- dovecot - dovecot.org

tlsv1 alert unknown ca: SSL alert number 48
by Maurizio Caloro 30 Jan '17

30 Jan '17

Hello together Please i'am new to this list, i have already installed Postfix and Dovecot last version from Internet but i have the porblem that the mail do not arive, and with me Cert, i have read on the Dovecot site, but i don't have me found me solutions to fix this. "tlsv1 alert unknown ca: SSL alert number 48" Jan 28 22:42:44 dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=192.168.1.16, lip=192.168.1.3, TLS: SSL_read() failed: error:14094418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca: SSL alert number 48, session= # dovecot --version 2.2.27 (c0f36b0) i think that the settings about Cert are done, but if connecting with Thunderbird i will become this error "tlsv1 alert unknown ca: SSL alert number 48" Please you can point me to the right direction, so i can run this Mailserver on me RaspverryPi. Regards Mauri -- "10-ssl.conf" i have editing and Dovecot and Postfix reloaded without problems. # SSL/TLS support: yes, no, required. <doc/wiki/SSL.txt> ssl = yes ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem ssl_ca = </etc/ssl/private/cert.pem root@raspberrypi: # cat /var/log/mail.log Jan 28 22:50:08 raspberrypi postfix/smtp[1889]: 9CF1E63F53: to=<mauric(a)gmx.ch>, relay=mx01.emig.gmx.net[212.227.17.5]:25, delay=193476, delays=193476/0.03/0.17/0, dsn=4.0.0, status=deferred (host mx01.emig.gmx.net[212.227.17.5] refused to talk to me: 554-gmx.net (mxgmx109) Nemesis ESMTP Service not available 554-No SMTP service 554-IP address is black listed. 554 For explanation visit http://postmaster.gmx.com/en/error-messages?ip=151.248.162.33&c=bl) Jan 28 22:55:08 raspberrypi postfix/qmgr[940]: 7740F63E0F: from=<joe(a)caloro.ch>, size=575, nrcpt=1 (queue active) Jan 28 22:55:08 raspberrypi postfix/qmgr[940]: 98D5D63E0E: from=<joe(a)caloro.ch>, size=578, nrcpt=1 (queue active) Jan 28 22:55:08 raspberrypi postfix/qmgr[940]: 9946863E0D: from=<joe(a)caloro.ch>, size=550, nrcpt=1 (queue active) Jan 28 22:55:08 raspberrypi postfix/smtp[1926]: 7740F63E0F: host mx01.emig.gmx.net[212.227.17.5] refused to talk to me: 554-gmx.net (mxgmx113) Nemesis ESMTP Service not available 554-No SMTP service 554-IP address is black listed. 554 For explanation visit http://postmaster.gmx.com/en/error-messages?ip=151.248.162.33&c=bl Jan 28 22:55:08 raspberrypi postfix/smtp[1926]: 7740F63E0F: to=<mauric(a)gmx.ch>, relay=mx00.emig.gmx.net[212.227.15.9]:25, delay=298205, delays=298205/0.03/0.18/0, dsn=4.0.0, status=deferred (host mx00.emig.gmx.net[212.227.15.9] refused to talk to me: 554-gmx.net (mxgmx006) Nemesis ESMTP Service not available 554-No SMTP service 554-IP address is black listed. 554 For explanation visit http://postmaster.gmx.com/en/error-messages?ip=151.248.162.33&c=bl) Jan 28 22:55:38 raspberrypi postfix/smtp[1927]: connect to caloro.ch[158.181.112.49]:25: Connection timed out Jan 28 22:55:38 raspberrypi postfix/smtp[1927]: 98D5D63E0E: to=<joe(a)caloro.ch>, relay=none, delay=298271, delays=298241/0.03/30/0, dsn=4.4.1, status=deferred (connect to caloro.ch[158.181.112.49]:25: Connection timed out) Jan 28 22:55:38 raspberrypi postfix/smtp[1928]: connect to caloro.ch[158.181.112.49]:25: Connection timed out Jan 28 22:55:38 raspberrypi postfix/smtp[1928]: 9946863E0D: to=<joe(a)caloro.ch>, relay=none, delay=298375, delays=298345/0.04/30/0, dsn=4.4.1, status=deferred (connect to caloro.ch[158.181.112.49]:25: Connection timed out) Jan 28 23:00:08 raspberrypi postfix/qmgr[940]: 54EA064AF4: from=<>, size=2460, nrcpt=1 (queue active) Jan 28 23:00:08 raspberrypi postfix/qmgr[940]: 1D29F5F03D: from=<>, size=2471, nrcpt=1 (queue active) Jan 28 23:00:08 raspberrypi postfix/qmgr[940]: 86D2B63F5A: from=<joe(a)caloro.ch>, size=581, nrcpt=1 (queue active) Jan 28 23:00:38 raspberrypi postfix/smtp[2011]: connect to caloro.ch[158.181.112.49]:25: Connection timed out Jan 28 23:00:38 raspberrypi postfix/smtp[2013]: connect to caloro.ch[158.181.112.49]:25: Connection timed out Jan 28 23:00:38 raspberrypi postfix/smtp[2012]: connect to caloro.ch[158.181.112.49]:25: Connection timed out Jan 28 23:00:38 raspberrypi postfix/smtp[2011]: 54EA064AF4: to=<joe(a)caloro.ch>, relay=none, delay=4596, delays=4566/0.03/30/0, dsn=4.4.1, status=deferred (connect to caloro.ch[158.181.112.49]:25: Connection timed out) Jan 28 23:00:38 raspberrypi postfix/smtp[2013]: 86D2B63F5A: to=<joe(a)caloro.ch>, relay=none, delay=4586, delays=4556/0.04/30/0, dsn=4.4.1, status=deferred (connect to caloro.ch[158.181.112.49]:25: Connection timed out) Jan 28 23:00:38 raspberrypi postfix/smtp[2012]: 1D29F5F03D: to=<joe(a)caloro.ch>, relay=none, delay=350945, delays=350915/0.03/30/0, dsn=4.4.1, status=deferred (connect to caloro.ch[158.181.112.49]:25: Connection timed out) Jan 28 23:05:08 raspberrypi postfix/qmgr[940]: E3C3C5DA02: from=<joe(a)caloro.ch>, size=576, nrcpt=1 (queue active) Jan 28 23:05:08 raspberrypi postfix/error[2058]: E3C3C5DA02: to=<joe(a)caloro.ch>, relay=none, delay=21492, delays=21492/0.03/0/0.02, dsn=4.4.1, status=deferred (delivery temporarily suspended: connect to caloro.ch[158.181.112.49]:25: Connection timed out) Jan 28 23:10:08 raspberrypi postfix/qmgr[940]: BEB535F03F: from=<>, size=2870, nrcpt=1 (queue active) root@raspberrypi: # doveconf -N # 2.2.27 (c0f36b0): /usr/local/etc/dovecot/dovecot.conf # OS: Linux 4.4.41-v7+ armv7l Debian 8.0 auth_mechanisms = plain disable_plaintext_auth = yes listen = *, :: mail_location = mbox:~/mail:INBOX=/var/mail/%u mail_privileged_group = mail namespace { inbox = yes location = mailbox { special_use = \Drafts name = Drafts } mailbox { special_use = \Junk name = Junk } mailbox { special_use = \Sent name = Sent } mailbox { special_use = \Sent name = Sent Messages } mailbox { special_use = \Trash name = Trash } prefix = name = inbox } passdb { driver = pam name = } passdb { args = scheme=CRYPT