- dovecot - dovecot.org

Alternate mail store of few users is disparaged unexpectedly
by Prakash Autade 02 Sep '16

02 Sep '16

Hello, We are using dovecot with mdbox and ALT store on S3(Simple Storage System). We export the mail_location=mdbox:/<user-mailstore>/mdbox:ALT=/altmailstore/<user-mailstore>/mdbox of user in extra parameters. Today, alternate mail store of few users is disparaged unexpectedly which resulted in mail loss. We are unable to trace out why and when the alternate store is disparaged. Our hypothesis is, the folder is removed during doveadm altmove. We want to prevent this in future. It will be great if someone helps to identify the root cause. Dovecot version: 2.2.19 # dovecot -n # 2.2.19: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-573.el6.x86_64 x86_64 CentOS Linux release 6.0 (Final) auth_mechanisms = plain login auth_verbose_passwords = plain disable_plaintext_auth = no mail_fsync = always mail_gid = 65111 mail_location = maildir:~/Maildir mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = " quota" mail_uid = 65111 mdbox_rotate_interval = 1 days mdbox_rotate_size = 20 M mmap_disable = yes namespace inbox { inbox = yes location = mailbox Drafts { auto = create special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Items" { auto = create } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { auto = create special_use = \Trash } mailbox chat { auto = create } prefix = INBOX. separator = . type = private } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size } ssl_cert = </conf/server/server.crt ssl_key = </conf/server/server.key -- Sincerely, Prakash P. Autade.

1 0

Dovecot 2.2.25 fails on SSL
by Andreas M. Kirchwitz 02 Sep '16

02 Sep '16

Dear Dovecot developers! This problem already existed some years ago, has been fixed, and now it's there again in Dovecot 2.2.25 (2.2.24 was fine). I'm running CentOS 6 with a custom OpenSSL installation in /usr/local/ssl Therefore, Dovecot is configured like this: env SSL_CFLAGS="-I/usr/local/ssl/include" SSL_LIBS="-L/usr/local/ssl/lib -Wl,-R/usr/local/ssl/lib -lcrypto -lssl" ./configure --prefix=/usr/local/Dovecot-2.2.25 --with-ssl=openssl --with-ssldir=/usr/local/Dovecot-2.2.25/etc/dovecot/certs With "pkg-config", the same options for SSL are provided. "make" and "make install" run just fine, and the daemon starts without any errors. However, if a user connects on port 993 (IMAPS), Dovecot logs this failure message to syslog: Jul 4 01:08:43 myhost dovecot: ssl-params: Fatal: Couldn't load required plugin /usr/local/Dovecot-2.2.25/lib/dovecot/libssl_iostream_openssl.so: dlopen() failed: libcrypto.so.1.0.0: cannot open shared object file: No such file or directory Jul 4 01:08:43 myhost dovecot: ssl-params: Error: child process failed with status 22784 ldd /usr/local/Dovecot-2.2.25/lib/dovecot/libssl_iostream_openssl.so linux-gate.so.1 => (0x00e8c000) libcrypto.so.1.0.0 => not found libssl.so.1.0.0 => not found librt.so.1 => /lib/librt.so.1 (0x00be4000) libc.so.6 => /lib/libc.so.6 (0x001a6000) libpthread.so.0 => /lib/libpthread.so.0 (0x003e4000) /lib/ld-linux.so.2 (0x007e7000) ldd /usr/local/Dovecot-2.2.25/lib/dovecot/libdcrypt_openssl.so linux-gate.so.1 => (0x00dca000) libcrypto.so.1.0.0 => not found libssl.so.1.0.0 => not found librt.so.1 => /lib/librt.so.1 (0x00a7a000) libc.so.6 => /lib/libc.so.6 (0x00160000) libpthread.so.0 => /lib/libpthread.so.0 (0x0072f000) /lib/ld-linux.so.2 (0x00560000) When comparing to Dovecot 2.2.24: ldd /usr/local/Dovecot-2.2.24/lib/dovecot/libssl_iostream_openssl.so linux-gate.so.1 => (0x0073d000) libcrypto.so.1.0.0 => /usr/local/ssl/lib/libcrypto.so.1.0.0 (0x00b04000) libssl.so.1.0.0 => /usr/local/ssl/lib/libssl.so.1.0.0 (0x0044a000) librt.so.1 => /lib/librt.so.1 (0x00a60000) libc.so.6 => /lib/libc.so.6 (0x001e5000) libdl.so.2 => /lib/libdl.so.2 (0x003a9000) libpthread.so.0 => /lib/libpthread.so.0 (0x009d0000) /lib/ld-linux.so.2 (0x00d77000) There's no libdcrypt_openssl.so in Dovecot 2.2.24, so I guess with the newly introduced dcrypt stuff something with SSL went wrong. Would be great if that could be fixed so that SSL works again. Thanks a lot in advance ... Andreas

3 6

index: namespace not selectable, and no info. :(
by Larry Rosenman 02 Sep '16

02 Sep '16

thebighonker.lerctr.org ~ $ doveadm -D -v index \#ARCHIVE/2012/02/INBOX Debug: Loading modules from directory: /usr/local/lib/dovecot Debug: Module loaded: /usr/local/lib/dovecot/lib15_notify_plugin.so Debug: Module loaded: /usr/local/lib/dovecot/lib20_fts_plugin.so Debug: Module loaded: /usr/local/lib/dovecot/lib21_fts_lucene_plugin.so Debug: Module loaded: /usr/local/lib/dovecot/lib90_stats_plugin.so Debug: Loading modules from directory: /usr/local/lib/dovecot/doveadm Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/lib10_doveadm_acl_plugin.so: Undefined symbol "acl_user_module" (this is usually intentional, so just ignore this message) Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/lib10_doveadm_expire_plugin.so: Undefined symbol "expire_set_lookup" (this is usually intentional, so just ignore this message) Debug: Skipping module doveadm_quota_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/lib10_doveadm_quota_plugin.so: Undefined symbol "quota_user_module" (this is usually intentional, so just ignore this message) Debug: Module loaded: /usr/local/lib/dovecot/doveadm/lib10_doveadm_sieve_plugin.so Debug: Module loaded: /usr/local/lib/dovecot/doveadm/lib20_doveadm_fts_lucene_plugin.so Debug: Module loaded: /usr/local/lib/dovecot/doveadm/lib20_doveadm_fts_plugin.so doveadm(ler): Debug: Effective uid=1001, gid=1001, home=/home/ler doveadm(ler): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=mbox:~/mail:INBOX=~/mail/INBOX doveadm(ler): Debug: fs: root=/home/ler/mail, index=, indexpvt=, control=, inbox=/home/ler/mail/INBOX, alt= doveadm(ler): Debug: Namespace archive: type=private, prefix=#ARCHIVE/, sep=/, inbox=no, hidden=no, list=no, subscriptions=yes location=mbox:~/MAILARCHIVE doveadm(ler): Debug: mbox: INBOX defaulted to /home/ler/MAILARCHIVE/inbox doveadm(ler): Debug: fs: root=/home/ler/MAILARCHIVE, index=, indexpvt=, control=, inbox=/home/ler/MAILARCHIVE/inbox, alt= doveadm(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't selectable doveadm(ler): Error: Mailbox #ARCHIVE/2012/02/INBOX: Status lookup failed: Internal error occurred. Refer to server log for more information. [2016-08-30 13:41:57] NOTHING additional is logged in syslog. doveconf -n attached. I **CAN** select the mailbox in mutt using #ARCHIVE/2012/02/INBOX -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 (c) E-Mail: larryrtx(a)gmail.com US Mail: 17716 Limpia Crk, Round Rock, TX 78664-7281

