- dovecot - dovecot.org

[Dovecot] exim and /var/run/dovecot/auth-client permissions
by John Connett 17 Mar '11

17 Mar '11

I am attempting to configure a dovecot 2.0 + exim + fetchmail (demon) combination on openSUSE 11.4, initially with the standard dovecot package (2.0.9-3.4-x86_64) and now with the later server:mail build service package (2.0.11-1.1-x86_64). I followed the instructions in http://wiki2.dovecot.org/HowTo/EximAndDovecotSASL but despite the changes in conf.d/10-master.conf the permissions on /var/run/dovecot/auth-client remain unchanged: $ ls -l /var/run/dovecot/auth-client Srw------- 1 root root 0 Mar 14 13:11 /var/run/dovecot/auth-client $ This is probably the cause of authentication failures from exim. I suspect it is something trivial but haven't yet been able to find the answer.

2 4

[Dovecot] warnings from 2.0.11
by Mike Abbott 17 Mar '11

17 Mar '11

During a stress test dovecot-2.0.11 logs many warnings: Mar 8 06:19:52 gromit dovecot[59204]: imap(pid 68864 user user15): Warning: /Volumes/Mail/user15/dovecot-uidlist: Duplicate file entry at line 183: 1299556557.M571530P31883.gromit.example.com,S=21175,W=21549 (uid 67 -> 250) Mar 8 06:20:10 gromit dovecot[59204]: imap(pid 68865 user user34): Warning: /Volumes/Mail/user34/dovecot-uidlist: Duplicate file entry at line 230: 1299535329.M679065P61136.gromit.example.com,S=11040,W=11247 (uid 17 -> 240) Mar 8 06:20:10 gromit dovecot[59204]: imap(pid 68865 user user34): Warning: /Volumes/Mail/user34/dovecot-uidlist: Duplicate file entry at line 240: 1299535329.M902424P61136.gromit.example.com,S=12843,W=13075 (uid 30 -> 250) Mar 8 06:20:10 gromit dovecot[59204]: imap(pid 68865 user user34): Warning: /Volumes/Mail/user34/dovecot-uidlist: Duplicate file entry at line 266: 1299547358.M587728P69303.gromit.example.com,S=13637,W=13772 (uid 108 -> 276) Mar 8 06:20:10 gromit dovecot[59204]: imap(pid 68865 user user34): Warning: /Volumes/Mail/user34/dovecot-uidlist: Duplicate file entry at line 275: 1299558462.M498819P35210.gromit.example.com,S=15495,W=15663 (uid 160 -> 285) Mar 8 06:20:11 gromit dovecot[59204]: imap(pid 68864 user user36): Warning: /Volumes/Mail/user36/dovecot-uidlist: Duplicate file entry at line 281: 1299535339.M353973P61136.gromit.example.com,S=4498,W=4581 (uid 360 -> 604) Mar 8 06:21:00 gromit dovecot[59204]: imap(pid 68864 user user239): Warning: /Volumes/Mail/user239/dovecot-uidlist: Duplicate file entry at line 105: 1299547390.M813768P69393.gromit.example.com,S=4773,W=4861 (uid 22 -> 164) Mar 8 06:21:00 gromit dovecot[59204]: imap(pid 68864 user user239): Warning: /Volumes/Mail/user239/dovecot-uidlist: Duplicate file entry at line 106: 1299570075.M267312P49194.gromit.example.com,S=8041,W=8181 (uid 115 -> 165) Mar 8 06:28:24 gromit dovecot[59204]: imap(pid 69295 user user274): Warning: /Volumes/Mail/user274/dovecot-uidlist: Duplicate file entry at line 2020: 1299548064.M880781P67832.gromit.example.com,S=4976,W=5076 (uid 247 -> 2500) Mar 8 06:29:23 gromit dovecot[59204]: imap(pid 68973 user user115): Warning: /Volumes/Mail/user115/dovecot-uidlist: Duplicate file entry at line 526: 1299537039.M676050P61136.gromit.example.com,S=2485,W=2534 (uid 8 -> 1082) Mar 8 06:31:37 gromit dovecot[59204]: imap(pid 68971 user user114): Warning: /Volumes/Mail/user114/dovecot-uidlist: Duplicate file entry at line 667: 1299564058.M124508P40871.gromit.example.com,S=1187940,W=1207707 (uid 229 -> 780) - retrying by re-reading from beginning Mar 8 06:32:14 gromit dovecot[59204]: imap(pid 68971 user user114): Warning: Maildir /Volumes/Mail/user114: Expunged message reappeared, giving a new UID (old uid=229, file=1299564058.M124508P40871.gromit.example.com,S=1187940,W=1207707:2,S) Mar 8 06:39:22 gromit dovecot[59204]: imap(pid 68911 user user105): Warning: Maildir /Volumes/Mail/user105: Synchronization took 155 seconds (0 new msgs, 0 flag change attempts, 585 expunge attempts) Is there anything I need to reconfigure to prevent these? Thanks.

2 11

[Dovecot] rkhunter alert dovecot using port 1984
by Mark Adams 16 Mar '11

16 Mar '11

Hi all, Debian Lenny, dovecot 1.0.15 My rkhunter script has picked up dovecot using port 1984 temporarily. When I run it now however, it is gone. Warning: Network TCP port 1984 is being used by /usr/lib/dovecot/imap. Possible rootkit: Fuckit Rootkit Use the 'lsof -i' or 'netstat -an' command to check this. Does dovecot use this port for any reason? anyone seen this before? Regards, Mark

3 4

[Dovecot] Dict spams in my Log-File
by Jan Phillip Greimann 16 Mar '11

16 Mar '11

Hi there, i use dovecot 2.0.9 with mysql as backend. I've also configured dict to mysql, but after some time dict spams in my log-file, i don't know why. Hope someone can help me with this. Greetings from Germany Jan P. Greimann ==== mail.log ==== [...] Mar 16 10:29:35 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:31:35 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:33:35 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:35:35 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:35:45 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:37:36 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:39:36 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:41:35 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:43:35 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:45:36 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:47:35 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:49:35 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:51:35 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:53:35 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) [...] ==== dovecot.conf ==== listen = * dict { quota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } !include conf.d/*.conf ==== conf.d/90-quota.conf ==== plugin { quota = dict:User quota::proxy::quota }

2 1

[Dovecot] Error: write(auth socket) failed: Broken pipe
by Andre Nathan 16 Mar '11

16 Mar '11

Hello >From time to time I'm seeing errors like this in my logs: Mar 16 10:45:55 box5 dovecot: lmtp(5438): Error: write(auth socket) failed: Broken pipe This causes delivery from postfix to fail until I restart dovecot. There doesn't seem to be any other messages in the logs related to this error. Has anyone ever seen this error? Thanks Andre

3 2

[Dovecot] 2.0.7 - missing SORT/THREAD
by Rick Romero 15 Mar '11

15 Mar '11

Obviously I did something wrong, but I don't have SORT and THREAD Capabilities built into my 2.0.7 server (OpenSolaris 5.11 snv_134 i86pc i386 i86xpv Solaris) What do I need to do? * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5] VFEmail.net ready. 1 CAPABILITY * CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5 1 OK Capability completed. # 2.0.7: /usr/local/etc/dovecot/dovecot.conf # OS: SunOS 5.11 i86pc auth_mechanisms = plain login digest-md5 cram-md5 auth_username_translation = %@ auth_verbose = yes base_dir = /opt/csw/dovecot/ default_login_user = dovecot disable_plaintext_auth = no first_valid_gid = 89 first_valid_uid = 89 last_valid_gid = 89 last_valid_uid = 89 login_greeting = VFEmail.net ready. mail_fsync = never mail_plugins = " quota zlib" mail_privileged_group = mail namespace { inbox = yes location = prefix = separator = . } namespace { hidden = yes inbox = no list = no location = prefix = INBOX. separator = . } passdb { driver = vpopmail } plugin { quota = maildir } protocols = imap pop3 service anvil { client_limit = 2000 } service auth { unix_listener auth-master { mode = 0600 user = vpopmail } user = vpopmail } service imap-login { client_limit = 384 process_limit = 512 process_min_avail = 25 service_count = 0 vsz_limit = 256 B } service imap-postlogin { executable = script-login /usr/local/etc/dovecot/lastauth-imap.sh user = vpopmail } service imap { executable = /usr/local/libexec/dovecot/rawlog /usr/local/libexec/dovecot/imap imap-postlogin } service pop-postlogin { executable = script-login /usr/local/etc/dovecot/lastauth-pop.sh user = vpopmail } service pop3-login { client_limit = 384 process_limit = 512 process_min_avail = 25 service_count = 0 vsz_limit = 256 B } service pop3 { executable = /usr/local/libexec/dovecot/rawlog /usr/local/libexec/dovecot/pop3 pop-postlogin } shutdown_clients = no ssl_cert = </etc/ssl/ssl.pem ssl_key = </etc/ssl/ssl.key userdb { driver = vpopmail } verbose_proctitle = yes protocol imap { auth_socket_path = /opt/csw/dovecot/auth-master imap_client_workarounds = delay-newmail tb-extra-mailbox-sep mail_max_userip_connections = 25 mail_plugins = " quota zlib imap_zlib quota imap_quota" } protocol pop3 { auth_socket_path = /opt/csw/dovecot/auth-master mail_max_userip_connections = 25 mail_plugins = quota pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } End of Configure: Install prefix . : /usr/local File offsets ... : 64bit I/O polling .... : poll I/O notifys .... : none SSL ............ : yes (OpenSSL) GSSAPI ......... : no passdbs ........ : static passwd passwd-file shadow pam checkpassword vpopmail : -bsdauth -sia -ldap -sql userdbs ........ : static prefetch passwd passwd-file checkpassword vpopmail : -ldap -sql -nss SQL drivers .... : : -pgsql -mysql -sqlite

2 2

[Dovecot] Duplicate suppression
by Thiago Henrique 15 Mar '11

15 Mar '11

Hello, In a Dovecot 2.0.6 server I have an account x@domain and an alias y@domain -> x@domain. When I send an email to x@domain with carbon copy to y@domain, X receives two messages on mailbox. Dovecot2 has any feature of duplicate suppression ? Thanks, Thiago Henrique

4 3

[Dovecot] LDA, postfix and multiple virtual users : postfix is still the MDA
by Antoine Souques 14 Mar '11

14 Mar '11

Hi, I have some trouble to use dovecot as MDA. I followed the instructions in http://wiki.dovecot.org/LDA and http://wiki.dovecot.org/LDA/Postfix I have multiple virtual users, stored in a LDAP server, and it look like postfix is still delivering the mails directly to the maildirs. Dovecot version : 1.2.15 (using the 1:1.2.15-4 squeeze packets) postfix version : 2.7.1 (using the 2.7.1-1 squeeze packet) dovecot configuration (dovecot -n): # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0 ext3 log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps pop3 pop3s disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_process_per_connection: no login_processes_count: 4 login_max_processes_count: 512 login_max_connections: 1024 mail_privileged_group: mail mail_location: maildir:/var/mail/%u mail_debug: yes mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 imap_capability(default): IMAP4rev1 SASL-IR SORT THREAD=REFERENCES MULTIAPPEND UNSELECT LITERAL+ CHILDREN NAMESPACE LOGIN-REFERRAL imap_capability(imap): IMAP4rev1 SASL-IR SORT THREAD=REFERENCES MULTIAPPEND UNSELECT LITERAL+ CHILDREN NAMESPACE LOGIN-REFERRAL imap_capability(pop3): lda: postmaster_address: postmaster(a)test.ecp.fr hostname: squeeze.test.ecp.fr sendmail_path: /usr/lib/sendmail auth_socket_path: /var/run/dovecot/auth-master auth default: passdb: driver: pam args: dovecot userdb: driver: passwd socket: type: listen master: path: /var/run/dovecot/auth-master mode: 384 user: mail postfix configuration (postconf -n) append_dot_mydomain = no biff = no bounce_queue_lifetime = 1d command_directory = /usr/sbin config_directory = /etc/postfix daemon_directory = /usr/lib/postfix mail_spool_directory = /var/mail/ message_size_limit = 10240000 myhostname = squeeze.test.ecp.fr mynetworks = 138.195.32.0/23, 127.0.0.1 recipient_delimiter = + setgid_group = postdrop smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU) smtpd_client_restrictions = permit_mynetworks, reject smtpd_helo_required = yes smtpd_recipient_restrictions = permit_mynetworks, reject_unauth_destination smtpd_sender_restrictions = reject_unknown_sender_domain, permit virtual_alias_maps = ldap:ldapxforward,ldap:ldapforward,ldap:ldapvalias virtual_mailbox_domains = test.ecp.fr virtual_mailbox_maps = ldap:ldapcanonical virtual_transport = dovecot /etc/postfix/master.cf dovecot unix - n n - - pipe flags=DRhu user=mail:mail argv=/usr/lib/dovecot/deliver -d ${recipient} Sample from the logs Mar 14 13:22:59 squeeze postfix/pickup[17376]: A93DE49A55: uid=0 from=<root> Mar 14 13:22:59 squeeze postfix/cleanup[17543]: A93DE49A55: message-id=<20110314122259.A93DE49A55(a)squeeze.test.ecp.fr> Mar 14 13:22:59 squeeze postfix/qmgr[16038]: A93DE49A55: from=<root(a)squeeze.test.ecp.fr>, size=381, nrcpt=1 (queue active) Mar 14 13:22:59 squeeze postfix/local[17547]: A93DE49A55: to=<etutest(a)squeeze.test.ecp.fr>, orig_to=<etudiant.test(a)test.ecp.fr>, relay=local, delay=0.07, delays=0.04/0.01/0/0.02, dsn=2.0.0, status=sent (delivered to maildir) Mar 14 13:22:59 squeeze postfix/qmgr[16038]: A93DE49A55: removed During the mail delivery, I doesn't have any log from dovecot, and i didn't have set the bit_suid/sudo, so the deliver process can't deliver the mail to the maildir. Have someone any idea about what i did wrong ? -- Antoine SOouques

4 5

[Dovecot] Problems with dovecot 2.0, sieve and mdbox
by Patrick Westenberg 13 Mar '11

13 Mar '11

Hi guys, I tried to use a global sieve skript to sort spam mails into a subfolder of INBOX. I´m using mdbox. The log shows that the script is called and executed but it is not able to find or create the mailbox: Sep 4 15:18:55 mercury dovecot: lmtp(6237, mail(a)steulerfliesen.de) Debug: Namespace : Permission lookup failed from /var/mail/steulerfliesen.de/mail/mdbox/mailboxes/Spamverdacht Sep 4 15:18:55 mercury dovecot: lmtp(6237, mail(a)steulerfliesen.de) Debug: Namespace : Using permissions from /var/mail/steulerfliesen.de/mail/mdbox: mode=0700 gid=-1 Sep 4 15:22:37 mercury dovecot: lmtp(6261, mail(a)steulerfliesen.de) Debug: Namespace : Permission lookup failed from /var/mail/steulerfliesen.de/mail/mdbox/mailboxes/INBOX.Spamverdacht Sep 4 15:22:37 mercury dovecot: lmtp(6261, mail(a)steulerfliesen.de) Debug: Namespace : Using permissions from /var/mail/steulerfliesen.de/mail/mdbox: mode=0700 gid=-1 My skript looks like this: require "fileinto"; if header :contains "X-Spam-Flag" "YES" { fileinto "Spamverdacht"; } I also tried: require "fileinto"; if header :contains "X-Spam-Flag" "YES" { fileinto "INBOX.Spamverdacht"; } How can I fix this? Regards Patrick

5 7

[Dovecot] Patch proposition to implement a new workaround: tb-lsub-flags
by Bruno Tréguier 12 Mar '11

12 Mar '11

Hi again Timo, As agreed earlier tonight, you'll find as attachments 4 diffs (diff -u) implementing the new workaround "tb-lsub-flags". The 4 impacted files are: ./src/imap/imap-settings.h ./src/imap/imap-settings.c ./src/imap/cmd-list.c ./src/config/all-settings.c Here is the proposed description for the dovecot.conf file: # tb-lsub-flags: # Usually IMAP servers don't bother returning the flags attached # to each mailbox, but Thunderbird presently needs them in order # to correctly process the "folders of folders" case. Please tell me if the patch format is suitable or if you expect something else. Best regards and thanks again for your responsiveness. Bruno -- - Service Hydrographique et Oceanographique de la Marine - DO/MGS/INF - 13, rue du Chatellier - CS 92803 - 29228 Brest Cedex 2, FRANCE - Phone: +33 2 98 22 17 49 - Email: Bruno.Treguier(a)shom.fr

2 2

[Dovecot] Filtering attachements ?
by Frank Bonnet 12 Mar '11

12 Mar '11

Hello again Is there a way to filter some attachments with dovecot ? I don't want my users to keep video files in the IMAP folders anymore ( disk is almost full ) . Thank you.

4 3

[Dovecot] SASL abort causes 5s delay, triggered by UW libc-client
by Arne Nordmark 12 Mar '11

12 Mar '11

Since upgrding to Debian squeeze, the web mail system (Imp4/Horde3) suffers delays every time a new IMAP connection is needed. Tracing the authentication conversation, we find: 08:45:55.270609: 00000000 AUTHENTICATE GSSAPI 08:45:55.271277: + 08:45:55.271761: * 08:45:55.271782: 00000000 BAD Authentication aborted by client. 08:45:55.271815: 00000001 AUTHENTICATE PLAIN 08:46:00.271008: + and the PLAIN login succeeds. Imp4 is using php5-imap which is using libc-client, and the delays makes the interface so slow to hardly usable. For reasons best known to its authors, libc-client first initiates GSSAPI authentication, then checks if there is a Kerberos ticket it can use (there is none), then realizes its mistake and aborts SASL, and tries PLAIN. At this point dovecot delays for 5000ms. While not defending libs-client's odd behaviour of not checking for tickets first, it has probably done so for a long time, and dovecot from Debian lenny does not delay at this point. I am lost as how to get around this without changing the code. The "nodelay" parameter can not be used with PAM passdb, according to the documentation. I would be inclined to call always call client_auth_failed with nodelay=TRUE in the SASL_SERVER_REPLY_AUTH_ABORTED case. Arne Nordmark Config: # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0 ext3 log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap listen: *, [::] ssl_ca_file: /etc/ssl/certs/mechca_cert.pem ssl_cert_file: /etc/ssl/certs/ano4/ano4_crt.pem ssl_key_file: /etc/ssl/certs/ano4/ano4_key.pem login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login mail_privileged_group: mail mail_location: maildir:/var/mail/maildir/%u mbox_write_locks: fcntl dotlock lda: postmaster_address: postmaster(a)ano.mech.kth.se mail_plugins: sieve auth default: mechanisms: plain gssapi failure_delay: 0 debug: yes passdb: driver: pam userdb: driver: passwd socket: type: listen master: path: /var/run/dovecot/auth-master mode: 384 user: root plugin: sieve: ~/.dovecot.sieve sieve_dir: ~/sieve

2 1

[Dovecot] Dovecot 2.X, built from source, no extensions?
by Enright, Mike 10 Mar '11

10 Mar '11

Greetings list. Pardon the ignorance. I am working on CentOS 5.2. Unfortunately the repo version of Dovecot is 1.0.X. This works fine mind you but it doesn't have ORDEREDSUBJECT Threading support, which I need. I downloaded 2.0.11 and built from source, but now I don't see any Threading support, not even REFERENCES. I looked to see if I was missing a ./configure option but if I am, it has eluded me. Any guidance would be appreciated. # dovecot -n # 2.0.11: /usr/etc/dovecot/dovecot.conf # OS: Linux 2.6.18-92.1.18.el5PAE i686 CentOS release 5.2 (Final) ext3 auth_mechanisms = plain login disable_plaintext_auth = no mail_location = maildir:/var/vmail/%d/%n/Maildir passdb { args = /usr/etc/dovecot/dovecot-mysql.conf driver = sql } plugin/quota = maildir:storage=10240:messages=1000 protocols = imap service auth { unix_listener /var/run/dovecot/auth-master { mode = 0600 user = vmail } user = root } service imap-login { client_limit = 256 process_min_avail = 10 service_count = 0 vsz_limit = 128 M } ssl = no userdb { args = uid=6000 gid=6000 home=/var/vmail/%d/%n allow_any_users=yes driver = static } # telnet localhost imap Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN] Dovecot ready. 1 capability * CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN 1 OK Capability completed. Cheers Mike Enright Senior Software Engineer Office: +1 239-425-9161 (Florida) Fax: +1 239-425-6845 [cid:C388744A-AA0D-4A0C-A96D-3038C56EC9E5] Interop Technologies 13500 Powers Court Fort Myers, FL 33912 www.interoptechnologies.com<http://www.interoptechnologies.com/>

3 3

[Dovecot] permission recomendation for dovecot configuration files and binaries
by Arkadiusz Miskiewicz 10 Mar '11

10 Mar '11

I'm trying to figure out which permissions will be the best to handle most of tasks (for use in rpm package) for configuration files. Basically /etc/dovecot/ dir /etc/dovecot/* files /etc/dovecot/conf.d/ dir /etc/dovecot/conf.d/files dovecot binaries, deliver mainly For example deliver needs to read configuration files and needs to write into destination. Doesn't seem to be sane to allow MTA user read dovecot configs but that is requires for deliver to work etc. Are there any sane/tested recommendations that would fit most situations (remember, that's going to be rpm package default config) ? -- Arkadiusz Miśkiewicz PLD/Linux Team arekm / maven.pl http://ftp.pld-linux.org/

1 0

[Dovecot] Dovecot 2.0 - size of the mailbox
by Cristiane França 10 Mar '11

10 Mar '11

Hi, The Dovecot 2.0 has some limit size for the mailbox? The server is 64 bits and would like to have mailbox with bigger size that 2 GB.

2 1

Re: [Dovecot] POP3 error
by Thierry de Montaudry 10 Mar '11

10 Mar '11

On 08 Mar 2011, at 13:24, Chris Wilson wrote: > Hi Thierry, > > On Tue, 8 Mar 2011, Thierry de Montaudry wrote: >> On 07 Mar 2011, at 19:15, Timo Sirainen wrote: >>> On Mon, 2011-03-07 at 19:03 +0200, Thierry de Montaudry wrote: >>>>>>>>> Mar 7 11:19:51 xxx dovecot: pop3-login: Error: net_connect_unix(pop3) failed: Resource temporarily unavailable >>>>> .. >>>> As it is happening at least once a day, is there anything I can do to >>>> trace it? and whatever I'll do, will it slow down those machines? >>> >>> Set verbose_proctitle=yes (won't slow down) and get list of all >>> Dovecot processes when it happens. And check how much user and system >>> CPU it's using and what the load is. >> >> Got the same problem this morning, here is the CPU usage and ps aux for >> dovecot. plus the different error I could pick up in the log, most of >> them are repeated a couple of times. >> >> I suspect it a problem with system resources, but can find any message >> to tell me what. Mail are stored on 17 NFS servers (CentOS), plus 3 >> servers for indexes only. >> >> CPU load is very high, but mainly from httpd running our webmail >> interface, which uses the local imap server. > [...] >> top - 11:10:14 up 14 days, 12:04, 2 users, load average: 55.04, 29.13, 14.55 >> Tasks: 474 total, 60 running, 414 sleeping, 0 stopped, 0 zombie >> Cpu(s): 99.6%us, 0.3%sy, 0.0%ni, 0.0%id, 0.0%wa, 0.0%hi, 0.1%si, 0.0%st >> Mem: 16439812k total, 16353268k used, 86544k free, 33268k buffers >> Swap: 4192956k total, 140k used, 4192816k free, 8228744k cached > > You're lucky this server is still alive and that you could even run top > and ps on it. > > There's nothing to debug in dovecot here. Your server is overloaded by > about 55 times. Buy 55 times as many servers or do something about your > webmail interface (maybe a separate webmail cluster). > > Cheers, Chris. > As you can see the numbers (55.04, 29.13, 14.55) the load was busy getting higher when I took this snapshot and this was not a normal situation. Usually this machine's load is only between 1 and 4, which is quite ok for a quad core. It only happens when dovecot start generating errors, and pop3, imap and http get stuck. It went up to 200, and I was still able to stop web and mail daemons, then restart them, and everything was back to normal.

7 20

[Dovecot] Dovecot + Sieve does not work
by Jimmi 10 Mar '11

10 Mar '11

Hi, On my Debian Squeeze server I installed Dovecot 1.2.16 from http://xi.rename-it.nl/debian/ and configured as follow: # dovecot -n # 1.2.16: /etc/dovecot/dovecot.conf # OS: Linux 2.6.26-110209 i686 Debian 6.0 ext3 log_path: /var/log/dovecot.log log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap sieve disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login first_valid_uid: 100 mail_privileged_group: postfix mail_location: maildir:/home/virtual/%d/%n mbox_write_locks: fcntl dotlock imap_client_workarounds: outlook-idle lda: postmaster_address: postmaster(a)7girello.net mail_plugins: sieve log_path: /var/log/dovecot-deliver.log info_log_path: /var/log/dovecot-deliver.log auth default: mechanisms: plain login user: postfix passdb: driver: sql args: /etc/dovecot/dovecot-mysql.conf userdb: driver: sql args: /etc/dovecot/dovecot-mysql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: virtual group: virtual plugin: sieve: /home/virtual/%d/%n/.dovecot.sieve sieve_dir: /home/virtual/%d/%n/sieve/ After that in Roundcube 0.5.1 downloaded from http://roundcube.net/ I enabled the managesieve plugin but when I go to the filter page RC says that he cannot connect the server. I then realized that the port 4190 is not open and I cannot understand why. In my dovecot.conf I have the section: protocol managesieve { # Specify an alternative address:port the daemon must listen on # (default: *:2000) listen = localhost:4190 } that is not shown in the output of 'dovecot -n'. Did I missed something? Thanks in advance -- jimmi

3 6

[Dovecot] Dovecot LDA and Postfix/local for local users.
by iti＠promax.media.pl 10 Mar '11

10 Mar '11

Hello, I would like to configure dovecot lda for local users. My dovecot vesion is 1.2.15. Dovecot documentation for System users says that only thing I should add to main.cf is: mailbox_command = /usr/local/libexec/dovecot/deliver (path to deliver) After that should I commented postfix/local process from master cf ? regards, Jarek

3 3

[Dovecot] Fatal: postmaster_address setting not given
by Richard Edmonds 09 Mar '11

09 Mar '11

Hi, I'm getting: "Fatal: postmaster_address setting not given" errors in my log file dovecot ver: 1.2.12 Recently I tried to follow: http://postfixmail.com/blog/index.php/postfixadmin-on-ubuntu-9-10/ on ubuntu 10.10 (which works fine on ubunto 9.10) I note that in 10.10 their is no dovecot-postfix.conf so I made the appropriate changes to dovecot.conf instead and changed master.cf dovecot transport line since I saw someone recently had the same problem: dovecot unix - n n - - pipe flags=DRhu user=vmail:mail argv=/usr/lib/dovecot/deliver -c /etc/dovecot/dovecot.conf -f ${sender} -d ${recipient} I still have that problem however. Authentication seems ok but delivery fails. Any possibility of help on this one? vecot unix - n n - - pipe flags=DRhu user=vmail:mail argv=/usr/lib/dovecot/deliver -c /etc/dovecot/dovecot.conf -f ${sender} -d ${recipient} I still have that problem however. Authentication seems ok but delivery fails. Any possibility of help on this one? </body> </html>

2 2

[Dovecot] ID command bug & patch
by Mike Abbott 09 Mar '11

09 Mar '11

When I set imap_id_log=* in dovecot-2.0.11 and a client sends, say, tag id ("a" "b" "c" "d") then dovecot logs: ID sent: a=b, b=c, c=d The following patch makes it log instead: ID sent: a=b, c=d --- a/dovecot/src/lib-imap/imap-id.c (revision 113366) +++ b/dovecot/src/lib-imap/imap-id.c (working copy) @@ -164,6 +164,7 @@ str_append_c(reply, '='); str_append(reply, str_sanitize(value, 80)); } + args++; } return str_len(reply) == 0 ? NULL : str_c(reply); }

2 1

Re: [Dovecot] auth on tcp socket?
by Hajo Locke 09 Mar '11

09 Mar '11

Hello, > You should read Wietses post again. > > He told you to not rely on not documented settings since they can > silently disappear. > > With postfix you can rely on the documented behaviour. So it is > natural that there will be no warning for officially unsupported > features. > yes, i know that. nobody should use undocumented features. auth-service on tcp-socket was added by timo after my Suggestion last november. so when asking this on postfix's-side iam not really interested in current docs but wanted to suggest the update on implemention and docs to get it as official feature for next releases. as an user all i can do is telling some facts and ask... Hajo

2 1

[Dovecot] compressed mailboxes ?
by Frank Bonnet 09 Mar '11

09 Mar '11

Hello Is it possible to use compressed mailboxes ( MBOX format ) with dovecot using a plugin ? Thanks

3 4

Re: [Dovecot] compressed mailboxes ?
by Stan Hoeppner 09 Mar '11

09 Mar '11

Frank Bonnet put forth on 3/8/2011 2:07 PM: > disk space I need to gain a bit space > before migrate to the new server After you shut down the Dovecot daemons in preparation for copying the mailbox files to the new sever, simply delete all the index directories. That will free up a huge amount of space. The indexes will be automatically rebuilt when users log into the new server. -- Stan > Le 08/03/2011 17:39, Stan Hoeppner a écrit : >> Frank Bonnet put forth on 3/8/2011 9:54 AM: >>> Hello >>> >>> Is it possible to use compressed mailboxes ( MBOX format ) >>> with dovecot using a plugin ? >> >> What is your motivation? >>

2 1

[Dovecot] Interesting tool for debugging IMAP sessions
by Charles Marcus 08 Mar '11

08 Mar '11

For anyone who is interested: http://www.aboutmyip.com/AboutMyXApp/ImapProxy.jsp They also have one for troubleshooting smtp (smtpProxy)... -- Best regards, Charles

1 0

Re: [Dovecot] auth on tcp socket?
by Hajo Locke 08 Mar '11

08 Mar '11

Hello, sorry, iam digest reader, always creating a new message... > > > there are some warnings in log: > > > "when SASL type is "dovecot", SASL path "inet:localhost:1434" should > > > be a > > > socket pathname" > > > ( Datei src/xsasl/xsasl_dovecot_server.c ) > > > > file xsasl_dovecot_server.c is in postfix sources but was written by > > you, > > Timo > The initial version, yes, but it has been heavily modified since. I > never added that warning. > > Should there also made an update to support auth on tcp-socket without > > warnings from postfix side? > Looks like someone already added the inet: support, so I guess it should > work. You could ask on Postfix list to get the warning removed.. wietse dont wants to change anything until it is not documented http://archives.neohapsis.com/archives/postfix/2011-03/0356.html may be the developers should talk directly to each other, i dont like to get forwarded to each other list to ask for reliability of features... Thanks, Hajo

2 1

Re: [Dovecot] Multiple Concurrent IMAP Connections For Same User
by Stan Hoeppner 08 Mar '11

08 Mar '11

Knute Johnson put forth on 3/5/2011 8:36 PM: > On 03/05/2011 12:24 PM, Stan Hoeppner wrote: >> Stan Hoeppner put forth on 3/5/2011 1:34 PM: >> Also, did you delete the sync copies and the GLODA sqlite index file >> from the user profile? IIRC, TB will still read the files if they >> exist, even after disabling their parent function. TB just won't write >> to them any more. Yes, it's stupid, I agree. But I recall running into >> this problem and needing to delete all the cached mbox files and the >> sqlite db to get everything working correctly. >> >> Specifically answering your "change" question, the one big difference >> between TB 3 and TB 2 is GLODA, and there have been a large number of >> problems with it. I noticed some of them on day one and disabled it. >> >> I use both TB and RoundCube. With both open, I can delete a group of >> messages in RC in an IMAP subfolder and the messages automatically >> disappear from my TB view in about 5 seconds, and remain gone. I just >> performed a test deleting a group of 8 messages via RC in an IMAP >> subfolder containing list mail from linux-ide. It works fine the other >> way around as well, though I must manually refresh RC as it's a >> stateless web app. I just deleted 6 messages in TB, and simply clicking >> the folder in RC showed the messages were gone. Deleting a message via >> RC in INBOX required punching the Get Mail button in TB to reveal the >> message had been deleted. Not sure why the INBOX case required a manual >> refresh. The messages are all is still gone, after closing and opening >> TB again. >> >> I don't recall ever having the problem you describe, using TB 3.0 >> through TB 3.1.9, and Dovecot 1.0.15 through 1.2.15. My point is that >> TB and Dovecot can be configured properly to eliminate this problem >> you're having. > > Thanks very much for this post as I have been having the same problems > with TB and my phone. I did the things you posted but when I delete a > message on my phone it doesn't always get deleted in TB. Sometimes it > disappears right a way and other times it never goes but it is better > than before when it would never delete on TB. If you're not doing local sync with TB and you have GLODA disabled, TB is going to show you exactly what's in your Dovecot mailbox. If the message doesn't disappear from your TB view sometime after deleting it on your smartphone, then I'd say it's very likely that Dovecot didn't receive the delete and/or expunge command from the phone. Check your Dovecot logs and see what the phone is actually sending, or not sending. Both of you mentioned problems specifically WRT smartphones. It's likely the IMAP implementation in these phones is simply buggy, or your network coverage is spotty. I don't use a smartphone so I can't really say. What smartphone are you each using? -- Stan

10 17

[Dovecot] logging sent messages
by Hajo Locke 08 Mar '11

08 Mar '11

Hello, i use plugin mail_log to see more activities like copy/delete/expunge caused by imap-users. unfortunately there is no log-line when a mail was sent and the copy was uploaded to "Sent-Folder". Isn't it a common imap-copy operation requested by client? How to log this? Thanks, Hajo

2 1

[Dovecot] Curious problem: Plaintext authentication disallowed on non-secure (SSL/TLS) [read: all] connections.
by Andrew Lewis 08 Mar '11

08 Mar '11

Hello all, I've set up a new instance of dovecot 2.0.9 to use as a POP3/IMAP proxy. On trying to login I am told '-ERR Plaintext authentication disallowed on non-secure (SSL/TLS) connections'. I have set 'disable_plaintext_auth = no' (see output of doveconf attached). More curious still is that *this happens for SSL connections too*. Something seems very wrong here. Yelp? -- Andrew Lewis <andrew(a)sybaweb.com> ______________________________________ < Uncompensated overtime? Just Say No. > -------------------------------------- \ ^__^ \ (oo)\_______ (__)\ )\/\ ||----w | || ||

1 1

[Dovecot] POP3 error
by Thierry de Montaudry 08 Mar '11

08 Mar '11

Hi, Since we upgraded to 2.0.9 (from 1.10 stock CentOS release), we are getting some errors with pop3. When the machines get busy, now and then it start with the following: > Mar 7 11:19:51 xxx dovecot: pop3-login: Error: net_connect_unix(pop3) failed: Resource temporarily unavailable And it generates hundreds of those before the machines dies, with the web server getting stuck as well on imap sessions, even though there is no imap error messages. I tried to lookup in the source where this is generated, but couldn't find it. Is it some resource limit on the machine? Please see bellow the dovecot -n output. Regards, Thierry # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-194.32.1.el5 x86_64 CentOS release 5.5 (Final) nfs auth_cache_negative_ttl = 0 auth_cache_size = 2 M auth_cache_ttl = 10 mins auth_mechanisms = plain login dict { expire = mysql:/etc/dovecot/dovecot-dict-expire.conf.ext quota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } disable_plaintext_auth = no first_valid_uid = 25 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes mail_access_groups = vmail mail_fsync = always mail_gid = 25 mail_location = maildir:/var/virtual/%d/%1n/%2n/%n:INDEX=/var/indexes/%d/%1n/%2n/%n mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = quota expire mail_uid = 25 mbox_write_locks = fcntl mmap_disable = yes passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { expire = Trash expire2 = Trash/* expire3 = Spam expire4 = Trash/* expire_dict = proxy::expire quota = dict:User quota::proxy::quota quota_rule = *:storage=2G quota_rule2 = Trash:storage=+100M sieve_global_path = /var/indexes/dovecot-default.sieve } postmaster_address = postmaster(a)XXXXXX.YY protocols = imap pop3 service auth { unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } } service dict { unix_listener dict { group = vmail mode = 0600 user = vmail } } service imap-login { inet_listener imap { address = 127.0.0.1 port = 143 } process_min_avail = 2 service_count = 0 vsz_limit = 256 M } service imap { process_limit = 768 } service pop3-login { inet_listener pop3 { address = 0.0.0.0 port = 110 } process_limit = 200 process_min_avail = 2 service_count = 0 } service pop3 { process_limit = 256 } ssl = no ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } userdb { args = uid=vmail gid=vmail driver = static } protocol lmtp { mail_plugins = quota expire sieve } protocol lda { mail_plugins = quota expire sieve } protocol imap { mail_plugins = quota expire imap_quota } protocol pop3 { mail_max_userip_connections = 2 pop3_fast_size_lookups = yes }

2 6

[Dovecot] Unable to view all folders
by Joy 08 Mar '11

08 Mar '11

Dear All, I have upgraded dovecot to v2.0.11 and now having one issue, i am unable to see all my folders only Inbox and Trash are visible while autocreate creating 5 more folders. What could be the issue checked via telnet as well. Thanks

1 1

[Dovecot] upgrading from old version 1.1.2 to version 2.0.11
by dhottinger＠harrisonburg.k12.va.us 07 Mar '11

07 Mar '11

Im getting ready to upgrade our production server from version 1.1.2 to version 2.0.11. Ive read through the upgrade info. Is there any other gotcha's I should be aware of? thanks, ddh -- Dwayne Hottinger Network Administrator Harrisonburg City Public Schools "Everything should be made as simple as possible, but not simpler." -- Albert Einstein "The hottest places in Hell are reserved for those who, in times of moral crisis, preserved their neutrality." -- Dante

4 4

[Dovecot] STARTTLS MITM in Postfix
by Timo Sirainen 07 Mar '11

07 Mar '11

http://marc.info/?l=postfix-users&m=129952854117623&w=2 Dovecot doesn't have this bug. It discards all buffered data when STARTTLS command runs. (Why do I think I've heard about this bug before? Or at least the same type of way to exploit it? Maybe there was another similarly exploitable bug.)

1 1

[Dovecot] tls bug
by Robert Schetterer 07 Mar '11

07 Mar '11

Hi Timo is dovecot affected in this ? http://www.kb.cert.org/vuls/id/555316 -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

2 2

[Dovecot] Fwd: STARTTLS bug - background story
by Robert Schetterer 07 Mar '11

07 Mar '11

-------- Original-Nachricht -------- Betreff: STARTTLS bug - background story Datum: Mon, 7 Mar 2011 15:08:09 -0500 (EST) Von: Wietse Venema <wietse(a)porcupine.org> An: Postfix users <postfix-users(a)postfix.org> CERT/CC announces a flaw today in multiple STARTTLS implementations. This problem was silently fixed in Postfix 2.8 and 2.9. Updates for Postfix 2.[4-7] are made available via the usual channels. Wietse Plaintext injection in multiple implementations of STARTTLS =========================================================== This is a writeup about a flaw that I found recently, and that existed in multiple implementations of SMTP (Simple Mail Transfer Protocol) over TLS (Transport Layer Security) including my Postfix open source mailserver. I give an overview of the problem and its impact, technical background, how to find out if a server is affected, fixes, and draw lessons about where we can expect similar problems now or in the future. A time line is at the end. On-line information is/will be available at: http://www.kb.cert.org/vuls/id/555316 http://www.postfix.org/CVE-2011-0411.html Problem overview and impact =========================== The TLS protocol encrypts communication and protects it against modification by other parties. This protection exists only if a) software is free of flaws, and b) clients verify the server's TLS certificate, so that there can be no "man in the middle" (servers usually don't verify client certificates). The problem discussed in this writeup is caused by a software flaw. The flaw allows an attacker to inject client commands into an SMTP session during the unprotected plaintext SMTP protocol phase (more on that below), such that the server will execute those commands during the SMTP-over-TLS protocol phase when all communication is supposed to be protected. The injected commands could be used to steal the victim's email or SASL (Simple Authentication and Security Layer) username and password. This is not as big a problem as it may appear to be. The reason is that many SMTP client applications don't verify server TLS certificates. These SMTP clients are always vulnerable to command injection and other attacks. Their TLS sessions are only encrypted but not protected. A similar plaintext injection flaw may exist in the way SMTP clients handle SMTP-over-TLS server responses, but its impact is less interesting than the server-side flaw. SMTP is not the only protocol with a mid-session switch from plaintext to TLS. Other examples are POP3, IMAP, NNTP and FTP. Implementations of these protocols may be affected by the same flaw as discussed here. Technical background: SMTP over TLS =================================== For a precise description of SMTP over TLS, see RFC 3207, on-line at http://www.ietf.org/rfc/rfc3207.txt. SMTP over TLS uses the same TLS protocol that is also used to encrypt traffic between web clients and web servers. But, there is a subtle difference in the way TLS is used, and that makes this flaw possible. SMTP sessions over TLS begin with an SMTP protocol handshake in plaintext. Plaintext means no encryption (thus no privacy), and no protection against modification (no integrity). The plaintext handshake is needed because SMTP has always worked this way. Simply skipping this plaintext phase would seriously break internet email. During the plaintext handshake phase, the SMTP server announces whether it is willing to use TLS. If both SMTP client and server support TLS, the client sends a "STARTTLS" request to turn on TLS. Once TLS is turned on, all further traffic is encrypted and protected from modification. The client and server repeat the entire SMTP protocol handshake, and the client starts sending mail. Demonstration ============= The problem is easy to demonstrate with a one-line change to the OpenSSL s_client command source code (I would prefer scripting, but having to install Perl CPAN modules and all their dependencies is more work than downloading a .tar.gz file from openssl.org, adding eight characters to one line, and doing "./config; make"). (The OpenSSL s_client command can make a connection to servers that support straight TLS, SMTP over TLS, or a handful other protocols over TLS. The demonstration here focuses on SMTP over TLS only.) The demonstration with SMTP over TLS involves a one-line change in the OpenSSL s_client source code (with OpenSSL 1.0.0, at line 1129 of file apps/s_client.c). Old: BIO_printf(sbio,"STARTTLS\r\n"); New: BIO_printf(sbio,"STARTTLS\r\nRSET\r\n"); With this change, the s_client command sends the plaintext STARTTLS command ("let's turn on TLS") immediately followed by an RSET command (a relatively harmless protocol "reset"). Both commands are sent as plaintext in the same TCP/IP packet, and arrive together at the server. The "\r\n" are the carriage-return and newline characters; these are necessary to terminate an SMTP command. When an SMTP server has the plaintext injection flaw, it reads the STARTTLS command first, switches to SMTP-over-TLS mode, and only then the server reads the RSET command. Note, the RSET command was transmitted during the plaintext SMTP phase when there is no protection, but the server reads the command as if it was received over the TLS-protected channel. Thus, when the SMTP server has the flaw, the s_client command output will show two "250" SMTP server responses instead of one. The first "250" response is normal, and is present even when the server is not flawed. The second "250" response is for the RSET command, and indicates that the SMTP server has the plaintext injection flaw. $ apps/openssl s_client -quiet -starttls smtp -connect server:port [some server TLS certificate details omitted] 250 some text here <=== Normal response, also with "good" server. 250 more text here <=== RSET response, only with flawed server. How would an attacker exploit this? It would play man-in-the-middle on the connection between SMTP client and server, perhaps using ARP spoofing at a public WIFI access point. Instead of adding a harmless RSET command, it could steal email or authentication credentials. Anatomy of the flaw =================== The flaw is made possible by two ingredients: I already discussed the switch mid-session from plaintext SMTP to SMTP over TLS. This allows an attacker to piggy-back commands onto the SMTP client's plaintext STARTTLS ("let's turn on TLS") request, such that the server may read those commands after the switch to TLS is completed, as if the commands arrived through the TLS-encrypted session. The second ingredient is a layered software architecture through which those piggy-backed commands bubble up from the network to the application. In the case of SMTP, we have the following major layers before and after the switch to TLS: Before switch to TLS After switch to TLS SMTP protocol engine SMTP protocol engine || || TCP/IP protocol engine TLS protocol engine || || Internet TCP/IP protocol engine || Internet Each layer hides details of what is happening inside. Layering makes it easy to switch from plaintext to TLS, with minimal changes to existing code. To insert the TLS layer between the SMTP engine and the O/S TCP/IP engine, simply adjust the plumbing between the layers, and make all information flow through the TLS layer. It's all about the plumbing =========================== Whether a program may have the plaintext injection flaw depends on how it adjusts the plumbing as it inserts the TLS protocol layer in-between the SMTP protocol layer and the O/S TCP/IP protocol layer. I illustrate this with examples from three open source MTAs: Postfix, Sendmail and Exim. The diagram below zooms in on the plumbing between the SMTP and TLS layers, and shows how different MTAs handle the switch from plaintext to TLS. It is best viewed with a fixed-width font (for example, from the Courier family). Postfix MTA Sendmail MTA Exim MTA before/after before/after before/after switch to TLS switch to TLS switch to TLS SMTP SMTP SMTP SMTP SMTP SMTP <= SMTP layer || || || || || || stream stream stream stream' || || buffers buffers buffers buffers' rw r'w' <= stream layer rw r'w' rw r'w' || || || || || || || || || TLS || TLS || TLS <= TLS layer || || || || || || O/S O/S O/S O/S O/S O/S <= TCP/IP layer As shown in the diagram, both Postfix and Sendmail use an application- level stream abstraction, where each stream has properties such as read/write buffers, read/write functions (indicated with rw), and other properties that are omitted for brevity. When Postfix switches to SMTP over TLS, it replaces the plaintext read/write functions (rw) with the TLS read/write functions (r'w'). Postfix does not modify any of the other stream properties including the read/write buffers. A patch for qmail that introduces TLS support uses the same approach. This approach of replacing only the stream read/write functions, but not the buffers or other stream properties, can introduce the plaintext injection flaw. When Sendmail switches to SMTP over TLS, it replaces the entire stream, along with its read/write buffers and read/write functions. Exim. on the other hand, does not have a stream abstraction like Postfix, Sendmail or qmail. Instead of replacing streams or stream properties, Exim replaces plaintext read/write functions with TLS read/write functions. Because of their program structure, Sendmail and Exim didn't suffer from the plaintext injection flaw. Switching world views ===================== When the switch from plaintext to TLS mode is made, all layers above the TLS layer need to purge all information that they have received through the plaintext session. This "world view switch" needs to be implemented consistently. Otherwise, information that was sent as unprotected plaintext may slip through the cracks. In the case of Postfix and other affected MTAs, this "world view switch" was incomplete. Postfix it did not account for information that lingered in stream buffers at the boundary between two layers. This allowed an attacker to piggy-back commands onto the plaintext "let's turn on TLS" request, such that the commands could be read after the switch to TLS was completed, as if they had arrived through the TLS-encrypted session. Fixing the problem ================== There are two solutions to address the flaw, and both solutions can be used together. - Report an error when unexpected plaintext is received after the STARTTLS command. As documented in RFC 3207, STARTTLS must be the last command in a pipelined group. If plaintext commands are received after STARTTLS, then that is a protocol violation. This measure can also be implemented outside the MTA, for example in a protocol-aware firewall. - If a program uses the same input buffer before and after the switch to TLS, it should discard the contents of the input buffer, just like it discards SMTP protocol information that it received during the plaintext protocol phase. Conclusion ========== This plaintext injection problem is likely to recur when some development moves the plaintext-to-ciphertext switch outside the application: for example, into the kernel, into the local hardware, into a proxy, or into other infrastructure. This encourages applications to use the same application-level streams and buffers and read/write functions before and after the switch to ciphertext. When this migration happens, plaintext injection becomes once more a possibility. Postfix did not reject plaintext commands that were piggy-backed onto the plaintext "let's turn on TLS" request. This reflects what once was the primary mission of Postfix: to deliver mail, not to force other systems to implement all the Internet RFCs correctly. Nowadays, strict protocol compliance is becoming a requirement for senders to get their email delivered. As this episode shows, stricter protocol enforcement by receivers can bring security benefits, besides blocking spambots. Time line ========= Jan 5 2011: While finishing Postfix for its annual release, I found this flaw in the server and client implementations of SMTP over TLS. It had been sitting there for six years ever since TLS support was adopted into Postfix. Not wanting to delay the release schedule, I silently fixed the problem and sent an email to co-developer Victor Duchovni. Jan 6-10 2011: As we investigated the scope of the problem, Victor discovered quickly that many other SMTP over TLS implementations were also affected. Among those affected were email service providers, email anti-spam/virus service providers, anti-spam/virus appliances, as well as other mail server implementations. It was clear that this problem's resolution was going to involve many organizations. Jan 11 2011: Contact CERT/CC to help coordinate with the problem's resolution. Mar 7 2011: Public announcement.