username_format=%u /usr/local/etc/dovecot/users driver = passwd-file name = } protocols = imap pop3 service replication-notify-fifo { name = aggregator } service anvil-auth-penalty { name = anvil } service auth-worker { name = auth-worker } service { unix_listener { mode = 0666 path = /var/spool/postfix/private/auth } unix_listener { group = postfix mode = 0666 user = postfix path = auth-userdb } name = auth } service config { name = config } service dict-async { name = dict-async } service dict { name = dict } service login/proxy-notify { name = director } service dns-client { name = dns_client } service doveadm-server { name = doveadm } service imap-hibernate { name = imap-hibernate } service imap { name = imap-login } service imap-urlauth { name = imap-urlauth-login } service imap-urlauth-worker { name = imap-urlauth-worker } service token-login/imap-urlauth { name = imap-urlauth } service imap-master { name = imap } service indexer-worker { name = indexer-worker } service indexer { name = indexer } service ipc { name = ipc } service lmtp { name = lmtp } service log-errors { name = log } service pop3 { name = pop3-login } service login/pop3 { name = pop3 } service replicator-doveadm { name = replicator } service login/ssl-params { name = ssl-params } service stats-mail { name = stats } ssl = yes ssl_ca = </etc/ssl/private/cert.pem ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = # hidden, use -P to show it userdb { driver = passwd name = } userdb { args = username_format=%u /usr/local/etc/dovecot/users driver = passwd-file name = } protocol lmtp { service replication-notify-fifo { name = aggregator } service anvil-auth-penalty { name = anvil } service auth-worker { name = auth-worker } service auth-client { name = auth } service config { name = config } service dict-async { name = dict-async } service dict { name = dict } service login/proxy-notify { name = director } service dns-client { name = dns_client } service doveadm-server { name = doveadm } service imap-hibernate { name = imap-hibernate } service imap { name = imap-login } service imap-urlauth { name = imap-urlauth-login } service imap-urlauth-worker { name = imap-urlauth-worker } service token-login/imap-urlauth { name = imap-urlauth } service imap-master { name = imap } service indexer-worker { name = indexer-worker } service indexer { name = indexer } service ipc { name = ipc } service lmtp { name = lmtp } service log-errors { name = log } service pop3 { name = pop3-login } service login/pop3 { name = pop3 } service replicator-doveadm { name = replicator } service login/ssl-params { name = ssl-params } service stats-mail { name = stats } } protocol lda { service replication-notify-fifo { name = aggregator } service anvil-auth-penalty { name = anvil } service auth-worker { name = auth-worker } service auth-client { name = auth } service config { name = config } service dict-async { name = dict-async } service dict { name = dict } service login/proxy-notify { name = director } service dns-client { name = dns_client } service doveadm-server { name = doveadm } service imap-hibernate { name = imap-hibernate } service imap { name = imap-login } service imap-urlauth { name = imap-urlauth-login } service imap-urlauth-worker { name = imap-urlauth-worker } service token-login/imap-urlauth { name = imap-urlauth } service imap-master { name = imap } service indexer-worker { name = indexer-worker } service indexer { name = indexer } service ipc { name = ipc } service lmtp { name = lmtp } service log-errors { name = log } service pop3 { name = pop3-login } service login/pop3 { name = pop3 } service replicator-doveadm { name = replicator } service login/ssl-params { name = ssl-params } service stats-mail { name = stats } } protocol imap { service replication-notify-fifo { name = aggregator } service anvil-auth-penalty { name = anvil } service auth-worker { name = auth-worker } service auth-client { name = auth } service config { name = config } service dict-async { name = dict-async } service dict { name = dict } service login/proxy-notify { name = director } service dns-client { name = dns_client } service doveadm-server { name = doveadm } service imap-hibernate { name = imap-hibernate } service imap { name = imap-login } service imap-urlauth { name = imap-urlauth-login } service imap-urlauth-worker { name = imap-urlauth-worker } service token-login/imap-urlauth { name = imap-urlauth } service imap-master { name = imap } service indexer-worker { name = indexer-worker } service indexer { name = indexer } service ipc { name = ipc } service lmtp { name = lmtp } service log-errors { name = log } service pop3 { name = pop3-login } service login/pop3 { name = pop3 } service replicator-doveadm { name = replicator } service login/ssl-params { name = ssl-params } service stats-mail { name = stats } } protocol pop3 { service replication-notify-fifo { name = aggregator } service anvil-auth-penalty { name = anvil } service auth-worker { name = auth-worker } service auth-client { name = auth } service config { name = config } service dict-async { name = dict-async } service dict { name = dict } service login/proxy-notify { name = director } service dns-client { name = dns_client } service doveadm-server { name = doveadm } service imap-hibernate { name = imap-hibernate } service imap { name = imap-login } service imap-urlauth { name = imap-urlauth-login } service imap-urlauth-worker { name = imap-urlauth-worker } service token-login/imap-urlauth { name = imap-urlauth } service imap-master { name = imap } service indexer-worker { name = indexer-worker } service indexer { name = indexer } service ipc { name = ipc } service lmtp { name = lmtp } service log-errors { name = log } service pop3 { name = pop3-login } service login/pop3 { name = pop3 } service replicator-doveadm { name = replicator } service login/ssl-params { name = ssl-params } service stats-mail { name = stats } }