1 1

Force SSL/TLS and client certificate checking only for connections from Internet
by Konstantin Khomoutov 02 Sep '16

02 Sep '16

(Please CC me if possible.) I have Dovecot 2.2.13 (shipped with Debian 8 "Jessie") serving IMAP for a small organization. It's connected both to the Internet and to that organization LAN. I'd like to have Dovecot has rather tight security requirements for connections made from the Internet and reasonably laxed requirements for the LAN clients. Due to Dovecot authenticating users against a LDAP database which is also used for logging into the users' machines, we have to use somewhat weak passwords (randomly generated but short) for most users. Because of this I want to: * Mandate the usage of TLS for the connections made from Internet; * Require the clients to present their SSL certificates, and * Verify the validity of these certificates. The certificates are issued by our own CA, so it's not a problem to verify them. The first iteration was to set ssl = required and disable_plaintext_auth = yes which I then overrode with a "remote" section for LAN connections: remote 192.168.0.0/16 { disable_plaintext_auth = no ssl = yes } The next iteration was to actually enable verification of the client certificates. I have set the "ssl_ca" variable appropriately, then ssl_require_crl = yes ssl_verify_client_cert = yes and auth_ssl_require_client_cert = yes Then I went on and attempted to override the latter two settings for the LAN clients by appending them to my special "remote" section to it read: remote 192.168.0.0/16 { disable_plaintext_auth = no ssl = yes ssl_verify_client_cert = no auth_ssl_require_client_cert = no } But after restart Dovecot complained that I cannot use the "auth_ssl_require_client_cert" setting in a "remote" section. I have removed it in the hope that still having ssl_verify_client_cert = no there would inhibit SSL certificate checks for the LAN clients but apparently it did not. So, to recap: * I need to have tight TLS settings for the clients connecting from the Internet: - TLS is required; - The client must present a valid certificate (issued by a CA we control). * LAN clients should use relaxed security settings: TLS is okay but that's all. How do I go about setting this? (On a side note, I can supposedly get away installing stunnel and making it proxy IMAP and IMAPS connections to Dovecot -- at least from the documentation, it appears stunnel supports IMAP+STARTTLS, -- but I would rather have all this handled solely by Dovecot.)

1 0

Re: initd script does not stop/restart all dovecot processes
by Christian Kivalo 02 Sep '16

02 Sep '16

On 2016-09-02 12:15, Florent B wrote: > On 09/02/2016 11:57 AM, Aki Tuomi wrote: >>> On September 2, 2016 at 12:16 PM Florent B <florent(a)coppint.com> >>> wrote: >>> >>> >> Hi >> >> You could look under /lib/systemd/system or similar. The .in file from >> repo gets a sed treatment during make install. >> >> Aki Tuomi > > Ok, but I use 2.2.24, and when I did "make install" from source, it did > not install any Dovecot service. Was it introduced in 2.2.25 ? "make > install" output does not show anything with "dovecot.service.in"... i use ./configure with --with-systemdsystemunitdir=/etc/systemd/system/ and that installs the systemd.service and socket > That's why I need to copy initd script by myself, and did the same with > systemd unit file when you suggested me to try it. -- Christian Kivalo

1 0

Re: initd script does not stop/restart all dovecot processes
by Aki Tuomi 02 Sep '16

02 Sep '16

> On September 2, 2016 at 12:16 PM Florent B <florent(a)coppint.com> wrote: > > Hi You could look under /lib/systemd/system or similar. The .in file from repo gets a sed treatment during make install. Aki Tuomi

1 0

Re: initd script does not stop/restart all dovecot processes
by Sami Ketola 02 Sep '16

02 Sep '16

> On 01 Sep 2016, at 17:25, Florent B <florent(a)coppint.com> wrote: > > Hi everyone, > > On Debian Jessie servers, I use initd script provided by Dovecot 2.2 (in > doc/dovecot-initd.sh) and when I stop or restart dovecot service, it > still remains some process : > > ps aux | grep dove > dovecot 1798 0.0 0.1 9408 2116 ? S 16:15 0:00 > dovecot/anvil [1 connections] > root 1799 0.0 0.1 9544 2288 ? S 16:15 0:00 dovecot/log > dovecot 1812 0.0 0.2 39144 5720 ? S 16:15 0:00 > dovecot/auth [0 wait, 0 passdb, 0 userdb] > root 1844 0.0 0.1 12728 2076 pts/0 S+ 16:16 0:00 grep dove > > > Is it expected ? "restart" does not work of course, and "start" after > "stop" too. > > How can I fix this ? Debian Jessie comes with systemd so you really should not use initscript anymore but switch to systemd for starting dovecot. There is systemd service description file available for you in case your vendor does not provide it in the package: https://github.com/dovecot/core/blob/master/dovecot.service.in Sami

