- dovecot - dovecot.org

IMAP on 993/SSL or 143/STARTTLS?
by Alex 18 Aug '14

18 Aug '14

Hi, I have a postfix+dovecot-2.2.13 system and have configured it to support IMAPS on 993 with SSL/TLS. I'm noticing with users using Thunderbird, the autodetect defaults to IMAPS on 143 with STARTTLS. Which is preferred? Which is more secure? Which is more common? Why would someone choose one over the other? Can I ask the same question about SMTP and submission? Why would one choose 587 with STARTTLS versus 465 with SSL/TLS? Thanks, Alex

4 3

Segmentation fault while indexing a large mailbox using doveadm..
by Akash 18 Aug '14

18 Aug '14

Hi, I am having the same issue as: http://www.dovecot.org/list/dovecot/2014-April/095681.html although I am using the latest dovecot-core and dovecot-lucene packages from the debian sid repo which already has the patch (http://hg.dovecot.org/dovecot-2.2/rev/5e42a8c18b51) mentioned in the above thread implemented. doveadm(admin): Info: Old.All: Caching mails seq=1..300332 9400/300332 Program received signal SIGSEGV, Segmentation fault. (gdb) bt #0 __wcslen ( s=s@entry=0xb93887a8 L" btnToggle: \"Change size\"}</script>\r\n<link href=\"http://s26 ucoz net/src/ulightbox/ulightbox css\" rel=\"stylesheet\" type=\"text/css\" /><script type=\"text/javascript\" src=\"http://s26 ucoz net/src/ulightb"...) at wcslen.c:36 #1 0xb7c026fd in wcsdup ( s=0xb93887a8 L" btnToggle: \"Change size\"}</script>\r\n<link href=\"http://s26 ucoz net/src/ulightbox/ulightbox css\" rel=\"stylesheet\" type=\"text/css\" /><script type=\"text/javascript\" src=\"http://s26 ucoz net/src/ulightb"...) at wcsdup.c:29 #2 0xb7a65660 in lucene::document::Field::Field(wchar_t const*, wchar_t const*, int, bool) () from /usr/lib/i386-linux-gnu/libclucene-core.so.1 #3 0xb7b5cd48 in lucene_index_build_more () from /usr/lib/dovecot/modules/lib21_fts_lucene_plugin.so #4 0xb7b5b7b9 in ?? () from /usr/lib/dovecot/modules/lib21_fts_lucene_plugin.so #5 0xb7b6ac2a in fts_backend_update_build_more () from /usr/lib/dovecot/modules/lib20_fts_plugin.so #6 0xb7b6b674 in ?? () from /usr/lib/dovecot/modules/lib20_fts_plugin.so #7 0xb7b6bbf4 in fts_build_mail () from /usr/lib/dovecot/modules/lib20_fts_plugin.so #8 0xb7b713cc in ?? () from /usr/lib/dovecot/modules/lib20_fts_plugin.so #9 0xb7e4969b in mail_precache () from /usr/lib/dovecot/libdovecot-storage.so.0 #10 0xb7fa1c7f in ?? () #11 0xb7f9d133 in _start () (gdb) # dovecot --version 2.2.13 Please help.. -Thanks, Akash

2 2

Dovecot failing with exit code 19200 in cron job
by Murray Trainer 18 Aug '14

18 Aug '14

Hi All, I am synchronizing a few hundred dovecot mailboxes with a perl script via a crontab. It works for a while (ie exit status=0) but the rest then start failing with exit code 19200. I tried redirecting STDERR but showed nothing. I suspect the cron job is hitting some sort of resource limit? If I run the perl script from the command line it appears to dsync all the accounts OK. The relevant part of my Perl code is below. Any ideas? Thanks, Murray foreach (@userlist) { my $email = $_; chomp ($email); # get rid of CR logit("Started sync of mailbox $email") if $debug; my $dsync_command="dsync -v -D -u $email mirror ssh -C root@$mailstore dsync -u $email"; logit("dsync_command=$dsync_command"); # Run dsync of mailbox logit("Started secondary sync of $mailbox to $mailstore") if $debug; my $exit_status = system ( $dsync_command ); logit("Dsync exit status: $exit_status") if $debug; logit("Finished secondary sync of $mailbox to $mailstore") if $debug; }