3 2

FTS: how to remove from Solr index deleted mailbox?
by Alessio Cecchi 30 Jan '17

30 Jan '17

Hi, I'm running Dovecot with FTS and Apache Solr as backend. What is the command or the query to remove from Solr a deleted user/mailbox? Thanks -- Alessio Cecchi Postmaster AT http://www.qboxmail.it http://www.linkedin.com/in/alessice

2 1

Sharing between domains?
by dovecot＠avv.solutions 30 Jan '17

30 Jan '17

Hello Community, I am facing the following question: how is it possible to share malboxes between domains? Example: - 2 domains present on the same dovecot: domA and domB - userA@domA - userB@domB userA@domA wants to share his mailbox to userB@domB (again same server)? Thank you for your help. Greetz

2 2

Crash in 2.2.27 while moving a mail
by Sven Strickroth 29 Jan '17

29 Jan '17

Hi, I just noticed a crash in Dovecot (2.2.27) on Debian with the Debian version 1:2.2.27-2~bpo8+1: Jan 28 07:50:42 srv1 dovecot: imap(yyy(a)xxx.de): Panic: file mail-storage.c: line 2170 (mailbox_save_context_reset): assertion failed: (ctx->copying_via_save) Jan 28 07:50:42 srv1 dovecot: imap(yyy(a)xxx.de): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x97d8e) [0x7f3e7fab8d8e] -> /usr/lib/dovecot/libdovecot.so.0(+0x97e7c) [0x7f3e7fab8e7c] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f3e7fa4f52e] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x421b8) [0x7f3e7fd881b8] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_save_cancel+0x76) [0x7f3e7fd8b4b6] -> /usr/lib/dovecot/modules/lib01_acl_plugin.so(+0xe1b2) [0x7f3e7f2691b2] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x45913) [0x7f3e7fd8b913] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_move+0x29) [0x7f3e7fd8bb29] -> dovecot/imap [yyy(a)xxx.de 8x.1xx.1x.xx8 UID MOVE](+0xf955) [0x562ff2225955] -> dovecot/imap [yyy(a)xxx.de 8x.1xx.1x.xx8 UID MOVE](command_exec+0xa6) [0x562ff2232296] -> dovecot/imap [yyy(a)xxx.de 8x.1xx.1x.xx8 UID MOVE](+0x1a602) [0x562ff2230602] -> dovecot/imap [yyy(a)xxx.de 8x.1xx.1x.xx8 UID MOVE](+0x1a690) [0x562ff2230690] -> dovecot/imap [yyy(a)xxx.de 8x.1xx.1x.xx8 UID MOVE](client_handle_input+0x195) [0x562ff2230a55] -> dovecot/imap [yyy(a)xxx.de 8x.1xx.1x.xx8 UID MOVE](client_input+0x85) [0x562ff2230f65] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x52) [0x7f3e7facd8f2] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0x10a) [0x7f3e7facef4a] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x3c) [0x7f3e7facd98c] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f3e7facdb38] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f3e7fa55a03] -> dovecot/imap [yyy(a)xxx.de 8x.1xx.1x.xx8 UID MOVE](main+0x322) [0x562ff2223c32] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf5) [0x7f3e7f697b45] -> dovecot/imap [yyy(a)xxx.de 8x.1xx.1x.xx8 UID MOVE](+0xddaf) [0x562ff2223daf] Jan 28 07:50:42 srv1 dovecot: imap(yyy(a)xxx.de): Fatal: master: service(imap): child 5772 killed with signal 6 (core dumps disabled) I'm using mdbox and I assume the user wanted to move a mail from the personal mailstore to a shared mailbox (shared by another user). doveconf -n: # 2.2.27 (c0f36b0): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.16 (fed8554) # OS: Linux 4.8.0-0.bpo.2-amd64 x86_64 Debian 8.7 auth_mechanisms = plain login auth_verbose = yes default_client_limit = 2100 default_process_limit = 350 default_vsz_limit = 512 M dict { acldict = mysql:/etc/dovecot/dovecot-dict-user_shares.conf quotadict = mysql:/etc/dovecot/dovecot-dict-quota.conf } first_valid_uid = 999 imap_client_workarounds = delay-newmail last_valid_uid = 999 lmtp_save_to_detail_mailbox = yes log_timestamp = "%Y-%m-%d %H:%M:%S " mail_gid = 8 mail_location = mdbox:~/mdbox mail_plugins = quota zlib acl mail_privileged_group = mail mail_shared_explicit_inbox = yes mail_uid = 999 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto envelope encoded-character subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext imapflags namespace { list = children location = mdbox:%%h/mdbox prefix = shared/%%u/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes list = yes location = mailbox Archiv { special_use = \Archive } mailbox Archive { special_use = \Archive } mailbox Archives { special_use = \Archive } mailbox Deleted { special_use = \Trash } mailbox "Deleted Items" { special_use = \Trash } mailbox "Deleted Messages" { special_use = \Trash } mailbox Drafts { special_use = \Drafts } mailbox Entw&APw-rfe { special_use = \Drafts } mailbox Entwurf { special_use = \Drafts } mailbox Gel&APY-scht { special_use = \Trash } mailbox "Gel&APY-schte Elemente" { special_use = \Trash } mailbox "Gel&APY-schte Objekte" { special_use = \Trash } mailbox Gesendet { special_use = \Sent } mailbox "Gesendete Elemente" { special_use = \Sent } mailbox "Gesendete Objekte" { special_use = \Sent } mailbox Junk { special_use = \Junk } mailbox Papierkorb { special_use = \Trash } mailbox SPAM { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Items" { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / subscriptions = yes type = private } passdb { args = /etc/dovecot/sql.conf driver = sql } plugin { acl = vfile acl_anyone = allow acl_shared_dict = proxy::acldict quota = dict:user::proxy::quotadict quota_exceeded_message = </etc/dovecot/overquota.txt quota_grace = 0 quota_rule2 = Trash:bytes=+100M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u recipient_delimiter = + sieve = file:~/sieve;active=~/.dovecot.sieve sieve_extensions = -vacation +imapflags -reject zlib_save = gz } pop3_client_workarounds = outlook-no-nuls postmaster_address = postmaster(a)xxx.de protocols = " imap lmtp sieve pop3" service auth { unix_listener /var/spool/postfix/private/auth { group = mail mode = 0660 user = postfix } unix_listener auth-userdb { group = mail mode = 0660 user = vmail } } service dict { unix_listener dict { group = mail mode = 0660 user = vmail } } service imap-login { inet_listener imap { address = 127.0.0.1 } } service pop3-login { inet_listener pop3 { port = 0 } } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { user = vmail } user = vmail } ssl_cert = </etc/ssl/certs/srv1.xxx.de.pem ssl_dh_parameters_length = 2048 ssl_key = # hidden, use -P to show it ssl_options = no_compression ssl_protocols = !SSLv2 !SSLv3 ssl_require_crl = no userdb { driver = prefetch } userdb { args = /etc/dovecot/sql.conf driver = sql } verbose_proctitle = yes protocol lmtp { mail_plugins = quota zlib acl sieve } protocol imap { mail_max_userip_connections = 25 mail_plugins = quota zlib acl imap_quota imap_acl imap_zlib } Please let me know if you need more information. -- Best regards, Sven Strickroth PGP key id F5A9D4C4 @ any key-server

1 0

could not receive mails from dovecot pop3
by baskar anand 27 Jan '17

27 Jan '17

Hi Greetings. I have windows server2012R2  and installed Hypervisor  I have installed Ubuntu 16.04 server edition in Virtual machine(hyper-v 2012r2)  Postfix and dovecot are running  dovecot version :2.2.22 (fe789dz)  Able to send mail is ok. mail received in /var/mail/%u  could not receive mail from client Thunderbird.  the only changed option is disable_plaintext_auth = no  Never touched any other option. Ubuntu server ip : 192.168.1.250  (firewall in inactive)client ip : 192.168.1.1 (thunderbird is running in widows server (ip:192.168.1.1)let know how to save the output of dovecot -n from Ubuntu server machineThunder bird settings are: Thankyou.Baskaranand

2 1

Re: dsync dovecot / Failed connection refused
by Thierry 26 Jan '17

26 Jan '17

Hi, Means that the Dovecot (server1) doesn't "communicate" with the Dovecot (server2) ... They both are on the same subnet ... ... Le jeudi 26 janvier 2017 à 20:07:58, vous écriviez : > This means for me, the rule has never touched any packages. > On 01/26/2017 07:02 PM, Thierry wrote: >> 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:4711 -- Cordialement, Thierry e-mail : lenaigst(a)maelenn.org

1 0

dsync dovecot / Failed connection refused
by Thierry 26 Jan '17

26 Jan '17

Dear all, I am using VMWare and I have cloned my emails server. Now I do have two identicals servers, both running the same version of dovecot (2.2.13) and imap. Let's call them: server1.domain.ltd and server2.domain.ltd. I would like to sync both server using dsync. Dovecot is working well except concerning the sync. dsync config server1.domain.ltd # Enable the replication plugin globally mail_plugins = $mail_plugins notify replication # The mail processes need to have access to the replication-notify fifo and socket. service aggregator { fifo_listener replication-notify-fifo { user = vmail mode = 0666 } unix_listener replication-notify { user = vmail mode = 0666 } } # Enable doveadm replicator commands service replicator { unix_listener replicator-doveadm { mode = 0666 } } # Create a listener for doveadm-server service doveadm { user = vmail inet_listener { port = 12345 } } # configure how many dsyncs can be run in parallel (10 by default) replication_max_conns = 10 # tell doveadm client to use this port by default doveadm_port = 4711 #Both the client and the server also need to have a shared secret doveadm_password = {SHA512-CRYPT}$6$rou.................... # use tcp:hostname as the dsync target plugin { #mail_replica = tcp:server2.domain.ltd # use doveadm_port mail_replica = tcp:server2.domain.ltd:12345 # use port 12345 explicitly } service config { unix_listener config { user = vmail } } *************************************************************************************** dsync config server2.domain.ltd # Enable the replication plugin globally mail_plugins = $mail_plugins notify replication # The mail processes need to have access to the replication-notify fifo and socket. service aggregator { fifo_listener replication-notify-fifo { user = vmail mode = 0666 } unix_listener replication-notify { user = vmail mode = 0666 } } # Enable doveadm replicator commands service replicator { unix_listener replicator-doveadm { mode = 0666 } } # Create a listener for doveadm-server service doveadm { user = vmail inet_listener { port = 12345 } } # configure how many dsyncs can be run in parallel (10 by default) replication_max_conns = 10 # tell doveadm client to use this port by default doveadm_port = 4711 #Both the client and the server also need to have a shared secret doveadm_password = {SHA512-CRYPT}$6$ro............. # use tcp:hostname as the dsync target plugin { #mail_replica = tcp:server1.domain.ltd # use doveadm_port mail_replica = tcp:server1.domain.ltd:12345 # use port 12345 explicitly } service config { unix_listener config { user = vmail } } To test both port I have open on my both servers port 12345 and 4711 : Iptables server1: ACCEPT tcp -- anywhere anywhere tcp dpt:4711 ACCEPT tcp -- anywhere anywhere tcp dpt:12345 Iptables server2: ACCEPT tcp -- anywhere anywhere tcp dpt:4711 ACCEPT tcp -- anywhere anywhere tcp dpt:12345 doveadm replicator status '*' username priority fast sync full sync failed user1(a)domain.ltd none 00:01:21 11:25:40 y user3(a)domain.ltd none 07:31:16 11:25:41 - user2(a)domain.ltd none 00:01:21 11:25:40 y user4(a)domain.ltd none 11:25:41 11:25:41 - user5(a)domain.ltd none 02:17:03 11:25:41 - user6(a)domain.ltd none 11:25:40 11:25:40 - user4(a)domain.ltd none 00:00:51 11:25:40 y When doing, from server1: "doveadm sync -u user1(a)domain.ltd remote:server2.domain.ltd" doveadm(user1(a)domain.ltd): Error: userdb lookup: connect(/var/run/dovecot/auth-userdb) failed: Connection refused doveadm(user1(a)domain.ltd): Fatal: /var/run/dovecot/auth-userdb: passdb lookup failed (to see if user is proxied, because doveadm_port is set) dsync-local(user1(a)domain.ltd): Error: read(server2.domain.ltd) failed: EOF (version not received) Thx for your help. -- Cordialement, Thierry e-mail : lenaigst(a)maelenn.org PGP Key: 0xB7E3B9CD

