- dovecot - dovecot.org

Problems with IMAP/POP and dovecot director on backend (director_proxy_maybe)
by dominik 20 Jul '15

20 Jul '15

Hello dovecot community, first of all: dovecot ist great! ;) ...nevertheless I´ve got some problems to get my director scenario running as needed/expected :( My scenario: I´d like to configure two dovecot backends, without the need for multiple dovecot instances. Both backend servers are active/active and act on top of a glusterfs storage, which implies the need for dovecot director. As described in release notes (v2.2.17) this should be possible by setting the extra field "director_proxy_maybe=yes".: "+ director: Implemented director_proxy_maybe passdb extra field to be able to run director and backend in the same Dovecot instance. (LMTP doesn't support mixed proxy/non-proxy destinations currently.)" My setup: * 1 LMTP client (SLES11p3 with postfix) * 1 IMAP/POP3 client (Debian8 with thunderbird 31.6.0): 10.0.0.26. The client connects through a dovecot mailproxy or direct. * 1 dovecot mailproxy: 10.0.1.151 * 2 mailbox backends running dovecot v2.2.18 on SLES11p3 with mail_location pointing to a glusterfs-mountpoint (GlusterFS: v3.6.3) * mailbox01.example.de: 10.0.2.21 * mailbox02.example.de: 10.0.2.22 * mailbox-gluster.example.de points as an A-RR to 10.0.2.21 and 10.0.2.22. My problem: With LMTP everything works fine (thanks for this!). The director sets the "host" field correctly and all delivery attempts work fine to the estimated backend servers. But when I try to connect via IMAP-/POP3-client (through proxy or direct) it fails with following log messages. It seems, that the director doesn´t set the host field within IMAP/POP sessions before proxying!? auth: Debug: auth client connected (pid=46359) imap-login: ID sent: x-session-id=V3iJmU4biAAK/BAa, x-originating-ip=10.0.0.26, x-originating-port=54408, x-connected-ip=10.0.1.151, x-connected-port=143, x-proxy-ttl=4: user=<>, rip=10.0.1.151, lip=10.0.2.21, session=<RVnAm04bzwAK/FCX> auth: Debug: client in: AUTH 1 PLAIN service=imap session=RVnAm04bzwAK/FCX lip=10.0.2.21 rip=10.0.1.151 lport=143 rport=54735 resp=<hidden> auth: Debug: ldap(tester(a)example.de,10.0.1.151,<RVnAm04bzwAK/FCX>): bind search: base=o=example,c=de filter=(&(|(uid=tester@example.de)(mail=tester@example.de))(!(<cut-cut-cut>)) [...] auth: Debug: client passdb out: OK 1 user=tester(a)example.de director_proxy_maybe=yes lip=10.0.2.21 lport=143 proxy pass=<hidden> imap-login: Debug: Ignoring unknown passdb extra field: director_proxy_maybe imap-login: Debug: Ignoring unknown passdb extra field: lip imap-login: Debug: Ignoring unknown passdb extra field: lport imap-login: Error: proxy: host not given: user=<tester(a)example.de>, method=PLAIN, rip=10.0.2.151, lip=10.0.2.21, session=<RVnAm04bzwAK/FCX> imap-login: Disconnected (internal failure, 1 successful auths): user=<tester(a)example.de>, method=PLAIN, rip=10.0.2.151, lip=10.0.2.21, session=<RVnAm04bzwAK/FCX> Finally the output of "doveadm proxy list" is empty! "doveadm director map" output after a successfull LMTP delivery attempt (before: doveadm director flush all): user hash mail server ip expire time tester(a)example.de 856838019 10.0.2.21 2015-07-20 15:49:18 "doveadm director map" output after a failed IMAP session attempt (before: doveadm director flush all): user hash mail server ip expire time tester(a)example.de 856838019 10.0.2.21 2015-07-20 15:50:02 So, director seems to work in this constellation, but only for LMTP and not for IMAP/POP Proxy :( Has anybody configured this before? Thanks in advance and a lot of greetings from Germany, Dominik ############ My config (mailbox01.example.de. mailbox02.example.de is identical, except the hostname): # doveconf -n # 2.2.18: /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.8 (0c4ae064f307+) # OS: Linux 3.0.101-0.46-default x86_64 SUSE Linux Enterprise Server 11 (x86_64) auth_cache_negative_ttl = 0 auth_cache_ttl = 5 mins auth_debug = yes auth_master_user_separator = "#" auth_mechanisms = plain login auth_verbose = yes auth_verbose_passwords = sha1 director_consistent_hashing = yes director_mail_servers = mailbox-gluster.example.de director_servers = 10.0.2.21:9090 10.0.2.22:9090 disable_plaintext_auth = no imap_metadata = yes listen = mailbox01.example.de lmtp_proxy = yes lmtp_save_to_detail_mailbox = yes lock_method = dotlock login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c session=<%{session}> %k login_trusted_networks = 10.0.2.0/24 mail_access_groups = dovecot mail_attribute_dict = file:Maildir/dovecot-metadata mail_debug = yes mail_fsync = always mail_location = maildir:~/Maildir/ mail_plugins = quota acl managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mmap_disable = yes namespace { inbox = yes location = mailbox Archiv { special_use = \Archive } mailbox Entwürfe { special_use = \Drafts } mailbox "Gelöschte Objekte" { special_use = \Trash } mailbox "Gesendete Objekte" { special_use = \Sent } mailbox Sent { special_use = \Sent } mailbox Trash { special_use = \Trash } mailbox unerwünscht { special_use = \Junk } prefix = INBOX/ separator = / } namespace { disabled = yes list = children location = maildir:%%h/:INDEXPVT=~/dovecot.index.shared/%%u/ prefix = SHARED/%%u/ separator = / type = shared } passdb { args = /***********/passwd.masterusers driver = passwd-file master = yes } passdb { args = /etc/dovecot/ldap.conf driver = ldap } plugin { acl = vfile acl_shared_dict = file:/var/lib/dovecot/db/shared-mailboxes.db } postmaster_address = postmaster@%d protocols = " imap lmtp pop3" service auth-worker { user = $default_internal_user } service auth { unix_listener /var/spool/postfix/private/saslauth_via_dovecot { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { mode = 0666 user = dovecot } } service director { fifo_listener login/proxy-notify { mode = 0600 user = $default_login_user } inet_listener { port = 9090 } unix_listener director-userdb { mode = 0666 } unix_listener login/director { mode = 0666 } } service doveadm { inet_listener { port = 24245 } } service imap-login { executable = imap-login director inet_listener imaps { port = 0 } } service ipc { unix_listener ipc { user = dovecot } } service lmtp { inet_listener lmtp { port = 24 } } service managesieve-login { inet_listener sieve { address = mailbox01.example.de } } service pop3-login { executable = pop3-login director } ssl = no ssl_cipher_list = kEECDH+aRSA+AES256:kEDH+aRSA+AES256:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA ssl_dh_parameters_length = 4096 ssl_options = no_compression ssl_prefer_server_ciphers = yes ssl_protocols = !SSLv2 !SSLv3 !TLSv1.1 userdb { args = /etc/dovecot/ldap.conf driver = ldap } verbose_proctitle = yes protocol lmtp { auth_socket_path = director-userdb mail_plugins = quota notify mail_log } protocol imap { imap_id_log = * mail_plugins = quota fts fts_squat imap_quota mail_log notify acl imap_acl } protocol pop3 { mail_plugins = quota acl pop3_uidl_format = %fan } ################ My /etc/dovecot/ldap.conf: uris = ldap://ldap.example.de pass_filter = (&(|(uid=%u)(mail=%u))(!(<cut-cut-cut>))) pass_attrs = =proxy_maybe=yes, \ =director_proxy_maybe=yes user_filter = (&(|(uid=%u)(mail=%u)(mailAlternateAddress=%u))(!(<cut-cut-cut>))) user_attrs = =master_user=%u, \ =uid=%{ldap:qmailUID:12345}, \ =gid=%{ldap:qmailGID:12345}, \ =home=/mnt/testvol2/%{ldap:mailMessageStore}/%1{ldap:mail}/%{ldap:mail}/, \ =quota_rule=*:bytes=%{ldap:mailQuotaSize:128M} iterate_attrs = mail=user iterate_filter = (objectClass=qmailuser)

