- dovecot - dovecot.org

Bug Report - Crash on imap with core dump - Alternate storage related
by Daniel van Ham Colchete 12 May '16

12 May '16

I would like to report a bug we are seeing on an new deployment here: Linux: Debian Jessie, inside a Docker container Dovecot version: 2.2.23 (806d709) / 2.2.23-1~bpo8+1 doveconf -n: http://pastebin.com/2xA2xuRw Filesystem: CephFS - Jewel After migrating our users from our old server to our new one we can't access a few mailboxes. Backtrace follows: root@dovecot:/# gdb --args /usr/lib/dovecot/imap -u daniel.colchete(a)mav.com.br GNU gdb (Debian 7.7.1+dfsg-5) 7.7.1 Copyright (C) 2014 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html > This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-linux-gnu". Type "show configuration" for configuration details. For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>. Find the GDB manual and other documentation resources online at: <http://www.gnu.org/software/gdb/documentation/>. For help, type "help". Type "apropos word" to search for commands related to "word"... Reading symbols from /usr/lib/dovecot/imap...Reading symbols from /usr/lib/debug/.build-id/e2/488f839ac2b10504ef74b1b2f2146891ca2f62.debug...done. done. (gdb) run Starting program: /usr/lib/dovecot/imap -u daniel.colchete(a)mav.com.br * PREAUTH [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS BINARY MOVE SPECIAL-USE QUOTA] Logged in as daniel.colchete(a)mav.com.br a select INBOX Program received signal SIGSEGV, Segmentation fault. strrchr () at ../sysdeps/x86_64/strrchr.S:32 32 ../sysdeps/x86_64/strrchr.S: No such file or directory. (gdb) where #0 strrchr () at ../sysdeps/x86_64/strrchr.S:32 #1 0x00007ffff7b0a261 in sdbox_file_move (file=file@entry=0x5555557e6530, alt_path=alt_path@entry=true) at sdbox-file.c:312 #2 0x00007ffff7b0cd11 in dbox_sync_file_move_if_needed (type=SDBOX_SYNC_ENTRY_TYPE_MOVE_TO_ALT, file=0x5555557e6530) at sdbox-sync.c:30 #3 sdbox_sync_file (type=SDBOX_SYNC_ENTRY_TYPE_MOVE_TO_ALT, uid=13120, seq=819, ctx=0x5555557e32e0) at sdbox-sync.c:58 #4 sdbox_sync_add (sync_rec=0x7fffffffe570, ctx=0x5555557e32e0) at sdbox-sync.c:96 #5 sdbox_sync_index (ctx=0x5555557e32e0) at sdbox-sync.c:131 #6 sdbox_sync_begin (mbox=mbox@entry=0x5555557ce500, flags=flags@entry=(unknown: 0), ctx_r=ctx_r@entry=0x7fffffffe680) at sdbox-sync.c:234 #7 0x00007ffff7b0d07d in sdbox_sync (mbox=mbox@entry=0x5555557ce500, flags=flags@entry=(unknown: 0)) at sdbox-sync.c:297 #8 0x00007ffff7b0d108 in sdbox_storage_sync_init (box=0x5555557ce500, flags=(MAILBOX_SYNC_FLAG_FULL_READ | MAILBOX_SYNC_FLAG_FIX_INCONSISTENT)) at sdbox-sync.c:323 #9 0x00007ffff7aea85b in mailbox_sync_init (box=0x5555557ce500, flags=(MAILBOX_SYNC_FLAG_FULL_READ | MAILBOX_SYNC_FLAG_FIX_INCONSISTENT)) at mail-storage.c:1664 #10 0x00007ffff7aea9a7 in mailbox_sync (box=<optimized out>, flags=<optimized out>, flags@entry=MAILBOX_SYNC_FLAG_FULL_READ) at mail-storage.c:1712 #11 0x0000555555568fa0 in select_open (readonly=false, mailbox=<optimized out>, ctx=0x5555557c9928) at cmd-select.c:303 #12 cmd_select_full (cmd=<optimized out>, readonly=<optimized out>) at cmd-select.c:426 #13 0x000055555556fdbd in command_exec (cmd=cmd@entry=0x5555557c9800) at imap-commands.c:180 #14 0x000055555556e182 in client_command_input (cmd=cmd@entry=0x5555557c9800) at imap-client.c:958 #15 0x000055555556e210 in client_command_input (cmd=0x5555557c9800) at imap-client.c:1018 #16 0x000055555556e5d5 in client_handle_next_command (remove_io_r=<synthetic pointer>, client=0x5555557c8c00) at imap-client.c:1058 #17 client_handle_input (client=0x5555557c8c00) at imap-client.c:1070 #18 0x000055555556ead5 in client_input (client=0x5555557c8c00) at imap-client.c:1117 #19 0x00007ffff7837c3c in io_loop_call_io (io=0x5555557c96f0) at ioloop.c:564 #20 0x00007ffff78390a1 in io_loop_handler_run_internal (ioloop=ioloop@entry=0x5555557966e0) at ioloop-epoll.c:220 #21 0x00007ffff7837cc5 in io_loop_handler_run (ioloop=ioloop@entry=0x5555557966e0) at ioloop.c:612 #22 0x00007ffff7837e68 in io_loop_run (ioloop=0x5555557966e0) at ioloop.c:588 #23 0x00007ffff77ce0e3 in master_service_run (service=0x555555796580, callback=<optimized out>) at master-service.c:640 #24 0x0000555555561ab2 in main (argc=3, argv=0x555555796390) at main.c:454 (gdb) One important info is that I used to use Alternate Storage on the older servers, but the not on the new one. Code seems to be trying to move a message to an alternate storage that doesn't exist. doveadm dump dovecot.index will show that we still have the ALTERNATE_STORAGE flag set: root@dovecot:/srv/dovecot/mail/ mav.com.br/daniel.colchete/mailboxes/INBOX/dbox-Mails# doveadm dump dovecot.index|grep RECORD|head -- RECORDS: 932 RECORD: seq=1, uid=9393, flags=0x49 (Seen Answered) RECORD: seq=2, uid=9442, flags=0x40 RECORD: seq=3, uid=10253, flags=0x48 (Seen) RECORD: seq=4, uid=10268, flags=0x48 (Seen) RECORD: seq=5, uid=10283, flags=0x48 (Seen) RECORD: seq=6, uid=10309, flags=0x48 (Seen) RECORD: seq=7, uid=10311, flags=0x40 RECORD: seq=8, uid=10324, flags=0x49 (Seen Answered) RECORD: seq=9, uid=10330, flags=0x48 (Seen) Thank you very much. Best, Daniel Colchete

