot.so.0.0.0 I'll refer to that in the post script. # ls -alh /opt/lib/dovecot/ drwxr-xr-x 8 admin administ 4.0k Aug 27 16:31 ./ drwxr-xr-x 37 admin administ 16.0k Aug 27 16:27 ../ drwxr-xr-x 2 avahi avahi 4.0k Nov 26 2009 .debug/ drwxr-xr-x 2 admin administ 4.0k Aug 27 16:27 auth/ drwxr-xr-x 2 admin administ 4.0k Aug 27 16:31 doveadm/ -rw-r--r-- 1 admin administ 678 Aug 27 16:27 dovecot-config drwxr-xr-x 3 admin administ 4.0k Aug 26 18:01 imap/ drwxr-xr-x 2 admin administ 4.0k Aug 26 18:01 lda/ -rw-r--r-- 1 admin administ 527.6k Jan 6 2011 lib01_acl_plugin.a -rwxr-xr-x 1 admin administ 1.0k Aug 27 16:27 lib01_acl_plugin.la* -rwxr-xr-x 1 admin administ 56.3k Aug 27 16:27 lib01_acl_plugin.so* -rw-r--r-- 1 admin administ 70.5k Jan 6 2011 lib02_imap_acl_plugin.a -rwxr-xr-x 1 admin administ 1.1k Aug 27 16:27 lib02_imap_acl_plugin.la* -rwxr-xr-x 1 admin administ 13.1k Aug 27 16:27 lib02_imap_acl_plugin.so* -rw-r--r-- 1 admin administ 69.9k Jan 6 2011 lib02_lazy_expunge_plugin.a -rwxr-xr-x 1 admin administ 1.1k Aug 27 16:27 lib02_lazy_expunge_plugin.la* -rwxr-xr-x 1 admin administ 13.0k Aug 27 16:27 lib02_lazy_expunge_plugin.so* -rw-r--r-- 1 admin administ 51.3k Jan 6 2011 lib05_snarf_plugin.a -rwxr-xr-x 1 admin administ 1.0k Aug 27 16:27 lib05_snarf_plugin.la* -rwxr-xr-x 1 admin administ 7.4k Aug 27 16:27 lib05_snarf_plugin.so* -rw-r--r-- 1 admin administ 443.4k Jan 6 2011 lib10_quota_plugin.a -rwxr-xr-x 1 admin administ 1.0k Aug 27 16:27 lib10_quota_plugin.la* -rwxr-xr-x 1 admin administ 51.5k Aug 27 16:27 lib10_quota_plugin.so* -rw-r--r-- 1 admin administ 23.6k Jan 6 2011 lib11_imap_quota_plugin.a -rwxr-xr-x 1 admin administ 1.1k Aug 27 16:27 lib11_imap_quota_plugin.la* -rwxr-xr-x 1 admin administ 8.3k Aug 27 16:27 lib11_imap_quota_plugin.so* -rw-r--r-- 1 admin administ 56.9k Jan 6 2011 lib11_trash_plugin.a -rwxr-xr-x 1 admin administ 1.1k Aug 27 16:27 lib11_trash_plugin.la* -rwxr-xr-x 1 admin administ 9.9k Aug 27 16:27 lib11_trash_plugin.so* -rw-r--r-- 1 admin administ 71.8k Jan 6 2011 lib15_notify_plugin.a -rwxr-xr-x 1 admin administ 1.0k Aug 27 16:27 lib15_notify_plugin.la* -rwxr-xr-x 1 admin administ 10.6k Aug 27 16:27 lib15_notify_plugin.so* -rw-r--r-- 1 admin administ 14.4k Jan 6 2011 lib20_autocreate_plugin.a -rwxr-xr-x 1 admin administ 1.0k Aug 27 16:27 lib20_autocreate_plugin.la* -rwxr-xr-x 1 admin administ 5.3k Aug 27 16:27 lib20_autocreate_plugin.so* -rw-r--r-- 1 avahi avahi 10.9k Nov 26 2009 lib20_convert_plugin.a -rw-r--r-- 1 admin administ 62.7k Jan 6 2011 lib20_expire_plugin.a -rwxr-xr-x 1 admin administ 1.0k Aug 27 16:27 lib20_expire_plugin.la* -rwxr-xr-x 1 admin administ 10.6k Aug 27 16:27 lib20_expire_plugin.so* -rw-r--r-- 1 admin administ 161.0k Jan 6 2011 lib20_fts_plugin.a -rwxr-xr-x 1 admin administ 1.0k Aug 27 16:27 lib20_fts_plugin.la* -rwxr-xr-x 1 admin administ 29.4k Aug 27 16:27 lib20_fts_plugin.so* -rw-r--r-- 1 admin administ 59.4k Jan 6 2011 lib20_listescape_plugin.a -rwxr-xr-x 1 admin administ 1.0k Aug 27 16:27 lib20_listescape_plugin.la* -rwxr-xr-x 1 admin administ 9.4k Aug 27 16:27 lib20_listescape_plugin.so* -rw-r--r-- 1 admin administ 62.8k Jan 6 2011 lib20_mail_log_plugin.a -rwxr-xr-x 1 admin administ 1.1k Aug 27 16:27 lib20_mail_log_plugin.la* -rwxr-xr-x 1 admin administ 10.1k Aug 27 16:27 lib20_mail_log_plugin.so* -rw-r--r-- 1 avahi avahi 54.4k Nov 6 2010 lib20_mbox_snarf_plugin.a -rw-r--r-- 1 admin administ 450.8k Jan 6 2011 lib20_virtual_plugin.a -rwxr-xr-x 1 admin administ 1.0k Aug 27 16:27 lib20_virtual_plugin.la* -rwxr-xr-x 1 admin administ 47.6k Aug 27 16:27 lib20_virtual_plugin.so* -rw-r--r-- 1 admin administ 115.1k Jan 6 2011 lib20_zlib_plugin.a -rwxr-xr-x 1 admin administ 1.0k Aug 27 16:27 lib20_zlib_plugin.la* -rwxr-xr-x 1 admin administ 18.4k Aug 27 16:27 lib20_zlib_plugin.so* -rw-r--r-- 1 admin administ 181.7k Jan 6 2011 lib21_fts_squat_plugin.a -rwxr-xr-x 1 admin administ 1.1k Aug 27 16:27 lib21_fts_squat_plugin.la* -rwxr-xr-x 1 admin administ 48.8k Aug 27 16:27 lib21_fts_squat_plugin.so* -rw-r--r-- 1 admin administ 22.0k Jan 6 2011 lib30_imap_zlib_plugin.a -rwxr-xr-x 1 admin administ 1.1k Aug 27 16:27 lib30_imap_zlib_plugin.la* -rwxr-xr-x 1 admin administ 6.5k Aug 27 16:27 lib30_imap_zlib_plugin.so* -rw-r--r-- 1 admin administ 101.3k Jan 6 2011 libdovecot-lda.a -rwxr-xr-x 1 admin administ 1.1k Aug 27 16:27 libdovecot-lda.la* lrwxrwxrwx 1 admin administ 23 Aug 27 16:31 libdovecot-lda.so -> libdovecot-lda.so.0.0.0* lrwxrwxrwx 1 admin administ 23 Aug 27 16:31 libdovecot-lda.so.0 -> libdovecot-lda.so.0.0.0* -rwxr-xr-x 1 admin administ 35.2k Aug 27 16:27 libdovecot-lda.so.0.0.0* -rw-r--r-- 1 admin administ 241.7k Jan 6 2011 libdovecot-login.a -rwxr-xr-x 1 admin administ 1.0k Aug 27 16:27 libdovecot-login.la* lrwxrwxrwx 1 admin administ 25 Aug 27 16:31 libdovecot-login.so -> libdovecot-login.so.0.0.0* lrwxrwxrwx 1 admin administ 25 Aug 27 16:31 libdovecot-login.so.0 -> libdovecot-login.so.0.0.0* -rwxr-xr-x 1 admin administ 65.5k Aug 27 16:27 libdovecot-login.so.0.0.0* -rwxr-xr-x 1 admin administ 1.0k Aug 27 16:27 libdovecot-sql.la* lrwxrwxrwx 1 admin administ 23 Aug 27 16:31 libdovecot-sql.so -> libdovecot-sql.so.0.0.0* lrwxrwxrwx 1 admin administ 23 Aug 27 16:31 libdovecot-sql.so.0 -> libdovecot-sql.so.0.0.0* -rwxr-xr-x 1 admin administ 19.3k Aug 27 16:27 libdovecot-sql.so.0.0.0* -rw-r--r-- 1 admin administ 6.2M Jan 6 2011 libdovecot-storage.a -rwxr-xr-x 1 admin administ 1.1k Aug 27 16:27 libdovecot-storage.la* lrwxrwxrwx 1 admin administ 27 Aug 27 16:31 libdovecot-storage.so -> libdovecot-storage.so.0.0.0* lrwxrwxrwx 1 admin administ 27 Aug 27 16:31 libdovecot-storage.so.0 -> libdovecot-storage.so.0.0.0* -rwxr-xr-x 1 admin administ 737.5k Aug 27 16:27 libdovecot-storage.so.0.0.0* -rw-r--r-- 1 admin administ 1.8M Jan 6 2011 libdovecot.a -rwxr-xr-x 1 admin administ 1011 Aug 27 16:27 libdovecot.la* lrwxrwxrwx 1 admin administ 19 Aug 27 16:31 libdovecot.so -> libdovecot.so.0.0.0* lrwxrwxrwx 1 admin administ 19 Aug 27 16:31 libdovecot.so.0 -> libdovecot.so.0.0.0* -rwxr-xr-x 1 admin administ 440.8k Aug 27 16:27 libdovecot.so.0.0.0* drwxr-xr-x 2 admin administ 4.0k Aug 26 18:01 pop3/ Everything seems to be in the right place. So I don't know what's wrong. Now on to my post script. This issue first appears when I try to package my freshly built Dovecot for installation on my arm powered nas. #make dovecot-ipk [...] test -z "/opt/include/dovecot" || /usr/bin/mkdir -p "~/Projects/nslu2/optware/tsx09/builds/dovecot-2.0.13-ipk/opt/include/dovecot" /usr/bin/install -c -m 644 settings.h settings-parser.h '~/Projects/nslu2/optware/tsx09/builds/dovecot-2.0.13-ipk/opt/include/dovecot' make[5]: Leaving directory `~/Projects/nslu2/optware/tsx09/builds/dovecot/src/lib-settings' make[4]: Leaving directory `~/Projects/nslu2/optware/tsx09/builds/dovecot/src/lib-settings' Making install in lib-dovecot make[4]: Entering directory `~/Projects/nslu2/optware/tsx09/builds/dovecot/src/lib-dovecot' make[5]: Entering directory `~/Projects/nslu2/optware/tsx09/builds/dovecot/src/lib-dovecot' test -z "/opt/lib/dovecot" || /usr/bin/mkdir -p "~/Projects/nslu2/optware/tsx09/builds/dovecot-2.0.13-ipk/opt/lib/dovecot" /bin/sh ../../libtool --mode=install /usr/bin/install -c -s libdovecot.la '~/Projects/nslu2/optware/tsx09/builds/dovecot-2.0.13-ipk/opt/lib/dovecot' libtool: install: /usr/bin/install -c .libs/libdovecot.so.0.0.0 ~/Projects/nslu2/optware/tsx09/builds/dovecot-2.0.13-ipk/opt/lib/dovecot/libdovecot.so.0.0.0 libtool: install: strip --strip-unneeded ~/Projects/nslu2/optware/tsx09/builds/dovecot-2.0.13-ipk/opt/lib/dovecot/libdovecot.so.0.0.0 strip: Unable to recognise the format of the input file `~/Projects/nslu2/optware/tsx09/builds/dovecot-2.0.13-ipk/opt/lib/dovecot/libdovecot.so.0.0.0' make[5]: *** [install-pkglibLTLIBRARIES] Error 1 make[5]: Leaving directory `~/Projects/nslu2/optware/tsx09/builds/dovecot/src/lib-dovecot' make[4]: *** [install-am] Error 2 make[4]: Leaving directory `~/Projects/nslu2/optware/tsx09/builds/dovecot/src/lib-dovecot' make[3]: *** [install-recursive] Error 1 make[3]: Leaving directory `~/Projects/nslu2/optware/tsx09/builds/dovecot/src' make[2]: *** [install-recursive] Error 1 make[2]: Leaving directory `~/Projects/nslu2/optware/tsx09/builds/dovecot' make[1]: *** [install-strip] Error 2 make[1]: Leaving directory `~/Projects/nslu2/optware/tsx09/builds/dovecot' make: *** [~/Projects/nslu2/optware/tsx09/builds/dovecot_2.0.13-2_arm.ipk] Error 2 So I went looking for libdovecot.so.0.0.0 and found, ls -ahl ~/Projects/nslu2/optware/tsx09/builds/dovecot-2.0.13-ipk/opt/lib/dovecot/: total 1.3M drwxr-xr-x 2 leonidis leonidis 4.0K Aug 27 17:07 . drwxr-xr-x 3 leonidis leonidis 4.0K Aug 27 17:07 .. -rw-r--r-- 1 leonidis leonidis 678 Aug 27 17:07 dovecot-config -rwxr-xr-x 1 leonidis leonidis 1.3M Aug 27 17:07 libdovecot.so.0.0.0 The other libraries appear to have been built and are waiting to be packaged up but ipackage doesn't seem to get that far. What this says about ipackage and how it might relate to my first problem I don't know. I apologise this all seems a bit like a broken record to me. -- Kind regards Stephen Feyrer.