1 0

bug in group permission check
by krzf83＠gmail.com 19 Jul '15

19 Jul '15

Jul 19 01:05:27 sv1 dovecot: auth: Error: passwd-file(aa@ddd,89...24,<>): stat(/usr/dovecot-cfg/dom-home/ddd/etc/ddd/shadow) failed: Permission denied (euid=33454(dovecot) egid=33454(dovecot) missing +x perm: /usr/dovecot-cfg/dom-home/ddd, we're not in group 33795(sysgroup), dir owned by 32072:33795 mode=0710) root@sv1 [~]# sudo -u dovecot groups dovecot sysgroup root@sv1 [~]# sudo -u dovecot cat /usr/dovecot-cfg/dom-home/ddd/etc/ddd/shadow <prints content of the file> It seems that dovecot incorecly checks for group permissions not even trying to access file - probably cant handle that dovecot is part of more than 1 group. When its part of single group problem is not occuring.

2 1

feature suggestion: wildcard in userdb
by krzf83＠gmail.com 19 Jul '15

19 Jul '15

feature suggestion: wildcard in userdb aa:x:32009:32012::/home/usr/mail/bb::userdb_quota_rule=*:bytes=700M *:x:32009:32012::/home/usr/mail/bb: That would be usefull in many situation, for example to set default values per domain (userdb per domain) userdb { driver = passwd-file args = /usr/dovecot-cfg/userdb/%d }

1 0

Dovecot - Telnet error
by Sachin Kulkarni1 18 Jul '15

18 Jul '15

Hello All, I have installed dovecot and started it. However when I try to telnet getting below error means dovecot starting is not successful. telnet localhost 10110 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. Connection to localhost closed by foreign host. Please advise. Thanks and Regards, Sachin Kulkarni ============================================================================================================================ Disclaimer: This message and the information contained herein is proprietary and confidential and subject to the Tech Mahindra policy statement, you may review the policy at http://www.techmahindra.com/Disclaimer.html externally http://tim.techmahindra.com/tim/disclaimer.html internally within TechMahindra. ============================================================================================================================

4 3

Helper to open "/doc/wiki/.." paths; suggestions
by Christian Jaeger 18 Jul '15

18 Jul '15

I wrote this script to have an easier time looking at the doc paths referenced from the default configuration files (currently using dovecot in Debian oldstable). Feel free to include in the distribution or wherever. Probably a better solution would be to publish the config files with the paths already expanded to the online URL, or a local filesystem path that works (in the latter case, I'd wish the docs would be bundled in html format). I wonder whether to approach the debian maintainer about this or the Dovecot team? Definitely something for the maintainer is to put the bundled docs in a place where I would have expected it (/usr/share/docs/dovecot/wiki/ instead of /usr/share/docs/dovecot-core/dovecot/wiki/, or a dovecot-doc package, also, links or mentions from the doc dirs of all dovecot packages to the docs). Also, I think there should be a README document that serves as the first introduction of the user to how to configure the system: how are the config files split up, what does "!include" mean (why the "!"? Is it a comment char?), other rules on the config file format. I.e. the basics to enable the new user to go about reading the current config and where to find further docs/help. Thanks & Cheers, Christian.

1 1

Getting duplicated mails while using imapc and dsync
by Michael 17 Jul '15

17 Jul '15

Hello list, currently I'm migrating our old mailserver to a new mail architecture that is based on a master-master dovecot setup (two machines). The replication actually works but I'm also syncing our mails from the current mailserver via imapc on a regular schedule. For some reason I've in most (but not all) imapc-synced mailboxes duplicated emails that I also can't deduplicate with doveadm. I've also set up test-mailboxes that I don't sync with imapc and in those I don't have any duplicated mails. My command to sync the mails from the old host to the master-master system looks as follows: doveadm -o imapc_user=$i*dovemig -o imapc_password=<password> -o imapc_host=<oldhost> -o imapc_features="rfc822.size fetch-headers" -o mail_prefetch_count=20 -v -D sync -R -u$EMAIL imapc: &> $LOGS/$i.log So, is this actually the wrong approach to sync mails from the old host to the new one or is it just not recommended to sync them over-and-over again in such a setup via imapc or is it better to sync them only once? Any hint/pointing me to the right solution is greatly appreciated. Michael

1 0

Dovecot-EE repository for Debian 8 (Jessie/stable)
by Bernhard Schmidt 17 Jul '15

17 Jul '15

Hi, are there plans to support Debian 8 (alias stable, alias jessie) in the dovecot-ee repository? Currently there are only squeeze and wheezy repos. The wheezy repo is uninstallable due to an unsatisfyable dependency on libicu48. Of course you can install libicu48 from Wheezy on a Jessie system, but this will break security updates and might not be the best idea for a library like that. Bernhard

1 0

migrate via dsync error Panic: file mail-transaction-log.c: line 271 (mail_transaction_log_rotate): assertion failed: (file->locked)
by wuwei 17 Jul '15

