- dovecot - dovecot.org

[Dovecot] Feature Request - Authentication Scheme - Linuxconf
by Marc Perkel 17 Jul '05

17 Jul '05

This would make my life a lot easier in migrating to Dovecot. And it should be really easy to implement. Here's how linuxconf does it: Password files are placed in the /etc/vmail directory as follows: /etc/vmail/passwd.domain1 /etc/vmail/shadow.domain1 /etc/vmail/passwd.domain2 /etc/vmail/shadow.domain2 The password and shadow files are exactly the same format as the /etc/password and /etc/shadow files. The user name within the files would be the %n part of the email address passed to authenticate with. Basically the password file names are /etc/vmail/passwd.%d with the user withing the file being %n. marc:x:40000:12:Marc Perkel:/vhome/perkel.com/home/marc:/bin/false test:x:40001:12::/vhome/perkel.com/home/test:/bin/false dd:x:40002:12:Atia:/vhome/perkel.com/home/dd:/bin/false test2:x:40003:12::/vhome/perkel.com/home/test2:/bin/false It also makes merging several servers with separate passwd/shadow files into one virtual system because all you have to do is copy their existing passwd/shadow files into the /etc/vmail directory and rename them with the domain at the end. So - wouldn't that be easy to add? Sure would make migrating easy for me. -- Marc Perkel - marc(a)perkel.com Spam Filter: http://www.junkemailfilter.com My Blog: http://marc.perkel.com

2 4

[Dovecot] user_db, uid/gid and maildir
by vmstech 17 Jul '05

17 Jul '05

Im experimenting with putting all my virtual users mail under 1 directory with belonging to a system user created for the purpose. The mode on the directory (and subdirectories) is 770. I keep all my virtual users details in a postgres database. My interpretation of the wiki documentation is that if the user_db query returns a uid column and a gid column containing the numeric uid and gid of the owner of the directory, then dovecot should have no problem using mail in these folders. Is that correct? (I'm actually getting permission errors appear in the log file on the directories when I try and attach with a client, which reports "Cannot get LIST information for pattern `*' on IMAP server a.b.com unknown".) thanks Glenn

1 0

[Dovecot] Authenticaing in postgresql
by vmstech 17 Jul '05

17 Jul '05

Hi all - Im new to dovecot and actually all things email serverish. I spent last week wrestling with exim4, and this week its dovecots turn. I'm trying to connect as an imap user (from evolution) and not actually able to make a successful login. I have default_pass_scheme=PLAIN, and am using pass authentication in evolution client. Its the only one available after it queries the server for available types. I'm not getting any errors appear in either the postgres or dovecot log files (anymore :-) that is). I'm getting the exact query I'd like to see in the dovecot log file, after I entering the password in the client, but unfortunately it doesnt give me the reply. I can key this exact query in to the psql client and get the correct answer. dovecots logs don't tell me if I have success or failure. The auth_db query has only 1 column. I have no idea where to go from here - would love a hint thanks Glenn

1 1

Re: [Dovecot] New to dovecot, little luck - signal 10 death for imap
by Jeroen Scheerder 15 Jul '05

15 Jul '05

Peter Evans wrote: > Jeroen Scheerder (Jeroen.Scheerder(a)phil.uu.nl) wrote: > >>However, whenever a mailbox is selected, the imap subprocess dies. >>Jul 13 14:52:05 localhost dovecot: imap-login: Login: js [127.0.0.1] >>Jul 13 14:52:07 localhost dovecot: child 8082 (imap) killed with signal 10 > > > You're going to have to help us to help you. 10 is bus error (I think) > which is badness. > > OS, > version of dovecot > etc. > > you might want to debug a coredump, that will tell you where/why its > dying too. I would merrily gdb into a coredump and stacktrace away, if a core dump were created. No such luck. I'm now logging directly to file using syslog, after having started dovecot. There is no limit on coredumps: % limit cputime unlimited filesize unlimited datasize unlimited stacksize 8MB coredumpsize unlimited descriptors 64 vmemorysize unlimited % more /tmp/dovecot* :::::::::::::: /tmp/dovecot-info.log :::::::::::::: dovecot: Jul 13 15:27:35 Info: Dovecot v1.0-stable starting up dovecot: Jul 13 15:28:21 Info: imap-login: Login: avank [127.0.0.1] :::::::::::::: /tmp/dovecot.log :::::::::::::: dovecot: Jul 13 15:28:21 Error: child 14882 (imap) killed with signal 10 Environmental details: Solaris 7 (sparc) dovecot 1.0-stable compiled with ldap support using gcc 3.3.4 4.0.0 4.0.1 (no difference here) configured for mbox support with locking matching procmail's delivery locking strategies with authentication using passwd/shadow native databases A header dump shows nothing suspect: % elfdump -d /phil/sunos/sparc/pkg/dovecot-1.0-stable/libexec/dovecot/imap Dynamic Section: .dynamic index tag value [0] NEEDED 0x1 libsocket.so.1 [1] NEEDED 0x117 librt.so.1 [2] NEEDED 0x140 libc.so.1 [3] NEEDED 0x397 libnsl.so.1 [4] NEEDED 0x3b3 libdl.so.1 [5] RPATH 0x3cc /phil/sw/sunos/sparc/lib [snip] Will try on Solaris 10.