2 1

dovecot and ldap with problem on userdb
by Averlon GmbH (in Gründung) 02 Sep '16

02 Sep '16

Hi, I have setup a new ubuntu on 16.04.. I have already a running system on 14.04 but wanted to migrate. I get an error when checking user in ldap. +++ Aug 31 18:14:16 auth: Error: ldap_bind Aug 31 18:14:16 auth: Error: ldap_simple_bind Aug 31 18:14:16 auth: Error: ldap_sasl_bind Aug 31 18:14:16 auth: Error: ldap_send_initial_request Aug 31 18:14:16 auth: Error: ldap_new_connection 1 1 0 Aug 31 18:14:16 auth: Error: ldap_int_open_connection Aug 31 18:14:16 auth: Error: ldap_connect_to_host: TCP localhost:389 Aug 31 18:14:16 auth: Error: ldap_new_socket: 20 Aug 31 18:14:16 auth: Error: ldap_prepare_socket: 20 Aug 31 18:14:16 auth: Error: ldap_connect_to_host: Trying ::1 389 Aug 31 18:14:16 auth: Error: ldap_pvt_connect: fd: 20 tm: 5 async: 0 Aug 31 18:14:16 auth: Error: ldap_ndelay_on: 20 Aug 31 18:14:16 auth: Error: attempting to connect: Aug 31 18:14:16 auth: Error: connect errno: 115 Aug 31 18:14:16 auth: Error: ldap_int_poll: fd: 20 tm: 5 Aug 31 18:14:16 auth: Error: ldap_is_sock_ready: 20 Aug 31 18:14:16 auth: Error: ldap_ndelay_off: 20 Aug 31 18:14:16 auth: Error: ldap_pvt_connect: 0 Aug 31 18:14:16 auth: Error: ldap_open_defconn: successful Aug 31 18:14:16 auth: Error: ldap_send_server_request Aug 31 18:14:16 auth: Error: ldap_result ld 0x55b624137680 msgid -1 Aug 31 18:14:16 auth: Error: wait4msg ld 0x55b624137680 msgid -1 (timeout 0 usec) Aug 31 18:14:16 auth: Error: wait4msg continue ld 0x55b624137680 msgid -1 all 0 Aug 31 18:14:16 auth: Error: ** ld 0x55b624137680 Connections: Aug 31 18:14:16 auth: Error: * host: localhost port: 389 (default) Aug 31 18:14:16 auth: Error: refcnt: 2 status: Connected Aug 31 18:14:16 auth: Error: last used: Wed Aug 31 18:14:16 2016 Aug 31 18:14:16 auth: Error: Aug 31 18:14:16 auth: Error: Aug 31 18:14:16 auth: Error: ** ld 0x55b624137680 Outstanding Requests: Aug 31 18:14:16 auth: Error: * msgid 1, origid 1, status InProgress Aug 31 18:14:16 auth: Error: outstanding referrals 0, parent count 0 Aug 31 18:14:16 auth: Error: ld 0x55b624137680 request count 1 (abandoned 0) Aug 31 18:14:16 auth: Error: ** ld 0x55b624137680 Response Queue: Aug 31 18:14:16 auth: Error: Empty Aug 31 18:14:16 auth: Error: ld 0x55b624137680 response count 0 Aug 31 18:14:16 auth: Error: ldap_chkResponseList ld 0x55b624137680 msgid -1 all 0 Aug 31 18:14:16 auth: Error: ldap_chkResponseList returns ld 0x55b624137680 NULL Aug 31 18:14:16 auth: Error: ldap_int_select Aug 31 18:14:16 auth: Error: read1msg: ld 0x55b624137680 msgid -1 all 0 Aug 31 18:14:16 auth: Error: read1msg: ld 0x55b624137680 msgid 1 message type bind Aug 31 18:14:16 auth: Error: read1msg: ld 0x55b624137680 0 new referrals Aug 31 18:14:16 auth: Error: read1msg: mark request completed, ld 0x55b624137680 msgid 1 Aug 31 18:14:16 auth: Error: request done: ld 0x55b624137680 msgid 1 Aug 31 18:14:16 auth: Error: res_errno: 0, res_error: <>, res_matched: <> Aug 31 18:14:16 auth: Error: ldap_free_request (origid 1, msgid 1) Aug 31 18:14:16 auth: Error: ldap_parse_result Aug 31 18:14:16 auth: Error: ldap_search Aug 31 18:14:16 auth: Error: put_filter: "(&(objectClass=posixAccount)(mail=info))" Aug 31 18:14:16 auth: Error: put_filter: AND Aug 31 18:14:16 auth: Error: put_filter_list "(objectClass=posixAccount)(mail=info)" Aug 31 18:14:16 auth: Error: put_filter: "(objectClass=posixAccount)" Aug 31 18:14:16 auth: Error: put_filter: simple Aug 31 18:14:16 auth: Error: put_simple_filter: "objectClass=posixAccount" Aug 31 18:14:16 auth: Error: put_filter: "(mail=info)" Aug 31 18:14:16 auth: Error: put_filter: simple Aug 31 18:14:16 auth: Error: put_simple_filter: "mail=info" Aug 31 18:14:16 auth: Error: ldap_send_initial_request Aug 31 18:14:16 auth: Error: ldap_send_server_request Aug 31 18:14:16 auth: Error: ldap_msgfree Aug 31 18:14:16 auth: Error: ldap_result ld 0x55b624137680 msgid -1 Aug 31 18:14:16 auth: Error: wait4msg ld 0x55b624137680 msgid -1 (timeout 0 usec) Aug 31 18:14:16 auth: Error: wait4msg continue ld 0x55b624137680 msgid -1 all 0 Aug 31 18:14:16 auth: Error: ** ld 0x55b624137680 Connections: Aug 31 18:14:16 auth: Error: * host: localhost port: 389 (default) Aug 31 18:14:16 auth: Error: refcnt: 2 status: Connected Aug 31 18:14:16 auth: Error: last used: Wed Aug 31 18:14:16 2016 Aug 31 18:14:16 auth: Error: Aug 31 18:14:16 auth: Error: Aug 31 18:14:16 auth: Error: ** ld 0x55b624137680 Outstanding Requests: Aug 31 18:14:16 auth: Error: * msgid 2, origid 2, status InProgress Aug 31 18:14:16 auth: Error: outstanding referrals 0, parent count 0 Aug 31 18:14:16 auth: Error: ld 0x55b624137680 request count 1 (abandoned 0) Aug 31 18:14:16 auth: Error: ** ld 0x55b624137680 Response Queue: Aug 31 18:14:16 auth: Error: Empty Aug 31 18:14:16 auth: Error: ld 0x55b624137680 response count 0 Aug 31 18:14:16 auth: Error: ldap_chkResponseList ld 0x55b624137680 msgid -1 all 0 Aug 31 18:14:16 auth: Error: ldap_chkResponseList returns ld 0x55b624137680 NULL Aug 31 18:14:16 auth: Error: ldap_int_select Aug 31 18:14:16 auth: Error: read1msg: ld 0x55b624137680 msgid -1 all 0 Aug 31 18:14:16 auth: Error: read1msg: ld 0x55b624137680 msgid 2 message type search-result Aug 31 18:14:16 auth: Error: read1msg: ld 0x55b624137680 0 new referrals Aug 31 18:14:16 auth: Error: read1msg: mark request completed, ld 0x55b624137680 msgid 2 Aug 31 18:14:16 auth: Error: request done: ld 0x55b624137680 msgid 2 Aug 31 18:14:16 auth: Error: res_errno: 0, res_error: <>, res_matched: <> Aug 31 18:14:16 auth: Error: ldap_free_request (origid 2, msgid 2) Aug 31 18:14:16 auth: Error: ldap_parse_result Aug 31 18:14:16 auth: Error: ldap_first_attribute Aug 31 18:14:16 auth: Error: ldap_msgfree Aug 31 18:14:16 auth: Error: ldap_result ld 0x55b624137680 msgid -1 Aug 31 18:14:16 auth: Error: wait4msg ld 0x55b624137680 msgid -1 (timeout 0 usec) Aug 31 18:14:16 auth: Error: wait4msg continue ld 0x55b624137680 msgid -1 all 0 Aug 31 18:14:16 auth: Error: ** ld 0x55b624137680 Connections: Aug 31 18:14:16 auth: Error: * host: localhost port: 389 (default) Aug 31 18:14:16 auth: Error: refcnt: 1 status: Connected Aug 31 18:14:16 auth: Error: last used: Wed Aug 31 18:14:16 2016 Aug 31 18:14:16 auth: Error: Aug 31 18:14:16 auth: Error: Aug 31 18:14:16 auth: Error: ** ld 0x55b624137680 Outstanding Requests: Aug 31 18:14:16 auth: Error: Empty Aug 31 18:14:16 auth: Error: ld 0x55b624137680 request count 0 (abandoned 0) Aug 31 18:14:16 auth: Error: ** ld 0x55b624137680 Response Queue: Aug 31 18:14:16 auth: Error: Empty Aug 31 18:14:16 auth: Error: ld 0x55b624137680 response count 0 Aug 31 18:14:16 auth: Error: ldap_chkResponseList ld 0x55b624137680 msgid -1 all 0 Aug 31 18:14:16 auth: Error: ldap_chkResponseList returns ld 0x55b624137680 NULL Aug 31 18:14:16 auth: Error: ldap_int_select Aug 31 18:16:18 auth: Error: ldap_unbind Aug 31 18:16:18 auth: Error: ldap_free_connection 1 1 Aug 31 18:16:18 auth: Error: ldap_send_unbind Aug 31 18:16:18 auth: Error: ldap_free_connection: actually freed +++ The problem is this line: Aug 31 18:14:16 auth: Error: put_filter: "(&(objectClass=posixAccount)(mail=info))" Since the file to run the userdb contains this command: user_filter = (&(objectClass=posixAccount)(mail=%u)) Which should user the full name, in my case a full e-mail address. The postfix command is: virtual_transport = lmtp:unix:private/dovecot-lmtp When using: virtual_transport = dovecot The correct string is shown for %u. Here is dovecot conf. I don't believe this will cause the error. Anyhow. +++ dovecot -n # 2.2.22 (fe789d2): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.13 (7b14904) # OS: Linux 4.4.0-34-generic x86_64 Ubuntu 16.04.1 LTS ext4 auth_mechanisms = plain login auth_username_format = %Ln debug_log_path = /var/log/dovecot/dovecot-debug.log info_log_path = /var/log/dovecot/dovecot-info.log log_path = /var/log/dovecot/dovecot.log mail_gid = avvmail mail_location = maildir:/var/av_vmail/%d/%n:LAYOUT=fs mail_privileged_group = avvmail mail_uid = avvmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } prefix = } passdb { args = /etc/dovecot/av_auth_ldap.conf driver = ldap } protocols = pop3 imap lmtp service auth-worker { unix_listener auth-worker { user = root } } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = mode = 0666 user = } } service imap-login { inet_listener imap { port = 143 } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } user = avvmail } ssl = required ssl_cert = </etc/ssl/certs/ssl-cert-snakeoil.pem ssl_cipher_list = EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA256:EECDH:+CAMELLIA128 :+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!IDE A:!ECDSA:kEDH:CAMELLIA128-SHA:AES128-SHA ssl_dh_parameters_length = 2048 ssl_key = </etc/ssl/private/ssl-cert-snakeoil.key ssl_prefer_server_ciphers = yes ssl_protocols = !SSLv2 !SSLv3 userdb { args = /etc/dovecot/av_auth_ldap.conf driver = ldap } protocol imap { imap_idle_notify_interval = 29 mins mail_max_userip_connections = 20 mail_plugins = " quota imap_quota antispam" } +++ Please let me know what additional info I can provide to narrow the problem and get to a solution. By the way: When using: virtual_transport = dovecot I get another error with some file permissions on auth-userdb which I was not able to overcome sofar. Help appreciated. Mit freundlichenGrüßen / Kind Regards Kallewirsch