1 0

[Dovecot] POP3 with mdbox
by Patrick Domack 07 Mar '11

07 Mar '11

I converted all my box's over to mdbox, from maildir and ran into this issue, I knew exactly what it was and fixed it, but might want to log a config error or something for others to notice the issue. I was running with pop3_uidl_format = %f, and well, that doesn't work with mdbox very well, and when a user ran a UIDL command, it errored the user out. Simple fix, but would probably be nicer to log a config error when started dovecot instead.

1 0

[Dovecot] dovecot 1.2.3: TB fails to unsubscribe folder after deletion
by Max Dittrich 07 Mar '11

07 Mar '11

Hi, I'm running dovecot 1.2.3 with "imap_client_workarounds = tb-extra-mailbox-sep" and noticed that after deleting a folder (moving to Trash and emptying it on exit) that folder in Trash still keeps subscribed. I think the reason for that behavior is that the call for mailbox_list_set_subscribed() in imap/cmd-subscribe.c (line 84) is fed with the original mailbox name and not the stripped version in verify_name. Assigning verify_name to mailbox in the workaround-conditional fixes this issue for me. I'm not very familiar with C programming but while tracing cmd_subscribe_full() I stumbled upon another thing. In mail_namespace_find_mask() (lib-storage/mail-namespace.c at line 413) mailbox is reassigned with a local string (not t_strduped). I think this might be a problem when mailbox is dereferenced after returning from that function?! .max

3 10

[Dovecot] mdbox command line access howto request
by David Favor 07 Mar '11

07 Mar '11

Currently using Maildir in my config for 1.2.16 going to 2.0.11 and wondering about accessing files outside of dovecot. Many files require access by external programs. For example walking a list of receipt files from merchant processors verifying transaction amounts. This requires each file being read + parsed. With mdbox a file may contain multiple messages. Let me know the best command line tool to break mdbox files into a string of messages. Thanks. -- Love feeling your best ever, all day, every day? Click http://RadicalHealth.com for the easy way!

2 2

Re: [Dovecot] auth on tcp socket?
by Hajo Locke 07 Mar '11

07 Mar '11

Hello, > there are some warnings in log: > "when SASL type is "dovecot", SASL path "inet:localhost:1434" should be a > socket pathname" > ( Datei src/xsasl/xsasl_dovecot_server.c ) file xsasl_dovecot_server.c is in postfix sources but was written by you, Timo Should there also made an update to support auth on tcp-socket without warnings from postfix side? Thanks, Hajo

3 3

[Dovecot] Dovecot, Postfix and Dovecot LDA (LMTP) delivery
by Remy Zandwijk 07 Mar '11

07 Mar '11

Hi list, I am running a Debian Lenny machine with Postfix 2.5.5 and Dovecot 2.0.8. Up until now I ran Postfix with the Procmail delivery agent succesfully. The machine has only local users; I am not using virtual mailboxes. Due to obvious reasons I want to switch to Dovecot LDA delivery, through LMTP. I spend quite some time finding 'the' configuration for both Postfix and Dovecot, but without success. Find my current configuration below. Postfix receives the e-mail, but delivery through LMTP fails, resulting in Postfix sending an NDR. I just cannot figure out what's wrong and I am not sure whether it's a Postfix or Dovecot problem either. Some log output from Postfix: Mar 5 13:25:15 hostname postfix/smtpd[12442]: connect from otherhost.domain.tld[aa.bb.cc.dd] Mar 5 13:25:16 hostname postfix/smtpd[12442]: CC47979071: client=otherhost.domain.tld[aa.bb.cc.dd] Mar 5 13:25:16 hostname postfix/cleanup[12447]: CC47979071: message-id=<Pine.GSO.4.64.1103051324570.5319(a)otherhost.domain.tld> Mar 5 13:25:16 hostname postfix/qmgr[12372]: CC47979071: from=<remy(a)otherhost.domain.tld>, size=1037, nrcpt=1 (queue active) Mar 5 13:25:16 hostname postfix/smtpd[12442]: disconnect from otherhost.domain.tld[aa.bb.cc.dd] Mar 5 13:25:16 hostname postfix/lmtp[12448]: CC47979071: to=<remy(a)hostname.domain.tld>, relay=hostname.domain.tld[private/dovecot-lmtp], delay=1.2, delays=1.2/0.01/0.01/0.05, dsn=5.1.1, status=bounced (host hostname.domain.tld[private/dovecot-lmtp] said: 550 5.1.1 <remy(a)hostname.domain.tld> User doesn't exist: remy(a)hostname.domain.tld (in reply to RCPT TO command)) The only lines that Dovecot logs are: Mar 05 13:25:16 lmtp(12449): Info: Connect from local Mar 05 13:25:16 lmtp(12449): Info: Disconnect from local: Client quit Although LMTP should log to /tmp/dovecot-lmtp.log, the file remains empty. Anyone amongst you who is running the same kind of setup and can help? Thanks, Remy Postfix config (postfix -n output) alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases append_dot_mydomain = no biff = no config_directory = /etc/postfix default_transport = smtp inet_interfaces = all local_transport = lmtp:unix:private/dovecot-lmtp mailbox_command = mailbox_size_limit = 0 message_size_limit = 31457280 mydestination = hostname.domain.tld, localhost.domain.tld, localhost myhostname = hostname.domain.tld mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 myorigin = /etc/mailname readme_directory = no recipient_delimiter = + relay_transport = error relayhost = smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU) smtpd_client_restrictions = check_client_access hash:/etc/postfix/access, permit_sasl_authenticated, reject_rbl_client zen.spamhaus.org, reject_rbl_client dnsbl.sorbs.net,reject_unauth_pipelining smtpd_helo_required = yes smtpd_helo_restrictions = reject_invalid_helo_hostname,reject_non_fqdn_helo_hostname,reject_unknown_helo_hostname smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_non_fqdn_recipient, reject_unauth_destination, reject_unknown_recipient_domain smtpd_sasl_auth_enable = yes smtpd_sasl_path = private/auth smtpd_sasl_type = dovecot smtpd_sender_restrictions = check_sender_access hash:/etc/postfix/access, reject_non_fqdn_sender, reject_unknown_sender_domain smtpd_tls_auth_only = yes smtpd_tls_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem smtpd_tls_key_file = /etc/ssl/private/ssl-cert-snakeoil.key smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache smtpd_use_tls = yes Dovecot config (dovecot -n output) # 2.0.8: /etc/dovecot/dovecot.conf # OS: Linux 2.6.26-2-amd64 x86_64 Debian 5.0.8 auth_master_user_separator = * listen = * log_path = /var/log/dovecot.log mail_location = maildir:~/.maildir maildir_stat_dirs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date namespace { hidden = no inbox = yes list = yes location = prefix = separator = / subscriptions = yes type = private } passdb { driver = pam } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap lmtp service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } verbose_proctitle = yes protocol lmtp { info_log_path = /tmp/dovecot-lmtp-info.log log_path = /tmp/dovecot-lmtp.log } protocol imap { mail_plugins = }

2 3

[Dovecot] Dovecot 2.0 in Active-Standby configuration
by Yaron & Hani Nahum 07 Mar '11

07 Mar '11

Hi, I am planning to use Dovecot 2.0 as a Mail server for a Voicemail system. There is not much traffic so I am not concerend about scaling. However redudancy is an issue. I need to have two Dovecot servers installed on two different farms and setup HA between the two. I would prefer that the HA would be automatically. I have two different storage machines with SAN, and I can setup Layer 2 between the two farms. I am concerned with split brain scenario where the two farms are disconnected and both machines would become active. What cluster configuration would you recommend for such an enviroment?

1 0

[Dovecot] Problems with shared folders with Dovecot 1.2.12
by Pašek Ladislav 07 Mar '11

07 Mar '11

Hello, I'm trying to run shared folders with Dovecot 1.2.12. I'm managing ACLs from SOGo and it seemd that it successfully create dovecot-acl and dovecot-acl-list in user maildir. But I cannot see any of these shared folders. In Thunderbird I could see shared folder in Subscriptions but without option to subscribe. I was reading almost everything that was possible to google but without success. My config: [root@mail etc]# dovecot -n # 1.2.12: /etc/dovecot.conf # OS: Linux 2.6.18-194.32.1.el5 x86_64 CentOS release 5.5 (Final) xfs base_dir: /var/run/dovecot/ log_path: /var/log/dovecot/dovecot-deliver.log info_log_path: /var/log/dovecot/dovecot-deliver.log log_timestamp: "%b %d %H:%M:%S protocols: imap imaps managesieve listen(default): *:143 listen(imap): *:143 listen(managesieve): *:2000 ssl_listen(default): *:993 ssl_listen(imap): *:993 ssl_listen(managesieve): ssl_cert_file: /etc/pki/tls/private/mail.valbek.cz.crt ssl_key_file: /etc/pki/tls/private/privkey.key version_ignore: yes login_dir: /var/run/dovecot//login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(managesieve): /usr/libexec/dovecot/managesieve-login login_greeting: Welcome to Dovecot eMail Server. login_log_format: %$: %s %u login_process_size: 128 login_processes_count: 5 login_max_processes_count: 140 mail_max_userip_connections(default): 30 mail_max_userip_connections(imap): 30 mail_max_userip_connections(managesieve): 10 verbose_proctitle: yes first_valid_uid: 306 last_valid_uid: 306 first_valid_gid: 306 last_valid_gid: 306 mail_uid: vmail mail_gid: vmail mail_location: maildir:/mnt/pole/mail/valbek.cz/%u mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(managesieve): /usr/libexec/dovecot/managesieve mail_plugins(default): acl imap_acl mail_plugins(imap): acl imap_acl mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(managesieve): /usr/lib64/dovecot/managesieve imap_client_workarounds(default): outlook-idle delay-newmail imap_client_workarounds(imap): outlook-idle delay-newmail imap_client_workarounds(managesieve): managesieve_logout_format(default): bytes=%i/%o managesieve_logout_format(imap): bytes=%i/%o managesieve_logout_format(managesieve): bytes ( in=%i : out=%o ) namespace: type: private separator: / inbox: yes list: yes subscriptions: yes namespace: type: shared separator: / prefix: sdilene/%%u/ location: maildir:/mnt/pole/mail/valbek.cz/%%u:INDEX=/mnt/pole/mail/valbek.cz/%%u/sdilene/%%u list: children lda: postmaster_address: it(a)valbek.cz mail_plugins: sieve acl auth default: mechanisms: plain login passdb: driver: ldap args: /etc/dovecot-ldap.conf userdb: driver: ldap args: /etc/dovecot-ldap.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 432 user: vmail group: mail plugin: autocreate: Spam autocreate2: NoSpam autocreate3: Archiv sieve: /mnt/pole/mail/valbek.cz/%u/.dovecot.sieve sieve_storage: /mnt/pole/mail/valbek.cz/%u/sieve sieve_global_dir: /var/lib/dovecot/sieve/global/ fts: squat fts_squat: partial=4 full=10 acl: vfile acl_shared_dict: file:/var/lib/dovecot/shared-mailboxes.db >From log: "Mar 05 15:25:16imap-login: Info: Login: user=<pasek(a)valbek.cz>, method=PLAIN, rip=192.168.1.221, lip=192.168.1.254 "Mar 05 15:25:16IMAP(pasek@valbek.cz): Info: Loading modules from directory: /usr/lib64/dovecot/imap "Mar 05 15:25:16IMAP(pasek@valbek.cz): Info: Module loaded: /usr/lib64/dovecot/imap/lib01_acl_plugin.so "Mar 05 15:25:16IMAP(pasek@valbek.cz): Info: Module loaded: /usr/lib64/dovecot/imap/lib02_imap_acl_plugin.so "Mar 05 15:25:16IMAP(pasek@valbek.cz): Info: Effective uid=306, gid=306, home=(none) "Mar 05 15:25:16IMAP(pasek@valbek.cz): Info: Namespace: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes "Mar 05 15:25:16IMAP(pasek@valbek.cz): Info: maildir: data=/mnt/pole/mail/valbek.cz/pasek(a)valbek.cz "Mar 05 15:25:16IMAP(pasek@valbek.cz): Info: maildir++: root=/mnt/pole/mail/valbek.cz/pasek(a)valbek.cz, index=, control=, inbox=/mnt/pole/mail/valbek.cz/pasek(a)valbek.cz "Mar 05 15:25:16IMAP(pasek@valbek.cz): Info: acl: initializing backend with data: vfile "Mar 05 15:25:16IMAP(pasek@valbek.cz): Info: acl: acl username = pasek(a)valbek.cz "Mar 05 15:25:16IMAP(pasek@valbek.cz): Info: acl: owner = 1 "Mar 05 15:25:16IMAP(pasek@valbek.cz): Info: acl vfile: Global ACL directory: (null) "Mar 05 15:25:16IMAP(pasek@valbek.cz): Info: Namespace: type=shared, prefix=sdilene/%u/, sep=/, inbox=no, hidden=no, list=children, subscriptions=no "Mar 05 15:25:16IMAP(pasek@valbek.cz): Info: shared: root=, index=, control=, inbox= "Mar 05 15:25:16IMAP(pasek@valbek.cz): Info: acl vfile: reading file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/dovecot-acl "Mar 05 15:25:16IMAP(pasek@valbek.cz): Info: Namespace : Using permissions from /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz: mode=0700 gid=-1 "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.Trash/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.Trash.TuX/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.Sent/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.Sent.Archiv/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.Sent.Po&AWE-ta &AWA-vejda/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.Spam/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.NoSpam/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: reading file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.Prodex/dovecot-acl "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.dovecot/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: reading file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.Autodesk/dovecot-acl "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.ebay/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.Hesla/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: reading file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.Intranet/dovecot-acl "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.&AX4-ivotopisy/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.Archiv/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.Archiv.RIB-Service/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.Archiv.Po&AWE-ta &AWA-vejda/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.Archiv.Osobn&AO0- po&AWE-ta/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.spr&AOE-va-IT/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.Blbosti/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.V&AWA-B/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: reading file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.SCST/dovecot-acl "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.PPP-R1/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: reading file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.SOGo/dovecot-acl "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.Nexenta/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.openldap/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.Pron&AOE-jmy/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.Drafts/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.Archiv/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.Nevy&AX4A4Q-dan&AOE- po&AWE-ta/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.Odstran&ARs-n&AOE- po&AWE-ta/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.Odeslan&AOE- po&AWE-ta/dovecot-acl not found Thanks in Advance Ladislav

2 1

[Dovecot] v2.0.11 released
by Timo Sirainen 06 Mar '11

06 Mar '11

http://dovecot.org/releases/2.0/dovecot-2.0.11.tar.gz http://dovecot.org/releases/2.0/dovecot-2.0.11.tar.gz.sig Looks like v2.0.10 was a bit troublesome release. I expect this one to last longer. * dotlock_use_excl setting's default was accidentally "no" in all v2.0.x releases, instead of "yes" as in v1.1 and v1.2. Changed it back to "yes". - v2.0.10: LDAP support was broken - v2.0.10: dsyncing to remote often hanged (timed out in 15 mins)

1 0

[Dovecot] OT auto delete attachments with sieve
by Robert Schetterer 06 Mar '11

06 Mar '11

Hi , off topic , but anyone with an idea how to autodelete attachments from mail with sieve, as far i investigated this , it can only be done indirectly perhaps per size etc, but there is no direct auto way, am i right here ? or someone has magic...? -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

1 0

[Dovecot] 2.0.10 Auth failed while binding ldap
by Stéphane Wartel 06 Mar '11

06 Mar '11

Everything is ok, Thanks Timo ;)

1 0

Re: [Dovecot] Multiple Concurrent IMAP Connections For Same User
by Knute Johnson 06 Mar '11

06 Mar '11

On 03/05/2011 07:45 PM, Stan Hoeppner wrote: > If you're not doing local sync with TB and you have GLODA disabled, > TB is going to show you exactly what's in your Dovecot mailbox. If > the message doesn't disappear from your TB view sometime after > deleting it on your smartphone, then I'd say it's very likely that > Dovecot didn't receive the delete and/or expunge command from the > phone. Check your Dovecot logs and see what the phone is actually > sending, or not sending. > > Both of you mentioned problems specifically WRT smartphones. It's > likely the IMAP implementation in these phones is simply buggy, or > your network coverage is spotty. I don't use a smartphone so I can't > really say. What smartphone are you each using? I've got a Samsung Captivate running K-9 Mail. It could definitely have some bugs. Sometimes if I delete a message on my phone, I'll see it show up in the Trash folder but not disappear from the folder it was deleted from. It's just not consistent. but it is better than it was before. I'll look in the logs and see if I see anything interesting. Thanks again,

1 0

[Dovecot] Dovecot MySQL Schema
by Alokat 06 Mar '11

06 Mar '11

Hi, where can I find the MySQL schema for Dovecot on Debian? Regards, alokat

2 1

[Dovecot] Multiple Concurrent IMAP Connections For Same User
by Nigel Webber 05 Mar '11

05 Mar '11

Hi I've been using courier for some time, but have just built a new box and am using dovecot (V1.2.9), Ubuntu 10.04LTS. I have a question regarding multiple concurrent imap connections and how to get dovecot to behave in the same way that courier does. I have searched the wiki, but find little relevant to my specific issue. Courier-Imap Behaviour If I have thunderbird pointed at the 'Inbox' folder via IMAP, then connect another IMAP client to the same mail account (in this case an iPhone), and then delete an email using the iphone, then after a couple of seconds, the inbox shown by Thunderbird updates, removing the now deleted email. It does this without my having to touch Thunderbird. Dovecot behaviour Performing the same test on a different mailbox, this time hosted via Dovecot, I again see the two views, one in Thunderbird and one on the iPhone, but when I delete the email on the iPhone, the change is not reflected in the view on Thunderbird. If I select the email on Thunderbird, then it has no content. If I restart thunderbird, the deleted email is still shown. I have to delete (the already deleted) the email also in thunderbird before it finally dissapears. How can I get the courier behaviour where the inbox in one email client automagically reflects the changes made to that inbox in another client? If I am better sticking to Courier to get this functionality, thats fine, but if I can configure the behaviour I desire and still retail the benefits of dovecot then thats even better! Kind Regards Nigel

7 12

[Dovecot] 2.0.10 Auth failed while binding ldap
by Stéphane Wartel 05 Mar '11

05 Mar '11

Dear all, Since new release has been installed, auth process crash with io loop : 2011-03-05 11:22:44 auth: Panic: file db-ldap.c: line 1113 (db_ldap_result_change_attr): assertion failed: (ctx->vals == NULL) 2011-03-05 11:22:44 auth: Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0 [0xb76ceab1] -> /usr/lib/dovecot/libdovecot.so.0 [0xb76ceb2f] -> /usr/lib/dovecot/libdovecot.so.0(i_error+0) [0xb76cee04] -> dovecot/auth(db_ldap_result_iterate_next+0x3be) [0x806aa8e] -> dovecot/auth [0x806c857] -> dovecot/auth [0x806cd91] -> dovecot/auth [0x806c314] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x51) [0xb76db781] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xe0) [0xb76dc840] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x40) [0xb76db700] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x2a) [0xb76c73da] -> dovecot/auth(main+0x300) [0x805ea50] -> /lib/i686/cmov/libc.so.6(__libc_start_main+0xe5) [0xb7147455] -> dovecot/auth [0x8052a51] 2011-03-05 11:22:44 master: Error: service(auth): child 23136 killed with signal 6 (core dumps disabled) 2011-03-05 11:22:44 master: Error: service(auth): command startup failed, throttling dovecot --version 2.0.10 (d757b13d84ff) # 2.0.10 (d757b13d84ff): /etc/dovecot/dovecot.conf # OS: Linux 2.6.26-2-686 i686 Debian 5.0.8 auth_failure_delay = 5 secs auth_mechanisms = plain login debug_log_path = /var/log/dovecot-debug.log dict/acl = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext info_log_path = /var/log/dovecot-info.log lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes listen = 127.0.0.1 log_path = /var/log/dovecot.log log_timestamp = "%Y-%m-%d %H:%M:%S " mail_access_groups = mail mail_debug = yes mail_fsync = always mail_gid = mail mail_location = maildir:~/Maildir mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = " quota trash zlib" mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mmap_disable = yes namespace { inbox = yes location = prefix = separator = . type = private } namespace { list = children location = maildir:%%h/Maildir:INDEX=~/Maildir/Shared/%%n prefix = Shared.%%n. separator = . subscriptions = no type = shared } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin/acl = vfile plugin/acl_shared_dict = proxy::acl plugin/autocreate = Junk plugin/autosubscribe = Junk plugin/quota = maildir:User quota plugin/quota_rule2 = Trash:storage=+100M plugin/quota_warning = storage=95%% quota-warning 95 %u plugin/quota_warning2 = storage=80%% quota-warning 80 %u plugin/sieve = ~/.dovecot.sieve plugin/sieve_before = /etc/dovecot/global_script/dovecot.sieve plugin/sieve_dir = ~/sieve plugin/trash = /etc/dovecot/dovecot-trash.conf.ext plugin/zlib_save = bz2 plugin/zlib_save_level = 6 postmaster_address = postmaster protocols = imap pop3 lmtp sieve quota_full_tempfail = yes service auth { unix_listener /var/spool/postfix/private/auth { group = mail mode = 0660 user = postfix } unix_listener auth-master { group = mail mode = 0660 user = vmail } unix_listener auth-userdb { group = mail mode = 0660 user = vmail } } service dict { unix_listener dict { group = mail mode = 0660 user = vmail } } service imap-login { process_min_avail = 10 service_count = 1 } service managesieve-login { process_min_avail = 3 service_count = 1 } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { user = vmail } user = dovecot } ssl_ca = </etc/ssl/certs/GandiStandardSSLCA.pem ssl_cert = </etc/ssl/certs/imap.zero-spam.fr.pem ssl_key = </etc/ssl/private/imap.zero-spam.fr.key userdb { args = /etc/dovecot/dovecot-ldap-userdb.conf.ext driver = ldap } protocol lda { auth_socket_path = /var/run/dovecot/auth-master mail_plugins = " quota trash zlib sieve autocreate acl" } protocol imap { mail_plugins = " quota trash zlib acl imap_quota imap_acl imap_zlib" } protocol sieve { managesieve_logout_format = bytes=%i/%o managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date } dovecot-ldap.conf.ext hosts = 127.0.0.1 dn = "cn=sup,dc=domain,dc=com" dnpass = "**********" auth_bind = yes ldap_version = 3 base = dc=domain, dc=com user_attrs = mailbox=home,mailuserquota=quota_rule=*:storage user_filter = (&(objectClass=mailAccount)(mail=%u)(mailenable=OK)) pass_attrs = mail=user,userPassword=password pass_filter = (&(objectClass=mailAccount)(mail=%u)(mailenable=OK)) iterate_attrs = mail=user iterate_filter = (&(objectClass=mailAccount)(mailenable=OK)) Hope this could help you ! Many thanks by advance, Stephane

3 3

[Dovecot] deleted messages not going away in Thunderbird?
by Dave McGuire 05 Mar '11

05 Mar '11

Hi folks. This may be a dumb question, but I can't seem to find a clue. I'm running Dovecot v1.2.9 and Thunderbird v3.1.7. If I delete messages using a different IMAP client (I also use an iPhone and occasionally SquirrelMail), I would expect those messages to disappear from Thunderbird the next time I start it or click on "Get Mail". In fact, they do...most of the time. Sometimes, however, they just stick around. If I do a "Repair Folder" on the inbox in Thunderbird, the messages go away. Is this a known issue? My gut tells me there's some Thunderbird option to make it follow inbox contents with more "attention" but I've not been able to find it. Thanks, -Dave -- Dave McGuire Port Charlotte, FL

2 1

[Dovecot] version difference understanding
by upen 05 Mar '11

05 Mar '11

Hello, I am in process of setting up an IMAP server (with postfix SMTP), I installed RHEL 5.5 on my server and found that version of dovecot is 1.x.x while when I checked online RHEL 6 is version is 2.x.x. Can someone please tell me if these two versions are still in development or 1.x.x is very old and must be replaced by 2.x.x version? Also are there any special features in 2.x.x or 1.x.x that makes it better than other? I see similar things for postfix package but I understand this is not the place to ask postfix Qns, Appreciate your help! ~A

2 2

[Dovecot] All mails unread after short while
by francwalter＠gmx.net 05 Mar '11

05 Mar '11

Hello, I have on Ubuntu 8.04 Postfix 2.5.1 and Dovecot 1.0.10. The mails are saved in maildir format. In one account on my server all mails are unread all the time. If i set them as read in my client (IMAP with Mac Mail 4.4 or IMAP with Squirrelmail, it doesn’t matter) they seem to be checked as read for some minutes or less, but very soon they are unread again, so i guess, only my client thinks that they are read, but after the next check, the client reads again that they are unread. Now i don’t know where to look or change the “Has been read”-Flag in the maildir-directory. Is it in some file or where is it, the flag? It is only one account, the other accounts on the same domain and on other domains are working quite well. Maybe it is only after a Squirrelmail update last week, but I am not sure. Thank you, Kind Regards, frank walter

4 7

[Dovecot] Is the trunk version of Pigeonhole still broken or am I missing something?
by interfaSys sàrl 05 Mar '11

05 Mar '11

Things broke a couple of months back and I thought I had caught the repository at a bad time, but trying again today, after having seen that people had been working on it recently, bore the same result. ../../../../libtool: line 2072: cmd-vacation.c: command not found I'm simply syncing with the repository and using autogen, configure and make. Are there any other steps required? Olivier

2 5

[Dovecot] v2.0.10 released
by Timo Sirainen 04 Mar '11

04 Mar '11

http://dovecot.org/releases/2.0/dovecot-2.0.10.tar.gz http://dovecot.org/releases/2.0/dovecot-2.0.10.tar.gz.sig I thought it was finally time to make a new v2.0 release. Or probably it was a while ago already, but I've been a bit lazy this year. Maybe it's because this is the first time in last 5 years when all branches of Dovecot have been quite stable and I haven't been stressing on it. Of course there are some v2.0 features that still have some bugs, but few people are complaining about them. v2.1 development branch also appears to be pretty good shape. I'm hopeful that v2.1.rc1 will be out before summer. * LMTP: For user+detail@domain deliveries, the +detail is again written to Delivered-To: header. * Skip auth penalty checks from IPs in login_trusted_networks. + Added import_environment setting. + Added submission_host setting to send mails via SMTP instead of via sendmail binary. + Added doveadm acl get/set/delete commands for ACL manipulation, similar to how IMAP ACL extension works. + Added doveadm acl debug command to help debug and fix problems with why shared mailboxes aren't working as expected. - IMAP: Fixed hangs with COMPRESS extension - IMAP: Fixed a hang when trying to COPY to a nonexistent mailbox. - IMAP: Fixed hang/crash with SEARCHRES + pipelining $. - IMAP: Fixed assert-crash if IDLE+DONE is sent in same TCP packet. - LMTP: Fixed sending multiple messages in a session. - doveadm: Fixed giving parameters to mail commands. - doveadm import: Settings weren't correctly used for the import storage. - dsync: Fixed somewhat random failures with saving messages to remote dsync. - v2.0.9: Config reload didn't notify running processes with shutdown_clients=no, so they could have kept serving new clients with old settings.

2 2

Re: [Dovecot] Error: FETCH [1] for mailbox badbox UID 1 got too little data: 2 vs 4 (fwd)
by Chris Wilson 04 Mar '11

04 Mar '11

Hi all, Any thoughts about this error? Should I file a bug report somewhere? Cheers, Chris. On Wed, 12 Jan 2011, Chris Wilson wrote: > Hi all, > > I can send myself a test message that causes Dovecot to crash when I open > it in Alpine, with the following error: > > Jan 12 14:52:52 one-mail dovecot: imap(chris): Error: FETCH [1] for > mailbox badbox UID 1 got too little data: 2 vs 4 > Jan 12 14:52:52 one-mail dovecot: imap(chris): Error: Corrupted index > cache file /home/chris/mail/.imap/badbox/dovecot.index.cache: Broken > MIME parts for mail UID 1 > Jan 12 14:52:52 one-mail dovecot: imap(chris): Disconnected: FETCH failed > bytes=485/1394 > > I can do this as follows: > > $ touch ~/mail/badbox > $ echo test | /usr/libexec/dovecot/dovecot-lda -m badbox > $ cat ~/mail/badbox > > From MAILER-DAEMON Wed Jan 12 14:52:29 2011 > test > X-IMAPbase: 1294843949 0000000001 > X-UID: 1 > Status: > X-Keywords: > Content-Length: 1 > > And then when I try to open badbox in Alpine (over IMAP), and then open > this email, I get the error above, and the connection is aborted. > > I expect that the "test" line is not a valid header, but dovecot should > not crash when opening it. > > Cheers, Chris. > -- Aptivate | http://www.aptivate.org | Phone: +44 1223 760887 The Humanitarian Centre, Fenner's, Gresham Road, Cambridge CB1 2ES Aptivate is a not-for-profit company registered in England and Wales with company number 04980791.

2 1

[Dovecot] /etc/pam.d/dovecot missing? during high load
by Douglas Mortensen 04 Mar '11

04 Mar '11

This morning on our newly built server, the following was logged twice: auth: Error: pam(username,127.0.0.1): pam_authenticate() failed: Authentication failure (/etc/pam.d/dovecot missing?) This also happened to be during a time of 100+ imap-login processes, where we were seeing: master: Warning: service(imap-login): process_limit reached, client connections are being dropped The initial error was correct, in that I had not yet created /etc/pam.d/dovecot. I have since created the file. However, we brought this server into production yesterday & there were no complaints, nor was the error logged besides twice this morning within 3.5 minutes of eachother. In looking at pam documentation, it is my understanding that when a service (dovecot) does not have its own file existing under /etc/pam.d, then pam will instead use the settings from /etc/pam.d/others as defaults. This seems logical to me, and would explain why things have been working fairly well with no errors regarding pam (other than the 2 logged this morning). However, what this does not explain, is why dovecot auth logged about the file missing at all. I can only guess that it was related to logins being dropped due to high load, and was incorrectly logged?? For reference, my current /etc/pam.d/dovecot is: auth required pam_unix.so nullok account required pam_unix.so My current /etc/pam.d/other is: @include common-auth @include common-account @include common-password @include common-session Which results in (confirmed via : grep -v ^# common-auth common-account common-password common-session) auth [success=1 default=ignore] pam_unix.so nullok_secure auth requisite pam_deny.so auth required pam_permit.so account [success=1 new_authtok_reqd=done default=ignore] pam_unix.so account requisite pam_deny.so password [success=1 default=ignore] pam_unix.so obscure sha512 password requisite pam_deny.so password required pam_permit.so session [default=1] pam_permit.so session requisite pam_deny.so session required pam_permit.so session required pam_unix.so So there definitely is quite a difference between the dovecot pam file I created (based on the dovecot2 wiki), and the system default (other). I don't know whether this could have been related, so I figured I'd share. Otherwise, I'm running dovecot 2.0.9 compiled from source. dovecot -n at the time of the pam errors was probably: # 2.0.9: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0 auth_debug = yes auth_mechanisms = plain login disable_plaintext_auth = no log_timestamp = "%Y-%m-%d %H:%M:%S " mail_debug = yes mail_location = maildir:~/ mail_privileged_group = mail passdb { driver = pam } protocols = imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = root } ssl_cert = </etc/ssl/certs/jlgray.com.cer ssl_key = </etc/ssl/private/jlgray.com.key userdb { driver = passwd } Thanks, - Doug Mortensen Network Consultant Impala Networks Inc CCNA, MCSA, Security+, A+ Linux+, Network+, Server+ . www.impalanetworks.com P: (505) 327-7300 F: (505) 327-7545

2 2

[Dovecot] logging issues w/ login_max_processes_count on 1.x
by Douglas Mortensen 04 Mar '11

04 Mar '11

Today I found our dovecot 2.x gracefully logged: dovecot: master: Warning: service(imap-login): process_limit reached, client connections are being dropped I am confident that we had the very same problem on our previous dovecot 1.x box. Of course with dovecot 1.x, the same relative setting is login_max_processes_count. I believe that I turned up all dovecot logging & debugging to the max (also checked with the 1.x wiki), but nothing was ever logged relating to this. Does anyone know whether there is a way to get dovecot 1.x to log this type of error? Thanks, - Doug Mortensen Network Consultant Impala Networks Inc CCNA, MCSA, Security+, A+ Linux+, Network+, Server+ . www.impalanetworks.com P: (505) 327-7300 F: (505) 327-7545

2 2

[Dovecot] penalty configuration and proxy servers
by Mark Zealey 04 Mar '11

04 Mar '11

Hi there, I've had a look through the wiki and a quick look through the source for penalty configurations (dovecot 2.0.9) but I've not found anything to do with configuration options for this functionality. I'm basically wanting to disable a particular host/subnet from the penalty setup. In our case we have some webmail servers that do get attacked however most of the traffic is legitimate so I'd rather that the user experience was faster (ie not having a few seconds of delay on login) than that we slowed down attacks from them. On a similar note; is it possible to do the per-ip login limit in the auth level rather than the imap/pop level? I ask this as we've just implemented a proxy setup whereby we have two frontend proxy servers that then dispatch to backend servers specified in the database. So, the backend servers do the actual imap/pop sessions however we now don't see the remote ip addresses so it becomes difficult to limit abusive users. The 'doveadm who'/process listing code also doesn't work on the proxy servers even though dovecot knows who logged in and forwards the connection through to the backend servers. None of these features/suggestions are show-stoppers; dovecot is a great program however they're more suggestions of ways it would be useful for us to improve the software. Thanks, Mark

2 1

[Dovecot] strange problem receiving mails
by deconya 04 Mar '11

04 Mar '11

Hi guys Im viewing how to repair a problem using a postfix platform with openldap and dovecot. This is the problem: -When I create a new user inside openldap with mail account appears correctly inside ldap but when I access first time appears inside /var/spool/dovecot/ the folder of account bad. Not appears the name of uid, appears the name of user mail, for ex: drwx------ 5 exemple Domain Users 4,0K 2011-03-04 13:28 exemple drwx------ 9 exemple Domain Users 4,0K 2011-03-04 13:29 exemple.usermail Log filteered: Mar 4 13:28:21 mailserver deliver(exemple): Loading modules from directory: /usr/lib/dovecot/modules/lda Mar 4 13:28:21 mailserver deliver(exemple): Module loaded: /usr/lib/dovecot/modules/lda/ lib10_quota_plugin.so Mar 4 13:28:21 mailserver dovecot: auth(default): master in: USER^I1^Iunesco^Iservice=deliver Mar 4 13:28:21 mailserver dovecot: auth(default): prefetch( exemple(a)mydomain.com) passdb didn't return userdb entries, trying the next userdb Mar 4 13:28:21 mailserver dovecot: auth(default): passwd( exemple(a)mydomain.com) lookup Mar 4 13:28:21 mailserver dovecot: auth(default): passwd( exemple(a)mydomain.com) unknown user Mar 4 13:28:21 mailserver dovecot: auth(default): ldap(exemple(a)mydomain.com): user search: base=ou=Users, dc=ldap, dc=es scope=subtree filter=(&(objectClass=posixAccount)(|(mail=exemple(a)mydomain.com)(uid= exemple(a)mydomain.com)(uid=exemple))) fields=homeDirectory,uidNumber,gidNumber,mailQuota Mar 4 13:28:21 mailserver deliver(exemple): auth input: home=/home/exemple Mar 4 13:28:21 mailserver deliver(exemple): auth input: uid=10017 Mar 4 13:28:21 mailserver deliver(exemple): auth input: gid=513 Mar 4 13:28:21 mailserver deliver(exemple): Home dir not found: /home/exemple Mar 4 13:28:21 mailserver deliver(exemple): Quota root: name=User quota backend=maildir args= Mar 4 13:28:21 mailserver deliver(exemple): Quota rule: root=User quota mailbox=* bytes=52428800 messages=0 Mar 4 13:28:21 mailserver deliver(exemple): Quota rule: root=User quota mailbox=Trash ignored Mar 4 13:28:21 mailserver deliver(exemple): maildir: data=/var/spool/dovecot/exemple/ Mar 4 13:28:21 mailserver deliver(exemple): maildir++: root=/var/spool/dovecot/exemple, index=, control=, inbox=/var/spool/dovecot/exemple Mar 4 13:28:21 mailserver dovecot: auth(default): ldap(exemple(a)mydomain.com): result: homeDirectory(home)=/home/exemple uidNumber(uid)=10017 gidNumber(gid)=513 Mar 4 13:28:21 mailserver dovecot: auth(default): master out: USER^I1^ Iunesco(a)mydomain.com^Ihome=/home/exemple^Iuid=10017^Igid=513 Mar 4 13:28:21 mailserver deliver(exemple): msgid=<1299241700.26848.1.camel@infolinux>: saved mail to INBOX Mar 4 13:28:21 mailserver postfix/pipe[29996]: 6191E26F95B: to=< exemple(a)mydomain.com>, orig_to=<exemplemail(a)admi.mydomain.com>, relay=dovecot, delay=0.09, delays=0.03/0/0/0.06, dsn=2.0.0, status=sent (delivered via dovecot service) Mar 4 13:28:26 mailserver dovecot: auth-worker(default): pam( exemplemail(a)mydomain.com,10.0.0.4) lookup service=dovecot Mar 4 13:28:26 mailserver dovecot: auth-worker(default): pam( exemplemail(a)mydomain.com,10.0.0.4) #1/1 style=1 msg=Password: Mar 4 13:28:28 mailserver dovecot: auth-worker(default): pam( exemplemail(a)mydomain.com,10.0.0.4) pam_authenticate() failed: Authentication failure (password mismatch?) Mar 4 13:28:28 mailserver dovecot: auth(default): ldap( exemplemail(a)mydomain.com,10.0.0.4) bind search: base=ou=Users, dc=ldap, dc=es filter=(&(objectClass=posixAccount)(|(mail=exemplemail(a)mydomain.com )(uid=exemplemail(a)mydomain.com))) Mar 4 13:28:28 mailserver dovecot: auth(default): auth( exemplemail(a)mydomain.com,10.0.0.4) username changed exemplemail(a)mydomain.com -> exemple Mar 4 13:28:28 mailserver dovecot: auth(default): ldap(exemple,10.0.0.4): result: homeDirectory(userdb_home)=/home/exemple uid(user)=exemple uidNumber(userdb_uid)=10017 gidNumber(userdb_gid)=513 Mar 4 13:28:28 mailserver dovecot: auth(default): client out: OK^I1^Iuser=exemple Mar 4 13:28:28 mailserver dovecot: auth(default): prefetch(exemple,10.0.0.4): success Mar 4 13:28:28 mailserver dovecot: auth(default): master out: USER^I411619^ Iunescochair.lccc(a)mydomain.com^Ihome=/home/exemple^Iuid=10017^Igid=513 Mar 4 13:28:28 mailserver dovecot: imap-login: Login: user=<exemple>, method=PLAIN, rip=10.0.0.4, lip=10.0.0.5 Mar 4 13:28:28 mailserver dovecot: IMAP(exemplemail(a)mydomain.com): Loading modules from directory: /usr/lib/dovecot/modules/imap Mar 4 13:28:28 mailserver dovecot: IMAP(exemplemail(a)mydomain.com): Module loaded: /usr/lib/dovecot/modules/imap/lib10_quota_plugin.so Mar 4 13:28:28 mailserver dovecot: IMAP(exemplemail(a)mydomain.com): Module loaded: /usr/lib/dovecot/modules/imap/lib11_imap_quota_plugin.so Mar 4 13:28:28 mailserver dovecot: IMAP(exemplemail(a)mydomain.com): Effective uid=10017, gid=513, home=/home/exemple Mar 4 13:28:28 mailserver dovecot: IMAP(exemplemail(a)mydomain.com): Quota root: name=User quota backend=maildir args= Mar 4 13:28:28 mailserver dovecot: IMAP(exemplemail(a)mydomain.com): Quota rule: root=User quota mailbox=* bytes=52428800 messages=0 Mar 4 13:28:28 mailserver dovecot: IMAP(exemplemail(a)mydomain.com): Quota rule: root=User quota mailbox=Trash ignored Mar 4 13:28:28 mailserver dovecot: IMAP(exemplemail(a)mydomain.com): maildir: data=/var/spool/dovecot/exemplemail/ Mar 4 13:28:28 mailserver dovecot: IMAP(exemplemail(a)mydomain.com): maildir++: root=/var/spool/dovecot/exemplemail, index=, control=, inbox=/var/spool/dovecot/exemplemail Mar 4 13:28:28 mailserver dovecot: IMAP(exemplemail(a)mydomain.com): Disconnected: Logged out bytes=45/375 Any idea? Thanks and Best Regards