4 9

[Dovecot] OS X Mail.app 2 (Tiger) + dovecot -> new mail count doubled
by Alan Schmitt 14 Jul '05

14 Jul '05

Hello, I've noticed a strange bug with Mail.app 2 (from OS X.4) and dovecot, and I'm trying to identify where it comes from. I have a bunch of mailboxes that can receive new mail (delivered by procmail) and I have Mail set up as to automatically synchronize all maiboxes. When I start up Mail, the count for new mail is doubled in every mailbox that I have not seen yet. Looking at a mailbox restores the correct count (mail is not actually duplicated, it's just the new mail counter that is wrong). Has anyone else seen this? Would this bug be from Mail.app or from dovecot? (I suspect the former.) Thanks a lot, Alan Schmitt

3 6

[Dovecot] Very slow select() command on large mailboxes
by Sebastjan Trepca 14 Jul '05

14 Jul '05

Hi, I'm trying to decide if I could use you mail server in our enviroment which has about 10k users and mailboxes size about ~1GB. So I made a few tests and it all worked quite fast, except that select command on large mailboxes. The first time I select a mailbox which has 10k messages it takes about 4s to process. I am deliberately trying this on a Celeron 850Mhz, 512 MB memory and some shitty hard-drive to maximize the times. So why is this so slow? Does it index the messages on select? It's even slower when I have some new messages in folder, more that I have more I wait. So I presume it must be something with indexing? Anyway, how could I optimize this? Why don't you index when a mail arrives instead of on select? Thanks for help and keep doing a great job with Dovecot. Sebastjan

4 3

[Fwd: Re: [Dovecot] Dovecot and ActiveDirectory]
by Chris Wakelin 14 Jul '05

14 Jul '05

Oops! Thought I'd CC'd this to the list. Sorry, Oliver! Chris -------- Original Message -------- Date: Wed, 13 Jul 2005 20:09:35 +0100 From: Chris Wakelin <c.d.wakelin(a)reading.ac.uk> To: Jeroen Scheerder <Jeroen.Scheerder(a)phil.uu.nl> CC: Chris Wakelin <c.d.wakelin(a)reading.ac.uk> Subject: Re: [Dovecot] Dovecot and ActiveDirectory Jeroen Scheerder wrote: > Chris Wakelin (13/7/05 16:08 +0100) [Re: [Dovecot] Dovecot and > ActiveDirectory]: > > >>I've got it working via PAM and pam_ldap on Solaris. [..] > > > That's exactly what I'm striving to do. > > I've never set up LDAP authentication for Solaris itself, and actually > never used PAM before. > > If I may be so bold, could I bother you for details about your > configuration in these respects? /opt/RDGpldap/etc/ldap.conf: host xxx.rdg.ac.uk base dc=xxxxx,dc=ad,dc=rdg,dc=ac,dc=uk binddn cn=xxxuser,cn=users,dc=xxxxx,dc=ad,dc=rdg,dc=ac,dc=uk bindpw xxxpasswd nss_map_objectclass posixAccount user nss_map_objectclass shadowAccount user nss_map_attribute uid sAMAccountName nss_map_attribute homeDirectory unixHomeDirectory nss_map_attribute shadowLastChange pwdLastSet nss_map_objectclass posixGroup group nss_map_attribute uniqueMember member pam_login_attribute sAMAccountName pam_filter objectclass=User pam_password ad xxxuser is a read-only account in the AD. /etc/pam.conf: ... dovecot auth required /opt/RDGpldap/lib/pam_ldap.so dovecot account required /opt/RDGpldap/lib/pam_ldap.so dovecot session required /opt/RDGpldap/lib/pam_ldap.so dovecot.conf: auth_username_translation = AaBbCcDdEeFfGgHhIiJjKkLlMmNnOoPpQqRrSsTtUuVvWwXxYyZz auth default { mechanisms = plain login passdb = pam userdb = passwd user = root } The auth_username_translation is because AD users are case-insensitive but UNIX ones aren't! We have users in both AD and UNIX (but could use something like "userdb=static uid=xxxx gid=yyyy home=/var/mail/%Lu" assuming xxxx:yyyy has appropriate permissions on the spool files) pam_ldap-178 was configured with ./configure --prefix=/opt/RDGpldap \ --with-ldap-conf-file=/opt/RDGpldap/etc/ldap.conf Hope this helps, Chris -- --+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+- Christopher Wakelin, c.d.wakelin(a)reading.ac.uk IT Services Centre, The University of Reading, Tel: +44 (0)118 378 8439 Whiteknights, Reading, RG6 2AF, UK Fax: +44 (0)118 975 3094