17 Jul '15

hi all when I use dsync migrate users from dovecot2.0.14(maildir Solaris10) to dovecot2.2.15(mdbox debian7) , most of the users migrated well, only one user has a error. migrate cmd: "$dovecotHome"bin/doveadm -Dv -o mail_fsync=never -o imapc_host=$ip backup -R -u $user imapc: dovecot2.2.15 log: doveadm(root): Debug: Loading modules from directory: /home/mail/dovecot/lib/dovecot doveadm(root): Debug: Module loaded: /home/mail/dovecot/lib/dovecot/lib10_quota_plugin.so doveadm(root): Debug: Module loaded: /home/mail/dovecot/lib/dovecot/lib15_notify_plugin.so doveadm(root): Debug: Module loaded: /home/mail/dovecot/lib/dovecot/lib20_fts_plugin.so doveadm(root): Debug: Module loaded: /home/mail/dovecot/lib/dovecot/lib20_mail_log_plugin.so doveadm(root): Debug: Module loaded: /home/mail/dovecot/lib/dovecot/lib20_zlib_plugin.so doveadm(root): Debug: Module loaded: /home/mail/dovecot/lib/dovecot/lib21_fts_lucene_plugin.so doveadm(root): Debug: Loading modules from directory: /home/mail/dovecot/lib/dovecot/doveadm doveadm(root): Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: /home/mail/dovecot/lib/dovecot/doveadm/lib10_doveadm_acl_plugin.so: undefined symbol: acl_user_module (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: /home/mail/dovecot/lib/dovecot/doveadm/lib10_doveadm_expire_plugin.so: undefined s ymbol: expire_set_deinit (this is usually intentional, so just ignore this message) doveadm(root): Debug: Module loaded: /home/mail/dovecot/lib/dovecot/doveadm/lib10_doveadm_quota_plugin.so doveadm(root): Debug: Module loaded: /home/mail/dovecot/lib/dovecot/doveadm/lib10_doveadm_sieve_plugin.so doveadm(root): Debug: Module loaded: /home/mail/dovecot/lib/dovecot/doveadm/lib20_doveadm_fts_lucene_plugin.so doveadm(root): Debug: Module loaded: /home/mail/dovecot/lib/dovecot/doveadm/lib20_doveadm_fts_plugin.so doveadm(chenwenguang(a)eachnet.com): Debug: auth input: chenwenguang(a)eachnet.com home=/data/02/eachnet.com/281/721/chenwenguang@eachnet.com uid=1010 gid=1010 mail=mdbox:/ data/02/eachnet.com/281/721/chenwenguang@eachnet.com quota_rule=*:storage=1024MB sieve_dir=/data/02/eachnet.com/281/721/chenwenguang@eachnet.com sieve=/data/02/eachnet. com/281/721/chenwenguang(a)eachnet.com/dovecot.sieve doveadm(chenwenguang(a)eachnet.com): Debug: Added userdb setting: mail=mdbox:/data/02/eachnet.com/281/721/chenwenguang@eachnet.com doveadm(chenwenguang(a)eachnet.com): Debug: Added userdb setting: plugin/quota_rule=*:storage=1024MB doveadm(chenwenguang(a)eachnet.com): Debug: Added userdb setting: plugin/sieve=/data/02/eachnet.com/281/721/chenwenguang@eachnet.com/dovecot.… doveadm(chenwenguang(a)eachnet.com): Debug: Added userdb setting: plugin/sieve_dir=/data/02/eachnet.com/281/721/chenwenguang@eachnet.com doveadm(chenwenguang(a)eachnet.com): Debug: Effective uid=1010, gid=1010, home=/data/02/eachnet.com/281/721/chenwenguang@eachnet.com doveadm(chenwenguang(a)eachnet.com): Debug: Quota root: name=chenwenguang(a)eachnet.com backend=dict args=:redis:host=172.24.202.60:prefix=user_quota/ doveadm(chenwenguang(a)eachnet.com): Debug: Quota rule: root=chenwenguang(a)eachnet.com mailbox=* bytes=1073741824 messages=0 doveadm(chenwenguang(a)eachnet.com): Debug: Quota rule: root=chenwenguang(a)eachnet.com mailbox=Trash bytes=+858993459 (80%) messages=0 doveadm(chenwenguang(a)eachnet.com): Debug: Quota warning: bytes=966367641 (90%) messages=0 reverse=no command=quota-warning 90 chenwenguang(a)eachnet.com doveadm(chenwenguang(a)eachnet.com): Debug: Quota warning: bytes=858993459 (80%) messages=0 reverse=no command=quota-warning 80 chenwenguang(a)eachnet.com doveadm(chenwenguang(a)eachnet.com): Debug: Quota warning: bytes=751619276 (70%) messages=0 reverse=no command=quota-warning 70 chenwenguang(a)eachnet.com doveadm(chenwenguang(a)eachnet.com): Debug: Quota warning: bytes=644245094 (60%) messages=0 reverse=no command=quota-warning 60 chenwenguang(a)eachnet.com doveadm(chenwenguang(a)eachnet.com): Debug: Quota grace: root=chenwenguang(a)eachnet.com bytes=107374182 (10%) doveadm(chenwenguang(a)eachnet.com): Debug: dict quota: user=chenwenguang(a)eachnet.com, uri=redis:host=172.24.202.60:prefix=user_quota/, noenforcing=0 doveadm(chenwenguang(a)eachnet.com): Debug: Namespace inbox: type=private, prefix=, sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=mdbox:/data/02/eachn et.com/281/721/chenwenguang@eachnet.com doveadm(chenwenguang(a)eachnet.com): Debug: fs: root=/data/02/eachnet.com/281/721/chenwenguang@eachnet.com, index=, indexpvt=, control=, inbox=, alt= doveadm(chenwenguang(a)eachnet.com): Debug: Namespace : Using permissions from /data/02/eachnet.com/281/721/chenwenguang(a)eachnet.com: mode=0700 gid=default dsync(chenwenguang(a)eachnet.com): Debug: Effective uid=1010, gid=1010, home=/data/02/eachnet.com/281/721/chenwenguang@eachnet.com dsync(chenwenguang(a)eachnet.com): Debug: Quota root: name=chenwenguang(a)eachnet.com backend=dict args=:redis:host=172.24.202.60:prefix=user_quota/ dsync(chenwenguang(a)eachnet.com): Debug: Quota rule: root=chenwenguang(a)eachnet.com mailbox=* bytes=1073741824 messages=0 dsync(chenwenguang(a)eachnet.com): Debug: Quota rule: root=chenwenguang(a)eachnet.com mailbox=Trash bytes=+858993459 (80%) messages=0 dsync(chenwenguang(a)eachnet.com): Debug: Quota warning: bytes=966367641 (90%) messages=0 reverse=no command=quota-warning 90 chenwenguang(a)eachnet.com dsync(chenwenguang(a)eachnet.com): Debug: Quota warning: bytes=858993459 (80%) messages=0 reverse=no command=quota-warning 80 chenwenguang(a)eachnet.com dsync(chenwenguang(a)eachnet.com): Debug: Quota warning: bytes=751619276 (70%) messages=0 reverse=no command=quota-warning 70 chenwenguang(a)eachnet.com dsync(chenwenguang(a)eachnet.com): Debug: Quota warning: bytes=644245094 (60%) messages=0 reverse=no command=quota-warning 60 chenwenguang(a)eachnet.com dsync(chenwenguang(a)eachnet.com): Debug: Quota grace: root=chenwenguang(a)eachnet.com bytes=107374182 (10%) dsync(chenwenguang(a)eachnet.com): Debug: dict quota: user=chenwenguang(a)eachnet.com, uri=redis:host=172.24.202.60:prefix=user_quota/, noenforcing=0 dsync(chenwenguang(a)eachnet.com): Debug: Namespace inbox: type=private, prefix=, sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=imapc: dsync(chenwenguang(a)eachnet.com): Debug: imapc(172.24.202.201:143): Looking up IP address dsync(chenwenguang(a)eachnet.com): Debug: imapc(172.24.202.201:143): Connecting to 172.24.202.201:143 dsync(chenwenguang(a)eachnet.com): Debug: imapc(172.24.202.201:143): Server capabilities: IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN dsync(chenwenguang(a)eachnet.com): Debug: imapc(172.24.202.201:143): Authenticating as chenwenguang(a)eachnet.com dsync(chenwenguang(a)eachnet.com): Debug: imapc(172.24.202.201:143): Server capabilities: IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THRE AD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST -STATUS QUOTA dsync(chenwenguang(a)eachnet.com): Debug: imapc(172.24.202.201:143): Authenticated successfully dsync(chenwenguang(a)eachnet.com): Debug: imapc: root=, index=, indexpvt=, control=, inbox=, alt= dsync(chenwenguang(a)eachnet.com): Debug: fts: Indexes disabled for namespace '' dsync(chenwenguang(a)eachnet.com): Debug: brain M: Local mailbox tree: Drafts guid=e0187b65e763143666d22094cedfe6a4 uid_validity=1279693072 uid_next=1 subs=no last_change =0 last_subs=0 dsync(chenwenguang(a)eachnet.com): Debug: brain S: Local mailbox tree: INBOX guid=c92f64f79f0d1ed01e6d5b314f04886c uid_validity=1279693068 uid_next=134807 subs=no last_ch ange=0 last_subs=0 dsync(chenwenguang(a)eachnet.com): Debug: brain M: Local mailbox tree: Trash guid=7f5af7ba291b2df1a11d573bdb55d7e9 uid_validity=1279693071 uid_next=1 subs=no last_change= 0 last_subs=0 dsync(chenwenguang(a)eachnet.com): Debug: brain S: Local mailbox tree: Drafts guid=e0187b65e763143666d22094cedfe6a4 uid_validity=1279693072 uid_next=1 subs=no last_change =0 last_subs=0 dsync(chenwenguang(a)eachnet.com): Debug: brain M: Local mailbox tree: Sent Items guid=34b8141947b9372e94589bd35a54dac5 uid_validity=1279693070 uid_next=1 subs=no last_ch ange=0 last_subs=0 dsync(chenwenguang(a)eachnet.com): Debug: brain S: Local mailbox tree: Trash guid=7f5af7ba291b2df1a11d573bdb55d7e9 uid_validity=1279693071 uid_next=1 subs=no