2 4

Dovecot + libsodium
by Andreas Meyer 12 May '16

12 May '16

Hi, Thank you very much for creating and maintaining dovecot! In my scenario, I want to use the password hash algorithms provided by libsodium: https://download.libsodium.org/doc/ So my difficulty is to have dovecot support libsodium's hash algorithms, particularly: crypto_pwhash_scryptsalsa208sha256_str On the sodium maillinglist I asked for help and received an adjusted dovecot code, which exactly does what I need. You find it here: https://github.com/jedisct1/core/tree/scrypt-argon2 Obviously I need to apply these changes everytime I upgrade to a new dovecot version now. So my question ist, what do I need to do so that you will include libsodium support in future versions of dovecot? Thank you very much for your attention, Andreas

3 3

Automatic packages for Dovecot v2.3
by Stephan Bosch 11 May '16

11 May '16

Hi, The Xi repository for v2.3 is now public. The information is updated here: http://wiki2.dovecot.org/PrebuiltBinaries#Automatically_Built_Packages Xi now modifies the version string in the Dovecot sources. This way `dovecot -n` output includes the Xi package version. This is currently only true for the v2.3 packages though. I am still testing a new v2.2 builder that follows both the master and latest release branch. Packages from the release branch are published in a separate repository, so that a more stable package stream is obtained; it is only updated when the developers start working on making a release. The intermittent beta or rc release tags on that release branch are recognized and reflected in the package versions. If a new release branch is detected, the the development packages for the master branch get an alpha version with a lower version digit that is one higher than the upcoming release. For example, when a release-2.2.25 branch is created, packages from the master branch will get version 2.2.26~alpha0-1 in anticipation of the next release in this series. Packages from the release branch will have version 2.2.25~beta0-1 until the first release tag is seen. Regards, Stephan.

2 1

Undeletable mailboxes
by thomas.hofmann＠post.ch 11 May '16

11 May '16

Hi I have to maintain a dovcot installation where users may access there mails through IMAPS and/or via self-developed portal. >From time to time users complain about mailboxes showing up they have deleted bevor. The only way to get these mailboxes away is to do a backup of the user and delete dovecot home of the user and do a selective restore. hostname:~ # doveadm mailbox list -u $u -s 'INBOX/01_OHO/*' hostname:~ # doveadm mailbox list -u $u 'INBOX/01_OHO/*' INBOX/01_OHO/02_Orchestermatinée 10.01.16 hostname:~ # doveadm mailbox delete -u $u 'INBOX/01_OHO/02_Orchestermatinée 10.01.16' doveadm(username(a)domain.com): Info: Mailbox deleted: INBOX/01_OHO/02_Orchestermatinée 10.01.16 hostname:~ # doveadm mailbox list -u $u 'INBOX/01_OHO/*' INBOX/01_OHO/02_Orchestermatinée 10.01.16 hostname:~ # doveadm -v purge -u $u hostname:~ # doveadm mailbox list -u $u 'INBOX/01_OHO/*' INBOX/01_OHO/02_Orchestermatinée 10.01.16 hostname:~ # doveadm mailbox metadata list -u $u 'INBOX/01_OHO/02_Orchestermatinée 10.01.16' doveadm(username(a)domain.com): Error: Failed to open mailbox: Mailbox doesn't exist: INBOX/01_OHO/02_Orchestermatinée 10.01.16 hostname:~ # hostname:~ # dovecot --version 2.2.21 (5345f22) hostname:~ # Is there another (simpler) way to rid of these "deleted" mailboxes? Thanks for any help! Regards Thom

1 0

ACLs over imapc
by abi＠oleane.net 10 May '16

10 May '16

hello i've struggled various times trying to setup shared mailboxes to no avail. the same setup with local file access works imapc seems to work with generic shared mailboxes nevertheless, i never managed to get a working setup with both user-defined acls and imapc has anyone been successful in doing so ? is this supposed to work ? i've been experimenting with dovecot 2.2.9 and 2.2.22 and never saw any imap acl commands issued by the builtin imap client. thanks abi(a)oleane.net

1 0

Mailbox doesn't exist response
by Cornelius Charlie 10 May '16

10 May '16

Hello, Using the latest dovecot version, selecting a non-existing mailbox with non printable characters encoded in utf7, the mailbox doesn't exist response contains the folder name encoded in utf8. Is that legal regarding the rfc ? If yes, how the client can be aware of the used encoding ? Thanks.