1 0

Re: [Dovecot] problem with server certificate: dovectot.pem
by Joseph Tam 14 Jul '05

14 Jul '05

> Date: Wed, 13 Jul 2005 23:46:33 +0300 > From: vladone <vladone(a)spaingsm.com> > Subject: [Dovecot] problem with server certificate: dovectot.pem > > I have an mail server with postfix and dovecot. > All works fine, but now is change my domain. After changed > configurations i can receive (or send) mail without STARTTLS, > but when i try to use this option i receive: > "TLS handshake failure. Invalid server certificate (Key material > mismatch)" > > I dont know what is this. > I use certificate that is generate with script for dovecot (that work > at begining). > Even i try to rebuild this certificate acording with new domain but > nothing. > Where is my problem? Yes, of course. Certificates are made out to a particular hostname (e.g. smtp.wahtever.com) and if you change your server hostname or move it to another server, a new certificate will have to be made out to the new hostname. You could also configure your client ignore certificate mismatches, but this wouldn't be the best option. Joseph Tam <tam(a)math.ubc.ca>

1 0

[Dovecot] Search with specified charset
by Chris Wakelin 13 Jul '05

13 Jul '05

I've seen a problem with searching in the Prayer webmail client that turns out to be caused by Prayer insisting on a charset called "ISO-8859-1" and Dovecot, using Solaris iconv, not recognising it (all the Solaris 8 iconv modules appear to be "ISO8859-1" etc. or just "8859-1"). This isn't a problem in Linux: % iconv --list | grep 8859.1/ 8859_1// ISO-8859-1// ISO8859-1// ISO885911// ISO_8859-1// I've hacked together a patch for Dovecot to try matching without the "ISO-" prefix if matching fails at first, which works for Solaris (as would creating an extra symbolic link in /usr/lib/iconv or hacking Prayer to use "ISO8859-1") and it doesn't break Linux, but it's not pretty :( Better may be to try substituting underscores, hyphens, spaces(?) and nothing in the string, but that makes the change much more complicated! Best Wishes, Chris --- dovecot-1.0-stable/src/lib-charset/charset-iconv.c.orig Mon Jan 31 16:37:55 2005 +++ dovecot-1.0-stable/src/lib-charset/charset-iconv.c Wed Jul 13 21:47:03 2005 @@ -36,9 +36,17 @@ ascii = FALSE; cd = iconv_open("UTF-8", charset); if (cd == (iconv_t)-1) { - if (unknown_charset != NULL) - *unknown_charset = TRUE; - return NULL; + /* Try matching charset without "ISO" prefix */ + if (strncasecmp(charset, "ISO-", 4) == 0 || + strncasecmp(charset, "ISO ", 4) == 0) + cd = iconv_open("UTF-8", charset + 4); + else if (strncasecmp(charset, "ISO", 3) == 0) + cd = iconv_open("UTF-8", charset + 3); + if (cd == (iconv_t)-1) { + if (unknown_charset != NULL) + *unknown_charset = TRUE; + return NULL; + } } } @@ -137,9 +145,17 @@ cd = iconv_open("UTF-8", charset); if (cd == (iconv_t)-1) { - if (unknown_charset != NULL) - *unknown_charset = TRUE; - return NULL; + /* Try matching charset without "ISO" prefix */ + if (strncasecmp(charset, "ISO-", 4) == 0 || + strncasecmp(charset, "ISO ", 4) == 0) + cd = iconv_open("UTF-8", charset + 4); + else if (strncasecmp(charset, "ISO", 3) == 0) + cd = iconv_open("UTF-8", charset + 3); + if (cd == (iconv_t)-1) { + if (unknown_charset != NULL) + *unknown_charset = TRUE; + return NULL; + } } if (unknown_charset != NULL) -- --+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+- Christopher Wakelin, c.d.wakelin(a)reading.ac.uk IT Services Centre, The University of Reading, Tel: +44 (0)118 378 8439 Whiteknights, Reading, RG6 2AF, UK Fax: +44 (0)118 975 3094