1 0

[Dovecot] unsubscribe
by Rob Coward 04 Mar '11

04 Mar '11

Please consider the environment before printing this email. Game Stores Group Limited, registered number 1937170, registered in England

2 1

[Dovecot] Dovecot and ManageSieve crash trace
by Samuel Hassine 04 Mar '11

04 Mar '11

Hi all, I am trying to deploy Dovecot with Sieve support and I choose the easy way: install ManageSieve. But I have a problem here, and I did not find how to deal with. I tested the communication to the server with the telnet command. Here the result: http://pastebin.com/dgvhEwxJ And I do not understand how to link IMAP authentification and Sieve authentification. I just want to allow creation of Sieve filters for any IMAP user (based on LDAP). Thanks for your answer. Best regards. Samuel Hassine

2 1

[Dovecot] sieve issue
by Informatik.hu 04 Mar '11

04 Mar '11

Hi All! I have got some problem with dovecot sieve. (from Debian Squeeze packages). I have already installed dovecot and postfix with mysql(postfix admin) virtual domains and users, configured dovecot deliver for delivery method in postfix. Dovecot sieve IS working, reads the global script, BUT it DOES NOT reads the user scripts from the users virtual home directory. If i place ".dovecot.sieve" in /home/vmail, and configure sieve for this location, it reads the script. If i put the file under /home/vmail/domain.com (/home/vmail/%d) or /home/vmail/domain.com/user(a)domain.com (/home/vmail/%d/%u) the sieve plugin does not read(compile) the script. Deliver log contains that the incoming mail (which has to be filtered) saved to INBOX, and there is no error in the deliver error log, nor dovecot logs. Can anybody help me out what am i doing wrong? Vuki

2 1

[Dovecot] Problem with sieve and namespace
by Patrick Westenberg 03 Mar '11

03 Mar '11

Hi guys, my default sieve script fails due to an unknown mailspace even I told him to use one. What's wrong? Patrick Feb 26 00:39:25 endeavour dovecot: lmtp(6967, mail(a)jasbafliesen.de) Error: 1WYlBCE1aE03GwAA0CSSVw: sieve: msgid=<4D683DA5.7030505(a)gmx.de>: failed to store into mailbox mail(a)jasbafliesen.de': Unknown namespace Feb 26 00:39:25 endeavour dovecot: lmtp(6967, mail(a)jasbafliesen.de) Error: 1WYlBCE1aE03GwAA0CSSVw: sieve: script /usr/local/etc/dovecot/sieve/default.sieve failed with unsuccessful implicit keep This is what my sieve script looks like: require ["fileinto", "mailbox"]; if header :contains "X-Spam-Flag" "YES" { fileinto :create "INBOX.Spam"; } # 2.0.6: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.26-2-amd64 x86_64 Debian 5.0.8 auth_debug = yes auth_debug_passwords = yes auth_verbose = yes disable_plaintext_auth = no mail_debug = yes mail_gid = vmail mail_location = mdbox:~/mdbox mail_plugins = quota mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = comparator-i;octet comparator-i;ascii-casemap fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date namespace { inbox = yes location = prefix = INBOX. separator = . type = private } passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { quota = dict:User quota::file:%h/mdbox/dovecot-quota quota_warning = storage=90%% quota-warning 90 %u quota_warning2 = storage=75%% quota-warning 75 %u sieve = ~/.dovecot.sieve sieve_global_path = /usr/local/etc/dovecot/sieve/default.sieve } protocols = lmtp service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } service quota-warning { executable = script /usr/local/etc/dovecot/quota-warning.sh unix_listener quota-warning { user = vmail } user = vmail } ssl = no userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lmtp { mail_plugins = quota sieve } protocol lda { mail_plugins = quota sieve } protocol imap { mail_plugins = quota imap_quota }

3 4

[Dovecot] process_min_avail being ignored?
by Douglas Mortensen 03 Mar '11

03 Mar '11

Today I found out we are having users w/ problems because: Mar 3 09:57:33 jlgray dovecot: master: Warning: service(imap-login): process_limit reached, client connections are being dropped Mar 3 09:58:42 jlgray dovecot: master: Warning: service(imap-login): process_limit reached, client connections are being dropped Mar 3 10:02:51 jlgray dovecot: master: Warning: service(imap-login): process_limit reached, client connections are being dropped Mar 3 10:04:29 jlgray dovecot: master: Warning: service(imap-login): process_limit reached, client connections are being dropped Mar 3 10:05:41 jlgray dovecot: master: Warning: service(imap-login): process_limit reached, client connections are being dropped Mar 3 10:06:58 jlgray dovecot: master: Warning: service(imap-login): process_limit reached, client connections are being dropped So, based on the dovecot2 wiki, it would seem that the solution is to follow the recommendations at http://wiki2.dovecot.org/LoginProcess, and use them as a guide for our situation. I have done so. But unless I misunderstand their purpose, I don't think they're working. Maybe I don't have them in the correct place?? I am expecting the imap-login process count to immediately jump up to 200 (based on my config below). But instead, they just slowly gradually increase. But even an hour after changing the config & restarting dovecot, I only have 78 login processes. dovecot -n output is: # 2.0.9: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0 auth_debug = yes auth_mechanisms = plain login disable_plaintext_auth = no log_timestamp = "%Y-%m-%d %H:%M:%S " mail_debug = yes mail_location = maildir:~/ mail_privileged_group = mail passdb { driver = pam } protocols = imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = root } ssl_cert = </etc/ssl/certs/jlgray.com.cer ssl_key = </etc/ssl/private/jlgray.com.key userdb { driver = passwd } This configuration was updated from a dovecot 1.x config, by following the instructions at: http://wiki2.dovecot.org/Upgrading/2.0 Namely: doveconf -n -c dovecot-1.conf > dovecot-2.conf Then we renamed dovecot-2.conf to dovecot.conf I'm pretty sure there were no problems with that part. We are running dovecot 2.0.9 compiled from source. OS is 64-bit Debian Squeeze (6.0), as shown by 'cat /proc/version': Linux version 2.6.32-5-amd64 (Debian 2.6.32-30) (ben(a)decadent.org.uk) (gcc version 4.3.5 (Debian 4.3.5-4) ) #1 SMP Wed Jan 12 03:40:32 UTC 2011 I really appreciate anyone helping me figure out why Thanks, - Doug Mortensen Network Consultant Impala Networks Inc CCNA, MCSA, Security+, A+ Linux+, Network+, Server+ . www.impalanetworks.com P: (505) 327-7300 F: (505) 327-7545

1 1

[Dovecot] TB, dovecot & trailing slash - again
by Bruno Tréguier 03 Mar '11

03 Mar '11

Hi there, I have been browsing the mailing list archives in search of a solution to my problem, related to the quite infamous "trailing slash" issue with Thunderbird, but I don't seem to have found any closely related discussion. Please forgive me if this problem has already found a solution. Here I go; We use a lot of TB clients (2.x and 3.x), and we are using Dovecot 1.2.4 on our production server (mbox format). As told in many places, including this list, I added the option "tb-extra-mailbox-sep" in my dovecot.conf file. The checkbox regarding the mix of mailbox/submailbox and mailbox/messages is unchecked in the advanced options of our TB standard config. I snooped the connection with "ngrep" when creating a folder meant for containing subfolders. Here is the trace: > 6 create "ABCDE/".. < 6 OK Create completed... > 7 subscribe "ABCDE/".. < 7 OK Subscribe completed... > 8 list "" "ABCDE/".. < * LIST (\Noselect \HasChildren) "/" "ABCDE/"..8 OK List completed... So far, so good. But when you have a look at the .subscriptions file, you can see that the ABCDE folder has no trailing slash: it has been stripped off, apparently due to an "enhancement" made in 2009: http://hg.dovecot.org/dovecot-1.2/rev/339be408f49a It may be intended, but the drawback is that TB then gets a bit confused, as it has no way, during a "LIST" operation, to distinguish between a "folder/subfolder" scheme and a "folder/message" scheme: consequently, you get an error message from TB whenever you click on the containing folder, stating that "the mailbox isn't selectable". The problem is not just cosmetic, though, as the subfolders of such folders are not synchronized when selected for offline reading. I made a test with another version of Dovecot, of the 1.1 branch, and it behaves a little bit differently: the trailing slash is kept in the .subscriptions file, and everything is ok. TB is able to make the distinction between both kinds of folders. For the moment, I simply erased the "tb-extra-mailbox-sep" from my config file, and this is what happens: > 306 create "ABCDE/".. < 306 OK Create completed... > 307 subscribe "ABCDE/".. < 307 NO Invalid mailbox name: ABCDE/.. > 308 list "" "ABCDE/".. < * LIST (\Noselect \HasChildren) "/" "ABCDE/"..308 OK List completed... In that case, the "subscribe" command fails, so the folder does not appear by itself in the .subscriptions file, but as it is not used (only "terminal" mailboxes, containing messages, which are files in the filesystem), this is not a problem. The directory is created on the disk, and you can then create subfolders without any problem... Sorry for this long message, I just wanted to explain precisely what happens. A last word: switching to maildir would be quite a hassle, as we use quite a lot of procmail-based tools. Rewriting everything using Sieve is not planned for the moment. Does anyone out there have a solution for this ? What am I doing wrong ? Is the "tb-extra-mailbox-sep" really necessary when using TB ? As far as I can tell, it rather got us into trouble here, than solved anything... Thanks for any info/pointer/else ! Best regards, Bruno -- - Service Hydrographique et Oceanographique de la Marine - DO/MGS/INF - 13, rue du Chatellier - CS 92803 - 29228 Brest Cedex 2, FRANCE - Phone: +33 2 98 22 17 49 - Email: Bruno.Treguier(a)shom.fr

1 0

[Dovecot] expire plugin and sieve
by cvb＠kruemel.org 03 Mar '11

03 Mar '11

Hi. I am running dovecot 1.2.9 here, allowing users to filter their mails with the sieve plugin, and am using sieve to move mail tagged as probably spam into the spam folder. I'm now looking to get the expire plugin working as well. It does work as described in the wiki: Once I manually move messages into other folders, the mysql database is filled with entries. However, the combination of sieve and expire does not seem to be working: When sieve moves messages into a folder, no entry is created in the database. Don't these plugins work together, or did I misconfigure something? # dovecot -n # 1.2.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-27-server x86_64 Ubuntu 10.04.1 LTS fuse.glusterfs log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps pop3 pop3s managesieve ssl_cert_file: /etc/dovecot/imapd.pem ssl_key_file: /etc/dovecot/imapd.pem disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login login_user: postfix login_process_per_connection: no login_process_size: 128 first_valid_uid: 113 mail_privileged_group: mail mail_location: maildir:/home/vmail/%Ld/%Ln:INDEX=/var/indexes/%u mail_debug: yes mail_nfs_storage: yes mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugins(default): expire mail_plugins(imap): expire mail_plugins(pop3): expire mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve imap_client_workarounds(default): outlook-idle delay-newmail imap_client_workarounds(imap): outlook-idle delay-newmail imap_client_workarounds(pop3): imap_client_workarounds(managesieve): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh pop3_client_workarounds(managesieve): managesieve_logout_format(default): bytes=%i/%o managesieve_logout_format(imap): bytes=%i/%o managesieve_logout_format(pop3): bytes=%i/%o managesieve_logout_format(managesieve): bytes ( in=%i : out=%o ) namespace: type: private separator: . prefix: INBOX. inbox: yes list: yes subscriptions: yes lda: postmaster_address: postmaster(a)example.com mail_plugins: expire mail_plugins: sieve auth default: mechanisms: plain login user: nobody verbose: yes passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: static args: uid=5000 gid=5000 home=/home/vmail/%Ld/%Ln allow_all_users=yes socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: root master: path: /var/run/dovecot/auth-master mode: 438 user: vmail group: vmail plugin: sieve: /home/vmail/%Ld/%Ln/.dovecot.sieve sieve_global_path: /home/vmail/globalsieverc sieve_dir: ~/sieve sieve_global_dir: /var/lib/dovecot/sieve/global/ expire: INBOX.Trash 7 INBOX.Mailing-Lists.* 30 INBOX.Spam 14 expire_dict: proxy::expire dict: expire: mysql:/etc/dovecot/dovecot-dict-expire.conf Thanks, Christian

2 2

[Dovecot] dovecot share
by Eric Broch 03 Mar '11

03 Mar '11

Hello List, I have created a shared folder in dovecot and am trying to use ACL's to limit access to it and give users who do have access the ability to create sub-directories and copy email to them. When I try to create a sub-directory in the share using Outlook I get the following error: "Cannot create the folder. The server responded: 'NOPERM] Permission denied'." And, I get the following info in the dovecot server log: 2011-03-01 15:38:30.250214500 IMAP(test(a)whitehorsetc.com): Info: Loading modules from directory: /usr/local/lib/dovecot/imap 2011-03-01 15:38:30.250399500 IMAP(test(a)whitehorsetc.com): Info: Module loaded: /usr/local/lib/dovecot/imap/lib01_acl_plugin.so 2011-03-01 15:38:30.250402500 IMAP(test(a)whitehorsetc.com): Info: Module loaded: /usr/local/lib/dovecot/imap/lib02_imap_acl_plugin.so 2011-03-01 15:38:30.250404500 IMAP(test(a)whitehorsetc.com): Info: Effective uid=89, gid=89, home=/home/vpopmail/domains/whitehorsetc.com/test 2011-03-01 15:38:30.250407500 IMAP(test(a)whitehorsetc.com): Info: acl: No acl_shared_dict setting - shared mailbox listing is disabled 2011-03-01 15:38:30.250422500 IMAP(test(a)whitehorsetc.com): Info: Namespace: type=private, prefix=INBOX., sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes 2011-03-01 15:38:30.250425500 IMAP(test(a)whitehorsetc.com): Info: maildir: data=~/Maildir 2011-03-01 15:38:30.250427500 IMAP(test(a)whitehorsetc.com): Info: maildir++: root=/home/vpopmail/domains/whitehorsetc.com/test/Maildir, index=, control=, inbox=/home/vpopmail/domains/whitehorsetc.com/test/Maildir 2011-03-01 15:38:30.250441500 IMAP(test(a)whitehorsetc.com): Info: acl: initializing backend with data: vfile 2011-03-01 15:38:30.250443500 IMAP(test(a)whitehorsetc.com): Info: acl: acl username = test(a)whitehorsetc.com 2011-03-01 15:38:30.250445500 IMAP(test(a)whitehorsetc.com): Info: acl: owner = 1 2011-03-01 15:38:30.250447500 IMAP(test(a)whitehorsetc.com): Info: acl vfile: Global ACL directory: (null) 2011-03-01 15:38:30.250515500 IMAP(test(a)whitehorsetc.com): Info: Namespace: type=shared, prefix=projects., sep=., inbox=no, hidden=no, list=yes, subscriptions=yes 2011-03-01 15:38:30.250518500 IMAP(test(a)whitehorsetc.com): Info: maildir: data=/home/vpopmail/domains/whitehorsetc.com/projects 2011-03-01 15:38:30.250520500 IMAP(test(a)whitehorsetc.com): Info: maildir++: root=/home/vpopmail/domains/whitehorsetc.com/projects, index=, control=, inbox= 2011-03-01 15:38:30.250534500 IMAP(test(a)whitehorsetc.com): Info: acl: initializing backend with data: vfile 2011-03-01 15:38:30.250536500 IMAP(test(a)whitehorsetc.com): Info: acl: acl username = test(a)whitehorsetc.com 2011-03-01 15:38:30.250538500 IMAP(test(a)whitehorsetc.com): Info: acl: owner = 0 2011-03-01 15:38:30.250540500 IMAP(test(a)whitehorsetc.com): Info: acl vfile: Global ACL directory: (null) 2011-03-01 15:38:30.250754500 imap-login: Info: Login: user=<test(a)whitehorsetc.com>, method=PLAIN, rip=192.168.9.5, lip=192.168.9.6 2011-03-01 15:38:30.254448500 IMAP(test(a)whitehorsetc.com): Info: acl vfile: file /home/vpopmail/domains/whitehorsetc.com/projects/.xxxxxx/dovecot-acl not found 2011-03-01 15:39:10.998483500 IMAP(test(a)whitehorsetc.com): Info: Disconnected: Logged out bytes=76/431 The second to the last line in the log indicates that there is no 'dovecot-acl' file in the directory I'm trying to create using Outlook. I'm not sure if this is the error and I'm not sure what I need to adjust in order to create a directory using the email account. My dovecot.conf file is as follows: base_dir = /var/run/dovecot/ protocols = imap imaps disable_plaintext_auth = no log_path = /dev/stderr info_log_path = /dev/stderr log_timestamp = "" ssl_cert_file = /var/qmail/control/servercert.pem ssl_key_file = /var/qmail/control/servercert.pem ssl_cipher_list = ALL:!LOW verbose_ssl = yes login_dir = /usr/local/var/run/dovecot/login login_user = dovecot login_process_per_connection = yes login_processes_count = 3 login_max_processes_count = 128 login_greeting = Dovecot ready. login_log_format_elements = user=<%umethod=%m rip=%r lip=%l %c mail_location = maildir:~/Maildir namespace private { separator = . prefix = INBOX. inbox = yes } namespace shared { separator = . prefix = projects. location = maildir:/home/vpopmail/domains/mydomain.com/shared/projects } mail_debug = yes verbose_proctitle = yes first_valid_uid = 89 last_valid_uid = 89 protocol imap { mail_plugins = acl imap_acl } protocol pop3 { } protocol lda { postmaster_address = postmaster(a)whitehorsetc.com } auth default { mechanisms = plain login digest-md5 cram-md5 passdb vpopmail { args = } userdb passwd { } userdb vpopmail { } user = vpopmail count = 1 ssl_require_client_cert = no } dict { } plugin { vfile = acl } In the share directory (/home/vpopmail/domains/whitehorsetc.com.com/shared/projects) I created two files: 'subscriptions' and 'dovecot-acl.' Listing this directory yields the following: drwx------ 2 vpopmail vchkpw 4096 Feb 17 08:57 cur -rwxrwxrwx 1 vpopmail vchkpw 39 Mar 1 15:01 dovecot-acl -rw------- 1 vpopmail vchkpw 0 Mar 1 15:51 dovecot-acl-list drwx------ 2 vpopmail vchkpw 4096 Jan 28 14:48 new -rw------- 1 vpopmail vchkpw 1 Mar 1 14:46 subscriptions drwx------ 2 vpopmail vchkpw 4096 Feb 17 08:57 tmp The file 'dovecot-acl-list' is created automatically when I open Outlook. In the file 'dovecot-acl' I have the following entry: user=test(a)whitehorsetc.com lrwstipekxa I also noticed that the 'projects' folder would not become visible in Outlook until I manually created the 'subscriptions' file, opened it, entered a <CR><LF>, and closed the file. Without ACL support enabled all works as expected. Any help would be appreciated. Eric

2 10

Re: [Dovecot] auth on tcp socket?
by Hajo Locke 03 Mar '11

03 Mar '11

Hello, >> is it possible to provide service auth on tcp-socket instead of >> unix-socket? >> I changed my conf and dovecot 2.0.5 is restarting but on telnet test it >> throws: >> dovecot: auth: Fatal: getsockname(12) failed: Socket operation on >> non-socket >> >> Want to separate smtp and imap to different servers but keep using >> dovecot auth for postfix-sasl. >> Whats to do? hmm, is postfix able to use non-unix socket for >> dovecot-sasl? > Well, added support for that: > http://hg.dovecot.org/dovecot-2.0/rev/fe8e82b5bff9 Thanks for that. is it save to use smtpd_sasl_path = inet:localhost:1434 in postfix's main.cf? there are some warnings in log: "when SASL type is "dovecot", SASL path "inet:localhost:1434" should be a socket pathname" ( Datei src/xsasl/xsasl_dovecot_server.c ) Thanks, Hajo

1 0

[Dovecot] Does dovecot proxy support message caching?
by Edward Carraro 03 Mar '11

03 Mar '11

For example, say the connection between the user and the dovecot proxy is fast/cheap, but the connection from the proxy to the dovecot imap backend server is costly. is there a way to set up the proxy to cache messages to allow faster loading? if so, does it have different levels of caching (full message, headers only, etc)? I'm using dovecot 2.0.9 for both the proxy and the imap backend. if not, is there something that can work with dovecot to allow this? Thanks!

3 4

[Dovecot] Segfault in managesieve with "sieve_extensions = -redirect"
by Sven Hartge 03 Mar '11

03 Mar '11

Hi! I've got a segfault in managesieve while using: sieve_extensions = -vacation -reject -spamtest -virustest -enotify -redirect The problem seems to lie in "-redirect". Reason for excluding "redirect" from sieve is my users should not use sieve to forward or redirect mails but use an external method (web-script to set LDAP attribute) which checks several things like active spam-checker, existing target mailbox, etc. The version ov dovecot ist 1:2.0.9-1~3.gbp785ad1~dvz60+1 on Debian Squeeze which is from the Debian maintainers git repository recompiled on Squeeze (I know, pretty wild.) doveconf -n and backtrace follow: -----------------------8<--------------------------------------------- # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0 auth_username_format = %Ln dict { quota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } disable_plaintext_auth = no first_valid_gid = 1000 first_valid_uid = 1000 last_valid_gid = 1000 last_valid_uid = 1000 mail_access_groups = virtmail mail_gid = virtmail mail_location = mdbox:~/mdbox mail_plugins = " quota zlib" mail_uid = virtmail mdbox_rotate_interval = 23 hours mdbox_rotate_size = 25 M namespace { hidden = yes inbox = yes list = yes location = prefix = INBOX. separator = . subscriptions = yes type = private } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { quota = dict:Benutzer-Quota::proxy::quota quota_rule = *:storage=2G sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_extensions = -vacation -reject -spamtest -virustest -enotify -redirect zlib_save = gz zlib_save_level = 6 } postmaster_address = postmaster(a)th-mittelhessen.de protocols = imap pop3 sieve service dict { unix_listener dict { group = virtmail mode = 0660 } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-ldap-userdb.conf.ext driver = ldap } protocol lmtp { mail_plugins = " quota zlib sieve" } protocol lda { mail_plugins = " quota zlib sieve" } protocol imap { mail_plugins = " quota zlib imap_quota imap_zlib" } -----------------------8<--------------------------------------------- (gdb) bt full #0 sieve_extensions_set_string (svinst=<value optimized out>, ext_string=<value optimized out>) at sieve-extensions.c:567 ext = 0x0 op = 0 '\000' name = 0x2375331 "redirect" _data_stack_cur_id = 2 ext_reg = 0x23856c8 ext_names = 0x2375368 i = <value optimized out> ext_count = <value optimized out> relative = true #1 0x00007fb2db4207c2 in sieve_extensions_init (svinst=0x2385680) at sieve-extensions.c:256 extensions = <value optimized out> ext = <value optimized out> #2 0x00007fb2db426914 in sieve_init (env=0x40d700, context=<value optimized out>, debug=false) at sieve.c:83 svinst = 0x2385680 uint_setting = 0 size_setting = 37179544 pool = 0x2385660 #3 0x00000000004085ff in managesieve_capabilities_dump () at managesieve-capabilities.c:125 svinst = <value optimized out> notify_cap = <value optimized out> #4 0x0000000000408af5 in main (argc=4, argv=0x237d370) at main.c:273 set_roots = {0x610040, 0x0} service_flags = <value optimized out> storage_service_flags = 0 postlogin_socket_path = 0x0 username = 0x0 c = <value optimized out> -----------------------8<--------------------------------------------- Grüße, Sven. -- Sig lost. Core dumped.

4 5

[Dovecot] Error purging mdbox (damaged) mailbox
by Javier Miguel Rodríguez 02 Mar '11

02 Mar '11

We are stress testing our preproduction system. One of the "evil" tests we made was putting our mailboxes filesystem in read-only in the middle of smtp(+lda) delivery. When we try to purge one of the affected mailboxes we get error like the followings: / doveadm(lbandera@mysite): Panic: file mdbox-purge.c: line 225 (mdbox_purge_save_msg): assertion failed: (ret == (off_t)msg_size) doveadm(lbandera@mysite): Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0 [0x3b0943bab0] -> /usr/lib64/dovecot/libdovecot.so.0(default_fatal_handler+0x35) [0x3b0943bb95] -> /usr/lib64/dovecot/libdovecot.so.0 [0x3b0943b4c3] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mdbox_purge+0xe83) [0x3b0986f0c3] -> /usr/bin/doveadm [0x408d65] -> /usr/bin/doveadm [0x4093c1] -> /usr/bin/doveadm(doveadm_mail_single_user+0x9d) [0x4094ed] -> /usr/bin/doveadm [0x4096fe] -> /usr/bin/doveadm(doveadm_mail_try_run+0xb7) [0x409b37] -> /usr/bin/doveadm(main+0x2fc) [0x40dddc] -> /lib64/libc.so.6(__libc_start_main+0xf4) [0x3b0881d994] -> /usr/bin/doveadm [0x408c39]/ / doveadm(leonvela@mysite): Panic: file mdbox-purge.c: line 225 (mdbox_purge_save_msg): assertion failed: (ret == (off_t)msg_size) doveadm(leonvela@mysite): Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0 [0x3b0943bab0] -> /usr/lib64/dovecot/libdovecot.so.0(default_fatal_handler+0x35) [0x3b0943bb95] -> /usr/lib64/dovecot/libdovecot.so.0 [0x3b0943b4c3] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mdbox_purge+0xe83) [0x3b0986f0c3] -> /usr/bin/doveadm [0x408d65] -> /usr/bin/doveadm [0x4093c1] -> /usr/bin/doveadm(doveadm_mail_single_user+0x9d) [0x4094ed] -> /usr/bin/doveadm [0x4096fe] -> /usr/bin/doveadm(doveadm_mail_try_run+0xb7) [0x409b37] -> /usr/bin/doveadm(main+0x2fc) [0x40dddc] -> /lib64/libc.so.6(__libc_start_main+0xf4) [0x3b0881d994] -> /usr/bin/doveadm [0x408c39]/ The mailboxes are damaged, but maybe doveadm should not crash on them, should handle the error more gracefully and exit with a error status. Regards Javier

2 1

Re: [Dovecot] Regenerating mdbox/sis
by Daniel L. Miller 01 Mar '11

01 Mar '11

On 2/21/2011 8:23 AM, Daniel L. Miller wrote: After applying last two patches, I see: root@bubba:/var/mail# dsync -u amiller(a)amfes.com -o mail_plugins="zlib" backup maildir:/var/mail/backup/amiller dsync(amiller(a)amfes.com): Error: Corrupted dbox file /var/mail/amfes.com/amiller/mdbox/storage/m.1 (around offset=237479): Ext refs metadata corrupted: 356039 144422 B72 0a/5a/0a5ae26f12adad628d9e5049e7ec8a756dafe49d-7c35b90f82a1c94ce151000 03bc41c5f dsync(amiller(a)amfes.com): Error: Corrupted dbox file /var/mail/amfes.com/amiller/mdbox/storage/m.1 (around offset=237479): uid=5 points to broken data at offset=237449 dsync(amiller(a)amfes.com): Error: msg-get failed: box=Drafts uid=5 guid=1156208717.P32762Q0M962249.amy dsync(amiller(a)amfes.com): Error: Corrupted dbox file /var/mail/amfes.com/amiller/mdbox/storage/m.2 (around offset=46): Ext refs metadata corrupted: 485733 478770 - f2/12/f212f6dbff17cea018ec1f256cff6f61a873a100-7d35b90f82a1c94ce15100003bc41 c5f dsync(amiller(a)amfes.com): Error: Corrupted dbox file /var/mail/amfes.com/amiller/mdbox/storage/m.2 (around offset=46): uid=9 points to broken data at offset=16 dsync(amiller(a)amfes.com): Error: msg-get failed: box=Drafts uid=9 guid=1157518326.P23171Q0M772523.amy dsync(amiller(a)amfes.com): Warning: mdbox /var/mail/amfes.com/amiller/mdbox/storage: rebuilding indexes -- Daniel

1 0

Re: [Dovecot] Search failure
by Daniel L. Miller 01 Mar '11

01 Mar '11

On 3/1/2011 11:17 AM, Daniel L. Miller wrote: > Applied patches, then performed a search. got all kinds of fun > feedback...here's a small sampling > > root@bubba:/var/mail/amfes.com/dmiller/mdbox# doveadm search -u > dmiller(a)amfes.com TEXT xyzxyz > 392b0c265aa1c94cd45100003bc41c5f 10906 > 392b0c265aa1c94cd45100003bc41c5f 10911 > doveadm(dmiller(a)amfes.com): Error: Corrupted dbox file > /var/mail/amfes.com/dmiller/mdbox/storage/m.2223 (around > offset=36650): Ext refs metadata corrupted: 293271 161935 B76 > 8a/bf/8abf3af65396470c3d39379d922108f9fc46050b-bf22cc2e12ec524dde6c00003bc41c5f > doveadm(dmiller(a)amfes.com): Error: Corrupted dbox file > /var/mail/amfes.com/dmiller/mdbox/storage/m.2223 (around > offset=36650): uid=12937 points to broken data at offset=36620 > doveadm(dmiller(a)amfes.com): Warning: mdbox > /var/mail/amfes.com/dmiller/mdbox/storage: rebuilding indexes > > meanwhile, had a "tail -f /var/log/mail.err" running...had a few of > these pop up > Mar 1 11:12:37 bubba dovecot: imap(dmiller(a)amfes.com): Error: Recent > flags state corrupted for mailbox Lists.Fire-Alarm > Mar 1 11:12:40 bubba dovecot: imap(dmiller(a)amfes.com): Error: > /var/mail/amfes.com/dmiller/mdbox/mailboxes/Lists/Dovecot-Users/dbox-Mails/dovecot.index > reset, view is now inconsistent > 2nd run got similar results. -- Daniel

1 0

[Dovecot] Search failure
by Daniel L. Miller 01 Mar '11

01 Mar '11

doveadm search -u dmiller(a)amfes.com text xyzxyz doveadm(dmiller(a)amfes.com): Panic: file istream-limit.c: line 79 (i_stream_limit_seek): assertion failed: (v_offset <= lstream->v_size) doveadm(dmiller(a)amfes.com): Error: Raw backtrace: /usr/local/lib/dovecot/libdovecot.so.0(+0x3ca8a) [0x7fcf3daaca8a] -> /usr/local/lib/dovecot/libdovecot.so.0(default_fatal_handler+0x32) [0x7fcf3daacb72] -> /usr/local/lib/dovecot/libdovecot.so.0(+0x16dea) [0x7fcf3da86dea] -> /usr/local/lib/dovecot/libdovecot.so.0(+0x45b54) [0x7fcf3dab5b54] -> /usr/local/lib/dovecot/libdovecot.so.0(i_stream_seek+0x6e) [0x7fcf3dab2d8e] -> /usr/local/lib/dovecot/libdovecot-storage.so.0(dbox_attachment_file_get_stream+0x1ca) [0x7fcf3e1e99aa] -> /usr/local/lib/dovecot/libdovecot-storage.so.0(dbox_mail_get_stream+0xea) [0x7fcf3e1eba4a] -> /usr/local/lib/dovecot/libdovecot-storage.so.0(index_storage_search_next_nonblock+0x4c1) [0x7fcf3e1bb0a1] -> /usr/local/lib/dovecot/libdovecot-storage.so.0(mailbox_search_next_nonblock+0x20) [0x7fcf3e1a2110] -> /usr/local/lib/dovecot/libdovecot-storage.so.0(mailbox_search_next+0x26) [0x7fcf3e1a2166] -> doveadm() [0x40cdd7] -> doveadm() [0x4092a4] -> doveadm(doveadm_mail_single_user+0x8c) [0x4095bc] -> doveadm() [0x4097c3] -> doveadm(doveadm_mail_try_run+0x141) [0x409bc1] -> doveadm(main+0x3a9) [0x40df59] -> /lib/libc.so.6(__libc_start_main+0xfe) [0x7fcf3d2ffd8e] -> doveadm() [0x408ba9] Aborted -- Daniel

2 5

[Dovecot] Dovecot+Postfix+Mysql+quotas doesn't work
by drum.lucas＠gmail.com 01 Mar '11

01 Mar '11

Hi ! I'm using postfix with mysql, dovecot and squirrelmail for WEBMAIL In my dovecot.conf I've: plugin { quota = maildir:User quota quota2 = maildir:Shared quota:ns=Public/ quota_rule = *:storage=400M quota_rule2 = Trash:storage=100M quota_exceeded_message = Quota excedida. Por favor, exclua alguns emails! quota_warning = storage=95%% /usr/local/bin/quota-warning.sh 95 quota_warning2 = storage=80%% /usr/local/bin/quota-warning.sh 80 } In my webmail, he informs me that I'm using the percentage of quota. But I can't make the TRASH folder is ignored. That is, I can't put a higher limit on it than the others. Am I doing something wrong? Another thing. I'm not receiving message of quota exceeded. This is with the MTA or dovecot? ############################################################################################################## ############################################################################################################## ############################################################################################################## ############################################################################################################## My quota-warning.sh: #!/bin/sh PERCENT=$1 FROM="postmaster(a)xxxxxxxx.br" qwf="/tmp/quota.warning.$$" echo "From: $FROM To: $USER To: postmaster(a)xxxxxxx.br Subject: Your email quota is $PERCENT% full Content-Type: text/plain; charset="UTF-8" Sua caixa de e-mail está: $PERCENT% full." >> $qwf cat $qwf | /usr/sbin/sendmail -f $FROM "$USER" rm -f $qwf exit 0 ############################################################################################################## ############################################################################################################## ############################################################################################################## DOVECOT: dovecot.x86_64 1.0.7-7.el5 POSTFIX: postfix.x86_64 2:2.3.3-2.1.centos.mysql_pgsql MYSQL: mysql-server.x86_64 5.0.77-4.el5_5.4 thank's ! -- Atenciosamente; Graciously; *Lucas Possamai * http://psyscrew.posterous.com/ "Sexo? O governo dá camisinha! Engravidou? Bolsa família! Preso? Ele dá dinheiro! Agora vai estudar pra você vê." "Sucesso é a capacidade de enfrentar o fracasso sem perder o entusiasmo" *INFORMAÇÃO DE SEGURANÇA:* Este e-mail é de uso restritamente pessoal. As informações nele contidas podem ser de caráter confidencial e/ou privilegiada. Se você não for o destinatário e recebeu a mensagem por engano, avise imediatamente o remetente e em seguida apague o e-mail, ficando, expressamente vedado o uso, cópia e/ou divulgação das informações contidas, sob pena de responsabilização. *SAFETY INFORMATION:* This e-mail is strictly personal use. The information contained here may be confidential and / or privileged. If you aren't the intended recipient and received the message in error, please notify the sender immediately and delete the email, being expressly forbidden the use, copying and / or disclosure of information, under penalty of accountability. *P* Antes de imprimir, pense em sua responsabilidade e seu compromisso com o meio ambiente. *P* Before printing, think about your responsibility and commitment to the environment.**

4 5

[Dovecot] lazy_expunge, 2 questions
by Hajo Locke 01 Mar '11

01 Mar '11

Hello List, do some tests with lazy_expunge i have 2 short questions. is it possible to set folder for expunged messages to read-only so no user is possible to really delete them? i can use mdbox for expunged-folder. but would'nt it be more functional to use maildir to have possibility to delete separate mails? when using mdbox the clean up by cron would effect always multiple messages with different ages? Thanks, Hajo

2 1

[Dovecot] 1.0.15 -> 2.x upgrade for mass hosting environment
by lists＠truthisfreedom.org.uk 01 Mar '11

01 Mar '11

Hi all, We're looking at upgrading our current mail platform from 1.0.15 to 2.x to take advantage of the new director functionality. Our main concern is the number of mailboxes involved (circa. 300K) and the rebuilding of the index files, especially as it seems that once you've upgraded, rolling back requires the deletion and recreation of all indices. Has anyone worked on an upgrade like this in the past? If so, do you have any war stories you can share either on or off list? Thanks in advance, Matt

3 5

[Dovecot] systemd socket and service
by Vasiliy G Tolstov 01 Mar '11

01 Mar '11

Hello. I'm use systemd and have some questions: 1) Why dovecot.socket contains only imap ListenStream? [Unit] Description=Dovecot IMAP/POP3 email server activation socket [Socket] #dovecot expects separate IPv4 and IPv6 sockets BindIPv6Only=ipv6-only ListenStream=0.0.0.0:143 ListenStream=[::]:143 ListenStream=0.0.0.0:993 ListenStream=[::]:993 KeepAlive=true 2) Does dovecot.service required to use dovecot lmtp, or it may be stoppped (i not often check my mails via client, but have many incoming mails some time) -- Vasiliy G Tolstov <v.tolstov(a)selfip.ru> Selfip.Ru

3 4

[Dovecot] Forward and keep on snow leopard server
by Jbaileypro 01 Mar '11

01 Mar '11

I am wanting to use a service which has to have a copy of the emails but they still need to be delivered to the users inbox. Which script and where does it need to be placed for this to work? I am not sure which version sls runs dovecot but I know that it also uses spamassasin. If anyone can help that would be great. Thanks, Jonathan -- View this message in context: http://old.nabble.com/Forward-and-keep-on-snow-leopard-server-tp31038917p31… Sent from the Dovecot mailing list archive at Nabble.com.

1 0

[Dovecot] Smart IMAP proxying with imapc storage
by Timo Sirainen 28 Feb '11

28 Feb '11

I just committed a very early initial implementation of "imapc" storage backend to v2.1 hg: http://hg.dovecot.org/dovecot-2.1 You can't really do anything except open INBOX and read mails from it, so it's currently only intended for initial testing. It sucks in many ways right now, but I'll be improving it. The idea is that you could set for example: mail_location = imapc:imap.gmail.com And then Dovecot could act as a proxy to gmail. It won't actually work currently with gmail, because there's no SSL support for outgoing connections. Currently index files are forcibly disabled, but it would be easy to enable them, allowing Dovecot to do caching locally to improve performance. In future perhaps it will also support caching message headers/bodies to avoid unnecessary traffic. Besides the mail_location setting, you'll need to also forward the user's password to imap process in "pass" userdb extra field. How to do that depends on what passdb/userdb you're using. While testing you could simply set a static password: plugin { pass = yourpassword }

6 16

Re: [Dovecot] Problem with ldap / quotas
by Nikolaos Milas 28 Feb '11

28 Feb '11

I forgot to cc the list in my subsequent question in this thread, so that question and Timo's reply has not been included in the mailing list. I am submitting for thread completeness, thanking Timo for his invaluable help. Nick On 22/2/2011 6:23 μμ, Timo Sirainen wrote: > On 22.2.2011, at 18.11, Nikolaos Milas wrote: > >> I added dn and dnpass and now everything appears to be running smoothly. I checked, and the maildirsize file gets updated according to the quota value we set in LDAP. >> >> Can you also please clarify: When the default policy is to offer to users some storage space (say 4G) and some additional for Trash (say 100M), and then we define (over LDAP) a different storage space for a particular user (for example 1M), then: >> >> 1. This user will also "inherit" a 100M Trash from the default policy >> or not (in this example 1+100M)? > Yes. > >> Can we change this (also define >> per user Trash size)? > Yes, you can also have ldap return quota_rule2 to override it. Or instead of a hard coded limit, you could set Trash's size to e.g. 10% of the default limit (quota_rule2 = Trash:storage=10%%) so you don't have to return it from ldap. > >> 2. If we define quota_warning (say 75%), the value will apply to the >> total of (MainStorage + Trash (here 101M)) or to MainStorage only >> (1M)? > MainStorage = 1M. > >> I'm asking because I reduced the storage space to only 50K for a test account (for experimenting), and sent various emails (over smtp) to that mailbox, but I saw no warnings or mailbox locking when the mailbox was over-quota or full. > Locking? You mean it allowed user to exceed quota? mail_debug=yes could log something useful about what's going on.

3 9

[Dovecot] Problems setting up shared/public imap folders
by Andre Tann 28 Feb '11

28 Feb '11

Hello everyone, today I have tried to set up shared and public IMAP folders, but it didn't work. # rpm -qa | grep dovecot dovecot12-backend-mysql-1.2.11-3.3.1.x86_64 dovecot12-backend-sqlite-1.2.11-3.3.1.x86_64 dovecot12-1.2.11-3.3.1.x86_64 dovecot12-backend-pgsql-1.2.11-3.3.1.x86_64 Here is my dovecot.conf [1]. Can anyone explain what is wrong with my configuration? It is not possible to access the shared and public mailboxes. Thunderbird and KMail don't show the shared/public namespace at all. Outlook Express shows these namespaces, but trying to access leads to a "mailbox doesn't exist" error message. Dovecot is not logging any errors. What's wrong? Thanks, Andre [1] # cat /etc/dovecot/dovecot.conf protocols = imap imaps protocol imap { mail_plugins = acl imap_acl } listen = * disable_plaintext_auth = no ssl = no login_greeting = alphatest mailservice ready. mail_location = maildir:~/Maildir namespace private { separator = / prefix = inbox = yes } namespace shared { separator = / prefix = shared/ location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u subscriptions = no } namespace public { separator = / prefix = pub/ location = maildir:/srv/mail/pub subscriptions = no } mail_uid = 1002 mail_gid = 1000 protocol imap { mail_plugin_dir = /usr/lib64/dovecot/modules/imap } protocol pop3 { mail_plugin_dir = /usr/lib64/dovecot/modules/pop3 } protocol managesieve { } protocol lda { mail_plugin_dir = /usr/lib64/dovecot/modules/lda mail_plugins = acl } auth default { mechanisms = plain passdb pam { } userdb passwd { } user = root } dict { } plugin { acl = vfile acl_shared_dict = file:/var/lib/dovecot/shared-mailboxes/%u acl_anyone = allow } -- Andre Tann

1 0

[Dovecot] shared folder
by Eric Broch 28 Feb '11

28 Feb '11

Hello list, I have dovecot-1.2.3 installed on my mail server. I created a shared directory which works fine, however, this shared directory has over 16GB of email and when users, 40 to 50 of them, login to their IMAP account and download of the contents of this shared folder begins on their machines it bogs down the server to a crawl. I had to comment out the share it was so bad. Is there a way to implement permissions on the shared folder and add 1 or 2 users at a time so as not to bog down the server. Eric Broch

3 2

[Dovecot] error - dovecot - child (login) killed with signal 16
by Chris Hoogendyk 28 Feb '11

28 Feb '11

We've been happily running Dovecot in Solaris 10 for about 8 months now. Yesterday, Solaris 10's SMF put it in maintenance mode (shut it down) seemingly out of the blue. The only thing going on was that I had updated the ssl certificate. We had previously been using a self signed cert. Now we have a cert from InCommon. We had a problem with a few users who are still on ancient Eudora and didn't have the proper authority chains. We had a problem with a few Thunderbird users who hadn't set up the fully qualified server name in their configuration. The shutdown was coincident (and could be just a coincidence) to the minute with my boss working with a Windows Thunderbird user to change their configuration. I can't figure out how this happened or why. I don't see how to track it any further than what I have here, and it doesn't make sense that a user issue or process could cause this. The IP, by the way, is our NAT. So no way of telling much from that. From /var/adm/dovecot.log: Feb 24 15:52:57 marlin dovecot: [ID 583609 local2.error] dovecot: child 21233 (login) killed with signal 16 (ip=128.119.55.8) Feb 24 15:52:58 marlin dovecot: [ID 583609 local2.warning] dovecot: Killed with signal 15 (by pid=26750 uid=0 code=kill) Note that the first line is logged as an error. These items from the SMF service log for dovecot: [ Feb 24 15:52:58 Stopping because process received fatal signal from outside the service. ] [ Feb 24 15:52:58 Executing stop method ("/etc/mail/svc/method/dovecot.init.d stop") ] Stopping Dovecot are the source of the signal 15 in the second line of the dovecot log above. So, the presumption is that the signal 16 precipitated SMF to put the service in maintenance mode which lead to the signal 15. Any ideas what went wrong here? How to track it down? How to prevent it from happening again? Doing `svcadm clear dovecot` cleared the maintenance mode and started it up again. No problems since. -- --------------- Chris Hoogendyk - O__ ---- Systems Administrator c/ /'_ --- Biology& Geology Departments (*) \(*) -- 140 Morrill Science Center ~~~~~~~~~~ - University of Massachusetts, Amherst <hoogendyk(a)bio.umass.edu> --------------- Erdös 4

2 1

[Dovecot] Dovequota Mbox - NFS - Quota Does not work
by Il Neofita 28 Feb '11

28 Feb '11

Hi I am not able to get the quota out from dovecot I have tried with thunderbird and roundcube without luck this is my conf # 2.0.beta6 (3156315704ef): /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-71.14.1.el6.x86_64 x86_64 Red Hat Enterprise Linux Server release 6.0 (Santiago) mail_debug = yes mail_location = mbox:~/mail:INBOX=/mail/spool/%u:INDEX=/mail/indexes/%u mbox_write_locks = fcntl passdb { driver = pam } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size quota = fs:INBOX:mount=/mail quota2 = fs:ROOT:mount=/home } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } protocol imap { imap_logout_format = bytes=%i/%o mail_max_userip_connections = 10 mail_plugins = imap_quota quota } What I am doing wrong?