last_change= 0 last_subs=0 dsync(chenwenguang(a)eachnet.com): Debug: brain M: Local mailbox tree: INBOX guid=c92f64f79f0d1ed01e6d5b314f04886c uid_validity=1279693068 uid_next=1 subs=no last_change= 0 last_subs=0 dsync(chenwenguang(a)eachnet.com): Debug: brain S: Local mailbox tree: Sent Items guid=34b8141947b9372e94589bd35a54dac5 uid_validity=1279693070 uid_next=1 subs=no last_ch ange=0 last_subs=0 dsync(chenwenguang(a)eachnet.com): Debug: brain M: Local mailbox tree: Junk E-mail guid=9e1a7b3d0b113405571152c94fcf1154 uid_validity=1279693069 uid_next=1 subs=no last_c hange=0 last_subs=0 dsync(chenwenguang(a)eachnet.com): Debug: brain S: Local mailbox tree: Junk E-mail guid=9e1a7b3d0b113405571152c94fcf1154 uid_validity=1279693069 uid_next=1 subs=no last_c hange=0 last_subs=0 dsync(chenwenguang(a)eachnet.com): Debug: brain M: Remote mailbox tree: INBOX guid=c92f64f79f0d1ed01e6d5b314f04886c uid_validity=1279693068 uid_next=134807 subs=no last_c hange=0 last_subs=0 dsync(chenwenguang(a)eachnet.com): Debug: brain M: Remote mailbox tree: Drafts guid=e0187b65e763143666d22094cedfe6a4 uid_validity=1279693072 uid_next=1 subs=no last_chang e=0 last_subs=0 dsync(chenwenguang(a)eachnet.com): Debug: brain M: Remote mailbox tree: Trash guid=7f5af7ba291b2df1a11d573bdb55d7e9 uid_validity=1279693071 uid_next=1 subs=no last_change =0 last_subs=0 dsync(chenwenguang(a)eachnet.com): Debug: brain M: Remote mailbox tree: Sent Items guid=34b8141947b9372e94589bd35a54dac5 uid_validity=1279693070 uid_next=1 subs=no last_c hange=0 last_subs=0 dsync(chenwenguang(a)eachnet.com): Debug: brain M: Remote mailbox tree: Junk E-mail guid=9e1a7b3d0b113405571152c94fcf1154 uid_validity=1279693069 uid_next=1 subs=no last_ change=0 last_subs=0 dsync(chenwenguang(a)eachnet.com): Debug: brain S: Remote mailbox tree: Drafts guid=e0187b65e763143666d22094cedfe6a4 uid_validity=1279693072 uid_next=1 subs=no last_chang e=0 last_subs=0 dsync(chenwenguang(a)eachnet.com): Debug: brain S: Remote mailbox tree: Trash guid=7f5af7ba291b2df1a11d573bdb55d7e9 uid_validity=1279693071 uid_next=1 subs=no last_change =0 last_subs=0 dsync(chenwenguang(a)eachnet.com): Debug: brain S: Remote mailbox tree: Sent Items guid=34b8141947b9372e94589bd35a54dac5 uid_validity=1279693070 uid_next=1 subs=no last_c hange=0 last_subs=0 dsync(chenwenguang(a)eachnet.com): Debug: brain S: Remote mailbox tree: INBOX guid=c92f64f79f0d1ed01e6d5b314f04886c uid_validity=1279693068 uid_next=1 subs=no last_change =0 last_subs=0 dsync(chenwenguang(a)eachnet.com): Debug: brain S: Remote mailbox tree: Junk E-mail guid=9e1a7b3d0b113405571152c94fcf1154 uid_validity=1279693069 uid_next=1 subs=no last_ change=0 last_subs=0 dsync(chenwenguang(a)eachnet.com): Debug: brain S: Skipping unchanged mailbox e0187b65e763143666d22094cedfe6a4 dsync(chenwenguang(a)eachnet.com): Panic: file mail-transaction-log.c: line 271 (mail_transaction_log_rotate): assertion failed: (file->locked) dsync(chenwenguang(a)eachnet.com): Error: Raw backtrace: /home/mail/dovecot/lib/dovecot/libdovecot.so.0(+0x750bf) [0x7fe817a980bf] -> /home/mail/dovecot/lib/dovecot/libdo vecot.so.0(default_fatal_handler+0x2a) [0x7fe817a9819a] -> /home/mail/dovecot/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7fe817a4a335] -> /home/mail/dovecot/lib/dovecot/ libdovecot-storage.so.0(+0xd499f) [0x7fe817ddb99f] -> /home/mail/dovecot/lib/dovecot/libdovecot-storage.so.0(mail_index_write+0x1e6) [0x7fe817ddac46] -> /home/mail/dove cot/lib/dovecot/libdovecot-storage.so.0(mail_index_sync_commit+0x2db) [0x7fe817dd2f2b] -> /home/mail/dovecot/lib/dovecot/libdovecot-storage.so.0(imapc_mailbox_sync_init +0x20d) [0x7fe817d7690d] -> /home/mail/dovecot/lib/dovecot/libdovecot-storage.so.0(mailbox_sync_init+0x35) [0x7fe817d89e05] -> /home/mail/dovecot/lib/dovecot/libdovecot -storage.so.0(mailbox_sync+0x27) [0x7fe817d89f27] -> /home/mail/dovecot/bin/doveadm(dsync_brain_slave_recv_mailbox+0x7b) [0x430aeb] -> /home/mail/dovecot/bin/doveadm(ds ync_brain_run+0x256) [0x42e726] -> /home/mail/dovecot/bin/doveadm() [0x414ec0] -> /home/mail/dovecot/bin/doveadm() [0x416a7d] -> /home/mail/dovecot/bin/doveadm(doveadm_ mail_try_run+0x231) [0x417721] -> /home/mail/dovecot/bin/doveadm(main+0x3a8) [0x413bf8] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xfd) [0x7fe8176b5ead] -> / home/mail/dovecot/bin/doveadm() [0x413e11] dovecot2.2.15 conf # 2.2.15: /home/mail/dovecot/etc/dovecot/dovecot.conf doveconf: Warning: service auth { client_limit=80960 } is lower than required under max. load (300000) doveconf: Warning: service anvil { client_limit=60000 } is lower than required under max. load (240003) # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.4 auth_cache_negative_ttl = 1 days auth_cache_size = 1000 k auth_cache_ttl = 1 days auth_debug = yes auth_debug_passwords = yes auth_master_user_separator = * auth_mechanisms = plain login debug_log_path = /data/logs/dovecot/logs/dovecot.log default_client_limit = 60000 default_internal_user = vmail default_login_user = dovecotauth default_process_limit = 60000 disable_plaintext_auth = no first_valid_gid = 1007 first_valid_uid = 1007 imapc_features = rfc822.size fetch-headers imapc_host = 172.24.173.212 imapc_password = 111111 imapc_user = %u info_log_path = /data/logs/dovecot/logs/dovecot.log log_path = /data/logs/dovecot/logs/dovecot.log mail_debug = yes mail_fsync = never mail_plugins = fts fts_lucene mail_log notify quota zlib mail_prefetch_count = 1 maildir_very_dirty_syncs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox "Junk E-mail" { auto = subscribe special_use = \Junk } mailbox "Sent Items" { auto = subscribe special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = . } passdb { args = /home/mail/dovecot/etc/dovecot/passwd.masterusers driver = passwd-file master = yes } passdb { args = /home/mail/dovecot/bin/CheckPassword driver = checkpassword } plugin { fts = lucene fts_lucene = whitespace_chars=@. mail_debug = yes mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename append mail_log_fields = uid box msgid size quota = dict:%u::redis:host=172.24.202.60:prefix=user_quota/ quota_rule2 = Trash:storage=+80%% quota_warning = storage=90%% quota-warning 90 %u quota_warning2 = storage=80%% quota-warning 80 %u quota_warning3 = storage=70%% quota-warning 70 %u quota_warning4 = storage=60%% quota-warning 60 %u sieve = ~/.dovecot.sieve sieve_dir = ~/sieve welcome_letter_path = /home/mail/dovecot/etc/welcome welcome_letter_url = http://202.108.252.162:8080/domainmail zlib_save = gz zlib_save_level = 6 } pop3_fast_size_lookups = yes pop3_no_flag_updates = yes postmaster_address = postmastar@%d protocols = imap pop3 sieve lmtp service auth-worker { user = dovecotauth } service auth { client_limit = 80960 unix_listener /home/mail/postfix/var/spool/postfix/private/auth-client { group = postfix mode = 0660 user = postfix } } service imap-login { inet_listener imap { port = 143 } service_count = 0 vsz_limit = 2 G } service imap { process_limit = 60240 } service lmtp { inet_listener { port = 11000 } } service managesieve-login { inet_listener sieve { port = 4190 } service_count = 0 vsz_limit = 2 G } service managesieve { process_limit = 80960 } service pop3-login { inet_listener pop3 { port = 110 } service_count = 0 vsz_limit = 2 G } service quota-warning { executable = script /home/mail/dovecot/bin/quota-warning.sh unix_listener quota-warning { user = vmail } user = vmail } ssl = no submission_host = 172.24.203.8:25 userdb { driver = prefetch } userdb { args = /home/mail/dovecot/etc/dovecot/dovecot-dict-auth.conf.ext driver = dict } protocol imap { imap_logout_format = bytes=%i/%o mail_plugins = fts fts_lucene mail_log notify quota zlib imap_quota imap_zlib } protocol pop3 { pop3_logout_format = bytes=%i/%o, top=%t/%p, retr=%r/%b, del=%d/%m, size=%s } protocol sieve { mail_max_userip_connections = 1000 mail_plugins = fts fts_lucene mail_log notify quota zlib quota managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o managesieve_max_compile_errors = 10 managesieve_max_line_length = 65536 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave } need you help!thank you! -- View this message in context: http://dovecot.2317879.n4.nabble.com/migrate-via-dsync-error-Panic-file-mai… Sent from the Dovecot mailing list archive at Nabble.com.

