- dovecot - dovecot.org

File permissions: system groups for do not work for group/shared mailboxes
by Jens Kirchner 08 Sep '15

08 Sep '15

Hello! I am struggling to set up a group mailbox for users of a certain system group. I want to grant access to the mailbox on a filesystem mode by using the system groups. The problem, the set up works fine and when I use setfacl and grant permissions too each user manually, it works fine. However, I want to use a system user's group membership in order to grant access to these mailboxes insted of manually granting for each user. dovecot version: 2.2.9 This is the config part: namespace { location = maildir:/data/mail/public:LAYOUT=fs prefix = GROUP-MAILBOXES/ separator = / subscriptions = no type = public } ... passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } ... userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } filesystem permissions (getfacl): # file: GroupboxA/ # owner: root # group: root user::rwx user:user1:rwx group::rwx mask::rwx other::--- default:user::rwx default:user:user1:rwx default:group::rwx default:mask::rwx default:other::--- # file: GroupboxB/ # owner: root # group: root user::rwx group::rwx group:group1:rwx mask::rwx other::--- default:user::rwx default:group::rwx default:group:group1:rwx default:mask::rwx default:other::--- user1 is in roup1 When setting username-based permissions (GroupboxA), the mailbox is usable and subsribable; when setting groupname-based permissions (GroupboxB) it is not subscribable/usable. Thanks for your help in advance and best regards, Jens

1 0

bug in acl_defaults_from_inbox option
by Marco Giunta 08 Sep '15

08 Sep '15

Hi at all, there is a bug in in acl_defaults_from_inbox option: if you define it with ANY value ('yes', 'no', 'whatyouwant', 'xxx') it acts like the value is ALWAYS 'yes', and Dovecot enable it; the only way to disable it, is comment it or delete from configuration file. With 'acl_defaults_from_inbox = no', or 'acl_defaults_from_inbox = whatyouwant', all my folders get ACLs from INBOX; in my case I want to only share INBOX, but also all other folders were shared. When you comment 'acl_defaults_from_inbox', Dovecot works like expected. Marco # 2.2.15: /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.6 (3e924b1b6c5c+) # OS: Linux 2.6.18-400.1.1.el5 x86_64 Red Hat Enterprise Linux Server auth_master_user_separator = * auth_mechanisms = plain login disable_plaintext_auth = no doveadm_password = XXXXXXXXXXXXXXXXXXXXXXXX doveadm_port = 12345 first_valid_uid = 200 hostname = xxxxxxx.sissa.it imap_client_workarounds = delay-newmail lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes lda_original_recipient_header = X-Original-To listen = * login_log_format_elements = user=<%u> PID=%p method=%m rip=%r lip=%l %c login_trusted_networks = XXX.XXX.1.172/30 XXX.XXX.24.0/23 mail_gid = mail mail_home = /var/spool/mail/%1n/%n mail_location = maildir:/var/spool/mail/%1n/%n:INDEX=/var/shared/indexes/%1n/%n mail_plugins = acl fts fts_solr mailbox_alias quota mail_shared_explicit_inbox = yes mail_uid = vmail maildir_very_dirty_syncs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave duplicate imapflags notify mbox_write_locks = fcntl mmap_disable = yes namespace archives { hidden = no inbox = no list = children location = maildir:/var/spool/archives/%1n/%n:INDEX=/var/shared/indexes/%1n/%n/archives mailbox 2015 { auto = subscribe special_use = \Archive } prefix = Archives. separator = . subscriptions = no type = private } namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox INBOX_spam { auto = subscribe special_use = \Junk } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = . } namespace others { list = children location = maildir:/var/spool/mail/%%1n/%%n:INDEXPVT=/var/shared/indexes/%1n/%n/shared/%%n prefix = Other Users.%%n. separator = . subscriptions = no type = shared } passdb { args = /etc/dovecot/passwd.masterusers driver = passwd-file master = yes pass = yes } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile:/etc/dovecot/global-acls:cache_secs=300 acl_defaults_from_inbox = no acl_shared_dict = file:/var/shared/dovecot/shared-mailboxes.dict fts = solr fts_autoindex = yes fts_autoindex_max_recent_msgs = 20 fts_solr = url=http://solr.localdomain:8080/solr/ mailbox_alias_new = INBOX_spam mailbox_alias_old = Junk quota = maildir:User quota:ns= quota2 = maildir:Archive quota:ns=Archives. quota2_rule = *:storage=20GB quota2_warning = storage=95%% quota2-warning 95 %u quota2_warning2 = storage=90%% quota2-warning 90 %u quota2_warning3 = storage=80%% quota2-warning 80 %u quota_rule = *:storage=5GB quota_rule2 = Trash:storage=+20%% quota_status_nouser = DUNNO quota_status_overquota = 552 5.2.2 Quota exceeded (mailbox for user is full) quota_status_success = DUNNO quota_warning = storage=100%% quota-warning 100 %u quota_warning2 = storage=95%% quota-warning 95 %u quota_warning3 = storage=90%% quota-warning 90 %u quota_warning4 = storage=80%% quota-warning 80 %u sieve = file:~/sieve;active=~/sieve/.dovecot.sieve sieve_default = /etc/dovecot/sieve/dovecot.sieve sieve_extensions = +notify +imapflags sieve_max_redirects = 16 } pop3_client_workarounds = outlook-no-nuls oe-ns-eoh postmaster_address = postmaster(a)sissa.it protocols = imap pop3 lmtp sieve rejection_reason = Your message to <%t> was automatically rejected for the following reason: %n%n%r service auth { inet_listener { port = 49494 } unix_listener auth-userdb { user = vmail } } service dict { unix_listener dict { user = vmail } } service doveadm { inet_listener { port = 26001 } } service imap-login { process_min_avail = 16 service_count = 0 } service imap { process_limit = 2048 } service lmtp { inet_listener lmtp { port = 24 } process_min_avail = 5 } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } process_min_avail = 16 service_count = 0 vsz_limit = 256 M } service quota-status { client_limit = 1 executable = /usr/libexec/dovecot/quota-status -p postfix inet_listener { port = 25001 } } service quota-warning { executable = script /usr/local/bin/dovecot-quota-warning.sh unix_listener quota-warning { user = vmail } user = vmail } service quota2-warning { executable = script /usr/local/bin/dovecot-quota2-warning.sh unix_listener quota2-warning { user = vmail } user = vmail } ssl_cert = </etc/pki/dovecot/certs/xxxxx-crt.pem ssl_key = </etc/pki/dovecot/private/Xxxxx-key.pem ssl_protocols = !SSLv2 !SSLv3 submission_host = xxxxxx.sissa.it:25 syslog_facility = local2 userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol lmtp { mail_plugins = acl fts fts_solr mailbox_alias quota sieve postmaster_address = xxxxxxx(a)sissa.it } protocol lda { info_log_path = log_path = mail_plugins = acl fts fts_solr mailbox_alias quota sieve syslog_facility = local2 } protocol imap { mail_max_userip_connections = 50 mail_plugins = acl fts fts_solr mailbox_alias quota imap_quota imap_acl } protocol sieve { mail_max_userip_connections = 50 } protocol pop3 { mail_max_userip_connections = 50 } -- ----------------------------------- |Marco Giunta - SISSA Computer Staff| |Via Bonomea, 265 | |34136 - Trieste, Italy | |Tel: +39-40-3787-503 | |Fax: +39-040-3787-244 | |e-mail: giunta(a)sissa.it | -----------------------------------