2 1

NFS INTR mount option
by Murray Trainer 18 Aug '14

18 Aug '14

Hi again, We have our mailboxes on several NFS filesystems mounted with the options below. 10.11.0.238:/mailbox_store_01 on /home1 type nfs4 (rw,noatime,vers=4.0,rsize=65536,wsize=65536,namlen=255,hard,nordirplus,proto=tcp,port=0,timeo=600,retrans=2,sec=sys,clientaddr=10.11.0.95,local_lock=none,addr=10.110.238) On the rare occasions that the NFS mounts hang, the system load goes through the roof and I often have to reboot the mailstore server as dovecot process are hung and can't be killed. Will the NFS INTR mount option help in this situation? Thanks Murray Send EMAIL [1] Links: ------ [1] https://webmail.westnet.com.au/index.php/mail#

1 0

Manage Sieve Security?
by Chris 18 Aug '14

18 Aug '14

Dear All, can I expose Dovecot's Manage Sieve port to the internet or should I restrict access (e.g. by IP address or VPN)? -- Christian

2 1

virtual plugin in HG unaware of namespaces
by Thomas Leuxner 17 Aug '14

17 Aug '14

The latest changes to the virtual plugin seem to have a negative effect on name space rules: $ cat dovecot-virtual * Public/* flagged While flagged messages inside the mailbox still show up, messages flagged in 'Public' are not picked up anymore. Regards Thomas

1 1

INBOX subfolders not showing up
by Matthias Sitte 16 Aug '14

16 Aug '14

Hi, I have a problem with INBOX subfolders and subscriptions which I can't solve... Maybe somebody has seen this, too... I can create regular subfolders (not in INBOX) and (un-)subscribe to them with Thunderbird. If I create subfolders in the INBOX with TB this seems to work now in v31 (just found this out), but with v24.6 neither INBOX subfolder creation nor subscriptions worked. When I modified the `subscriptions' file manually on the server, the folders would show up in TB, though. Maybe this was a TB bug, but quite similarly INBOX subfolders don't show up on iPhones (iOS up-to-date), but all other subfolders do. Any ideas what's going on? Best, Matthias ====================================================================== # dovecot -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.6 ext4 hostname = familie-sitte.org log_path = /var/log/dovecot.log log_timestamp = "%Y-%m-%d %H:%M:%S " mail_location = maildir:/srv/mail/%d/%n/Maildir:LAYOUT=fs managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes list = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / subscriptions = yes type = private } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { quota = maildir:User quota quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = postmaster(a)familie-sitte.org protocols = " imap sieve pop3" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } service imap-login { inet_listener imaps { port = 993 ssl = yes } } service managesieve-login { inet_listener sieve { port = 4190 } } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { user = vmail } user = dovecot } ssl_cert = </etc/dovecot/ssl/mail_cert.pem ssl_cipher_list = SSDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA256:EECDH+aRSA+RC4:EDH+aRSA:EECDH:RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS ssl_key = </etc/dovecot/ssl/mail_key.pem userdb { args = uid=vmail gid=vmail home=/srv/mail/%d/%n driver = static } protocol lda { mail_plugins = " quota sieve" } protocol imap { mail_plugins = " imap_quota quota" }

3 4

Server dovecot: auth: Warning: sql: Ignoring changed iterate_quer
by Joseph Malloy 16 Aug '14

16 Aug '14

Hello, I am having an issue with Dovecot. I am using Roundcube to access my mailboxes, which I have set up using ViMbAdmin. However when I go to the Roundcube, I get login Failed. So looking in the mail.log I can see the following: Aug 15 13:20:09 Server dovecot: auth: Warning: sql: Ignoring changed iterate_query in /etc/dovecot/dovecot-sql.conf.ext, because userdb sql not used. (If this is intentional, set userdb_warning_disable=yes) Aug 15 13:20:11 Server dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<joe(a)anoblequest.co.uk>, method=PLAIN, rip=62.49.15.89, lip=192.168.0.90, TLS, session=<su7WCqoALAA+MQ9Z> I am most greatful for the support Joe :)