1 0

[Dovecot] problem with server certificate: dovectot.pem
by vladone 13 Jul '05

13 Jul '05

Hi! I have an mail server with postfix and dovecot. All works fine, but now is change my domain. After changed configurations i can receive (or send) mail without STARTTLS, but when i try to use this option i receive: "TLS handshake failure. Invalid server certificate (Key material mismatch)" I dont know what is this. I use certificate that is generate with script for dovecot (that work at begining). Even i try to rebuild this certificate acording with new domain but nothing. Where is my problem? P.S. All works before changed my domain!!!

1 0

[Dovecot] file locks
by Obantec Support 13 Jul '05

13 Jul '05

Hi I am trying to install 1.0 stable from source on a test server running 0.99 on FC3. i did basic ./configure etc and get this result Jul 13 17:24:26 proteus4 dovecot: Dovecot v1.0-stable starting up Jul 13 17:24:35 proteus4 dovecot: POP3(obantec): open(/var/spool/mail/.temp.proteus4.4485.e3eec7b26a559bac) failed: Permission denied Jul 13 17:24:35 proteus4 dovecot: POP3(obantec): file_lock_dotlock() failed with mbox file /var/spool/mail/obantec: Permission denied Jul 13 17:24:35 proteus4 dovecot: pop3-login: Login: obantec [192.168.0.10] when trying to access a test account. permissions all look as per old 0.99 which did work. Mark

3 5

[Dovecot] Minor bugs still in test77
by Chris Wakelin 13 Jul '05

13 Jul '05

Thinking of patches I always apply, I've got a couple (attached) that fix minor bugs and maybe should be applied - or implemented better and then applied ;) - to the main distribution? 1) LIST bugs: LIST "~/mail/" "" and LIST "" "~/mail/" (where "~/mail/" is a namespace prefix) don't reply the same way as UW-IMAP does and in at least the first case, still violates the spec (your fix breaks, as namespace_find() modifies its argument) The second issue breaks Pine 4.x, I think. 2) Angle-addresses If a header address is just "<someone(a)somewhere.org>" rather than "Someone <someone(a)somewhere.org>" or "someone(a)somewhere.org", then the FETCH ... ENVELOPE command responds with "" as the personal name, rather than NIL, which may confuse clients (without being wrong, technically, I think). (In case anyone's interested, I also use patches to: 1) fix the 64bit issue mentioned earlier today 2) introduce extra logging of LIST, SUBSCRIBE and UNSUBSCRIBE (for debugging during our migration from UW-IMAP) 3) rename .subscriptions to .mailboxlist and store folder names in it including the namespace prefix (to emulate UW-IMAP) 4) implement a Reading-specific hashing algorithm for the mail spool location as an extra variable modifier "%H" (e.g. "/export/mail/%Hu/%u/INBOX") 5) remove the need for /dev/urandom, which isn't available on our mail server (though there is a Solaris patch available to create it). 6) add an option to hide "AUTH=PLAIN" in the CAPABILITY string as Pine 4.x complains loudly when this is advertised on a non-SSL connection ) Best Wishes, Chris -- --+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+- Christopher Wakelin, c.d.wakelin(a)reading.ac.uk IT Services Centre, The University of Reading, Tel: +44 (0)118 378 8439 Whiteknights, Reading, RG6 2AF, UK Fax: +44 (0)118 975 3094 --- dovecot-1.0-test77.orig/src/imap/cmd-list.c Sun Apr 17 17:37:05 2005 +++ dovecot-1.0-test77/src/imap/cmd-list.c Wed Jul 13 16:10:27 2005 @@ -372,7 +372,8 @@ concept which probably no other client uses than Pine. Just try our best to emulate UW-IMAP behavior and hopefully we're fine. */ - ns = namespace_find(client->namespaces, &ref); + const char *ref_copy = t_strdup(ref); + ns = namespace_find(client->namespaces, &ref_copy); if (ns == NULL) { const char *empty = ""; ns = namespace_find(client->namespaces, &empty); @@ -405,6 +406,28 @@ } client_send_tagline(cmd, "OK List completed."); } else { + + if (*ref == '\0' && !lsub) { + /* LIST "" "something" */ + const char *mask_copy = t_strdup(mask); + ns = namespace_find(client->namespaces, &mask_copy); + if (ns == NULL) { + const char *empty = ""; + ns = namespace_find(client->namespaces, &empty); + } + if (*ns->prefix != '\0' && *mask_copy == '\0') { + /* namespace, return it */ + string_t *str = t_str_new(64); + str_printfa(str, "* LIST (\\Noselect) \"%s\" ", + ns->sep_str); + imap_quote_append_string(str, ns->prefix, + FALSE); + client_send_line(client, str_c(str)); + client_send_tagline(client, "OK List completed."); + return TRUE; + } + } + ctx = p_new(cmd->pool, struct cmd_list_context, 1); ctx->ref = ref; ctx->mask = mask; --- dovecot-1.0-test77.orig/src/lib-mail/message-address.c Fri Apr 8 12:16:36 2005 +++ dovecot-1.0-test77/src/lib-mail/message-address.c Wed Jul 13 16:15:15 2005 @@ -140,6 +140,10 @@ return -1; ctx->addr.name = p_strdup(ctx->pool, str_c(ctx->str)); + if (*ctx->addr.name == '\0') { + /* Cope with "<address>" without display name */ + ctx->addr.name = NULL; + } if (parse_angle_addr(ctx) < 0) { /* broken */ ctx->addr.domain = p_strdup(ctx->pool, "SYNTAX_ERROR");