2 2

[Patch] Fix hang in safe_sendfile on SmartOS
by Sebastian Wiedenroth 08 Sep '15

08 Sep '15

# HG changeset patch # User Sebastian Wiedenroth <sebastian.wiedenroth(a)skylime.net> # Date 1437050484 -7200 # Thu Jul 16 14:41:24 2015 +0200 # Node ID 7ef3a533b097e8e6590e754dc56ad308ab29233b # Parent e3640ccaa76d77a9658126d1f8f306480dad8af7 Fix hang in safe_sendfile on SmartOS The call to sendfile on SmartOS can fail with EOPNOTSUPP. This is a valid error code and documented in the man page. This error code needs to be handled or else dovecot will retry the sendfile call endlessly and hang. diff -r e3640ccaa76d -r 7ef3a533b097 src/lib/sendfile-util.c --- a/src/lib/sendfile-util.c Sat Jan 10 04:32:42 2015 +0200 +++ b/src/lib/sendfile-util.c Thu Jul 16 14:41:24 2015 +0200 @@ -116,7 +116,7 @@ if (errno == EINVAL) { /* most likely trying to read past EOF */ ret = 0; - } else if (errno == EAFNOSUPPORT) { + } else if (errno == EAFNOSUPPORT || errno == EOPNOTSUPP) { /* not supported, return Linux-like EINVAL so caller sees only consistent errnos. */ errno = EINVAL;

2 4

Patch for "doveadm -f table" nit (was Re: Dovecot current number of connections being used.)
by Joseph Tam 08 Sep '15

08 Sep '15

> doveadm who -1 2>/dev/null | wc -l You have to redirect stderr to /dev/null because that's where the first header line is written to. The default format style (table) is inconsistent with the other formats (flow,pager,tab) that write headers and data to stdout. The following patch will pick this nit. This patch will require modifications to scripts that rely on doveadm writing headers to stderr. For example, the above doveadm command could be modified to doveadm who -1 | grep -vc '^username' -------------------------------------------------------------------------------- --- a/dovecot-2.2.16.rc1/src/doveadm/doveadm-print-table.c Wed Mar 18 15:40:40 2015 +++ b/dovecot-2.2.16.rc1/src/doveadm/doveadm-print-table.c Wed Mar 18 15:41:18 2015 @@ -151,3 +151,3 @@ for (i = 0; i < count; i++) { - if (i > 0) fprintf(stderr, " "); + if (i > 0) printf(" "); @@ -155,3 +155,3 @@ DOVEADM_PRINT_HEADER_FLAG_RIGHT_JUSTIFY) == 0) { - fprintf(stderr, "%-*s", (int)headers[i].length, + printf("%-*s", (int)headers[i].length, headers[i].title); @@ -158,3 +158,3 @@ } else { - fprintf(stderr, "%*s", (int)headers[i].length, + printf("%*s", (int)headers[i].length, headers[i].title); @@ -162,3 +162,3 @@ } - fprintf(stderr, "\n"); + printf("\n"); } -------------------------------------------------------------------------------- Joseph Tam <jtam.home(a)gmail.com>

5 9

Re: Null deference pointer in dovecot-2.2.18
by 吴迪 08 Sep '15

08 Sep '15

Dear, use our static analysis tools, I find some bugs (Null deference pointer) for dovecot-2.2.18. Null deference pointer bugs often make program crashes, Please confim them, Thanks! 1. dovecot-2.2.18/src/config/config-request.c 332 'setting_export_section_name(ctx->prefix, def, children[i], i);', pointer 'children' in line 202 assigned NULL and if branch 'case SET_DEFLIST_UNIQUE' not execute, so pointer 'children' is always NULL. It load to a bug of null deference pointer In line 332. The same bugs also appeared in : 1. dovecot-2.2.18/src/lib-index/mail-index-fsck.c line 170 or 174, pointer 'kw_rec ' mybe NULL. 2.dovecot-2.2.18/src/lib-storage/mail-search-args-simplify line 349, pointer 'prev_arg' mybe NULL. best wishes~ Amy

3 2

RFC 5465 (NOTIFY) violation: missing HIGHESTMODSEQ in initial STATUS responses
by Guilhem Moulin 08 Sep '15

08 Sep '15

Quoting RFC 5465 (NOTIFY): “If the NOTIFY command enables MessageNew, MessageExpunge, AnnotationChange, or FlagChange notifications for a mailbox other than the currently selected mailbox, and the client has specified the STATUS indicator parameter, then the server MUST send a STATUS response for that mailbox before NOTIFY's tagged OK. […] If either AnnotationChange or FlagChange are included and the server also supports the CONDSTORE [RFC4551] and/or QRESYNC [RFC5162] extensions, the STATUS response MUST contain UIDVALIDITY and HIGHESTMODSEQ.” — https://tools.ietf.org/html/rfc5465#section-3.1 While unsolicited STATUS responses include HIGHESTMODSEQ indeed, the initial STATUS responses (caused by the presence of the STATUS indicator) do not: ~$ /usr/lib/dovecot/imap * PREAUTH [CAPABILITY IMAP4rev1 … CONDSTORE QRESYNC … NOTIFY SPECIAL-USE] Logged in as guilhem a ENABLE QRESYNC * ENABLED QRESYNC a OK Enabled (0.000 secs). b NOTIFY SET STATUS (SUBSCRIBED (MessageNew MessageExpunge FlagChange)) * STATUS INBOX (MESSAGES 9069 UIDNEXT 109398 UIDVALIDITY 1312585007 UNSEEN 0) […] b OK NOTIFY completed (0.008 secs). [time passes… a new message is delivered to INBOX] * STATUS INBOX (MESSAGES 9070 UIDNEXT 109399 UNSEEN 1 HIGHESTMODSEQ 22216) This defeats the purpose of the STATUS indicator for disconnected clients since they have to issue separate STATUS commands (or a LIST command if LIST-{EXTENDED,STATUS} have been advertized) to find out which mailboxes have got a new HIGHESTMODSEQ. Cheers, -- Guilhem.

2 1

NOTIFY regression: 2.18 no longer notifies of events in INBOX
by Guilhem Moulin 08 Sep '15

08 Sep '15

Here is an example with APPEND $ /usr/lib/dovecot/imap S1: * PREAUTH [CAPABILITY IMAP4rev1 … MOVE NOTIFY SPECIAL-USE] Logged in as guilhem C1: a1 NOTIFY SET (INBOXES (MessageNew MessageExpunge FlagChange)) S1: a1 OK NOTIFY completed (0.000 secs) $ /usr/lib/dovecot/imap S2: * PREAUTH [CAPABILITY IMAP4rev1 … MOVE NOTIFY SPECIAL-USE] Logged in as guilhem C2: a2 APPEND INBOX {1+} C2: x S2: a2 OK [APPENDUID 1384472528 26085] Append completed (0.229 secs). With 2.13 from Debian Jessie, S1 sends a notification for the new message in INBOX, as expected: S1: * STATUS INBOX (MESSAGES 4333 UIDNEXT 26086 UNSEEN 1) However it doesn't with 2.18 from Debian Sid, as if ‘INBOX’ was excluded from the mailbox filter ‘INBOXES’. It does send a notification for ‘virtual/unseen’ instead (as expected), but nothing for ‘INBOX’. S1: * STATUS virtual/unseen (MESSAGES 3 UIDNEXT 15186 UNSEEN 3) This is INBOX-specific because APPENDING the message to another mailbox triggers the notification on both 2.13 and 2.18 as expected: S1: * STATUS test (MESSAGES 2 UIDNEXT 3 UNSEEN 2) S1: * STATUS virtual/unseen (MESSAGES 2 UIDNEXT 15195 UNSEEN 2) I attach the ‘dovecot -n’ output for both 2.13 and 2.18. -- Guilhem.