3 2

Re: [Dovecot] File Permissions and delivery
by Timo Sirainen 29 Aug '11

29 Aug '11

On Fri, 2011-08-26 at 13:10 -0400, Simon Brereton wrote: > mail:~# ls /var/spool/mail/virtual/domain.net/simon/new/ > -rwxrwx--- 1 postfix mailsystem 2.5K Aug 26 03:33 1314326000.V801I1666018M803015.mail.net,S=2461:2, > -rwxrwx--- 1 postfix mailsystem 2.5K Aug 26 03:36 1314326209.V801I1666019M447273.mail.net,S=2460:2, > -rw-rw---- 1 postfix mailsystem 2.5K Aug 26 04:00 1314327630.V801I166601aM308173.mail.net,S=2477:2, > -rw------- 1 postfix mailsystem 2.5K Aug 26 04:22 1314328966.V801I166601bM756462.mail.net,S=2461:2, > -rw------- 1 postfix mailsystem 1.1K Aug 26 16:28 1314372534.V801I166601cM615258.mail.net,S=1097:2, > -rw------- 1 postfix mailsystem 1.1K Aug 26 16:31 1314372685.V801I166601dM264242.mail.net,S=1097:2, > > Mails are being delivered with 0600 permissions and not 0660 (the mails from courier seem to have all been 0770 as you can see). If I manually change the permission (to 0660) then I can see the mail in the MUA. If /var/spool/mail/virtual/domain.net/simon has 0770 permissions, the new mails should be delivered with 0660 permissions. (I don't remember if having g+s makes any difference in the directory like you have in the domain dir.) In any case, it would be better if mails were delivered as mailsystem:mailsystem 0600 since that's what you're reading them as. Unless you have some other good reason for requiring mailsystem group to be able to read them.

2 1

Re: [Dovecot] File Permissions and delivery
by Patrick Domack 29 Aug '11

29 Aug '11

My guess is your delivering email with postfix to the inbox, instead of using dovecot-lda. And something odd is going on with that postfix to get odd permissions like that. You probably needed to edit the postfix virtual deliever transport, or maybe you just forget to active the dovecot-lda (deliever) transport. Quoting Simon Brereton <simon.brereton(a)buongiorno.com>: > Hi > > I'm very new to Dovecot (been using Courier for 5 years), but I've > been persuaded of the merits of Dovecot and since the server needs > upgrading that seems like the perfect time/excuse. > > On a test server, I set up postfix and installed Dovecot (running > 32-bit Debian Squeeze, installed from apt-get). I mirrored the mail > store (Maildirs, for historical reasons located under > /var/spool/mail/virtual/domain.com/user). Then I ran the courier > migration perl script and everything was fine and dandy. > > However, when I can to do the production migration, things weren't > as smooth. The new server is 64-bit (not that I think it makes a > difference, but if you're going to help me you should have all the > information :) > > Again, I installed Postfix and Dovecot > Took down the old server > Mirrored the Maildirs > Ran the migration script > Restarted everything > > At this point everything looked like it was ok. Mail was being > received and delivered to the Maildirs and the IMAP login was fine. > However, I noticed errors in the logs when retreiving mail with the > MUA along the lines of: > > Aug 26 16:59:48 mail dovecot: IMAP(simon(a)lydiard.net): > open(/var/spool/mail/virtual/domain.net/simon/cur/1314328966.V801I166601bM7… failed: Permission denied (euid=999(mailsystem) egid=115(mailsystem) missing +r perm: > /var/spool/mail/virtual/domain.net/simon/cur/1314328966.V801I166601bM756462.mail.net,S=2461:2,) > > After messing around with the chown and chmod (even though these > were exactly the same as the test server) I finally discovered the > issue. > > mail:~# ls /var/spool/mail/virtual/domain.net/simon/new/ > -rwxrwx--- 1 postfix mailsystem 2.5K Aug 26 03:33 > 1314326000.V801I1666018M803015.mail.net,S=2461:2, > -rwxrwx--- 1 postfix mailsystem 2.5K Aug 26 03:36 > 1314326209.V801I1666019M447273.mail.net,S=2460:2, > -rw-rw---- 1 postfix mailsystem 2.5K Aug 26 04:00 > 1314327630.V801I166601aM308173.mail.net,S=2477:2, > -rw------- 1 postfix mailsystem 2.5K Aug 26 04:22 > 1314328966.V801I166601bM756462.mail.net,S=2461:2, > -rw------- 1 postfix mailsystem 1.1K Aug 26 16:28 > 1314372534.V801I166601cM615258.mail.net,S=1097:2, > -rw------- 1 postfix mailsystem 1.1K Aug 26 16:31 > 1314372685.V801I166601dM264242.mail.net,S=1097:2, > > Mails are being delivered with 0600 permissions and not 0660 (the > mails from courier seem to have all been 0770 as you can see). If I > manually change the permission (to 0660) then I can see the mail in > the MUA. > > After thinking for a while it occurred to me that this is covered in > the LDA section. But making changes to the config file (either > permissions or UID/GID) doesn't seem to make a difference. (Yes, I > did restart postfix and dovecot after the changes). > > Anyway, here is my dovecot -n: > > mail:~# dovecot -n > # 1.2.15: /etc/dovecot/dovecot.conf > # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.2 ext3 > log_timestamp: %Y-%m-%d %H:%M:%S > protocols: imap imaps pop3 pop3s > ssl_ca_file: /etc/ssl/keys/ca.crt > ssl_cert_file: /etc/ssl/keys/mail.net.crt > ssl_key_file: /etc/ssl/private/mail.net.key > disable_plaintext_auth: no > login_dir: /var/run/dovecot/login > login_executable(default): /usr/lib/dovecot/imap-login > login_executable(imap): /usr/lib/dovecot/imap-login > login_executable(pop3): /usr/lib/dovecot/pop3-login > mail_privileged_group: mailsystem > mail_location: maildir:/var/spool/mail/virtual/%d/%n > maildir_very_dirty_syncs: yes > mbox_write_locks: fcntl dotlock > mail_executable(default): /usr/lib/dovecot/imap > mail_executable(imap): /usr/lib/dovecot/imap > mail_executable(pop3): /usr/lib/dovecot/pop3 > mail_plugins(default): quota imap_quota > mail_plugins(imap): quota imap_quota > mail_plugins(pop3): quota > mail_plugin_dir(default): /usr/lib/dovecot/modules/imap > mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap > mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 > imap_client_workarounds(default): outlook-idle delay-newmail > imap_client_workarounds(imap): outlook-idle delay-newmail > imap_client_workarounds(pop3): > pop3_client_workarounds(default): > pop3_client_workarounds(imap): > pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh > lda: > postmaster_address: postmaster@net > mail_plugins: quota > log_path: > info_log_path: > deliver_log_format: msgid=%m: %f: %$ > auth default: > mechanisms: plain login > user: mailsystem > verbose: yes > passdb: > driver: sql > args: /etc/dovecot/dovecot-sql.conf > userdb: > driver: prefetch > userdb: > driver: static > args: uid=999 gid=115 home=/var/spool/mail/virtual/%d/%n > allow_all_users=yes > socket: > type: listen > client: > path: /var/spool/postfix/private/auth > mode: 432 > user: postfix > group: mailsystem > master: > path: /var/run/dovecot/auth-master > mode: 432 > user: mailsystem > group: mailsystem > plugin: > quota: maildir > > As you can see, I tried to go 0660 in both client and master. > > The portion of my master.cf > 81 # SPB - Attempt to deliver with Dovecot LDA > 82 dovecot unix - n n - - pipe > 83 flags=DRhu user=mailsystem argv=/usr/lib/dovecot/deliver -f > ${sender} -d ${user}@${nexthop} > > Is there anything else I should include? > > I'm pretty sure it's an error on my part. I'm just not clued up > enough to know where. > > My second problem is that I thought I had things back to where they > were before I messed with chown and chmod, but now I get this in the > logs > > dovecot: dovecot: Fatal: > chdir(/var/spool/mail/virtual/domain.net/simon//) failed: Permission > denied (euid=999(mailsystem) egid=115(mailsystem) missing +x perm: > /var/spool/mail/virtual) > > But the ls on that is exactly the same as on the test server: > ls /var/spool/mail/virtual/ > total 44K > drwxrwS--- 11 postfix mailsystem 4.0K Aug 25 23:07 ./ > drwxrwsr-x 5 amavis mailsystem 4.0K Oct 19 2009 ../ > drwxrws--- 5 mailsystem mailsystem 4.0K Aug 26 02:33 domain.net/ > > So, now I'm stumped. I hope someone can spot the simple thing I've missed! > > Thanks. > > > Simon