4 8

[Dovecot] Error: Guid Mismatch
by Vicente Falco 28 Feb '11

28 Feb '11

Hello Good morning, I am working with Dovecot 2.9 but when i delete one or several messages if appears in the message log ," imap(v.falco): Error: Mailbox Trash: Expunged GUID mismatch for UID 2: d422593d8bbdc2f4ffaeba0175e2b42e vs 4ecbed318f63e3ab78c1b084e30da7db" Why? Thank you -- Salu2, Vicente Falcó

2 1

[Dovecot] Problem to start Dovecot 2.0.9
by Sandra Weddig 27 Feb '11

27 Feb '11

Hello! I did run Dovecot 1.2 and now would like to run Dovecot 2.0.9 at my server. The server runs a Linux 2.6.37.1-1.2-desktop x86_64 GNU/Linux with OpenSuSE 11.4 RC2. Here is my doveconf -n: # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.37.1-1.2-desktop x86_64 openSUSE 11.4 (x86_64) ext4 auth_mechanisms = cram-md5 listen = * mail_location = maildir:/opt/Mails/maildir/%u/:INBOX=/opt/Mails/imap/%u managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date passdb { args = scheme-cram-md5 /etc/dovecot/cram-md5.pwd driver = passwd } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } When I execute rcdovecot start I get: Starting dovecot Fatal: execv(/usr/bin/doveconf) failed: Permission denied startproc: exit status of parent of /usr/sbin/dovecot: 84 failed but getfacl /usr/bin/doveconf says: # file: doveconf # owner: root # group: root user::rwx group::rwx other::rwx Any idea? -- NEU: FreePhone - kostenlos mobil telefonieren und surfen! Jetzt informieren: http://www.gmx.net/de/go/freephone

3 2

[Dovecot] How do I use a username/password plain text file as authentication backend?
by Angus 26 Feb '11

26 Feb '11

I only have a single user (with multiple mail addresses) and I don't want to expose local users (no pam or /etc/passwd). Using a SQL database seems like overkill to me. So why not just a plain text file? Well, I've read http://wiki2.dovecot.org/PasswordDatabase/Static and related wiki pages, but I just can't find a clear answer. I certainly don't want to allow "any user" or "any password". Dovecot 2.0.9. Any hints for me?

2 2

[Dovecot] mail from root rejected
by rh 25 Feb '11

25 Feb '11

I have dovecot mailserver running well. Everything is fine except that mails from root are rejected (some system processes are sending messages by mail using root as sender). In the logfile i get: Feb 25 10:05:51 Beethoven postfix/qmgr[5228]: 0C7A8652489: from=<root@mydomain>, size=893, nrcpt=1 (queue active) Feb 25 10:05:51 Beethoven postfix/smtp[5662]: 0C7A8652489: to=<hnat@mydomain>, relay=smtp.inode.at[62.99.194.14]:25, delay=0.08, delays=0.04/0/0.02/0.01, dsn=5.0.0, status=bounced (host smtp.inode.at[62.99.194.14] said: 550-Verification failed for <root@mydomain> 550-Unrouteable address 550 Sender verify failed (in reply to MAIL FROM command)) What can i do to have these mails forwarded? Thanks in advanve for yout tips

2 1

[Dovecot] LDAP and GSSAPI problems
by Trever L. Adams 25 Feb '11

25 Feb '11

This is a continuation of a problem I have been having. Samba 4 has recently changed to require binds. I need LDAP to verify users exist. I am using Kerberos (GSSAPI) as the passdb. Samba can handle GSSAPI/Kerberos SASL binds. I have the following in my dovecot-ldap setup for userdb: dn = smtp/mailhost.example.org(a)EXAMPLE.ORG sasl_bind = yes sasl_mech = GSSAPI sasl_realm = EXAMPLE.ORG sasl_authz_id = smtp/mailhost.example.org(a)EXAMPLE.ORG Which gives me the following error. Debug: ldap(trever): user search: base=dc=example,dc=org scope=subtree filter=(&(objectClass=person)(|(mail=trever)(sAMAccountName=trever)(userPrincipalName=trever))) fields=userPrincipalName dovecot: auth: Error: LDAP: binding failed (dn smtp/mailhost.example.org(a)EXAMPLE.ORG) Local error, SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Credentials cache file '/tmp/krb5cc_97' not found) Additionally, I have "auth_krb5_keytab = /etc/dovecot/krb5.keytab" setup for the GSSAPI user login. The credential cache should be that file should it not? If not, how do I go about setting that up so that it will work. Thank you, Trever -- "The only true happiness comes from squandering ourselves for a purpose." -- William Cowper

3 13

[Dovecot] Sendmail and Dovecot deliver (dovecot-lda)
by Giles Coochey 24 Feb '11

24 Feb '11

Hi, I have a Centos 5 system with sendmail running as my MTA. Normally I note from sendmail logs that mails get delivered using the 'local' mailer. I have therefore entered the following into my sendmail.mc file, from an earlier post on this list: define(`LOCAL_MAILER_PATH',`/usr/libexec/dovecot/deliver') define(`LOCAL_MAILER_FLAGS',`DFMPhfnu9') define(`LOCAL_MAILER_ARGS',`deliver -d $u') However, when sendmail tries to use deliver I just get this message: Feb 13 15:37:23 gate sendmail[1399]: p1DEWtc2021995: to=<user(a)example.org>, delay=00:04:28, xdelay=00:00:00, mailer=local, pri=121665, dsn=4.0.0, stat=Deferred: local mailer (/usr/libexec/dovecot/deliver) exited with EX_TEMPFAIL I've tried to get better logging by putting the following in 15-lda.conf in /etc/dovecot/conf.d: protocol lda { postmaster_address = postmaster(a)example.org auth_socket_path = /var/run/dovecot/auth-master mail_plugins = sieve mail_location = maildir:~/.maildir log_path = /var/log/dovecot-deliver.log info_log_path = /var/log/dovecot-deliver.log } I find nothing gets written to the log file, even if I make it a world writable file. Does anyone have any ideas? What are the best steps to get more information troubleshooting? -- Best Regards, Giles Coochey NetSecSpec Ltd NL T-Systems Mobile: +31 681 265 086 NL Mobile: +31 626 508 131 GIB Mobile: +350 5401 6693 Email/MSN/Live Messenger: giles(a)coochey.net Skype: gilescoochey

2 2

[Dovecot] Running dovecot on embedded device?
by Jef Driesen 23 Feb '11

23 Feb '11

Hi, I'm considering buying a QNAP TS-212 NAS and I wonder if this device is powerful enough to run dovecot too (there is a pre-built dovecot package available from QNAP)? The main goal would be that my mail is stored centralized on the NAS, where I can access it from multiple systems without ending up with mail scattered over each system (which is exactly what is happening now due to the fact that my isp offers only POP3). There will only be a few users (e.g. family members), and incomming mail will be fetched from the isp mailbox. The specs of the QNAP TS-212 are: * ARM Marvell Kirkwood 1.2GHz CPU * 256MB DDRII RAM Is this sufficient to run dovecot, and will the performance be acceptable? I'm not expecting something lightning fast, but something that is acceptable. Jef

2 2

[Dovecot] Quotas from LDAP
by Sven Hartge 23 Feb '11

23 Feb '11

Hi all! I have been reading http://wiki2.dovecot.org/Quota/Configuration over and over for the last two days, but something totally escapes my brain right now: How does user_attrs = homeDirectory=home,quotaBytes=quota_rule=*:bytes=%$ get the quota from LDAP into dovecot? What are the LDAP attributes used and what does %$ mean? It is not in the variable list at http://wiki2.dovecot.org/Variables I am feeling very stupid and dense right now, as I am absolutely sure I am missing something very obvious and totally simple. Grüße, Sven. -- Sig lost. Core dumped.

3 10

[Dovecot] http://www.linuxquestions.org/questions/showthread.php?p=4266798#post4266798
by Asiri 23 Feb '11

23 Feb '11

Hi, We set up a new mail server and moved users' "cur,new and tmp" folders only into new mail server from old server.In other words we did not copy and paste dovecot.index,dovecot-uidlist,etc into new server from old server because they were created automatically.After bringing the new server up,users(microsoft office outlook) complained their imap folders are missing.I investigated and found below information; I can see those missing imap folders in old server under 'dovecot-uidlist' as follows; [root@mail ~]# vi /var/vmail/abc.com.au/kerrie/ .Deleted Items/ dovecot.index dovecot.index.cache dovecot.index.log dovecot.index.log.2 dovecot-uidlist .INBOX.Air &- Gas/ .INBOX.Amex/ .INBOX.Caltex Starcard/ .INBOX.Creditors NSW/ .INBOX.Creditors NSW.Statements and Invoices/ .INBOX.Creditors QLD/ .INBOX.Creditors QLD.Invoices and Statements/ .INBOX.Debtors/ .INBOX.Export/ .INBOX.Followmont Transport/ .INBOX.Gameco New Zealand/.Junk E-mail/ But in new server,'dovecot-uidlist' is not containing those folders. [root@mail ~]# vi /var/vmail/abc.com.au/kerrie/Maildir/ cur/ dovecot-uidlist .Sent Items/ .Deleted Items/ .Drafts/ subscriptions dovecot.index .Junk E-mail/ tmp/ dovecot.index.cache new/ .Trash/ dovecot.index.log .Sent/ So I want to have those missing folders which are already in old server in new server too.So users can see their disappeared imap folders again.I saw in dovecot wiki,it is not recommended to edit 'dovecot-uidlist' manually.Please give me a solution.Thank you in advance. -- View this message in context: http://old.nabble.com/http%3A--www.linuxquestions.org-questions-showthread.… Sent from the Dovecot mailing list archive at Nabble.com.

2 1

Re: [Dovecot] Segmentation fault running doveadm import
by Maria Arrea 22 Feb '11

22 Feb '11

I also have a core file (952 k), Timo, may I send it to you off-list? Regards Maria ----- Original Message ----- From: Timo Sirainen Sent: 02/22/11 01:38 PM To: Maria Arrea Subject: Re: [Dovecot] Segmentation fault running doveadm import On Tue, 2011-02-22 at 12:07 +0000, Maria Arrea wrote: > gdb --args doveadm import -u ox101(a)us.es mdbox:/backup/bacula-restores/buzones/mysite/15/b1/ox101/ "" all Look good. > Reading symbols from /usr/bin/doveadm...(no debugging symbols > found)...done. But this doesn't. So: > Program received signal SIGSEGV, Segmentation fault. > 0x00002aaaaaada400 in ?? () > (gdb) bt full > #0 0x00002aaaaaada400 in ?? () > No symbol table info available. > #1 0x0000000000409709 in ?? () > No symbol table info available. > #2 0x0000000000409b37 in doveadm_mail_try_run () > No symbol table info available. > #3 0x000000000040dddc in main () > No symbol table info available. Unfortunately the lack of debug symbols doesn't make this very useful. > No core generated, no relevant log info in /var/log/maillog. What can I do to make a better bug report? Compile Dovecot without stripping out debug symbols (this is the default).

1 0

Re: [Dovecot] Segmentation fault running doveadm import
by Maria Arrea 22 Feb '11

22 Feb '11

Timo, with debug symbols enabled: GNU gdb (GDB) Red Hat Enterprise Linux (7.0.1-32.el5_6.2) Copyright (C) 2009 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-redhat-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from /usr/bin/doveadm...Reading symbols from /usr/lib/debug/usr/bin/doveadm.debug...done. done. (gdb) run Starting program: /usr/bin/doveadm import -u ox101@mysite mdbox:/backup/bacula-restores/buzones/mysite/15/b1/ox101/ '' all [Thread debugging using libthread_db enabled] Executing new program: /usr/bin/doveconf [Thread debugging using libthread_db enabled] Executing new program: /usr/bin/doveadm [Thread debugging using libthread_db enabled] Program received signal SIGSEGV, Segmentation fault. 0x00002aaaab025400 in ?? () (gdb) bt full #0 0x00002aaaab025400 in ?? () No symbol table info available. #1 0x0000000000409709 in doveadm_mail_cmd (cmd=0x637c88, argc=6, argv=0x630390) at doveadm-mail.c:424 service_flags = 130 ctx = 0x63b960 getopt_args = <value optimized out> username = 0x6303cb "ox101@mysite" wildcard_user = 0x0 c = <value optimized out> #2 0x0000000000409b37 in doveadm_mail_try_run (cmd_name=0x6303c1 "import", argc=6, argv=0x630378) at doveadm-mail.c:467 cmd__foreach_end = 0x637d90 cmd = 0x637c88 cmd_name_len = 6 __FUNCTION__ = "doveadm_mail_try_run" #3 0x000000000040dddc in main (argc=6, argv=0x630378) at doveadm.c:344 cmd_name = 0x6303c1 "import" quick_init = false c = <value optimized out> If you need adittional info, please write me, I will try my best Regards Maria

1 0

Re: [Dovecot] Segmentation fault running doveadm import
by Maria Arrea 22 Feb '11

22 Feb '11

I have followed the instructions about bug reports /generating cores located at http://dovecot.org/bugreport.html . You should consider adding additional info for cores & Red Hat Systems to your wiki, this link was very informative: http://www.akadia.com/services/ora_enable_core.html As user "entrega": -bash-3.2$ ulimit -c unlimited In /etc/init.d/dovecot I have added "ulimit -c unlimited" at the beginning of the script In /etc/dovecot/dovecot.conf I have added mail_debug=yes *gdb --args doveadm import -u ox101(a)us.es mdbox:/backup/bacula-restores/buzones/mysite/15/b1/ox101/ "" all* gdb --args doveadm import -u ox101(a)us.es mdbox:/backup/bacula-restores/buzones/mysite/15/b1/ox101/ "" all GNU gdb (GDB) Red Hat Enterprise Linux (7.0.1-32.el5_6.2) Copyright (C) 2009 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-redhat-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from /usr/bin/doveadm...(no debugging symbols found)...done. (gdb) run Starting program: /usr/bin/doveadm import -u ox101(a)us.es mdbox:/backup/bacula-restores/buzones/mysite/15/b1/ox101/ '' all warning: no loadable sections found in added symbol-file system-supplied DSO at 0x2aaaaaaab000 [Thread debugging using libthread_db enabled] Executing new program: /usr/bin/doveconf [Thread debugging using libthread_db enabled] Executing new program: /usr/bin/doveadm [Thread debugging using libthread_db enabled] Program received signal SIGSEGV, Segmentation fault. 0x00002aaaaaada400 in ?? () (gdb) bt full #0 0x00002aaaaaada400 in ?? () No symbol table info available. #1 0x0000000000409709 in ?? () No symbol table info available. #2 0x0000000000409b37 in doveadm_mail_try_run () No symbol table info available. #3 0x000000000040dddc in main () No symbol table info available. No core generated, no relevant log info in /var/log/maillog. What can I do to make a better bug report? Regards Maria ----- Original Message ----- From: Timo Sirainen Sent: 02/22/11 09:35 AM To: Maria Arrea Subject: Re: [Dovecot] Segmentation fault running doveadm import On Tue, 2011-02-22 at 06:58 +0000, Maria Arrea wrote: > Some more info: I am running dovecot 2.0.9 on Red Hat Enterprise Linux 5 > > Another question I would like to ask: I run the command doveadm > import as "entrega" user (see dovecot -n output in my previous mail ). > If I run the command as root also segfaults, and garbage is restored > (mails with binary data). If I run as "entrega" segfaults, but e-mails > are correctly restored Could you get gdb backtrace of the doveadm crash? For example: gdb --args doveadm import ...etc.. run bt full

2 1

[Dovecot] Rejected mails
by sunhux G 22 Feb '11

22 Feb '11

I'm getting closer, now with SMTP permitted to whole of Internet to connect to my SMTP/postfix server & for my postfix server to connect out to public Internet on tcp 25 as well. I send emails from permitted domain's SMTP servers with "Receipt Acknowledgemt" & the ack returned said it was delivered but somehow there's no mail in the mailbox & using the site below to test, it gave Rejected : http://legacy.zoneedit.com/whois.html OK, connected to gate1.mds.com.sg... < 220 gate1.mds.com.sg ESMTP > HELO edit.dnsvr.com < 250 gate1.mds.com.sg > MAIL FROM:<sender_id(a)mds.com.sg> < 250 sender <sender_id(a)mds.com.sg> ok > RCPT TO:<recipient_id(a)myportaltech.com> < 550 #5.1.0 Address rejected. The recipient_id is basically a Linux OS id in my SMTP server. Would this work or I'll need to have virtual domain ids ? =================== latest maillog ====================== Feb 21 16:36:34 hostname postfix/smtpd[1372]: input attribute value: 0 Feb 21 16:36:34 hostname postfix/smtpd[1372]: private/rewrite socket: wanted attribute: transport Feb 21 16:36:34 hostname postfix/smtpd[1372]: input attribute name: transport Feb 21 16:36:34 hostname postfix/smtpd[1372]: input attribute value: relay Feb 21 16:36:34 hostname postfix/smtpd[1372]: private/rewrite socket: wanted attribute: nexthop Feb 21 16:36:34 hostname postfix/smtpd[1372]: input attribute name: nexthop Feb 21 16:36:34 hostname postfix/smtpd[1372]: input attribute value: myportaltech.com Feb 21 16:36:34 hostname postfix/smtpd[1372]: private/rewrite socket: wanted attribute: recipient Feb 21 16:36:34 hostname postfix/smtpd[1372]: input attribute name: recipient Feb 21 16:36:34 hostname postfix/smtpd[1372]: input attribute value: root(a)myportaltech.com Feb 21 16:36:34 hostname postfix/smtpd[1372]: private/rewrite socket: wanted attribute: flags Feb 21 16:36:34 hostname postfix/smtpd[1372]: input attribute name: flags Feb 21 16:36:34 hostname postfix/smtpd[1372]: input attribute value: 2048 Feb 21 16:36:34 hostname postfix/smtpd[1372]: private/rewrite socket: wanted attribute: (list terminator) Feb 21 16:36:34 hostname postfix/smtpd[1372]: input attribute name: (end) Feb 21 16:36:34 hostname postfix/smtpd[1372]: resolve_clnt: `' -> `root(a)myportaltech.com' -> transp=`relay' host=`myportaltech.com' rcpt=`root(a)myportaltech.com' flags= class=relay Feb 21 16:36:34 hostname postfix/smtpd[1372]: ctable_locate: install entry key root(a)myportaltech.com Feb 21 16:36:34 hostname postfix/smtpd[1372]: extract_addr: in: <root(a)myportaltech.com>, result: root(a)myportaltech.com Feb 21 16:36:34 hostname postfix/smtpd[1372]: >>> START Recipient address RESTRICTIONS <<< Feb 21 16:36:34 hostname postfix/smtpd[1372]: generic_checks: name=reject_invalid_hostname Feb 21 16:36:34 hostname postfix/smtpd[1372]: reject_invalid_hostname: gate1.mds.com.sg Feb 21 16:36:34 hostname postfix/smtpd[1372]: generic_checks: name=reject_invalid_hostname status=0 Feb 21 16:36:34 hostname postfix/smtpd[1372]: generic_checks: name=reject_unauth_pipelining Feb 21 16:36:34 hostname postfix/smtpd[1372]: reject_unauth_pipelining: RCPT Feb 21 16:36:34 hostname postfix/smtpd[1372]: generic_checks: name=reject_unauth_pipelining status=0 Feb 21 16:36:34 hostname postfix/smtpd[1372]: generic_checks: name=permit_mynetworks Feb 21 16:36:34 hostname postfix/smtpd[1372]: permit_mynetworks: gate1.mds.com.sg 203.126.130.157 Feb 21 16:36:34 hostname postfix/smtpd[1372]: match_hostname: gate1.mds.com.sg ~? 172.18.20.0/24 Feb 21 16:36:34 hostname postfix/smtpd[1372]: match_hostaddr: 203.126.130.157 ~? 172.18.20.0/24 Feb 21 16:36:34 hostname postfix/smtpd[1372]: match_hostname: gate1.mds.com.sg ~? 127.0.0.0/8 Feb 21 16:36:34 hostname postfix/smtpd[1372]: match_hostaddr: 203.126.130.157 ~? 127.0.0.0/8 Feb 21 16:36:34 hostname postfix/smtpd[1372]: match_hostname: gate1.mds.com.sg ~? 202.6.163.0/24 Feb 21 16:36:34 hostname postfix/smtpd[1372]: match_hostaddr: 203.126.130.157 ~? 202.6.163.0/24 Feb 21 16:36:34 hostname postfix/smtpd[1372]: match_list_match: gate1.mds.com.sg: no match Feb 21 16:36:34 hostname postfix/smtpd[1372]: match_list_match: 203.126.130.157: no match Feb 21 16:36:34 hostname postfix/smtpd[1372]: generic_checks: name=permit_mynetworks status=0 Feb 21 16:36:34 hostname postfix/smtpd[1372]: generic_checks: name=permit_sasl_authenticated Feb 21 16:36:34 hostname postfix/smtpd[1372]: generic_checks: name=permit_sasl_authenticated status=0 Feb 21 16:36:34 hostname postfix/smtpd[1372]: generic_checks: name=reject_unauth_destination Feb 21 16:36:34 hostname postfix/smtpd[1372]: reject_unauth_destination: root(a)myportaltech.com Feb 21 16:36:34 hostname postfix/smtpd[1372]: permit_auth_destination: root(a)myportaltech.com Feb 21 16:36:34 hostname postfix/smtpd[1372]: ctable_locate: leave existing entry key root(a)myportaltech.com Feb 21 16:36:34 hostname postfix/smtpd[1372]: generic_checks: name=reject_unauth_destination status=0 Feb 21 16:36:34 hostname postfix/smtpd[1372]: generic_checks: name=check_client_access Feb 21 16:36:34 hostname postfix/smtpd[1372]: check_namadr_access: name gate1.mds.com.sg addr 203.126.130.157 Feb 21 16:36:34 hostname postfix/smtpd[1372]: check_domain_access: gate1.mds.com.sg Feb 21 16:36:34 hostname postfix/smtpd[1372]: check_table_result: hash:/etc/postfix/rbl_override OK gate1.mds.com.sg Feb 21 16:36:34 hostname postfix/smtpd[1372]: generic_checks: name=check_client_access status=1 Feb 21 16:36:34 hostname postfix/smtpd[1372]: >>> CHECKING RECIPIENT MAPS <<< Feb 21 16:36:34 hostname postfix/smtpd[1372]: ctable_locate: leave existing entry key root(a)myportaltech.com Feb 21 16:36:34 hostname postfix/smtpd[1372]: maps_find: recipient_canonical_maps: root(a)myportaltech.com: not found Feb 21 16:36:34 hostname postfix/smtpd[1372]: maps_find: recipient_canonical_maps: root: not found Feb 21 16:36:34 hostname postfix/smtpd[1372]: maps_find: recipient_canonical_maps: @myportaltech.com: not found Feb 21 16:36:34 hostname postfix/smtpd[1372]: mail_addr_find: root(a)myportaltech.com -> (not found) Feb 21 16:36:34 hostname postfix/smtpd[1372]: maps_find: canonical_maps: root(a)myportaltech.com: not found Feb 21 16:36:34 hostname postfix/smtpd[1372]: maps_find: canonical_maps: root: not found Feb 21 16:36:34 hostname postfix/smtpd[1372]: maps_find: canonical_maps: @myportaltech.com: not found Feb 21 16:36:34 hostname postfix/smtpd[1372]: mail_addr_find: root(a)myportaltech.com -> (not found) Feb 21 16:36:34 hostname postfix/smtpd[1372]: maps_find: virtual_alias_maps: root(a)myportaltech.com: not found Feb 21 16:36:34 hostname postfix/smtpd[1372]: maps_find: virtual_alias_maps: root: not found Feb 21 16:36:34 hostname postfix/smtpd[1372]: maps_find: virtual_alias_maps: @myportaltech.com: not found Feb 21 16:36:34 hostname postfix/smtpd[1372]: mail_addr_find: root(a)myportaltech.com -> (not found) Feb 21 16:36:34 hostname postfix/smtpd[1372]: > gate1.mds.com.sg[203.126.130.157]: 250 2.1.5 Ok Feb 21 16:36:34 hostname postfix/smtpd[1372]: watchdog_pat: 0x80babe8 Feb 21 16:36:34 hostname postfix/smtpd[1372]: < gate1.mds.com.sg[203.126.130.157]: DATA Feb 21 16:36:34 hostname postfix/smtpd[1372]: > gate1.mds.com.sg[203.126.130.157]: 354 End data with <CR><LF>.<CR><LF> Feb 21 16:36:34 hostname postfix/cleanup[1379]: 8B35C200060: message-id=<B4D798BD8BA6A140B26EF75C1012558D17536A(a)SGMBX02.mds.corp.int-ads> Feb 21 16:36:34 hostname postfix/qmgr[802]: 8B35C200060: from=<prvs=0266a3f4f=pitong(a)mds.com.sg>, size=1895, nrcpt=2 (queue active) Feb 21 16:36:34 hostname postfix/smtpd[1372]: public/cleanup socket: wanted attribute: status Feb 21 16:36:34 hostname postfix/smtpd[1372]: input attribute name: status Feb 21 16:36:34 hostname postfix/smtpd[1372]: input attribute value: 0 Feb 21 16:36:34 hostname postfix/smtpd[1372]: public/cleanup socket: wanted attribute: reason Feb 21 16:36:34 hostname postfix/smtpd[1372]: input attribute name: reason Feb 21 16:36:34 hostname postfix/smtpd[1372]: input attribute value: (end) Feb 21 16:36:34 hostname postfix/smtpd[1372]: public/cleanup socket: wanted attribute: (list terminator) Feb 21 16:36:34 hostname postfix/smtpd[1372]: input attribute name: (end) Feb 21 16:36:34 hostname postfix/smtpd[1372]: > gate1.mds.com.sg[203.126.130.157]: 250 2.0.0 Ok: queued as 8B35C200060 Feb 21 16:36:34 hostname postfix/smtpd[1372]: watchdog_pat: 0x80babe8 Feb 21 16:36:39 hostname postfix/smtpd[1372]: < gate1.mds.com.sg[203.126.130.157]: QUIT Feb 21 16:36:39 hostname postfix/smtpd[1372]: > gate1.mds.com.sg[203.126.130.157]: 221 2.0.0 Bye Feb 21 16:36:39 hostname postfix/smtpd[1372]: match_hostname: gate1.mds.com.sg ~? 172.18.20.0/24 Feb 21 16:36:39 hostname postfix/smtpd[1372]: match_hostaddr: 203.126.130.157 ~? 172.18.20.0/24 Feb 21 16:36:39 hostname postfix/smtpd[1372]: match_hostname: gate1.mds.com.sg ~? 127.0.0.0/8 Feb 21 16:36:39 hostname postfix/smtpd[1372]: match_hostaddr: 203.126.130.157 ~? 127.0.0.0/8 Feb 21 16:36:39 hostname postfix/smtpd[1372]: match_hostname: gate1.mds.com.sg ~? 202.6.163.0/24 Feb 21 16:36:39 hostname postfix/smtpd[1372]: match_hostaddr: 203.126.130.157 ~? 202.6.163.0/24 Feb 21 16:36:39 hostname postfix/smtpd[1372]: match_list_match: gate1.mds.com.sg: no match Feb 21 16:36:39 hostname postfix/smtpd[1372]: match_list_match: 203.126.130.157: no match Feb 21 16:36:39 hostname postfix/smtpd[1372]: send attr request = disconnect Feb 21 16:36:39 hostname postfix/smtpd[1372]: send attr ident = smtp:203.126.130.157 Feb 21 16:36:39 hostname postfix/smtpd[1372]: private/anvil: wanted attribute: status Feb 21 16:36:39 hostname postfix/smtpd[1372]: input attribute name: status Feb 21 16:36:39 hostname postfix/smtpd[1372]: input attribute value: 0 Feb 21 16:36:39 hostname postfix/smtpd[1372]: private/anvil: wanted attribute: (list terminator) Feb 21 16:36:39 hostname postfix/smtpd[1372]: input attribute name: (end) Feb 21 16:36:39 hostname postfix/smtpd[1372]: disconnect from gate1.mds.com.sg[203.126.130.157] Feb 21 16:37:04 hostname postfix/smtp[1381]: connect to smtp.myportaltech.com[202.6.163.31]:25: Connection timed out Feb 21 16:37:04 hostname postfix/smtp[1381]: 8B35C200060: to=<pitong(a)myportaltech.com>, relay=none, delay=30, delays=0.1/0.01/30/0, dsn=4.4.1, status=deferred (connect to smtp.myportaltech.com[202.6.163.31]:25: Connection timed out) Feb 21 16:37:04 hostname postfix/smtp[1381]: 8B35C200060: to=<root(a)myportaltech.com>, relay=none, delay=30, delays=0.1/0.01/30/0, dsn=4.4.1, status=deferred (connect to smtp.myportaltech.com[202.6.163.31]:25: Connection timed out) root@hostname:/var/log [root@hostname log]# # postconf -n alias_database = hash:/etc/postfix/aliases alias_maps = hash:/etc/postfix/aliases bounce_size_limit = 65536 command_directory = /usr/sbin config_directory = /etc/postfix daemon_directory = /usr/libexec/postfix data_directory = /var/lib/postfix debug_peer_level = 2 debug_peer_list = ncs.com.sg default_privs = nobody header_size_limit = 32768 html_directory = /usr/share/doc/postfix-2.5.6-documentation/html inet_interfaces = all mail_owner = postfix mail_spool_directory = /pop3/spool/mail mailq_path = /usr/bin/mailq.postfix manpage_directory = /usr/share/man message_size_limit = 51200000 mydomain = portalcity-tech.com myhostname = nspplss2 mynetworks = 172.18.20.0/24, 127.0.0.0/8, 202.6.163.0/24 # the 172.18.20.0 is the private subnet of my postfix server & 202.6.163.0 is the public subnet myorigin = $mydomain newaliases_path = /usr/bin/newaliases.postfix queue_directory = /pop3/spool/postfix readme_directory = /usr/share/doc/postfix-2.5.6-documentation/readme relay_domains = portalcity-tech.com sample_directory = /etc/postfix sendmail_path = /usr/sbin/sendmail.postfix setgid_group = postdrop smtpd_banner = $myhostname ESMTP POSTFIX smtpd_recipient_limit = 500 smtpd_recipient_restrictions = reject_invalid_hostname, reject_unauth_pipelining, permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination, check_client_access hash:/etc/postfix/rbl_override, reject_rbl_client multi.uribl.com, reject_rbl_client dsn.rfc-ignorant.org, reject_rbl_client dul.dnsbl.sorbs.net, reject_rbl_client list.dsbl.org, reject_rbl_client sbl-xbl.spamhaus.org, reject_rbl_client bl.spamcop.net, reject_rbl_client dnsbl.sorbs.net, reject_rbl_client cbl.abuseat.org, reject_rbl_client ix.dnsbl.manitu.net, reject_rbl_client combined.rbl.msrbl.net, reject_rbl_client rabl.nuclearelephant.com, permit smtpd_sasl_auth_enable = yes smtpd_sasl_security_options = noanonymous smtpd_timeout = 360 soft_bounce = no unknown_local_recipient_reject_code = 550 > +++++++++++++ older version of postfinger +++++++++++++++ > # ./postfinger.sh --nowarn > postfinger - postfix configuration on Thu Feb 17 10:12:16 SGT 2011 > version: 1.30 > --System Parameters-- > mail_version = 2.5.6 > hostname = xxxxxxxx > uname = Linux xxxxxxxx 2.6.12.6-xen0 #1 Tue Jan 31 16:03:21 GMT 2006 i686 > i686 i386 GNU/Linux > --Packaging information-- > looks like this postfix comes from RPM package: postfix-2.5.6-1.rhel4 > --main.cf non-default parameters-- > alias_database = hash:/etc/postfix/aliases > alias_maps = hash:/etc/postfix/aliases > html_directory = /usr/share/doc/postfix-2.5.6-documentation/html > mailq_path = /usr/bin/mailq.postfix > mail_spool_directory = /pop3/spool/mail > manpage_directory = /usr/share/man > mydomain = portalcity-tech.com > myhostname = smtp.portalcity-tech.com > myorigin = $mydomain > newaliases_path = /usr/bin/newaliases.postfix > queue_directory = /pop3/spool/postfix > readme_directory = /usr/share/doc/postfix-2.5.6-documentation/readme > sendmail_path = /usr/sbin/sendmail.postfix > smtpd_sasl_auth_enable = yes

3 7

[Dovecot] Sharing mails with other users without copying data
by Ernesto Revilla Derksen 22 Feb '11

22 Feb '11

Hello. We would like to share mails without copying the data to another mailbox. The problem is that we use exim4 for delivery and maildir++ format. Would it be feasible to create a symlink or hardlink using the COPY or COPYlike (extension) command? Regards. Erny Ernesto Revilla Yaco Sistemas +34 954 500 057

2 1

[Dovecot] [Q] A mix-up between /%d/%u/ and /%d/%n for virtual users
by J4K 22 Feb '11

22 Feb '11

Hi there, I have noticed I misconfigured a dovect 1.2.n server with virtual email. Mistakingly, I used /%d/%u/ for mail_location, but /%d/%n userdb: mail_location: maildir:/var/vmail/%d/%u/ userdb: driver: static args: uid=5000 gid=5000 home=/var/vmail/%d/%n allow_all_users=yes As a result I have maildirs being created for both (e.g): /var/vmail/bigdomain.com/dirk(a)bigdomain.com /var/vmail/bigdomain.com/dirk The actual email is placed in /var/vmail/bigdomain.com/dirk(a)bigdomain.com, which I am happy with. I would liek to tidy up the configuration so that these extra maildirs are not created, without breaking everything. Would someone recommend what the best steps are? (other than reinstalling and starting from scratch - Its in production). Best regards, S. ----------------------------------------------------------- Full dovecot -n is here: # dovecot -n # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-cgmemcap-smack x86_64 Debian 6.0 ext4 log_timestamp: %Y-%m-%d %H:%M:%S listen: 127.0.0.1:3993 ssl_listen: *:993 ssl: required ssl_ca_file: /etc/ssl/certs/startcomIntermediateCA.pem ssl_cert_file: /etc/ssl/private/bigdomain.com.ssl.crt ssl_key_file: /etc/ssl/private/bigdomain.com.nopassphase_ssl.key login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login login_processes_count: 9 login_max_processes_count: 512 valid_chroot_dirs: /var/vmail mail_max_userip_connections: 40 first_valid_uid: 106 mail_privileged_group: mail mail_location: maildir:/var/vmail/%d/%u/ maildir_very_dirty_syncs: yes mbox_write_locks: fcntl dotlock mail_plugins: quota lda: log_path: auth_socket_path: /var/run/dovecot/auth-master postmaster_address: postmaster(a)bigdomain.com mail_plugins: sieve quota sieve_global_path: /var/vmail/globalsieverc auth default: mechanisms: plain login verbose: yes passdb: driver: sql args: /etc/dovecot/dovecot-mysql.conf userdb: driver: static args: uid=5000 gid=5000 home=/var/vmail/%d/%n allow_all_users=yes userdb: driver: sql args: /etc/dovecot/dovecot-mysql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail plugin: quota_rule: *:storage=262144:messages=20000 quota_rule2: Trash:storage=282144:messages=23000 dict: quotadict: mysql:/etc/dovecot/dovecot-dict-quota.conf

2 3

[Dovecot] need help with public namespaces
by Pierfrancesco Caci 22 Feb '11

22 Feb '11

Hello, I need some guidance with setting up a public namespace with per-user \Seen flags. What I want to do is that a group of users access the public namespaces and if user A reads a message, user B should still see it as new until he reads it himself. This is not happening now, and I can't figure out why. Here's the config: # 1.2.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-28-server x86_64 Ubuntu 10.04.2 LTS ext3 log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps managesieve listen(default): * listen(imap): * listen(managesieve): localhost:2000 ssl_cert_file: /etc/apache2/ssl/cert.pem ssl_key_file: /etc/apache2/ssl/key.pem login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login mail_privileged_group: mail mail_location: maildir:/var/mail/vhosts/%d/%n mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve namespace: type: private separator: . inbox: yes list: yes subscriptions: yes namespace: type: public separator: . prefix: Public. location: maildir:/var/mail/vhosts/%d/public:INDEX=~/Maildir/public list: yes lda: postmaster_address: root(a)macchianera.noc.seabone.net mail_plugins: sieve auth default: mechanisms: plain LOGIN CRAM-MD5 passdb: driver: passwd-file args: username_format=%n /var/mail/vhosts/%d/shadow userdb: driver: passwd userdb: driver: passwd-file args: username_format=%n /var/mail/vhosts/%d/passwd socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail group: vmail plugin: acl: vfile sieve: ~/.dovecot.sieve sieve_dir: ~/sieve Here's what's under public: . ├── .BGPnagger │ ├── cur │ │ ├── 1298024872.M553584P13355.macchianera,S=11940,W=12297:2,S │ │ ├── 1298024874.M298175P13355.macchianera,S=12139,W=12499:2,S │ │ └── 1298028068.M644262P12557.macchianera,S=9494,W=9767:2, │ ├── dovecot-uidlist │ ├── dovecot.index │ ├── dovecot.index.cache │ ├── dovecot.index.log │ ├── dovecot.shared │ ├── maildirfolder │ ├── new │ └── tmp ├── .Drafts │ ├── cur │ ├── dovecot-uidlist │ ├── dovecot.index.log │ ├── dovecot.shared │ ├── maildirfolder │ ├── new │ └── tmp ├── .INBOX │ ├── cur │ │ ├── 1298020672.M608242P31581.macchianera,S=297295,W=301283:2,S │ │ ├── 1298021330.M553672P7078.macchianera,S=3048,W=3099:2,S │ │ ├── 1298021331.M217403P7080.macchianera,S=21357,W=21799:2,S │ │ ├── 1298024942.M601269P13353.macchianera,S=1796,W=1842:2,S │ │ ├── 1298024944.M986717P13353.macchianera,S=2010,W=2060:2,S │ │ ├── 1298024946.M545669P13353.macchianera,S=4413,W=4515:2,S │ │ ├── 1298024947.M661693P13353.macchianera,S=17014,W=17392:2,RS │ │ ├── 1298024957.M278853P13355.macchianera,S=20307,W=20745:2,RS │ │ ├── 1298024958.M880860P13353.macchianera,S=15984,W=16381:2,RS │ │ ├── 1298024959.M863311P13353.macchianera,S=21086,W=21669:2,RS │ │ ├── 1298024960.M810244P13353.macchianera,S=18418,W=18679:2,S [big snip] │ │ └── 1298025182.M75551P15902.macchianera,S=15150,W=15524:2,S │ ├── dovecot-keywords │ ├── dovecot-uidlist │ ├── dovecot.index │ ├── dovecot.index.cache │ ├── dovecot.index.log │ ├── dovecot.index.log.2 │ ├── dovecot.shared │ ├── maildirfolder │ ├── new │ └── tmp ├── .IPv6 │ ├── cur │ │ ├── 1298024950.M898272P13348.macchianera,S=13861,W=14055:2,S │ │ ├── 1298024951.M667551P13348.macchianera,S=4032,W=4131:2,S │ │ └── 1298024952.M391892P13348.macchianera,S=5806,W=5953:2,S │ ├── dovecot-uidlist │ ├── dovecot.index.cache │ ├── dovecot.index.log │ ├── dovecot.shared │ ├── maildirfolder │ ├── new │ └── tmp ├── .Sent │ ├── cur │ │ ├── 1298024950.M12138P13355.macchianera,S=759,W=782:2,S │ │ ├── 1298026758.M334491P28929.macchianera,S=744,W=766:2,S │ │ └── 1298026946.M406107P28929.macchianera,S=744,W=765:2,S │ ├── dovecot-uidlist │ ├── dovecot.index.cache │ ├── dovecot.index.log │ ├── dovecot.shared │ ├── maildirfolder │ ├── new │ └── tmp ├── .Templates │ ├── cur │ ├── dovecot-uidlist │ ├── dovecot.index.log │ ├── dovecot.shared │ ├── maildirfolder │ ├── new │ └── tmp ├── .abuse │ ├── cur │ │ ├── 1298024954.M370551P13355.macchianera,S=16426,W=16772:2,S │ │ ├── 1298024955.M521166P13353.macchianera,S=7563,W=7675:2, │ │ └── 1298024956.M364817P13353.macchianera,S=7408,W=7524:2,S │ ├── dovecot-uidlist │ ├── dovecot.index │ ├── dovecot.index.cache │ ├── dovecot.index.log │ ├── dovecot.shared │ ├── maildirfolder │ ├── new │ └── tmp [some more folders snipped] ├── .root.prefixlists │ ├── cur │ │ ├── 1297754520.M277941P8395.macchianera,W=5249,S=5145:2,S │ │ ├── 1297842546.M981234P15941.macchianera,W=5228,S=5125:2,S │ │ ├── 1297917433.M507497P14667.macchianera,S=5266,W=5372:2,S │ │ ├── 1298003847.M913458P26002.macchianera,S=5170,W=5274:2,S │ │ ├── 1298021338.M700495P7100.macchianera,S=6693,W=6821:2,S │ │ ├── 1298021480.M734859P9130.macchianera,S=6834,W=6965:2,S │ │ ├── 1298021651.M730627P11234.macchianera,S=6751,W=6878:2,S │ │ ├── 1298021773.M830137P13160.macchianera,S=6798,W=6926:2,S │ │ ├── 1298021857.M941464P14513.macchianera,S=6751,W=6878:2,S │ │ ├── 1298022191.M677553P17741.macchianera,S=6693,W=6821:2,S │ │ └── 1298022197.M717042P17782.macchianera,S=6693,W=6821:2,S │ ├── dovecot-uidlist │ ├── dovecot.index.cache │ ├── dovecot.index.log │ ├── dovecot.shared │ ├── maildirfolder │ ├── new │ └── tmp ├── cur ├── dovecot-uidlist ├── dovecot-uidvalidity ├── dovecot-uidvalidity.4d4a700c ├── dovecot.index.cache ├── dovecot.index.log ├── dovecot.shared ├── maildirfolder ├── new └── tmp 55 directories, 727 files And here's a sample user directory structure: . ├── .INBOX.Drafts │ ├── cur │ ├── dovecot-uidlist │ ├── dovecot.index.log │ ├── maildirfolder │ ├── new │ └── tmp ├── .INBOX.Sent │ ├── cur │ │ ├── 1297171129.M796460P17798.macchianera,S=344,W=360:2,S │ │ ├── 1297178125.M270185P23200.macchianera,S=533,W=554:2,S │ │ └── 1297178163.M715673P23855.macchianera,S=759,W=785:2,S │ ├── dovecot-uidlist │ ├── dovecot.index.cache │ ├── dovecot.index.log │ ├── maildirfolder │ ├── new │ └── tmp ├── .INBOX.Trash │ ├── cur │ ├── dovecot-uidlist │ ├── dovecot.index.log │ ├── maildirfolder │ ├── new │ └── tmp ├── .Trash │ ├── cur │ ├── dovecot-keywords │ ├── dovecot-uidlist │ ├── dovecot.index │ ├── dovecot.index.cache │ ├── dovecot.index.log │ ├── maildirfolder │ ├── new │ └── tmp ├── .dovecot.sieve -> sieve/phpscript.sieve ├── .dovecot.svbin ├── .test │ ├── cur │ │ ├── 1296833774.M22745P22378.macchianera,S=874,W=892:2,S │ │ └── 1297068943.M253574P19054.macchianera,S=899,W=919:2,S │ ├── dovecot-uidlist │ ├── dovecot.index.cache │ ├── dovecot.index.log │ ├── maildirfolder │ ├── new │ └── tmp ├── Maildir │ └── public │ ├── .BGPnagger │ │ └── dovecot.index.log │ ├── .Drafts │ │ └── dovecot.index.log │ ├── .INBOX │ │ └── dovecot.index.log │ ├── .IPv6 │ │ └── dovecot.index.log │ ├── .Sent │ │ └── dovecot.index.log │ ├── .Templates │ │ └── dovecot.index.log │ ├── .abuse │ │ └── dovecot.index.log │ ├── .amsix │ │ └── dovecot.index.log │ ├── .decix │ │ └── dovecot.index.log │ ├── .equinix │ │ └── dovecot.index.log │ ├── .linx │ │ └── dovecot.index.log │ ├── .root │ │ └── dovecot.index.log │ ├── .root.prefixlists │ │ └── dovecot.index.log │ └── dovecot.index.log ├── cur │ ├── 1296833143.M751824P17068.macchianera,S=915,W=937:2,S │ └── 1296833618.M159703P20791.macchianera,S=876,W=895:2,S ├── dovecot-keywords ├── dovecot-uidlist ├── dovecot-uidvalidity ├── dovecot-uidvalidity.4d495476 ├── dovecot.index.cache ├── dovecot.index.log ├── new ├── sieve │ ├── phpscript.sieve │ └── tmp ├── subscriptions └── tmp The Public namespace gets populated by reading a mailbox on a different imap server with fetchmail, with a special username. A sieve rules moves all messages that would go into this user's INBOX to Public.INBOX (and some more filters for the other subfolders). What am I doing wrong here ? Thanks Pf -- ------------------------------------------------------------------------------- Pierfrancesco Caci - Telecom Italia Sparkle - AS6762 Seabone IP Backbone 2nd level support group: tech(a)seabone.net - +39 06 5274 4944 (fax: 4610) direct: p.caci(a)seabone.net - +39 055 5082 441 View other contact info at http://www.seabone.net/contacts/