2 1

"NOTIFY SET (mailboxes INBOX (...))" crashes the IMAP client
by Guilhem Moulin 07 Sep '15

07 Sep '15

Hi list, The NOTIFY extension (RFC 5465) works fine for mailboxes in the "virtual/" namespace, but it crashes the IMAP client when used with a mailbox in the empty "" namespace: ~$ /usr/lib/dovecot/imap * PREAUTH [CAPABILITY IMAP4rev1 … NOTIFY SPECIAL-USE] Logged in as guilhem a NAMESPACE * NAMESPACE (("" "/")("virtual/" "/")) NIL NIL a OK Namespace completed. b NOTIFY SET (mailboxes virtual/all (MessageNew MessageExpunge)) b OK NOTIFY completed (0.001 secs). c NOTIFY SET (mailboxes INBOX (MessageNew MessageExpunge)) imap(guilhem): Panic: file mail-namespace.c: line 679 (mail_namespace_find): assertion failed: (ns != NULL) imap(guilhem): Error: Raw backtrace: … Aborted The "subtree" mailbox filter has the same problem, but the non-parameterized ones ("inboxes", "personal" and "subscribed") work fine. You'll find the output of ‘dovecot -n’ enclosed. Cheers, -- Guilhem.

2 3

question on autch cache parameters
by matthias lay 07 Sep '15

07 Sep '15

Hi list, I have a question on auth caching in 2.2.18. I am using acl_groups for a master user, appended in a static userdb file # snip ############################### master@uma:{SHA}XXXX=::::::userdb_acl_groups=umareadmaster allow_nets=127.0.0.1 # snap ############################### and use this group in a global ACL file. I discovered this only works on first NOT-cached login environment in imap-postlogin script on first login: AUTH_TOKEN=e96b5a32ceb2cafc4460c210ad2e92e3d7ab388c MASTER_USER=master@uma SPUSER=private/pdf LOCAL_IP=127.0.0.1 USER=pdf AUTH_USER=master@uma PWD=/var/run/dovecot USERDB_KEYS=ACL_GROUPS HOME SPUSER MASTER_USER AUTH_TOKEN AUTH_USER SHLVL=1 HOME=/var/data/vmail/private/pdf ACL_GROUPS=umareadmaster IP=127.0.0.1 _=/usr/bin/env on the second cached login it looks like this AUTH_TOKEN=12703b11932f233520f6d4b33559c33aeb1cfc7f MASTER_USER=master@uma SPUSER=private/pdf LOCAL_IP=127.0.0.1 USER=pdf AUTH_USER=master@uma PWD=/var/run/dovecot USERDB_KEYS=HOME SPUSER MASTER_USER AUTH_TOKEN AUTH_USER SHLVL=1 HOME=/var/data/vmail/private/pdf IP=127.0.0.1 _=/usr/bin/env so the ACL_GROUPS is gone. is this intended to be like that. so groups not included in cache and I have to find another approach? anybody else encountered similar problems with some auth Variables and caching? Greetz Matze

4 6

doveadm quota recalc problem for domain
by Samuel 06 Sep '15

06 Sep '15

Hello, I've set up user quota and domain quota for dict SQL and all seems OK. New mail for user increase the user quota and the domain quota. Deleting email count down user quota and domain quota. But in case of SQL failure, I'm trying to rebuild the user quota and domain quota with doveadm quota recalc. The problem is that the command : 'doveadm quota recalc -u foo@bar' sets the domain quota only with user foo@bar even when I try a domain quota recalc : doveadm quota recalc -A or doveadm quota recalc -u *@bar (only one user is taken in account for the domain quota and not all the user). The domain SQL database is broken with value of only one user for the whole domain quota. So how to achieve rebuild domain quota correctly with doveadm ? Thanks a lot. Samuel. Debian Jessie Dovecot : 2.2.13 custom grsec kernel :Linux postfix 3.14.50-grsec-1 ########################## dovecot -n : # 2.2.13: /etc/dovecot/dovecot.conf # OS: Linux 3.14.50-grsec-1 x86_64 Debian 8.1 nfs4 auth_mechanisms = plain login auth_verbose = yes dict { quota = mysql:/etc/dovecot/dovecot-dict-sql-user.conf quota_domain = mysql:/etc/dovecot/dovecot-dict-sql-domain.conf } lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes login_trusted_networks = XXXXXX/24 mail_location = maildir:/maildir/%d/%n/Maildir mail_plugins = " quota" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { quota = dict:user::proxy::quota quota2 = dict:domain:%d:proxy::quota_domain quota_grace = 10M quota_status_nouser = DUNNO quota_status_overquota = 552 5.2.2 Mailbox is full quota_status_success = DUNNO quota_warning = storage=100%% quota-warning 100 %u quota_warning2 = storage=95%% quota-warning 95 %u quota_warning3 = storage=80%% quota-warning 80 %u quota_warning4 = -storage=100%% quota-warning below %u sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap pop3 sieve lmtp service auth-worker { user = vmail } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } service dict { unix_listener dict { mode = 0666 user = dovecot } } service quota-status { executable = quota-status -p postfix inet_listener { port = 12340 } } service quota-warning { client_limit = 1 executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { mode = 0666 user = vmail } user = vmail } ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lda { mail_plugins = " quota sieve" } protocol imap { mail_plugins = " quota imap_quota" } ################ root@postfix:/etc/dovecot# cat dovecot-dict-sql-domain.conf |grep -v "#" connect = host=XXXXX dbname=mail user=test password=test map { pattern = priv/quota/storage table = domains username_field = domain value_field = quota } map { pattern = priv/quota/messages table = domains username_field = domain value_field = quota_messages } map { pattern = shared/expire/$user/$mailbox table = expires value_field = expire_stamp fields { username = $user mailbox = $mailbox } } ################### root@postfix:/etc/dovecot# cat dovecot-dict-sql-user.conf |grep -v "#" connect = host=XXXXXXXX dbname=mail user=test password=test map { pattern = priv/quota/storage table = quota username_field = email value_field = bytes } map { pattern = priv/quota/messages table = quota username_field = email value_field = messages } map { pattern = shared/expire/$user/$mailbox table = expires value_field = expire_stamp fields { username = $user mailbox = $mailbox } } ############################