2 3

[Dovecot] limiting number of incorrect logins per connection
by Alex 29 Aug '11

29 Aug '11

Hi Guys, Running Dovecot 2 on my server. It is regularly getting dictionary auth attacked. What I have noticed is that once connected to a pop3/imap login session, you can send endless incorrect usernames+passwords attempts. This is a problem for me... I use fail2ban to try and stop these script kiddies. The problem is that fail2ban detects the bad auths, firewalls the IP, however, since it's an "established" session, the attacker can keep authing away... It's only on a subsequent (new) connection that the firewalling will take effect. Why is there no configuration option such as "max auth attempts per connection"? This would be useful, so once the limit is reached, the connection is dropped. is there a patch/workaround?

7 11

Re: [Dovecot] Catch22: user needs space to fix out of space condition
by Joseph Tam 29 Aug '11

29 Aug '11

Thanks to all who've made suggestions. It seems removing dotlocks as a locking method is the way to go. There is another dotlock locking variant mentioned in 10-mail.conf that seems to address this situation for those that can't get away from dotlocks: # dotlock_try: Same as dotlock, but if it fails because of permissions or # because there isn't enough disk space, just skip it. mbox_write_locks = dotlock_try fcntl Joseph Tam <jtam.home(a)gmail.com>

3 4

[Dovecot] v2.0.14 released
by Timo Sirainen 29 Aug '11

29 Aug '11

http://dovecot.org/releases/2.0/dovecot-2.0.14.tar.gz http://dovecot.org/releases/2.0/dovecot-2.0.14.tar.gz.sig It's been a while since the previous release.. I've been a bit busy with my newly created Dovecot support company, but it was also summer and I wasted some time doing nothing useful. :) Most of my recent time has gone to adding new features to v2.1 branch. I'm planning on releasing v2.1.alpha1 somewhat soon and the final v2.1.0 sometimes later this year. This v2.0.14 release also contains one larger new feature: Ability to list and kick imap/pop3 proxy connections. This is done via a new "ipc" process where all proxying login processes connect to, which allows doveadm to communicate with them. If you're not using these features, this change (and its potential bugs) should be pretty much invisible. BTW. I know there are still mails I haven't read & replied to. I'll try to get to them eventually, but you may as well re-send anything you want me to read sooner rather than 6 months from now. Some of the largest changes since v2.0.13: + doveadm: Added support for running mail commands by proxying to another doveadm server. + Added "doveadm proxy list" and "doveadm proxy kick" commands to list/kick proxy connections (via a new "ipc" service). + Added "doveadm director move" to assign user from one server to another, killing any existing connections. + Added "doveadm director ring status" command. + userdb extra fields can now return name+=value to append to an existing name, e.g. "mail_plugins+= quota". - script-login attempted an unnecessary config lookup, which usually failed with "Permission denied". - lmtp: Fixed parsing quoted strings with spaces as local-part for MAIL FROM and RCPT TO. - imap: FETCH BODY[HEADER.FIELDS (..)] may have crashed or not returned all data sometimes. - ldap: Fixed random assert-crashing with with sasl_bind=yes. - Fixes to handling mail chroots - Fixed renaming mailboxes under different parent with FS layout when using separate ALT, INDEX or CONTROL paths. - zlib: Fixed reading concatenated .gz files.

1 0

[Dovecot] unlink_directory failed with 'Device or resource busy' on NFS
by 김기태 29 Aug '11

29 Aug '11

Hi, I'm getting some errors while I'm trying to move mailboxes from IMAP server to Outlook client. The error message is "IMAP command is failed" and I think it is useless. Here are the error messages written to server's syslog. imap(name(a)domain.com<mailto:name@domain.com>): Error: unlink_directory(/data/domain.com/name/INBOX/direct/.nfs00000000000033fd000… failed: Device or resource busy imap(name(a)domain.com<mailto:name@domain.com>): Error: unlink_directory(/data/domain.com/name/INBOX/IDC/.nfs000000000000709d000000… failed: Device or resource busy imap(name(a)domain.com<mailto:name@domain.com>): Error: unlink_directory(/data/domain.com/name/INBOX/OSSEC/.nfs000000000000709f0000… failed: Device or resource busy How can I solve this problem? I'm using Dovecot 2.0.13 and my configurations are: # 2.0.13: /usr/local/dovecot/etc/dovecot/dovecot.conf # OS: Linux 2.6.38-11-server x86_64 Ubuntu 11.04 listen = * mail_fsync = always mail_location = maildir:~:LAYOUT=fs mail_nfs_index = yes mail_nfs_storage = yes mmap_disable = yes passdb { args = /usr/local/dovecot/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } ssl_cert = </etc/postfix/tls/smtpd.cert ssl_key = </etc/postfix/tls/smtpd.key userdb { args = uid=65534 gid=65534 home=/data/%Ld/%Ln driver = static }