2 1

namspace management
by A. Schulze 15 Aug '14

15 Aug '14

Hello, since some weeks I'm playing with namespaces. But I still did nod found a solution for all faces of different problems. Current issue: Public namespace. I have users inbox as follow: mail_home = /data/mail/%Ln/ mail_location = maildir:~/Maildir:INDEX=~/.dovecot.index namespace { inbox = yes separator = / prefix = INBOX/ } Public namespace: namespace { location = maildir:/data/mail_public/Maildir/:INDEXPVT=~/.dovecot.index.public/ prefix = PUBLIC/ separator = / type = public } that way only one subscription file is possible. Any use could subscribe/unsubscribe any folder and that match all users. If I add "subscription=no" the parent namespace' subscription is used. In fact there is no parent namespace an no subscription management is possible at all. On the other side I tried to change the PUBLIC namespace prefix to "INBOX/PUBLIC" but now the namespace is *below* the inbox. That's also not what I want. How do other users organise the namespaces INBOX, PUBLIC, SHARED and VIRTUAL (via virtual plugin) ? Thanks Andreas

3 4

(Again) Some trouble with dovecot 2.1(.7) and SASL
by admin 15 Aug '14

15 Aug '14

The parentheses in the subject are due to referral to this discussion on the mailing list: http://dovecot.org/list/dovecot/2012-February/063851.html At first I thought I found the problem, but then realized this was 2012 and the suggested patch already is applied in dovecot. I also have segault messages in my kernel log; not too many, but it was enough to dig for it: > Wed Jun 25 08:29:05 2014 auth[17590]: segfault at 10 ip 00007f02ad5e8e56 sp 00007fff932f9250 error 4 in auth[7f02ad5d3000+40000] > Mon Jun 30 16:11:41 2014 auth[12501]: segfault at 10 ip 00007fc6a1fefe56 sp 00007fff276e6ea0 error 4 in auth[7fc6a1fda000+40000] > Sat Jul 5 13:11:32 2014 auth[15603]: segfault at 10 ip 00007f6447a6be56 sp 00007fff09c48020 error 4 in auth[7f6447a56000+40000] > Tue Jul 8 05:08:21 2014 auth[30071]: segfault at 10 ip 00007ff22656ae56 sp 00007fff26b017f0 error 4 in auth[7ff226555000+40000] > Mon Jul 21 14:25:28 2014 auth[30918]: segfault at 10 ip 00007fe1fc817e56 sp 00007fff7e654f20 error 4 in auth[7fe1fc802000+40000] <--- > Wed Aug 13 18:56:31 2014 auth[27593]: segfault at 10 ip 00007ffbf8ce8e56 sp 00007fffe0157f70 error 4 in auth[7ffbf8cd3000+40000] > Wed Aug 13 18:57:59 2014 auth[24264]: segfault at 10 ip 00007f2df31bde56 sp 00007fff094263c0 error 4 in auth[7f2df31a8000+40000] The last 2 entries are a result of me being able to reproduce the problem, the 3rd last is the only one I was able to track down (due to log rotation) I tracked the problem down to a contact form of a website of one of my customers. whenever used, the segfault gets triggered. Nevertheless, the message always gets delivered. So we are talking about the marked line; the corresponding log entries from mail.info: > Jul 21 14:25:29 mail postfix/smtpd[27590]: connect from unknown[<webserver ip>] > Jul 21 14:25:29 mail dovecot: auth: Fatal: master: service(auth): child 30918 killed with signal 11 (core dumps disabled) > Jul 21 14:25:29 mail postfix/smtpd[27590]: warning: unknown[<webserver ip>]: SASL DIGEST-MD5 authentication failed: Connection lost to authentication server > Jul 21 14:25:29 mail dovecot: auth-worker(27595): mysql(127.0.0.1): Connected to database mail > Jul 21 14:25:29 mail postfix/smtpd[27590]: D4D8E44752: client=unknown[<webserver ip>], sasl_method=CRAM-MD5, sasl_username=<existing account and working account> > Jul 21 14:25:29 mail postfix/cleanup[27598]: D4D8E44752: message-id=<id(a)doma.in> > Jul 21 14:25:29 mail postfix/qmgr[13349]: D4D8E44752: from=<server(a)doma.in>, size=2680, nrcpt=1 (queue active) > Jul 21 14:25:29 mail postfix/smtpd[27590]: disconnect from unknown[<webserver ip>] > Jul 21 14:25:29 mail dovecot: lmtp(27600): Connect from local > Jul 21 14:25:30 mail postfix/lmtp[27599]: D4D8E44752: to=<info(a)doma.in>, orig_to=<contact(a)doma.in>, relay=<mailserver fqdn>[private/dovecot-lmtp], delay=0.19, delays=0.07/0.04/0.04/0.04, dsn=2.0.0, status=sent (250 2.0.0 <info(a)doma.in> MrY+OdkizVPQawAAMrkmwA Saved) > Jul 21 14:25:30 mail postfix/qmgr[13349]: D4D8E44752: removed > Jul 21 14:25:30 mail dovecot: lmtp(27600, info(a)doma.in) MrY+OdkizVPQawAAMrkmwA: msgid=<id(a)doma.in>: saved mail to INBOX > Jul 21 14:25:30 mail dovecot: lmtp(27600): Disconnect from local: Client quit (in reset) contact(a)doma.in is a virtual address which gets forwarded to info(a)doma.in (/etc/postfix/virtual). The used CMS is PyroCMS (v2.2.3) - the version is not up2date, but nevertheless the CMS might be the one to blame, a service should not segfault. Some packages are to be updated, as well as the CMS; but I am willing to wait to provide information, which leads to the problem, as I cannot switch between different versions on my productive system for the sake of gaining debug information. I hope that someone has any kind of clue and is willing to resolve that issue with me, asking me for the necessary information to do so. Thanks in advance!