1 0

Mailbox can't be created
by Paulo Matos 06 Sep '15

06 Sep '15

Hi, I have setup postfix master.cf to use dovecot-lda to deliver (using -m) all messages to PreInbox: dovecot unix - n n - - pipe flags=DRhu user=vmail:vmail argv=/usr/libexec/dovecot/deliver -f ${sender} -a ${recipient} -d ${user}@${nexthop} -m PreINBOX And enabled lda_mailbox_autocreate. The message I have now it: Aug 27 10:02:29 lda(): Info: msgid=<dae42d0cf57bf4496a3dd53e162f8281(a)localhost.localdomain>: save failed to open mailbox PreINBOX: Mailbox can't be created Aug 27 10:02:29 lda(): Info: msgid=<dae42d0cf57bf4496a3dd53e162f8281(a)localhost.localdomain>: saved mail to INBOX Why wouldn't dovecot itself be able to create mailboxes? I am using virtual domains and users on a mysql database through postfix and mailboxes saved in MailDir format. Configuration of dovecot is: # 2.2.18: /etc/dovecot/dovecot.conf # OS: Linux 4.1.5-x86_64-linode61 x86_64 Fedora release 22 (Twenty Two) ext4 auth_debug = yes auth_mechanisms = plain login digest-md5 cram-md5 auth_verbose = yes auth_verbose_passwords = yes default_internal_user = root imap_client_workarounds = delay-newmail tb-extra-mailbox-sep lda_mailbox_autocreate = yes mail_debug = yes mail_location = maildir:/home/vmail/%d/%n/Maildir maildir_very_dirty_syncs = yes mbox_write_locks = fcntl namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = INBOX. separator = . type = private } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } postmaster_address = pmatos protocols = imap quota_full_tempfail = yes service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-master { mode = 0600 user = vmail } user = $default_internal_user } ssl = required ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = uid=5000 gid=5000 home=/home/vmail/%d/%n allow_all_users=yes driver = static } protocol lda { auth_socket_path = /var/run/dovecot/auth-master deliver_log_format = msgid=%m: %$ log_path = /home/vmail/dovecot-deliver.log } protocol imap { mail_max_userip_connections = 100 } Regards, -- Paulo Matos

4 14

Considerations for a not so simple set-up ...
by Lars Hanke 05 Sep '15

05 Sep '15

I want to set up a new IMAP server with Dovecot, so far I've been running Cyrus. I'm running dovecot on Debian Jessie. The general idea of the system would be: 1) Virtual users, i.e. login users are disjoint from any mail accounts. 2) Real-Users authenticate using their kerberos tickets. 3) There is a n-to-n mapping of real to virtual users. 4) Maildirs shall be stored on glusterfs. 5) Fallback passwords for cloud access Concerning 1) and 2) I keep reading that this is possible, but I could not find any concise and current description. I'd welcome pointers to howtos. Concerning 3) this should be a matter of ACL, e.g. a single real user (kerberos pricipal) may have several mail-boxes (virtual users), and groups of real users may share the same mail-box. I have a faint idea, how this could be done in Cyrus (but never did that), but I read that these features should exist in Dovecot as well. But I'm completely lost to even figure out a starting point. I appreciate any keywords for further reading. Concerning 4) I read that there are some issues using NFS. Are there any caveats when using gluster? Concerning 5) Users logging in from outside may not have TGT on their notebooks, which by design should run as stand-alone. They should nevertheless be able to access their mail. I currently think of another set of real users, but anything less messy is welcome. Did someone try something similar, already? Thanks for your help, - lars.

1 0

'doveadm expunge' with -A and userdb { driver = passwd }
by Grant 05 Sep '15

05 Sep '15

I'm expunging mail in my crontab like this: doveadm search -u user1 mailbox INBOX.Trash savedbefore 30d doveadm search -u user2 mailbox INBOX.Trash savedbefore 30d doveadm search -u user3 mailbox INBOX.Trash savedbefore 30d ... I'd rather do this: doveadm search -A mailbox INBOX.Trash savedbefore 30d but I'm told not to: "If the -A option is present, the command will be performed for all users. Using this option in combination with system users from userdb { driver = passwd } is not recommended, because it contains also users with a lower UID than the one configured with the first_valid_uid setting." I'm using userdb { driver = passwd-file } but I'm guessing that's the same thing. Am I understanding this correctly? - Grant

3 7

apple mail fails to connect intermittently
by Eric Smith 04 Sep '15

04 Sep '15

Hi (New to dovecot) I am experiencing intermittent connection failures with both apple mail and ios mail. No specific errors and I cannot find relevant information on the mac logs or on my server. It spontaneously corrects. restarting dovecot - no dice It just happened now (again), this time there might have been a reason, I just dovecot-lda'd some large mailboxes from mbox to Maildir. But as I said, it spontaneously corrects, so is downloading now. While this connection error is occurring, then I can connect to dovecot via a remote mutt session, via web imap client and via outlook. Is this a known issue? FWIW: % doveconf -n # 2.2.9: /etc/dovecot/dovecot.conf # OS: Linux 3.19.0-26-generic i686 Ubuntu 15.04 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } mailbox virtual/All { special_use = \All } prefix = } passdb { driver = pam } postmaster_address = postmaster(a)biovolt.nl protocols = " imap lmtp" ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { driver = passwd } protocol lda { info_log_path = /tmp/dovecot-deliver.log log_path = /tmp/dovecot-deliver-errors.log } Thanks Eric

1 0

Reviving an old thread: "requiring client certificates for external connections"
by Robert Giles 03 Sep '15

03 Sep '15

Hi folks - reviving an old thread from 2010: http://www.dovecot.org/list/dovecot/2010-December/055837.html We're basically looking to do the same thing: require client certificates for external connections, while preserving certificate-less username/password authentication for internal connections. Any tips on the best way to accomplish this? 'ssl_verify_client_cert = yes' can go within a local {} block, but it doesn't seem to force the client to submit a certificate. Thanks in advance - Robert Giles