1 0

[Dovecot] Dovecot and ActiveDirectory
by Hoffmann, Oliver 13 Jul '05

13 Jul '05

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi! Is there a solution to auth dovecot against an windows active directory? i've tried this config: - --- # Space separated list of LDAP hosts to use. host:port is allowed too. hosts = dc.foo.bar # Distinguished Name - the username used to login to the LDAP server dn = cn=oh,cn=Users,dc=foo,dc=bar # Password for LDAP server dnpass = password # LDAP protocol version to use. Likely 2 or 3. ldap_version = 3 # LDAP base base = cn=Users,dc=foo,dc=bar # Dereference: never, searching, finding, always #deref = never # Search scope: base, onelevel, subtree scope = subtree # User attributes in order: user_attrs = uid,homeDirectory,,,uidNumber,gidNumber # Filter for user lookup. Some variables can be used: #user_filter = (&(objectClass=posixAccount)(uid=%u)) # Password checking attributes in order: pass_attrs = uid,userPassword # Filter for password lookups #pass_filter = (&(objectClass=posixAccount)(uid=%u)) # Default password scheme. "{scheme}" before password overrides this. #default_pass_scheme = CRYPT # You can use same UID and GID for all user accounts if you really want # to. # If the UID/GID is still found from LDAP reply, it overrides these values. #user_global_uid = #user_global_gid = - --- but got this error: - --- dovecot-auth: Jul 13 16:42:09 Error: ldap(oh): unknown user - --- thx & greets oliver -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (MingW32) iD8DBQFC1S162+wHtX4o3oARAo+SAJ9EGVQPXBG+gtZmcbkOjMiy0xF2JACgigDs +6q+EW0zjsICqME310Ky41M= =sMRS -----END PGP SIGNATURE-----

2 1

[Dovecot] New to dovecot, little luck - signal 10 death for imap
by Jeroen Scheerder 13 Jul '05