2 6

Benchmarking auth
by micah anderson 25 Jan '17

25 Jan '17

Hello, I'm attempting to use imaptest to test auths/sec on my imap server, to simulate the number I'm getting now on a new server. Based on my readings of dovecot stats outputs, my current machine is doing somewhere between 11.6 and 196 logins/sec at its busiest, and I want to make sure the new server can handle that amount. With imaptest I attempt to simulate this by just simulating login/logout speed, but I'm not sure I understand the results and where things are being blocked. For testing purposes, I set: mail_max_userip_connections = 6000 mail_max_userip_connections = 6000 auth_worker_max_count = 240 If you have some additional suggestions for what I can also tweak here to improve this, I would like to know. I then ran imaptest with: imaptest clients=196 user=test pass=testpw host=127.0.0.1 port=14300 - select=0 seed=123 secs=300 It doesn't seem like I can simulate *only* authentications/logins. I have to pair them with logouts. It makes me wonder how I can simulate the amount of load on my current live system on this system. How do I read the output? I don't really understand what is being shown here: Logi Logo 100% 100% 0 0 100/100 [51%] does this mean that it tried 100 logins and 100 logouts and 51% succeeded? What are the first two columns? 7 7 104/121 [61%] 6 6 131/139 [70%] 3 3 137/148 (84 stalled >3s) [75%] 84 stalled for more than 3 seconds, how does this relate to the other values presented? 5 5 155/163 (79 stalled >3s) [83%] 1 1 166/166 (107 stalled >3s) [84%] 2 2 168/172 (128 stalled >3s) [87%] 6 5 179/190 (140 stalled >3s) [96%] 22 22 182/196 (136 stalled >3s) 4 3 195/196 (133 stalled >3s) 5845 129 ms/cmd avg I really wonder if these first two columns are ms/cmds? It then continues: Logi Logo 100% 100% 10 11 195/196 (131 stalled >3s) 7 8 194/196 (150 stalled >3s) 3 3 194/196 (171 stalled >3s) 10 9 192/196 (166 stalled >3s) 22 22 182/196 (156 stalled >3s) 8 9 193/196 (153 stalled >3s) - 2 stalled for 16 secs in command: 1 LOGIN "test" "testpw" - 7 stalled for 16 secs in command: 1 LOGIN "test" "testpw" - 8 stalled for 16 secs in command: 1 LOGIN "test" "testpw" - 9 stalled for 16 secs in command: 1 LOGIN "test" "testpw" - 11 stalled for 16 secs in command: 1 LOGIN "test" "testpw" - 12 stalled for 16 secs in command: 1 LOGIN "test" "testpw" - 14 stalled for 16 secs in command: 1 LOGIN "test" "testpw" - 22 stalled for 16 secs in command: 1 LOGIN "test" "testpw" - 25 stalled for 16 secs in command: 1 LOGIN "test" "testpw" ... it starts to build up like this, until I hit control-c twice: - 100 stalled for 17 secs in command: 1 LOGIN "test" "testpw" ^CInfo: Received second SIGINT - stopping immediately 11347 118 ms/cmd avg Totals: Logi Logo 100% 100% 130 134 What are these totals? Thanks! micah

1 0

Apparent Maildir permission issue
by Mark Foley 25 Jan '17

25 Jan '17

I've just upgraded from Slackware 14.1 to 14.2. I've not done anything with dovecot -- it's the same version that was running before the upgrade. However, now I'm getting a permission error: /var/log/maillog: Jan 16 13:09:44 mail dovecot: imap(mark): Error: opendir(/home/HPRS/mark/Maildir) failed: Permission denied (euid=3000026(HPRS\mark) egid=100(users) missing +r perm: /home/HPRS/mark/Maildir, conflicting dir uid=10001(HPRS\mark)) Jan 16 13:09:44 mail last message repeated 4 times Jan 16 13:09:44 mail dovecot: imap(mark): Error: stat(/home/HPRS/mark/Maildir/.Trash) failed: Permission denied (euid=3000026(HPRS\mark) egid=100(users) missing +x perm: /home/HPRS/mark/Maildir, conflicting dir uid=10001(HPRS\mark)) Jan 16 13:09:44 mail dovecot: imap(mark): Error: stat(/home/HPRS/mark/Maildir/tmp) failed: Permission denied (euid=3000026(HPRS\mark) egid=100(users) missing +x perm: /home/HPRS/mark/Maildir, conflicting dir uid=10001(HPRS\mark)) Jan 16 13:09:44 mail dovecot: imap(mark): Error: opendir(/home/HPRS/mark/Maildir) failed: Permission denied (euid=3000026(HPRS\mark) egid=100(users) missing +r perm: /home/HPRS/mark/Maildir, conflicting dir uid=10001(HPRS\mark)) Jan 16 13:09:45 mail last message repeated 11 times Permission on that folder are: $ ls -ld /home/HPRS/mark/Maildir drwx------ 17 HPRS\mark domusers 4096 Dec 7 23:07 /home/HPRS/mark/Maildir/ Permissions are unchanged since before the backup. What do I do to fix this? THX --Mark

5 9

Timing information for passdb/userdb lookups
by Marcus Rückert 25 Jan '17

25 Jan '17

Hi, it would be nice to have an option to enable logging for timings without having to go with auth_verbose/auth_debug. If you try to track down if a slowdown for logging in comes from e.g. running out of login workers or if your auth backend is slow it would really help to get just a one line message per userdb/passdb with the timing for this lookup. something like: imap-login(<username>): userdb ldap lookup time 0.4s imap-login(<username>): passdb ldap lookup time 0.2s or even merging into one: imap-login(<username>): userdb ldap lookup time 0.4s passdb ldap lookup time 0.2s darix -- openSUSE - SUSE Linux is my linux openSUSE is good for you www.opensuse.org

1 0

Clamping down on mailbox sizes...
by SH Development 25 Jan '17

25 Jan '17

I don’t want to do this for all users….but… I have a few users who insist that they use their mailboxes regularly and don’t want it cancelled. Fine. But they won’t clean them out either. What steps would you all recommend for setting quotas on some users but not others? Specifically starting out with identifying WHICH accounts have excessive amounts of crap in them, by age, then sending them a notice stating they are going to get limited, then deleting mail older than x number of days if they don’t do it themselves by a certain time frame... Thoughts? Jeff