1 0

disable quota for all users
by Support Antenna 03 Sep '15

03 Sep '15

Dear all, On a new server (postfix dovecot postfixadmin Centos) I did define quota=0 in postfixadmin However suddenly a user with more than 9Gb of mail got his mailbox new/cur empty and maillog shows: Sep 3 15:43:56 mail16 dovecot: lda(brouwerb(a)scholarium.nl): Error: sieve: msgid=<alpine.LRH.2.20.1509031543050.16381(a)streaming2.antenna.nl>: failed to store into mailbox 'INBOX': Quota exceeded (mailbox for user is full) Sep 3 15:43:56 mail16 dovecot: lda(brouwerb(a)scholarium.nl): Error: sieve: script /home/sieve/globalfilter.sieve failed with unsuccessful implicit keep Sep 3 15:43:56 mail16 dovecot: lda(brouwerb(a)scholarium.nl): msgid=<alpine.LRH.2.20.1509031543050.16381(a)streaming2.antenna.nl>: rejected: Quota exceeded (mailbox for user is full) Apparently somewhere a quota is defined, probably in dovecot cd /etc/dovecot grep -R quota * |grep -v "#" conf.d/auth-vpopmail.conf.ext: args = quota_template=quota_rule=*:backend=%q dovecot.conf: mail_plugins = quota sieve dovecot.conf: mail_plugins = quota imap_quota trash dovecot.conf: mail_plugins = quota dovecot.conf: quotadict = mysql:/etc/dovecot/dovecot-dict-quota.conf dovecot.conf: quota = dict:user::proxy::quotadict dovecot-dict-quota.conf: pattern = priv/quota/storage dovecot-dict-quota.conf: table = quota2 dovecot-dict-quota.conf: pattern = priv/quota/messages dovecot-dict-quota.conf: table = quota2 dovecot-mysql.conf:user_query = SELECT concat('/home/vmail/', maildir) as home, concat('maildir:/home/vmail/', maildir) as mail, 101 AS uid, 12 AS gid, CONCAT('*:messages=10000:bytes=', quota) as quota_rule FROM mailbox WHERE username = '%u' AND active = '1' Output of dovecot -n : # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-573.3.1.el6.x86_64 x86_64 CentOS release 6.7 (Final) ext4 auth_mechanisms = plain login dict { quotadict = mysql:/etc/dovecot/dovecot-dict-quota.conf } first_valid_gid = 12 first_valid_uid = 101 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes lmtp_save_to_detail_mailbox = yes mail_location = maildir:/home/vmail/%d/%n managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date passdb { args = /etc/dovecot/dovecot-mysql.conf driver = sql } plugin { acl = vfile:/etc/dovecot/acls quota = dict:user::proxy::quotadict sieve = ~/dovecot.sieve sieve_dir = ~/sieve sieve_global_dir = /home/sieve/ sieve_global_path = /home/sieve/globalfilter.sieve sieve_max_script_size = 1M trash = /etc/dovecot/trash.conf } protocols = imap pop3 lmtp sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { group = mail mode = 0666 user = vmail } } service dict { unix_listener dict { group = mail mode = 0666 user = vmail } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service imap { vsz_limit = 256 M } service managesieve-login { inet_listener sieve { port = 4190 } process_min_avail = 0 service_count = 1 vsz_limit = 64 M } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } ssl_ca = </etc/pki/tls/certs/PositiveSSL_Bundle.crt ssl_cert = </etc/pki/tls/certs/webmail2.antenna.nl.crt ssl_key = </etc/pki/tls/certs/webmail2.antenna.nl.key ssl_verify_client_cert = yes userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-mysql.conf driver = sql } protocol lda { mail_plugins = quota sieve postmaster_address = postmaster(a)antenna.nl } protocol imap { imap_client_workarounds = delay-newmail mail_plugins = quota imap_quota trash } protocol lmtp { mail_plugins = sieve } protocol pop3 { mail_plugins = quota pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } protocol sieve { managesieve_implementation_string = Dovecot Pigeonhole managesieve_max_compile_errors = 5 managesieve_max_line_length = 65536 } What should be changed where to disable quota (as to messages and space)? Thanks a lot, warm regards, Tsjêbbe

2 5

new server
by Franc 03 Sep '15

03 Sep '15

I am going to build a new box (2-3.000 users, 4-500 domains name (50-100 real, remaining used as redirect on the main (.it,.eu,.com,...)) . Is there any how-to or similar to follow for build an updated system? (My current boxes are based on CentoOS 6.x using included Dovecot + PostFix .rpms) I am thinking to CentOS 7.x + Dovecot + PostFix + RoundCube + Squirrel + procmail with unix users and virtual users. But I admit that systemd isn't still my best friend ... :-) In CentOS 7.x there is a default dovecot-2.2.10. Is it enough Ok or better use different rpms source? Any hints is welcomed :-) Thanks, F.

1 0

internal server error
by Sergey Schwartz 03 Sep '15

03 Sep '15

Hi! Today I've got a client unable to open a mailbox with Thunderbird - constantly drops connection. On the server side I can see an error message in the log Jul 22 11:07:29 mx10 dovecot: imap(oleg.vasilyev(a)bgoperator.com): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x7c96f) [0x7fd52575b96f] -> /usr/lib/dovecot/libdovecot.so.0(+0x7c9ce) [0x7fd52575b9ce] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7fd525709875] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_index_uint32_to_offset+0x74) [0x7fd525aa72d4] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_cache_add+0x561) [0x7fd525a91cf1] -> /usr/lib/dovecot/libdovecot-storage.so.0(index_mail_parse_header+0x2b1) [0x7fd525a79241] -> /usr/lib/dovecot/libdovecot.so.0(+0x66e47) [0x7fd525745e47] -> /usr/lib/dovecot/libdovecot.so.0(i_stream_read+0x68) [0x7fd5257657a8] -> /usr/lib/dovecot/libdovecot.so.0(i_stream_read_data+0x3d) [0x7fd52576614d] -> /usr/lib/dovecot/libdovecot.so.0(message_parse_header_next+0x62) [0x7fd52574af02] -> /usr/lib/dovecot/libdovecot.so.0(+0x667ff) [0x7fd5257457ff] -> /usr/lib/dovecot/libdovecot.so.0(i_stream_read+0x68) [0x7fd5257657a8] -> /usr/lib/dovecot/libdovecot.so.0(i_stream_read_data+0x3d) [0x7fd52576614d] -> /usr/lib/dovecot/libdovecot.so.0(message_get_header_size+0x53) [0x7fd52574e4b3] -> /usr/lib/dovecot/libdovecot-storage.so.0(imap_msgpart_open+0x257) [0x7fd525ab4527] -> dovecot/imap(+0x1da42) [0x7fd525f3ca42] -> dovecot/imap(+0x1be3f) [0x7fd525f3ae3f] -> dovecot/imap(imap_fetch_more+0x37) [0x7fd525f3be97] -> dovecot/imap(cmd_fetch+0x316) [0x7fd525f2f946] -> dovecot/imap(command_exec+0x4c) [0x7fd525f398cc] -> dovecot/imap(+0x19830) [0x7fd525f38830] -> dovecot/imap(+0x198c4) [0x7fd525f388c4] -> dovecot/imap(client_handle_input+0x115) [0x7fd525f38bc5] -> dovecot/imap(client_input+0x75) [0x7fd525f38fa5] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x5b) [0x7fd52576e54b] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0xbb) [0x7fd52576f5cb] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x9) [0x7fd52576e5d9] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7fd52576e658] Jul 22 11:07:29 mx10 dovecot: imap(oleg.vasilyev(a)bgoperator.com): Fatal: master: service(imap): child 17109 killed with signal 6 (core dumped) Should I report a bug or there is a workaround for this issue? -- Best regards, Sergey Schwartz Senior System Administrator Biblio Globus Tour Operator www.bgoperator.ru T: +7 495 5042500 ext 1532 E: sergey.schwartz(a)bgoperator.com

4 6

sieve filtering utf 8 strings
by Sergey Schwartz 03 Sep '15

03 Sep '15

Guys, I'm completely stuck, so asking for advice. My user has a sieve script which checks message header if it contains words in russian like 'Лист бронирования отправлен'. Pritty simple script # rule:[Отправлено] if allof (header :contains "subject" "LDS (robot): Лист бронирования отправлен", header :contains "from" "noreply(a)bgoperator.com") { fileinto "Отправлено"; } I don't have errors compiling the script or executing it via LMTP, but it doesn't work. Normally user receives messages from robot with subject encoded as quoted-printable Subject: =?UTF-8?Q?LDS_(robot):_=D0=9B=D0=B8=D1=81=D1=82?= =?UTF-8?Q?_=D0=B1=D1=80=D0=BE=D0=BD=D0=B8=D1=80=D0=BE=D0=B2=D0=B0=D0=BD?= =?UTF-8?Q?=D0=B8=D1=8F__=D0=BE=D1=82=D0=BF=D1=80=D0=B0=D0=B2=D0=BB=D0=B5?= When I send a test message via Thunderbird with required words - sieve works fine and subject is encoded in base64 Subject: =?UTF-8?B?0JvQuNGB0YIg0LHRgNC+0L3QuNGA0L7QstCw0L3QuNGPINC+0YLQv9GA?= =?UTF-8?B?0LDQstC70LXQvQ==?= It is the same text, but encodind is different - base 64 works fine and quoted-printable does not. Is it possible to have both supported for sieve ? -- Best regards, Sergey Schwartz Senior System Administrator Biblio Globus Tour Operator www.bgoperator.ru T: +7 495 5042500 ext 1532 E: sergey.schwartz(a)bgoperator.com