13 Jul '05

Hi, I'm a new prospective dovecot user. I'm planning to migrate a medium-scale mail site (a few thousand users) from UW to something better. I've set up dovecot on a test system. I can connect and authenticate just fine. IMAP clients get to see the right mailboxes. However, whenever a mailbox is selected, the imap subprocess dies. The log shows: Jul 13 14:52:05 localhost dovecot: imap-login: Login: js [127.0.0.1] Jul 13 14:52:07 localhost dovecot: child 8082 (imap) killed with signal 10 When I either telnet to it manually or run the "imap" process in a terminal window, everything seems to work: ---- Snip ---- * PREAUTH [CAPABILITY IMAP4rev1 SORT THREAD=REFERENCES MULTIAPPEND UNSELECT LITERAL+ IDLE CHILDREN NAMESPACE LOGIN-REFERRALS] Logged in as js x select INBOX * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft \*)] Flags permitted. * 1300 EXISTS * 0 RECENT * OK [UNSEEN 2] First unseen. * OK [UIDVALIDITY 1119092680] UIDs valid * OK [UIDNEXT 1590] Predicted next UID x OK [READ-WRITE] Select completed. x fetch 1 full * 1 FETCH (FLAGS (\Seen) INTERNALDATE "18-Jun-2005 05:00:02 +0200" RFC822.SIZE 1773 ENVELOPE ("Sat, 18 Jun 2005 05:00:01 +0200 (MET DST)" "Waarschuwing: uw inbox overschrijdt 80% van de groottelimiet (18-06-2005)" (("Super-User" NIL "helpdesk" "phil.uu.nl")) (("Super-User" NIL "helpdesk" "phil.uu.nl")) (("Super-User" NIL "helpdesk" "phil.uu.nl")) ((NIL NIL "js" "phil.uu.nl")) NIL NIL NIL "<20050618030001.B5F3952048(a)goedel.admin.phil.uu.nl>") BODY ("text" "plain" ("charset" "us-ascii") NIL NIL "7bit" 1082 25)) x OK Fetch completed. x fetch 1 body[text] * 1 FETCH (BODY[TEXT] {1082} Beste Jeroen Scheerder, [...] Met vriendelijke groet, het systeembeheer. ) x OK Fetch completed. x list * * * LIST (\Noselect \HasChildren) "/" "Archive/" [...] * LIST (\Unmarked) "/" "INBOX" x OK List completed. ---- Snip ---- I'm at a loss here, and no amount of logging or sniffing with tcpdump has revealed anything interesting so far. Does anyone else see these "signal 10" aborts? Is there any way in which I can force a coredump (in case it's *really* a bus error)? Regards, Jeroen.

1 0

Re: [Dovecot] mysql
by John Peacock 13 Jul '05

13 Jul '05

Peter Evans wrote: > Because you might, just possibly want performance that > doesn't resemble mollasses in midwinter? > Optionally, you might even want something where the response > time is deterministic. I think you need to take your biases and go someplace else. If you don't like MySQL because of some personal bias, then don't use it. Anyone halfway competent can build Dovecot themselves and not rely on some third-party RPM's that have dependencies. This is a discussion list for Dovecot. Please try and stay on topic... John -- John Peacock Director of Information Research and Technology Rowman & Littlefield Publishing Group 4720 Boston Way Lanham, MD 20706 301-459-3366 x.5010 fax 301-429-5747

1 0

Re: [Dovecot] mysql
by Andrew Hutchings 13 Jul '05

13 Jul '05

Peter Evans wrote: > Dominic Marks (dom(a)goodforbusiness.co.uk) wrote: > > Because you might, just possibly want performance that > doesn't resemble mollasses in midwinter? > Optionally, you might even want something where the response > time is deterministic. > > Points at the company mail system here for a prime example > of why not to use mysql. But then again, this is actually > a prime example of "it works, but we don't know how." > > P > > We use mysql here as it makes a perfect integration with the rest of our systems, we have over 6000 mail accounts (probably closer to 7000 now) on it and the mysql lookup time is pretty much instant, the load never goes above 0.5 on the systems (2x1GHz Epias on round robin with replicated databases on each) and most of that is because the POP/IMAP servers are also round robin MX servers so Exim can take a chunk out of the CPU. Regards Andrew -- Andrew Hutchings (A-Wing) - Linux Guru Netserve Consultants - http://www.domaincity.co.uk/ A-Wing Internet Services - http://www.a-wing.co.uk/ Random quote 2: "In most countries selling harmful things like drugs is punishable. Then howcome people can sell Microsoft software and go unpunished?" - Hasse Skrifvars

1 0

[Dovecot] Headers "missing" in new CVS version
by Todd Burroughs 13 Jul '05

13 Jul '05

We're experiencing an odd problem with dovecot "losing" headers. This started happening with the CVS release as of July 4 and still happens with July 12. It was working properly June 28. It does not happen using pine or thunderbird. It happens using webmail (twig). When you open the inbox, you see subject, etc. When you open a mail, all of the headers are gone. Returning to the inbox, all the headers are missing. It seems to cache this as well. After returning to the older dovecot, all of the headers are missing. Deleting the cache files fixes this and there does not seem to be any mbox corruption. It does not log any errors or crash. Todd Burroughs