2 1

[Dovecot] Pop3 hanging up after login.
by Fabio Catunda 29 Aug '11

29 Aug '11

Hi, I'm trying to implement a second dovecot server on a second machine to try to load balance IMAP/POP3 services. The first machine is already running and is working pretty well with dovecot-pop3d 1:1.0.15-2.3+lenny1. The new machine is running dovecot-pop3d 1:1.2.15-7 and accessing the existing maildirs over a NFS share on /mnt/mail. When I try to telnet localhost 110 on the new machine it just freezes after the "pass MySecret", like this: # telnet localhost 110 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. +OK Bem Vindo. user my.user(a)mydomain.com.br +OK pass MySecret ... (Nothing else happens) If I try to stop Dovecot with /etc/init.d/dovecot stop it stops, but the pop3 process keep running and the only way to stop it is with kill -9. On my log I only can see this: Aug 27 15:03:40 radamante dovecot: auth(default): client in: AUTH#0112#011PLAIN#011service=pop3#011secured#011lip=127.0.0.1#011rip=127.0.0.1#011lport=110#011rport=60421#011resp=<hidden> Aug 27 15:03:40 radamante dovecot: auth-worker(default): pam(my.user(a)mydomain.com.br,127.0.0.1): lookup service=dovecot Aug 27 15:03:40 radamante dovecot: auth-worker(default): pam(my.user(a)mydomain.com.br,127.0.0.1): #1/1 style=1 msg=Password: Aug 27 15:03:42 radamante dovecot: auth-worker(default): pam(my.user(a)mydomain.com.br,127.0.0.1): pam_authenticate() failed: Authentication failure (password mismatch?) Aug 27 15:03:42 radamante dovecot: auth(default): cache(my.user(a)mydomain.com.br,127.0.0.1): miss Aug 27 15:03:42 radamante dovecot: auth(default): ldap(my.user(a)mydomain.com.br,127.0.0.1): pass search: base=ou=Users, dc=mydomain, dc=com, dc=br scope=subtree filter=(&(mail=my.user(a)mydomain.com.br)) fields=mail,userPassword Aug 27 15:03:42 radamante dovecot: auth(default): ldap(my.user(a)mydomain.com.br,127.0.0.1): result: mail(user@domain)=my.user@mydomain.com.br userPassword(password)=<hidden> Aug 27 15:03:42 radamante dovecot: auth(default): client out: OK#0112#011user=my.user@mydomain.com.br#011user@domain=my.user@mydomain.com.br Aug 27 15:03:42 radamante dovecot: auth(default): master in: REQUEST#0111#01130330#0112 Aug 27 15:03:42 radamante dovecot: auth(default): passwd(my.user(a)mydomain.com.br,127.0.0.1): lookup Aug 27 15:03:42 radamante dovecot: auth(default): passwd(my.user(a)mydomain.com.br,127.0.0.1): unknown user Aug 27 15:03:42 radamante dovecot: auth(default): ldap(my.user(a)mydomain.com.br,127.0.0.1): user search: base=ou=Users, dc=mydomain, dc=com, dc=br scope=subtree filter=(&(mail=my.user(a)mydomain.com.br)) fields=homeDirectory,uidNumber,gidNumber Aug 27 15:03:42 radamante dovecot: auth(default): ldap(my.user(a)mydomain.com.br,127.0.0.1): result: uidNumber(uidNumber)=3478 gidNumber(gidNumber)=513 homeDirectory(homeDirectory)=/home/samba/my.user Aug 27 15:03:42 radamante dovecot: auth(default): master out: USER#0111#011my.user@mydomain.com.br#011uidNumber=3478#011gidNumber=513#011homeDirectory=/home/samba/my.user Aug 27 15:03:42 radamante dovecot: pop3-login: Login: user=<my.user(a)mydomain.com.br>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Aug 27 15:03:42 radamante dovecot: auth(default): new auth connection: pid=30330 Aug 27 15:03:42 radamante dovecot: POP3(my.user(a)mydomain.com.br): Effective uid=8, gid=8, home=(none) Aug 27 15:03:42 radamante dovecot: POP3(my.user(a)mydomain.com.br): maildir: data=/mnt/mail/mydomain.com.br/my.user/Maildir Aug 27 15:03:42 radamante dovecot: POP3(my.user(a)mydomain.com.br): maildir++: root=/mnt/mail/mydomain.com.br/my.user/Maildir, index=, control=, inbox=/mnt/mail/mydomain.com.br/my.user/Maildir Aug 27 15:03:42 radamante dovecot: POP3(my.user(a)mydomain.com.br): Namespace : Using permissions from /mnt/mail/mydomain.com.br/my.user/Maildir: mode=0700 gid=-1 By now I have no clue whats going on, any help is appreciated. I don't understand if the problem is the NFS share or if it's something with the new version of Dovecot on Debian. Some more info: # dovecot -n # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.2 nfs log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap pop3 ssl: no disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_greeting: Bem Vindo. login_process_per_connection: no login_chroot: no login_process_size: 128 login_processes_count: 8 max_mail_processes: 2048 mail_max_userip_connections(default): 100 mail_max_userip_connections(imap): 100 mail_max_userip_connections(pop3): 10 verbose_proctitle: yes first_valid_uid: 1 last_valid_uid: 9999 last_valid_gid: 9999 mail_privileged_group: mail mail_uid: mail mail_gid: mail mail_location: maildir:/mnt/mail/%Ld/%Ln/Maildir mail_debug: yes mmap_disable: yes mail_nfs_storage: yes mail_nfs_index: yes maildir_copy_preserve_filename: yes mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_process_size: 512 mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 imap_client_workarounds(default): delay-newmail imap_client_workarounds(imap): delay-newmail imap_client_workarounds(pop3): imap_idle_notify_interval(default): 30 imap_idle_notify_interval(imap): 30 imap_idle_notify_interval(pop3): 120 pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: default_realm: mydomain.com.br cache_size: 1024 cache_negative_ttl: 0 username_format: %Lu failure_delay: 3 debug: yes passdb: driver: pam passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf userdb: driver: passwd userdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf root@radamante:/etc/dovecot# egrep -v '^#|^$' dovecot-ldap.conf hosts = 192.168.5.37 192.168.5.124 sasl_bind = no tls = no auth_bind = no ldap_version = 3 base = ou=Users, dc=mydomain, dc=com, dc=br deref = never scope = subtree user_attrs = homeDirectory=homeDirectory,uidNumber=uidNumber,gidNumber=gidNumber user_filter = (&(mail=%u)) pass_attrs = mail=user@domain,userPassword=password pass_filter = (&(mail=%u)) default_pass_scheme = CRYPT Thanks in advance.

2 1

[Dovecot] occasional dovecot crash, core captured but no symbol table info?
by John Clements 27 Aug '11

27 Aug '11

Dovecot is crashing occasionally for me. Today it crashed six times in quick succession, as I fired up a computer (Mac) I hadn't used in a while, and my mail application (Apple Mail) tried to synchronize many large mailboxes. The log entries look like this: Aug 26 10:26:15 computer dovecot: dovecot: child 23223 (imap) killed with signal 6 (core dumped) Aug 26 10:26:30 computer dovecot: IMAP(granitemon): Panic: file istream-raw-mbox.c: line 583 (istream_raw_mbox_get_body_size): assertion failed: (rstream->body_offset != (uoff_t)-1) Aug 26 10:26:30 computer dovecot: IMAP(granitemon): Raw backtrace: imap() [0x80f0e1e] -> imap() [0x80f0e82] -> imap() [0x80f0809] -> imap(istream_raw_mbox_get_body_size+0x407) [0x8092f47] -> imap(istream_raw_mbox_next+0x25) [0x8093025] -> imap(istream_raw_mbox_seek+0x1f3) [0x8093323] -> imap(mbox_file_seek+0x55) [0x8093745] -> imap() [0x8095852] -> imap() [0x8095c8d] -> imap(index_mail_set_seq+0x153) [0x80a35c3] -> imap() [0x8095fb9] -> imap(index_storage_search_next_nonblock+0x13b) [0x80a763b] -> imap(mailbox_search_next_nonblock+0x2a) [0x80b5c1a] -> imap(mailbox_search_next+0x28) [0x80b5c68] -> imap(imap_fetch_more+0x274) [0x806a4c4] -> imap() [0x8062665] -> imap() [0x806753f] -> imap(client_output+0xeb) [0x806862b] -> imap() [0x810007e] -> imap(io_loop_handler_run+0xd6) [0x80f9aa6] -> imap(io_loop_run+0x20) [0x80f8f20] -> imap(main+0x5b4) [0x8070f24] -> /lib/i686/cmov/libc.so.6(__libc_start_main+0xe6) [0xb75f3c76] -> imap() [0x80603a1] Aug 26 10:26:30 computer dovecot: dovecot: child 23228 (imap) killed with signal 6 (core dumped) Here's the output of dovecot -n: clements@computer:/home/granitemon$ sudo dovecot -n # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-686 i686 Debian 6.0.2 log_timestamp: %Y-%m-%d %H:%M:%S login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login mail_privileged_group: mail mbox_write_locks: fcntl dotlock lda: postmaster_address: postmaster(a)brinckerhoff.org mail_plugins: sieve auth default: passdb: driver: pam userdb: driver: passwd ... this is the version associated with debian stable. Finally, since I had coredumps enabled, I'm in a position to provide 'bt full', but it looks like my binaries are stripped, so I'm not getting source code line numbers. granitemon@computer:~$ gdb /usr/lib/dovecot/imap ./core GNU gdb (GDB) 7.0.1-debian Copyright (C) 2009 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "i486-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from /usr/lib/dovecot/imap...(no debugging symbols found)...done. warning: Can't read pathname for load map: Input/output error. Reading symbols from /lib/i686/cmov/libdl.so.2...(no debugging symbols found)...done. Loaded symbols for /lib/i686/cmov/libdl.so.2 Reading symbols from /usr/lib/libldap_r-2.4.so.2...(no debugging symbols found)...done. Loaded symbols for /usr/lib/libldap_r-2.4.so.2 Reading symbols from /lib/i686/cmov/librt.so.1...(no debugging symbols found)...done. Loaded symbols for /lib/i686/cmov/librt.so.1 Reading symbols from /lib/i686/cmov/libc.so.6...(no debugging symbols found)...done. Loaded symbols for /lib/i686/cmov/libc.so.6 Reading symbols from /lib/ld-linux.so.2...(no debugging symbols found)...done. Loaded symbols for /lib/ld-linux.so.2 Reading symbols from /usr/lib/liblber-2.4.so.2...(no debugging symbols found)...done. Loaded symbols for /usr/lib/liblber-2.4.so.2 Reading symbols from /lib/i686/cmov/libresolv.so.2...(no debugging symbols found)...done. Loaded symbols for /lib/i686/cmov/libresolv.so.2 Reading symbols from /usr/lib/libsasl2.so.2...(no debugging symbols found)...done. Loaded symbols for /usr/lib/libsasl2.so.2 Reading symbols from /usr/lib/libgnutls.so.26...(no debugging symbols found)...done. Loaded symbols for /usr/lib/libgnutls.so.26 Reading symbols from /lib/i686/cmov/libpthread.so.0...(no debugging symbols found)...done. Loaded symbols for /lib/i686/cmov/libpthread.so.0 Reading symbols from /usr/lib/libtasn1.so.3...(no debugging symbols found)...done. Loaded symbols for /usr/lib/libtasn1.so.3 Reading symbols from /usr/lib/libz.so.1...(no debugging symbols found)...done. Loaded symbols for /usr/lib/libz.so.1 Reading symbols from /usr/lib/libgcrypt.so.11...(no debugging symbols found)...done. Loaded symbols for /usr/lib/libgcrypt.so.11 Reading symbols from /usr/lib/libgpg-error.so.0...(no debugging symbols found)...done. Loaded symbols for /usr/lib/libgpg-error.so.0 Reading symbols from /lib/i686/cmov/libnss_compat.so.2...(no debugging symbols found)...done. Loaded symbols for /lib/i686/cmov/libnss_compat.so.2 Reading symbols from /lib/i686/cmov/libnsl.so.1...(no debugging symbols found)...done. Loaded symbols for /lib/i686/cmov/libnsl.so.1 Reading symbols from /lib/i686/cmov/libnss_nis.so.2...(no debugging symbols found)...done. Loaded symbols for /lib/i686/cmov/libnss_nis.so.2 Reading symbols from /lib/i686/cmov/libnss_files.so.2...(no debugging symbols found)...done. Loaded symbols for /lib/i686/cmov/libnss_files.so.2 Reading symbols from /lib/libgcc_s.so.1...(no debugging symbols found)...done. Loaded symbols for /lib/libgcc_s.so.1 Core was generated by `imap'. Program terminated with signal 6, Aborted. #0 0xb7788424 in __kernel_vsyscall () (gdb) bt full #0 0xb7788424 in __kernel_vsyscall () No symbol table info available. #1 0xb7607751 in raise () from /lib/i686/cmov/libc.so.6 No symbol table info available. #2 0xb760ab82 in abort () from /lib/i686/cmov/libc.so.6 No symbol table info available. #3 0x080f0e2e in ?? () No symbol table info available. #4 0x080f0e82 in ?? () No symbol table info available. #5 0x080f0809 in i_panic () No symbol table info available. #6 0x08092f47 in istream_raw_mbox_get_body_size () No symbol table info available. #7 0x08093025 in istream_raw_mbox_next () No symbol table info available. #8 0x08093323 in istream_raw_mbox_seek () No symbol table info available. #9 0x08093745 in mbox_file_seek () No symbol table info available. #10 0x08095852 in ?? () No symbol table info available. #11 0x08095c8d in ?? () No symbol table info available. #12 0x080a35c3 in index_mail_set_seq () No symbol table info available. #13 0x08095fb9 in ?? () No symbol table info available. #14 0x080a763b in index_storage_search_next_nonblock () No symbol table info available. #15 0x080b5c1a in mailbox_search_next_nonblock () No symbol table info available. #16 0x080b5c68 in mailbox_search_next () No symbol table info available. #17 0x0806a4c4 in imap_fetch_more () No symbol table info available. #18 0x08062665 in ?? () No symbol table info available. #19 0x0806753f in ?? () No symbol table info available. #20 0x0806862b in client_output () No symbol table info available. #21 0x0810007e in ?? () No symbol table info available. #22 0x080f9aa6 in io_loop_handler_run () ---Type <return> to continue, or q <return> to quit--- No symbol table info available. #23 0x080f8f20 in io_loop_run () No symbol table info available. #24 0x08070f24 in main () No symbol table info available. (gdb) q Does anyone have any suggestions, here? Many thanks in advance; let me know if I can provide more information! All the best, John Clements