1 0

Quota policy service not rejecting messages when user over quota
by james＠lottspot.com 17 Jul '15

17 Jul '15

For some very odd reason, the quota-status service is failing to enforce quotas. Every other aspect of my configuration is working with absolutely no problems. When I attempt delivery via LTMP, the message is, as expected, rejected due to the user's inbox being full. root@smtp:/usr/local/etc/mail-config # nc -U /var/spool/postfix/private/dovecot-lmtp < 220 mx0.lottspot.com Dovecot ready. > LHLO localhost < 250-mx0.lottspot.com < 250-8BITMIME < 250-ENHANCEDSTATUSCODES < 250 PIPELINING > MAIL FROM:<root@localhost> < 250 2.1.0 OK > RCPT TO:<james(a)lottspot.vpn> < 552 5.2.2 <james(a)lottspot.vpn> Quota exceeded (mailbox for user is full) The policy service however, just lets everything go right through. I know that accessing the userdb is not an issue, because I passed a bogus user before passing my real user and received the expected response. root@smtp:/usr/local/etc/mail-config # nc -U /var/spool/postfix/private/policy-quota > recipient=noop(a)fake.tld > < action=551 User not found < > recipient=james(a)lottspot.vpn > < action=250 Quota status success < I'm using Dovecot 2.2.15, and I have included my quota configuration below. If anyone wants to see full doveconf -n output, I can provide it, but figured it was a bit much for this case. Thanks in advance for any pointers! --> Note: I'm the quota_status_* directives have been set as is for testing purposes only. I'm fully aware not to do that in production. plugin { quota = maildir:User quota quota_rule = *:bytes=1G quota_rule2 = Trash:storage=+10%% quota_status_success = "250 Quota status success" quota_status_nouser = "551 User not found" quota_status_overquota = "552 5.2.2 Recipient mailbox is full" } service quota-status { executable = quota-status -p postfix unix_listener /var/spool/postfix/private/policy-quota { user = postfix group = wheel mode = 0666 } }