2 2

[Dovecot] imap-login ESTABLISHED client sessions not timed out by server
by J4K 22 Feb '11

22 Feb '11

Good morning everyone, I noticed some mobile client connections that I know should have timed out at least 20 mins ago, yet these are still there. The device in question lost its 3G connection and never re-established it. I know, because in this case it was my 'phone ;) Why should the imap-login keep the copnnection in in EST, when it was dropped ages ago. I imagine that the mobile client did not correctly close down the session, but it should have timed out on the server. Any ideas? Has anyone noticed this afore? imap-logi 7819 dovecot 10u IPv4 24069447 0t0 TCP logout.klunky.co.uk:imaps->m83-178-105-240.cust.tele2.nl:39042 (ESTABLISHED) imap-logi 7820 dovecot 10u IPv4 24069443 0t0 TCP logout.klunky.co.uk:imaps->m83-178-105-240.cust.tele2.nl:52696 (ESTABLISHED) imap-logi 7821 dovecot 10u IPv4 24069536 0t0 TCP logout.klunky.co.uk:imaps->m83-178-105-240.cust.tele2.nl:55341 (ESTABLISHED) imap-logi 7822 dovecot 10u IPv4 24069464 0t0 TCP logout.klunky.co.uk:imaps->m83-178-105-240.cust.tele2.nl:44647 (ESTABLISHED) Linux fred 2.6.32-cgmemcap-smack #1 SMP Tue Dec 28 14:28:18 CET 2010 x86_64 GNU/Linux Debian Squeeze. Dovecot 1.2.15-4 Best regards, s

2 2

[Dovecot] passwd userbase and multiple email adresses
by spamvoll＠googlemail.com 22 Feb '11

22 Feb '11

Hi.. i want to use a passwd file for user configuration.. but how can i add emailadresses(multiple) to those users ? postfix -> dovecot passwd looks like: test:{PLAIN}pass there must be some kind of userdb right ? But i cant find any infos about that on the wiki Hans

2 2

[Dovecot] Problem with ldap / quotas
by Nikolaos Milas 22 Feb '11

22 Feb '11

Hi, I am trying to enable per user quotas, but I get the following error: Feb 18 23:59:20 vmail dovecot: auth(default): ldap(tester,10.10.100.150): ldap_search((uid=tester)) failed: No such object It seems as if ldapsearch for username/password won't work with my new settings, but I can't find why. I run Dovecot v1.2.11 on CentOS 5.5. I changed my working dovecot.conf (see later) with the following changes (I used the roomNumber attribute to store the quota value): 1. Added in main part: mail_uid = 500 mail_gid = 500 2. Changed userdb with: userdb ldap { args = /etc/dovecot-usrdb-ldap.conf } and /etc/dovecot-usrdb-ldap.conf is: hosts = localhost tls = no base = ou=people, dc=example, dc=com scope = subtree ldap_version = 3 auth_bind = yes user_filter = (uid=%u) pass_filter = (uid=%u) pass_attrs = uid=user,userPassword=password auth_bind_userdn = uid=%u,ou=people,dc=example,dc=com user_attrs = roomNumber=quota_rule=*:bytes=%$,uid=home=/home/vmail/%u 3. Changed passdb with passdb ldap { args = /etc/dovecot-passdb-ldap.conf } where /etc/dovecot-passdb-ldap.conf is identical to dovecot-usrdb-ldap.conf. What am I doing wrong? Please advise. Thanks in advance, Nick My working dovecot.conf is: protocols = imap imaps pop3 pop3s disable_plaintext_auth = no syslog_facility = local1 ssl = yes ssl_cert_file = /etc/pki/CA/certs/cert-180.pem ssl_key_file = /etc/pki/CA/private/key.pem ssl_ca_file = /etc/pki/CA/certs/cert-180.pem ssl_verify_client_cert = no verbose_ssl = no login_process_size = 64 mail_location = maildir:~/Maildir/ mail_debug = no protocol imap { mail_plugins = quota imap_quota imap_client_workarounds = delay-newmail outlook-idle netscape-eoh } protocol pop3 { pop3_uidl_format = %08Xu%08Xv mail_max_userip_connections = 3 mail_plugins = quota pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } protocol managesieve { } protocol lda { postmaster_address = postmaster(a)example.com mail_plugins = quota } auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ auth_username_format = %Lu auth_verbose = yes auth_debug = no auth default { mechanisms = plain login passdb ldap { args = /etc/dovecot-ldap.conf } userdb static { args = uid=500 gid=500 home=/home/vmail/%u } user = root socket listen { client { path = /var/spool/postfix/private/auth mode = 0660 user = postfix group = postfix } } } dict { } plugin { quota = maildir:User quota # Quota limit is 4GB quota_rule = *:storage=4G # We add 100Mb more for Trash quota_rule2 = Trash:storage=100M # We set up warnings at 75% and 90% quota_warning = storage=75%% /opt/mail.sh 75 %u quota_warning2 = storage=90%% /opt/mail.sh 90 %u } and dovecot-ldap.conf is: hosts = localhost tls = no base = ou=people, dc=example, dc=com scope = subtree ldap_version = 3 auth_bind = yes pass_attrs = uid=user,userPassword=password auth_bind_userdn = uid=%u,ou=people,dc=example,dc=com pass_filter = (uid=%u) Finally, for reference (dovecot -n): # 1.2.11: /etc/dovecot.conf # OS: Linux 2.6.18-194.32.1.el5 x86_64 CentOS release 5.5 (Final) syslog_facility: local1 ssl_ca_file: /etc/pki/CA/certs/cert-180.pem ssl_cert_file: /etc/pki/CA/certs/cert-180.pem ssl_key_file: /etc/pki/CA/private/key.pem login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login mail_max_userip_connections(default): 10 mail_max_userip_connections(imap): 10 mail_max_userip_connections(pop3): 3 mail_location: maildir:~/Maildir/ mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 imap_client_workarounds(default): delay-newmail outlook-idle netscape-eoh imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh lda: postmaster_address: postmaster(a)example.com mail_plugins: quota auth default: mechanisms: plain login username_format: %Lu verbose: yes passdb: driver: ldap args: /etc/dovecot-ldap.conf userdb: driver: static args: uid=500 gid=500 home=/home/vmail/%u socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix plugin: quota: maildir:User quota quota_rule: *:storage=4G quota_rule2: Trash:storage=100M quota_warning: storage=75%% /opt/mail.sh 75 %u quota_warning2: storage=90%% /opt/mail.sh 90 %u

2 3

[Dovecot] Dovecot doesn't show any e-mails, while there are a lot in the maildir
by Attila Nagy 22 Feb '11

22 Feb '11

Hi, I've recently seen the following issue. A user logs in with pop3, and sees zero e-mails. The maildir contains emails both in cur and new. The mail delivery is done with qmail, and this user have had no logins before, so it has only the inbox, trash and sent (while dovecot is configured to create drafts and spam folders too). Because of this, the user doesn't have any dovecot indexes either. So, he logs in, and sees nothing. The strange thing is Dovecot doesn't create any of the above directories nor indexes. After moving the mailbox to another server, the user can log in, the additional folders get created and also the indexes appear. pop3 shows the correct amount of emails. Moving the mailbox back to the original server shows the same issue: no emails at all. Restarting dovecot on the original server resolves the issue. This is a pretty loaded machine, so I couldn't trace the processes. I know that this isn't too much, but that's what I have. The only thing I could identify in the error log is: Feb 17 12:45:58 pop3(varszr@asdfg): Warning: Created dotlock file's timestamp is different than current time (1297943148 vs 1297943086): /home/varszr@asdfg/Maildir/subscriptions Which may happened due to a restart and maybe a clock setting. But that was yesterday. Any ideas? # 2.0.8: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 8.2-PRERELEASE amd64 auth_cache_negative_ttl = 0 auth_cache_size = 100 M auth_cache_ttl = 1 days disable_plaintext_auth = no info_log_path = syslog log_path = /var/log/dovecot-errors.log mail_fsync = never mail_gid = 999 mail_location = maildir:~/Maildir mail_plugins = " quota" mail_uid = 999 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date passdb { args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { autocreate = INBOX.Trash autocreate2 = INBOX.Drafts autocreate3 = INBOX.Sent autocreate4 = INBOX.Spam autosubscribe = INBOX.Trash autosubscribe2 = INBOX.Drafts autosubscribe3 = INBOX.Sent autosubscribe4 = INBOX.Spam mail_log_events = delete mailbox_delete mail_log_fields = uid box msgid size flags vsize from subject quota = maildir:User quota } protocols = pop3 imap lmtp service anvil { client_limit = 8192 } service auth { client_limit = 8192 unix_listener auth-userdb { mode = 0600 user = qmailldap } } service imap-login { client_limit = 1000 process_limit = 100 process_min_avail = 8 service_count = 0 } service imap { client_limit = 1 process_limit = 2048 process_min_avail = 16 service_count = 0 } service lmtp { inet_listener lmtp { port = 24 } user = qmailldap } service pop3-login { client_limit = 1000 process_limit = 100 process_min_avail = 8 service_count = 0 } service pop3 { client_limit = 1 process_limit = 2048 process_min_avail = 32 service_count = 0 } ssl = no userdb { driver = prefetch } userdb { args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol lmtp { mail_plugins = " quota mail_log notify" } protocol imap { mail_max_userip_connections = 1024 mail_plugins = " quota imap_quota autocreate mail_log notify" } protocol pop3 { mail_max_userip_connections = 1024 mail_plugins = " quota autocreate" }

2 1

[Dovecot] [PATCH] Add Install section to dovecot.service, so it can be used independently from dovecot.socket
by Mike Kazantsev 22 Feb '11

22 Feb '11

Good day, Dovecot includes nice unit files for systemd, but I've noticed that "systemctl enable dovecot.service" fails because service file does not include Install section. I assume that is because there's a .socket file, but there might be reasons when you want to enable it as a service. In my case it's one of the main services on the machine, so I'd like to see whether it's started correctly in systemctl after boot. And of course I don't want it to be killed due to "no connections timeout" at any given time. Plus, it provides authentication info for postfix daemon running on the same machine, and dovecot.socket does not handle this case. Following patch allows dovecot.service to be enabled via usual systemctl command. From e04611738edcc9245ca2a7c30587ed13a1cdb1aa Mon Sep 17 00:00:00 2001 From: Mike Kazantsev (sacrilege) <mk.fraggod(a)gmail.com> Date: Fri, 18 Feb 2011 17:00:17 +0500 Subject: [PATCH] systemd service: added [Install] section, so it can be used independently from dovecot.socket --- dovecot.service.in | 3 +++ 1 files changed, 3 insertions(+), 0 deletions(-) diff --git a/dovecot.service.in b/dovecot.service.in index db03946..f248709 100644 --- a/dovecot.service.in +++ b/dovecot.service.in @@ -6,3 +6,6 @@ After=local-fs.target network.target Type=simple ExecStart=@sbindir@/dovecot -F NonBlocking=yes + +[Install] +WantedBy=multi-user.target -- 1.7.4.1 -- Mike Kazantsev // fraggod.net

2 1

[Dovecot] dovecot permission problems
by Calvin23 22 Feb '11

22 Feb '11

Hello, I'm trying to make a dovecot installation run on my freeBSD 8.1 server, since quite a long time now, and I can't figure out how to solve my last problem. I did quite a lot of searching and many people seem to have the same problem, but I didn't manage to make any solution work on my host. So I would be glad for every hint :-) I'm using postfix with dovecot. Everything works just as expected, except one little permission problem. When dovecot tries to deliver a mail to my homedir everything is working out. I use fdm to connect to my server to download the mails, and here is where things stop to work: Here some logs: http://pastie.org/1579465 Here my dovecot -n output: http://pastie.org/1579489 I really tried a huge amount of different things, redesigned my whole configuration file from scratch etc. Does anybody has an idea how I could fix this little last problem I have here? If you need more information, please don't hesitate to ask, I wasn't sure what I should provide and didn't want to spam too much ;) With best regards, Calvin23 -- View this message in context: http://old.nabble.com/dovecot-permission-problems-tp30960767p30960767.html Sent from the Dovecot mailing list archive at Nabble.com.

2 1

[Dovecot] Rewrite the mailbox copy functions works in imap but don't work in doveadm import command
by Alex Baule 22 Feb '11

22 Feb '11

Hi Timo !! I rewrite the copy function from mailbox (using a plugin) My rewrite is like this: static int emexis_antispam_copy(struct mail_save_context *ctx, struct mail *mail){ struct mailbox *box = ctx->transaction->box; union mailbox_module_context *zbox = EMEXIS_CONTEXT(box); struct mail_private *_mail = (struct mail_private *)mail; union mail_module_context *zmail = EMEXIS_MAIL_CONTEXT(_mail); struct istream *input; const char *headerFile; char *bodyFile; int fd; int increment; ......Do some stuffs and verifications OK.... // GETTING THE FILE TO READ SOME STUFF FROM HEADER. if (zmail->super.get_stream(mail, NULL, NULL, &input) >= 0){ i_warning("GET STREAM COPY OK..."); }else{ i_warning("GET STREAM COPY NOT OK..."); } // REALLY COPY EMAIL copyret = zbox->super.copy(ctx, mail); } OK, when i use the IMAP , using a client and copy a email, it's works fine. But, when i use a doveadm import command, the part "(zmail->super.get_stream(mail, NULL, NULL, &input) >= 0)" fails, with no error message, only a segfault.... doveadm[14980]: segfault at 9c ip b7698000 sp bf83d7d0 error 4 in libdovecot.so.0.0.0[b7663000+6d000] doveadm[14983]: segfault at 9c ip b7661000 sp bf9c9ee0 error 4 in libdovecot.so.0.0.0[b762c000+6d000] doveadm[14986]: segfault at 9c ip b75b3000 sp bfcd82e0 error 4 in libdovecot.so.0.0.0[b757e000+6d000] doveadm[14989]: segfault at 9c ip b7684000 sp bfa5d3c0 error 4 in libdovecot.so.0.0.0[b764f000+6d000] There is difference between imap using a client , and doveadm import command ? If have some difference, can i identify and do some workarround ? Tks Timo !!

2 1

Re: [Dovecot] Segmentation fault running doveadm import
by Maria Arrea 22 Feb '11

22 Feb '11

Some more info: I am running dovecot 2.0.9 on Red Hat Enterprise Linux 5 Another question I would like to ask: I run the command doveadm import as "entrega" user (see dovecot -n output in my previous mail ). If I run the command as root also segfaults, and garbage is restored (mails with binary data). If I run as "entrega" segfaults, but e-mails are correctly restored Regards Maria.

2 2

[Dovecot] How to disable imap of some user
by 邓卫华 22 Feb '11

22 Feb '11

Hi, in our company, i want to disable imap of some users, they can access them mailbox by pop3 only, and another user can allow access them mailbox by imap or pop3. how can i do ? -- Best Cheer (XiaMen) Stone Works CO.,LTP. Phone: 0592-7221600

2 5

[Dovecot] Best way to migrate versions and machines
by Donny Brooks 21 Feb '11

21 Feb '11

We are looking to migrate from our current mail server running dovecot-1.2.11-3 to a new mail server running the latest dovecot (2.0.9?). So this would not only be a version change but also a machine change. We currently use Maildir for storing mail and would like to stay that way. Has anyone preformed such a feat and it worked? Looking for any input.

4 7

[Dovecot] Segmentation fault running doveadm import
by Maria Arrea 21 Feb '11

21 Feb '11

Hello. I have tried to restore a test user mailbox and I get a segmentation fault doveadm -D import -u ox101(a)us.es mdbox:/backup/bacula-restores/buzones/mysite/15/b1/ox101/ "" all /doveadm(entrega): Debug: Loading modules from directory: /usr/lib64/dovecot doveadm(entrega): Debug: Module loaded: /usr/lib64/dovecot/lib01_acl_plugin.so doveadm(entrega): Debug: Module loaded: /usr/lib64/dovecot/lib10_quota_plugin.so doveadm(entrega): Debug: Module loaded: /usr/lib64/dovecot/lib20_zlib_plugin.so doveadm(entrega): Debug: Loading modules from directory: /usr/lib64/dovecot/doveadm doveadm(entrega): Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: /usr/lib64/dovecot/doveadm/lib10_doveadm_expire_plugin.so: undefined symbol: expire_set_lookup (this is usually intentional, so just ignore this message) doveadm(entrega): Debug: Module loaded: /usr/lib64/dovecot/doveadm/lib10_doveadm_quota_plugin.so doveadm(entrega): Debug: Module loaded: /usr/lib64/dovecot/doveadm/lib10_doveadm_zlib_plugin.so doveadm(ox101(a)us.es): Debug: import: box=Sent uid=9 doveadm(ox101(a)us.es): Debug: import: box=Sent uid=10 doveadm(ox101(a)us.es): Debug: import: box=INBOX uid=1 doveadm(ox101(a)us.es): Debug: import: box=INBOX uid=5 doveadm(ox101(a)us.es): Debug: import: box=INBOX uid=11 doveadm(ox101(a)us.es): Debug: import: box=INBOX uid=12 doveadm(ox101(a)us.es): Debug: import: box=INBOX uid=14 Segmentation fault/ I can fully reproduce this segmentation fault. Doveconf -n attached at the bottom of this mail. The strange this is that all mail for this user is restored, but the process segfaults. If I strace the process the last lines are: [...] fstat(25, {st_mode=S_IFREG0644, st_size=47, ...}) = 0 stat("/backup/bacula-restores/buzones/mysite/15/b1/ox101/mailboxes/INBOX/dbox-Mails/dovecot.index.log", {st_mode=S_IFREG0600, st_size=6868, ...}) = 0 fstat(17, {st_mode=S_IFREG0600, st_size=6868, ...}) = 0 fstat(17, {st_mode=S_IFREG0600, st_size=6868, ...}) = 0 getdents(9, /* 3 entries */, 32768) = 80 getdents(9, /* 0 entries */, 32768) = 0 close(9) = 0 stat("/backup/bacula-restores/buzones/mysite/15/b1/ox101/mailboxes/Trash", {st_mode=S_IFDIR0700, st_size=4096, ...}) = 0 stat("/backup/bacula-restores/buzones/mysite/15/b1/ox101/mailboxes/Trash/dbox-Mails", {st_mode=S_IFDIR0700, st_size=4096, ...}) = 0 open("/backup/bacula-restores/buzones/mysite/15/b1/ox101/mailboxes/Trash", O_RDONLYO_NONBLOCKO_DIRECTORY) = 9 fcntl(9, F_SETFD, FD_CLOEXEC) = 0 stat("/backup/bacula-restores/buzones/mysite/15/b1/ox101/mailboxes/Trash/dbox-Mails", {st_mode=S_IFDIR0700, st_size=4096, ...}) = 0 close(11) = 0 munmap(0x2b2bea461000, 28672) = 0 close(16) = 0 close(10) = 0 stat("/backup/bacula-restores/buzones/mysite/15/b1/ox101/mailboxes/Trash", {st_mode=S_IFDIR0700, st_size=4096, ...}) = 0 stat("/backup/bacula-restores/buzones/mysite/15/b1/ox101/mailboxes/Trash", {st_mode=S_IFDIR0700, st_size=4096, ...}) = 0 stat("/backup/bacula-restores/buzones/mysite/15/b1/ox101/mailboxes/Trash/dbox-Mails", {st_mode=S_IFDIR0700, st_size=4096, ...}) = 0 open("/backup/bacula-restores/buzones/mysite/15/b1/ox101/mailboxes/Trash/dbox-Mails/dovecot.index.log", O_RDWR) = 10 fstat(10, {st_mode=S_IFREG0600, st_size=5084, ...}) = 0 pread(10, "\1\2(\0\350\10HM\2\0\0\0\1\0\0\0\0\0\0\0\350\10HM\0\0\0\0\0\0\0\0"..., 40, 0) = 40 open("/backup/bacula-restores/buzones/mysite/15/b1/ox101/mailboxes/Trash/dbox-Mails/dovecot.index", O_RDWR) = -1 ENOENT (No such file or directory) fstat(10, {st_mode=S_IFREG0600, st_size=5084, ...}) = 0 mmap(NULL, 5084, PROT_READ, MAP_SHARED, 10, 0) = 0x2b2bea461000 madvise(0x2b2bea461000, 5084, MADV_SEQUENTIAL) = 0 fstat(10, {st_mode=S_IFREG0600, st_size=5084, ...}) = 0 stat("/backup/bacula-restores/buzones/mysite/15/b1/ox101/mailboxes/Trash/dbox-Mails/dovecot.index.log", {st_mode=S_IFREG0600, st_size=5084, ...}) = 0 fstat(10, {st_mode=S_IFREG0600, st_size=5084, ...}) = 0 fstat(10, {st_mode=S_IFREG0600, st_size=5084, ...}) = 0 stat("/backup/bacula-restores/buzones/mysite/15/b1/ox101/mailboxes/Trash/dbox-Mails/dovecot.index.log", {st_mode=S_IFREG0600, st_size=5084, ...}) = 0 fstat(10, {st_mode=S_IFREG0600, st_size=5084, ...}) = 0 fstat(10, {st_mode=S_IFREG0600, st_size=5084, ...}) = 0 getdents(9, /* 3 entries */, 32768) = 80 getdents(9, /* 0 entries */, 32768) = 0 close(9) = 0 getdents(8, /* 0 entries */, 32768) = 0 close(8) = 0 close(25) = 0 close(18) = 0 munmap(0x2b2bea45d000, 6520) = 0 close(13) = 0 munmap(0x2b2bea461000, 5084) = 0 close(10) = 0 close(22) = 0 close(21) = 0 munmap(0x2b2bea681000, 30720) = 0 close(24) = 0 brk(0x1b48000) = 0x1b48000 munmap(0x2b2bea46e000, 6868) = 0 close(17) = 0 munmap(0x2b2bea470000, 22528) = 0 close(23) = 0 close(12) = 0 munmap(0x2b2bea468000, 24576) = 0 close(19) = 0 brk(0x1b44000) = 0x1b44000 close(7) = 0 munmap(0x2b2be9806000, 2161656) = 0 --- SIGSEGV (Segmentation fault) @ 0 (0) --- +++ killed by SIGSEGV +++ dovecot -n outpout: # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-238.1.1.el5 x86_64 Red Hat Enterprise Linux Server release 5.6 (Tikanga) ext3 auth_anonymous_username = anonymous auth_cache_negative_ttl = 1 hours auth_cache_size = 0 auth_cache_ttl = 1 hours auth_debug = no auth_debug_passwords = no auth_default_realm = auth_failure_delay = 2 secs auth_first_valid_uid = 500 auth_gssapi_hostname = auth_krb5_keytab = auth_last_valid_uid = 0 auth_master_user_separator = * auth_mechanisms = plain login auth_realms = auth_socket_path = auth-userdb auth_ssl_require_client_cert = no auth_ssl_username_from_cert = no auth_use_winbind = no auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ auth_username_format = auth_username_translation = auth_verbose = no auth_verbose_passwords = no auth_winbind_helper_path = /usr/bin/ntlm_auth auth_worker_max_count = 90 base_dir = /var/run/dovecot/ config_cache_size = 1 M debug_log_path = default_client_limit = 4096 default_idle_kill = 60 default_internal_user = dovecot default_login_user = dovenull default_process_limit = 700 default_vsz_limit = 256 M deliver_log_format = msgid=%m: %$ dict_db_config = director_doveadm_port = 0 director_mail_servers = director_servers = director_user_expire = 15 mins disable_plaintext_auth = no dotlock_use_excl = yes doveadm_socket_path = doveadm-server doveadm_worker_count = 0 first_valid_gid = 1 first_valid_uid = 500 hostname = imap_capability = imap_client_workarounds = imap_id_log = imap_id_send = imap_idle_notify_interval = 2 mins imap_logout_format = bytes=%i/%o imap_max_line_length = 64 k info_log_path = last_valid_gid = 0 last_valid_uid = 0 lda_mailbox_autocreate = no lda_mailbox_autosubscribe = no lda_original_recipient_header = libexec_dir = /usr/libexec/dovecot listen = *, :: lmtp_proxy = no lmtp_save_to_detail_mailbox = no lock_method = fcntl log_path = syslog log_timestamp = "%b %d %H:%M:%S " login_access_sockets = login_greeting = Dovecot ready. login_log_format = %$: %s login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c login_trusted_networks = mail_access_groups = mail_attachment_dir = mail_attachment_fs = sis posix mail_attachment_hash = %{sha1} mail_attachment_min_size = 128 k mail_cache_fields = flags mail_cache_min_mail_count = 0 mail_chroot = mail_debug = no mail_fsync = never mail_full_filesystem_access = no mail_gid = entrega mail_home = /buzones/%2.26Hn/mysite/%2.200Hn/%n/mail_home mail_location = mdbox:/buzones/mysite/%2.26Hn/%2.200Hn/%n mail_log_prefix = "%s(%u): " mail_max_keyword_length = 50 mail_max_lock_timeout = 0 mail_max_userip_connections = 10 mail_never_cache_fields = imap.envelope mail_nfs_index = no mail_nfs_storage = no mail_plugin_dir = /usr/lib64/dovecot mail_plugins = " zlib quota acl" mail_privileged_group = mail_save_crlf = no mail_temp_dir = /tmp mail_uid = entrega mailbox_idle_check_interval = 30 secs mailbox_list_index_disable = no maildir_copy_with_hardlinks = yes maildir_stat_dirs = no maildir_very_dirty_syncs = no managesieve_client_workarounds = managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o managesieve_max_compile_errors = 5 managesieve_max_line_length = 65536 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date master_user_separator = mbox_dirty_syncs = yes mbox_dotlock_change_timeout = 2 mins mbox_lazy_writes = yes mbox_lock_timeout = 5 mins mbox_min_index_size = 0 mbox_read_locks = fcntl mbox_very_dirty_syncs = no mbox_write_locks = dotlock fcntl mdbox_preallocate_space = no mdbox_rotate_interval = 1 days mdbox_rotate_size = 40 M mmap_disable = no passdb { args = deny = no driver = shadow master = no pass = no } passdb { args = /etc/dovecot/dovecot-ldap.conf deny = no driver = ldap master = no pass = no } passdb { args = /etc/usuario_maestro.txt deny = no driver = passwd-file master = yes pass = no } passdb { args = /etc/dovecot/dovecot-ldap.conf deny = no driver = ldap master = no pass = no } plugin { acl = vfile lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes quota = dict:Cuota de usuario::file:/buzones/cuotas/%n quota_rule2 = Trash:storage=+10%% quota_warning = storage=12K aviso_cuota 12K %u sieve = /buzones/%2.26Hn/%2.200Hn/%n/dovecot.sieve sieve_dir = /buzones/%2.26Hn/%2.200Hn/%n/sieve/ zlib_save = gz zlib_save_level = 9 } pop3_client_workarounds = pop3_enable_last = no pop3_fast_size_lookups = no pop3_lock_session = no pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s pop3_no_flag_updates = no pop3_reuse_xuidl = no pop3_save_uidl = no pop3_uidl_format = %08Xu%08Xv postmaster_address = protocols = pop3 imap sieve quota_full_tempfail = no recipient_delimiter = + rejection_reason = Your message to <%t> was automatically rejected:%n%r rejection_subject = Rejected: %s sendmail_path = /usr/sbin/sendmail service anvil { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = anvil extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 1 protocol = service_count = 0 type = anvil unix_listener anvil-auth-penalty { group = mode = 0600 user = } unix_listener anvil { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service auth-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = auth -w extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener auth-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service auth { chroot = client_limit = 4096 drop_priv_before_exec = no executable = auth extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener auth-client { group = mode = 0600 user = } unix_listener auth-login { group = mode = 0600 user = $default_internal_user } unix_listener auth-master { group = mode = 0600 user = entrega } unix_listener auth-userdb { group = mode = 0600 user = entrega } unix_listener login/login { group = mode = 0666 user = } user = root vsz_limit = 18446744073709551615 B } service aviso_cuota { chroot = client_limit = 0 drop_priv_before_exec = no executable = script /usr/local/bin/quota-warning.sh extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener aviso_cuota { group = mode = 0666 user = } user = entrega vsz_limit = 18446744073709551615 B } service config { chroot = client_limit = 0 drop_priv_before_exec = no executable = config extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = config unix_listener config { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service dict { chroot = client_limit = 1 drop_priv_before_exec = no executable = dict extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dict { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service director { chroot = client_limit = 0 drop_priv_before_exec = no executable = director extra_groups = fifo_listener login/proxy-notify { group = mode = 00 user = } group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener director-admin { group = mode = 0600 user = } unix_listener login/director { group = mode = 00 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service dns_client { chroot = client_limit = 1 drop_priv_before_exec = no executable = dns-client extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dns-client { group = mode = 0666 user = } unix_listener login/dns-client { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service doveadm { chroot = client_limit = 1 drop_priv_before_exec = no executable = doveadm-server extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener doveadm-server { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service imap-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = /usr/libexec/dovecot/imap-login extra_groups = group = idle_kill = 0 inet_listener imap { address = port = 143 ssl = no } inet_listener imaps { address = port = 993 ssl = yes } privileged_group = process_limit = 2500 process_min_avail = 0 protocol = imap service_count = 1 type = login user = $default_login_user vsz_limit = 64 M } service imap { chroot = client_limit = 1 drop_priv_before_exec = no executable = /usr/libexec/dovecot/rawlog /usr/libexec/dovecot/imap extra_groups = group = idle_kill = 0 privileged_group = process_limit = 2500 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener login/imap { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service lmtp { chroot = client_limit = 0 drop_priv_before_exec = no executable = lmtp extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = lmtp service_count = 0 type = unix_listener lmtp { group = mode = 0666 user = } user = vsz_limit = 0 } service log { chroot = client_limit = 0 drop_priv_before_exec = no executable = log extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = log user = vsz_limit = 18446744073709551615 B } service managesieve-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = /usr/libexec/dovecot/managesieve-login extra_groups = group = idle_kill = 0 inet_listener sieve { address = port = 2000 ssl = no } privileged_group = process_limit = 2500 process_min_avail = 0 protocol = sieve service_count = 1 type = login user = $default_login_user vsz_limit = 64 M } service managesieve { chroot = client_limit = 1 drop_priv_before_exec = no executable = /usr/libexec/dovecot/managesieve extra_groups = group = idle_kill = 0 privileged_group = process_limit = 2500 process_min_avail = 0 protocol = sieve service_count = 1 type = unix_listener login/sieve { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service pop3-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = /usr/libexec/dovecot/pop3-login extra_groups = group = idle_kill = 0 inet_listener pop3 { address = port = 110 ssl = no } inet_listener pop3s { address = port = 995 ssl = yes } privileged_group = process_limit = 2500 process_min_avail = 0 protocol = pop3 service_count = 1 type = login user = $default_login_user vsz_limit = 64 M } service pop3 { chroot = client_limit = 1 drop_priv_before_exec = no executable = /usr/libexec/dovecot/pop3 extra_groups = group = idle_kill = 0 privileged_group = process_limit = 2500 process_min_avail = 0 protocol = pop3 service_count = 1 type = unix_listener login/pop3 { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service ssl-params { chroot = client_limit = 0 drop_priv_before_exec = no executable = ssl-params extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = startup unix_listener login/ssl-params { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } shutdown_clients = yes ssl = yes ssl_ca = </etc/pki/generico/cacert.crt.pem ssl_cert = </etc/pki/generico/wildcard-us_es.crt ssl_cert_username_field = commonName ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL ssl_key = </etc/pki/generico/wildcard-key.pem ssl_key_password = ssl_parameters_file = ssl-parameters.dat ssl_parameters_regenerate = 168 ssl_verify_client_cert = no syslog_facility = mail userdb { args = driver = passwd } userdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } userdb { args = /etc/dovecot/dovecot-ldap-userdb.conf driver = ldap } valid_chroot_dirs = verbose_auth = no verbose_proctitle = yes verbose_ssl = no version_ignore = no protocol sieve { managesieve_implementation_string = dovecot managesieve_logout_format = bytes=%i/%o managesieve_max_line_length = 65536 } protocol lda { hostname = mysite info_log_path = log_path = mail_fsync = optimized mail_plugins = quota sieve zlib postmaster_address = evcorreo@mysite syslog_facility = mail } protocol imap { mail_plugins = quota imap_quota zlib } protocol pop3 { mail_plugins = zlib pop3_enable_last = yes pop3_uidl_format = %08Xv%08Xu } Regards Maria

1 0

[Dovecot] Regenerating mdbox/sis
by dmiller＠amfes.com 21 Feb '11

21 Feb '11

It's apparent I have some level of corruption in my mailboxes - something to do with the combination of mdbox, sis, and zlib. I should note that I know I have a mix of compressed and raw messages - if that makes any difference in identifying the problems. I think I need to somehow regenerate the mailboxes with issues. Is there a suggestion for how to accomplish this? Should I perhaps use dsync to shift to a temporary mail location and then rename it back? If I DO use dsync in this manner, and I have zlib enabled - will this then compress all the messages in the new mail storage? -- Daniel

3 2

[Dovecot] IMAP flags not being committed properly?
by Janos Barbero 21 Feb '11

21 Feb '11

I'm afraid I can't give steps to reproduce this, but if someone's come across something like this, it might help me figure out what's going on. I run imapfilter/offlineimap to fetch mail from a gmail to a local maildir store, which I then access with alpine via dovecot (1.2.15). Here's the output of dovecot -n: # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.26-2-686 i686 Debian squeeze/sid ext3 log_path: /var/log/dovecot.log info_log_path: /var/log/dovecot-info.log log_timestamp: %Y-%m-%d %H:%M:%S login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login mail_privileged_group: mail mail_location: maildir:/data/1/mail:LAYOUT=fs mbox_write_locks: fcntl dotlock mail_plugins: fts fts_squat auth default: passdb: driver: pam userdb: driver: passwd plugin: fts: squat Just recently, I went through a bunch of old unread messages, marking them as read (in alpine). When I selected all unseen messages in pine (;sn), 18 showed up. But the count was higher within Gmail even after an expunge and offlineimap sync. So I selected all seen messages (;s!n) and marked them all as seen (a*!n). This didn't take long (for a 30k message folder) but surprisingly enough came back with the notice that 15 messages were marked as seen, and sure enough, at the next offlineimap sync, flags were updated on 15 messages. So I didn't touch anything in gmail, everything went to the maildir through dovecot via alpine, and then back to gmail via offlineimap. Yet the select command obviously did not return all the matching messages. Anyone know what's going on? Thanks, Janos

1 0

[Dovecot] Invitation to connect on LinkedIn
by Edmonds Namasenda via LinkedIn 21 Feb '11

21 Feb '11

LinkedIn ------------Edmonds Namasenda requested to add you as a connection on LinkedIn: ------------------------------------------ Michael A., I'd like to add you to my professional network on LinkedIn. - Edmonds Accept invitation from Edmonds Namasenda http://www.linkedin.com/e/458g9e-gkex2ed1-1v/V7LnuFRIQXpYNGb2yum6IE4IQU3ZkP… View invitation from Edmonds Namasenda http://www.linkedin.com/e/458g9e-gkex2ed1-1v/V7LnuFRIQXpYNGb2yum6IE4IQU3ZkP… ------------------------------------------ DID YOU KNOW that LinkedIn can find the answers to your most difficult questions? Post those vexing questions on LinkedIn Answers to tap into the knowledge of the world's foremost business experts: http://www.linkedin.com/e/458g9e-gkex2ed1-1v/ask/inv-23/ -- (c) 2011, LinkedIn Corporation

1 0

[Dovecot] dsync problem: Error: Can't rename mailbox INBOX
by Jan Binder 19 Feb '11

19 Feb '11

Hi all, I'm running two debian machines with dovecot 2.0.9 autobuilds and would like to keep mails synchronized on both via dsync. Mails are kept in maildir on both sides. While syncing, dsync gives the following error: dsync-local(jan.binder): Error: Can't rename mailbox INBOX to INBOX_a432bf2eca595a4dba47000043b078f4: Renaming INBOX isn't supported. dsync-local(jan.binder): Error: Can't rename mailbox INBOX_e184273887675a4dcc5b00000c16d079 to INBOX: Target mailbox already exists Further diagnostic information: dsync command: dsync -D -v -f mirror ssh jan.binder(a)firefly.local dsync dovecot -n on firefly.local: # 2.0.9 (159605040ec0): /etc/dovecot/dovecot.conf # OS: Linux 2.6.37-trunk-686-bigmem i686 Debian wheezy/sid managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date passdb { driver = pam } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap lmtp ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } dovecot -n on depth.local: # 2.0.9 (049a922c193c): /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian wheezy/sid managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date passdb { driver = pam } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap lmtp ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } Should this usage of dsync work in principle? Best regards, Jan Binder

2 3

[Dovecot] Permission denied after dist-upgrade
by Thomas Skowron 18 Feb '11

18 Feb '11

Hello, after I have done a dist-upgrade to Squeeze, I got some nasty problem with my dovecot. When I try to establish a connection via IMAP, it doesn't react and writes the following into my logfile: 2011-02-16 15:23:49 imap-login: Info: Login: user=<thomas@XXX>, method=PLAIN, rip=84.130.16.134, lip=XX.XXX.XX.XXX, TLS 2011-02-16 14:23:49 dovecot: Fatal: chdir(/home/vmail/XXX/thomas/) failed: Permission denied (euid=5000(<unknown>) egid=5000(<unknown>) stat() failed: No such file or directory) 2011-02-16 15:23:49 dovecot: Error: child 14493 (imap) returned error 89 (Fatal failure) dovecot -n: # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.26-2-xen-amd64 x86_64 Debian 6.0 ext3 log_path: /home/vmail/dovecot-info.log log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps pop3 pop3s ssl_ca_file: /etc/ssl/certs/sub.class1.server.ca.pem login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login mail_privileged_group: vmail mail_uid: vmail mail_gid: vmail mail_location: maildir:/home/vmail/%d/%n/ mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 namespace: type: private separator: . prefix: INBOX. inbox: yes list: yes subscriptions: yes lda: log_path: /home/vmail/dovecot-deliver.log postmaster_address: postmaster@XXX auth_socket_path: /var/run/dovecot/auth-master global_script_path: /home/vmail/globalsieverc auth default: mechanisms: plain login passdb: driver: pam passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: passwd userdb: driver: static args: uid=vmail gid=vmail home=/home/vmail/%d/%n allow_all_users=yes socket: type: listen client: path: /var/run/dovecot/auth-client mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail I tried to change privileges for /home/vmail/, didn't work. What makes me wonder is the <unknown>-label after euid=5000. Anyone an idea how to fix that problem? Thomas

6 18

[Dovecot] Maildir folders, separator = /, LAYOUT=fs (to support offlineimap)
by kkruzich 18 Feb '11

18 Feb '11

I use offlineimap to pull down some Gmail mail stores. With offlineimap I use sep = / and nothing more exotic. With dovecot I can see INBOX, messages, and messages in top level folders but not subfolders. I'm dealing with folder structure that looks like this: /opt/gmail/joe/Later /opt/gmail/joe/Tech/Projects /opt/gmail/joe/Tech/Projects/Fun /opt/gmail/joe/Tech/Projects/Failed /opt/gmail/joe/Tech/Projects/Planning The folder Later has cur, tmp, new and I can see messages. Projects is a container for subfolders Fun, Failed, Planning. I know Fun, Failed, Planning has messages but I'm not able to expand (via thunderbird) the folder Projects. I have this configured in dovecot.conf mail_location = maildir:/opt/gmail/joe:INBOX=/opt/gmail/joe/INBOX:LAYOUT=fs namespace private { separator = / list = yes } --- And this is what's getting logged... dovecot: Feb 18 07:26:39 Info: IMAP(joe): Namespace: type=private, prefix=, sep=/, inbox=no, hidden=no, list=yes, subscriptions=yes dovecot: Feb 18 07:26:39 Info: IMAP(joe): maildir: data=/opt/gmail/joe:INBOX=/opt/gmail/joe/INBOX:LAYOUT=fs dovecot: Feb 18 07:26:39 Info: IMAP(joe): fs: root=/opt/gmail/joe, index=, control=, inbox=/opt/gmail/joe/INBOX

2 2

[Dovecot] Post login scripting and imapsync on user login
by Tomislav Mihalicek 18 Feb '11

18 Feb '11

Did anyone set up the enviroment in dovecot with post login scripting in which imapsync does sync between two mailservers on users login (on login sync mail from old to new mailserver) is there a alternative or different approach? something like #!/bin/bash /usr/bin/imapsync --syncinternaldates --nosyncacls --authmech1 PLAIN --host1 old.server.com --user1 $USER*master --password1 master --authmech2 PLAIN --host2 new.server.com --user2 $USER*master --password2 master exec /usr/lib/dovecot/imap "$@" thanx -- View this message in context: http://old.nabble.com/Post-login-scripting-and-imapsync-on-user-login-tp309… Sent from the Dovecot mailing list archive at Nabble.com.