4 4

Re: Log authentication attempts
by Joseph Tam 25 Jan '17

25 Jan '17

On 24.01.2017 00:06, rej ex wrote: > Because we are building some monitoring application, we will need to > record all failed and successful login attempts. We need to record > remote IP, entered password in plain text, and if possible whether auth > request is for SMTP or IMAP session. SMTP? Wouldn't that be handled by your MTA, not Dovecot? AKi Tuomi wrote: > Since 2.2.27 we've had auth policy server support which can do this > properly. As I read the docs, the auth policy server would only get the hashed password, and wouldn't be able to record the plaintext password. Maybe use the checkpassword hook? http://wiki.dovecot.org/AuthDatabase/CheckPassword Joseph Tam <jtam.home(a)gmail.com>

2 1

Quota count does not work with lock_method=dotlock
by mkliewe＠gmx.de 24 Jan '17

24 Jan '17

Hello, dovecot crashes when I switch the quota tracking from dict to count. The following is working since years: quota = dict:User quota::proxy::quota I'm using a mysql quota dictionary. Now I want to switch to the new "quota count" + "quota clone" combination. I'm loading the "quota_clone" plugin, and: #quota = dict:User quota::proxy::quota quota = count:User quota quota_vsizes = yes quota_clone_dict = proxy::quota It works on a maschine where I'm using NFS with lock_method=fcntl. It's crashing on another maschine where I'm using NFS with lock_method=dotlock. See below. Sadly I have to use dotlock, because of the NFS server. It looks like quota count does not (yet) work with dotlock? Michael Jan 17 18:46:04 XXXX dovecot: imap-login: Login: user=<XXXX>, method=PLAIN, rip=10.0.XX.XX, lip=10.0.XX.XX, mpid=19123, secured, session=<XXXX> Jan 17 18:46:04 XXXX dovecot: imap(XXXX): Panic: file file-lock.c: line 285: unreached Jan 17 18:46:04 XXXX dovecot: imap(XXXX): Error: Raw backtrace: /usr/local/lib/dovecot/libdovecot.so.0(+0x93ea2) [0x7f33f7812ea2] -> /usr/local/lib/dovecot/libdovecot.so.0(+0x93f8d) [0x7f33f7812f8d] -> /usr/local/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f33f77ac7c1] -> /usr/local/lib/dovecot/libdovecot.so.0(+0x98810) [0x7f33f7817810] -> /usr/local/lib/dovecot/libdovecot.so.0(file_wait_lock_error+0x26) [0x7f33f7817be6] -> /usr/local/lib/dovecot/libdovecot.so.0(file_try_lock_error+0x11) [0x7f33f7817c61] -> /usr/local/lib/dovecot/libdovecot.so.0(file_create_locked+0x17d) [0x7f33f7814d1d] -> /usr/local/lib/dovecot/libdovecot-storage.so.0(+0xb25f3) [0x7f33f7b4d5f3] -> /usr/local/lib/dovecot/libdovecot-storage.so.0(index_mailbox_get_virtual_size+0x4c) [0x7f33f7b4d91c] -> /usr/local/lib/dovecot/libdovecot-storage.so.0(index_mailbox_get_metadata+0x1ab) [0x7f33f7b5510b] -> /usr/local/lib/dovecot/libdovecot-storage.so.0(+0x5e357) [0x7f33f7af9357] -> /usr/local/lib/dovecot/libdovecot-storage.so.0(+0xa15ac) [0x7f33f7b3c5ac] -> /usr/local/lib/dovecot/libdovecot-storage.so.0(mailbox_get_metadata+0x60) [0x7f33f7ae0d80] -> /usr/local/lib/dovecot/lib10_quota_plugin.so(quota_count+0xfe) [0x7f33f6fa6bce] -> /usr/local/lib/dovecot/lib10_quota_plugin.so(+0x7d3e) [0x7f33f6fa6d3e] -> /usr/local/lib/dovecot/lib10_quota_plugin.so(quota_get_resource+0x78) [0x7f33f6fa5578] -> /usr/local/lib/dovecot/lib10_quota_plugin.so(+0x68b4) [0x7f33f6fa58b4] -> /usr/local/lib/dovecot/lib10_quota_plugin.so(quota_over_flag_check_startup+0x78) [0x7f33f6fa63f8] -> /usr/local/lib/dovecot/libdovecot-storage.so.0(hook_mail_namespaces_created+0x5e) [0x7f33f7ae21ae] -> /usr/local/lib/dovecot/libdovecot-storage.so.0(mail_namespaces_init_finish+0x46f) [0x7f33f7ad745f] -> /usr/local/lib/dovecot/libdovecot-storage.so.0(mail_namespaces_init+0x104) [0x7f33f7ad7674] -> /usr/local/lib/dovecot/libdovecot-storage.so.0(mail_storage_service_next+0x6c5) [0x7f33f7ae5275] -> /usr/local/lib/dovecot/libdovecot-storage.so.0(mail_storage_service_lookup_next+0x4c) [0x7f33f7ae55dc] -> dovecot/imap(client_create_from_input+0x46) [0x425476] -> dovecot/imap() [0x42567f] -> /usr/local/lib/dovecot/libdovecot.so.0(+0x316d3) [0x7f33f77b06d3] -> /usr/local/lib/dovecot/libdovecot.so.0(+0x319bd) [0x7f33f77b09bd] -> /usr/local/lib/dovecot/libdovecot.so.0(+0x3235a) [0x7f33f77b135a] Jan 17 18:46:04 zzz-dovecot01 dovecot: imap(XXXX): Fatal: master: service(imap): child 19123 killed with signal 6 (core dumped)

3 5

Log authentication attempts
by rej ex 24 Jan '17

24 Jan '17

Hi everyone, We are running Dovecot 2.2.9 as a primary IMAP server. Also we use Dovecot SASL for SMTP authentication. Because we are building some monitoring application, we will need to record all failed and successful login attempts. We need to record remote IP, entered password in plain text, and if possible whether auth request is for SMTP or IMAP session. I checked http://wiki.dovecot.org/PostLoginScripting and noticed that post-login scripts are executed only after result_success, but not after result_failure (password mismatch). Also I read http://wiki.dovecot.org/PasswordDatabase where I saw that since version 2.2.10 it is possible to control what happens after passdb check, but allowed result values don't include executing custom script. Does anyone know a way to call external binary / script, or at least save a record in the database after login attempt without reading the log files? P.S. there is also a special case. When someone logs in from webmail, remote IP is set to webmail's server. In this case, we will log the attempt from the webmail itself, because it has the correct remote IP. Robin Wood

2 1

Ox Dovecot - dovecot.fi - dovecot-ee repo access
by Raymond Sellars 23 Jan '17

23 Jan '17

Hi My question is a little off topic but hoping the community has some insight or advise. Has anyone had success in contacting OX dovecot. We previous purchased Dovecot Pro and had access to the dovecot-ee (https://yum.dovecot.fi) repository. Credentials are no longer valid and all attempts (over the months) to reach Ox gain no response. Wondering if others are having Pro access issues or have managed to reach their info/sales team (info(a)dovecot.fi<mailto:info@dovecot.fi>?). Any recommendations on alternatives for commercial support? Primarily active security patching/advisement rather than polling the open source release stream. Thanks Raymond