2 1

Workaround for rcpt suffix
by Robban 10 May '16

10 May '16

Hi all! I'm stuck again, let me start with explaining my setup. The PassDB and UserDB is LDAP (FreeIPA) and I'm using ldap mail attribute to search after the recipient so one user can have multiple mail aliases. So far so good. Next is to have an catchall(a)domain.tld, that is done via an static userdb backend (I know you are strongly against catchall adresses), and they are delivered to public folders (${mail_location}/domain.tld). I also use address extension so sort a mail to correct folder (+ sign). Now I need to fix so mail to <mail attr>-sievetest is handled by the user assigned to <mail attr>, is this somehow possible? //Robban

2 1

resorting emails by date order after move/copy to sub folder ?
by voytek＠sbt.net.au 10 May '16

10 May '16

I have just used Squirrel web client to re organize some old emails to subfolders. that worked OK, EXCEPT, all these emails are now in order that I have moved them rather than original date, is that some 'simple' way to re-sort them back by original date ? thanks for any pointers, sorry for dumb question Voytek

2 2

more info about deleting users
by Matteo Gaito Test Account 09 May '16

09 May '16

Hi, i've search a lot in order to find a way to delete account by dovecot but i found only this way http://dovecot.org/list/dovecot/2011-November/079273.html It's possible today delete a maildir remotely with doveadm or with dovecot api? Thanks Matteo

6 8

Panic: file doveadm-mail.c: line 417 (doveadm_mail_single_user): assertion failed: (cctx->username != NULL)
by Daniel van Ham Colchete 08 May '16

08 May '16

Hello everyone! So, I'm trying to move away from a few older servers into new ones but I can't get dsync to work this time (the 2013 migration went perfectly). This is what I get: root@dovecot:/# dsync sync -u user(a)domain.org.br tcp:XXXX:12345 Panic: file doveadm-mail.c: line 417 (doveadm_mail_single_user): assertion failed: (cctx->username != NULL) Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x85dee) [0x7f500d3cddee] -> /usr/lib/dovecot/libdovecot.so.0(+0x85e68) [0x7f500d3cde68] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f500d3725be] -> dsync(+0x28d50) [0x55dcb11bad50] -> dsync(+0x28ded) [0x55dcb11baded] -> dsync(doveadm_mail_try_run+0x219) [0x55dcb11bb779] -> dsync(main+0x441) [0x55dcb11aba91] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf5) [0x7f500cfbeb45] -> dsync(+0x19c06) [0x55dcb11abc06] Aborted (core dumped) root@dovecot:/# doveconf -N is here: http://pastebin.ca/3594094 doveadm user '*" will list all the users correctly doveadm user user(a)domain.org.br will show all the user info correctly. Thank you very much! Best, Daniel Colchete

1 0

Is there a way to override Sieve's "not sending notification for auto-submitted message" behavior?
by deoren 07 May '16

07 May '16

Goal: 1) Setup a Google Calendar entry for a biweekly task 2) Configure the email notification schedule 3) When the email notification from Google arrives have Sieve send a notification to an alias I have setup for my cell provider's email to text messaging gateway 4) Receive text message I know there are other products which likely handle this better, but I'm specifically attempting to replicate old behavior by getting text message reminders when a specific Google Calendar event occurs. The problem I'm having is that Sieve is attempting to help by NOT sending a notification for emails that it finds are automatically generated. I didn't found a lot of information when I searched for additional details, but I didn't find an earlier message thread on this list that led me to believe that the default behavior is likely chosen as some sort of safety net to prevent common issues from occurring. What I would like to do is override this behavior at some level (per rule, per user, system-wide, whatever) to allow for Sieve notifications when emails matching a specific pattern are detected regardless of whether they are auto-generated or not. I already found mention in the documentation[1] that the editheader extension refuses to remove the Auto-Submitted header, so setting up a per user or global rule to do just that wouldn't help. I also haven't come upon a way to simply modify the value for the Auto-Submitted header, so that doesn't look to work in this situation either. Does anyone know of a way to accomplish this? Thanks in advance for your help! [1] http://wiki2.dovecot.org/Pigeonhole/Sieve/Extensions/Editheader

2 5

Re: Cannot connect to Dovecot IMAP or POP
by Joseph Tam 06 May '16

06 May '16

C. Andrews Lavarre writes: > Presumably, as Joseph shows with his nc call, imap calls are to ServerName mail.privustech.com. No, nc is just a dumb tool -- it knows nothing about IMAP or SSL. You didn't even get to the SSL handshake. Your problem has nothing to do with the interaction of client and server -- it's strictly a server problem. > ssl = required > ssl_cert = </etc/apache2/ssl.crt/mail.privustech.com_start.crt > ssl_key = </etc/apache2/ssl.key/mailprivustech.key > ssl_ca = </etc/apache2/ssl.crt/mailprivustech_root_bundle.crt ssl_ca is not analogous to Apache's SSLCertificateChainFile. I believe "ssl_ca" is used to validate clients (i.e. mutual authentication). You ought to concatenate your intermediate CA chain certificates and your public key into ssl_cert. See http://wiki2.dovecot.org/SSL/DovecotConfiguration Also, anything enlinghtening in the logs when ssl_verbose turned on? Joseph Tam <jtam.home(a)gmail.com>