2 1

[Dovecot] managesieve bug: UTF inside quoted-string
by A.L.E.C 17 Feb '11

17 Feb '11

This has been probably fixed in meantime, because I use dovecot 1.1 still, but I'd like to get you to know. Use of UTF-8 characters inside quoted-string doesn't work. C: GETSCRIPT "żółw" S NO "Error in MANAGESIEVE command GETSCRIPT: String contains invalid character." -- Aleksander 'A.L.E.C' Machniak LAN Management System Developer [http://lms.org.pl] Roundcube Webmail Developer [http://roundcube.net] --------------------------------------------------- PGP: 19359DC1 @@ GG: 2275252 @@ WWW: http://alec.pl

2 2

[Dovecot] Upgrading Dovecot v1.0.10 -> v2.0.9
by Jackie Hunt 17 Feb '11

17 Feb '11

Hi all, OK, I admit it. I've seriously neglected our Dovecot installation. I installed version 1.0.10 in Jan 2008, and it has been a great workhorse since then. It has run like a champ, so it was ignored due to higher priority projects. But now it is time to get current with Dovecot, and I really need your help. We are using the mbox mailbox format. First so I want to upgrade to 2.0.9, since it looks like that is the latest version? It looks like development is still happening on the 1.x line, so do I need to get to the 2.x line? Any comments/suggestions/recommendations on that? I know there are major changes from 1.x -> 2.x.. Also, do I need to go through incremental upgrades? I'm guessing changes have been made to the index files and the dovecot configuration. Do those need to be done in steps, or can I made a major leap forward? I'd appreciate any input on this project. I need to start planning. Thanks so much! Jackie

2 1

[Dovecot] Kerem Erciyes wants to stay in touch on LinkedIn
by Kerem Erciyes 17 Feb '11

17 Feb '11

I'd like to add you to my professional network on LinkedIn. - Kerem Erciyes Kerem Erciyes Founder at Kerem Erciyes - Systems Consultant Confirm that you know Kerem Erciyes https://www.linkedin.com/e/458g9e-gk9r6mx4-1u/isd/2349073602/c9W4Eipx/EML-i… ------------------------------------------------------------------------------- After connecting with Kerem, check out: - Michael Neil at Merrill Lynch - John McBride, SPHR, VBS at Consentium Search - Troy Henikoff at Excelerate (c) LinkedIn 2011

1 1

Re: [Dovecot] dovecot Digest, Vol 94, Issue 44
by Alan Brown 17 Feb '11

17 Feb '11

> Date: Wed, 16 Feb 2011 07:04:55 +0000 (GMT) > From: Spyros Tsiolis <stsiol(a)yahoo.co.uk> > Subject: [Dovecot] [Off Topic] - Any backup solutions ? > To: Dovecot <dovecot(a)dovecot.org> > Message-ID: <627531.34045.qm(a)web27203.mail.ukl.yahoo.com> > Content-Type: text/plain; charset=utf-8 > > OK, I know this is not for this list; However, reading all these > mails on the topic of filesystems, I thought that it's a good > place to ask about backup software on linux. Bacula works very well and scales to both small and large setups extremely easily. www.bacula.org

2 1

[Dovecot] Problem with messages with long lines
by ZMA - Emiliano Mariño 17 Feb '11

17 Feb '11

Hello dear mailing list readers, Recently I am experimenting a problem trying to retrieve messages over a POP3 protocol. Everything goes right until the POP3 client tries to retrieve a message that contains one or more long lines lines as long as 3000 characters or even more. The client (Outlook 2003 and 2007) stops on that message until timeout. I have opened a connection manually to see what happens, and when I issue the RETR command on one of these messages, dovecot informs the message size and then nothing else. No message sending. Any other message works fine; I get the message size and next the message itself. I have upgraded to version 2.0.1 but I still get the same behavior. No error is reported on the server side. Logs indicate that everything is just fine. Any advice on how to solve this would be very appreciated. Here is the dovecot 2.0.1 configuration: ############################################################################ ####### # 2.0.1: /etc/dovecot/dovecot.conf # OS: Linux 2.6.23.1-42.fc8 i686 Fedora release 8 (Werewolf) auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@& auth_verbose = yes disable_plaintext_auth = no listen = * login_greeting = Dovecot DA ready. mail_access_groups = mail mail_location = maildir:~/Maildir passdb { args = username_format=%n /etc/virtual/%d/passwd driver = passwd-file } passdb { driver = shadow } service auth { user = root } ssl_cert = </etc/httpd/conf/ssl.crt/server.crt ssl_cipher_list = ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:-LOW:-SSLv2:-EXP ssl_key = </etc/httpd/conf/ssl.key/server.key userdb { args = username_format=%n /etc/virtual/%d/passwd driver = passwd-file } userdb { driver = passwd } verbose_proctitle = yes protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } ############################################################################ ####### Thanks a lot for your time Kind regards, cid:image001.png@01CB7784.62522490 Emiliano Mariño Technical Analyst Senior <mailto:%20mkt4@zma.com.ar> tech7(a)zma.com.ar Larrea 1011 piso 8º | C1117ABE | Ciudad A. de Buenos Aires - ARGENTINA Tel: (5411) 4825-1602 | Fax: (5411) 4825-7692 <http://www.zma.com.ar/> www.zma.com.ar

4 3

[Dovecot] Logout fails after copy to non existing folder (mutt)
by Micha Krause 17 Feb '11

17 Feb '11

Hi, I have a Problem with mutt, and copying mails to a new folder. If I copy to a non existing folder, and try to logout, dovecot doesnt accept the logout. I was able to reproduce the problem with the following imap session: C: 1 login user pass S: 1 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS ACL RIGHTS=texk] Logged in C: 2 select INBOX S: 2 OK [READ-WRITE] Select completed. C: 3 UID COPY 82806 "INBOX.test" S: 3 NO [TRYCREATE] Mailbox doesn't exist: INBOX.test C: 4 LOGOUT S: <nothing> Micha Krause

2 1

[Dovecot] Dovecot + Exim + Maildir quota problem
by Matteo Tinazzi 17 Feb '11

17 Feb '11

Hi all i'm a new user of this list, i got a server with DirectAdmin which has exim as MUA, dovecot as POP/IMAP server, recently i added the quota to exim and pointed the maildirsize file in the same location if the dovecot's one so both services can interact with it. This has been done to let exim update the quotas while doing localdelivery while dovecot can show quotas through roundcube and update them when users delete mails. The issue that i noticed is that some users get wrong quota informations... after a little investigation i think it could be a concurrent access to this file so dovecot tries to remove the deleted mails fomr maildirsize and exim tries to put new ones inside. In a specific case i got a user with a quota of 50M seeing that 75% of his quota filled while the real weight of the mail files is about 4% ... any help would be very appreciated

1 1

[Dovecot] Evolution IMAP with Dovecot as proxy
by Antonio Perez-Aranda 17 Feb '11

17 Feb '11

We have some users who use Evolution as mail client. During migration process we are run Dovecot as proxy of Courier-imap until any user get migrated depend of ldap attribute. At present, the problem is that with Thunderbird and other clients, The client run as normal. But Evolution can't get new messages or Suscription list. Capabilities on Courier and Dovecot are differents, but when a connection is proxied to Courier, Courier print the Capabilitites. Any body has any idea of this? -- Antonio Pérez-Aranda Alcaide aperezaranda(a)yaco.es Yaco Sistemas S.L. http://www.yaco.es/ C/ Rioja 5, 41001 Sevilla Teléfono +34 954 50 00 57 Fax +34 954 50 09 29

3 11

[Dovecot] Dovecot 2.0.9/1.2.11: crash in driver-pgsql.c
by dovecot＠excellency.fr 17 Feb '11

17 Feb '11

Hello, I finally took time to isolate and reproduce a long time Dovecot crash that is bugging me since at least Dovecot 1.0.x. It's still there in Dovecot 2.0.9, which I just tested. Here is the backtrace from my logs: Feb 16 16:56:57 dovecot: auth: Error: pgsql: Query timed out, aborting Feb 16 17:25:16 dovecot: auth: Panic: file driver-pgsql.c: line 349 (result_finish): assertion failed: (db->io == NULL) Feb 16 17:25:16 dovecot: auth: Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0 [0x7fdbfe6d4272] -> /usr/lib/dovecot/libdovecot.so.0 [0x7fdbfe6d42d6] -> /usr/lib/dovecot/libdovecot.so.0(i_error+0) [0x7fdbfe6d46c8] -> dovecot/auth [0x42f555] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handle_timeouts+0xdd) [0x7fdbfe6df9bd] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x5e) [0x7fdbfe6e05be] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7fdbfe6df618] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7fdbfe6cd883] -> dovecot/auth(main+0x2d4) [0x419474] -> /lib/libc.so.6(__libc_start_main+0xe6) [0x7fdbfc4f91a6] -> dovecot/auth [0x40da09] Feb 16 17:26:35 dovecot: master: Error: service(auth): child 140263 killed with signal 6 (core not dumped) Both my userdb and passdb use a PostgreSQL database. The bug happens when the PostgreSQL host suddenly becomes unavailable. I can easily reproduce it by launching Dovecot with my host being up, and then null routing its IP address (to simulate an outage): route add -host 10.0.0.2 reject (10.0.0.2 being the IP address of the PostgreSQL host.) >From that point, if I try to authenticate (using a POP3 connection, for instance), dovecot-auth will crash one or two minutes later. In Dovecot 2.0.9, despite the crash, authentication will resume once the PostgreSQL is back up (which can be simulated with: route delete -host 10.0.0.2 reject). In Dovecot 1.x however (latest version I tested is 1.2.11), it will stay in this state forever (logs are flooded with Password query failed: Not connected to database.) Core dump is available on http://paste.excellency.fr/dovecot.core # dovecot -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.37 x86_64 Debian 5.0.6 auth_mechanisms = plain login auth_username_chars = disable_plaintext_auth = no first_valid_gid = 2000 first_valid_uid = 2000 listen = *, [::] log_timestamp = "%Y-%m-%d %H:%M:%S " mail_fsync = always mail_location = maildir:~/ mail_max_userip_connections = 100 mail_nfs_index = yes mail_nfs_storage = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mmap_disable = yes passdb { args = /etc/dovecot/dovecot-pgsql.conf driver = sql } plugin { quota = maildir sieve = filter.sieve sieve_max_actions = 64 sieve_max_redirects = 100 } protocols = imap pop3 service auth { unix_listener auth-client { mode = 0666 } } service imap-login { service_count = 0 } service imap { process_limit = 1024 } service managesieve-login { service_count = 0 } service pop3-login { service_count = 0 } service pop3 { process_limit = 1024 } ssl_cert = </etc/ssl/certs/my.pem ssl_key = </etc/ssl/private/my.key userdb { args = /etc/dovecot/dovecot-pgsql.conf driver = sql } protocol imap { imap_client_workarounds = delay-newmail mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota } # cat /etc/dovecot/dovecot-pgsql.conf driver = pgsql connect = host=10.0.0.2 dbname=foobar user=dovecot password=foobar default_pass_scheme = CRYPT password_query = SELECT password FROM mailbox WHERE domain = '%d' AND local_part = '%n' user_query = SELECT home, uid, gid, system_user, quota_rule FROM mailbox WHERE domain = '%d' AND local_part = '%n' -- Cyril

3 2

[Dovecot] Cannot subscribe to shared folders
by Lukas Haase 17 Feb '11

17 Feb '11

Hi, I am unable to subscribe to shared folders with Thunderbird although everything seems to be correct (dovecot 1.2). What does not work? I click "Subscribe..." in Thunderbird. The shared mailboxes are listed, all with [ ] (no checkbox). Therefore I mark them [x], click "subscribe" and "OK". However, the folders do not appear in the folder tree. Furthermore, when I again click "Subscribe..." the folders do NOT have the mark [x] any more. This happens on different computers with *new* profiles. My configuration is the following (maybe that is the problem?!): namespace private { separator = . prefix =. inbox = no list = no hidden = yes location = maildir:~/Maildir-root subscriptions = yes } namespace private { separator = . prefix = INBOX. inbox = yes subscriptions = yes } namespace public { separator = . prefix = Shared. location = maildir:/var/mail/shared:INDEX=~/Maildir/shared:LAYOUT=fs subscriptions = no } The folder /var/mail/shared has appropriate permissions/form: * Owner: $user:mailuser (all users are member of "mailuser") * All files 0660, all folders 0770 * There exists a dovecot-shared in every folder * There exists a dovecot-acl in each folder where each user has the permissions "lrwstie" I switched on "mail_debug = yes" but no messages. However, the file ~/Maildir-root/subscriptions contains the subscribed folders: Shared.Group1 Shared.Group2 Shared.Group1/Test Furthermore, I switched on rawlog. Everything seems to be OK as well: .in-file: 2 subscribe "Shared.Group1" 3 lsub "" "INBOX.*" 5 lsub "" "Shared.*" 6 list "" "INBOX" .out-file: 2 OK Subscribe completed. [...] I am pretty sure it already worked. But it stopped working. Does anybody have a hint what could be the problem? Regards, Luke

2 4

[Dovecot] dsync conversion error
by Frank Bonnet 17 Feb '11

17 Feb '11

Hello When converting mailboxes I get that kind of error messages : dsync(xxx): Error: Next message unexpectedly lost from mbox file /user/xxx/mail/Sent at 9580036 (cached) the dsync command I run is dsync -u xxx mirror mbox:/user/xxx/mail:INBOX=/var/mail/xxx Dovecot mail_location configuration is : mail_location = mbox:~/MailSpace/Mailboxes:DIRNAME=Mbox-Messages:INDEX=~/Index:CONTROL=~/Kontroll Note that ONLY happen on users's "Sent" folder, never on any other folder Thanks for any advices.

2 2

[Dovecot] Some questions about mdbox
by Maria Arrea 16 Feb '11

16 Feb '11

Hello I am starting testing with dovecot 2.0.9. In my //etc/dovecot/dovecot.conf/ I have the following line: /mail_location = mdbox:/mydomain.org/%2.26Hn/%2.200Hn/%n:INDEX=/mydomain.org/indexes/%2.26Hn… These are my questions (a long mail): *1º How should I restore from backup with mdbox & separate indexes?* I have read in dovecot list archive about restoring the full user mailbox to a temp location and then run something like: /doveadm import mdbox:/tmp/restored_mailbox/ "" savedsince 2011-01-01 / In my schema indexes and mail stores are in separated paths. What (and where!) should I copy to the temp location and how do I restore it? *2º Disaster recovery: indexes & mail store mismatch* When creating backups, indexes and mail store are in different paths. My backup takes several hours, so indexes are copied BEFORE mail stores. Is the backup consistent? What would happens if I lose indexes? Can I still recover the messages? Reading the doc it seems I would lose all the message flags and all the messages would be in INBOX, is this right? *3º Performance tuning with mdbox* I have read in dovecot archive about using mdbox_rotate_size & mdbox_rotate_interval to balance between a lot of smaill files (like Maildir) or really big files (a "variant" of mbox). I have tested with a big vaule of mdbox_rotate_size (100 MB) and is a complete disaster for backup:if a user delete a message, then a nightly cronjob purges the mailbox (refcount=0) a new mdbox .m file is created!. So deleting a 1 k message from the mailbox of an user is a new 99 MB file to backup. Any hint about this? I am also using ext4 (rw,noatime,nodiratime,commit=15,data=writeback) and I have read about mdbox_preallocate_space. I will try it, any hint about this setup? This is not still in production, so I have no idea about IOPs and user concurrency, but I have several thousand users. *4º Compression with mdbox* I am reading about compression in mdbox (zlib/bzlib). I am starting with zlib, has anyone experience with bzlib? How much load is bzlib against zlib and how much delay adds to user experience (and space savings vs zlib???) ? *5º Recover a message with refcount=0* Is there any way to recover a message with refcount=0 without using a backup? I am thinking about the following plan: /1º a user gets her mail via pop3 (or delete a message via imap and empties trash) 2º the message is still stored in my mail server, but has refcount=0 3º nightly backup is performed 4º nightly cronjob purges the mailbox (deleting messaged with refcount=0)/ Using this schema the backup is bigger, but If I can recover files with refcount=0 from backup we can give our users a safeguard against accidentaly deleted pop3 mail. Thank you very much for your responsed and sorry for my (awful) english! Maria

3 2

Re: [Dovecot] Some questions about mdbox
by Maria Arrea 16 Feb '11

16 Feb '11

Hello everybody I have found that with bzip compression level 6 I have a better balance between compression and decompression speed with dovecot+mdbox, but still too slow compared with zlib. Does anybody have any other hint about my original questions (see below) Regards Maria Arrea ----- Original Message ----- From: Maria Arrea Sent: 02/15/11 09:16 PM To: dovecot(a)dovecot.org Subject: [Dovecot] Some questions about mdbox Hello I am starting testing with dovecot 2.0.9. In my //etc/dovecot/dovecot.conf/ I have the following line: /mail_location = mdbox:/mydomain.org/%2.26Hn/%2.200Hn/%n:INDEX=/mydomain.org/indexes/%2.26Hn… These are my questions (a long mail): *1º How should I restore from backup with mdbox & separate indexes?* I have read in dovecot list archive about restoring the full user mailbox to a temp location and then run something like: /doveadm import mdbox:/tmp/restored_mailbox/ "" savedsince 2011-01-01 / In my schema indexes and mail stores are in separated paths. What (and where!) should I copy to the temp location and how do I restore it? *2º Disaster recovery: indexes & mail store mismatch* When creating backups, indexes and mail store are in different paths. My backup takes several hours, so indexes are copied BEFORE mail stores. Is the backup consistent? What would happens if I lose indexes? Can I still recover the messages? Reading the doc it seems I would lose all the message flags and all the messages would be in INBOX, is this right? *3º Performance tuning with mdbox* I have read in dovecot archive about using mdbox_rotate_size & mdbox_rotate_interval to balance between a lot of smaill files (like Maildir) or really big files (a "variant" of mbox). I have tested with a big vaule of mdbox_rotate_size (100 MB) and is a complete disaster for backup:if a user delete a message, then a nightly cronjob purges the mailbox (refcount=0) a new mdbox .m file is created!. So deleting a 1 k message from the mailbox of an user is a new 99 MB file to backup. Any hint about this? I am also using ext4 (rw,noatime,nodiratime,commit=15,data=writeback) and I have read about mdbox_preallocate_space. I will try it, any hint about this setup? This is not still in production, so I have no idea about IOPs and user concurrency, but I have several thousand users. *4º Compression with mdbox* I am reading about compression in mdbox (zlib/bzlib). I am starting with zlib, has anyone experience with bzlib? How much load is bzlib against zlib and how much delay adds to user experience (and space savings vs zlib???) ? *5º Recover a message with refcount=0* Is there any way to recover a message with refcount=0 without using a backup? I am thinking about the following plan: /1º a user gets her mail via pop3 (or delete a message via imap and empties trash) 2º the message is still stored in my mail server, but has refcount=0 3º nightly backup is performed 4º nightly cronjob purges the mailbox (deleting messaged with refcount=0)/ Using this schema the backup is bigger, but If I can recover files with refcount=0 from backup we can give our users a safeguard against accidentaly deleted pop3 mail. Thank you very much for your responsed and sorry for my (awful) english! Maria

1 0

[Dovecot] Auth processes/login processes count
by Thomas Hummel 16 Feb '11

16 Feb '11

Hello Timo, I'm running dovecot-1.2.12/Maildir/LDAP-passdb/LDAP-prefetched-userdb and I'm experiencing "random" latency (which even seem to make squirrelmail timeout sometimes) at login without noticing particular load on the server. LDAP backends are running fine as far as I know so I was investigating maybe mistuned limits : Dovecot is configured (for ~3000 users) with . each login processed in its own process : #login_process_per_connection = yes #login_max_connections = 256 . counts as : #login_processes_count = 3 login_max_processes_count = 1024 auth default { [...] count = 5 } I've got several questions : 1) how can I count more than login_max_processes_count processes ? # ps aux | egrep -i '(pop3|imap)-login' | wc -l # 1031 2) could be my auth process count the bottleneck ? is there a rule of thumb to deduce it from the login process count ? 3) on dovecot login/master/auth design, is my understanding correct ? - dovecot-1.2.x : . passdb and userdb lookup are done by the auth process, on behalf of either the login process which wants to know if the client's password is correct or of the master process which wants to check if it was actually correct and which wants to have the userdb info. . client connection fd is sent to the master which creates the mail process and transfers the fd to it. - dovecot-2.x : . client connection fd does not go through the master anymore but through a socket in the login/ directory . it's the mail process which ask the auth process for the userdb lookup 4) with LDAP backend using {CRYPT} passwords dans with plaintext auth enabled in dovecot, is the clear password crypted before comparing it to the LDAP crypted password or does dovecot try to simply bind to LDAP with the clear password ? Thanks -- Thomas Hummel | Institut Pasteur <hummel(a)pasteur.fr> | Groupe Exploitation et Infrastructure

2 1

[Dovecot] TLS with autosigned certs
by Antonio Perez-Aranda 16 Feb '11

16 Feb '11

Is normal this info/error with autosigned certs? Feb 14 20:25:47 pop3-login: Info: Disconnected (no auth attempts):ip=[127.0.0.1], port=[51243], protocol=pop3, TLS handshaking: SSL_accept() failed: error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca: SSL alert number 48 I set on config a specific certs for pop3 protocol including key, cert and ca, protocol pop3 { ssl_cert = </etc/ssl/pop3d.cert ssl_key = </etc/ssl/pop3d.key ssl_ca = </etc/ssl/ca.pem } If I check as true confirmed on Thunderbird client, then, the error is no reported any more. -- Antonio Pérez-Aranda Alcaide aperezaranda(a)yaco.es Yaco Sistemas S.L. http://www.yaco.es/ C/ Rioja 5, 41001 Sevilla Teléfono +34 954 50 00 57 Fax +34 954 50 09 29

3 3

[Dovecot] test emails did not arrive at SMTP server : after dovecot installation
by sunhux G 16 Feb '11

16 Feb '11

Just set up postfix & it's running on my RHES 4.2 box. Immediately after postfix is up, I test sending emails from a permitted domain (ahhh, on this postfix server's domain firewall, we even have a firewall rule which permits Tcp25 from those few sending domains' SMTP servers) using an email client to sender_id@[IP_address_of_the_postfix_server] & the /var/log/maillog on the postfix server indicated the email arrives at the postfix server (with some errors though) : # grep recipient_id /var/log/maillog* maillog:Feb 15 11:41:52 hostname postfix/smtpd[6891]: NOQUEUE: reject: RCPT from gate1.mds.com.sg[203.126.130.157]: 554 5.7.1 <recipient_id(a)[202.6.163.31]>: Relay access denied; from=<prvs=020cae8c4=recipient_id(a)mds.com.sg> to=<recipient_id(a)[202.6.163.31]> proto=ESMTP helo=<gate1.mds.com.sg> maillog:Feb 15 13:43:20 hostname sendmail[7688]: NOQUEUE: SYSERR(recipient_id): can not chdir(/var/spool/mqueue/): Permission denied Then I installed dovecot rpm on my RHES box : uninstall it as it's an old version & reinstall with a newer version & start up dovecot as well. I did not test sending to sender_id@domain_name at that time because the domain I purchased from a domain provider/registrar has yet to be registered in our ISP's DNS. Subsequently I registered the following A, MX & NS records with our ISP : A: myportaltech.com. IN A 202.6.163.31 A: smtp.myportaltech.com. IN A 202.6.163.31 PTR: 31.163.6.202.in-addr.arpa. IN PTR smtp.myportaltech.com. MX: myportaltech.com. IN MX 10 smtp.myportaltech.com. NS: myportaltech.com. IN NS ns1.businessexprezz.com. NS: myportaltech.com. IN NS ns2.businessexprezz.com. The above myportaltech is just a fictitious name of my domain but I can provide the actual domain name if needed. After the above records have been propagated to all other DNSes, I test sending email from the same permitted domain, this time using domain name & the email never arrives & I did not receive a 'bounced mail' notification too. Then I test sending from the same domain to recipient_id(a)[202.6.163.31] & this time round, the test email never show up in /var/log/maillog* anymore. The network/security guys confirmed that the firewall logs did not show any denied SMTP records. So how do I go about troubleshooting this? Is this a DNS record entries issue, firewall/network issue, related to dovecot or something within my postfix server? Thanks Sun

2 1

[Dovecot] Dovecot can't start with error pop3-login & imap-login not supported protocol family
by sunhux G 16 Feb '11

16 Feb '11

I've done the installation (rpm downloaded from the RHES4 link given by Oli below) but dovecot won't start, it gave the error pop3-login & imap-login not supported by protocol. I'm sure with a much older version (in my previous post) of dovecot, I'm able to start up dovecot & it did not give this error. Thought dovecot is suppose to come with pop3 & imap? # rpm -Uvh --force mysqlclient14-4.1.22-1.el4s1.1.i386.rpm warning: mysqlclient14-4.1.22-1.el4s1.1.i386.rpm: V3 DSA signature: NOKEY, key ID 443e1821 Preparing... ########################################### [100%] 1:mysqlclient14 ########################################### [100%] /sbin/ldconfig: /usr/lib/libcpqlsptransport.so.0 is not a symbolic link [root@tmp]# rpm -qa | grep -i mysql mysql-4.1.12-3.RHEL4.1 perl-DBD-MySQL-2.9004-3.1 php-mysql-4.3.9-3.8 mysql-server-4.1.12-3.RHEL4.1 mysqlclient14-4.1.22-1.el4s1.1 <== it's there now [root@tmp]# rpm -i ./dovecot-2.0.9-1_125.el4.i386.rpm warning: only V3 signatures can be verified, skipping V4 signature warning: only V3 signatures can be verified, skipping V4 signature [root@tmp]# cd /etc [root@etc]# ls -ld rc*/*dove* lrwxrwxrwx 1 root root 17 Feb 16 11:37 rc0.d/K01dovecot -> ../init.d/dovecot lrwxrwxrwx 1 root root 17 Feb 16 11:37 rc1.d/K01dovecot -> ../init.d/dovecot lrwxrwxrwx 1 root root 17 Feb 16 11:37 rc2.d/K01dovecot -> ../init.d/dovecot lrwxrwxrwx 1 root root 17 Feb 16 11:37 rc3.d/K01dovecot -> ../init.d/dovecot lrwxrwxrwx 1 root root 17 Feb 16 11:37 rc4.d/K01dovecot -> ../init.d/dovecot lrwxrwxrwx 1 root root 17 Feb 16 11:37 rc5.d/K01dovecot -> ../init.d/dovecot lrwxrwxrwx 1 root root 17 Feb 16 11:37 rc6.d/K01dovecot -> ../init.d/dovecot [root@nspplss2 etc]# ls -ld rc*/S*dove* ls: rc*/S*dove*: No such file or directory [root@nspplss2 etc]# pwd /etc [root@etc]# ls rc*/*postf* rc0.d/K30postfix rc2.d/S80postfix rc4.d/S80postfix rc6.d/K30postfix rc1.d/K30postfix rc3.d/S99postfixstart rc5.d/S80postfix [root@etc]# ln -s /etc/init.d/dovecot /etc/rc3.d/S70dovecot [root@etc]# ln -s /etc/init.d/dovecot /etc/rc5.d/S70dovecot [root@]# init.d/dovecot start Starting Dovecot Imap: Error: socket() failed: Address family not supported by protocol Error: service(pop3-login): listen(::, 110) failed: Address family not supported by protocol Error: socket() failed: Address family not supported by protocol Error: service(pop3-login): listen(::, 995) failed: Address family not supported by protocol Error: socket() failed: Address family not supported by protocol Error: service(imap-login): listen(::, 143) failed: Address family not supported by protocol Error: socket() failed: Address family not supported by protocol Error: service(imap-login): listen(::, 993) failed: Address family not supported by protocol Fatal: Failed to start listeners [FAILED] [root@etc]# telnet localhost 110 Trying 127.0.0.1... telnet: connect to address 127.0.0.1: Connection refused telnet: Unable to connect to remote host: Connection refused [root@etc]# rpm -qa | grep dove dovecot-2.0.9-1_125.el4 [root@etc]# chkconfig --list | grep pop3 [root@etc]# chkconfig --list | grep imap On Tue, Feb 15, 2011 at 8:39 PM, Oli Schacher <dovecot(a)lists.wgwh.ch> wrote: > On Tue, 15 Feb 2011 18:00:53 +0800 > sunhux G <sunhux(a)gmail.com> wrote: > > > I'm on RHES 4.x > > > > I downloaded 2 dovecot RPM packages from > > http://packages.sw.be/dovecot/ > > > > dovecot-1.0.13-1.el4.rfx.i386.rpm 13-Nov-2010 22:15 1.8M > > RHEL4 and CentOS-4 x86 32bit > > and > > dovecot-0.99.13-1.2.el4.test.i386.rpm 21-Feb-2005 16:57 693K > > RHEL4 and CentOS-4 x86 32bit > > > > [...] > >Q1: > >Is the test version rpm of dovecot reliable? It's only half the size > >of the other rpm (that I was not able to install) > > 0.9 / 1.0 : These versions are way out of date and you will probably > have a hard time getting support. I suggest you try the current > versions from atrpms.net We have been using the 2.0 RHEL5 packages by > Axel Thimm for quite some time now and they work flawlessly. > > Link for RHEL4 packages: http://packages.atrpms.net/dist/el4/dovecot/ > > Maybe this fixes Q2 as well ;-) > > Q3: You'll find lots of examples / tutorials in the dovecot wiki : > http://wiki2.dovecot.org/#HOWTOs.2C_examples_and_tutorials > > HTH > > Oli >

2 2

[Dovecot] [Off Topic] - Any backup solutions ?
by Spyros Tsiolis 16 Feb '11

16 Feb '11

Hello kind people, OK, I know this is not for this list; However, reading all these mails on the topic of filesystems, I thought that it's a good place to ask about backup software on linux. Here's what I have. It's an HP 230 Ultrium LTO 1 SCSI backup mechanism (tape streamer to be exact). I'm supposed to hook it up today with an adaptec AHA-2940 controller to a gigabyte mainboard running Ubuntu Server 10.04. Does anyone have a config close to this one ? What kind of software would you chaps recommend ? dd ? Bacula ?? Other ?? This mechanism is supposed to grab backups from the same machine running it (the tape streamer), which is an ubuntu server version 10.04 with three SATA disks and maybe some stuff remotely (through the local network that is), from a couple of windows 7 / windows xp machines. Also 100Gb on every tape is not going to be enough and it looks like I will have to swap tapes during the process. Thank you all for your time and patience, Best Regards, spyros ---- "I merely function as a channel that filters music through the chaos of noise" - Vangelis

1 0

[Dovecot] help with dovecot installation dependencies
by sunhux G 15 Feb '11

15 Feb '11

I'm on RHES 4.x I downloaded 2 dovecot RPM packages from http://packages.sw.be/dovecot/ dovecot-1.0.13-1.el4.rfx.i386.rpm 13-Nov-2010 22:15 1.8M RHEL4 and CentOS-4 x86 32bit and dovecot-0.99.13-1.2.el4.test.i386.rpm 21-Feb-2005 16:57 693K RHEL4 and CentOS-4 x86 32bit The first rpm fails with error below : # rpm -i ./dovecot-1.0.13-1.el4.rfx.i386.rpm warning: ./dovecot-1.0.13-1.el4.rfx.i386.rpm: V3 DSA signature: NOKEY, key ID 6b8d79e6 error: Failed dependencies: libmysqlclient.so.14(libmysqlclient_14) is needed by dovecot-1.0.13-1.el4.rfx.i386 I have a hard time trying to locate an rpm that contains libmysqlclient.so.14 & have no luck : # rpm -i ./mysql-libs-5.1.42-4.el6.i686.rpm warning: ./mysql-libs-5.1.42-4.el6.i686.rpm: V3 RSA/MD5 signature: NOKEY, key ID f21541eb error: Failed dependencies: libcrypto.so.10 is needed by mysql-libs-5.1.42-4.el6.i686 libssl.so.10 is needed by mysql-libs-5.1.42-4.el6.i686 rpmlib(FileDigests) <= 4.6.0-1 is needed by mysql-libs-5.1.42-4.el6.i686 rtld(GNU_HASH) is needed by mysql-libs-5.1.42-4.el6.i686 rpmlib(PayloadIsXz) <= 5.2-1 is needed by mysql-libs-5.1.42-4.el6.i686 Then I installed the 2nd dovecot rpm successfully but its filename indicated it's a "test" version : # rpm -i ./dovecot-0.99.13-1.2.el4.test.i386.rpm warning: ./dovecot-0.99.13-1.2.el4.test.i386.rpm: V3 DSA signature: NOKEY, key ID 6b8d79e6 # /etc/init.d/dovecot start Starting IMAP daemon (dovecot): [ OK ] Q1: Is the test version rpm of dovecot reliable? It's only half the size of the other rpm (that I was not able to install) Q2: Kindly assist me to resolve the 1st rpm issue : let me know where I can download the dependencies etc Q3: Lastly, kindly point me to a simple doc that tells me how to do basic setup of dovecot & create simple mailbox accounts. I'm a complete newbie to dovecot & postfix. Have some Linux know-how

2 3

[Dovecot] Recover a deleted message in MDBOX format ?
by Frank Bonnet 15 Feb '11

15 Feb '11

Hello Every night a backup of all mailboxes is performed to a NFS mounted partition All our mailboxes are now in MDBOX format. I wonder how it would be possible to recover one email accidentally deleted by a user ? It was easy in MBOX format to extract and save it using mutt ( as root ) from the backuped mbox then re-copy it to the user's mbox. Of course I should access to the backup mailboxes space using thunderbird but doing this I need to know every users's passwords, that is unacceptable. for security and privacy reasons. Let users access to the backup space is not possible of course. Is there a tool ? Thanks

1 1

[Dovecot] FreeBSD tuning for a dovecot + postfix server ?
by Frank Bonnet 14 Feb '11

14 Feb '11

Hello I've googled around to tune a bit my mailhub ( AMD64 FreeBSD 8.1, 12 Gb RAM, 2 Tb raid5 disks , ~4000 mailboxes unix users ) but I am a bit confused, All my clients use thunderbird as MUA ( IMAP, IMAPS ) to connect to the mailhub no direct access to the machine. Any of you guys has some pointer to give ? thanks a lot

2 1

[Dovecot] NoSQL Storage Backend
by Marten Lehmann 14 Feb '11

14 Feb '11

Hello, I found a posting on the mailing list from 2008 "Adding new storage backend to Dovecot" while searching for POP3 and IMAP servers, that allow to use a NoSQL backend rather than a traditional file system. The problem with traditional filesystems is, that they are very limited. You cannot easily extend it, even with RAID 10 all messages may be lost due to a RAID controller failure and just-in-time backups of a heavy loaded system with consistently changing messages folders are virtually impossible. Modern object stores like Scality, CouchDB or MongoDB can be very handy, as they easily allow to keep an arbitrary amount of copies of each message on different servers, you can simply add a storage node and new storage is immediately available and mailboxes aren't bound to a certain server any longer, but messages are evenly distributed across all storage nodes, thus distributing load as well. Since the original posting was dated 2008 I was in good hope, that someone worked on that already, but at least in dovecot-2.0.9/src/lib-storage I couldn't find anything relating to NoSQL message stores. Isn't this option of big interest for every bigger mailbox provider? How hard would it be to develop? Would it be possible to get this developed on a paid basis by the dovecot core team? Kind regards Marten

10 11

[Dovecot] Dsync parallel conversion warning
by Frank Bonnet 14 Feb '11

14 Feb '11

Hello When I run multiple dsync processes in parallel I sometime get this warning message (xxxxxxxx): Warning: Transaction log file /user/xxxxxxxx/mail/.imap/INBOX/dovecot.index.log was locked for xxx seconds "xxx seconds" is variable Is it a problem or just a real warning ? Thanks

2 4

Re: [Dovecot] critical feature from version 1 not migrated to version 2 = authentication configuration database per IP
by DaLiV＠apollo.lv 14 Feb '11

14 Feb '11

Timo Sirainen wrote: >> - another way (possible that will be more easiest, and good enough for >> advanced configurations) = single variable that may be set in block >> of exact ip listener configuration , as for provided before example >> may set variable "auth_db_suffix" = string("dc=domain1,dc=tld") for >> definition "local mail.domain1.tld" and that variable are inserted in >> auth block via variable inserting mechanism ... >> > Again not possible, because config parsing is done much earlier. > think for realization can take idea from that patch : --------------------------------- --- src/auth/auth-request.c.orig 2010-12-30 11:42:54.000000000 +0200 --- src/auth/auth-request.c.orig 2010-12-30 11:42:54.000000000 +0200 @@ -1547,6 +1547,7 @@ auth_request_get_var_expand_table(const { '\0', NULL, "login_user" }, { '\0', NULL, "login_username" }, { '\0', NULL, "login_domain" }, + { 'x', NULL, NULL }, { '\0', NULL, NULL } }; struct var_expand_table *tab; @@ -1600,6 +1601,15 @@ auth_request_get_var_expand_table(const auth_request); } } + const char *lip2user[][2] = {{"127.0.0.3","dc=domain1,dc=tld1"},{"127.0.0.1","localhost"},{"127.0.0.2","dc=domain2,dc=tld2"}}; + int arrsize=sizeof( lip2user ) / sizeof( lip2user[0]); + tab[18].value = ""; // default expanded to - emty string + int i; + for(i=0;i<arrsize;i++) { + if (strcmp(net_ip2addr(&auth_request->local_ip),(lip2user[i][0]))==0) { + tab[18].value = lip2user[i][1]; + } + } return tab; } --------------------------------- and there need only possibility to define pairs in config file for lip2user array initialization - then macro/variable %x will be available for substitution in all modules - as for ldap , as for filename-based parameters. in exaple patch created static table to match lip to suffix 127.0.0.3 = "dc=domain1,dc=tld1" 127.0.0.1 = "localhost" 127.0.0.2 = "dc=domain2,dc=tld2" how to initialize arrays from config - i'm was not explored for currently used coding structures may create this array more complex = not as simple pair - but as for selective conversion: %x1 lip to text1, %x2 lip to text2, %x3 lip to text3 ... - then diffirent advanced configurations will be possible ...

1 0

[Dovecot] SIS generating 2 different hashes for the same mail and attachment
by Nick Rosier 14 Feb '11

14 Feb '11

Hi, I've been testing SIS over the weekend as it seems to be a nifty feature. I don't have that many users and mailboxes but still... I only added the following line to my configuration: mail_attachment_dir = /var/spool/vmail/attachments As a test I sent a mail from GMail to 2 mailboxes (1 To and 1 CC). The attachment got saved to the attachment directory (on ZFS): # find . ./04 ./04/78 ./04/78/0478b28c2a4c235370bb3cef4bc0482bb6000dae-b8819638a60e574d5b530100bde47b1f-2088e7301f9e3c4dc97e0000bde47b1f-244 ./04/78/0478b28c2a4c235370bb3cef4bc0482bb6000dae-007dcd01a70e574d5c530100bde47b1f-98d08416e4712b4d75310100bde47b1f-192 # ls -l total 519 -rw------- 1 vmail vmail 242866 Feb 12 23:50 0478b28c2a4c235370bb3cef4bc0482bb6000dae-007dcd01a70e574d5c530100bde47b1f-98d08416e4712b4d75310100bde47b1f-192 -rw------- 1 vmail vmail 242866 Feb 12 23:50 0478b28c2a4c235370bb3cef4bc0482bb6000dae-b8819638a60e574d5b530100bde47b1f-2088e7301f9e3c4dc97e0000bde47b1f-244 So these files are not hardlinks, they are 2 seperate files. Checksums are the same: # sum * 58522 238 0478b28c2a4c235370bb3cef4bc0482bb6000dae-007dcd01a70e574d5c530100bde47b1f-98d08416e4712b4d75310100bde47b1f-192 58522 238 0478b28c2a4c235370bb3cef4bc0482bb6000dae-b8819638a60e574d5b530100bde47b1f-2088e7301f9e3c4dc97e0000bde47b1f-244 # md5 * MD5 (0478b28c2a4c235370bb3cef4bc0482bb6000dae-007dcd01a70e574d5c530100bde47b1f-98d08416e4712b4d75310100bde47b1f-192) = 684863b31dad701857642caedcdbf20a MD5 (0478b28c2a4c235370bb3cef4bc0482bb6000dae-b8819638a60e574d5b530100bde47b1f-2088e7301f9e3c4dc97e0000bde47b1f-244) = 684863b31dad701857642caedcdbf20a Did I miss something? I would have expected the file once in the attachment_dir. Rgds, N.

1 0

[Dovecot] Question about mdbox_preallocate_space and ext4
by Javier de Miguel Rodríguez 14 Feb '11

14 Feb '11

Hello Can anyone explain about mdbox_preallocate_space and ext4? Regards Javier

2 1

[Dovecot] Can't connect to auth server
by Phill Edwards 13 Feb '11

13 Feb '11

I'm trying to phase out procmail and move to dovecot-sieve instead. It ain't proving easy. I'll describe my setup: - Centos 5.2 box with dovecot 1.1.4 and dovecot-sieve 1.1.6 from ATrpms. - A single user account is used to store all our email (the account is called maildb). - Getmail is being used to fetch the email from various ISP mailboxes. I want to deliver mail to different folders in maildb's Maildir/ depending on who the email is addressed to (the procmail recipes currently do that). - Getmail destination section looks like this: [destination] type = MDA_external path = /usr/libexec/dovecot/deliver arguments = ("-d", "maildb") allow_root_commands = true - When I run getmail I get this error in dovecot.log: deliver(maildb): May 04 22:15:26 Error: Can't connect to auth server at /var/run/dovecot/auth-master: No such file or directory It's true that I don't have a file called auth-master. I guess I should have but until I started this dovecot-sieve work it was never a problem. I have no idea what that file should look like. As I installed from binary RPMs I would have thought one would have come with the install. Can anyone help? Regards, Phill

4 6

[Dovecot] lmtp logging to separate file
by Nikita Koshikov 12 Feb '11

12 Feb '11

Hello list, Testing lmtp deliver I can't constrain it to log all activity to separate file, like dovecot-lda does. Here is config: protocol lmtp { info_log_path = /var/log/dovecot/dovecot-deliver.log log_path = /var/log/dovecot/dovecot-deliver.log mail_plugins = acl quota trash virtual zlib expire sieve } protocol lda { info_log_path = /var/log/dovecot/dovecot-deliver.log log_path = /var/log/dovecot/dovecot-deliver.log mail_plugins = acl quota trash virtual zlib expire sieve } When message is proceed via protocol lda - record appear in /var/log/dovecot/dovecot-deliver.log, but when message arrives by protocol lmtp - logs got to /var/log/dovecot.log file. Is this settings suppose to be overwritten ?

2 4

[Dovecot] dsync parallel conversions ?
by Frank Bonnet 12 Feb '11

12 Feb '11

Hello Would it be possible to run multiple dsync command in parallel ? I have 4000 mailboxes to convert nad it takes a LOT of time to do so when running dsync one by one ... Thanks

2 2

[Dovecot] preserving \Recent when moving messages
by Mark Hedges 12 Feb '11

12 Feb '11

Is there any way to preserve \Recent, or am I out of luck? Some people have reported that my script which shuffles around expired or oversized mail also causes their clients to report it as already read. I guess those clients check \Recent instead of \Seen when they download. I wish I knew which clients. With Mail::IMAPClient I tried using move(), copy(), and migrate() but the result is the same-- once it looks at the source message, \Recent is gone. (I tried patching it where it greps out the \Recent flag before appending the messages, but that causes a silent error.) Directly appending to the destination folder does not help either, since I would lose any flags set by the user, and if I tried to preserve those, then I would lose the \Recent flag when I read through the destination folder to figure out which messages were which. RFC5301 says \Recent can never be set... but does its prohibition include the case of migrating mail, where the intent is to retain them intact? It would be nice if Dovecot offered a migration feature which would move a message from folder to folder without unsetting \Recent. Mark

2 1

[Dovecot] Connection refused. Mail Client Error: 800ccccd9. Please help :-))))
by michael＠lattari.eu 12 Feb '11

12 Feb '11

Hi! I cannot connect to the dovecot server :-( I get Windows Mail Client Error: 800ccccd9. Please help :-)))) # 2.0.beta6 (3156315704ef): /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-71.el6.x86_64 x86_64 Scientific Linux release 6.0 (Carbon) auth_debug = yes auth_debug_passwords = yes auth_verbose = yes auth_verbose_passwords = plain debug_log_path = /var/log/dovecot.log disable_plaintext_auth = no info_log_path = /var/log/dovecot.log listen = * log_path = /var/log/dovecot.log login_trusted_networks = 192.168.0./24 mail_debug = yes mbox_write_locks = fcntl passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocols = imap service imap-login { inet_listener imap { port = 143 } } ssl = no syslog_facility = local6 userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } verbose_proctitle = yes verbose_ssl = yes dovecot.log (very poor info on what happened - connections are not logged.... ): Feb 10 09:50:25 master: Info: Dovecot v2.0.beta6 (3156315704ef) starting up (core dumps disabled) Feb 10 10:07:07 master: Warning: Killed with signal 15 (by pid=7048 uid=0 code=kill) Feb 10 10:07:08 master: Info: Dovecot v2.0.beta6 (3156315704ef) starting up (core dumps disabled) Feb 10 10:08:04 doveadm: Debug: This is Dovecot's debug log (1297328884) Feb 10 10:08:04 doveadm: Info: This is Dovecot's info log (1297328884) Feb 10 10:08:04 doveadm: Warning: This is Dovecot's warning log (1297328884) Feb 10 10:08:04 doveadm: Error: This is Dovecot's error log (1297328884) Feb 10 10:08:04 doveadm: Fatal: This is Dovecot's fatal log (1297328884) Feb 10 10:47:24 master: Warning: Killed with signal 15 (by pid=7160 uid=0 code=kill) Feb 10 10:47:56 master: Info: Dovecot v2.0.beta6 (3156315704ef) starting up (core dumps disabled) Feb 10 10:47:57 master: Warning: Killed with signal 15 (by pid=7194 uid=0 code=kill) Feb 10 10:47:58 master: Info: Dovecot v2.0.beta6 (3156315704ef) starting up (core dumps disabled) Feb 10 10:50:45 master: Warning: Killed with signal 15 (by pid=7218 uid=0 code=kill) Feb 10 10:50:46 master: Info: Dovecot v2.0.beta6 (3156315704ef) starting up (core dumps disabled) Feb 10 10:56:38 master: Warning: Killed with signal 15 (by pid=7254 uid=0 code=kill) Feb 10 10:56:39 master: Info: Dovecot v2.0.beta6 (3156315704ef) starting up (core dumps disabled) [root@filemon conf.d]# ls -al /var/run/dovecot total 20 drwxr-xr-x 4 dovecot dovecot 4096 Feb 10 10:56 . drwxr-xr-x 15 root root 4096 Feb 10 10:02 .. srw------- 1 root root 0 Feb 10 10:56 anvil srw------- 1 root root 0 Feb 10 10:56 anvil-auth-penalty srw------- 1 root root 0 Feb 10 10:56 auth-client srw------- 1 dovecot root 0 Feb 10 10:56 auth-login srw------- 1 root root 0 Feb 10 10:56 auth-master srw------- 1 root root 0 Feb 10 10:56 auth-userdb srw------- 1 dovecot root 0 Feb 10 10:56 auth-worker srw------- 1 root root 0 Feb 10 10:56 config srw------- 1 root root 0 Feb 10 10:56 dict srw------- 1 root root 0 Feb 10 10:56 director-admin srw-rw-rw- 1 root root 0 Feb 10 10:56 dns-client lrwxrwxrwx 1 root root 25 Feb 10 10:56 dovecot.conf -> /etc/dovecot/dovecot.conf drwxr-xr-x 2 root root 4096 Nov 23 03:34 empty drwxr-x--- 2 root dovenull 4096 Feb 10 10:56 login -rw------- 1 root root 5 Feb 10 10:56 master.pid -rw------- 1 root root 0 Feb 9 23:57 rsyslog auth-sql.conf.ext: passdb { driver = sql args = /etc/dovecot/dovecot-sql.conf.ext } userdb { driver = sql args = /etc/dovecot/dovecot-sql.conf.ext } /dovecot/dovecot-sql.conf.ext: driver = mysql connect = host=localhost dbname=dovecot user=dovecot password=123test default_pass_scheme = MD5 password_query = \ SELECT username AS user, password, \ home AS userdb_home, uid AS userdb_uid, gid AS userdb_gid \ FROM users WHERE username = '%u' and domain='%n' Thanks for the HELP !!!