3 2

Re: [Dovecot] limiting number of incorrect logins per connection
by alex＠ahhyes.net 27 Aug '11

27 Aug '11

Thanks for that. I will change it and recompile. Sorry for the grumpyness yesterday in my posts. Was having a bad day. Is there any chance of there being an option on future versions that allow a number of failed auth attempts to be specified before dropping the connection? The other thread you mentioned, I see someone devised a small patch in c to add this functionality. It didnt look like a lot of code to do it. What are your thoughts? ----- Reply message ----- From: "Timo Sirainen" <tss(a)iki.fi> Date: Sat, Aug 27, 2011 02:30 Subject: [Dovecot] limiting number of incorrect logins per connection To: "Alex" <alex(a)ahhyes.net> Cc: <dovecot(a)dovecot.org> login-common/client-common.h : #define CLIENT_LOGIN_TIMEOUT_MSECS (MASTER_LOGIN_TIMEOUT_SECS*1000) So set it to (45*60*1000) But I don't think there's much of a practical difference between these. On 26.8.2011, at 12.07, Alex wrote: > 3 minutes! I think that's too long, how can I drop that down to about 45 seconds? > > > On Fri, 26 Aug 2011 11:44:45 +0300, Timo Sirainen wrote: >> On 26.8.2011, at 10.25, Alex wrote: >> >>> Running Dovecot 2 on my server. It is regularly getting dictionary auth attacked. What I have noticed is that once connected to a pop3/imap login session, you can send endless incorrect usernames+passwords attempts. This is a problem for me... I use fail2ban to try and stop these script kiddies. The problem is that fail2ban detects the bad auths, firewalls the IP, however, since it's an "established" session, the attacker can keep authing away... It's only on a subsequent (new) connection that the firewalling will take effect. >> >> Umm. If client hasn't managed to log in in 3 minutes, it's >> disconnected (no matter what it does with the connection). >

1 0

Re: [Dovecot] On IMAP vhost login, only Username being used
by hobie＠rumormillnews.com 26 Aug '11

26 Aug '11

Found it. :) Not a dovecot problem but a field in Icedove (Thunderbird variant) that had been automatically filled in by the software "to serve you better". It's on the Server Settings page as "User Name". "Never mind..." :) --hobie > Recapping: I'm working to set up Dovecot 2.0.13 along with some additional software (qmail, vpopmail, squirrelmail). It's working fine with squirrelmail now, but trying to connect over SSL with a Thunderbird variant and using IMAP, authentication fails because Dovecot is trying to match only the front part of the name (the user part), ignoring the domain name part of what it's being sent. So, instead of seeking to match virtual user: > > joe_blow(a)some_domain.com > > ...it's trying to match: > > joe_blow > > ...and failing, since joe_blow is not a system user but is a virtual host user. With Squirrelmail, connecting from localhost via non-SSL IMAP, the match is handled correctly, no problem. I've run the runtbird.sh script but no light was shed on this by the resulting output, all it said was that authentication was failing. > > Has anyone else encountered this problem? Any suggestions on how to fix it or where to look for additional info? Thanks kindly. > > --hobie > >> I tried the runtbird.sh script, hoping for more info - all it did was > show that auth is failing. I don't understand why Dovecot is separating the username from the domain name, and trying to match only on the username. Seems like there must be a config setting that affects this and that I'm overlooking. Thanks ahead for any help with this. >> >> --hobie >> >> hobie wrote earlier: >> >> ===== >> >> Attempting IMAP SSL login on new installation, using Icedove (Debain > Thunderbird variant), login fails. Logs show Dovecot attempting to match username only, not username with domain name, on Vpopmail user, so of course no match. Tried with '@' in full username, also with '%'. What's missing? >> >> Log shows: >> >> Aug 24 19:30:48 debian dovecot: auth: Debug: client in: CONT<hidden> Aug > 24 19:30:48 debian dovecot: auth: Debug: Loading modules from directory: /usr/local/lib/dovecot/auth >> Aug 24 19:30:48 debian dovecot: auth: Debug: vpopmail(postmaster,[IP > redacted]): lookup user=postmaster domain= >> >> Current config: >> >> # 2.0.13: /usr/local/etc/dovecot/dovecot.conf >> # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.2 ext3 >> auth_debug = yes >> auth_verbose = yes >> disable_plaintext_auth = no >> first_valid_gid = 89 >> first_valid_uid = 89 >> mail_debug = yes >> mail_location = maildir:/home/vpopmail/domains/%d/%n/Maildir >> maildir_very_dirty_syncs = yes >> passdb { >> driver = vpopmail >> } >> protocols = imap pop3 >> ssl_cert = </etc/ssl/certs/dovecot.pem >> ssl_key = </etc/ssl/private/dovecot.pem >> userdb { >> args = quota_template=quota_rule=*:backend=%q >> driver = vpopmail >> } >> >> --hobie >> >> ===== >> > > > > > > >

1 0

[Dovecot] performance with 100k messages per folder
by Florin Andrei 26 Aug '11

26 Aug '11

dovecot-2.0-0.10.beta6.20100630.el6.x86_64 on CentOS 6. Virtual machine with 1 GB of RAM on VMWare. The configuration is more or less stock. Postfix receives then delivers to Dovecot. IMAP with mbox. Only one user account, but shared by several people via webmail (Roundcube webmail in Apache on the same machine). No other MUAs. 100k new messages per month, inbox is rotated monthly into a YYYYMM folder by a cron job. Only one monthly folder so far. Messages are never deleted (but I may start deleting old folders a year or two from now). This is mostly for reading, with occasional messages being forwarded. The email was pretty sluggish when logging in to the webmail interface. I asked the admin to increase the RAM from 0.5 to 1 GB. I changed mbox_very_dirty_syncs to yes. These measures seemed to accelerate it a lot. There's still a 1 sec pause when logging in, during which time the dovecot/imap process is using a lot of CPU. It looks like, as long as I give it enough RAM to keep the folders in memory, the whole thing should be fast enough, which is great. Any other tips-n-tricks to keep the email server speedy and the users happy? Should I worry about mbox_very_dirty_syncs as long as there are no other MUAs? -- Florin Andrei http://florin.myip.org/