2 3

Dsync config help
by Jean-Luc Wasmer 01 Sep '16

01 Sep '16

Hi, I’m having a hard time with the http://wiki2.dovecot.org/Replication page. - for a master-master setup, does the configuration need to be mirrored on both masters? - after aggregating unrelated sections of the wiki page, there seems to be 3 different values for “mail_replica": - "remote”: for SSH - “remoteprefix": for SSH wrapper - “tcp”: for TCP connection using the Doveadm protocol Is this correct? - what’s the purpose of the replicator VS aggregator VS doveadm services? Who talks to who? Where can I find documentation about their configuration (i.e. not examples) - most examples are for a single vmail user setup… what should be done when using system accounts? Thanks, Jean-Luc

2 4

autoexpunge clarification
by Michael Fox 01 Sep '16

01 Sep '16

I'm trying to understand autoexpunge, but the documentation is just not clear. Hopefully, someone can clear up a few questions. http://wiki.dovecot.org/MailboxSettings says the following: autoexpunge=<time>: (v2.2.20+) Automatically at user deinitialization expunge all mails in this mailbox whose saved-timestamp is older than <time> (e.g. autoexpunge=30d). This removes the need for expire plugin <http://wiki.dovecot.org/Plugins/Expire> if you don't care that the expunging may not always happen in time. What does "at user deinitialization" mean? What does "if you don't care that the expunging may not always happen in time" mean? I read the sub-bullets but they just aren't clear. When exactly does autoexpunge occur? Thanks, Michael

2 4

Help setting up IMAP account in Outlook 2016
by Spiro Angeli 01 Sep '16

01 Sep '16

Hi, I need help setting up mail clients for my email accounts running on dovecot ver 2.2.18 on CentOS release 6.8 (Final) and Plesk Web Admin Edition in Italian. For better reading I posted a forum thread where you can get all detail info: Help setting up IMAP account in Outlook 2016 Forum link: http://www.emailquestions.com/threads/help-setting-up-imap-account-in-outloo k-2016.13439 I was advised to " ask dovecot list for help with the IMAP server. " So I did and a user kindly suggested me to customize "15-mailboxes.conf " file. I have some technical questions I need to ask. Hope someone knows the answers. As Plesk continuously updates itself and manages most of the server the majority of CentOS fils report this lines on top of each file: ## ## Authentication for Plesk mail users. ## # PLEASE DON'T EDIT ANYTHING IN THIS FILE! ANY CHANGES WILL BE LOST ON UPGRADE. So if I customize this "15-mailboxes.conf " I need to make sure that Plesk does not overwrite. Also I need to make sure that it gets updated if Dovecot changes in its settings. So, my first question is: how do I manage to keep this "15-mailboxes.conf " file updatable by OS (when I update system) but at the same time retain customizations upon system updates? Second question has to do with customization: Please consult attachment for this question a. I wish to see existing server folders (Draft, Sent, Spam, Trash) on my MS Outlook mail client software only in Italian and not in English. What should I do? Roundcube displays them in Italian. AquaMail (on Android) displays them in Italian. b. I was told to solve this server wise and not mail box per mailbox. Is this correct? c. Can you please share a complete customized code, for my needs, for this "15-mailboxes.conf " so I can learn from it? Thank you, Spiro

1 0

ACL List uses wrong namespace for permissions
by Harald Leithner 31 Aug '16

31 Aug '16

Hi, I'm using dovecot 2.2.devel (11c704a) with lazyexpunge and shared Mailboxes, this seams to work since the latest patch. There is only one problem creating the correct dovecot-acl-list, if I login as the normal user that has set permissions for another user everything is ok. If I login with the same user but with a modified roundcube that uses the #EXPUNGED Namespace as root, dovecot overrides the correct dovecot-acl-list with an empty version. I think this is the most interesting part of the log: 2016-04-26T16:49:26+02:00 mailstore1 dovecot: imap(user(a)company.at): Debug: fs: root=/srv/storage1/vmail/company/628, index=, indexpvt=, control=, inbox=, alt= 2016-04-26T16:49:26+02:00 mailstore1 dovecot: imap(user(a)company.at): Debug: acl: initializing backend with data: vfile 2016-04-26T16:49:26+02:00 mailstore1 dovecot: imap(user(a)company.at): Debug: acl: acl username = user(a)company.at 2016-04-26T16:49:26+02:00 mailstore1 dovecot: imap(user(a)company.at): Debug: acl: owner = 1 2016-04-26T16:49:26+02:00 mailstore1 dovecot: imap(user(a)company.at): Debug: acl vfile: Global ACLs disabled 2016-04-26T16:49:26+02:00 mailstore1 dovecot: imap(user(a)company.at): Debug: Namespace : type=private, prefix=#EXPUNGED/, sep=, inbox=no, hidden=yes, list=no, subscriptions=no location=mdbox:/srv/storage1/vmail/company/628:MAILBOXDIR=expunged 2016-04-26T16:49:26+02:00 mailstore1 dovecot: imap(user(a)company.at): Debug: fs: root=/srv/storage1/vmail/company/628, index=, indexpvt=, control=, inbox=, alt= 2016-04-26T16:49:26+02:00 mailstore1 dovecot: imap(user(a)company.at): Debug: acl: initializing backend with data: vfile 2016-04-26T16:49:26+02:00 mailstore1 dovecot: imap(user(a)company.at): Debug: acl: acl username = user(a)company.at 2016-04-26T16:49:26+02:00 mailstore1 dovecot: imap(user(a)company.at): Debug: acl: owner = 1 2016-04-26T16:49:26+02:00 mailstore1 dovecot: imap(user(a)company.at): Debug: acl vfile: Global ACLs disabled 2016-04-26T16:49:26+02:00 mailstore1 dovecot: imap(user(a)company.at): Debug: Namespace : type=shared, prefix=#Users/%u/, sep=/, inbox=no, hidden=no, list=children, subscriptions=yes location=mdbox:/srv/storage1/vmail%h 2016-04-26T16:49:26+02:00 mailstore1 dovecot: imap(user(a)company.at): Debug: shared: root=/var/run/dovecot, index=, indexpvt=, control=, inbox=, alt= 2016-04-26T16:49:26+02:00 mailstore1 dovecot: imap(user(a)company.at): Debug: acl vfile: file /srv/storage1/vmail/company/628/mailboxes/dovecot-acl not found 2016-04-26T16:49:26+02:00 mailstore1 dovecot: imap(user(a)company.at): Debug: Namespace : Using permissions from /srv/storage1/vmail/company/628: mode=0700 gid=default 2016-04-26T16:49:26+02:00 mailstore1 dovecot: imap(user(a)company.at): Debug: acl vfile: file /srv/storage1/vmail/company/628/mailboxes/Drafts/dbox-Mails/dovecot-acl not found 2016-04-26T16:49:26+02:00 mailstore1 dovecot: imap(user(a)company.at): Debug: acl vfile: file /srv/storage1/vmail/company/628/expunged/dovecot-acl not found 2016-04-26T16:49:26+02:00 mailstore1 dovecot: imap(user(a)company.at): Debug: Namespace #EXPUNGED/: Using permissions from /srv/storage1/vmail/company/628: mode=0700 gid=default 2016-04-26T16:49:26+02:00 mailstore1 dovecot: imap(user(a)company.at): Debug: acl vfile: file /srv/storage1/vmail/company/628/expunged/INBOX/dbox-Mails/dovecot-acl not found 2016-04-26T16:49:26+02:00 mailstore1 dovecot: imap(user(a)company.at): Debug: acl vfile: file /srv/storage1/vmail/company/628/expunged/INBOX/test/dbox-Mails/dovecot-acl not found 2016-04-26T16:49:26+02:00 mailstore1 dovecot: imap(user(a)company.at): Debug: acl vfile: reading file /srv/storage1/vmail/company/628/mailboxes/INBOX/dbox-Mails/dovecot-acl 2016-04-26T16:49:26+02:00 mailstore1 dovecot: imap(user(a)company.at): Logged out in=178 out=870 2016-04-26T16:49:26+02:00 mailstore1 dovecot: imap(user(a)company.at): Logged out in=315 out=27172 regards, -- Harald Leithner ITronic Wiedner Hauptstraße 120/5.1, 1050 Wien, Austria Tel: +43-1-545 0 604 Mobil: +43-699-123 78 4 78 Mail: leithner(a)itronic.at | itronic.at