1 0

Dovecot/Rainloop 2.0.13-1_129.el5
by Chris Smith 06 May '16

06 May '16

I configured Dovecot on our mail server under Centos 5.3 (I think) some while ago now (about 2 years) and, to the best of my knowledge,it had been working correctly all that time. However, one of the team wanted to use webmail while away from base and found that, although he could receive emails OK, he was unable to reply or send fresh emails. When he pressed Send he got a message “Authentication failed" in a pop-up box. He assured me that sending mail had been working and I was certain that I had tested that aspect when I was setting Dovecot up, at least for local mail. I tried to send email from my Dovecot account and had the same problem. Our MTA is sendmail and that is not configured to authenticate on outgoing mail, The configuration for sendmail hasn’t changed at least since the last update in 16 March 2015 (sendmail 8.13.8-10.el5_11). Dovecot uses php-5.5.5 in this set up. The relevant entry in /var/log/maillog when I attempt to send an email from Dovecot is: May 5 16:34:29 firewall dovecot: auth: Debug: auth client connected (pid=13001) May 5 16:34:29 firewall dovecot: auth: Debug: client in: AUTH 1 PLAIN service=imap secured lip=127.0.0.1 rip=127.0.0.1 lport=143 rport=51861 resp=AGNocmlzADB1dFkwdUcwNDkh May 5 16:34:29 firewall dovecot: auth: Debug: pam(chris,127.0.0.1): lookup service=dovecot May 5 16:34:29 firewall dovecot: auth: Debug: pam(chris,127.0.0.1): #1/1 style=1 msg=Password: May 5 16:34:29 firewall dovecot: auth: Debug: client out: OK 1 user=chris May 5 16:34:29 firewall dovecot: auth: Debug: master in: REQUEST 2607546369 13001 1 0bcf2e3a108cd9cd18eaff4b7de9c428 May 5 16:34:29 firewall dovecot: auth: Debug: passwd(chris,127.0.0.1): lookup May 5 16:34:29 firewall dovecot: auth: Debug: master out: USER 2607546369 chris system_groups_user=chris uid=514 gid=100 home=/home/chris May 5 16:34:29 firewall dovecot: imap-login: Login: user=<chris>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=13002, secured May 5 16:34:29 firewall dovecot: imap(chris): Disconnected: Logged out bytes=11/334 May 5 16:34:29 firewall sendmail[13003]: u45FYTtd013003: localhost.localdomain [127.0.0.1] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA The webmail server and our mail server are the same system. The firewall is open for port 143. It is only send from Dovecot that fails authentication, all other outgoing mail is sent correctly. Does anyone have any idea where else I can look for clues as to why there is this behaviour? Suplementary question: what does the “Sign me” check box on the webmail log in page do? Many thanks. Chris

3 2

Long delays when deleting a message in inbox
by Yves Goergen 05 May '16

05 May '16

Hi, Since recently, there's a long delay when deleting any message from my inbox folder. This affects deleting and moving messages, but only the inbox of a single mailbox. The delay is a few seconds. Other operations work instantly. The server is Ubuntu 14.04 running Dovecot version "1:2.2.9-1ubuntu2". The filesystem is local ext4. My MUA is Thunderbird on Windows, latest version, connecting with IMAP. What could be the cause for this extreme delay? Yves Goergen http://unclassified.software

3 4

Re: Cannot connect to Dovecot IMAP or POP
by Joseph Tam 05 May '16

05 May '16

> 2. openssl s_client -connect mail.privustech.com:xxx > a. xxx=25, 110, 143 all return > error:140770FC You need to add the "-starttls protocol" parameter, otherwise "openssl s_client" thinks your using SSL, not STARTTLS i.e. openssl s_client -starttls pop3 -connect mail.privustech.com:110 openssl s_client -starttls imap -connect mail.privustech.com:143 But even if you do that, you get the same error because it can't start the TLS session: $ nc mail.privustech.com 143 * OK [CAPABILITY IMAP4REV1 I18NLEVEL=1 LITERAL+ SASL-IR LOGIN-REFERRALS STARTTLS LOGINDISABLED AUTH=CRAM-MD5] privustech.com IMAP4rev1 2007e.404 at Wed, 4 May 2016 22:26:36 -0400 (EDT) x STARTTLS x NO Server certificate not installed So there you go, dovecot can't get at your server certificate. You can start the search of your problem from there. The configuration verbose_ssl = yes will help to log the problem. > ssl_dh_parameters_length = 2048 Probably not related to your problem, but this will cause wildly variable dovecot initialization times, as temp key generation of this length can result in a lot of candidate primailty testing. Joseph Tam <jtam.home(a)gmail.com>

2 1

Changing Password Schemes
by Carl A Jeptha 03 May '16

03 May '16

Good Day, I have been following this tutorial without much luck - http://wiki2.dovecot.org/HowTo/ConvertPasswordSchemes#CA-26af2b83a43b810052… It is obvious to me that I am not following the instructions correctly and need to be shown what I am misunderstanding. I have an old postfix + dovecot + Roundcube mailserver (mail.domain.Tld). Server clock is loosing time and adjusting it causes dovecot to kill itself, we cannot install more memory, bigger hard-drives, etc. I have built a new server box (mail2.domain.Tld) With Postfix + dovecot + Roundcube. This server is functioning, with a client's new domain, and my personal domain. it's password system is SHA512-CRYPT. I have imported the users from the old server over to the new server. I have created a new column "plain_pass" for the plain passwords. I will be using imapsync to transfer the mail folders from the one server to the other, but will not proceed until I fix this issue. # 2.2.18: /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.8 (0c4ae064f307+) # OS: Linux 4.2.0-35-generic x86_64 Ubuntu 15.10 ext4 auth_mechanisms = plain login first_valid_gid = 8 first_valid_uid = 150 last_valid_gid = 8 last_valid_uid = 150 listen = * mail_gid = mail mail_location = maildir:/var/vmail/%d/%n mail_uid = vmail namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { quota_grace = 10%% quota_rule = *:storage=1G quota_rule2 = Trash:storage=+100M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u } postmaster_address = postmaster(a)airnet.ca protocols = imap pop3 lmtp lmtp pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { group = mail mode = 0666 user = vmail } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service imap-postlogin { executable = script-login /usr/local/etc/popafter.sh user = $default_internal_user } service imap { executable = imap imap-postlogin } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service pop3-postlogin { executable = script-login /usr/local/etc/popafter.sh user = $default_internal_user } service pop3 { executable = pop3 pop3-postlogin } ssl_cert = </etc/ssl/certs/ssl-cert-snakeoil.pem ssl_cipher_list = ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA ssl_dh_parameters_length = 2048 ssl_key = </etc/ssl/private/ssl-cert-snakeoil.key ssl_prefer_server_ciphers = yes ssl_protocols = !SSLv2 !SSLv3 userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } -- ------------ You have a good day now, en mag jou môre ook so wees, Carl A Jeptha