3 2

Re: Segfault on LIST Command
by Thorsten Hater 23 Jan '17

23 Jan '17

Hi, I did added the default location and stripped down my config to a very basic level, dropping all plugins and database queries, see below. The segfault still appears in the same location. As I have build from source, I wonder whether you can reproduce the problem? Thorsten $ doveconf -n # 2.2.26.0 (23d1de6): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.16 (1dc4c73) # OS: Linux 3.18.16-intel-vm-64bit x86_64 Debian 8.6 auth_debug = yes auth_debug_passwords = yes auth_socket_path = /usr/local/var/run/dovecot/auth-userdb auth_verbose = yes base_dir = /usr/local/var/run/dovecot/ default_internal_user = pop first_valid_uid = 48 import_environment = TZ DEBUG=1 last_valid_uid = 48 login_greeting = Dovecot ready. login_trusted_networks = **** mail_debug = yes mail_gid = pop mail_location = maildir:~/Maildir mail_plugin_dir = /usr/local/lib/dovecot/ mail_uid = pop managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace inbox { inbox = yes list = children location = maildir:~/Maildir prefix = INBOX. separator = . subscriptions = yes type = private } passdb { args = nopassword=yes driver = static } protocols = imap pop3 lmtp imap pop3 ssl = no userdb { args = home=**** uid=pop gid=pop quota_rule=*:bytes=1000M driver = static } verbose_proctitle = yes protocol lda { auth_socket_path = /usr/local/var/run/dovecot/auth-userdb } On Mon, Jan 23, 2017 at 10:01 AM, Thorsten Hater <thorsten.hater(a)gmail.com> wrote: > Hi, > > thanks for picking this up. The location is pulled from the database, but > is uniform > for all users, so I could set it to maildir:~/Maildir globally. Assuming > ~ is expanded > later on with userdb data. So, no, there is no special intention behind > this. > > Thorsten > > On Mon, Jan 23, 2017 at 9:37 AM, Aki Tuomi <aki.tuomi(a)dovecot.fi> wrote: > >> >> >> On 19.01.2017 15:56, Thorsten Hater wrote: >> > The Problem arises due to a NULL deref in mail_namespaces.c line 601. >> > Backtrace below >> > >> > x LIST "" "" >> > >> > Program received signal SIGSEGV, Segmentation fault. >> > mail_namespaces_get_root_sep (namespaces=0x0) at mail-namespace.c:601 >> > 601 while ((namespaces->flags & NAMESPACE_FLAG_LIST_PREFIX) == 0) >> > (gdb) bt >> > #0 mail_namespaces_get_root_sep (namespaces=0x0) at >> mail-namespace.c:601 >> > #1 0x000000000041164c in cmd_list_ref_root (ref=0x65b060 "", >> > client=0x65a590) at cmd-list.c:324 >> > #2 cmd_list_full (cmd=0x65aee0, lsub=<optimized out>) at cmd-list.c:461 >> > #3 0x0000000000419825 in command_exec (cmd=cmd@entry=0x65aee0) at >> > imap-commands.c:181 >> > #4 0x0000000000417de2 in client_command_input (cmd=cmd@entry=0x65aee0) >> at >> > imap-client.c:988 >> > #5 0x0000000000417e70 in client_command_input (cmd=0x65aee0) at >> > imap-client.c:1048 >> > #6 0x00000000004181e5 in client_handle_next_command >> > (remove_io_r=<synthetic pointer>, client=0x65a590) at imap-client.c:1090 >> > #7 client_handle_input (client=0x65a590) at imap-client.c:1102 >> > #8 0x0000000000418692 in client_input (client=0x65a590) at >> > imap-client.c:1149 >> > #9 0x00007ffff76297ac in io_loop_call_io (io=0x652aa0) at ioloop.c:589 >> > #10 0x00007ffff762ab4a in io_loop_handler_run_internal >> > (ioloop=ioloop@entry=0x63e7f0) >> > at ioloop-epoll.c:222 >> > #11 0x00007ffff7629835 in io_loop_handler_run (ioloop=ioloop@entry >> =0x63e7f0) >> > at ioloop.c:637 >> > #12 0x00007ffff76299d8 in io_loop_run (ioloop=0x63e7f0) at ioloop.c:613 >> > #13 0x00007ffff75b9823 in master_service_run (service=0x63e690, >> > callback=callback@entry=0x423d40 <client_connected>) at >> master-service.c:641 >> > #14 0x000000000040c567 in main (argc=3, argv=0x63e390) at main.c:460 >> > >> > On Thu, Jan 19, 2017 at 1:05 PM, Thorsten Hater < >> thorsten.hater(a)gmail.com> >> > wrote: >> > >> >> Dear all, >> >> >> >> I experience SegFaults in the imap binary on a LIST "" "" command, >> >> as sent by Claws mail. Using LIST "" "INBOX" or similar is fine. >> >> Here is an example telnet session >> >> >> >> $ telnet 127.0.0.1 143 >> >> Trying 127.0.0.1... >> >> Connected to 127.0.0.1. >> >> Escape character is '^]'. >> >> * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE >> IDLE >> >> AUTH=PLAIN] Dovecot ready. >> >> 01 LOGIN **** **** >> >> 01 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE >> >> IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS >> THREAD=ORDEREDSUBJECT >> >> MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS >> >> LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES >> WITHIN >> >> CONTEXT=SEARCH LIST-STATUS BINARY MOVE SPECIAL-USE QUOTA] Logged in >> >> 02 LIST "" "" >> >> Connection closed by foreign host. >> >> >> >> In the log file >> >> >> >> dovecot[8375]: imap(***): Fatal: master: service(imap): child 15803 >> killed >> >> with signal 11 (core dumps disabled) >> >> >> >> Please find the config below. >> >> >> >> Best regards, >> >> Thorsten >> >> >> >> $ doveconf -n >> >> # 2.2.26.0 (23d1de6): /etc/dovecot/dovecot.conf >> >> # Pigeonhole version 0.4.16 (1dc4c73) >> >> # OS: Linux 3.16.0-4-amd64 x86_64 Debian 8.6 >> >> auth_debug = yes >> >> auth_debug_passwords = yes >> >> auth_socket_path = /var/run/dovecot/auth-userdb >> >> auth_verbose = yes >> >> base_dir = /var/run/dovecot/ >> >> default_internal_user = pop >> >> first_valid_uid = 48 >> >> import_environment = TZ DEBUG=1 >> >> last_valid_uid = 48 >> >> login_trusted_networks = **** >> >> mail_debug = yes >> >> mail_gid = pop >> >> mail_plugins = " mail_log notify zlib quota" >> >> mail_uid = pop >> >> managesieve_notify_capability = mailto >> >> managesieve_sieve_capability = fileinto reject envelope >> encoded-character >> >> vacation subaddress comparator-i;ascii-numeric relational regex >> imap4flags >> >> copy include variables body enotify environment mailbox date index >> ihave >> >> duplicate mime foreverypart extracttext >> >> namespace inbox { >> >> inbox = yes >> >> list = children >> >> location = >> >> mailbox Drafts { >> >> auto = no >> >> special_use = \Drafts >> >> } >> >> mailbox Sent { >> >> auto = no >> >> special_use = \Sent >> >> } >> >> mailbox Trash { >> >> auto = no >> >> autoexpunge = 30 days >> >> special_use = \Trash >> >> } >> >> mailbox drafts { >> >> auto = no >> >> special_use = \Drafts >> >> } >> >> mailbox sent { >> >> auto = no >> >> special_use = \Sent >> >> } >> >> mailbox spamverdacht { >> >> auto = no >> >> autoexpunge = 30 days >> >> special_use = \Junk >> >> } >> >> mailbox trash { >> >> auto = no >> >> autoexpunge = 30 days >> >> special_use = \Trash >> >> } >> >> mailbox virenverdacht { >> >> auto = no >> >> autoexpunge = 30 days >> >> special_use = \Junk >> >> } >> >> prefix = INBOX. >> >> separator = . >> >> subscriptions = yes >> >> type = private >> >> } >> >> passdb { >> >> args = nopassword=y >> >> driver = static >> >> } >> >> plugin { >> >> last_login_dict = file:~/lastlogin >> >> mail_log_events = delete undelete expunge copy mailbox_delete >> >> mailbox_rename >> >> mail_log_fields = uid box msgid size >> >> quota = maildir:User quota >> >> quota_warning = storage=80%% 80 %u %{userdb:quota_bytes} >> >> quota_warning2 = storage=90%% 90 %u %{userdb:quota_bytes} >> >> quota_warning3 = storage=95%% 95 %u %{userdb:quota_bytes} >> >> sieve = ldap:/etc/dovecot/pigeonhole-ldap.conf >> >> sieve_dir = ~/sieve >> >> sieve_plugins = sieve_storage_ldap >> >> zlib_save = gz >> >> zlib_save_level = 6 >> >> } >> >> service imap { >> >> executable = imap postlogin >> >> } >> >> service pop3 { >> >> executable = pop3 postlogin >> >> } >> >> service postlogin { >> >> executable = script-login -d rawlog >> >> } >> >> service quota-warning { >> >> executable = script /bin/quota-warning.sh >> >> } >> >> ssl = no >> >> userdb { >> >> args = /etc/dovecot/userdb-ldap.conf >> >> driver = ldap >> >> result_failure = return-fail >> >> result_internalfail = return-fail >> >> result_success = continue-ok >> >> } >> >> userdb { >> >> default_fields = quota_bytes=42M >> >> driver = bdb_quota >> >> override_fields = quota_rule=*:bytes=%{userdb:quota_bytes} >> >> result_failure = return-fail >> >> result_internalfail = return-fail >> >> result_success = continue-ok >> >> } >> >> verbose_proctitle = yes >> >> protocol lda { >> >> auth_socket_path = /var/run/dovecot/auth-userdb >> >> mail_plugin_dir = /lib/dovecot/modules >> >> mail_plugins = " mail_log notify zlib quota sieve" >> >> } >> >> protocol imap { >> >> mail_plugins = " mail_log notify zlib quota imap_xauth last_login >> >> imap_quota" >> >> } >> >> protocol pop3 { >> >> mail_plugins = " mail_log notify zlib quota last_login" >> >> } >> >> >> >> Hi! >> >> We are looking into this crash. >> >> Are you intentionally setting inbox namespace location to empty? >> >> Aki >> > >