4 3

[Dovecot] problem configuring deliver in LDAP environment.
by Andrea Borghi 12 Feb '11

12 Feb '11

hello I am using dovecot-1.2.15 in debian squeeze (packaged) and i have some difficulties migrating from an older installation tha is working perfectly. i have a transport defined in postfix to call deliver as follows: dovecotlda unix - n n - - pipe flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/deliver -s -e -f ${sender} -d ${recipient} with the auth-socket in dovecot.conf all ok and this in ldap-userdb.conf: user_attrs = vdHome=chroot,mailbox=mail=maildir:%$,quota=quota_rule=*:bytes=%$,otherPath=sieve you see, i have the base directory for the chroot for the entire mail system in ldap:vdHome as /home/vmail/domains and the actual location of the mailbox in maildir format in ldap:mailbox so i can have the actual complete path as /(vdHome)/(mailbox) This is running smoolthly, BUT the chroot environment with all the library dependencies is REALLY REALLY limiting because the huge number of files from the system i must put on the mail storeage (which is networked and used by more systems so i cannot put libraries and binaries there) What i am trying to do is leaving all the dovecot services running in chroot mode (as they do) but let deliver running in NORMAL (non-chroot mode) so i need to remove the chroot variable in userattr reply, and parametrize the mail location with the two ldap values. i am conscious that i can set up this as user_attrs = mailbox=mail=maildir:/home/vmail/domains/%$,quota=quota_rule=*:bytes=%$,otherPath=sieve but I WANT TO KEEP THE BASE DIR PARAMETRIZED to leave me the possibility to set the base dir in LDAP to goup the accounts on different mail storage system. So you know a method to substitute TWO ldap values in the mail parameter definition? Thank you Andrea

2 5

[Dovecot] Questions about dovecot-shared in 1.2 and inherit group membership from parent mailbox
by Lukas Haase 11 Feb '11

11 Feb '11

Hi, I read the Wiki about dovecot-shared a few times but it is not 100% clear to me (at least for 1.2). First, if I want shared keywords I *must* have a dovecot-shared. In this case, the permissions are not taken any longer from the parent folder (what is exactly this parent folder?) but from the dovecot-shared file. So in some sense dovecot-shared is always required (since everyone would like to share keywords). True? Second, is there only *one* dovecot-shared per namespace or per mailbox *under* a specific namespace? Or an arbitrary number (where the "last" is taken)? Where does dovecot-shared need to be placed? For example, if the location of the namespace points to /var/mail/shared and I have two mailboxes "group1" and "group2" inside. Does the dovecot-shared need to reside in /var/mail/shared or /var/mail/shared/group1 and /var/mail/shared/group2 (with LAYOUT=fs)? Is it possible? Third (and main) question: In /var/mail/shared I want to have a mailbox for each group. Each user is member of his respective groups (in terms of UNIX permissions *and* ACLs). The mailboxes are owned by their respective groups and if a user creates a subfolder inside it should surely have the same group assigned as the parent mailbox (not the namespace!). namespace public { separator = . prefix = Shared. location = maildir:/var/mail/shared:INDEX=~/Maildir/shared:LAYOUT=fs subscriptions = no } mail:~# ls -l -R /var/mail/shared/ /var/mail/shared/: total 12 drwxrwx--- 5 root group1 4096 Feb 9 11:53 Group1 drwxrwx--- 5 root group2 4096 Feb 9 12:27 Group2 -rw-r--r-- 1 root root 23 Feb 9 11:52 dovecot-acl -rw-rw-r-- 1 root root 0 Dec 15 2009 dovecot-shared /var/mail/shared/Group1: total 16 drwxrwx--- 2 root group1 4096 Feb 8 10:35 cur -rw-r--r-- 1 root group1 28 Feb 9 11:52 dovecot-acl -rw-rw-r-- 1 root group1 0 Dec 15 2009 dovecot-shared drwxrwx--- 2 root group1 4096 Dec 15 2009 new drwxrwx--- 2 root group1 4096 Feb 8 10:34 tmp /var/mail/shared/Group1/cur: total 0 /var/mail/shared/Group1/new: total 0 /var/mail/shared/Group1/tmp: total 0 /var/mail/shared/Group2: total 16 drwxrwx--- 2 root group2 4096 Feb 8 10:35 cur -rw-r--r-- 1 root group2 27 Feb 9 11:52 dovecot-acl -rw-rwS--- 1 root group2 0 Dec 15 2009 dovecot-shared drwxrwx--- 2 root group2 4096 Dec 15 2009 new drwxrwx--- 2 root group2 4096 Feb 8 10:34 tmp /var/mail/shared/Group2/cur: total 0 /var/mail/shared/Group2/new: total 0 /var/mail/shared/Group2/tmp: total 0 Again: *Inside* /var/mail/shared I want to create mailboxes for each group (Group1, Group2, ...). This is done only by the administrator. Therefore /var/mail/shared is owned by root. Each Group1, Group2, ... in turn is owned by group1, group2, ... I tried all combinations using dovecot-shared which came into my mind such that a subfolder of Group1 is owned by group1. However, either 1.) the subfolder is owned by the primary group of the creating user (group "users") or 2.) the group of /var/mail/shared/dovecot-shared or 3.) creation of the subfolder fails with dovecot: IMAP(user1): chown(/var/mail/shared/Group2/Test1, -1, 0(root)) failed: Operation not permitted (egid=100(users), group based on /var/mail/shared/dovecot-shared) dovecot: IMAP(user1): mkdir(/var/mail/shared/Group2/Test1/cur) failed: Operation not permitted Is this just not possible or do I get something wrong here? Regards, Luke

2 4

[Dovecot] PAM auth and userdb
by Matthias Lohmann 11 Feb '11

11 Feb '11

Hi all, I've just setup dovecot 2.0.9 on Solaris 10 - everything works fine so far. I'm authentication my users with PAM (against /etc/passwd) -> works The users get the default quota setting from dovecots config. Now I like to override the quota settings for some users. So I created a userdb - but it seems, that its not used ... What might be wrong? # 2.0.9: /opt/dovecot2.0.9/etc/dovecot/dovecot.conf # OS: SunOS 5.10 sun4v auth_debug = yes auth_username_chars = abcdefghijklmnopqrstuvwxyz01234567890.- auth_verbose = yes default_login_user = nobody disable_plaintext_auth = no first_valid_gid = 215 first_valid_uid = 300 log_path = /var/log/dovecot.log login_access_sockets = tcpwrap mail_location = mbox:~/IMAP:INBOX=/var/mail/%u:INDEX=/var/dovecotindexes/%u mail_plugins = quota passdb { driver = pam } plugin { quota = dict:User quota::file:/var/dovecotindexes/%u/dovecot-quota quota_rule = *:storage=1G quota_rule2 = Trash:storage=+100M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u } [...] userdb { driver = passwd } userdb { args = username_format=%u /opt/dovecot/etc/users driver = passwd-file } My userdb contains lines like this user301::301:220::/usr/users/user301::userdb_quota_rule=*:storage=200M And here we have some debug output Feb 11 16:55:24 auth: Debug: passwd-file /opt/dovecot/etc/users: Read 1 users Feb 11 16:55:24 auth: Debug: pam(user301,2.1.1.2): lookup service=dovecot Feb 11 16:55:24 auth: Debug: pam(user301,2.1.1.2): #1/1 style=1 msg=Password: Feb 11 16:55:24 auth: Debug: client out: OK 1 user=user301 Feb 11 16:55:24 auth: Debug: master in: REQUEST 1627258881 20594 1 90f9d76fc9ac35bcb78212825868522a Feb 11 16:55:24 auth: Debug: passwd(user301,2.1.1.2): lookup Feb 11 16:55:24 auth: Debug: master out: USER 1627258881 user301 system_groups_user=user301 uid=301 gid=220 home=/usr/users/user301 Feb 11 16:55:24 pop3-login: Info: Login: user=<user301>, method=PLAIN, rip=2.1.1.2, lip=2.1.1.22, mpid=20607 Feb 11 16:55:25 pop3(user301): Info: Disconnected: Logged out top=0/0, retr=0/0, del=0/9, size=71445 Even doveadm gives the wrong quota root@> /opt/dovecot/bin/doveadm quota get -u user301 Quota name Type Value Limit % User quota STORAGE 72288 1048576 6 User quota MESSAGE 1258 - 0 Any hints for me? Thanks in advance. Kind regards Matt

2 1

[Dovecot] [Q] auth(default): plain(?, 11.111.206.99): Username contains disallowed character: 0x20
by JKL 11 Feb '11

11 Feb '11

Dear all, A new user with Microsoft Express is trying to use IMAP SSL port 993. However they cannot log in. Its only with them. The logs details the following: Feb 11 18:56:03 logout dovecot: auth(default): plain(?,11.111.206.99): Username contains disallowed character: 0x20 Feb 11 18:58:07 logout dovecot: imap-login: Disconnected (auth failed, 1 attempts): method=PLAIN, rip=11.111.206.99, lip=62.58.61.184, TLS: Disconnected I think that the 0x20 is a space. However the user states that they are using this format and that there is no space: user.name(a)test.com Does anyone know where I could start to look for this? Regards,S

2 2

[Dovecot] Domain blacklisting
by Thomas Hummel 11 Feb '11

11 Feb '11

Hello, I run dovecot-2/Maildir/LDAP user/passdb and would like to be able to deny acess to users who connect from certain domains/IP (google.com for instance since in that case they gave their credentials to a third party). My understanding is that I cannot use some negative form of "allow_nets". The only mechanism I can think of is tcp_wrappers. However, dovecot documentation mention it only in the dovecot-1 section. Does it work the same way with dovecot-2 ? Is it a bad idea (I'm thinking of the induced overhead) ? Can you see another way to blacklist (at dovecot application level) some sources ? Thanks -- Thomas Hummel | Institut Pasteur <hummel(a)pasteur.fr> | Pôle informatique - systèmes et réseau

3 6

[Dovecot] doveadm -A or -u
by Matt Rude 11 Feb '11

11 Feb '11

Did something change in doveadm? One of my scripts blew up last night saying that -A is not a valid flag. The -A and -u flags seem to not be working on trunk anymore. # dovecot --version 2.0.9 (723a26a7d328) # doveadm expunge -u matt mailbox Junk savedbefore 31d doveadm(matt): Fatal: Unknown argument MATT (matt of course is the user sending this message on this server) # doveadm -Dv expunge -A mailbox Junk savedbefore 31d doveadm(matt): Debug: Loading modules from directory: /usr/lib/dovecot doveadm(matt): Debug: Module loaded: /usr/lib/dovecot/lib10_quota_plugin.so doveadm(matt): Debug: Module loaded: /usr/lib/dovecot/lib20_expire_plugin.so doveadm(matt): Debug: Module loaded: /usr/lib/dovecot/lib20_zlib_plugin.so doveadm(matt): Debug: Loading modules from directory: /usr/lib/dovecot/doveadm doveadm(matt): Debug: Module loaded: /usr/lib/dovecot/doveadm/lib10_doveadm_expire_plugin.so doveadm(matt): Debug: Module loaded: /usr/lib/dovecot/doveadm/lib10_doveadm_quota_plugin.so doveadm(matt): Debug: Module loaded: /usr/lib/dovecot/doveadm/lib10_doveadm_zlib_plugin.so doveadm(matt): Fatal: Unknown argument -A Also with the quota plugin. # doveadm -f tab quota get -A doveadm(matt): Fatal: doveadm quota get: Unknown parameter: -A I can provide a doveconf -n and mySQL config files if needed. Thanks -Matt

2 1

[Dovecot] Separate access to different "folders" of the same mailbox?
by Alexander Chekalin 11 Feb '11

11 Feb '11

Hello Timo and everyone, I think on such an idea that may save me a bit of space and time: in my company we have a mailbox that holds a copy of every message that our SMTP processed. While it eats a lot of space, it saved us several times when, you may imaging, user "suddenly" deleted the most important message in his life and call our IT guys for help. The mailbox contains "folders" for each day (like 2011-02-10), which keeps mailings for that day only. Even with this, it is sometime hard to work with that "keep all" box (basically, it is slow as the size is huge). What I'd like to add is some kind of "virtual folders" (for each of our internal users) that list messages from and to his address. And I'd like to permit every user to see (that is, read only mode) only "his" such a virtual folder in our "keep all" box, so user can see his old messages on his own. Looks like 1) I need an ACL to limit user access to "their" folders and somehow hide other folders at all 2) Have such virtual folders work with huge ammount of mailings (kind of 300 Gb), separated in maybe 1000 folders (per days). I really afraid it will be slo-o-o-ow search, even with indexes (I mean, virtual folder that is defined as search over 1000 folders will be not that fast). The mailbox is maildir by nature. How can I archive these goals with smallest load possible, and if it is possible at all? Thank you, Alexander Chekalin

5 4

[Dovecot] xi.rename-it.nl/debian/ dovecot-2.0 sieve problem
by Martin Rozgonski 11 Feb '11

11 Feb '11

Hi, i used to use deb http://xi.rename-it.nl/debian/ stable-auto/dovecot-2.0 main to update dovecot 1.2 with debian lenny. I used the convert script to change my configuration file. Everything works fine but sieve does not work anymore. There is no error in the logs but dovecot simply ignores any filter. I checked the documentation/configuration twice and had still no success. Maybe, this is a known/unknown bug or any suggestions? Best regards Martin Rozgonski

3 6

[Dovecot] Error: managesieve-login: dump-capability failed: process got stuck
by Pascal Volk 11 Feb '11

11 Feb '11

Hi Stephan, after applying the latest changesets to dovecot (i guess 08e4280e5bfd), `make`, `make install` and restarting dovecot, I saw that error: doveconf: Error: managesieve-login: dump-capability failed: process 5467 got stuck Regards, Pascal -- The trapper recommends today: beeffeed.1104203(a)localdomain.org

2 1

[Dovecot] mdbox, sis, zlib
by Daniel L. Miller 11 Feb '11

11 Feb '11

I'm still having issues with the combination of mdbox, sis, and zlib. Is anyone else using these without seeing any errors in the logs? -- Daniel

1 0

[Dovecot] multiple domains
by Sergio Moscoso 10 Feb '11

10 Feb '11

Anybody can help me with this issue. It's the right place to submit thios question, please help me. Actually we have configured a server (postfix,dovecot,mysql) with multiple domains, but the problem resides in that we don't want to login via POP3 using "user@domain" just using "user", because we'll migrate our actual platform (Qmail) to dovecot. Our users are logging to their mail boxes, using only user name. We want to ask if that's posible to use a function like a "vipmap" in qmail, that allow to map an IP address to a domain. We're using the dovecot 1.0.7, the configuration shows as follows: login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login first_valid_uid: 100 mail_location: maildir:~/Maildir/ mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 imap_client_workarounds(default): delay-newmail outlook-idle netscape-eoh imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh imap_client_workarounds(pop3): outlook-idle pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: username_format: %Lu passdb: driver: sql args: /etc/dovecot-mysql.conf userdb: driver: static args: uid=101 gid=102 home=/home/vmail/%d/%n We'll apreciate your response, 'cause we coulnd't find information about this issuet and we didn't to find any clue that shows how can realize it. Thank you in advance. Sergio Moscoso

3 3

[Dovecot] postfix deliver to mdbox ?
by Frank Bonnet 10 Feb '11

10 Feb '11

Hello again I' now in trouble with incoming email's to users I have modified the main.cf config file of postfix according to the Dovecot LDA with Postfix page. mailbox_command = /usr/local/libexec/dovecot/dovecot-lda postfix reload But incoming emails does not seems to go in the mdbox INBOX I use postfix 2.8.0 with FreeBSD 8.1 Any clarification welcome ! Thanks again.

3 3

[Dovecot] LDAPS fault tolerance not working with dovecot
by Nikita Koshikov 10 Feb '11

10 Feb '11

Hello list, In my dovecot-ldap.ext I have: uris = ldaps://host1 ldaps://host2 ldaps://host2 Today host1 hangs and new connections can't be established with mail server. Connected users worked fine (auth_cache_size = 5 k auth_cache_ttl = 15 mins). At this time - host2 and host3 are working fine, but switching to them was not happen. Why ? In logs I got: Feb 09 10:20:36 imap-login: Error: Timeout waiting for handshake from auth server. my pid=29932, input bytes=0 Feb 09 10:20:36 imap-login: Error: Timeout waiting for handshake from auth server. my pid=29867, input bytes=0 Feb 09 10:20:37 imap-login: Error: auth: connect(login) failed: Resource temporarily unavailable Feb 09 10:20:37 imap-login: Error: auth: connect(login) failed: Resource temporarily unavailable Feb 09 10:20:39 imap-login: Error: Timeout waiting for handshake from auth server. my pid=29943, input bytes=0 Feb 09 10:20:40 imap-login: Error: auth: connect(login) failed: Resource temporarily unavailable I also tried to set: hosts = host1:636 host2:636 host3:636 But with above config error log fulls with messages: Feb 09 10:44:57 auth: Error: LDAP: Connection lost to LDAP server, reconnecting And none of servers accepted ldaps connection. Is someone has a success make ldaps fault tolerance ?

2 2

[Dovecot] POP Log entries
by Ralf Hildebrandt 10 Feb '11

10 Feb '11

Disconnected: Logged out top=0/0, retr=0/0, del=0/3239, size=511881537 Disconnected: Logged out top=0/0, retr=2/316038, del=0/3238, size=511876309 What do the numbers mean? Especially since there are two numbers for each category... -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebrandt(a)charite.de | http://www.charite.de

2 1

[Dovecot] Error message with static userdb
by Carsten Laun-De Lellis 10 Feb '11

10 Feb '11

Hi all I am trying to migrate to dovecot 2.0.9 Dovecot starts without warnings but when I try to connect with a client I always got this error message in the log file: Feb 10 12:57:36 v37143 dovecot: master: Dovecot v2.0.9 starting up (core dumps disabled) Feb 10 12:57:56 v37143 dovecot: auth: Fatal: static userdb: Empty key (=) Feb 10 12:57:56 v37143 dovecot: master: Error: service(auth): command startup failed, throttling Feb 10 12:58:31 v37143 dovecot: imap-login: Error: Timeout waiting for handshake from auth server. my pid=17537, input bytes=0 Feb 10 12:58:56 v37143 dovecot: auth: Fatal: static userdb: Empty key (=) Feb 10 12:58:56 v37143 dovecot: master: Error: service(auth): command startup failed, throttling Feb 10 12:59:26 v37143 dovecot: imap-login: Error: Timeout waiting for handshake from auth server. my pid=17537, input bytes=0 Feb 10 12:59:26 v37143 dovecot: imap-login: Disconnected (no auth attempts): rip=217.91.177.10, lip=89.202.2.143 This is the output of dovecot n: # 2.0.9: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.18-028stab070.14 x86_64 Ubuntu 10.04.1 LTS reiserfs auth_mechanisms = plain login disable_plaintext_auth = no hostname = v37143.1blu.de mail_location = maildir:/vmail/%d/%n managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date namespace { inbox = yes location = maildir:/vmail/%d/%n prefix = separator = / type = private } passdb { args = /scripts/sql/dovecot/user_auth.sql driver = sql } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_global_dir = /var/lib/dovecot/sieve/global sieve_global_path = /var/lib/dovecot/sieve/default.sieve } postmaster_address = root(a)delellis.net protocols = imap service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { mode = 0660 user = vmail } } ssl_cert = </certs/mail/mailpublic.pem ssl_key = </certs/mail/mailkey.pem userdb { args = uid=vmail gid=vmail home=/var/vmail/%d/%n allow_all_users = yes driver = static } protocol lda { mail_plugins = " sieve" } Any ideas ? Mit freundlichem Gruß Carsten Laun-De Lellis Dipl.-Ing. Elektrotechnik Certified Information Systems Auditor (CISA) Hauptstrasse 13 D-67705 Trippstadt Phone: +49 (6306) 992140 Mobile: +49 (151) 27530865 email: <mailto:carsten.laun-delellis@delellis.net> carsten.laun-delellis(a)delellis.net

2 1

[Dovecot] IMAP subfolders and MDBOX
by Frank Bonnet 10 Feb '11

10 Feb '11

Hello We actually use MBOX format on our mailhub but this does not permit to create IMAP subfolders. Many users are asking me fot this feature and I agree with them of course. My problem is to choose the format that will permit imap subfolders creation. Maildir is not my favorite format and I wonder about MDBOX. Does it permit imap subfolders creation ? It is possible to convert from MBOX to MDBOX in one shot ? Is it stable / mature enoug for a production server ( 4000 users ) ? Thank you

3 5

[Dovecot] /var/mail/<user> and mail group privileges
by Michal Hlavinka 10 Feb '11

10 Feb '11

Hi Timo, I'm facing problem with mail group privileges (again), because I've heard a few complains. I was looking at old emails and list archives, but still does not know the answer. In default (fedora/rhel) setup mail group and 0660 privileges are used. This means that when mail_location = mbox:~/mail:INBOX=/var/mail/%u is used, dovecot fails with first (and only first) attempt to select inbox (imap) or login (pop3). Shouldn't mkdir and chown make together a transaction? When it fails just for first time, it confuses some admins (this is the reason why I'm getting complains (bug reports) just because missing/wrong configuration). I think it a) should work even for first connection (ignore chown failure) or b)it should not work for following connection, so the behavior should be more consistent. Also it seems unclear what configuration option is required for making this work in new dovecot versions where configuration is split to mail_privileged_group and mail_access_groups. I see that after reading documentation in 10-mail.conf, some admins expects mail_privileged_group to be enough while mail_access_group is required to prevent fchown failure. Would it be possible to explicitly mention in the config file what option is required? I can add patch with this to our rpm, but we always prefer to be as close to the upstream as possible. Thanks Michal

2 4

[Dovecot] LDAP quota groups
by ian+dovecot＠comtek.co.uk 10 Feb '11

10 Feb '11

Is there any way to have a per-LDAP-group quota? The OpenLDAP folk's suggestions are to hack the source for an overlay (ideal, but it looks somewhat involved) or to do it at the application (Dovecot). I've added an LDAP userattr 'quotaMegaBytes' which is great for allowing me to override the server's default quota on a per-user basis, but ideally I'd be able to override the quota only for people who are member of a certain LDAP group. Perhaps I could override it for IMAP sessions with a postlogin script, but I can't see any way to apply it to deliver. Thanks for any suggestions, Ian

1 0

[Dovecot] Access rights after dsync
by Joan Moreau 10 Feb '11

10 Feb '11

Hi, It looks like the access rights are not correctly preserved after a dsync I have rwXr-X-- from my original folder (which is right) I have rwXrwXrwX in the "mirrored" fodler (which is very wrong) Not sure what cause this, but it looks like a bug Best, jm

2 1

[Dovecot] Dovecot 2.0.7 doesn't disassociate STDERR when it daemonizes.
by Virgil Champlin 10 Feb '11

10 Feb '11

At least it appears that way on my FreeBSD 8.1 system. This is probably unnoticeable in regular use but I happen to use CFengine(v2) for system configuration & monitoring. If it notices dovecot not running it tries to start it and hangs. I believe cfengine (cfagent) has created a pipe to monitor the start commmand's stderr and is waiting for this pipe to close. This never happens because the pipe has been inherited by dovecot which, in version 2, doesn't release stderr as part of its daemonization. Although cfengine could be more defensive, I believe dovecot should be disassociating from the inherited stderr. Looking at master/main.c, I see stdin, stdout & stderr being set to /dev/null in main() if they are inherited unassigned: do { null_fd = open("/dev/null", O_WRONLY); if (null_fd == -1) i_fatal("Can't open /dev/null: %m"); fd_close_on_exec(null_fd, TRUE); } while (null_fd <= STDERR_FILENO); But stderr is missing when a later dup2() is used to release any inherited values not covered by the above: if (dup2(null_fd, STDIN_FILENO) < 0 || dup2(null_fd, STDOUT_FILENO) < 0) i_fatal("dup2(null_fd) failed: %m"); Adding a dup2 for stderr to the above statement works in my simple test case but I'm unsure if there are other issues which may require delaying it. Dovecot 1.2.16 approaches this a little differently & does slightly delay the stderr dup2. The appended diff (v2.0.7) works for me but a more informed opinion might have a better suggestion. Thank you very much for your time. I just started using Dovecot and really like it. -virgil --- main.c.orig 2010-11-04 11:58:48.000000000 -0700 +++ main.c 2011-01-05 18:11:45.000000000 -0800 @@ -717,7 +717,8 @@ } if (dup2(null_fd, STDIN_FILENO) < 0 || - dup2(null_fd, STDOUT_FILENO) < 0) + dup2(null_fd, STDOUT_FILENO) < 0 || + dup2(null_fd, STDERR_FILENO) < 0) i_fatal("dup2(null_fd) failed: %m"); pidfile_path = -=-=-=-=-=-=-=-=-=-=-

2 1

[Dovecot] login_trusted_networks (v2.0.8)
by Don Buchholz 10 Feb '11

10 Feb '11

I just spent a bit puzzling over "login_trusted_networks". My problem was using "10.1.2/24" instead of "10.1.2.0/24". Here are some things I looked for during troubleshooting that didn't pan out: (1) No messages printed to syslog. (2) Search for "login_trusted_networks" on the Wiki (wiki2) failed. (3) Comments in example config file didn't specify expected format. Anyway, it works now. <shrug> - Don =================== 'doveconf -n' (redacted): > *[root@postal ~]# **doveconf -n* > # 2.0.8: /etc/dovecot/dovecot.conf > # OS: Linux 2.6.9-67.0.1.ELsmp i686 Red Hat Enterprise Linux WS > release 4 (Nahant Update 6) ext3 > auth_username_format = %Lu > auth_verbose = yes > auth_verbose_passwords = sha1 > login_log_format_elements = user=<%u> service=%Us method=%m rip=%r > lip=%l mpid=%e %c > login_trusted_networks = xx.xx.x.0/24 xx.xx.xx.0/23 > mail_location = maildir:/Virtual_Users/%u/Mail > passdb { > driver = pam > } > passdb { > args = scheme=CRYPT username_format=%u /etc/dovecot/users > driver = passwd-file > } > ssl_ca = </etc/dovecot/ssl/iMove_2011_CAcert.pem > ssl_cert = </etc/dovecot/ssl/postal_cert.pem > ssl_key = </etc/dovecot/ssl/postal_key+req.pem > ssl_key_password = ******** > ssl_parameters_regenerate = 12 > userdb { > driver = passwd > } > userdb { > args = username_format=%u /etc/dovecot/users > driver = passwd-file > } > verbose_proctitle = yes > protocol imap { > ssl_cert = </etc/dovecot/ssl/imap_cert.pem > ssl_key = </etc/dovecot/ssl/imap_key+req.pem > ssl_key_password = </etc/dovecot/ssl/imap.pw > } > protocol pop3 { > ssl_cert = </etc/dovecot/ssl/pop3_cert.pem > ssl_key = </etc/dovecot/ssl/pop3_key+req.pem > ssl_key_password = </etc/dovecot/ssl/pop3.pw > } > *[root@postal ~]#*

2 1

[Dovecot] Error: FETCH [1] for mailbox badbox UID 1 got too little data: 2 vs 4
by Chris Wilson 10 Feb '11

10 Feb '11

Hi all, I can send myself a test message that causes Dovecot to crash when I open it in Alpine, with the following error: Jan 12 14:52:52 one-mail dovecot: imap(chris): Error: FETCH [1] for mailbox badbox UID 1 got too little data: 2 vs 4 Jan 12 14:52:52 one-mail dovecot: imap(chris): Error: Corrupted index cache file /home/chris/mail/.imap/badbox/dovecot.index.cache: Broken MIME parts for mail UID 1 Jan 12 14:52:52 one-mail dovecot: imap(chris): Disconnected: FETCH failed bytes=485/1394 I can do this as follows: $ touch ~/mail/badbox $ echo test | /usr/libexec/dovecot/dovecot-lda -m badbox $ cat ~/mail/badbox >From MAILER-DAEMON Wed Jan 12 14:52:29 2011 test X-IMAPbase: 1294843949 0000000001 X-UID: 1 Status: X-Keywords: Content-Length: 1 And then when I try to open badbox in Alpine (over IMAP), and then open this email, I get the error above, and the connection is aborted. I expect that the "test" line is not a valid header, but dovecot should not crash when opening it. Cheers, Chris. -- Aptivate | http://www.aptivate.org | Phone: +44 1223 760887 The Humanitarian Centre, Fenner's, Gresham Road, Cambridge CB1 2ES Aptivate is a not-for-profit company registered in England and Wales with company number 04980791.

2 1

[Dovecot] Panic: file mailbox-list-maildir.c: line 133: unreached
by Holger Mauermann 10 Feb '11

10 Feb '11

I converted personal mailboxes from maildir to sdbox. Public mailboxes are still in maildir format, because I need per-user seen flags. However, if the user is subscribed to public mailboxes and the client sends 'LIST (SUBSCRIBED) "" *', dovecot crashes with: imap(holger(a)mauermann.org): Panic: file mailbox-list-maildir.c: line 133: unreached imap(holger(a)mauermann.org): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x3756a) [0x7f25f7b1456a] -> /usr/lib/dovecot/libdovecot.so.0(+0x375b6) [0x7f25f7b145b6] -> /usr/lib/dovecot/libdovecot.so.0(+0x118ca) [0x7f25f7aee8ca] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x35cce) [0x7f25f7d8acce] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_list_is_valid_pattern+0x26) [0x7f25f7d80146] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x33a31) [0x7f25f7d88a31] -> /usr/lib/dovecot/libdovecot-storage.so.0(fs_list_iter_next+0x2f) [0x7f25f7d885cf] -> /usr/lib/dovecot/modules/lib01_acl_plugin.so(+0xb658) [0x7f25f6f2c658] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_list_iter_next+0xa) [0x7f25f7d7faba] -> dovecot/imap(+0xc529) [0x7f25f824d529] -> dovecot/imap(cmd_list_full+0x43e) [0x7f25f824e48e] -> dovecot/imap(+0x10dad) [0x7f25f8251dad] -> dovecot/imap(+0x10e8d) [0x7f25f8251e8d] -> dovecot/imap(client_handle_input+0x135) [0x7f25f82520c5] -> dovecot/imap(client_in put+0x62) [0x7f25f8252a22] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x48) [0x7f25f7b1f898] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x9f) [0x7f25f7b2080f] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7f25f7b1f828] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f25f7b0dcf3] -> dovecot/imap(main+0x30f) [0x7f25f825b07f] -> /lib/libc.so.6(__libc_start_main+0xfe) [0x7f25f736cd8e] -> dovecot/imap(+0x9279) [0x7f25f824a279] master: Error: service(imap): child 32285 killed with signal 6 (core dumped) This does not happen with 'LSUB "" *' or with personal mailboxes in maildir format. Below is the gdb and doveconf -n output: (gdb) bt full #0 0x00007f25f7381ba5 in raise () from /lib/libc.so.6 No symbol table info available. #1 0x00007f25f73856b0 in abort () from /lib/libc.so.6 No symbol table info available. #2 0x00007f25f7b1457d in default_fatal_finish (type=<value optimized out>, status=0) at failures.c:187 backtrace = 0x7f25f980d468 "/usr/lib/dovecot/libdovecot.so.0(+0x3756a) [0x7f25f7b1456a] -> /usr/lib/dovecot/libdovecot.so.0(+0x375b6) [0x7f25f7b145b6] -> /usr/lib/dovecot/libdovecot.so.0(+0x118ca) [0x7f25f7aee8ca] -> /usr/lib/do"... #3 0x00007f25f7b145b6 in i_internal_fatal_handler (ctx=0x7fff36a6acc0, format=<value optimized out>, args=<value optimized out>) at failures.c:645 status = 0 #4 0x00007f25f7aee8ca in i_panic (format=0x7e1d <Address 0x7e1d out of bounds>) at failures.c:259 ctx = {type = LOG_TYPE_PANIC, exit_status = 0, timestamp = 0x0} args = {{gp_offset = 24, fp_offset = 48, overflow_arg_area = 0x7fff36a6ad90, reg_save_area = 0x7fff36a6acd0}} #5 0x00007f25f7d8acce in maildir_is_valid_pattern (list=<value optimized out>, pattern=<value optimized out>) at mailbox-list-maildir.c:133 No locals. #6 0x00007f25f7d80146 in mailbox_list_is_valid_pattern (list=0x7f25f98422d0, pattern=0x7f25f980d410 "public") at mailbox-list.c:651 _data_stack_cur_id = 0 ret = <value optimized out> #7 0x00007f25f7d88a31 in fs_list_subs (ctx=0x7f25f9818b70) at mailbox-list-fs-iter.c:683 node = <value optimized out> flags = MAILBOX_SUBSCRIBED ns = <value optimized out> path = <value optimized out> dir = <value optimized out> fname = <value optimized out> storage_name = 0x7f25f980d410 "public" len = 0 st = {st_dev = 139801076486872, st_ino = 19, st_nlink = 139801053739543, st_mode = 128, st_uid = 0, st_gid = 1, __pad0 = 0, st_rdev = 139801046211004, st_size = 206158430224, st_blksize = 140734110281536, st_blocks = 140734110281344, st_atim = {tv_sec = 579820584960, tv_nsec = 139801076651024}, st_mtim = {tv_sec = 139801076728920, tv_nsec = 139801076766928}, st_ctim = {tv_sec = 139801076486872, tv_nsec = 536871048}, __unused = {128, 139801076731466, 139801046189669}} #8 0x00007f25f7d885cf in fs_list_iter_next (_ctx=0x7f25f9818b70) at mailbox-list-fs-iter.c:356 _data_stack_cur_id = 0 info = <value optimized out> __FUNCTION__ = "fs_list_iter_next" #9 0x00007f25f6f2c658 in acl_mailbox_list_iter_next_info (_ctx=<value optimized out>) at acl-mailbox-list.c:205 alist = 0x7f25f9835410 #10 acl_mailbox_list_iter_next (_ctx=<value optimized out>) at acl-mailbox-list.c:372 ctx = 0x7f25f98163f0 info = 0x7f25f98518d0 ret = <value optimized out> #11 0x00007f25f7d7faba in mailbox_list_iter_next (ctx=0x7e1d) at mailbox-list.c:1029 info = <value optimized out> #12 0x00007f25f824d529 in list_namespace_mailboxes (cmd=<value optimized out>) at cmd-list.c:377 info = 0x80 flags = 536871048 str = 0x7f25f980d2d8 ret = 1 ns = 0x0 name = 0x7f25f98518d0 "Public/public" #13 cmd_list_continue (cmd=<value optimized out>) at cmd-list.c:792 _data_stack_cur_id = 4 ctx = 0x7f25f9848458 #14 0x00007f25f824e48e in cmd_list_full (cmd=0x7f25f9848350, lsub=false) at cmd-list.c:957 client = 0x7f25f9847be0 args = 0x7f25f984ac08 list_args = 0x7f25f984acd0 arg_count = <value optimized out> ctx = 0x7f25f9848458 patterns = {arr = {buffer = 0x7f25f98484a8, element_size = 8}, v = 0x7f25f98484a8, v_modifiable = 0x7f25f98484a8} pattern = 0x7f25f984adc8 "*" patterns_strarr = <value optimized out> #15 0x00007f25f8251dad in client_command_input (cmd=0x7f25f9848350) at imap-client.c:661 client = 0x7f25f9847be0 command = <value optimized out> __FUNCTION__ = "client_command_input" #16 0x00007f25f8251e8d in client_command_input (cmd=0x7f25f9848350) at imap-client.c:711 client = 0x7f25f9847be0 command = 0x0 __FUNCTION__ = "client_command_input" #17 0x00007f25f82520c5 in client_handle_next_command (client=0x7f25f9847be0) at imap-client.c:752 size = 26 #18 client_handle_input (client=0x7f25f9847be0) at imap-client.c:764 _data_stack_cur_id = 3 ret = false remove_io = <value optimized out> handled_commands = false __FUNCTION__ = "client_handle_input" #19 0x00007f25f8252a22 in client_input (client=0x7f25f9847be0) at imap-client.c:803 cmd = <value optimized out> output = 0x7f25f98481c8 bytes = <value optimized out> __FUNCTION__ = "client_input" #20 0x00007f25f7b1f898 in io_loop_call_io (io=0x7f25f9848260) at ioloop.c:383 ioloop = 0x7f25f98155e0 t_id = 2 #21 0x00007f25f7b2080f in io_loop_handler_run (ioloop=<value optimized out>) at ioloop-epoll.c:213 ctx = 0x7f25f9815810 event = 0x7f25f9815880 list = 0x7f25f98482b0 io = 0x7e1d tv = {tv_sec = 1782, tv_usec = 549357} msecs = <value optimized out> ret = <value optimized out> i = 0 call = false #22 0x00007f25f7b1f828 in io_loop_run (ioloop=0x7f25f98155e0) at ioloop.c:404 No locals. #23 0x00007f25f7b0dcf3 in master_service_run (service=0x7f25f98154b0, callback=0x7e1d) at master-service.c:484 No locals. #24 0x00007f25f825b07f in main (argc=1, argv=0x7f25f9815370) at main.c:375 set_roots = {0x7f25f8460da0, 0x0} service_flags = <value optimized out> storage_service_flags = <value optimized out> postlogin_socket_path = 0x0 username = 0x0 c = <value optimized out> # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.35-23-virtual x86_64 Ubuntu 10.10 auth_debug = yes auth_mechanisms = plain login digest-md5 cram-md5 apop disable_plaintext_auth = no lmtp_save_to_detail_mailbox = yes mail_debug = yes mail_location = sdbox:~/dbox:DIRNAME=.dbox-mails mail_plugins = " quota acl zlib lazy_expunge" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date namespace backup { hidden = yes list = no location = sdbox:~/expunged:DIRNAME=.dbox-mails prefix = .EXPUNGED/ separator = / type = private } namespace other { list = children location = sdbox:%%h/dbox:DIRNAME=.dbox-mails prefix = Shared/%%u/ separator = / subscriptions = no type = shared } namespace pub { list = children location = maildir:/var/spool/imap/public:INDEX=~/public prefix = Public/ separator = / subscriptions = no type = public } namespace user { inbox = yes location = prefix = separator = / type = private } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { acl = vfile acl_shared_dict = file:/var/spool/imap/shared-mailboxes.dict lazy_expunge = .EXPUNGED/ quota = dict:::file:%h/dbox/dovecot-quota quota_rule = *:storage=1G quota_rule2 = Trash:storage=+50M sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap pop3 sieve rejection_subject = Mail delivery failed: %s service auth { unix_listener auth-exim { user = Debian-exim } unix_listener auth-userdb { user = vmail } } service lmtp { inet_listener lmtp { port = 24 } } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lmtp { mail_plugins = " quota acl zlib lazy_expunge sieve" } protocol lda { mail_plugins = " quota acl zlib lazy_expunge sieve" } protocol imap { mail_plugins = " quota acl zlib lazy_expunge imap_quota imap_acl imap_zlib" } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh }

2 1

[Dovecot] courier-imap to dovecot-imap migration: missing TLS_TRUSTCERTS feature
by Uffe Jakobsen 10 Feb '11

10 Feb '11

Hi, I'm attempting an one-to-one migration from courier-imap to dovecot-imap. current state: Imap-server has a self signed certificate Every client/user has a self signed client certificate that is used for SSL/TLS client authentication. All certificates are self signed "standalone" cerfificates - no CA hierarchy/structure is made. With courier-imap we could just put every client certificate into a trusted cert file (or hashed directory for a larger number of clients) and courier-imap would check that through TLS_TRUSTCERTS. I would like to keep the current appproach and avoid the whole mini CA setup - that way I can also avoid reissuing new certs to all existing users. Question: can a similar setup be achieved with dovecot-imap ? I've already made numerous attempts with no luck. As far as I can see dovecot-imap does not seem to implement the concept of checking trusted (self signed standalone client) certs - even though it is based on openssl like courier-imap is - but I may be wrong here. I'm using dovecot-2.0.7 (from ports) on FreeBSD Thanks in advance. Kind regards Uffe Jakobsen

2 1

[Dovecot] dovecot not delivering emails in the right folder
by paulino＠calderonpale.com 10 Feb '11

10 Feb '11

Hello everyone, I'm having trouble getting postfix + dovecot to work correctly. It seems like Postfix is receiving and delivering the emails correctly but dovecot is placing/looking for them in the wrong folder therefore the clients aren't receiving any new emails. I switched from courier and followed a tutorial found here: http://library.linode.com/email/postfix/dovecot-mysql-debian-5-lenny Dovecot's log: deliver(adomain.com/test/@adomain.com): 2011-02-04 21:48:04 Info: Module loaded: /usr/lib/dovecot/modules/lda/lib90_cmusieve_plugin.so deliver(adomain.com/test/@adomain.com): 2011-02-04 21:48:04 Info: auth input: adomain.com/test/@adomain.com deliver(adomain.com/test/@adomain.com): 2011-02-04 21:48:04 Info: auth input: uid=5000 deliver(adomain.com/test/@adomain.com): 2011-02-04 21:48:04 Info: auth input: gid=5000 deliver(adomain.com/test/@adomain.com): 2011-02-04 21:48:04 Info: auth input: home=/home/vmail/adomain.com/adomain.com/test/ deliver(adomain.com/test/@adomain.com): 2011-02-04 21:48:04 Info: maildir: data=/home/vmail/adomain.com/adomain.com/test/ deliver(adomain.com/test/@adomain.com): 2011-02-04 21:48:04 Info: maildir: root=/home/vmail/adomain.com/adomain.com/test, index=/home/vmail/adomain.com/adomain.com/test, control=, inbox= deliver(adomain.com/test/@adomain.com): 2011-02-04 21:48:04 Info: cmusieve: Using sieve path: /home/vmail/globalsieverc deliver(adomain.com/test/@adomain.com): 2011-02-04 21:48:04 Info: cmusieve: Executing script /home/vmail/globalsievercc deliver(adomain.com/test/@adomain.com): 2011-02-04 21:48:04 Info: msgid=<AANLkTimZi7pD2eSFNipHtmS5HZVstk9UF6kjWEyqynz-(a)mail.gmail.com>: saved mail to INBOX It seems like is using a wrong folder value since it should be using /home/vmail/adomain.com/test. Another odd thing is that postfix is replacing the email address with /folder/user(a)adomain.com. Postfix after receiving an email: 3:48:04 domain postfix/smtpd[29365]: 8FDC1A339: client=mail-yx0-f169.google.com[209.85.213.169] Feb 5 03:48:04 domain postfix/cleanup[29369]: 8FDC1A339: message-id=<AANLkTimZi7pD2eSFNipHtmS5HZVstk9UF6kjWEyqynz-(a)mail.gmail.com> Feb 5 03:48:04 domain postfix/qmgr[27253]: 8FDC1A339: from=<xxx(a)gmail.com>, size=1815, nrcpt=1 (queue active) Feb 5 03:48:04 domain postfix/pipe[29370]: 8FDC1A339: to=<adomain.com/test/@adomain.com>, orig_to=<test(a)adomain.com>, relay=dovecot, delay=0.21, delays=0.2/0.01/0/0.01, dsn=2.0.0, status=sent (delivered via dovecot service) Feb 5 03:48:04 domain postfix/qmgr[27253]: 8FDC1A339: removed My config files: main.cf ============================== alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases append_dot_mydomain = no biff = no broken_sasl_auth_clients = yes config_directory = /etc/postfix inet_interfaces = all inet_protocols = all mailbox_size_limit = 0 message_size_limit = 30720000 mydestination = localhost, localhost.localdomain myhostname = adomain.com mynetworks = 127.0.0.0/8 myorigin = /etc/mailname proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $transport_maps $mynetworks $virtual_mailbox_limit_maps readme_directory = no recipient_delimiter = + relayhost = smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU) smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination smtpd_sasl_auth_enable = yes smtpd_sasl_authenticated_header = yes smtpd_tls_cert_file = /etc/postfix/cert.ca.crt smtpd_tls_key_file = /etc/postfix/cert.ca.key smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache smtpd_use_tls = yes virtual_alias_domains = virtual_alias_maps = proxy:mysql:/etc/postfix/mysql-virtual_forwardings.cf, mysql:/etc/postfix/mysql-virtual_email2email.cf virtual_gid_maps = static:5000 virtual_mailbox_base = /home/vmail virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql-virtual_domains.cf virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql-virtual_mailboxes.cf virtual_transport = dovecot virtual_uid_maps = static:5000 dovecot.conf: ====================== protocols = imap imaps log_timestamp = "%Y-%m-%d %H:%M:%S " mail_location = maildir:/home/vmail/%d/%n/Maildir mail_debug = yes disable_plaintext_auth = no ssl_cert_file = /etc/postfix/cert.crt ssl_key_file = /etc/postfix/cert.key namespace private { separator = . prefix = INBOX. inbox = yes } protocol lda { log_path = /home/vmail/dovecot-deliver.log auth_socket_path = /var/run/dovecot/auth-master postmaster_address = postmaster(a)adomain.com mail_plugins = cmusieve global_script_path = /home/vmail/globalsieverc } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } auth default { user = root mechanisms = plain login passdb sql { args = /etc/dovecot/dovecot-sql.conf } userdb static { args = uid=5000 gid=5000 home=/home/vmail/%d/%n allow_all_users=yes } socket listen { master { path = /var/run/dovecot/auth-master mode = 0600 user = vmail } client { path = /var/spool/postfix/private/auth mode = 0660 user = postfix group = postfix } } dovecot version: 1.0.15 # grep -v '^ *$#.*$\?$' dovecot-sql.conf driver = mysql connect = host=127.0.0.1 dbname=mail user=mail_admin password=xxx default_pass_scheme = CRYPT password_query = SELECT email as user, password FROM users WHERE email='%u'; Thanks, any help/pointers will be greatly appreciated.