9 35

Director ignores nologin, reason etc.
by Tom Sommer 03 May '16

03 May '16

I want my director to do all authentication, but it ignores the nologin and reason etc. fields returned by my director password_query I have my director password_query returning proxy=y, password=X, master=XXXX, pass=XXXX It works fine, but even if nologin is Y and 'reason' is set, the user still gets proxied to the backend and gets to login? -- Tom

1 0

Re: %{domain} (or %d) is empty
by Robban 02 May '16

02 May '16

Hi again! I manage to solve this by removing the option auth_username_translation. The reason I wanted to have auth_username_translation was to be able to let sieve handle <mail-attribute><auth_username_translation><extension> Is this possible with other configuration options? //Robban ----- Forwarded message from Robban <dovecot(a)netnerdz.se> ----- Date: Mon, 2 May 2016 20:15:48 +0200 From: Robban <dovecot(a)netnerdz.se> To: dovecot(a)dovecot.org Subject: %{domain} (or %d) is empty User-Agent: Mutt/1.5.21 (2010-09-15) Hi all! I have two userdb's, for one of them it's ldap based and the 2nd one is static. I want mail to ldap-users to be saved in /home/vmail/<username>/Maildir So far so good. Now I want mail to non-existent users to be placed in /home/vmail/<domain.tld>/Maildir (notice the double-slashes that indicate that %d is empty): # doveadm user publicfolder(a)vendelso.se rs(a)netnerdz.se field value uid 500 gid 500 home /home/vmail// mail maildir:/home/vmail//Maildir/ uid vmail gid vmail home /home/vmail/rs mail maildir:/home/vmail/rs uidNumber 500 gidNumber 500 And here's my configuration files: # cat /etc/dovecot/dovecot-ldap.conf.ext hosts = 172.20.202.60 dn=uid=dovecot,cn=sysaccounts,cn=etc,dc=netnerdz,dc=se dnpass=<suppressed> auth_bind = yes auth_bind_userdn = uid=%u,cn=users,cn=accounts,dc=netnerdz,dc=se ldap_version = 3 base = cn=accounts,dc=netnerdz,dc=se deref = never scope = subtree user_filter = (&(objectClass=posixAccount)(mail=%u@*)) user_attrs = \ =user=%{ldap:uid}, \ =home=/home/vmail/%{ldap:uid}, \ =mail=maildir:/home/vmail/%{ldap:uid}, \ =uidNumber=500, \ =gidNumber=500 pass_filter = (&(objectClass=posixAccount)(mail=%u@*)) pass_attrs = uid=user,userPassword=password # dovecot -n # 2.2.10: /etc/dovecot/dovecot.conf # OS: Linux 3.10.0-327.10.1.el7.x86_64 x86_64 CentOS Linux release 7.2.1511 (Core) auth_mechanisms = login gssapi plain auth_socket_path = /var/run/dovecot/auth-userdb auth_username_format = %n auth_username_translation = -@.@/@_@ auth_verbose = yes base_dir = /var/run/dovecot/ imap_id_log = * imap_id_send = name imap_urlauth_host = * import_environment = TZ lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes lda_original_recipient_header = X-Original-To lmtp_save_to_detail_mailbox = yes login_greeting = IMAPd ready. login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c mail_access_groups = vmail mail_attachment_hash = %{sha256} mail_debug = yes mail_gid = vmail mail_location = maildir:~/Maildir mail_log_prefix = "%s(%u)::%n: " mail_plugins = acl virtual mail_privileged_group = vmail mail_shared_explicit_inbox = yes mail_uid = vmail mailbox_list_index = yes maildir_broken_filename_sizes = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mmap_disable = yes namespace NetnerdzSE { list = yes location = maildir:/home/vmail/netnerdz.se/:INDEX=/home/vmail/%u/public prefix = NetnerdzSE/ separator = / subscriptions = yes type = public } namespace