2 6

Doveadm backup doesn't interpret placeholders
by James Pharaoh 23 Jan '17

23 Jan '17

Hi, Dovecot version: 2.2.27 I'm using replication between two servers for high availability, but I also want to backup all users. I have a setting for the replication to work like this: plugin { mail_replica = tcp:other-dovecot } This is fine, but then I also want to do a backup to a different directory for all users, since I am having trouble with an apparent bug running dovecot on btrfs. For this reason, I am storing my emails on ext4, but want to sync them to the BTRFS filesystem I use for my server before doing a snapshot. My mails are stored in /var/mail/mailboxes, and the backup is in /var/mail/mailboxes-backup, the former being the ext4 mount and the latter being part of the btrfs filesystem which belongs to the container where all this runs. The problem is that dovecot seems to only have a single concept of the mail backup location, which is either a remote, as above, or a filesystem location. The logical answer seems to be to provide the backup location when performing the local copy for a snapshot, so I run: doveadm backup -A mdbox:/var/mail/mailboxes-backup/%d/accounts/%u However, this is not picking up the %d and %u placeholders and replacing them with the values, as it would if configured with the option above. The only workaround I can find is to run doveadm backup individually for every user, with the full expanded path for each one. Am I missing something, or would it make sense for doveadm backup to simply recognise and respect these placeholders when passed on the command line? I've tried all sorts of other things, including -o mail_replica, and putting stuff in the userdb, but I can't find any other way to do this. Thanks in advance, James

2 3

Mailbox alias plugin and INBOX. folders
by James White 23 Jan '17

23 Jan '17

Hi, I'm trying to workaround the lack of IMAP folder mapping settings on Windows 10 Mobile in regards to controlling the Sent, Trash etc folder my device uses. Currently, my device creates its own "Sent Items" folder "Deleted Items" folder along with others, this is pain when using clients like Thunderbird which places such them in the correct places, because it can be configured this way. While this is a Microsoft issue, its looking very unlikely they will add IMAP mapping control, as its been like this since Windows Phone 7. So I was looking for performing a workaround at the server level. I came across the Dovecot Mailbox alias plugin, which sounds like a decent workaround, to at least allow sent email messages from my Windows 10 mobile device to show up in the right place, I'm aware of the potential for double cache etc, but I have enough storage for it. http://wiki2.dovecot.org/Plugins/MailboxAlias What I'm having difficulty with, is expressing the mailbox_alias to an existing INBOX. folder. My email server uses the INBOX prefix setup, so my configured folders are: INBOX\INBOX.Sent INBOX\INBOX.Drafts INBOX\INBOX.Trash INBOX\INBOX.Spam Most examples seem to indicate doing at the root folder level i.e. Sent Items -> Sent not Sent Items -> INBOX\INBOX.Sent. Is it possible to use the alias plugin in this way? If so how would I express this using mailbox_alias_old, I tried INBOX/Sent, but this seems to send all items to a blackhole, as they can no longer be found in any folder. It does appear to work at the root folder level, but as my setup is using the older INBOX prefix, I don't want to do that. Any hints/tips would be appreciated! Thanks, James

2 2

Segfault on LIST Command
by Thorsten Hater 23 Jan '17

23 Jan '17

Dear all, I experience SegFaults in the imap binary on a LIST "" "" command, as sent by Claws mail. Using LIST "" "INBOX" or similar is fine. Here is an example telnet session $ telnet 127.0.0.1 143 Trying 127.0.0.1... Connected to 127.0.0.1. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN] Dovecot ready. 01 LOGIN **** **** 01 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS BINARY MOVE SPECIAL-USE QUOTA] Logged in 02 LIST "" "" Connection closed by foreign host. In the log file dovecot[8375]: imap(***): Fatal: master: service(imap): child 15803 killed with signal 11 (core dumps disabled) Please find the config below. Best regards, Thorsten $ doveconf -n # 2.2.26.0 (23d1de6): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.16 (1dc4c73) # OS: Linux 3.16.0-4-amd64 x86_64 Debian 8.6 auth_debug = yes auth_debug_passwords = yes auth_socket_path = /var/run/dovecot/auth-userdb auth_verbose = yes base_dir = /var/run/dovecot/ default_internal_user = pop first_valid_uid = 48 import_environment = TZ DEBUG=1 last_valid_uid = 48 login_trusted_networks = **** mail_debug = yes mail_gid = pop mail_plugins = " mail_log notify zlib quota" mail_uid = pop managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace inbox { inbox = yes list = children location = mailbox Drafts { auto = no special_use = \Drafts } mailbox Sent { auto = no special_use = \Sent } mailbox Trash { auto = no autoexpunge = 30 days special_use = \Trash } mailbox drafts { auto = no special_use = \Drafts } mailbox sent { auto = no special_use = \Sent } mailbox spamverdacht { auto = no autoexpunge = 30 days special_use = \Junk } mailbox trash { auto = no autoexpunge = 30 days special_use = \Trash } mailbox virenverdacht { auto = no autoexpunge = 30 days special_use = \Junk } prefix = INBOX. separator = . subscriptions = yes type = private } passdb { args = nopassword=y driver = static } plugin { last_login_dict = file:~/lastlogin mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size quota = maildir:User quota quota_warning = storage=80%% 80 %u %{userdb:quota_bytes} quota_warning2 = storage=90%% 90 %u %{userdb:quota_bytes} quota_warning3 = storage=95%% 95 %u %{userdb:quota_bytes} sieve = ldap:/etc/dovecot/pigeonhole-ldap.conf sieve_dir = ~/sieve sieve_plugins = sieve_storage_ldap zlib_save = gz zlib_save_level = 6 } service imap { executable = imap postlogin } service pop3 { executable = pop3 postlogin } service postlogin { executable = script-login -d rawlog } service quota-warning { executable = script /bin/quota-warning.sh } ssl = no userdb { args = /etc/dovecot/userdb-ldap.conf driver = ldap result_failure = return-fail result_internalfail = return-fail result_success = continue-ok } userdb { default_fields = quota_bytes=42M driver = bdb_quota override_fields = quota_rule=*:bytes=%{userdb:quota_bytes} result_failure = return-fail result_internalfail = return-fail result_success = continue-ok } verbose_proctitle = yes protocol lda { auth_socket_path = /var/run/dovecot/auth-userdb mail_plugin_dir = /lib/dovecot/modules mail_plugins = " mail_log notify zlib quota sieve" } protocol imap { mail_plugins = " mail_log notify zlib quota imap_xauth last_login imap_quota" } protocol pop3 { mail_plugins = " mail_log notify zlib quota last_login" }