2 1

[Sieve] Unable to fileinto subfolders
by james＠lottspot.com 17 Jul '15

17 Jul '15

Hello again list! I am configuring a server running Dovecot 2.2.15 (Pigeonhole 0.4.6), and I am having an issue with Sieve scripts where I cannot sort messages into a subfolder of a mailbox. An email which is matched by the following script: require "fileinto"; if header :contains "Subject" "[SORT ME]" { fileinto "INBOX.Sorted"; } Yields the following error: Jul 16 18:54:46 smtp dovecot: lmtp(james(a)lottspot.vpn): Error: DiJmNGZgqFWLFAEANWXNPw: sieve: msgid=<4973528.yvy4Yu8Tt4@arch_project>: failed to store into mailbox 'INBOX.Sorted': Character not allowed in mailbox name: '.' As far as I can tell based on the Sieve usage page in the wiki (http://wiki2.dovecot.org/Pigeonhole/Sieve/Usage) this is *supposed* to work. I have included my namespace configuration below, but if anyone wants the whole doveconf -n, I will gladly provide it. Thanks in advance for any help! namespace inbox { type = private separator = / prefix = inbox = yes mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } } namespace { type = shared separator = / prefix = shared/%%d/%%n/ location = maildir:/home/%%d/%%n/mail:INDEX=~/indexes/%%d/%%n:INDEXPVT=~/indexes/%%d/%%n subscriptions = no list = children }

3 2

question on Dovecot replication
by Arnold Wang 17 Jul '15

17 Jul '15

I'm running Dovecot 2.2.x and have a question on its replication capability. I plan to run Dovecot in two different sites with two nodes at each site. My question is how many replication partners can each Dovecot node have? Can I define three "mail_replica" entries in every node so any message received by one node will be replicated to three other nodes automatically? Thanks in advance for your help.

1 0

Admin access to sieve filters with managesieve
by Christian Theune 15 Jul '15

15 Jul '15

Hi, I’ve been a long-time user of Cyrus and started using sieve with Dovecot recently. A question that came up is: how do I access a users’s sieve scripts through managesieve without their credentials? Managesieve allows separating authentation and the corresponding mailbox identification, right? That’s what I used with cyrus sieve all the time. :) I didn’t find documentation in the wiki or googling where to configure someone as admin in Dovecot so he can access foreign sieve scripts through managesieve. Pointers? Am I using the right words? Cheers, Christian — Christian Theune · ct(a)flyingcircus.io · +49 345 219401 0 Flying Circus Internet Operations GmbH · http://flyingcircus.io Forsterstraße 29 · 06112 Halle (Saale) · Deutschland HR Stendal HRB 21169 · Geschäftsführer: Christian. Theune, Christian. Zagrodnick

3 3

doveadm search -A problem with dropped privileges
by Sebastian Kricner 14 Jul '15

14 Jul '15

Hello, if you want to answer to this mail, please send it directly to me. I have found a big issue with the following command "doveadm -search -A". It whatsoever works by setting doveadm_worker_count = 0 in the dovecot.conf configuration file. The problem is that doveadm-server or something similar uses privileges of "nobody" and so it fails searching e-mails. Instead also the process tries to create a maildir for "nobody": Debug: Namespace : /var/mail/nobody doesn't exist yet, using default permissions Debug: Namespace : Using permissions from /var/mail/nobody: mode=0700 gid=default Error: User initialization failed: Namespace '': mkdir(/var/mail/nobody) failed: Permission denied (euid=65534(nobody) egid=65534(nobody) missing +w perm: /var/mail, we're not in group 12(mail), dir owned by 0:12 mode=0775) Error: search: User init failed Error: userdb lookup: connect(/var/run/dovecot//auth-userdb) failed: Permission denied (euid=65534(nobody) egid=65534(nobody) missing +r perm: /var/run/dovecot//auth-userdb, we're not in group 12(mail), dir owned by 0:0 mode=0755) Error: search: User lookup failed: Internal error occurred. Refer to server log for more information. Even after setting permissions, so that the process can create a maildir for "nobody" in the /var/mail location, it fails to "setresgid" to the particular user to be scanned. It can´t work because it is not possible to gain other user privileges from another user. # 2.2.16: /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.7 # OS: Linux Gentoo Base System release 2.2 auth_cache_negative_ttl = xx mins auth_cache_size = xx M auth_cache_ttl = xx mins auth_mechanisms = xx xx auth_worker_max_count = xx base_dir = /var/run/dovecot/ default_process_limit = xx dict { expire = sqlite:/xx } doveadm_worker_count = 1 first_valid_gid = xx first_valid_uid = xx login_greeting = xx.xx mail_location = maildir:/xx/xx/%u mail_privileged_group = xx managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate passdb { args = scheme=SHA512 /xx/xx/xx.xx driver = passwd-file } plugin { expire = xx expire2 = xx expire_dict = proxy::expire sieve = ~/.xx.xx sieve_dir = ~/.xx } protocols = imap sieve service auth { unix_listener auth-client { group = xx mode = 0660 } unix_listener auth-userdb { group = xx mode = 0660 } } service dict { unix_listener dict { mode = 0666 } } service imap-login { inet_listener imap { port = 0 } process_limit = 6 service_count = 1 } ssl_cert = </xx/xx/xx/xx.xx.xx ssl_key = </xx/xx/xx/xx.xx.xx ssl_parameters_regenerate = xx days userdb { driver = passwd } protocol lda { mail_plugins = sieve expire } protocol imap { imap_idle_notify_interval = xx mins mail_max_userip_connections = xx mail_plugins = expire } Regards Sebastian Kricner -- http://tuxwave.net -- the difference to think makes it real!

1 0

does dovecot support aio(asynchronous IO)
by boyd 13 Jul '15

13 Jul '15

Dear, Does dovecot support aio(asynchronous IO)? Or do we have a plan/need to support it? Thanks!

1 0

doveadm save message ...
by Hardy Flor 11 Jul '15

11 Jul '15

How can I set the flags for a saved message without search?

2 1

Error while executing dovecot
by Sachin Kulkarni1 10 Jul '15

10 Jul '15

Hello All, I am trying to execute dovecot by below command /opt/app/dovecot/latest/sbin/dovecot -c /opt/app/dovecot/latest/etc/dovecot/dovecot.conf I am getting below error doveconf: Fatal: Error in configuration file /opt/app/dovecot/latest/etc/dovecot/dovecot.conf: default_login_user doesn't exist: dovenull please guide me to resolve this. Thanks and Regards, Sachin ============================================================================================================================ Disclaimer: This message and the information contained herein is proprietary and confidential and subject to the Tech Mahindra policy statement, you may review the policy at http://www.techmahindra.com/Disclaimer.html externally http://tim.techmahindra.com/tim/disclaimer.html internally within TechMahindra. ============================================================================================================================

2 1

Re: Systemd and listen restriction to localhost not enforced
by Joseph Tam 09 Jul '15

09 Jul '15

Sven Strickroth <sven(a)cs-ware.de> writes: > in /etc/dovecot/conf.d/10-master.conf I have restricted IMAP to > localhost only: > > service imap-login { > inet_listener imap { > address = 127.0.0.1 > #port = 143 > } > inet_listener imaps { > #port = 993 > #ssl = yes > } > } > > However, /lib/systemd/system/dovecot.socket make it listen on > 0.0.0.0:143 and [::]:143 causing the service being available to > the public which it should not. - IMHO this is a security issue. I don't know much about systemd, but you'll probably need dovecot configuration listen = 127.0.0.1 Joseph Tam <jtam.home(a)gmail.com>