Shared { list = children location = maildir:/home/vmail/%%n/Maildir/:INDEX=/home/vmail/%n/shared/%%u prefix = Shared/%%n/ separator = / subscriptions = yes type = shared } namespace VendelsöSE { list = yes location = maildir:/home/vmail/xn--vendels-g1a.se/:INDEX=/home/vmail/%u/public prefix = VendelsöSE/ separator = / subscriptions = yes type = public } namespace VendelsoSE { list = yes location = maildir:/home/vmail/vendelso.se/:INDEX=/home/vmail/%u/public prefix = VendelsoSE/ separator = / subscriptions = yes type = public } namespace inbox { hidden = no inbox = yes list = yes location = mailbox Archive { auto = subscribe special_use = \Archive } mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / subscriptions = yes type = private } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile:/home/vmail/dovecot-acl acl_shared_dict = file:/home/vmail/shared-mailboxes.db mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size sieve = /home/vmail/%u/dovecot.sieve sieve_default = /etc/dovecot/default.sieve sieve_default_name = roundcube sieve_dir = /home/vmail/%u/sieve sieve_global_dir = /etc/dovecot/sieve/global.sieve sieve_global_path = /etc/dovecot/sieve/global.sieve sieve_max_actions = 0 sieve_max_redirects = 4 sieve_max_script_size = 0 } postmaster_address = postmaster@%d protocols = imap lmtp sieve service auth-worker { user = root } service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } unix_listener auth-client { group = postfix mode = 0660 user = postfix } unix_listener auth-master { group = vmail mode = 0660 user = vmail } unix_listener auth-userdb { group = mode = 0666 user = } user = $default_internal_user } service dict { unix_listener dict { group = mail mode = 0600 user = mail } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } process_min_avail = 0 service_count = 1 vsz_limit = 256 M } service imap { process_limit = 1024 vsz_limit = 256 M } service lmtp { inet_listener lmtp { address = 127.0.0.1 port = 24 } unix_listener lmtp { mode = 0666 } } service managesieve-login { inet_listener sieve { port = 4190 } } ssl = required ssl_ca = </etc/dovecot/dovecot-ca.crt ssl_cert = </etc/dovecot/imap.netnerdz.se.crt ssl_client_ca_file = /etc/pki/tls/cert.pem ssl_key = </etc/dovecot/imap.netnerdz.se.key ssl_prefer_server_ciphers = yes submission_host = 127.0.0.1:25 userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } userdb { args = uid=500 gid=500 home=/home/vmail/%{domain}/ allow_all_users=yes driver = static override_fields = mail=maildir:/home/vmail/%d/Maildir/ result_failure = return-ok skip = found } valid_chroot_dirs = /home/vmail verbose_proctitle = yes protocol sieve { disable_plaintext_auth = yes info_log_path = /var/log/dovecot/dovecot-sieve.log log_path = /var/log/dovecot/dovecot-sieve-errors.log managesieve_implementation_string = dovecot managesieve_max_line_length = 65536 } protocol lda { auth_socket_path = /var/run/dovecot/auth-master info_log_path = /var/log/dovecot/dovecot-lda.log log_path = /var/log/dovecot/dovecot-lda-errors.log mail_plugins = acl virtual sieve postmaster_address = postmaster } protocol imap { mail_max_userip_connections = 10 mail_plugins = acl virtual imap_acl } protocol lmtp { info_log_path = /var/log/dovecot/dovecot-lmtp.log log_path = /var/log/dovecot/dovecot-lmtp-errors.log mail_plugins = acl virtual sieve postmaster_address = postmaster } -- Robert Soderlund ----- End forwarded message ----- -- Robert Soderlund