3 3

Unsubscribe from shared mailbox
by Miloslav Hůla 03 Sep '15

03 Sep '15

Hi, I'm using Dovecot 2.2.13-11 (Debian Jessie) and shared namespace (to be old Cyrus compatible setting): namespace { list = children location = maildir:/vmail/user/%%n/Maildir:INDEXPVT=/vmail/user/%n/Maildir/Shared/%%n prefix = user.%%n. separator = . subscriptions = yes type = shared } My account: milo Other account: peter After subscription, I have: /vmail/user/milo/Maildir/Shared/peter/.INBOX/dovecot.index.pvt.log After unsubscribe, file and folder still exists. Where Dovecot stores the information, that I had unsubscribed from this folder? I need this to analyze subscriptions over all mail acounts. Thank you, Miloslav

1 0

Error: Raw backtrace: and Transaction log changed unexpectedly, can't get modseq
by Andreas Fineske 03 Sep '15

03 Sep '15

Hi there, i've got some errors in my log files # dovecot --version 2.2.9 Here the Log's: Aug 26 12:05:39 s-imap4 dovecot: dsync-server(ralph.carstens.iea-dpc.de): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x5e271) [0x7f61d943c271] -> /usr/lib/dovecot/libdovecot.so.0(+0x5e34e) [0x7f61d943c34e] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f61d93f7a9e] -> /usr/lib/dovecot/modules/lib01_acl_plugin.so(+0x53e2) [0x7f61d8c083e2] -> /usr/lib/dovecot/modules/lib01_acl_plugin.so(+0x72d9) [0x7f61d8c0a2d9] -> /usr/lib/dovecot/modules/lib01_acl_plugin.so(acl_attribute_iter_next+0x5d) [0x7f61d8c0953d] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x99e73) [0x7f61d973fe73] -> /usr/lib/dovecot/libdovecot-storage.so.0(index_storage_mailbox_delete+0xf8) [0x7f61d9741338] -> /usr/lib/dovecot/modules/lib15_notify_plugin.so(+0x1d10) [0x7f61d87efd10] -> /usr/lib/dovecot/modules/lib01_acl_plugin.so(+0xbe16) [0x7f61d8c0ee16] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_delete+0x27) [0x7f61d9717f77] -> dovecot/doveadm-server [ralph.carstens.iea-dpc.de recv_mailbox_tree_deletes](dsync_brain_mailbox_tree_sync_change+0x281) [0x7f61d9bf4e21] -> dovecot/doveadm-server [ralph.carstens.iea-dpc.de recv_mailbox_tree_deletes](dsync_brain_recv_mailbox_tree_deletes+0x11b) [0x7f61d9bf4aeb] -> dovecot/doveadm-server [ralph.carstens.iea-dpc.de recv_mailbox_tree_deletes](dsync_brain_run+0x4e3) [0x7f61d9bf1f53] -> dovecot/doveadm-server [ralph.carstens.iea-dpc.de recv_mailbox_tree_deletes](+0x1c270) [0x7f61d9bf2270] -> dovecot/doveadm-server [ralph.carstens.iea-dpc.de recv_mailbox_tree_deletes](+0x2de60) [0x7f61d9c03e60] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x27) [0x7f61d944c247] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xd7) [0x7f61d944cfd7] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f61d944bde8] -> dovecot/doveadm-server [ralph.carstens.iea-dpc.de recv_mailbox_tree_deletes](+0x1a189) [0x7f61d9bf0189] -> dovecot/doveadm-server [ralph.carstens.iea-dpc.de recv_mailbox_tree_deletes](+0xebeb) [0x7f61d9be4beb] -> dovecot/doveadm-server [ralph.carstens.iea-dpc.de recv_mailbox_tree_deletes](+0x184d3) [0x7f61d9bee4d3] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x27) [0x7f61d944c247] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xd7) [0x7f61d944cfd7] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f61d944bde8] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f61d93fcc93] -> dovecot/doveadm-server [ralph.carstens.iea-dpc.de recv_mailbox_tree_deletes](main+0x11b) [0x7f61d9be494b] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf5) [0x7f61d903aec5] and Aug 26 09:33:03 s-imap3 dovecot: dsync-local(dv.iea-dpc.de): Error: /vmail/iea-dpc.de/dv/Maildir/.Projekte.BiSpra.erledigt/dovecot.index.log: Transaction log changed unexpectedly, can't get modseq Aug 26 09:33:03 s-imap3 dovecot: dsync-local(dv.iea-dpc.de): Error: /vmail/iea-dpc.de/dv/Maildir/.Projekte.BiSpra.erledigt/dovecot.index.log: Transaction log changed unexpectedly, can't get modseq Can you help me? Gruß Andreas -- IEA Data Processing and Research Center Andreas Fineske ICT Services Mexikoring 37 22297 Hamburg Germany tel: +49 40 48 500-550 fax: +49 40 48 500-501 email:andreas.fineske@iea-dpc.de web: www.iea-dpc.de -- -- IEA Data Processing and Research Center Andreas Fineske Information and Communication Technology Services Mexikoring 37 22297 Hamburg Tel.: 040/48 500 550 Fax: 040/48 500 501 E-Mail: andreas.fineske(a)iea-dpc.de Web: www.iea-dpc.de --

1 0

more than two way replication
by djk 02 Sep '15

02 Sep '15

Is there anyway of replicating between more than one other instance of Dovecot. I have bidirectional replication working successfully and it seems to be reliable. I would like to replicate from one or more of these instances to one other. Is this possible? Dirk

2 1

imap segfaults when using antispam plugin, and moving mail to an 'unsure' folder.
by Andrew McN 02 Sep '15