1 0

Systemd and listen restriction to localhost not enforced
by Sven Strickroth 09 Jul '15

09 Jul '15

Hi, in /etc/dovecot/conf.d/10-master.conf I have restricted IMAP to localhost only: service imap-login { inet_listener imap { address = 127.0.0.1 #port = 143 } inet_listener imaps { #port = 993 #ssl = yes } } However, /lib/systemd/system/dovecot.socket make it listen on 0.0.0.0:143 and [::]:143 causing the service being available to the public which it should not. - IMHO this is a security issue. PS: When starting dovecot I got: Jul 6 22:52:14 srv1 dovecot[19921]: Error: systemd listens on port 143, but it's not configured in Dovecot. Closing. Jul 6 22:52:14 srv1 dovecot: master: Error: systemd listens on port 143, but it's not configured in Dovecot. Closing. -- Best regards, Sven Strickroth PGP key id F5A9D4C4 @ any key-server

1 0

vsz_limit of service doveadm "ignored"?
by Philipp 08 Jul '15

08 Jul '15

Hello, dovecot 2.2.18 on CentOS6.5 Jul 08 11:53:44 dsync-server(system): Fatal: master: service(doveadm): child 32554 returned error 83 (Out of memory (service doveadm { vsz_limit=521 MB }, you may need to increase it) - set CORE_OUTOFMEM=1 environment to get core dump) I tried increasing to 1 G, 1024 M or even disabling via value of zero -- to no change. Every other service has the famous 18446744073709551615 B limit. default_vsz_limit = 2 G The second node with the same setup/config is happily accepting a higher value, since both come from the same provisioning I cannot see (or expect) differences around ulimit and thelike. The configuration comes from a single file, so no include drama or such. Any pointers why the setting is being ignored?

1 0

ESEARCH multiple folders
by Peter Chiochetti 08 Jul '15

08 Jul '15

FTS-Solr is blazingly fast; yet searching e.g. an archive with subfolders still is slow; I learned, that this is a feature/bug of the imap protocol. So I'd like to ask: Does or will dovecot support the "IMAP4 Multimailbox SEARCH Extension" specified in RFC 7377? -- Kind regards Peter

2 2

Scalability with high density servers and proxies, TCP port limits
by Christian Balzer 08 Jul '15

08 Jul '15

Hello, first post in 3 years, kinda shows how painless Dovecot is. ^o^ Also this isn't really a dovecot issue, alas it's involved and since there are some large scale implementations of it I hope somebody here has some insights I might have missed. Currently we're running this setup: 1. LVS (DR mode) in a HA configuration (2 node cluster) 2. Dovecot in proxy mode on a 2 node cluster 3. Dovecot on actual mailbox servers (dual node DRBD clusters) There are about 500k users, but most of them use POP3, so there are usually less than 6k IMAP sesions at any given time. This is about to change, I'm looking at potentially millions of users who will have all semi-permanent IMAP sessions. We already have a pure SSD based mailbox cluster and based on the experiences with that another one is on order that will be able to easily handle about 500k users with regards to IOPS and other needs. However there's the issue of having all these concurrent IMAP sessions. Namely, running out of ephemeral ports. Lets assume 2 million users and 50k ports per IP and revisit the setup above. 1. LVS should have no problem, from experience and tests I expect a well tuned and spec'ed machine to handle millions of connections. This is in DR mode, in NAT mode I assume things would run into a wall a lot quicker. But even if LVS should run out of steam, there's a wide selection of high capacity load balancers available. 2. Here is where the fun starts. Each IMAP session that gets proxied to the real mailbox server needs a port for the outgoing connection. So to support 2 million sessions we need 40 IP addresses here. Ouch. And from a brief test having multiple IP addresses per server won't help either (Dovecot unsurprisingly picks the main IP when establishing a proxy session to the real mailbox), at least not with just one default GW. 3. All of this gets repeated on the actual mailbox servers, by either having a lot of low density servers or (preferably) high density servers with multiple IP addresses. Am I on track so far or missing something obvious? How many concurrent connections do you (hello Timo) think dovecot in proxy mode can handle? High performance mode of course in this case. I'm interested in internal limitations, assume that CPU and RAM are amply supplied. Any and all feedback is appreciated. Regards, Christian -- Christian Balzer Network/Systems Engineer chibi(a)gol.com Global OnLine Japan/Fusion Communications http://www.gol.com/

2 3

HELP: wrinting dovecot-sql.conf to authenticate to an existing database
by Filippo Zeus 08 Jul '15

08 Jul '15

hi all, can anyone help me with dovecot-sql.conf please ? I'm not a mysql expert and I'am trying to authenticate dovecot2 to an existing database. I have a database "egroupware" with table "egw_accounts". The field "account_lid" is the full email address and "account_pwd" is the password in Blowfish format. Here is my dovecot-sql.conf driver = mysql connect = host=localhost dbname=egroupware user=egroupware password=********* default_pass_scheme = BLF-CRYPT password_query = SELECT account_pwd AS password FROM egw_accounts WHERE account_lid = '%u' when I try to login to POP or IMAP I got this error in mail.log/mail.info Error: sql(hidden@mydomain.com,::1): Invalid password in passdb: crypt() failed: Invalid argument auth: Debug: client passdb out: FAIL#0111#011user=hidden(a)mydomain.com dovecot: pop3-login: Debug: Ignoring unknown passdb extra field: I think I'm having trouble with the password value that is stored in the account_pwd as: {crypt}$2a$12$XTAolzXgwMC211MuZELQUedPv9tjZNs7Osh97PnZ50pAKuk3WPGmS Reading at http://wiki2.dovecot.org/Authentication/PasswordSchemes I suppose that the heading "{crypt}$2a$" instead of a simple "$2a$" (witch identifies a Blowfish password) is my problem. How can I fix this ? Here is my dovecot -n output: # 2.2.13: /etc/dovecot/dovecot.conf # OS: Linux 3.16.0-4-amd64 x86_64 Debian 8.1 xfs auth_cache_size = 64 M auth_debug = yes auth_mechanisms = plain login lda_mailbox_autocreate = yes log_timestamp = "%Y-%m-%d %H:%M:%S " login_log_format_elements = USER=<%u> METHOD=%m FROM=%r TO=%l %c mail_location = maildir:/var/mail/%d/%n/Maildir mail_plugins = quota mail_privileged_group = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave spamtest spamtestplus imapflags notify namespace inbox { inbox = yes location = mailbox Archive { auto = no special_use = \Archive } mailbox "Deleted Messages" { auto = no special_use = \Trash } mailbox Drafts { special_use = \Drafts } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Spam { auto = no special_use = \Junk } mailbox Trash { auto = no special_use = \Trash } prefix = separator = . } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { quota = maildir:User quota quota_exceeded_message = Storage quota for this account has been exceeded, please try again later. quota_grace = 10%% quota_rule = *:storage=6G quota_rule2 = Trash:storage=+100M quota_rule3 = spam:ignore quota_warning = storage=95%% quota-warning 95 %u sieve = ~/dovecot.sieve sieve_before = /var/mail/sieve/before.sieve sieve_default = /var/mail/sieve/default.sieve sieve_dir = ~/sieve.d sieve_extensions = +notify +imapflags +spamtest +spamtestplus +relational +comparator-i;ascii-numeric sieve_global_dir = /var/mail/sieve/global.d sieve_max_script_size = 1M } postmaster_address = postmaster@%d protocols = " imap sieve pop3 sieve" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service managesieve-login { inet_listener sieve { port = 4190 } service_count = 1 vsz_limit = 64 M } service managesieve { process_limit = 15 } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { user = vmail } user = dovecot } ssl = required ssl_cert = </etc/ssl/dharma/mail/mail_antonica_it.crt ssl_key = </etc/ssl/dharma/mail/mail_antonica_it.key userdb { args = uid=vmail gid=vmail home=/var/mail/%d/%n driver = static } protocol lda { mail_plugins = quota sieve } protocol imap { mail_plugins = quota imap_quota } protocol sieve { mail_max_userip_connections = 10 managesieve_logout_format = bytes=%i/%o managesieve_max_line_length = 65536 }