2 2

mail-trends+Dovecot
by Odhiambo Washington 22 Jan '17

22 Jan '17

Hi, Out of curiosity, has anyone managed to use mail-trends[0] to analyse their e-mails. I thought about trying it out, but got stuck midstream. The mail-trends scripts work very well with gmail, but because they say it is supposed to work with _any_ IMAP server, I thought I could get it running with Dovecot too. I know this is NOT a mail-trends support group though, but I believe there is something minor that I am missing, which Dovecot admins could figure out. My idea was to see what comes out of my e-mails stored either in Maildir or mdbox. In my test env, I have mail_location = maildir:/var/spool/virtual/%d/%n/Maildir:INDEX=MEMORY I am testing with a virtual account, whose e-mails are in Maildir/ - some 30,000 mails. The gotcha is that I cannot figure out exactly what to specify in mail.py (for mail-trends [0]) for this situation. There is another modified version of mail-trends[1] which is supposed to be a lot easier than the original one, but this too doesn't seem to work in my setup: 1. My doveconf output -> http://bit.ly/2k11iKb 2. Accounts are virtual, so I have a user - johndoe(a)dom.ain who MUST login as johndoe(a)dom.ain with a password. 3. His mailbox is in /var/spool/virtual/dom.ain/johndoe/Maildir/ So I try this - using the mail-trends code from [1] root@gw:/scripts/mail-trends # ./main.py --server=localhost --username=johndoe(a)dom.ain --password=1234 --use_ssl [2017-01-21 22:24:08,552] Initializing {'username': 'johndoe(a)dom.ain', 'use_ssl': '', 'password': '1234', 'server': 'localhost'} [2017-01-21 22:24:08,552] Connecting [2017-01-21 22:24:08,747] Logging in [2017-01-21 22:24:08,752] Getting mailboxes *[2017-01-21 22:24:08,753] Found INBOX.spam *<-- Where it is getting this from beats me! *[2017-01-21 22:24:08,753] Found INBOX* Traceback (most recent call last): File "./main.py", line 304, in <module> message_infos = GetMessageInfos(opts) File "./main.py", line 104, in GetMessageInfos for mailbox in m.GetMailboxes(): File "/scripts/mail-trends/mail.py", line 61, in GetMailboxes mailboxes.remove('[Gmail]') ValueError: list.remove(x): x not in list root@gw:/scripts/mail-trends # root@gw:/scripts/mail-trends # *ls -al /var/spool/virtual/dom.ain/johndoe/Maildir/* total 3256 drwx------ 5 mailnull mailnull 512 Jan 22 00:04 . drwx------ 3 mailnull mailnull 512 Jan 21 18:48 .. drwx------ 2 mailnull mailnull 1084416 Jan 22 00:04 cur -rw------- 1 mailnull mailnull 1074769 Jan 21 18:52 dovecot-uidlist -rw------- 1 mailnull mailnull 8 Jan 21 18:32 dovecot-uidvalidity -r--r--r-- 1 mailnull mailnull 0 Jan 21 18:32 dovecot-uidvalidity.58837ef3 drwx------ 2 mailnull mailnull 1084416 Jan 21 18:47 new -rw-r--r-- 1 mailnull mailnull 0 Jan 21 18:30 subscriptions drwx------ 2 mailnull mailnull 512 Jan 21 17:44 tmp If anyone is able to hack this with Dovecot, please share the details. [0] http://code.google.com/p/mail-trends/ [1] https://github.com/jpbarraca/mail-trends -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."

2 2

Relative home path not allowed - but how is this relative?
by Roger Klorese 22 Jan '17

22 Jan '17

I just set up my server with MySQL support for authentication/authorization compatible with Postfix Admin. Initially, I was getting the "Relative home directory paths not supported" message, and it's easy to see why - Postfix Admin stores the maildir as "$domain/$userpart@$domain". But the directories in 10-mail.conf are set as mail_location = maildir:/home/mailboxes/%d/%u mail_home = maildir:/home/mailboxes/%d/%u ...and the user_query has been revised to: user_query = SELECT concat('/home/mailboxes/', maildir) as full_maildir FROM mailbox WHERE username = '%u'; ...so how are any of these relative paths?

1 1

Re: Mailbox problem on centos O/S after some "fiddling"
by Joseph Tam 21 Jan '17

21 Jan '17

> I do not understand why dovecot creates this folder as we ONLY ever use pop3 > (currently with plain text auth but going to secure when this sorted) > for mail and also why when it writes the blank folder it "owns" it with the > user accessing it (also the /var/mail/new folder takes the same owner) I think maybe those mailboxes were created because you've mapped all user home directories to the same folder (/var/mail), and thus, the first user to log in created files that subsequent users could not access. > mail_location = mbox:/var/mail/:INBOX=/var/mail/%u See this for the POP3 scenario you want: http://wiki.dovecot.org/MailLocation/mbox (Section: Only /var/mail mboxes) Don't need these > service imap-login { > inet_listener imap { > port = 143 > } > inet_listener imaps { > port = 993 > ssl = yes > } > } Joseph Tam <jtam.home(a)gmail.com>

1 0

Deleting a mailbox recursively
by Malte Schmidt 20 Jan '17

20 Jan '17

This topic was already discussed on this mailinglist: https://www.dovecot.org/list/dovecot/2011-November/079491.html I am also looking for a nice and convenient way of recursively deleting a mailbox which uses the mdbox-Format. Since then - was there any progress?

3 4

Replication between three servers
by James Pharaoh 19 Jan '17

19 Jan '17

Hi, Dovecot version: 2.2.27 I'm a little unsure if I have set up my replication correctly, and also how to set up replication on three servers, if this is possible. My replication works, with exactly the same configuration on both servers, except that the mail_replica contains the other server name in each case, of course. This seems to work fine. As I understand it, both need to be set up as a client and a server, since I have mail arriving on both. Is this a correct and supported configuration? I believe then I should be able to get three-way replication working, by pointing the three servers at each other in a circle. I am hoping this will cause a mail arriving at server 1 to be sent to server 2, which will then send it to server 3. Server 3 will attempt to send it back to server 1 which will already have it, and so this will terminate the loop. This is obviously going to create a bit of extra load, but I don't want to try it without some advice, and I'm not sure if the replication will be triggered properly by an email which is itself arriving via replication. Reading the description of the components, I think it should, since the aggregator service shouldn't care how an email has arrived, since it is simply reading the log, right? If a server fails, or needs to be taken out manually, I'll obviously need to reconfigure the loop, essentially taking it back to a standard two-server configuration. Similarly, I should be able to add a fourth server, and so on, if I wanted. I'm planning to distribute incoming emails over all servers, so that these will arrive and be stored on a working server during an outage without any reconfiguration, and to use something like nginx as a proxy to send each user to a specific server, to distribute the client load. Thanks in advance, James

1 0

Remove empty milder folders
by ＠lbutlr 18 Jan '17

18 Jan '17

Not sure if anyone will find this useful, but this is how I deleted a bunch (several hundred) of empty mail folders from a user account: # doveadm mailbox status -u “user(a)example.com" messages "*" ALL | grep "=0" | awk -F= '{print $1}' | awk '{print "rm -rf ."$1}' > list then I looked over list just to be sure it wasn’t mucked up and in the users root maildir: # sh < list and done. I probably could do some research on how to combine those two awk pipes but this worked, and it was fast. -- Apple broke AppleScripting signatures in Mail.app, so no random signatures.

2 2