2 1

[Dovecot] File Permissions and delivery
by Simon Brereton 26 Aug '11

26 Aug '11

Hi I'm very new to Dovecot (been using Courier for 5 years), but I've been persuaded of the merits of Dovecot and since the server needs upgrading that seems like the perfect time/excuse. On a test server, I set up postfix and installed Dovecot (running 32-bit Debian Squeeze, installed from apt-get). I mirrored the mail store (Maildirs, for historical reasons located under /var/spool/mail/virtual/domain.com/user). Then I ran the courier migration perl script and everything was fine and dandy. However, when I can to do the production migration, things weren't as smooth. The new server is 64-bit (not that I think it makes a difference, but if you're going to help me you should have all the information :) Again, I installed Postfix and Dovecot Took down the old server Mirrored the Maildirs Ran the migration script Restarted everything At this point everything looked like it was ok. Mail was being received and delivered to the Maildirs and the IMAP login was fine. However, I noticed errors in the logs when retreiving mail with the MUA along the lines of: Aug 26 16:59:48 mail dovecot: IMAP(simon(a)lydiard.net): open(/var/spool/mail/virtual/domain.net/simon/cur/1314328966.V801I166601bM7… failed: Permission denied (euid=999(mailsystem) egid=115(mailsystem) missing +r perm: /var/spool/mail/virtual/domain.net/simon/cur/1314328966.V801I166601bM756462.mail.net,S=2461:2,) After messing around with the chown and chmod (even though these were exactly the same as the test server) I finally discovered the issue. mail:~# ls /var/spool/mail/virtual/domain.net/simon/new/ -rwxrwx--- 1 postfix mailsystem 2.5K Aug 26 03:33 1314326000.V801I1666018M803015.mail.net,S=2461:2, -rwxrwx--- 1 postfix mailsystem 2.5K Aug 26 03:36 1314326209.V801I1666019M447273.mail.net,S=2460:2, -rw-rw---- 1 postfix mailsystem 2.5K Aug 26 04:00 1314327630.V801I166601aM308173.mail.net,S=2477:2, -rw------- 1 postfix mailsystem 2.5K Aug 26 04:22 1314328966.V801I166601bM756462.mail.net,S=2461:2, -rw------- 1 postfix mailsystem 1.1K Aug 26 16:28 1314372534.V801I166601cM615258.mail.net,S=1097:2, -rw------- 1 postfix mailsystem 1.1K Aug 26 16:31 1314372685.V801I166601dM264242.mail.net,S=1097:2, Mails are being delivered with 0600 permissions and not 0660 (the mails from courier seem to have all been 0770 as you can see). If I manually change the permission (to 0660) then I can see the mail in the MUA. After thinking for a while it occurred to me that this is covered in the LDA section. But making changes to the config file (either permissions or UID/GID) doesn't seem to make a difference. (Yes, I did restart postfix and dovecot after the changes). Anyway, here is my dovecot -n: mail:~# dovecot -n # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.2 ext3 log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps pop3 pop3s ssl_ca_file: /etc/ssl/keys/ca.crt ssl_cert_file: /etc/ssl/keys/mail.net.crt ssl_key_file: /etc/ssl/private/mail.net.key disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login mail_privileged_group: mailsystem mail_location: maildir:/var/spool/mail/virtual/%d/%n maildir_very_dirty_syncs: yes mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 imap_client_workarounds(default): outlook-idle delay-newmail imap_client_workarounds(imap): outlook-idle delay-newmail imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh lda: postmaster_address: postmaster@net mail_plugins: quota log_path: info_log_path: deliver_log_format: msgid=%m: %f: %$ auth default: mechanisms: plain login user: mailsystem verbose: yes passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: prefetch userdb: driver: static args: uid=999 gid=115 home=/var/spool/mail/virtual/%d/%n allow_all_users=yes socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: mailsystem master: path: /var/run/dovecot/auth-master mode: 432 user: mailsystem group: mailsystem plugin: quota: maildir As you can see, I tried to go 0660 in both client and master. The portion of my master.cf 81 # SPB - Attempt to deliver with Dovecot LDA 82 dovecot unix - n n - - pipe 83 flags=DRhu user=mailsystem argv=/usr/lib/dovecot/deliver -f ${sender} -d ${user}@${nexthop} Is there anything else I should include? I'm pretty sure it's an error on my part. I'm just not clued up enough to know where. My second problem is that I thought I had things back to where they were before I messed with chown and chmod, but now I get this in the logs dovecot: dovecot: Fatal: chdir(/var/spool/mail/virtual/domain.net/simon//) failed: Permission denied (euid=999(mailsystem) egid=115(mailsystem) missing +x perm: /var/spool/mail/virtual) But the ls on that is exactly the same as on the test server: ls /var/spool/mail/virtual/ total 44K drwxrwS--- 11 postfix mailsystem 4.0K Aug 25 23:07 ./ drwxrwsr-x 5 amavis mailsystem 4.0K Oct 19 2009 ../ drwxrws--- 5 mailsystem mailsystem 4.0K Aug 26 02:33 domain.net/ So, now I'm stumped. I hope someone can spot the simple thing I've missed! Thanks. Simon

1 0

Re: [Dovecot] limiting number of incorrect logins per connection
by alex＠ahhyes.net 26 Aug '11

26 Aug '11

Hi, I saw that thread already, however it does not offer any solution that can be applied to dovecot directly. That thread has also been asleep for well over a year. It couldnt be that hard for the author to implement this function. It would only require a few lines of code. ----- Reply message ----- From: "Robert Schetterer" <robert(a)schetterer.org> Date: Fri, Aug 26, 2011 17:59 Subject: [Dovecot] limiting number of incorrect logins per connection To: <dovecot(a)dovecot.org> Am 26.08.2011 09:25, schrieb Alex: > Hi Guys, > > Running Dovecot 2 on my server. It is regularly getting dictionary auth > attacked. What I have noticed is that once connected to a pop3/imap > login session, you can send endless incorrect usernames+passwords > attempts. This is a problem for me... I use fail2ban to try and stop > these script kiddies. The problem is that fail2ban detects the bad > auths, firewalls the IP, however, since it's an "established" session, > the attacker can keep authing away... It's only on a subsequent (new) > connection that the firewalling will take effect. > > Why is there no configuration option such as "max auth attempts per > connection"? This would be useful, so once the limit is reached, the > connection is dropped. > > is there a patch/workaround? > there where equal questions in the past i.e read http://comments.gmane.org/gmane.mail.imap.dovecot/46204 -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

1 0

Re: [Dovecot] On IMAP vhost login, only Username being used
by hobie＠rumormillnews.com 26 Aug '11

26 Aug '11

Recapping: I'm working to set up Dovecot 2.0.13 along with some additional software (qmail, vpopmail, squirrelmail). It's working fine with squirrelmail now, but trying to connect over SSL with a Thunderbird variant and using IMAP, authentication fails because Dovecot is trying to match only the front part of the name (the user part), ignoring the domain name part of what it's being sent. So, instead of seeking to match virtual user: joe_blow(a)some_domain.com ...it's trying to match: joe_blow ...and failing, since joe_blow is not a system user but is a virtual host user. With Squirrelmail, connecting from localhost via non-SSL IMAP, the match is handled correctly, no problem. I've run the runtbird.sh script but no light was shed on this by the resulting output, all it said was that authentication was failing. Has anyone else encountered this problem? Any suggestions on how to fix it or where to look for additional info? Thanks kindly. --hobie > I tried the runtbird.sh script, hoping for more info - all it did was show that auth is failing. I don't understand why Dovecot is separating the username from the domain name, and trying to match only on the username. Seems like there must be a config setting that affects this and that I'm overlooking. Thanks ahead for any help with this. > > --hobie > > hobie wrote earlier: > > ===== > > Attempting IMAP SSL login on new installation, using Icedove (Debain Thunderbird variant), login fails. Logs show Dovecot attempting to match username only, not username with domain name, on Vpopmail user, so of course no match. Tried with '@' in full username, also with '%'. What's missing? > > Log shows: > > Aug 24 19:30:48 debian dovecot: auth: Debug: client in: CONT<hidden> Aug 24 19:30:48 debian dovecot: auth: Debug: Loading modules from directory: /usr/local/lib/dovecot/auth > Aug 24 19:30:48 debian dovecot: auth: Debug: vpopmail(postmaster,[IP redacted]): lookup user=postmaster domain= > > Current config: > > # 2.0.13: /usr/local/etc/dovecot/dovecot.conf > # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.2 ext3 > auth_debug = yes > auth_verbose = yes > disable_plaintext_auth = no > first_valid_gid = 89 > first_valid_uid = 89 > mail_debug = yes > mail_location = maildir:/home/vpopmail/domains/%d/%n/Maildir > maildir_very_dirty_syncs = yes > passdb { > driver = vpopmail > } > protocols = imap pop3 > ssl_cert = </etc/ssl/certs/dovecot.pem > ssl_key = </etc/ssl/private/dovecot.pem > userdb { > args = quota_template=quota_rule=*:backend=%q > driver = vpopmail > } > > --hobie > > ===== >

1 0

[Dovecot] Dovecot 2.0.13 How to use POP3 order
by Nick Celebic 26 Aug '11

26 Aug '11

I saw a few commits for 2.0.13 that added MAIL_FETCH_POP3_ORDER, but I haven't been able to find any information on how to use it. I'm migrating from a Merak mail server into dovecot and all the email can be copied directly into a Maildir/cur directory. The filenames are just the timestamps. When I check with dovecot pop3, they seem to be randomly ordered. I'm hoping this provides a solution where it will look at the file list or stat order. If this isn't possible, can someone tell me how I can change the order in which dovecot lists mails in a UIDL in POP3? Thanks, Nick Celebic

2 1

[Dovecot] Catch22: user needs space to fix out of space condition
by Joseph Tam 25 Aug '11

25 Aug '11

A mail user reported that he filled up his INBOX (despite reminders he was approaching his filesystem quota), and furthermore, he could not fix the situation because he couldn't expunge message he marked for deletion. The dovecot logs revealed the cause dovecot: imap(user): Error: open(/var/mail/user.lock) failed: Disc quota exceeded This created an impasse where a user cannot free space because he needs to create a lock file that cannot be created because he needs free space. Is there any way out of this without administrator intervention? Joseph Tam <jtam.home(a)gmail.com>

5 4

[Dovecot] dovecot and maillists problem
by Костырев Александр Алексеевич 25 Aug '11