2 1

Panic on cleanup
by Harald Leithner 31 Aug '16

31 Aug '16

Hi, I got a doveadm panic while running purge -A with 2.2.25 doveadm(x(a)itronic.at): Panic: file mdbox-map.c: line 1359: unreached doveadm(x(a)itronic.at): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x8dc6e) [0x7f2fe2022c6e] -> /usr/lib/dovecot/libdovecot.so.0(+0x8dce8) [0x7f2fe2022ce8] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f2fe1fc102e] -> /usr/lib/dovecot/libdovecot-storage.so.0(mdbox_map_append_move+0x1ed) [0x7f2fe2301c0d] -> /usr/lib/dovecot/libdovecot-storage.so.0(mdbox_purge+0xfe3) [0x7f2fe2303103] -> doveadm(+0x29458) [0x7f2fe2c7e458] -> doveadm(+0x2910f) [0x7f2fe2c7e10f] -> doveadm(+0x29db4) [0x7f2fe2c7edb4] -> doveadm(doveadm_cmd_ver2_to_mail_cmd_wrapper+0x278) [0x7f2fe2c7fae8] -> doveadm(doveadm_cmd_run_ver2+0x560) [0x7f2fe2c8dfd0] -> doveadm(doveadm_cmd_try_run_ver2+0x37) [0x7f2fe2c8e027] -> doveadm(main+0x1e4) [0x7f2fe2c6f414] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf5) [0x7f2fe1c0bb45] -> doveadm(+0x1a7ee) [0x7f2fe2c6f7ee] The command was run in a cleanup script that expunge old mails from the lazy-plugin. ---- #!/bin/sh # Permanently expunge old Trash doveadm expunge -A -d mailbox '#EXPUNGED/*' savedbefore 2w # Optimize mdbox storage and sis storage doveadm purge -A ---- After rerunning the command it fails again. stace could be found after config. config: # 2.2.devel (6d2fa6b): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.devel (3f51b82) # OS: Linux 3.16.0-4-amd64 x86_64 Debian 8.5 auth_cache_negative_ttl = 1 secs auth_cache_size = 10 M auth_cache_ttl = 1 secs auth_mechanisms = PLAIN LOGIN DIGEST-MD5 SCRAM-SHA-1 CRAM-MD5 APOP auth_verbose = yes default_client_limit = 600 default_vsz_limit = 512 M dict { lastlogin = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext sqlacl = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext sqlquota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } disable_plaintext_auth = no first_valid_gid = 1001 first_valid_uid = 1001 hostname = mailstore1(a)itronic.at imap_hibernate_timeout = 1 mins imap_id_log = * imap_id_send = * imap_idle_notify_interval = 10 mins instance_name = mailstore1 last_valid_gid = 1001 last_valid_uid = 1001 lda_original_recipient_header = X-LDA-Original-To lmtp_rcpt_check_quota = yes login_greeting = ITronic Mail Store login_trusted_networks = 172.22.14.0/24 mail_attachment_dir = /srv/storage1/vmail_sis mail_attachment_hash = %{sha512} mail_attachment_min_size = 64 k mail_cache_min_mail_count = 5 mail_gid = vmail mail_location = mdbox:~/mdbox mail_plugins = zlib lazy_expunge stats acl quota mail_prefetch_count = 100 mail_server_admin = mailto:postmaster@itronic.at mail_server_comment = ITronic Mail System mail_shared_explicit_inbox = yes mail_uid = vmail mailbox_list_index = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext mdbox_preallocate_space = yes namespace { hidden = yes list = no location = mdbox:~/mdbox:MAILBOXDIR=expunged prefix = "#EXPUNGED/" subscriptions = no type = private } namespace { list = children location = mdbox:%%h/mdbox prefix = "#Users/%%u/" separator = / subscriptions = yes type = shared } namespace inbox { hidden = no inbox = yes location = mailbox Archvie { special_use = \Archive } mailbox Drafts { special_use = \Drafts } mailbox Sent { special_use = \Sent } mailbox Spam { special_use = \Junk } mailbox Trash { special_use = \Trash } prefix = separator = / subscriptions = yes type = private } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { acl = vfile acl_shared_dict = proxy::sqlacl last_login_dict = proxy::lastlogin last_login_key = last-login/%u lazy_expunge = "#EXPUNGED/" lazy_expunge_only_last_instance = no quota = dict:User quota::proxy::sqlquota quota_grace = 10%% quota_rule = *:storage=1024M quota_rule2 = "#EXPUNGED:storage=+100M" quota_warning = storage=100%% quota-warning 100 %u quota_warning2 = storage=95%% quota-warning 95 %u quota_warning3 = storage=80%% quota-warning 80 %u recipient_delimiter = + sieve = file:~/sieve;active=~/.dovecot.sieve sieve_global = /etc/dovecot/sieve sieve_max_actions = 64 sieve_max_redirects = 8 sieve_max_script_size = 2M sieve_quota_max_scripts = 0 sieve_quota_max_storage = 64M stats_refresh = 30 secs stats_track_cmds = yes zlib_save = gz zlib_save_level = 6 } pop3_uidl_duplicates = rename protocols = imap lmtp sieve pop3 sieve service auth-worker { user = $default_internal_user } service auth { inet_listener { port = 4180 } unix_listener auth-userdb { mode = 0666 } } service dict { unix_listener dict { group = vmail mode = 0666 } } service imap-hibernate { unix_listener imap-hibernate { group = vmail mode = 0666 } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } process_min_avail = 1 service_count = 0 } service imap { process_limit = 1024 unix_listener imap-master { user = dovecot } unix_listener imap { group = vmail mode = 0666 } vsz_limit = 512 M } service lmtp { inet_listener lmtp { address = 172.22.14.135 port = 24000 } unix_listener lmtp { mode = 0666 } } service managesieve-login { inet_listener sieve { port = 4190 } process_min_avail = 0 service_count = 1 vsz_limit = 64 M } service managesieve { process_limit = 50 } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } process_min_avail = 20 service_count = 1 vsz_limit = 64 M } service pop3 { process_limit = 1024 } service quota-warning { executable = script /opt/scripts/quota-warning.sh unix_listener quota-warning { user = vmail } user = dovecot } service stats { fifo_listener stats-mail { mode = 0600 user = vmail } } shutdown_clients = no ssl_cert = </etc/dovecot/private/STAR.itronic.at.pem ssl_cipher_list = ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA:AES256-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-RSA-CAMELLIA256-SHA:CAMELLIA128-SHA:CAMELLIA256-SHA:ECDHE-RSA-DES-CBC3-SHA:DES-CBC3-SHA ssl_dh_parameters_length = 2048 ssl_key = </etc/dovecot/private/STAR.itronic.at.pem ssl_options = no_compression ssl_prefer_server_ciphers = yes ssl_protocols = !SSLv2 !SSLv3 submission_host = 172.22.14.198 syslog_facility = local0 userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } valid_chroot_dirs = /srv/storage1/vmail verbose_proctitle = yes protocol imap { mail_max_userip_connections = 20 mail_plugins = zlib lazy_expunge stats imap_stats quota imap_quota acl imap_acl last_login } protocol lda { mail_plugins = zlib lazy_expunge stats acl sieve quota } protocol lmtp { mail_plugins = zlib lazy_expunge stats acl sieve quota } protocol sieve { mail_max_userip_connections = 10 managesieve_max_compile_errors = 5 managesieve_max_line_length = 65536 } protocol pop3 { mail_max_userip_connections = 10 mail_plugins = zlib lazy_expunge stats acl last_login } strace: open("/srv/storage1/vmail/itronic/7/mdbox/storage/m.4184", O_RDWR) = 22 fstat(22, {st_mode=S_IFREG|0644, st_size=38285, ...}) = 0 pread(22, "2 M1e C577baa0d\n\1\2N 000"..., 8192, 0) = 8192 flock(22, LOCK_EX|LOCK_NB) = 0 stat("/srv/storage1/vmail/itronic/7/mdbox/storage/m.4184", {st_mode=S_IFREG|0644, st_size=38285, ...}) = 0 fstat(22, {st_mode=S_IFREG|0644, st_size=38285, ...}) = 0 fstat(22, {st_mode=S_IFREG|0644, st_size=38285, ...}) = 0 pread(19, "\1\2N 0000000000000BE3\n\37\213"..., 8192, 1889547) = 8192 pwrite(22, "\1\2N 0000000000000BE3\n\37\213"..., 3073, 38285) = 3073 .... pread(19, "\1\2N 00000000000003CA\n\37\213"..., 8192, 2095957) = 1078 pwrite(22, "\n\1\3\nZ1510\nR532d6d69\nV1574\nGc74fb"..., 1094, 244601) = 1094 pwrite(21, "\n\1\3\nZ62903b\nR576a94d0\nV63ea34\nG9"..., 632, 2094401) = 632 fdatasync(21) = 0 pwrite(20, "\n\1\3\nZ44ef\nR523ab092\nV467e\nG524f7"..., 94, 2095470) = 94 fdatasync(20) = 0 pwrite(22, "\n\1\3\nZ73b\nR570f7b1b\nV790\nGa658d91"..., 78, 245695) = 78 fdatasync(22) = 0 stat("/srv/storage1/vmail/itronic/7/mdbox/storage/dovecot.map.index.log.2", {st_mode=S_IFREG|0644, st_size=37848, ...}) = 0 alarm(180) = 0 fcntl(17, F_SETLKW, {type=F_WRLCK, whence=SEEK_SET, start=0, len=0}) = 0 alarm(0) = 180 stat("/srv/storage1/vmail/itronic/7/mdbox/storage/dovecot.map.index.log", {st_mode=S_IFREG|0644, st_size=5160, ...}) = 0 fstat(17, {st_mode=S_IFREG|0644, st_size=5160, ...}) = 0 write(2, "doveadm(lord(a)itronic.at): Panic:"..., 72doveadm(lord(a)itronic.at): Panic: file mdbox-map.c: line 1359: unreached ) = 72 open("/usr/lib/dovecot/libgcc_s.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 23 fstat(23, {st_mode=S_IFREG|0644, st_size=17246, ...}) = 0 mmap(NULL, 17246, PROT_READ, MAP_PRIVATE, 23, 0) = 0x7f0033cca000 close(23) = 0 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory) open("/lib/x86_64-linux-gnu/libgcc_s.so.1", O_RDONLY|O_CLOEXEC) = 23 read(23, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\260*\0\0\0\0\0\0"..., 832) = 832 fstat(23, {st_mode=S_IFREG|0644, st_size=90096, ...}) = 0 mmap(NULL, 2185952, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 23, 0) = 0x7f002ed5b000 mprotect(0x7f002ed71000, 2093056, PROT_NONE) = 0 mmap(0x7f002ef70000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 23, 0x15000) = 0x7f002ef70000 close(23) = 0 munmap(0x7f0033cca000, 17246) = 0 futex(0x7f0032d9e190, FUTEX_WAKE_PRIVATE, 2147483647) = 0 futex(0x7f002ef70850, FUTEX_WAKE_PRIVATE, 2147483647) = 0 write(2, "doveadm(lord(a)itronic.at): Error:"..., 860doveadm(lord(a)itronic.at): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x8dc6e) [0x7f0032e2dc6e] -> /usr/lib/dovecot/libdovecot.so.0(+0x8dce8) [0x7f0032e2dce8] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f0032dcc02e] -> /usr/lib/dovecot/libdovecot-storage.so.0(mdbox_map_append_move+0x1ed) [0x7f003310cc0d] -> /usr/lib/dovecot/libdovecot-storage.so.0(mdbox_purge+0xfe3) [0x7f003310e103] -> doveadm(+0x29458) [0x7f0033a89458] -> doveadm(+0x2910f) [0x7f0033a8910f] -> doveadm(+0x29db4) [0x7f0033a89db4] -> doveadm(doveadm_cmd_ver2_to_mail_cmd_wrapper+0x278) [0x7f0033a8aae8] -> doveadm(doveadm_cmd_run_ver2+0x560) [0x7f0033a98fd0] -> doveadm(doveadm_cmd_try_run_ver2+0x37) [0x7f0033a99027] -> doveadm(main+0x1e4) [0x7f0033a7a414] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf5) [0x7f0032a16b45] -> doveadm(+0x1a7ee) [0x7f0033a7a7ee] ) = 860 rt_sigprocmask(SIG_UNBLOCK, [ABRT], NULL, 8) = 0 tgkill(5682, 5682, SIGABRT) = 0 --- SIGABRT {si_signo=SIGABRT, si_code=SI_TKILL, si_pid=5682, si_uid=0} --- +++ killed by SIGABRT +++ [1] 5679 abort strace doveadm purge -A -- Harald Leithner ITronic Wiedner Hauptstraße 120/5.1, 1050 Wien, Austria Tel: +43-1-545 0 604 Mobil: +43-699-123 78 4 78 Mail: leithner(a)itronic.at | itronic.at