2 1

Autocreate folders with specific permissions
by Fabio S. Schmidt 07 Jul '15

07 Jul '15

Hi, I have Dovecot 2.1 deployed running about 65k mailboxes. We need to create a specific folder for all users with specific permissions. I mean, the user could not delete or rename the folder. To create the folder automatically I have used the autocreate, but is there any way to set specific permissions on those folders? My best regards.

1 0

Problem with IMAP-Proxy and M$ Exchange-Server
by Luca Bertoncello 07 Jul '15

07 Jul '15

Hi List! I **HATE** Exchange-Server. I think it's not able to manage E-Mails, but we have to use it at work... Well, we need to read the E-Mails from outside, so I configured Dovecot with IMAPC to connect to the Exchange-Server. It works, but I have a problem... If I receive an E-Mail, and I read it from my phone (for example), I see in Outlook that the E-Mail as been read. If I move the E-Mail in another folder from my phone, I see in Outlook the E-Mail in the new folder **AND** in the INBOX. If I check my E-Mail from another phone (or Mail-Client), I see the E-Mail just in the new folder, so I think, the Exchange-Server did move it. But Outlook does not get this information... Any idea how can I solve my problem? Thanks Luca Bertoncello (lucabert(a)lucabert.de)

1 0

Large jumps in dovecot-uidlist
by Mark 07 Jul '15

07 Jul '15

Since upgrading to Debian Wheezy I have been observing large jumps in the value stored in dovecot-uidlist. The effect of these jumps is to confuse some mail clients (Thunderbird, Opera Mail) causing them not to display messages from a (random?) point in time onwards in the affected folder. I have been unable to determine the root cause of these jumps. What I do know: 1. I never observed the problem while running Debian Squeeze. 2. The only way I have found to fix the issue is to remove all the dovecot* files from the affected folder and restart dovecot. I have tried removing various subsets of the dovecot* files but haven't yet found a subset that works. 3. I first tried upgrading from Squeeze to Wheezy within a few weeks of the Wheezy release. At that point the problem occurred so frequently that I couldn't sync my mail client with my mail box. Multiple folders exhibited this problem and while I was fixing them the problem appeared in other folders. I was unable to reach a point where the system was stable so I reverted back to Squeeze. 4. Some time later (I think a year but I am not sure) I tried the upgrade to Wheezy again. This time the system was stable. After a few days I noticed that the problem was still occurring but less frequently. Since then I have been fixing the problem as I notice it and experimenting with various settings (mainly locking related) without success. I now have a cron job that looks for problematic folders and fixes them when found. 5. I have updated Dovecot packages to those from Jessie via wheezy-backports and the problem still occurs. 6. Dovecot is installed along with postfix, amavisd-new, clamav-daemon, procmail and fetchmail. 7. The mail server is running on a eSATA SheevaPlug that boots of an external USB drive. All user home dirs (and associated mailboxes) are located on a LUKS/ext3 encrypted partition. 8. The output of dovecot -n may be found at the end of this mail. 9. Uid values for the three most recent instances of this problem are: 3801596527, 3371927249, 3443181615 10. Some folders seem more susceptible to this problem but I have not been able to identify any common factors/triggers. 11. The problem occurs - on average - once a day. I am happy to provide any further information, configure any debug logging and/or test suggested configuration settings that may help track down the root cause of this problem. Any help gratefully appreciated. Mark # 2.2.13: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-kirkwood armv5tel Debian 7.8 mail_debug = yes mail_location = maildir:~/Maildir mail_max_userip_connections = 100 namespace { inbox = yes location = mailbox { special_use = \Drafts name = Drafts } mailbox { special_use = \Junk name = Junk } mailbox { special_use = \Sent name = Sent } mailbox { special_use = \Sent name = Sent Messages } mailbox { special_use = \Trash name = Trash } prefix = name = inbox } passdb { driver = pam } protocols = " imap" service replication-notify-fifo { name = aggregator } service anvil-auth-penalty { name = anvil } service auth-worker { name = auth-worker } service { unix_listener { group = postfix mode = 0666 user = postfix path = /var/spool/postfix/private/auth-client } name = auth } service config { name = config } service dict { name = dict } service login/proxy-notify { name = director } service dns-client { name = dns_client } service doveadm-server { name = doveadm } service { inet_listener { port = 0 name = imap } inet_listener { port = 993 ssl = yes name = imaps } process_min_avail = 5 name = imap-login } service imap-urlauth { name = imap-urlauth-login } service imap-urlauth-worker { name = imap-urlauth-worker } service token-login/imap-urlauth { name = imap-urlauth } service { executable = imap postlogin name = imap } service indexer-worker { name = indexer-worker } service indexer { name = indexer } service ipc { name = ipc } service lmtp { name = lmtp } service log-errors { name = log } service pop3 { name = pop3-login } service login/pop3 { name = pop3 } service { executable = script-login -d rawlog name = postlogin } service replicator-doveadm { name = replicator } service login/ssl-params { name = ssl-params } service stats-mail { name = stats } ssl_cert = </etc/ssl/certs/smtpd.crt ssl_cipher_list = HIGH:MEDIUM:!aNULL:!MD5:!RC4 ssl_key = </etc/ssl/private/smtpd.key userdb { driver = passwd } protocol imap { service replication-notify-fifo { name = aggregator } service anvil-auth-penalty { name = anvil } service auth-worker { name = auth-worker } service auth-client { name = auth } service config { name = config } service dict { name = dict } service login/proxy-notify { name = director } service dns-client { name = dns_client } service doveadm-server { name = doveadm } service imap { name = imap-login } service imap-urlauth { name = imap-urlauth-login } service imap-urlauth-worker { name = imap-urlauth-worker } service token-login/imap-urlauth { name = imap-urlauth } service login/imap { name = imap } service indexer-worker { name = indexer-worker } service indexer { name = indexer } service ipc { name = ipc } service lmtp { name = lmtp } service log-errors { name = log } service pop3 { name = pop3-login } service login/pop3 { name = pop3 } service replicator-doveadm { name = replicator } service login/ssl-params { name = ssl-params } service stats-mail { name = stats } }

2 4