2 1

[Dovecot] separate SSL certificates for pop3s and imaps
by Michael Weiser 13 Jul '05

13 Jul '05

Hi, I'm migrating a uw-imap installation to dovecot. With uw-imap I had different SSL certificates and keys for ipop3d and imapd. How can I configure dovecot to do the same with its pop3s and imaps services? Thanks in advance, -- _________________________creating IT solutions Michael Weiser science + computing ag bei Eisenbahn und Haefen Postfach 11 02 63 Hagellocher Weg 71-75 47142 Duisburg 72070 Tuebingen, Germany phone +49 203 52 26341 www.science-computing.de

2 2

[Dovecot] add inotify support to dovecot
by Johannes Berg 13 Jul '05

13 Jul '05

Hi, attached patch against test76 adds inotify support and the --with-notify=... configure option that defaults to the current check for dnotify using no special method if dnotify cannot be compiled, and can be set to none, dnotify and inotify. If it is set to dnotify or inotify, failure to compile a test program results in an error. Also, it adds | file change notification method ..... : <method> to the output at the end of configure. The only thing I don't like about this patch is the fact that I had to add a field notify_context to struct io, but I didn't see a different way to handle this. Also, the patch doesn't support the condition parameter, it simply always asks for all the relevant changes. I don't really see that it is useful for in the context of file system notifications anyway. I modeled this after ioloop-notify-dn.c with my other patch applied to it, if you don't like the other patch you'll want to "revert" that change in the new ioloop-notify-inotify.c file as well. Oh, and obviously I didn't include patches to configure and all the Makefiles, so of course you'll have to run automake. But you already knew that :) I only tested this with maildir. I did add IN_MODIFY so I think it should work with mbox too, but someone should probably verify. Have fun, johannes

2 2

[Dovecot] sorting question
by Johannes Berg 13 Jul '05

13 Jul '05

Hi, If I understand the thread sorting algorithm correctly (from draft-ietf-imapext-sort-17.txt and the code), it will sort like this (where I use numbers instead of dates with higher numbers being newer mails) 4 10 3 11 2 12 1 13 etc into all the lower levels. Thunderbird will actually sort this like this: 1 13 2 12 3 11 4 10 where threads are sorted by the newest child in them. Now, I am thinking that evolution simply uses dovecot's THREAD feature and doesn't implement anything itself, so that if I wanted to have that kind of threading, I'd have to implement it in dovecot. Would this be easy? I'm thinking that I should just treat all nodes as if they were dummy nodes in sort_root_nodes, but that only fixes the first level afaict, because later dates are not propagated up. Essentially, I think what the algorithm tb uses does is not use a nodes date as it's sorting criterion, but it's newest child, and apply this rule recursively. Does anyone else think this feature would be useful? I regularly end up almost missing mail because it is sorted at such a low position and I don't see the thread at all.. johannes

4 5

[Dovecot] Dovecot runs as ...
by Matt Juszczak 13 Jul '05

13 Jul '05

Hi all, We're using LDAP 100% for everything ... So does that mean that for the following user, I can put another user, like nobody? user = root I guess that user still has to be able to access /var/mail and such, correct?

2 1

[Dovecot] 1.0-test77
by Timo Sirainen 12 Jul '05

12 Jul '05

http://dovecot.org/ It's hot in here. Something like 25-30c for many days now. My brains don't work in that heat. So, this is still not an 1.0-alpha1. I'll put it out when I think the release will actually be fully working :) Changes since test76: - Fixes to FETCHing MIME body parts, especially with message/rfc822 attachments. We hadn't been handling this entirely correctly ever (this part of IMAP spec was pretty difficult for me to understand earlier..). This also caused Dovecot to sometimes disconnect clients fetching [n.MIME] body parts earlier, if someone had that problem. - Maildir: Several bugs fixed with APPEND/COPYing mails - mbox: Keywords weren't stored to index with APPEND - inotify patch by Johannes Berg (and possibly broken by me). Can be enabled with --with-notify=inotify parameter to configure. - SEARCH now doesn't fail if a messageset outside valid range is given to it. Some mobile IMAP client was broken because this didn't work. - Cache mail headers when saving mails to mbox. We should cache everything, but this is a start.. - And other cache file fixes/optimizations