2 2

Automatic purging of old email in all mailboxes
by Scott W. Sander 30 Aug '16

30 Aug '16

I am using a postfix + Dovecot server as a test mail server for which some applications in our test environment use as a target to deliver email so that our real endusers don't receive messages from our test servers. A few of the mailboxes in Dovecot receive hundreds of emails per day. I'd like to automatically remove all emails in all mailboxes and mailbox folders that were received more than 90 days prior to the received date. As I'm a novice Dovecot administrator, I'm not exactly sure what the best way to accomplish this is, but I've started looking at the "doveadm expunge" command. I figure I could create a cron job that calls this command with the -A switch and that has a search query that finds all emails older than 90 days. I'm aware that I can test my query by using the "doveadm search" command. The problem is that when I do any sort of search query with that command (e.g. "doveadm search -A NEW"), I receive the following error messages: Error: User listing returned failure doveadm: Error: Failed to iterate through some users I've searched for help with this error, but most of the guidance I'm seeing refers to making sure that dovecot-sql is configured correctly; however, I'm using "passwd-file" for the passdb and not a true database. Here is doveconf -n: ------- # 2.2.22 (fe789d2): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.13 (7b14904) # OS: Linux 4.4.0-34-generic x86_64 Ubuntu 16.04.1 LTS ext4 auth_mechanisms = plain login hostname = mail.domain.test info_log_path = /var/log/dovecot.log log_path = /var/log/dovecot.log mail_location = maildir:/var/mail/vhosts/%d/%n namespace inbox { inbox = yes location = mailbox "Deleted Items" { special_use = \Trash } mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox "Junk E-Mail" { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Items" { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = scheme=PLAIN username_format=%u /etc/dovecot/dovecot-users driver = passwd-file } protocols = " imap lmtp pop3" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } } service imap-login { inet_listener imaps { port = 993 ssl = yes } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service pop3-login { inet_listener pop3s { port = 995 ssl = yes } } ssl = required ssl_cert = </etc/ssl/certs/appserver4_combined.pem ssl_key = </etc/ssl/private/appserver4_key.pem userdb { args = uid=vmail gid=vmail home=/var/mail/vhosts/%d/%n driver = static } ------- Thank you in advance!

6 7

Sub addressing delimiters
by Kurt Fitzner 30 Aug '16

30 Aug '16

Hello, There is a disconnect between the way Postfix handles recipient_delimiter and the way Dovecot handles it. For Postfix, it is a set of delimiters that can each individually be used to separate the address from the . In Dovecot, having multiple characters in recipient_delimiters simply makes it a multi-character single delimiter. For my purposes, the Postfix method is much more versatile. Extra delimiters can be added without breaking the way users currently have delimiters. I am wondering what the odds are of reconciling the two approaches, hopefully in favour of the Postfix one. Failing a switch to the other behaviour, is it possible to add the Postfix method as an option? Would a patch for either of these be accepted? Thanks, Kurt Fitzner

5 5

Last Login Plugin with mysql
by Adrian M 30 Aug '16

30 Aug '16

Hello, is it possible to use Last Login Plugin with mysql instead of redis ? http://wiki2.dovecot.org/Plugins/LastLogin .-- Best regards, Adrian Minta

2 2

Move dovecot between servers
by Gandalf Corvotempesta 30 Aug '16

30 Aug '16

Hi to all I have a very old dovecot server (1.2.15) with about 195GB used and 1081 email accounts. I have to move this server to another one with contextual dovecot upgrade. Anyone did this before? Any advice? Obviously, existing emails *must not* be downloaded twice by existing clients (outlook, thunderbird, ...) I have no access to customer's clients, only to my server.

2 2

2.2.25 dumps core with "Panic: file imap-client.c: line 837 (client_check_command_hangs): assertion failed: (client->io != NULL)"
by Piper Andreas 30 Aug '16

30 Aug '16

Hello, Dovecot 2.2.25 OS: Solaris 11 (SunOS 5.11 11.3 i86pc i386 i86pc) Virtualization: VMware Filesystem: ZFS active users: ~4000 About once a day Dovecot crashes with "Panic: file imap-client.c: line 837 (client_check_command_hangs): assertion failed: (client->io != NULL)" The log shows in each case: Aug 29 12:59:00 surz113 dovecot: [ID 583609 mail.crit] imap(username): Panic: file imap-client.c: line 837 (client_check_command_hangs): assertion failed: (client->io != NULL) Aug 29 12:59:00 surz113 dovecot: [ID 583609 mail.error] imap(username): Error: Raw backtrace: 0xffff80ffb6f3d88d -> 0xffff80ffb6f6ae82 -> 0x41eba0 -> 0x41ecf3 -> 0xffff80ffb6f5d248 -> 0xffff80ffb6f50d2f -> 0xffff80ffb6f519e0 -> 0xffff80ffb6f50dce -> 0xffff80ffb6f50f90 -> 0xffff80ffb6ee3ebb -> 0x42f169 -> 0x41292c Aug 29 12:59:00 surz113 dovecot: [ID 583609 mail.crit] imap(username): Fatal: master: service(imap): child 1461 killed with signal 6 (core not dumped - set service imap { drop_priv_before_exec=yes }) It happens with different users, all with mailbox-sizes of 9 to 17 GByte. The server stops completely for all users with this Panic and is then restarted automatically from Solaris Service Management. Find attached the output of 'doveconf -n'. Please let me know, if you need any more infos. Thanks for any help on this issue, Andreas, postmaster(a)uni-marburg.de

3 3

Re: Automatic purging of old email in all mailboxes
by Joseph Tam 30 Aug '16

30 Aug '16

"Scott W. Sander" <scottwsx96(a)gmail.com> writes: > A few of the mailboxes in Dovecot receive hundreds of emails per day. I'd > like to automatically remove all emails in all mailboxes and mailbox > folders that were received more than 90 days prior to the received date. > As I'm a novice Dovecot administrator, I'm not exactly sure what the best > way to accomplish this is, but I've started looking at the "doveadm > expunge" command. I figure I could create a cron job that calls this > command with the -A switch and that has a search query that finds all > emails older than 90 days. That more of less what I do. doveadm expunge -A mailbox INBOX savedbefore 7d > Error: User listing returned failure > doveadm: Error: Failed to iterate through some users I think this may be avoided (or made into warnings) if you bracket all user UID ranges with first_valid_uid = {first user uid} last_valid_uid = {last user uid} Sean Greenslade <sean(a)seangreenslade.com> then writes: > Since you're using maildirs as the storage backend, it might be easier > to just write a small script in the language of your preference (bash, > python, perl, etc.) that walks the directory tree and deletes files > based on their mtime. The downside is that the Dovecot caches will be out of date. Perhaps follow this up with a "doveadm index ..." operation. Joseph Tam <jtam.home(a)gmail.com>