25 Aug '11

Hello there! I have a little trouble with using dovecot as lmtp and maillists. I use dovecot 2.0.13 with exim 4.72 on Debian 6.0. (All stuff at one host). info of maillists is store in mysql table, for example: +---------+-------------------------------------------------------------------------------------------------+ | name | recipients | +---------+-------------------------------------------------------------------------------------------------+ | Hab_Tax | 2504000067-253601001.253809737993@25.example.org,2721097514-272101001.271300057673@.example.org | +---------+-------------------------------------------------------------------------------------------------+ The problem is: When I send a letter to short maillist (as above) it get the same ID and stored only once in the maildir of one user who is the member of that maillist - that's ok, but When I send a letter to maillist with a large number of recipients it occurred that it's saved more than one, because of the headers added by dovecot lmtp (I've changed host name): diff letter_in_one_user/1314238006.M841940P6916.pink\,S\=12778136\,W\=12953189 letler_in_second_user/new/1314237993.M460165P6916.pink\,S\=12778136\,W\=12953189 3,4c3,4 < by pink.atlas-2.ru (Dovecot) with LMTP id 6UiGJBWuVU4EGwAA1nFjLA < ; Thu, 25 Aug 2011 13:06:46 +1100 --- > by pink.atlas-2.ru (Dovecot) with LMTP id VUeGJBWuVU4EGwAA1nFjLA > ; Thu, 25 Aug 2011 13:06:29 +1100 It's the same letter accept the date and id. What I get in logs is: I see that exim send letters in maillist with one and the same id: ...skipped... 13:06:46 1QwPKe-0001nU-U5 <2502(a)example.org> ... 13:06:47 1QwPKe-0001nU-U5 <2502(a)example.org> ... But in logs of dovecot I see: 13:06:14 msgid=<E1QwPKe-0001nU-U5(a)pink.example.org>: wUWGJBWuVU4EGwAA1nFjLA: 13:06:18 msgid=<E1QwPKe-0001nU-U5(a)pink.example.org>: wEWGJBWuVU4EGwAA1nFjLA: 13:06:22 msgid=<E1QwPKe-0001nU-U5(a)pink.example.org>: JkaGJBWuVU4EGwAA1nFjLA: 13:06:26 msgid=<E1QwPKe-0001nU-U5(a)pink.example.org>: i0aGJBWuVU4EGwAA1nFjLA: 13:06:30 msgid=<E1QwPKe-0001nU-U5(a)pink.example.org>: 8EaGJBWuVU4EGwAA1nFjLA: 13:06:34 msgid=<E1QwPKe-0001nU-U5(a)pink.example.org>: VUeGJBWuVU4EGwAA1nFjLA: 13:06:37 msgid=<E1QwPKe-0001nU-U5(a)pink.example.org>: ukeGJBWuVU4EGwAA1nFjLA: 13:06:42 msgid=<E1QwPKe-0001nU-U5(a)pink.example.org>: H0iGJBWuVU4EGwAA1nFjLA: 13:06:46 msgid=<E1QwPKe-0001nU-U5(a)pink.example.org>: hEiGJBWuVU4EGwAA1nFjLA: 13:06:47 msgid=<E1QwPKe-0001nU-U5(a)pink.example.org>: 6UiGJBWuVU4EGwAA1nFjLA: Also in dovecot log I've noticed that: at first auth is searching info in sql for 200 users then log continues with lmtp's info then auth is searching info in sql for another portion of users and this loop in log continues. Dovecot.conf: http://pastebin.com/ueCBU3bP dovecot.sql: http://pastebin.com/kqCq52mC dovecot.log http://pastebin.com/YiyMWpx1 exim.conf: http://pastebin.com/F4MNQkAx exim.log: http://pastebin.com/wn83TZpX

2 6

[Dovecot] On IMAP vhost login, only Username being used
by hobie＠rumormillnews.com 25 Aug '11

25 Aug '11

Attempting IMAP SSL login on new installation, using Icedove (Debain Thunderbird variant), login fails. Logs show Dovecot attempting to match username only, not username with domain name, on Vpopmail user, so of course no match. Tried with '@' in full username, also with '%'. What's missing? Log shows: Aug 24 19:30:48 debian dovecot: auth: Debug: client in: CONT<hidden> Aug 24 19:30:48 debian dovecot: auth: Debug: Loading modules from directory: /usr/local/lib/dovecot/auth Aug 24 19:30:48 debian dovecot: auth: Debug: vpopmail(postmaster,[IP redacted]): lookup user=postmaster domain= Current config: # 2.0.13: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.2 ext3 auth_debug = yes auth_verbose = yes disable_plaintext_auth = no first_valid_gid = 89 first_valid_uid = 89 mail_debug = yes mail_location = maildir:/home/vpopmail/domains/%d/%n/Maildir maildir_very_dirty_syncs = yes passdb { driver = vpopmail } protocols = imap pop3 ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = quota_template=quota_rule=*:backend=%q driver = vpopmail } --hobie

2 1

[Dovecot] Post-login scripting with virtual users
by Mark Willcox 25 Aug '11

25 Aug '11

I am running Dovecot 2.0.13 on Fedora 15. I have migrated from a bincimap installation using checklocalpwd. All email is in folders owned by a unprivileged user, popuser. The email users are entirely virtual and have no relationship to actual linux users. My userdb calls return the UID and GID of popuser and all goes well retrieving the mail via POP3 and IMAP. I am trying to implement a Post-login script to register the IP address that the authentication came from. Dovecot seems to be trying to execute the script as the email non-user, which does not work. I have specified that the script should be run as popuser, but it still runs as devnull(a)dhzone.com for instance. Everything up top that point seems to be happening happily under popuser. I added a "user = popuser" directive and it had no effect that I could see. I know that dovecot read the directive because I changed it to "user = 555" and dovecot would not run because "555" is not a user. I tried adding a "User = popuser" within the unix_listener but that also had no effect. Any ideas? Thank you! ------------------------------ Here is my dovecot -n: # 2.0.13: /etc/dovecot/dovecot.conf # OS: Linux 2.6.40.3-0.fc15.x86_64 x86_64 Fedora release 15 (Lovelock) auth_debug = yes disable_plaintext_auth = no mail_debug = yes mbox_write_locks = fcntl passdb { args = /etc/dovecot/conf.d/dovecot-sql.conf.ext driver = sql } protocols = imap pop3 service imap-postpop { executable = script-login /usr/local/bin/set_postpop unix_listener imap-postpop { } user = popuser } service imap { executable = imap imap-postpop } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = /etc/dovecot/conf.d/dovecot-sql.conf.ext driver = sql } ----------------------------------------------------- The dovecot-sql.conf.ext looks like this: driver = mysql connect = host=localhost dbname=webmail user=xxxx password=xxxx password_query = SELECT id AS user, IF( clear IS NULL, CONCAT('{CRYPT}',crypto), CONCAT('{PLAIN}',clear)) AS password \ FROM users WHERE id = '%u' user_query = SELECT home, uid, gid \ FROM users WHERE id = '%u' ------------------------------- >From the maillog: Aug 24 13:01:57 callisto dovecot: auth: Debug: client out: OK#0111#011user=devnull(a)dhzone.com Aug 24 13:01:57 callisto dovecot: auth: Debug: master in: REQUEST... Aug 24 13:01:57 callisto dovecot: auth: Debug: sql(devnull(a)dhzone.com,75.221.209.232): SELECT home, uid, gid FROM users WHERE id = 'devnull(a)dhzone.com' Aug 24 13:01:57 callisto dovecot: auth: Debug: master out: USER#0114007264257#011devnull@dhzone.com#011home=/var/qmail/popbox/dhzone-com/devnull#011uid=555#011gid=555 Aug 24 13:01:57 callisto dovecot: imap-login: Login: user=<devnull(a)dhzone.com>, method=PLAIN, rip=75.221.209.232, lip=76.76.59.241, mpid=667 Aug 24 13:01:57 callisto dovecot: imap-postpop: Error: script-login: Error: user devnull(a)dhzone.com: Error reading configuration: net_connect_unix(/var/run/dovecot/config) failed: Permission denied Aug 24 13:01:57 callisto dovecot: imap-postpop: Error: script-login: Fatal: Internal error occurred. Refer to server log for more information. Aug 24 13:01:57 callisto dovecot: imap(devnull(a)dhzone.com): Post-login script denied access to user devnull(a)dhzone.com Aug 24 13:01:57 callisto dovecot: log: Error: service(imap-postpop): child 668 returned error 89 (Fatal failure) Aug 24 13:02:03 callisto dovecot: master: Warning: Killed with signal 15 (by pid=1 uid=0 code=kill) -- _________________ Mark Willcox Data Helper, Inc.

3 9

[Dovecot] Dovecot rejecting Vpopmail User 89
by hobie＠rumormillnews.com 24 Aug '11

24 Aug '11

I'm working to get Dovecot 2.0.13 working along with qmail, Vpopmail and Squirrelmail on a Debian 6.0.2 system, Dovecot compiled, not from a package. Vpopmail has a widely known assigned user/group ID of 89 and is the owner of all the mail folders. Regardless of value of first_valid_uid (1, 89, other), Dovecot denies Squirrelmail connection, saying it can't allow access to UID 89. "Couldn't drop privileges", it says. I'd be grateful for fixes, suggestions, or a pointer to an existing answer to this problem. Thanks ahead. :) Presently dovecot -n shows: # 2.0.13: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.2 ext3 auth_debug = yes disable_plaintext_auth = no mail_debug = yes mail_location = maildir:/home/vpopmail/domains/%d/%n/Maildir maildir_very_dirty_syncs = yes passdb { driver = vpopmail } protocols = imap pop3 ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } userdb { args = quota_template=quota_rule=*:backend=%q driver = vpopmail } --hobie