1 0

Sieve + Vacation
by Jerry 02 May '16

02 May '16

I am not sure if this is possible. When I use "vacation" in a sieve script, it always sends the response using "<>". I need it to send the response using a specific address. Is this possible? Thanks :) -- Jerry

4 4

%{domain} (or %d) is empty
by Robban 02 May '16

02 May '16

Hi all! I have two userdb's, for one of them it's ldap based and the 2nd one is static. I want mail to ldap-users to be saved in /home/vmail/<username>/Maildir So far so good. Now I want mail to non-existent users to be placed in /home/vmail/<domain.tld>/Maildir (notice the double-slashes that indicate that %d is empty): # doveadm user publicfolder(a)vendelso.se rs(a)netnerdz.se field value uid 500 gid 500 home /home/vmail// mail maildir:/home/vmail//Maildir/ uid vmail gid vmail home /home/vmail/rs mail maildir:/home/vmail/rs uidNumber 500 gidNumber 500 And here's my configuration files: # cat /etc/dovecot/dovecot-ldap.conf.ext hosts = 172.20.202.60 dn=uid=dovecot,cn=sysaccounts,cn=etc,dc=netnerdz,dc=se dnpass=<suppressed> auth_bind = yes auth_bind_userdn = uid=%u,cn=users,cn=accounts,dc=netnerdz,dc=se ldap_version = 3 base = cn=accounts,dc=netnerdz,dc=se deref = never scope = subtree user_filter = (&(objectClass=posixAccount)(mail=%u@*)) user_attrs = \ =user=%{ldap:uid}, \ =home=/home/vmail/%{ldap:uid}, \ =mail=maildir:/home/vmail/%{ldap:uid}, \ =uidNumber=500, \ =gidNumber=500 pass_filter = (&(objectClass=posixAccount)(mail=%u@*)) pass_attrs = uid=user,userPassword=password # dovecot -n # 2.2.10: /etc/dovecot/dovecot.conf # OS: Linux 3.10.0-327.10.1.el7.x86_64 x86_64 CentOS Linux release 7.2.1511 (Core) auth_mechanisms = login gssapi plain auth_socket_path = /var/run/dovecot/auth-userdb auth_username_format = %n auth_username_translation = -@.@/@_@ auth_verbose = yes base_dir = /var/run/dovecot/ imap_id_log = * imap_id_send = name imap_urlauth_host = * import_environment = TZ lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes lda_original_recipient_header = X-Original-To lmtp_save_to_detail_mailbox = yes login_greeting = IMAPd ready. login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c mail_access_groups = vmail mail_attachment_hash = %{sha256} mail_debug = yes mail_gid = vmail mail_location = maildir:~/Maildir mail_log_prefix = "%s(%u)::%n: " mail_plugins = acl virtual mail_privileged_group = vmail mail_shared_explicit_inbox = yes mail_uid = vmail mailbox_list_index = yes maildir_broken_filename_sizes = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mmap_disable = yes namespace NetnerdzSE { list = yes location = maildir:/home/vmail/netnerdz.se/:INDEX=/home/vmail/%u/public prefix = NetnerdzSE/ separator = / subscriptions = yes type = public } namespace Shared { list = children location = maildir:/home/vmail/%%n/Maildir/:INDEX=/home/vmail/%n/shared/%%u prefix = Shared/%%n/ separator = / subscriptions = yes type = shared } namespace VendelsöSE { list = yes location = maildir:/home/vmail/xn--vendels-g1a.se/:INDEX=/home/vmail/%u/public prefix = VendelsöSE/ separator = / subscriptions = yes type = public } namespace VendelsoSE { list = yes location = maildir:/home/vmail/vendelso.se/:INDEX=/home/vmail/%u/public prefix = VendelsoSE/ separator = / subscriptions = yes type = public } namespace inbox { hidden = no inbox = yes list = yes location = mailbox Archive { auto = subscribe special_use = \Archive } mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / subscriptions = yes type = private } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile:/home/vmail/dovecot-acl acl_shared_dict = file:/home/vmail/shared-mailboxes.db mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size sieve = /home/vmail/%u/dovecot.sieve sieve_default = /etc/dovecot/default.sieve sieve_default_name = roundcube sieve_dir = /home/vmail/%u/sieve sieve_global_dir = /etc/dovecot/sieve/global.sieve sieve_global_path = /etc/dovecot/sieve/global.sieve sieve_max_actions = 0 sieve_max_redirects = 4 sieve_max_script_size = 0 } postmaster_address = postmaster@%d protocols = imap lmtp sieve service auth-worker { user = root } service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } unix_listener auth-client { group = postfix mode = 0660 user = postfix } unix_listener auth-master { group = vmail mode = 0660 user = vmail } unix_listener auth-userdb { group = mode = 0666 user = } user = $default_internal_user } service dict { unix_listener dict { group = mail mode = 0600 user = mail } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } process_min_avail = 0 service_count = 1 vsz_limit = 256 M } service imap { process_limit = 1024 vsz_limit = 256 M } service lmtp { inet_listener lmtp { address = 127.0.0.1 port = 24 } unix_listener lmtp { mode = 0666 } } service managesieve-login { inet_listener sieve { port = 4190 } } ssl = required ssl_ca = </etc/dovecot/dovecot-ca.crt ssl_cert = </etc/dovecot/imap.netnerdz.se.crt ssl_client_ca_file = /etc/pki/tls/cert.pem ssl_key = </etc/dovecot/imap.netnerdz.se.key ssl_prefer_server_ciphers = yes submission_host = 127.0.0.1:25 userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } userdb { args = uid=500 gid=500 home=/home/vmail/%{domain}/ allow_all_users=yes driver = static override_fields = mail=maildir:/home/vmail/%d/Maildir/ result_failure = return-ok skip = found } valid_chroot_dirs = /home/vmail verbose_proctitle = yes protocol sieve { disable_plaintext_auth = yes info_log_path = /var/log/dovecot/dovecot-sieve.log log_path = /var/log/dovecot/dovecot-sieve-errors.log managesieve_implementation_string = dovecot managesieve_max_line_length = 65536 } protocol lda { auth_socket_path = /var/run/dovecot/auth-master info_log_path = /var/log/dovecot/dovecot-lda.log log_path = /var/log/dovecot/dovecot-lda-errors.log mail_plugins = acl virtual sieve postmaster_address = postmaster } protocol imap { mail_max_userip_connections = 10 mail_plugins = acl virtual imap_acl } protocol lmtp { info_log_path = /var/log/dovecot/dovecot-lmtp.log log_path = /var/log/dovecot/dovecot-lmtp-errors.log mail_plugins = acl virtual sieve postmaster_address = postmaster } -- Robert Soderlund

1 0

autoexpunge wildcard mailbox from userdb
by Leon Kyneur 02 May '16

02 May '16

Was excited to see that wildcards are now possible on autoexpunge in the 2.2.24 release. However I'm trying to configure these from the userdb lookup and it doesn't appear to be working. if I set in 15-mailboxes.conf mailbox Trash/* { ... autoexpunge = 10m } everything works.. however if I return =namespace/inbox/mailbox/Trash/*/autoexpunge=10m via userdb - it does not. Logs say: Debug: Unknown userdb setting: plugin/namespace/inbox/mailbox/Trash/*/autoexpunge=10m Is what I am trying to do even possible? Thanks Leon