2 3

[Dovecot] PERMANENTFLAGS bug?
by Nils Henrik Tvetene 12 Jul '05

12 Jul '05

Hi, Im new to the list, so might be a FAQ allthough I havent found it anywhere: When I try to connect to dovecot/imap from snappermail (palm), I get a IMAP protocol error. The complaint is about: OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft ) \*)] Flags permitted. As you can see, theres an extra " )" after "Draft". Any clues on how to fix/bypass this? Regards, Nils Henrik Tvetene

3 5

[Dovecot] Dovecot 1.0-stable mbox performance and disconnections
by Chris Wakelin 12 Jul '05

12 Jul '05

I've got some of our busiest users now using Dovecot instead of UW-IMAP with mbox-format mailboxes and predominantly Outlook Express as the client. Doing some perfomance monitoring (with Solaris 8 process accounting), it looks like Dovecot needing to read only 30-50% of the disk blocks needed by UW-IMAP, but I was hoping for better! What seems to happen, is that most of the connections use only a small number of blocks (due to Dovecot indexes, presumably) but occassionally a process will read lots of blocks, sometimes even more than a UW-IMAP session. Is this expected, or is something going wrong with the index updates? I have the default sync settings, I think (mbox_dirty_syncs = yes, mbox_very_dirty_syncs = no, mbox_lazy_writes = yes) My INBOX is an extreme example with ~10,000 messages and most processes reading a few hundred blocks but a couple using 20,000 or so! Also, Dovecot seems to be dropping connections, sometimes, for no good reason (putting some extra i_info lines suggests for "inactivity"). Thunderbird tends to reconnect automatically, though. It seems it may be happening at the end of an IDLE command, something like:- 4 IDLE + idling * 1005 EXISTS DONE * 1005 EXPUNGE but then the expected 4 OK Idle completed never comes. Has anybody else seen this? Best Wishes, Chris -- --+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+- Christopher Wakelin, c.d.wakelin(a)reading.ac.uk IT Services Centre, The University of Reading, Tel: +44 (0)118 378 8439 Whiteknights, Reading, RG6 2AF, UK Fax: +44 (0)118 975 3094

2 2

[Dovecot] newbie questions
by Stewart Dean 12 Jul '05

12 Jul '05

Thanks in advance for your patience and assistance. Since a system administrator's work is most successful when nobody knows you've done anything....(ugly that...you get neither raises nor equipment funding as a result), I prefer to learn from other's experiences rather than fail in the same pits. We are considering a switch from UW to Dovecot, since our users persist in using the INBOX as a file cabinet (maybe 25% use homedir folders) and we currently have, I think, .mbox INBOXes which are thus getting massively unmanageable and fragile. Machine config: Running IBM AIX 5.2/5.3 on an F80 with 4GB memory (may be upgraded to 16GB), with IBM's sendmail binary at V8.11.6p2, hand compiled procmail at 3.22, 64-bit binary from C for AIX V6.0 Some questions I couldn't find answered in the docs: 1) Crispin of UW has a formats.txt file in which he lists and evaluates the various formats. He calls the INBOX format type we use .unix (one big honking flat file). Q1: Is this what is described in the Dovecot docs mail-storages.txt file as .mbox? 2) Authentication: The DC docs don't mention using NIS/yp for authentication, that I can find. Q2: Does DC support NIS/yp authentication? I guess I could periodically do a ypcat passwd to a file and point DC at it... 3) on IBM's AIX Unix... Q3: Is there anyone out there running DC on AIX? 5.x or 4.3.3? JFS or JFS2? 4) Inbox location/format: = I will want to move from our legacy .mbox format to, I suppose, the DC default of Maildir++. = I will want to do this in groups over time, rather than all at once, so both formats will have to work = The legacy location of INBOXes has been /var/spool/mail/<userid>. The docs appear to say that Maildir format INBOXes should be in ~/Maildir. Q4:Can the INBOXes be in two location, the converted new Maildirs in ~, and the old unconverted in vsm? Or will I have to override the DC cfg'ed INBOX location to be VSM until I get them all converted and then move them all to ~/Maildir and change the DC config to that? 5) Some mention was made of procmail configuration issues Q5: Can procmail support both formats/locations, or will I have to put changes in the migrated users' procmailrc (what fun!)? Again, thanks! -- ==== Stewart Dean, Unix System Admin, Henderson Computer Resources Center of Bard College, Annandale-on-Hudson, New York 12504 sdean(a)bard.edu voice: 845-758-7475, fax: 845-758-7035

5 4