3 5

Re: [Dovecot] Dovecot rejecting Vpopmail User 89
by Rick Romero 24 Aug '11

24 Aug '11

Enable auth_verbose and check the logs. But I'm pretty sure that means Dovecot can't change to the Maildir folder. I assume the user's folder is owned by vpopmail:vchkpw? Is the Maildir NFS mounted or local? Rick Quoting hobie(a)rumormillnews.com: > Thanks, Rick. :) Changed first/last uid/gid so all show 89 and restarted > Dovecot, no change. Telnetting from remote or from localhost, Dovecot > closes the connection immediately after password is sent. (?) > > --hobie > >> Quoting hobie(a)rumormillnews.com: >> >>> I'm working to get Dovecot 2.0.13 working along with qmail, Vpopmail and >>> Squirrelmail on a Debian 6.0.2 system, Dovecot compiled, not from a >>> package. >>> >>> Vpopmail has a widely known assigned user/group ID of 89 and is the >>> owner >>> of all the mail folders. >>> >>> Regardless of value of first_valid_uid (1, 89, other), Dovecot denies >>> Squirrelmail connection, saying it can't allow access to UID 89. >>> "Couldn't >>> drop privileges", it says. I'd be grateful for fixes, suggestions, or a >>> pointer to an existing answer to this problem. Thanks ahead. :) >>> >> >> Here's mine - I set first and last uid AND gid. >> Can you telnet to port 110 and test? >> >> USER username >> PASS password >> LIST >> >> >> # 2.0.13: /usr/local/etc/dovecot/dovecot.conf >> # OS: FreeBSD 8.2-RELEASE amd64 >> auth_mechanisms = plain login digest-md5 cram-md5 >> auth_username_translation = %@ >> auth_verbose = yes >> base_dir = /var/run/dovecot/ >> default_login_user = vpopmail >> disable_plaintext_auth = no >> first_valid_gid = 89 >> first_valid_uid = 89 >> last_valid_gid = 89 >> last_valid_uid = 89 >> # run under tcpserver >> log_path = /dev/stderr >> login_greeting = Ready. >> mail_fsync = never >> mail_plugins = " quota zlib" >> mail_privileged_group = mail >> namespace { >> inbox = yes >> location = >> prefix = >> separator = . >> } >> namespace { >> hidden = yes >> inbox = no >> list = no >> location = >> prefix = INBOX. >> separator = . >> } >> passdb { >> driver = vpopmail >> } >> plugin { >> quota = maildir >> } >> protocols = imap pop3 >> service anvil { >> client_limit = 2000 >> } >> service auth { >> unix_listener auth-master { >> mode = 0600 >> } >> } >> service imap-login { >> client_limit = 384 >> process_limit = 512 >> process_min_avail = 25 >> service_count = 0 >> } >> service imap-postlogin { >> executable = script-login rawlog >> /usr/local/etc/dovecot/lastauth-imap.sh >> user = vpopmail >> } >> service imap { >> executable = /usr/local/libexec/dovecot/imap >> } >> service pop-postlogin { >> executable = script-login /usr/local/etc/dovecot/lastauth-pop.sh >> user = vpopmail >> } >> service pop3-login { >> client_limit = 384 >> process_limit = 512 >> process_min_avail = 25 >> service_count = 0 >> } >> service pop3 { >> executable = /usr/local/libexec/dovecot/pop3 >> } >> shutdown_clients = no >> ssl_cert = </etc/ssl/mail.pem >> ssl_key = </etc/ssl/mail.key >> ssl_key_password = password >> userdb { >> driver = vpopmail >> } >> verbose_proctitle = yes >> protocol imap { >> auth_socket_path = /var/run/dovecot/auth-master >> imap_client_workarounds = delay-newmail tb-extra-mailbox-sep >> mail_max_userip_connections = 10 >> mail_plugins = " quota zlib imap_zlib quota imap_quota" >> } >> protocol pop3 { >> auth_socket_path = /var/run/dovecot/auth-master >> mail_max_userip_connections = 10 >> mail_plugins = quota >> pop3_client_workarounds = outlook-no-nuls oe-ns-eoh >> pop3_uidl_format = %08Xu%08Xv >> >> >>

1 0

[Dovecot] BUG - lmtp multiple recipients fail - setuid issue?
by Boris Lordis 24 Aug '11

24 Aug '11

Hello, I am not having much luck on this particular issue so I wanted to make sure that this is registered as a potential bug. The essence of the problem is that for a given message addressed to multiple users, lmtp writes the message correctly to the first addressed user only, then subsequent user writes fail as the lmtp process doesn't run with the proper permissions and tries to link files from different users as part of its message writing. Below you can see that lmtp (running with steve's id, who was the first listed recipient) is trying to link a file in jerry's inbox meeting with failure: Jul 27 11:24:42 testmailserver dovecot: lmtp(12412, steve): Error: link(/spool/mail/j/jerry/mail/INBOX/u.20423, /spool/mail/s/steve/mail/INBOX/.temp.1311791081.P12412Q2M989550.testmailserver.) failed: Permission denied Jul 27 11:24:42 testmailserver dovecot: lmtp(12412, steve): +1IXBeVXME58MAAARoVNxQ: msgid <201107271824.p6RIOPa5020900 at backup.>: save failed to INBOX: Internal error occurred. Refer to server log for more information. [2011-07-27 11:24:41] Best regards, -Boris I am using version 2.0.13. dovecot -n shows this: # 2.0.13: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-71.29.1.el6.i686 i686 CentOS Linux release 6.0 (Final) ext4 auth_debug = yes auth_master_user_separator = * auth_verbose = yes auth_verbose_passwords = plain lda_mailbox_autocreate = yes mail_debug = yes mail_location = sdbox:/spool/mail/%1Ln/%Ln/mail:INBOX=/spool/mail/%1Ln/%Ln/mail/INBOX mbox_write_locks = fcntl passdb { args = /etc/dovecot/master-users driver = passwd-file master = yes } passdb { args = failure_show_msg=yes driver = pam } plugin { autocreate = INBOX autosubscribe = INBOX } service lmtp { inet_listener ltmp { port = 24 } } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = home=/spool/mail/%1Ln/%Ln driver = passwd } protocol lmtp { mail_plugins = " autocreate" }

2 2

[Dovecot] SiS
by Guy Deleeuw 24 Aug '11

24 Aug '11

Hello, SiS is implemented and stable in the last version ? Best Regards Guy

1 0

[Dovecot] Attachments not removed from single store
by Karsten Becker 24 Aug '11

24 Aug '11

Hi. Well, I've the next problem. I turned on the new attachment de-duplication stuff in the configuration. If I send an attchment between two accounts on my test system, the attment gets saved ion the configured mail_attachment_dir. But... if I delete it from the senders Send folder and the receivers Inbox (and of course empty Trash afterwards in both cases), the hashes and the attachment are not deleted in mail_attachment_dir (as I would expect). Is this a bug, or have I misunderstood the concept of storing attachments? Regards Karsten ------------------------------------------------ > # 2.0.13: /usr/local/dovecot-2.0.13/etc/dovecot/dovecot.conf > # OS: Linux 2.6.32-33-server x86_64 Ubuntu 10.04.3 LTS ext4 > doveconf: Warning: Dovecot was last started using /etc/dovecot/dovecot.conf, but this config is /usr/local/dovecot-2.0.13/etc/dovecot/dovecot.conf > auth_cache_negative_ttl = 0 > auth_cache_size = 10 M > auth_mechanisms = plain login > base_dir = /usr/local/dovecot/var/run/dovecot > dict { > acl = mysql:/etc/dovecot/dovecot-dict-shared-mailboxes-mysql.conf > expire = mysql:/etc/dovecot/dovecot-dict-expire-mysql.conf > quota = mysql:/etc/dovecot/dovecot-dict-quota-mysql.conf > } > log_timestamp = "%Y-%m-%d %H:%M:%S " > login_greeting = Company Institute > mail_attachment_dir = /srv/vmail/attachments > mail_attachment_hash = %{sha256} > mail_cache_min_mail_count = 2 > mail_debug = yes > mail_location = mdbox:/srv/vmail/user-mailboxes/%d/%n > mail_plugins = acl expire quota > mailbox_idle_check_interval = 1 mins > namespace { > inbox = yes > location = > prefix = > separator = / > subscriptions = yes > type = private > } > namespace { > list = children > location = mdbox:/srv/vmail/user-mailboxes/%%d/%%n > prefix = Users/%%d/%%n/ > separator = / > subscriptions = no > type = shared > } > namespace { > list = children > location = maildir:/srv/vmail/public_folders:INDEX=/srv/vmail/user-mailboxes/%d/%n/public_folders-seen:LAYOUT=fs > prefix = Folders/ > separator = / > subscriptions = no > type = public > } > passdb { > args = /etc/dovecot/dovecot-mysql.conf > driver = sql > } > plugin { > acl = vfile:/etc/dovecot/global-acls:cache_secs=300 > acl_shared_dict = proxy::acl > expire = Trash > expire2 = Trash/* > expire3 = Spam > expire4 = Spam/* > expire5 = Junk > expire6 = Junk/* > expire_dict = proxy::expire > quota = dict:User quota::proxy::quota > quota_rule = *:storage=10485760 > quota_rule2 = Trash:storage=+1048576 > quota_warning = storage=95%% quota-warning 95 %u > quota_warning2 = storage=80%% quota-warning 80 %u > } > postmaster_address = postmaster(a)company.eu > protocols = imap pop3 > service auth { > unix_listener /var/spool/postfix/private/auth_dovecot { > group = postfix > mode = 0660 > user = postfix > } > unix_listener auth-master { > mode = 0600 > user = vmail > } > user = root > } > service dict { > unix_listener dict { > mode = 0600 > user = vmail > } > } > service imap-login { > inet_listener imaps { > port = 993 > ssl = yes > } > process_min_avail = 2 > } > service imap { > vsz_limit = 512 M > } > service pop3-login { > inet_listener pop3s { > port = 995 > ssl = yes > } > } > service quota-warning { > executable = script /usr/local/bin/quota-warning.sh > user = vmail > } > ssl = required > ssl_cert = </etc/postfix/ssl/mail01.compdmz.local.crt > ssl_key = </etc/postfix/ssl/mail01.compdmz.local.key > userdb { > args = /etc/dovecot/dovecot-mysql.conf > driver = sql > } > verbose_proctitle = yes > protocol lda { > auth_socket_path = auth-master > postmaster_address = postmaster(a)company.eu > } > protocol imap { > imap_client_workarounds = delay-newmail tb-lsub-flags tb-extra-mailbox-sep > imap_max_line_length = 128 k > mail_plugins = acl expire quota imap_acl imap_quota > } > protocol pop3 { > pop3_client_workarounds = outlook-no-nuls oe-ns-eoh > }

2 2