2 4

Re: Changing Password Schemes
by cajeptha 02 May '16

02 May '16

That one is there to close the left one after IF Sent from my Samsung device -------- Original message -------- From: Christian Kivalo <ml+dovecot(a)valo.at> Date: 2016-05-02 11:58 (GMT+02:00) To: dovecot(a)dovecot.org Subject: Re: Changing Password Schemes On 2016-05-02 11:32, Carl Jeptha wrote: > password_query = \ > SELECT username AS USER, \ > IF(cryptpwd IS NULL OR cryptpwd='', CONCAT('{PLAIN}',clearpwd), > cryptpwd) AS PASSWORD, \ > '/var/vmail/%d/%n' as userdb_home, \ > 'maildir:/var/vmail/%d/%n' as userdb_mail, 150 as userdb_uid, 8 > as > userdb_gid \ > FROM mailbox \ > WHERE username = '%u' AND active = '1' You have a right parenthesis after clearpwd in your sql statement CONCAT('{PLAIN}',clearpwd),cryptpwd) > user_query = \ > SELECT '/var/vmail/%d/%n' as home, 'maildir:/var/vmail/%d/%n' as > mail, \ > 150 AS uid, 8 AS gid, concat('dirsize:storage=', quota) AS quota \ > FROM mailbox WHERE username = '%u' AND active = '1' > > Above is what I have done, but still getting an error: > > May 2 05:26:03 |****** dovecot: auth-worker(3442): Error: > sql(user(a)domain.tld,xxx.xxx.xxx.xxx): Password query must return a > field named 'password' > > For testing purposes I put the query in PHPMyAdmin and it complains > this > (notice it drops "PASSWORD", but shows it in the query: > #1064 - You have an error in your SQL syntax; check the manual that > corresponds to your MySQL server version for the right syntax to use > near '\ > IF(cryptpwd IS NULL OR cryptpwd='', CONCAT('{PLAIN}',clearpwd), > cryptpwd) as ' at line 1 The PHPMyAdmin error message shows the relevant part to inspect. -- Christian Kivalo

1 0

deb repo with dovecot-antispam ?
by Håkon Alstadheim 02 May '16

02 May '16

There are .debs available for version 2.2 both from backports and ix.dovecot.fi, but neither seem to have the antispam plugin built for version 2.2. Anybody know why, and (if there is no particular reason) how to get dovecot-antispam in a proper .deb package for dovecot-2.2.* ?

2 2

Dovecot (LDAP) get the quota limitation from windows Active directory
by Dogz 02 May '16

02 May '16

Hi, I can't get the quota limitation from windows AD, I did read the dovecot wiki like http://wiki2.dovecot.org/Quota/Configuration and search from google, but failed. *doveadm -D quota get -u dogz:* ... doveadm(dogz): Debug: auth input: dogz(a)mail.com home=/vmail/dogz/ mail=maildir:/vmail/dogz/Maildir/ uid=500 gid=500 mobile=quota_rule=*:storage=M ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ doveadm(dogz): Debug: changed username to dogz(a)mail.com doveadm(dogz): Debug: Added userdb setting: mail=maildir:/vmail/dogz/Maildir/ doveadm(dogz): Debug: Added userdb setting: plugin/mobile=quota_rule=*:storage=M ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ doveadm(dogz): Debug: Effective uid=1000, gid=1000, home=/vmail/dogz/ ... Quota name Type Value Limit % User quota STORAGE 72 - 0 User quota MESSAGE 82 - 0 *ldapsearch -x -h 192.168.90.20 -b dc=mail,dc=com -D cn=ldapquery,cn=users,dc=mail,dc=com -W '(&(mail=*dogz(a)mail.com*))'* ... objectClass: top objectClass: person objectClass: organizationalPerson objectClass: user ... maxStorage: 500 ... sAMAccountName: dogz ... mail: dogz(a)mail.com mobile: 200 carLicense: 2 My configuration files are as follwing */etc/dovecot/dovecot-ldap.conf :* .... scope = subtree deref = never user_filter = (&(objectCategory=person)(|(mail=%Lu)(otherIpPhone=%Lu))(!(userAccountControl:1.2.840.113556.1.4.803:=2))) pass_filter = (&(objectCategory=person)(|(mail=%Lu)(otherIpPhone=%Lu))(!(userAccountControl:1.2.840.113556.1.4.803:=2))) #PS: I don't know why I can't use otherMailbox to be the alias, but I can use otherIpPhone field successfully. user_attrs = =home=/vmail/%Ln/, =mail=maildir:/vmail/%Ln/Maildir/, =uid=1000, =gid=1000, =mobile=quota_rule=*:storage=%$M ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ default_pass_scheme = CRYPT pass_attrs = userPassword=password */etc/dovecot/conf.d/auth-ldap.conf.ext* auth_username_format = %Lu passdb { driver = ldap args = /etc/dovecot/dovecot-ldap.conf } userdb { driver = ldap args = /etc/dovecot/dovecot-ldap.conf } */etc/dovecot/conf.d/90-quota.conf:* ... plugin { #quota = dict:user::proxy::quota #quota2 = dict:domain:%d:proxy::quota_domain #quota_rule = *:storage=102400 #quota2_rule = *:storage=1048576 #quota = dict:User quota::file:%h/Maildir/dovecot-quota quota = dict:User quota::file:~/Maildir/dovecot-quota } I also tried different form as following, but still can't work it out, please help me and thank you in advance. user_attrs = =home=/vmail/%Ln/, =mail=maildir:/vmail/%Ln/Maildir/, =quota_rule=*:storage=%{ldap:mobile}M or user_attrs = =home=/vmail/%Ln/, =mail=maildir:/vmail/%Ln/Maildir/, =mobile=quota_rule=*:storage=%{ldap:mobile}M Is there any information I should provide? Please advise me and thank you in advance. -- Best Regards, Dogz

1 1

IX Out of Order?
by Harald Leithner 01 May '16

01 May '16

Hi, It seams that ix.dovecot.fi has not build a new version since 2016-04-19 20:03 regards, -- Harald Leithner ITronic Wiedner Hauptstraße 120/5.1, 1050 Wien, Austria Tel: +43-1-545 0 604 Mobil: +43-699-123 78 4 78 Mail: leithner(a)itronic.at | itronic.at

3 4