02 Sep '15

I put up a question on serverfault first, which has the details, including a stack trace: http://serverfault.com/questions/713687/dovecot-antispam-error-storing-mail . Details also copied below. Is this a known bug? If I built dovecot from source rather than using the Ubuntu 14.04 packages, would I expect that to help? Are there any configuration details that might be relevant? (dovecot -n output shown Any help much appreciated. Andrew McNaughton Details on the serverfault page repeated below, plus a little more. ----------------------------------------------------- Ubuntu 14.04.3 x86_64 Running inside lxc-docker 1.7.0 dovecot-imapd 1:2.2.9-1ubuntu2 dovecot-antispam 2.0+20130822-2build1 Filesystem is via docker, so aufs is involved, and under that on the host systems is ext4 ----------------------------------------------------- I know mail is not supposed to be moved into a mailbox of type 'unsure'. The server should refuse this action. What actually happens though is that the imap process throws an error and dies: Aug 12 17:53:07 255c7fc2d2f0 imap: antispam: mailbox_is_unsure(Review-Classification): 1 Aug 12 17:53:07 255c7fc2d2f0 dovecot: imap(user(a)example.com): Panic: file mail-storage.c: line 2141 (mailbox_copy): assertion failed: (!ctx->unfinished) Aug 12 17:53:07 255c7fc2d2f0 dovecot: imap(user(a)example.com): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x5e271) [0x7f718e7dd271] -> /usr/lib/dovecot/libdovecot.so.0(+0x5e34e) [0x7f718e7dd34e] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f718e798a9e] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x7196f) [0x7f718eab896f] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_move+0x15) [0x7f718eab8985] -> dovecot/imap(+0xded5) [0x7f718ef84ed5] -> dovecot/imap(command_exec+0x3c) [0x7f718ef8f6dc] -> dovecot/imap(+0x176cf) [0x7f718ef8e6cf] -> dovecot/imap(+0x17785) [0x7f718ef8e785] -> dovecot/imap(client_handle_input+0x125) [0x7f718ef8eaa5] -> dovecot/imap(client_input+0x75) [0x7f718ef8ee35] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x27) [0x7f718e7ed247] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xd7) [0x7f718e7edfd7] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f718e7ecde8] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f718e79dc93] -> dovecot/imap(main+0x2c4) [0x7f718ef832f4] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf5) [0x7f718e3dbec5] -> dovecot/imap(+0xc460) [0x7f718ef83460] Aug 12 17:53:07 255c7fc2d2f0 dovecot: imap(user(a)example.com): Fatal: master: service(imap): child 58 killed with signal 6 (core dumped) ----------------------------------------------------------------------- root@8ec9579667fc:/# gdb /usr/lib/dovecot/imap /tmp/61 GNU gdb (Ubuntu 7.7.1-0ubuntu5~14.04.2) 7.7.1 Copyright (C) 2014 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-linux-gnu". Type "show configuration" for configuration details. For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>. Find the GDB manual and other documentation resources online at: <http://www.gnu.org/software/gdb/documentation/>. For help, type "help". Type "apropos word" to search for commands related to "word"... Reading symbols from /usr/lib/dovecot/imap...Reading symbols from /usr/lib/debug//usr/lib/dovecot/imap...done. done. [New LWP 61] Core was generated by `dovecot/imap'. Program terminated with signal SIGABRT, Aborted. #0 0x00007f5dd5394cc9 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56 56 ../nptl/sysdeps/unix/sysv/linux/raise.c: No such file or directory. (gdb) bt full #0 0x00007f5dd5394cc9 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56 resultvar = 0 pid = 61 selftid = 61 #1 0x00007f5dd53980d8 in __GI_abort () at abort.c:89 save_stage = 2 act = {__sigaction_handler = {sa_handler = 0x800, sa_sigaction = 0x800}, sa_mask = {__val = {140041026109520, 178, 140041026077952, 512, 140040990095251, 140041026077952, 140041026077952, 512, 140040990087565, 140734823456136, 140040990231826, 140041026077952, 140734823456040, 0, 140040990231929, 140041026077952}}, sa_flags = -713567062, sa_restorer = 0x7fff6128dd01} sigs = {__val = {32, 0 <repeats 15 times>}} #2 0x00007f5dd5781298 in default_fatal_finish (type=<optimized out>, status=status@entry=0) at failures.c:192 backtrace = 0x7f5dd79d0538 "/usr/lib/dovecot/libdovecot.so.0(+0x5e271) [0x7f5dd5781271] -> /usr/lib/dovecot/libdovecot.so.0(+0x5e34e) [0x7f5dd578134e] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f5dd573ca9e] -> /usr/lib/d"... #3 0x00007f5dd578134e in i_internal_fatal_handler (ctx=0x7fff6128dd70, format=<optimized out>, args=<optimized out>) at failures.c:653 status = 0 #4 0x00007f5dd573ca9e in i_panic (format=format@entry=0x7f5dd5ab1e68 "file %s: line %d (%s): assertion failed: (%s)") at failures.c:264 ctx = {type = LOG_TYPE_PANIC, exit_status = 0, timestamp = 0x0} args = {{gp_offset = 40, fp_offset = 48, overflow_arg_area = 0x7fff6128de60, reg_save_area = 0x7fff6128dda0}} #5 0x00007f5dd5a5c96f in mailbox_copy (_ctx=<optimized out>, mail=mail@entry=0x7f5dd79ffbc0) at mail-storage.c:2141 ctx = 0x7f5dd7a043e0 t = 0x7f5dd79fdf00 keywords = 0x0 pvt_flags = 0 real_mail = <optimized out> ret = -1 __FUNCTION__ = "mailbox_copy" #6 0x00007f5dd5a5c985 in mailbox_move (_ctx=<optimized out>, mail=0x7f5dd79ffbc0) at mail-storage.c:2153 ctx = 0x7f5dd7a043e0 #7 0x00007f5dd5f28ed5 in fetch_and_copy (copy_count_r=<synthetic pointer>, src_uidset_r=<synthetic pointer>, search_args=<optimized out>, src_trans_r=0x7fff6128df18, t=<optimized out>, move=true, client=0x7f5dd79ee440) at cmd-copy.c:67 search_ctx = 0x7f5dd79ff920 src_trans = 0x7f5dd79fec10 srcset_ctx = {str = 0x7f5dd79d0350, first_uid = 0, last_uid = 4294967295} ret = 1 save_ctx = 0x0 mail = 0x7f5dd79ffbc0 copy_count = 1 src_uidset = 0x7f5dd79d0350 #8 cmd_copy_full (cmd=0x7f5dd79eee70, move=<optimized out>) at cmd-copy.c:123 client = 0x7f5dd79ee440 dest_storage = <optimized out> destbox = 0x7f5dd79f8d10 t = 0x7f5dd79fdf00 src_trans = 0x7f5dd573d029 <t_pop_check+9> search_args = 0x7f5dd79f73a0 messageset = 0x7f5dd79dbc10 "76" mailbox = 0x7f5dd79dbc18 "Review-Classification" src_uidset = <optimized out> sync_flags = (unknown: 0) imap_flags = (unknown: 0) changes = {pool = 0x7f5dd79d0350, uid_validity = 0, saved_uids = {arr = {buffer = 0x1, element_size = 140040986301132}, v = 0x1, v_modifiable = 0x1}, ignored_modseq_changes = 3617438728, changed = 93, no_read_perm = 127} msg = <optimized out> ret = <optimized out> __FUNCTION__ = "cmd_copy_full" #9 0x00007f5dd5f336dc in command_exec (cmd=0x7f5dd79eee70) at imap-commands.c:158 hook = 0x7f5dd79d90d0 ret = <optimized out> #10 0x00007f5dd5f326cf in client_command_input (cmd=0x7f5dd79eee70) at imap-client.c:780 client = 0x7f5dd79ee440 command = <optimized out> __FUNCTION__ = "client_command_input" #11 0x00007f5dd5f32785 in client_command_input (cmd=0x7f5dd79eee70) at imap-client.c:841 client = 0x7f5dd79ee440 command = <optimized out> __FUNCTION__ = "client_command_input" #12 0x00007f5dd5f32aa5 in client_handle_next_command (remove_io_r=<synthetic pointer>, client=0x7f5dd79ee440) at imap-client.c:879 No locals. #13 client_handle_input (client=client@entry=0x7f5dd79ee440) at imap-client.c:891 _data_stack_cur_id = 3 remove_io = false handled_commands = false __FUNCTION__ = "client_handle_input" #14 0x00007f5dd5f32e35 in client_input (client=0x7f5dd79ee440) at imap-client.c:933 cmd = 0x7f5dd79e5ae0 output = 0x7f5dd79eeca0 bytes = 39 __FUNCTION__ = "client_input" #15 0x00007f5dd5791247 in io_loop_call_io (io=0x7f5dd79eed90) at ioloop.c:388 ioloop = 0x7f5dd79d8720 t_id = 2 #16 0x00007f5dd5791fd7 in io_loop_handler_run (ioloop=ioloop@entry=0x7f5dd79d8720) at ioloop-epoll.c:220 ctx = 0x7f5dd79d93b0 list = 0x7f5dd79dade0 io = <optimized out> tv = {tv_sec = 1799, tv_usec = 999178} events_count = <optimized out> msecs = <optimized out> ret = 1 i = 0 call = <optimized out> __FUNCTION__ = "io_loop_handler_run" #17 0x00007f5dd5790de8 in io_loop_run (ioloop=0x7f5dd79d8720) at ioloop.c:412 __FUNCTION__ = "io_loop_run" #18 0x00007f5dd5741c93 in master_service_run (service=0x7f5dd79d85b0, callback=<optimized out>) at master-service.c:566 No locals. #19 0x00007f5dd5f272f4 in main (argc=1, argv=0x7f5dd79d8390) at main.c:400 set_roots = {0x7f5dd614aa00 <imap_setting_parser_info>, 0x0} login_set = {auth_socket_path = 0x7f5dd79d0048 "\001", postlogin_socket_path = 0x0, postlogin_timeout_secs = 60, callback = 0x7f5dd5f3c0f0 <login_client_connected>, failure_callback = 0x7f5dd5f3be20 <login_client_failed>, request_auth_token = 1} service_flags = <optimized out> storage_service_flags = <optimized out> username = 0x0 c = <optimized out> ------------------------------------------------------------------------------- root@8ec9579667fc:/# dovecot -n # 2.2.9: /etc/dovecot/dovecot.conf # OS: Linux 3.13.0-43-generic x86_64 Ubuntu 14.04.3 LTS ext4 auth_debug = yes auth_verbose = yes disable_plaintext_auth = no first_valid_gid = 150 first_valid_uid = 150 last_valid_gid = 150 last_valid_uid = 150 mail_debug = yes mail_gid = vmail mail_location = maildir:/var/vmail/%d/%n/Maildir:INDEX=/var/vmail/%d/%n/Maildir/indexes mail_uid = vmail namespace inbox { inbox = yes location = mailbox Attention-Not-Required { auto = subscribe special_use = \Junk } mailbox Attention { auto = subscribe } mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Review-Classification { auto = subscribe } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { antispam_backend = dspam antispam_debug_target = syslog antispam_dspam_args = --deliver=;--user;%u; antispam_dspam_binary = /usr/bin/dspam antispam_signature = X-DSPAM-Signature antispam_signature_missing = error antispam_spam = Attention-Not-Required antispam_trash = Trash antispam_unsure = Review-Classification antispam_verbose_debug = 1 mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = postmaster(a)example.net protocols = " imap lmtp" service lmtp { inet_listener lmtp { address = 127.0.0.1 port = 24 } user = vmail } ssl_cert = </etc/dovecot/dovecot.crt ssl_key = </etc/dovecot/private/dovecot.key ssl_protocols = TLSv1.2 TLSv1.1 TLSv1 !SSLv3 !SSLv2 userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lmtp { mail_plugins = " sieve" } protocol lda { mail_plugins = " sieve" } protocol imap { mail_plugins = " antispam" }