2 1

[Dovecot] pop3 index virtual question
by Robert Schetterer 10 Feb '11

10 Feb '11

Hi @ll, Timo, on 2.0.9 i have a user reporting pop3 leaving mails on the server does not work as desired i have namespace default { # type = private separator = / prefix = "" list = yes # hidden = no subscriptions = yes } namespace virtual { # type = private prefix = "virtual/" separator = / location = virtual:/etc/dovecot/virtual:LAYOUT=maildir++ #location = virtual:/etc/dovecot/virtual hidden = yes list = no subscriptions= no } namespace real { # type = private prefix = "RealMails/" separator = / list = no hidden = yes } and pop3_uidl_format = %08Xu%08Xv before it was pop3_uidl_format = %g ( not sure what best ) # Permanently save UIDLs sent to POP3 clients, so pop3_uidl_format changes # won't change those UIDLs. Currently this works only with Maildir. #pop3_save_uidl = no my guess is that location = virtual:/etc/dovecot/virtual:LAYOUT=maildir++ isnt enough should be location = virtual:/etc/dovecot/virtual:LAYOUT=maildir++:INDEX=~/ to store/use indexes in the local maildir which is physical under /usr/local/virtual/domain/user@domain any meanings to this -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

2 6

[Dovecot] Using -s in "doveadm mailbox create"
by Christoph Pleger 09 Feb '11

09 Feb '11

Hello, it seems that "doveadm mailbox create" does not handle the mailbox parameters correctly if used with the "-s"-Parameter. I am using the following command in a script for adding new users: doveadm mailbox create -u "${ACCOUNT}" -s INBOX Drafts Sent Trash Spam Templates This creates mailboxes Drafts, Sent, Trash, Spam and Templates, but not INBOX. Likewise, when I omit INBOX in the command, only Sent, Trash, Spam and Templates are created, but not Drafts. With only one mailbox parameter, I get an error message about incorrect usage. When I enter the command without the "-s"-Parameter, all given mailboxes are created. As a workaround, I have to use the command without "-s" first and then call "doveadm mailbox subscribe". Regards Christoph

2 1

[Dovecot] Force STARTTLS on port 143 for !internalnetwork
by Ralf Hildebrandt 09 Feb '11

09 Feb '11

Hi! How can I force users which are connecting from OUTSIDE our newtworks to user STARTTLS on Port 143? Right now we resort to IMAPS on port 993, but an additional STARTTLS enabled login on the default port would make things easier! -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebrandt(a)charite.de | http://www.charite.de

3 5

[Dovecot] Dovecot + Solr does not index without break-imap-search?
by Jose Álvaro Domínguez Díaz 09 Feb '11

09 Feb '11

Hi folks, We are working with Dovecot 2.0.9 with Solr support and there is a thing, a little strange for us. Let me explain. We have this conf for Solr: plugin { ... fts = solr fts_solr = url=http:// solr.domain:8983/solr/ break-imap-search quota = maildir ... } With 'break-imap-search', Dovecot connects with solr, solr indexes all, searchs are fast and all works fine. BUT if we don't add 'break-imap-search', solr doesn't index anything. Logs don't report errors with debug/verbose options enabled. Somebody has any idea about this?. Thank you very much for all. Regards. -- Jose Álvaro Domínguez adominguez(a)yaco.es Yaco Sistemas S.L. http://www.yaco.es/ C/ Rioja 5, 41001 Sevilla Teléfono +34 954 50 00 57 Fax +34 954 50 09 29

2 1

[Dovecot] dsync problem
by Frank Bonnet 09 Feb '11

09 Feb '11

hello I try to convert from mbox to mdbox using dsync i get the followin error using the following command dsync mirror -u toto mbox:/user/toto:INBOX=/var/mail/toto I get this error message : mail3# dsync mirror -u toto mbox:/user/toto:INBOX=/var/mail/toto dsync(root): Fatal: execvp(-u) failed: No such file or directory dsync-local(root): Error: read() from worker server failed: EOF any infos welcome thanks

3 4

[Dovecot] Permissions in shared folders
by Lukas Haase 09 Feb '11

09 Feb '11

Hi, On my mail server I want to implement shared folders for each workgroup where there are many workgroups. One way would be to create a separate namespace for each workgroup. However, this does not scale well so I decided to use a single Shared mailbox and use ACLs: namespace public { separator = . prefix = Shared. location = maildir:/var/mail/shared:CONTROL=~/Maildir/shared } Each workgroup should get a subfolder in "Shared". Until now, this works, I create .Group1, .Group2 and assign correct group permissions and ACL files. However, now a user from group1 wants to create a subfolder in his IMAP folder. Since the permissions for /var/mail/shared/.Group1 are correct (writeable to group1 and the user is member of group1 and 'k' ACL permissions are active) I would expect it to work. However, for obvious reasons, the *sub*folder is created as /var/mail/shared/.Group1.Subfolder so it is actually not a subfolder in sense of the filesystem but rather a folder inside /var/mail/shared However, the user does (and should) not have write permissions to /var/mail/shared (only to /var/mail/shared/.Group1). Is there a way to overcome this problem? Why can't dovecot just use /var/mail/shared/.Group1/.Subfolder? Is there an option to do so? It would make everything a lot easier. The one option is to make /var/mail/shared world-writeable - which is not really a good option. A second option might be to use ACLs and give each group write permissions to /var/mail/shared. However, not even this seems very "clean" to me. What is the best way to handle this? Best regards, Luke

3 9

[Dovecot] ldap: LDAP attribute used multiple times. This is currently unsupported
by Lukas Haase 09 Feb '11

09 Feb '11

Hi, I have a problem when migrating from dovecot 1.0 to dovecot 1.2 (Debian lenny to Debian squeeze). In my dovecot-ldap.conf I have: user_attrs = homeDirectory=home,uidNumber=uid,gidNumber=gid,uid=system_groups_user I use the last parameter for the groups which I need for shared folders. If I only use this, everything works. However, I also use LDAP as passdb with prefetch: pass_attrs = uid=user,userPassword=password,homeDirectory=userdb_home,uidNumber=userdb_uid,gidNumber=userdb_gid,uid=userdb_system_groups_user In this configuration I get the error in the subject line that uid is used multiple times. I know, but the message is somehow "weird" since it says it is *currently* unsupported. However, it seems to me that it is not supported any more. Is this true? Is there a reason for this? How can I fix this problem? Until now my shared folders do not works anymore because the group memberships are not assigned any more because of the missing system_groups_user parameter. Best regards, Luke

2 4

[Dovecot] critical feature from version 1 not migrated to version 2 = authentication configuration database per IP
by DaLiV＠apollo.lv 09 Feb '11

09 Feb '11

not possible make operation with dovecot version 2.x as was possible in version 1.x: requisites description: connect to dovecot service on IP1 - dovecot must serve users that related to domain1 located in database1 connect to dovecot service on IP2 - dovecot must serve users that related to domain2 located in database2 login must be with username that form not as "user@domain" but simple "user" databases may contain identical username, but they have different passwords existing version 1 config file, that allow such configuration: -------- /etc/dovecot.conf BEGIN ---------------- server mail.domain1.tld { protocols = imaps pop3s pop3 ssl_cert_file = /etc/pki/cert1.pem ssl_key_file = /etc/pki/cert1.key listen = 123.123.123.1 ssl_listen = 123.123.123.1 default_mail_env = mbox:/tmp:INBOX=/var/mail/domain1.tld/%n:INDEX=MEMORY pop3_uidl_format = %08Xu%08Xv auth default { mechanisms = plain passdb ldap { args= /etc/dovecot-ldap.conf.domain1.tld1 } userdb ldap { args= /etc/dovecot-ldap.conf.domain1.tld1 } } login_process_per_connection = yes login_max_processes_count = 4 login_processes_count = 1 } server mail.domain2.tld { protocols = imaps pop3s pop3 ssl_cert_file = /etc/pki/cert2.pem ssl_key_file = /etc/pki/cert2.key listen = 123.123.123.2 ssl_listen = 123.123.123.2 default_mail_env = mbox:/tmp:INBOX=/var/mail/domain2.tld/%n:INDEX=MEMORY pop3_uidl_format = %08Xu%08Xv auth default { mechanisms = plain passdb ldap { args= /etc/dovecot-ldap.conf.domain2.tld2 } userdb ldap { args= /etc/dovecot-ldap.conf.domain2.tld2 } } login_process_per_connection = yes login_max_processes_count = 4 login_processes_count = 1 } -------- /etc/dovecot.conf END ---------------- /etc/dovecot-ldap.conf.domain1.tld and /etc/dovecot-ldap.conf.domain2.tld refers to different ldap databases

2 2

[Dovecot] Great time savings backing a mdbox versus Maildir
by Javier Miguel Rodríguez 09 Feb '11

09 Feb '11

Hello I am writing to this mailing list to thanks Timo for dovecot 2 & mdbox. We have almost 30.000 active users and our life was sad with Maildir & backup: 24 hours for a full backup with bacula (zlib enabled maildirs, 1.4 TB). After switching to mdbox, the backup time is under 12 hours ! Instead of backing 17 millions files, with mdbox our backup is only of 1 million files, and that speeds up a lot the backup operation. Timo, here you have detailed info about the bacula backup jobs, you can use them in the wiki if you desire. If you need aditional info (hardware specs, dovecot config, etc) I can share it. *Maildir:* |//Job: Backup_Linux_buzon_us.2011-01-21_19.03.26_38 Backup Level: Full Client: "buzon_us" 2.0.3 (06Mar07) x86_64-redhat-linux-gnu,redhat,Enterprise release FileSet: "Full Buzon" 2011-01-21 19:03:26 Pool: "Pool_Linux_Buzones_US" (From Job resource) Catalog: "MyCatalog" (From Client resource) Storage: "File" (From command line) Scheduled time: 21-ene-2011 19:03:20 Start time: 21-ene-2011 19:03:29 End time: 22-ene-2011 19:46:45 Elapsed time:*1 day 43 mins 16 secs* Priority: 10 FD Files Written: 16,903,801 SD Files Written:*16,903,801* FD Bytes Written: 1,445,943,227,706 (1.445 TB) SD Bytes Written: 1,448,983,971,450 (1.448 TB) Rate:*16247.3 KB/s* Software Compression: None VSS: no Encryption: no Accurate: no Volume name(s): Buzones_US_2 Volume Session Id: 26 Volume Session Time: 1295511704 Last Volume Bytes: 1,450,628,892,676 (*1.450 TB*) Non-fatal FD errors: 0 SD Errors: 0 FD termination status: OK SD termination status: OK Termination: Backup OK//| *mdbox with mdbox_rotate_size=10m:* |Build OS: x86_64-redhat-linux-gnu redhat Enterprise release JobId: 3587 Job: Backup_Linux_buzon_us.2011-02-07_08.13.52_53 Backup Level: Full (upgraded from Incremental) Client: "buzon_us" 2.0.3 (06Mar07) x86_64-redhat-linux-gnu,redhat,Enterprise release FileSet: "Full Buzon" 2011-01-21 19:03:26 Pool: "Pool_Linux_Buzones_US" (From Job resource) Catalog: "MyCatalog" (From Client resource) Storage: "File" (From command line) Scheduled time: 07-feb-2011 08:13:44 Start time: 07-feb-2011 08:13:54 End time: 07-feb-2011 19:43:50 Elapsed time:*11 hours 29 mins 56 secs* Priority: 10 FD Files Written:*1,148,780* SD Files Written: 1,148,780 FD Bytes Written:*1,537,062,152,773 (1.537 TB)* SD Bytes Written: 1,537,218,147,402 (1.537 TB) Rate:*37130.7 KB/s* Software Compression: None VSS: no Encryption: no Accurate: yes Volume name(s): Buzones_US_4|Buzones_US_5 Volume Session Id: 101 Volume Session Time: 1296724657 Last Volume Bytes: 438,873,898,586 (438.8 GB) Non-fatal FD errors: 0 SD Errors: 0 FD termination status: OK SD termination status: OK Termination: Backup OK| Regards Javier de Miguel University of Seville

4 8

[Dovecot] sieve not working if i have override
by Paul A 08 Feb '11

08 Feb '11

Hi, I have a few domain that I'm overriding the mail_plugins, see password query below, however when I use this password query everything is working expect sieve gives me an error. How can I get around this problem? password_query = SELECT username as user, password, \ if('%d' IN ('virttest1.xxx.net', 'test2000.com'), \ 'quota imap_quota trash expire autocreate acl imap_acl',null) as userdb_mail_plugins, \ 101 as userdb_uid, 502 as userdb_gid, CONCAT('*:bytes=', CAST(quota AS CHAR)) AS quota_rule FROM mailbox WHERE username = '%u' Feb 7 18:28:20 testip5 dovecot: managesieve: Debug: Loading modules from directory: /usr/local/lib/dovecot Feb 7 18:28:20 testip5 dovecot: managesieve: Debug: Module loaded: /usr/local/lib/dovecot/lib10_quota_plugin.so Feb 7 18:28:20 testip5 dovecot: managesieve: Debug: Module loaded: /usr/local/lib/dovecot/lib11_trash_plugin.so Feb 7 18:28:20 testip5 dovecot: managesieve: Debug: Module loaded: /usr/local/lib/dovecot/lib20_expire_plugin.so Feb 7 18:28:20 testip5 dovecot: managesieve: Debug: Added userdb setting: mail_plugins=quota imap_quota trash expire autocreate acl imap_acl Feb 7 18:28:20 testip5 dovecot: managesieve: Debug: Loading modules from directory: /usr/local/lib/dovecot Feb 7 18:28:20 testip5 dovecot: managesieve: Debug: Module loaded: /usr/local/lib/dovecot/lib01_acl_plugin.so Feb 7 18:28:20 testip5 dovecot: managesieve: Error: dlopen(/usr/local/lib/dovecot/lib02_imap_acl_plugin.so) failed: /usr/local/lib/dovecot/lib02_imap_acl_plugin.so: undefined symbol: client_send_tagline Feb 7 18:28:20 testip5 dovecot: managesieve: Error: Can't load plugin imap_acl_plugin: Plugin is intended to be used only by imap binary (we're managesieve) Feb 7 18:28:20 testip5 dovecot: managesieve: Fatal: Couldn't load required plugins It also complains about imap_quota. Dovecot 2.x Thanks, paul

4 5

[Dovecot] converting from maildir to mdbox ?
by Jan-Frode Myklebust 08 Feb '11

08 Feb '11

I´m considering moving from maildir to mdbox, but don´t quite see how I should do the conversion with minimal downtime. Our userdb is ldap, and the we use this setting to point to the users maildirectory: user_attrs = mailMessageStore=mail=maildir:%$:INDEX=/indexes/%1u/%1.1u/%u,mailQuota=quota_rule=*:storage=%$ i.e. every user has a "mailMessageStore" attribute in LDAP that points to his INBOX. Any ideas for how we can migrate user by user to mdbox? Can we add a mailboxFormat attribute to LDAP, and somehow get that used in the user_attrs lookup ? Ideally have it default to maildir if not set, so that the current setup isn´t changed and only migrated users are affected. Or should we be keeping the mailboxFormat as a prefix in all mailMessageStore strings ? -jf

2 1

[Dovecot] How to recover a mail box from an assertion failure
by Michael Durket 08 Feb '11

08 Feb '11

I'm running Dovecot version 1.2.11 and getting this assertion error on a user's mail: Panic: file /home/durket/dovecot-1.2.11/src/lib-index/mail-transaction-log-view.c: line 290 (mail_transaction_log_view_set): assertion failed: (min_file_seq != max_file_seq || max_file_seq != view->head->hdr.file_seq || max_file_offset != (uoff_t)-1 || min_file_offset <= view->head->sync_offset) I realize that there are newer releases of Dovecot (that even may fix this bug) but what I need to know is if there's anything I can do (like having Dovecot recreate indexes or whatnot) that will recover the user's mail (short of having to reconstruct it from backups).

2 1

[Dovecot] Auto rebuild indexes?
by Willie Gillespie 08 Feb '11

08 Feb '11

Here's an easy question for you. I'm restoring some emails from a backup. Do I need to delete or otherwise manually rebuild the indexes? dovecot.index.cache dovecot.index.log dovecot-uidlist Or will Dovecot itself detect that something is amiss and handle it on first folder access? Using Maildir with Dovecot 1.2.9

3 3

[Dovecot] lmtp error at domains containing "-" sign
by ckubu 08 Feb '11

08 Feb '11

hallo, I have running dovecot 2.0.9. I want to deliver mail with rcipient prameter "-", we spoked about that at thread "LMTP with address extension" and after your patch and version 2.0.8 that works. But now, there's an another much greater problem. No mails to adresses, which domain-part contains an "-" sign wil be delivered (i.e. test(a)aku-punkt-berlin.de) lmtp is looking about the user "test@aku" instead of "test(a)aku-punkt-berlin.de" and the following logentries appears: Feb 3 10:46:36 vserver08 dovecot: auth: Debug: sql(test@aku): SELECT '/var/vmail/' || maildir as home, '5000' AS uid, '5000' AS gid, '*:bytes=' || quota as quota_rule FROM mailbox WHERE username = 'test@aku' and active = true Feb 3 10:46:36 vserver08 dovecot: auth: sql(test@aku): Unknown user Greatings Christoph

4 9

[Dovecot] best fine tune for 2.0.9
by fakessh ＠ 08 Feb '11

08 Feb '11

Hi Timo and the other directors of the following pigeonhole dovecot sieve I wonder what are the strengths and weaknesses of my config, and what do I need to change to stick more to a best configuration r13151 ~]# /usr/sbin/dovecot -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32.2-xxxx-grs-ipv6-32 i686 CentOS release 5.5 (Final) auth_mechanisms = plain login base_dir = /var/run/dovecot/ imap_capability = +IDLE listen = [::] log_path = /var/log/maillog log_timestamp = %Y-%m-%d %H:%M:%S login_log_format_elements = user=<%u> method=%m rip=%r lip=%l %c mail_location = maildir:~/Maildir mail_max_userip_connections = 20 managesieve_notify_capability = mailto managesieve_sieve_capability = comparator-i;octet comparator-i;ascii-casemap fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date spamtest spamtestplus virustest namespace { inbox = yes location = prefix = separator = . } passdb { driver = pam } plugin { plugin = autocreate managesieve sieve sieve = ~/.dovecot.sieve sieve_before = /var/sieve-scripts/roundcube.sieve sieve_dir = ~/sieve sieve_global_path = whatever } protocols = sieve imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-master { mode = 0666 } vsz_limit = 64 M } service imap-login { inet_listener imap { port = 0 } inet_listener imaps { address = * , [::] port = 993 } process_limit = 128 vsz_limit = 64 M } service imap { client_limit = 5 service_count = 0 } service managesieve-login { inet_listener managesieve-login { address = * port = 2000 } process_limit = 128 vsz_limit = 64 M } service pop3-login { inet_listener pop3 { port = 0 } inet_listener pop3s { address = * , [::] port = 995 } process_limit = 128 vsz_limit = 64 M } ssl_ca = </etc/pki/tls/certs/root.crt ssl_cert = </etc/pki/tls/certs/r13151.ovh.net.crt ssl_key = </etc/pki/tls/private/r13151.ovh.net.key ssl_verify_client_cert = yes userdb { driver = passwd } version_ignore = yes protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep imap_max_line_length = 64 k mail_plugins = autocreate } protocol pop3 { mail_plugins = autocreate pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s } protocol lda { hostname = r13151.ovh.net mail_plugins = autocreate sieve postmaster_address = postmaster(a)fakessh.eu sendmail_path = /usr/lib/sendmail } protocol sieve { managesieve_implementation_string = dovecot managesieve_logout_format = bytes ( in=%i : out=%o ) managesieve_max_line_length = 65536 } -- gpg --keyserver pgp.mit.edu --recv-key 092164A7 http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x092164A7

2 2

[Dovecot] dovecot: imap-login: Error: net_connect_unix(imap) failed: Resource temporarily unavailable
by Kurt Hockenbury 08 Feb '11

08 Feb '11

We recently switched over mail servers to one running dovecot and postfix on RedHat Enterprise 6. The mail store is NFS on a NetApp filer, the index files are on local disk. We have about 6000 total active users, though not all of them access the system at the same time. All goes well for a while, then we start seeing errors like this in the log: dovecot: imap-login: Error: net_connect_unix(imap) failed: Resource temporarily unavailable imap-login: Internal login failure (auth failed, 1 attempts) And at this point, users can't log in. I don't know what Resource dovecot is running out of. The machine is a 12-core Xeon 2.27Ghz, with 24GB RAM. I have removed the 1024 nproc limit in /etc/security/limits.d/90-nproc.conf, and upped the nproc and nofile limits to 16384 and 65535 respectively, both in limits.conf, as well as adding ulimit statements in /etc/init.d/dovecot (belt and suspenders). I have tried adjusting dovecot.conf, but I'm obviously missing something. dovecot -n follows: # 2.0.beta6 (3156315704ef): /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-71.14.1.el6.x86_64 x86_64 Red Hat Enterprise Linux Server release 6.0 (Santiago) auth_master_user_separator = * auth_mechanisms = plain login default_client_limit = 5000 default_process_limit = 5000 disable_plaintext_auth = no mail_fsync = always mail_gid = 501 mail_location = maildir:~/Maildir:INDEX=/var/indexes/%n mail_nfs_storage = yes mail_plugins = quota mail_uid = 501 passdb { args = /etc/dovecot/passwd.masterusers driver = passwd-file master = yes pass = yes } passdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } plugin { quota = maildir:User quota quota_rule = *:storage=200M } service auth { client_limit = 32768 unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = root } service imap-login { process_min_avail = 12 service_count = 0 } service pop3-login { service_count = 0 } shutdown_clients = no ssl_cert = </etc/pki/postfix/certs/nexus.pem ssl_key = </etc/pki/postfix/private/nexus_key.pem userdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } protocol imap { mail_plugins = $mail_plugins imap_quota } Thanks, -Kurt Hockenbury

5 17

[Dovecot] Outlook 2010 IMAP disconnected
by Luigi Rosa 08 Feb '11

08 Feb '11

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 A customer moved from a previous version of Outlook to 2010. When he forces the synchronization of the IMAP folders he gets this error: Disconnected for inactivity. Protocollo: IMAP Server: mail.xxxxxxxxxxxxxxxxxxx Porta: 143 Codice errore: 0x800CCCDD Dovecot simply logs this: Feb 3 09:20:34 server dovecot: imap(xxxx): Disconnected: Logged out bytes=2488/534485 Feb 3 09:20:34 server dovecot: imap(xxxx): Disconnected: Logged out bytes=63/815 Where can I search to solve this issue? Ciao, luigi - -- / +--[Luigi Rosa]-- \ I'd be a vegetarian if bacon grew on trees. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk1KZj8ACgkQ3kWu7Tfl6ZQtHwCfTZPpFC5iHvL1+5EuxKAFlqWD DjcAn3rYU0Uwc13arHirb/5G3NuYcWX/ =LkGi -----END PGP SIGNATURE-----

5 9

[Dovecot] vpopmail passdb deadlock if tcprules binary is missing
by Teodor Milkov 07 Feb '11

07 Feb '11

Hello, I've just found that if vpopmail is compiled with --enable-roaming-users=y, but tcprules binary is missing there is kind of denial of service situation, which is not very obvious for debugging. I know this is result of misconfiguration and I suppose this is more of a vpopmail() bug, but it is somewhat hard to debug and causes greater harm to dovecot long running auth process than vpopmail's short living vchkpw process. Symptoms -------- Login to dovecot imap takes very long time. There are auth processes in D state: USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 9873 0.0 0.0 2884 1396 ? D 14:04 0:00 dovecot/auth -w root 11292 0.0 0.0 2884 1396 ? S 14:25 0:00 \_ dovecot/auth -w Cause ----- When new user has to be authenticated from vpopmail, the sequence of events goes something like this: * libexec/dovecot/auth -w process is doing the authentication (passdb-vpopmail.c) * passdb-vpopmail.c: at some point user is authenticated and open_smtp_relay() is called * vpopmail.c: open_smtp_relay() gets a write lock on ~vpopmail/etc/open-smtp.lock adds new IP to ~vpopmail/etc/open-smtp and calls update_rules() etc. to rebuild the tcp.cdb file * vpopmailc: tcprules_open() is called and it fork()s and tries to execv() tcprules * if tcprules is not found, execv() fails silently, and we are left with a forked libexec/dovecot/auth instance, which runs all over again up to the open_smtp_relay() point where it tries to obtain write lock on ~vpopmail/etc/open-smtp.lock again (it is already locked by parent) Hope this helps someone.

1 0

[Dovecot] maildrop and multi-dbox
by Manfred Lotz 07 Feb '11

07 Feb '11

Hi there, I'm using Dovecot 2.0.9-1 under Arch Linux. Currently, I have Maildir configured, and I move all my emails into dovecot by using this sequence: 1) cron starts fetchmail periodically under user manfred to collect my mails from various email accounts. 2) In ~/.fetchmailrc I have configured /usr/bin/maildrop as MDA. 3) In ~/.mailfilter (used by maildrop) I have extensive filtering in place and call bogofilter (by using xfilter) to classify spam mails. This works fine so far. Now I'd like to migrate to dovecot's new format multi-dbox. My question now: Is it correct that then I cannot longer use maildrop and would need to switch do dovecot-lda? -- Thanks, Manfred

3 4

[Dovecot] DoveCot 2.0.19: Problem compiling Solaris 10u9 x86 with dbox storage enabled
by Denny Schierz 07 Feb '11

07 Feb '11

hi, I can't compile DoveCot 2.0.19 with dbox enabled on our Solaris 10/U9: LDFLAGS="-L/opt/csw/lib -L/usr/lib -R/opt/csw/lib/" ./configure --prefix=/usr/local/dovecot/2.0.19 --with-ssl=openssl --with-rundir=/var/run/dovecot --with-storages=maildir,mbox,dbox --with-ldap=yes gmake -> ========================== [... ../../src/lib-storage/mailbox-list.h:250: warning: parameter has incomplete type mv -f .deps/mail-storage-callbacks.Tpo .deps/mail-storage-callbacks.Po gcc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-settings -I../../src/lib-dict -I../../src/lib-master -I../../src/lib-mail -I../../src/lib-imap -I../../src/lib-index -I../../src/lib-storage -I/opt/csw/include -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -MT main.o -MD -MP -MF .deps/main.Tpo -c -o main.o main.c In file included from ../../src/lib-storage/mail-storage.h:10, from imap-commands.h:6, from imap-client.h:4, from imap-common.h:17, from main.c:3: ../../src/lib-storage/mailbox-list.h:250: warning: parameter has incomplete type mv -f .deps/main.Tpo .deps/main.Po /bin/bash ../../libtool --tag=CC --mode=link gcc -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -export-dynamic -L/opt/csw/lib -L/usr/lib -R/opt/csw/lib/ -o imap cmd-append.o cmd-capability.o cmd-cancelupdate.o cmd-check.o cmd-close.o cmd-copy.o cmd-create.o cmd-delete.o cmd-enable.o cmd-examine.o cmd-expunge.o cmd-fetch.o cmd-id.o cmd-idle.o cmd-list.o cmd-logout.o cmd-lsub.o cmd-namespace.o cmd-noop.o cmd-rename.o cmd-search.o cmd-select.o cmd-sort.o cmd-status.o cmd-store.o cmd-subscribe.o cmd-thread.o cmd-uid.o cmd-unselect.o cmd-unsubscribe.o cmd-x-cancel.o imap-client.o imap-commands.o imap-commands-util.o imap-expunge.o imap-fetch.o imap-fetch-body.o imap-search.o imap-search-args.o imap-settings.o imap-status.o imap-sync.o mail-storage-callbacks.o main.o ../../src/lib-storage/libdovecot-storage.la ../../src/lib-dovecot/libdovecot.la -export-dynamic -lrt -lnsl -lsocket -lrt -lsendfile libtool: link: gcc -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -o .libs/imap cmd-append.o cmd-capability.o cmd-cancelupdate.o cmd-check.o cmd-close.o cmd-copy.o cmd-create.o cmd-delete.o cmd-enable.o cmd-examine.o cmd-expunge.o cmd-fetch.o cmd-id.o cmd-idle.o cmd-list.o cmd-logout.o cmd-lsub.o cmd-namespace.o cmd-noop.o cmd-rename.o cmd-search.o cmd-select.o cmd-sort.o cmd-status.o cmd-store.o cmd-subscribe.o cmd-thread.o cmd-uid.o cmd-unselect.o cmd-unsubscribe.o cmd-x-cancel.o imap-client.o imap-commands.o imap-commands-util.o imap-expunge.o imap-fetch.o imap-fetch-body.o imap-search.o imap-search-args.o imap-settings.o imap-status.o imap-sync.o mail-storage-callbacks.o main.o -L/opt/csw/lib -L/usr/lib ../../src/lib-storage/.libs/libdovecot-storage.so /usr/local/dovecot/v2/dovecot-2.0.9/src/lib-dovecot/.libs/libdovecot.so ../../src/lib-dovecot/.libs/libdovecot.so -liconv -lnsl -lsocket -lrt -lsendfile -R/usr/local/dovecot/2.0.19/lib/dovecot -R/opt/csw/lib/ ld: warning: file ../../src/lib-dovecot/.libs/libdovecot.so: linked to /usr/local/dovecot/v2/dovecot-2.0.9/src/lib-dovecot/.libs/libdovecot.so: attempted multiple inclusion of file Undefined first referenced symbol in file dbox_storage ../../src/lib-storage/.libs/libdovecot-storage.so ld: fatal: Symbol referencing errors. No output written to .libs/imap collect2: ld returned 1 exit status gmake[3]: *** [imap] Error 1 gmake[3]: Leaving directory `/usr/local/dovecot/v2/dovecot-2.0.9/src/imap' gmake[2]: *** [all-recursive] Error 1 gmake[2]: Leaving directory `/usr/local/dovecot/v2/dovecot-2.0.9/src' gmake[1]: *** [all-recursive] Error 1 gmake[1]: Leaving directory `/usr/local/dovecot/v2/dovecot-2.0.9' gmake: *** [all] Error 2 ============================ compiling without dbox works. # pkgutil -a | grep iconv libiconv CSWiconv 1.9.2 1.3 MB cu denny

2 2

[Dovecot] Dovecot Or Debian, Boot-Time Error "Can't assign requested address"
by Sabahattin Gucukoglu 06 Feb '11

06 Feb '11

Hi all, I have a really weird problem, which for now I have solved by just binding to the IPv6 wildcard address "::". Using the latest packages from Debian unstable (1.x series), I set up a tunnel with tunnelbroker.net for IPv6. I assign two of the delegated addresses in my /48 using IP aliases in /etc/network/interfaces to my ethernet interface (eth0 and eth0:1). All other servers start and run, binding to the primary address (eth0) assigned. The packet forwarder is not necessary, so it isn't turned on using sysctl. But Dovecot will only start if I launch it using the init script after boot. Until then, in syslog there is always: Fatal: listen(2001:470:xxxx::1): Can't assign requested address Anybody have the slightest clue what's going on here? Debian bug, or Dovecot? I suspect some problem with initscript order, yet inspection shows no apparent problem; network starts up before services. Very, very odd. Cheers, Sabahattin

1 0

[Dovecot] Splitting up mail_location setting?
by Timo Sirainen 06 Feb '11

06 Feb '11

mail_location setting has started becoming a bit bloaty. I'm not actually even sure why I've kept adding more parameters to it rather than just adding new settings. It's also caused confusion, because people try things like: mail_location = mbox:/var/mail/%u mail_location = mbox:INBOX=/var/mail/%u Although the first one has been giving ok enough error message for a long time now and the second one also will give in v2.0.10, it still would be nicer if there wasn't any need for such confusion at all. The settings could instead be: mail_format = mbox mail_inbox_path = /var/mail/%u Then Dovecot could complain about mail_root_path being empty, which would be more understandable.. The mail_location setting itself would keep working probably forever for backwards compatibility (and also in some setups it would be difficult to split it when it comes from LDAP/SQL), although some of its parameters could maybe be dropped after a while (SUBSCRIPTIONS, DIRNAME, MAILBOXDIR). So if you did e.g.: mail_location = mbox:~/mail:INBOX=/var/mail/%u mail_root_path = ~/mail2 The result would be same as mbox:~/mail2:INBOX=/var/mail/%u. Although this can also result in probably unwanted situation: mail_location = mbox:~/mail:INBOX=/var/mail/%u mail_format = maildir mail_root_path = ~/Maildir Now the result would be maildir:~/Maildir:INBOX=/var/mail/%u. This can be avoided by setting mail_inbox_path="" explicitly. Or the other way around: mail_inbox_path = /var/mail/%u mail_location = maildir:~/Maildir:INBOX= Without the INBOX= the mail_inbox_path would be in use. Below are the setting names I thought about using: a) mail_location = maildir:~/Maildir:INBOX=~/Maildir/.INBOX:INDEX=~/indexes:CONTROL=~/control:LAYOUT=fs:SUBSCRIPTIONS=courier-subscriptions mail_format = maildir mail_root_path = ~/Maildir mail_inbox_path = ~/Maildir/.INBOX mail_index_path = ~/indexes mail_control_path = ~/control mail_directory_layout = fs mail_subscriptions_fname = courier-subscriptions b) mail_location = mdbox:~/mdbox:ALT=/alt/%u:LAYOUT=fs:DIRNAME=dbox-Mails:MAILBOXDIR=mailboxes mail_format = mdbox mail_root_path = ~/mdbox mail_alt_path = /alt/%u mail_dir_name = dbox-Mails mail_mailboxes_dir_name = mailboxes Thoughts?

3 2

Re: [Dovecot] Samba AD and Dovecot
by Jason Gunthorpe 06 Feb '11

06 Feb '11

On Fri, Feb 04, 2011 at 01:47:31PM -0700, Trever L. Adams wrote: > > There was a thread a month or so ago on how to do GSSAPI with AD and > > dovecot kerberos. It works great, and I highly recommend it for AD > > sites. Check the archives, it isn't really too hard. > I am not finding this. Do you happen to remember the subject? No, but it is pretty simple using latest everything (well, Debian squeeze).. Basically from scratch.. Notice this also sets up NTLM, which is supported by many roaming devices (ie phones). 1) Put this or similar in /etc/samba/smb.conf [global] workgroup = $NT_WORKGROUP$ realm = $REALM$ security = ads kerberos method = secrets and keytab 2) Confirm that hostname gives an unqualified name and hostname -f gives a fully qualified name. Confirm you have DNS setup properly (eg dig -t SRV _kerberos._udp.$REALM$ works OK) 3) Join the machine to AD $ net ads join -U 'user with AD privs' $ kinit AD_USER $ kvno host/`hostname -f` 4) Setup imap SPN: $ net ads keytab add imap $ net ads search cn=`hostname` | grep servicePrincipalName $ klist -k $ kvno imap/`hostname -f` The last three should report imap/`hostname -f` entries. 5) Setup dovecot.. Set these things in the config auth_use_winbind = yes mechanisms = plain gssapi gss-spnego login ntlm 6) Setup exim.. $ net ads keytab add smtp Use these in the dovecot config: client { path = /var/run/dovecot/auth-client mode = 0660 group = Debian-exim } } And this at the end of the exim.conf: dovecot_plain: driver = dovecot public_name = PLAIN server_socket = /var/run/dovecot/auth-client server_set_id=PLAIN-${quote:$auth1} dovecot_ntlm: driver = dovecot public_name = NTLM server_socket = /var/run/dovecot/auth-client server_set_id=NTLM-${quote:$auth1} dovecot_gssapi: driver = dovecot public_name = GSSAPI server_socket = /var/run/dovecot/auth-client server_set_id=GSSAPI-${quote:$auth1} dovecot_gssapi_spnego: driver = dovecot public_name = GSS-SPNEGO server_socket = /var/run/dovecot/auth-client server_set_id=GSS-SPNEGO-${quote:$auth1} 7) Setup openssh in sshd_config GSSAPIAuthentication yes GSSAPICleanupCredentials yes GSSAPIStrictAcceptorCheck yes Jason

2 2

[Dovecot] Best filesystem?
by Monika Janek 05 Feb '11

05 Feb '11

Hi everyone! What's the best filesystem to use for the mail spool? I'm debating between Debian with xfs or FreeBSD with zfs. I'm not sure which way to go. I'm migrating from cyrus. I have about 50 users so it's not a large setup. Cheers! Monika -- Monika Janek Systems Administrator, Side Effects Software Toronto, Ontario Canada 416-504-9876 x207 www.sidefx.com

14 43

[Dovecot] Question about managing multiple domains
by Sergio Moscoso 04 Feb '11

04 Feb '11

Actually we have configured a server (postfix,dovecot,mysql) with multiple domains, but the problem resides in that we don't want to login via POP3 using "user@domain" just using "user", because we'll migrate our actual platform (Qmail) to dovecot. Our users are logging to their mail boxes, using only user name. We want to ask if that's posible to use a function like a "vipmap" in qmail, that allow to map an IP address to a domain. We're using the dovecot 1.0.7, the configuration shows as follows: login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login first_valid_uid: 100 mail_location: maildir:~/Maildir/ mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 imap_client_workarounds(default): delay-newmail outlook-idle netscape-eoh imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh imap_client_workarounds(pop3): outlook-idle pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: username_format: %Lu passdb: driver: sql args: /etc/dovecot-mysql.conf userdb: driver: static args: uid=101 gid=102 home=/home/vmail/%d/%n We'll apreciate your response, 'cause we coulnd't find information about this issuet and we didn't to find any clue that shows how can realize it. Thank you in advance. Sergio Moscoso

1 0

[Dovecot] EUID not changing when delivering to a mailbox
by rastik＠tereus.eu 04 Feb '11

04 Feb '11

Hello, I've set up virtual mailboxes and I'm using one uid/gid pair (mail/mail) to deliver almost all messages. Some accounts I'd like to have accessible by local Linux accounts as well, so postfix is delivering them using separate uids (gid stays the same). But I run into a problem when dovecot auth correctly fetches uid/gid from MySQL database, but still uses general mail uid to access the mailbox instead of user uid. This is what I have in dovecot log: dovecot: auth(default): client in: AUTH 1 PLAIN service=imap secured lip=myipaddr rip=myipaddr lport=143 rport=55513 dovecot: auth(default): client out: CONT 1 dovecot: auth(default): client in: CONT<hidden> dovecot: auth-worker(default): sql(joe(a)mydomain.com,myipaddr): query: SELECT CONCAT('/var/mail/', maildir) AS userdb_home, username as user, password, CONCAT('*:bytes=', quota) AS userdb_quota_rule, uid, gid FROM mailbox WHERE username = 'joe(a)mydomain.com' AND active = 1 dovecot: auth(default): client out: OK 1 user=joe(a)mydomain.com uid=1000 gid=12 dovecot: auth(default): master in: REQUEST 11 17252 1 dovecot: auth(default): prefetch(joe(a)mydomain.com,myipaddr): success dovecot: auth(default): master out: USER 11 joe(a)mydomain.com home=/var/mail/mydomain.com/joe/ quota_rule=*:bytes=-1 dovecot: imap-login: Login: user=<joe(a)mydomain.com>, method=PLAIN, rip=myipaddr, lip=myipaddr, TLS dovecot: IMAP(joe(a)mydomain.com): opendir(/var/mail/mydomain.com/joe/Maildir) failed: Permission denied (euid=8(mail) egid=12(mail) missing +r perm: /var/mail/mydomain.com/joe/Maildir) dovecot: IMAP(joe(a)mydomain.com): stat(/var/mail/mydomain.com/joe/indexes/.INBOX) failed: Permission denied (euid=8(mail) egid=12(mail) missing +x perm: /var/mail/mydomain.com/joe/indexes) dovecot: IMAP(joe(a)mydomain.com): file_dotlock_create(/var/mail/mydomain.com/joe/Maildir/dovecot-uidlist) failed: Permission denied (euid=8(mail) egid=12(mail) missing +w perm: /var/mail/mydomain.com/joe/Maildir) dovecot: IMAP(joe(a)mydomain.com): opendir(/var/mail/mydomain.com/joe/Maildir/new) failed: Permission denied (euid=8(mail) egid=12(mail) missing +r perm: /var/mail/mydomain.com/joe/Maildir/new) dovecot: IMAP(joe(a)mydomain.com): stat(/var/mail/mydomain.com/joe/indexes/.INBOX) failed: Permission denied (euid=8(mail) egid=12(mail) missing +x perm: /var/mail/mydomain.com/joe/indexes) dovecot: IMAP(joe(a)mydomain.com): file_dotlock_create(/var/mail/mydomain.com/joe/Maildir/dovecot-uidlist) failed: Permission denied (euid=8(mail) egid=12(mail) missing +w perm: /var/mail/mydomain.com/joe/Maildir) ricola dovecot: IMAP(joe(a)mydomain.com): opendir(/var/mail/mydomain.com/joe/Maildir/new) failed: Permission denied (euid=8(mail) egid=12(mail) missing +r perm: /var/mail/mydomain.com/joe/Maildir/new) dovecot: IMAP(joe(a)mydomain.com): Disconnected: Logged out bytes=171/775 My configuration is: # 1.2.16: /etc/dovecot/dovecot.conf # OS: Linux 2.6.36-hardened-r6 x86_64 Gentoo Base System release 2.0.1 ext4 listen: *, [::] ssl_cert_file: /etc/ssl/dovecot/server.pem ssl_key_file: /etc/ssl/dovecot/server.key login_dir: /var/run/dovecot/login login_executable: /usr/libexec/dovecot/imap-login first_valid_uid: 8 last_valid_uid: 1999 first_valid_gid: 12 last_valid_gid: 12 mail_privileged_group: mail mail_uid: 8 mail_gid: 12 mail_location: maildir:/var/mail/%d/%n/Maildir/:INDEX=/var/mail/%d/%n/indexes lda: postmaster_address: postmaster(a)mydomain.com mail_plugins: quota auth default: mechanisms: plain login user: nobody verbose: yes debug: yes passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: prefetch userdb: driver: sql args: /etc/dovecot/dovecot-sql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: mail group: mail I'm not sure if I got the concept correctly, but I was expecting that dovecot will use uid from the database. I was not able to find any relevant information in the archives. If it was explained already in the past, please send me some keywords that would help me find it. Thank you, Rastislav Wartiak

2 1