3 2

Re: maildirsize not correct
by Aki Tuomi 29 Aug '16

29 Aug '16

Does it work if you do? ---Aki TuomiDovecot oy -------- Original message --------From: Kamil Madac <kamil.madac(a)gmail.com> Date: 26/08/2016 20:51 (GMT+02:00) To: Aki Tuomi <aki.tuomi(a)dovecot.fi> Cc: dovecot(a)dovecot.org Subject: Re: maildirsize not correct Hi Aki, No I do not use it. On Thu, Aug 25, 2016 at 7:32 AM, Aki Tuomi <aki.tuomi(a)dovecot.fi> wrote: Are you using quota_vsizes=yes? Aki On 24.08.2016 21:39, Kamil Madac wrote: > Thanks, but this is most probably different issue. My maildirsize is > computed incorrectly even if I delete it completely and let dovead > recompute it so expunging is not in the game. > > Is there any way how to track/debug the recomputation algorithm in dovecot? > > On Wed, Aug 24, 2016 at 12:02 AM, WJCarpenter <bill-dovecot(a)carpenter.org> > wrote: > >> A long shot, but here's how I experienced similar symptoms: >> http://www.dovecot.org/list/dovecot/2016-April/104091.html >> >> >> >> Kamil Madac wrote on 08/23/2016 02:02 PM: >> >>> Hi, >>> >>> One of my email accounts has 1,5gb of emails in INBOX, but maildirsize >>> shows only 528mb. 'du' also shows 1,5gb and there are 3809 files in cur >>> directory. >>> >>> When I use mailbox status a can see correct values: >>> >>> doveadm -f table mailbox status -u user(a)domain.sk "messages vsize" INBOX* >>> messages >>> vsize >>> >>> INBOX 3809 1521049349 >>> >>> but when I check the quotas with doveadm: >>> >>> doveadm quota get -u user(a)domain.sk >>> Quota name Type Value >>> Limit >>> % >>> User quota STORAGE 541391 >>> 2048000 >>> 26 >>> User quota MESSAGE 886 >>> - >>> 0 >>> >>> I tried to delete maildirsize, but it was recalculated again incorrectly. >>> >>> 2097152000S >>> 554384829 886 >>> >>> Dovecot version is 2.2.9 installed from packages on Ubuntu 14.04 >>> I have other accounts on server which are have no problems with >>> maildirsize >>> and quotas. Does anyone have same experience? >>> >>> Kamil >>> > -- Kamil Madac

2 1

sieve-filter with duplicate-extension
by hendrik＠luecke-tieke.de 26 Aug '16

26 Aug '16

Hi, i have imported a mailbox twice (accentially). Now i thought, it might be a valid approach to simply use a custom sieve rule to mark duplicates using the attached ruleset I ran sieve-filter like this: ~# sieve-filter -e -W -v -C -u userxyz(a)example.com /var/vmail/example.com/userxyz/sieve/duplicates.sieve 'INBOX' But sieve-filter complains like this: info: msgid=<1231321313212312312312(a)p3enginer2.emv2.com>: left message in mailbox 'INBOX'. info: message kept in source mailbox. info: filtering: [Sun, 1 May 2011 16:41:46 +0100; 101297 bytes] `Cipo & Baxx, Nike Golf, Strenesse, al...'. roundcube2: line 3: warning: duplicate test: duplicate checking not available in this context. info: msgid=<1123123123123123(a)p3enginer3.emv2.com>: left message in mailbox 'INBOX'. info: message kept in source mailbox. info: filtering: [Sun, 28 Oct 2012 11:32:56 +0100; 1416 bytes] `DenyHosts Report for example.com'. roundcube2: line 3: warning: duplicate test: duplicate checking not available in this context. Is there a way, to refilter an existing mailbox and applying the duplicate extension? Many thanks and best regards, Hendrik

2 1

quota-status service rejecting plus addressed recipients
by Robert Brooks 26 Aug '16

26 Aug '16

Hi, I have "recipient_delimiter = +" set in my Dovecot config, however the Dovecot quota-status service is rejecting with "Unknown user" plus addressed recipients. Talking to the policy server we have... # telnet localhost 12340 > Trying 127.0.0.1... > Connected to localhost. > Escape character is '^]'. > recipient=user(a)example.com > > action=OK > > recipient=user+foo(a)example.com > > action=REJECT Unknown user > I can mask the issue with "quota_status_nouser = DUNNO", but then over quota messages are not rejected when plus addressed. quota-status service config is... service quota-status { > executable = quota-status -p postfix > inet_listener { > address = localhost > port = 12340 > # You can choose any port you want > } > client_limit = 1 > } > Regards, Rob

1 0

maildirsize not correct
by Kamil Madac 26 Aug '16

26 Aug '16

Hi, One of my email accounts has 1,5gb of emails in INBOX, but maildirsize shows only 528mb. 'du' also shows 1,5gb and there are 3809 files in cur directory. When I use mailbox status a can see correct values: doveadm -f table mailbox status -u user(a)domain.sk "messages vsize" INBOX* messages vsize INBOX 3809 1521049349 but when I check the quotas with doveadm: doveadm quota get -u user(a)domain.sk Quota name Type Value Limit % User quota STORAGE 541391 2048000 26 User quota MESSAGE 886 - 0 I tried to delete maildirsize, but it was recalculated again incorrectly. 2097152000S 554384829 886 Dovecot version is 2.2.9 installed from packages on Ubuntu 14.04 I have other accounts on server which are have no problems with maildirsize and quotas. Does anyone have same experience? Kamil

3 4

Help setting up IMAP account in Outlook 2016
by Spiro Angeli 26 Aug '16

26 Aug '16

Hi, I need help setting up properly mail clients for my email accounts running on dovecot ver 2.2.18 on CentOS release 6.8 (Final) in italian. I posted a forum thread where you can get all detail info: this for better reading. Forum thread subject: Help setting up IMAP account in Outlook 2016 Forum link: http://www.emailquestions.com/threads/help-setting-up-imap-account-in-outloo k-2016.13439 I was advised to " ask dovecot list for help with the IMAP server. " Thank you, Spiro

2 2

lazy_expunge and public folder
by Arne Hoffmann 26 Aug '16

26 Aug '16

Hi all, I stumbled upon the lazy_expunge plugin and thought that it might be useful in some cases. It works fine if I delete mails from my inbox. But it doesn't do anything if I deleted mails from a public folder (and for the server I am currently working on the public folder is _the_ _main_ _feature_). Does lazy_expunge not work with public folders? Or am I using it wrong? root@imap01 [~]# doveconf -n # 2.2.24 (a82c823): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.13 (7b14904) # OS: Linux 3.16.0-4-amd64 x86_64 Debian 8.5 ext4 auth_debug = yes auth_debug_passwords = yes debug_log_path = /var/log/mail.debug disable_plaintext_auth = no doveadm_password = # hidden, use -P to show it doveadm_port = 22001 mail_debug = yes mail_location = maildir:/var/mail/vmail/%d/%n/Maildir:INBOX=/var/mail/vmail/%d/%n/Maildir mail_plugins = " listescape lazy_expunge notify replication" mail_privileged_group = vmail namespace { location = maildir:/var/mail/vmail/Öffentliche Ordner:INDEXPVT=~/Maildir/Öffentliche Ordner mailbox "Gelöschte Elemente" { auto = subscribe special_use = \Trash } mailbox MirrorServer-Projekt { auto = subscribe } prefix = Öffentliche Ordner/ separator = / subscriptions = no type = public } namespace { hidden = yes list = no location = maildir:~/Maildir/expunged prefix = .EXPUNGED/ separator = / } namespace inbox { inbox = yes location = prefix = separator = / type = private } passdb { args = /etc/dovecot/mysql.conf driver = sql } plugin { lazy_expunge = .EXPUNGED/ mail_replica = tcps:imap02.example.com } protocols = imap service aggregator { fifo_listener replication-notify-fifo { user = vmail } unix_listener replication-notify { user = vmail } } service doveadm { inet_listener { port = 22001 ssl = yes } } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { group = vmail mode = 0660 } } ssl = required ssl_ca = </etc/ssl/os/cert-sub-ca1-and-root-ca.pem ssl_cert = </etc/ssl/os/cert-imap01-example.com.pem ssl_client_ca_file = /etc/ssl/os/cert-all.pem ssl_client_cert = </etc/ssl/os/cert-imap01-example.com.pem ssl_client_key = </etc/ssl/os/key-imap01-example.com.pem ssl_key = </etc/ssl/os/key-imap01-example.com.pem ssl_require_crl = no userdb { args = /etc/dovecot/mysql.conf driver = sql } root@imap01 [~]#

1 0