1 1

doveadm-server hangs with 100% cpu usage
by Dennis Kuhn 02 Sep '15

02 Sep '15

we have some replication issues. From time to time a doveadm-server process takes 100% cpu in the state recv_mailbox_tree_deletes on the replica. The process runs forever until it is manually killed. Strace on this process doesn't show anything. Sometimes we have several doveadm-server processes in this state, all for the same account, all with 100% CPU Load. The logfile on the master says: Error: Timeout during state=recv_mailbox_tree Error: dsync(dobby5.heinlein-support.de): I/O has stalled, no activity for 600 seconds My workaround is to delete the user directory on the replica so that the whole account is replicated again. This solves the problem for this specific account. The dovecot version is 2.2.15 on the master and 2.2.16 on the replica. Dennis Kuhn -- Heinlein Support GmbH Schwedter Str. 8/9b, 10119 Berlin http://www.heinlein-support.de Tel: 030 / 405051-57 Fax: 030 / 405051-19 Zwangsangaben lt. §35a GmbHG: HRB 93818 B / Amtsgericht Berlin-Charlottenburg, Geschäftsführer: Peer Heinlein -- Sitz: Berlin

3 4

Moving mails from shared folder to shared folder doesn't work
by Peer Heinlein 02 Sep '15

02 Sep '15

Hi, having the attached configuration with Dovecot 2.2.9, Dovecot's crashing when moving a mail from a shared folder into another shared folder. Moving that mail into a "real" folder of the user or moving that mail from a real folder into the shared folder is always working. But moving from a shared folder into a shared folder doesn't work. Sep 2 11:47:42 mail02 dovecot: imap(peer.heinlein(a)example.com): Panic: file mail-index.c: line 380 (mail_index_keywords_unref): assertion failed: (keywords->refcount > 0) Sep 2 11:47:42 mail02 dovecot: imap(peer.heinlein(a)example.com): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x62792) [0x7f87e455f792] -> /usr/lib/dovecot/libdovecot.so.0(+0x627f6) [0x7f87e455f7f6] -> /usr/lib/dovecot/libdovecot.so.0(+0x1c5ca) [0x7f87e45195ca] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0xb032f) [0x7f87e487232f] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_copy+0x75) [0x7f87e4838315] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_move+0x1d) [0x7f87e48383dd] -> dovecot/imap [peer.heinlein(a)example.com 172.31.xxx.xxx UID move](+0xec4a) [0x7f87e4cfbc4a] -> dovecot/imap [peer.heinlein(a)example.com 172.31.xxx.xxx UID move](command_exec+0x3d) [0x7f87e4d06acd] -> dovecot/imap [peer.heinlein(a)example.com 172.31.xxx.xxx UID move](+0x18b60) [0x7f87e4d05b60] -> dovecot/imap [peer.heinlein(a)example.com 172.31.xxx.xxx UID move](+0x18c4d) [0x7f87e4d05c4d] -> dovecot/imap [peer.heinlein(a)example.com 172.31.xxx.xxx UID move](client_handle_input+0x11d) [0x7f87e4d05edd] -> dovecot/imap [peer.heinlein(a)example.com 172.31.xxx.xxx UID move](client_input+0x72) [0x7f87e4d06292] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7f87e456f5f6] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xaf) [0x7f87e45706cf] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f87e456f568] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f87e451e0c3] -> dovecot/imap [peer.heinlein(a)example.com 172.31.xxx.xxx UID move](main+0x303) [0x7f87e4d10043] -> /lib/libc.so.6(__libc_start_main+0xfd) [0x7f87e4192c8d] -> dovecot/imap [peer.heinlein(a)example.com 172.31.xxx.xxx UID move](+0xd0e9) [0x7f87e4cfa0e9] Sep 2 11:47:42 mail02 dovecot: imap(peer.heinlein(a)example.com): Fatal: master: service(imap): child 18707 killed with signal 6 (core dumps disabled) Peer -- Heinlein Support GmbH Schwedter Str. 8/9b, 10119 Berlin http://www.heinlein-support.de Tel: 030 / 405051-42 Fax: 030 / 405051-19 Zwangsangaben lt. §35a GmbHG: HRB 93818 B / Amtsgericht Berlin-Charlottenburg, Geschäftsführer: Peer Heinlein -- Sitz: Berlin

1 0