2 1

Multiple Passdb's - Order
by Jean-Louis Dupond 15 Aug '14

15 Aug '14

Hi, Today I upgraded my dovecot to a newer version (2.2.9 debian wheezy-backports) At that moment I also reconfigured the whole thing a bit nicer. Now I stumbled on the following issue. In my configuration I use 2 backends (LDAP & passwd-file). passdb { args = scheme=CRYPT username_format=%u /etc/dovecot/users driver = passwd-file } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } userdb { args = uid=vmail gid=vmail home=/var/vmail/%d/%n driver = static } Now this worked fine before. But if I tested it, LDAP logins worked, and passwd-file logins failed. Failed log (user is only in the passwd-file): Aug 01 21:31:55 auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Aug 01 21:31:55 auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_mysql.so Aug 01 21:31:55 auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_pgsql.so Aug 01 21:31:55 auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_sqlite.so Aug 01 21:31:55 auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Aug 01 21:31:55 auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libauthdb_ldap.so Aug 01 21:31:55 auth: Debug: Read auth token secret from /var/run/dovecot/auth-token-secret.dat Aug 01 21:31:55 auth: Debug: passwd-file /etc/dovecot/users: Read 10 users in 0 secs Aug 01 21:31:55 auth: Debug: auth client connected (pid=5516) Aug 01 21:31:55 auth: Debug: client in: AUTH 1 PLAIN service=imap secured session=c34kcZb/uwBbtKLu lip=xxx rip=xxxx lport=993 rport=52411 Aug 01 21:31:55 auth: Debug: client passdb out: CONT 1 Aug 01 21:31:55 auth: Debug: client in: CONT 1 xxxxx (previous base64 data may contain sensitive data) Aug 01 21:31:55 auth: Debug: cache(info(a)xxx.com,xxx,<c34kcZb/uwBbtKLu>): miss Aug 01 21:31:55 auth: Debug: ldap(info(a)xxx.com,xxx,<c34kcZb/uwBbtKLu>): pass search: base=uid=info(a)xxx.com,ou=mail,dc=dupie,dc=be scope=subtree filter=(&(objectClass=posixAccount)(uid=info(a)xxx.com)) fields=uid,userPassword Aug 01 21:31:55 auth: Debug: cache(info(a)xxx.com,xxx,<c34kcZb/uwBbtKLu>): miss Aug 01 21:31:55 auth: Debug: cache(info(a)xxx.com,xxx,<c34kcZb/uwBbtKLu>): miss Aug 01 21:31:55 auth: Debug: passwd-file(info(a)xxx.com,xxx,<c34kcZb/uwBbtKLu>): lookup: user=info(a)xxx.com file=/etc/dovecot/users Aug 01 21:31:57 auth: Debug: client passdb out: FAIL 1 user=info(a)xxx.com temp Aug 01 21:31:57 auth: Debug: client in: AUTH 2 PLAIN service=imap secured session=c34kcZb/uwBbtKLu lip=xxx rip=xxx lport=993 rport=52411 resp=xxx (previous base64 data may contain sensitive data) Aug 01 21:32:01 auth: Debug: cache(info(a)xxx.com,xxx,<c34kcZb/uwBbtKLu>): miss Aug 01 21:32:01 auth: Debug: ldap(info(a)xxx.com,xxx,<c34kcZb/uwBbtKLu>): pass search: base=uid=info(a)xxx.com,ou=mail,dc=dupie,dc=be scope=subtree filter=(&(objectClass=posixAccount)(uid=info(a)xxx.com)) fields=uid,userPassword Aug 01 21:32:01 auth: Debug: cache(info(a)xxx.com,xxx,<c34kcZb/uwBbtKLu>): miss Aug 01 21:32:01 auth: Debug: cache(info(a)xxx.com,xxx,<c34kcZb/uwBbtKLu>): hit: {CRAM-MD5}19192922..... Aug 01 21:32:03 auth: Debug: client passdb out: FAIL 2 user=info(a)xxx.com temp As you see it returned a FAIL, but the password was retrieved from the users file (see the cache hit). Now I changed the order of the passdb's in my config, to make passwd-file come first, and then LDAP. And what happend now, it started working ... Logs: Aug 01 21:30:23 auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Aug 01 21:30:23 auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_mysql.so Aug 01 21:30:23 auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_pgsql.so Aug 01 21:30:23 auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_sqlite.so Aug 01 21:30:23 auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Aug 01 21:30:23 auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libauthdb_ldap.so Aug 01 21:30:23 auth: Debug: Read auth token secret from /var/run/dovecot/auth-token-secret.dat Aug 01 21:30:23 auth: Debug: passwd-file /etc/dovecot/users: Read 10 users in 0 secs Aug 01 21:30:23 auth: Debug: auth client connected (pid=5459) Aug 01 21:30:24 auth: Debug: client in: AUTH 1 PLAIN service=imap secured session=TTm6a5b/swBbtKLu lip=xxx rip=xxx lport=993 rport=52403 Aug 01 21:30:24 auth: Debug: client passdb out: CONT 1 Aug 01 21:30:24 auth: Debug: client in: CONT 1 xxxx (previous base64 data may contain sensitive data) Aug 01 21:30:24 auth: Debug: cache(info(a)xxx.com,xxx,<TTm6a5b/swBbtKLu>): miss Aug 01 21:30:24 auth: Debug: passwd-file(info(a)xxx.com,xxx,<TTm6a5b/swBbtKLu>): lookup: user=info(a)xxx.com file=/etc/dovecot/users Aug 01 21:30:24 auth: Debug: client passdb out: OK 1 user=info(a)xxx.com Aug 01 21:30:24 auth: Debug: master in: REQUEST 1973682177 5459 1 9976303da4c6eb55a008b0cae6ab12a1 session_pid=5462 request_auth_token Aug 01 21:30:24 auth: Debug: master userdb out: USER 1973682177 info(a)xxx.com uid=1001 gid=1001 home=/var/vmail/xxx.com/info auth_token=31afcf6ff0c5ed5150beb96ad3718cff452badae The only thing I changed here was the order the passdb backends. It works fine now, but it not clear to me why the order is so important. Could somebody explain this? Or is this some bug? Thanks Jean-Louis

2 5

Cannot use dovecot with vpopmail and sendmail
by Matthias Fechner 15 Aug '14

15 Aug '14

Hi, I setup a configuration that will use sendmail with dovecot as imap/pop3 service and vpopmail as backend to handle virtual users and store email there. For this I created a dovecot.m4 as described in the wiki, it looks like: ######################*****############## ### DOVECOT Mailer specification ### ##################*****################## Mdovecot, P=/usr/local/libexec/dovecot/dovecot-lda, F=l59DFMPhnu, S=EnvFromSMTP/HdrFromSMTP, R=EnvToSMTP/HdrFromSMTP, M=51200000, U=vpopmail:vchkpw, T=DNS/RFC822/X-Unix, A=/usr/local/libexec/dovecot/dovecot-lda -d $u Then I added to my .mc file: MAILER(dovecot) I added to my mailertable: dovecot.fechner.net dovecot:dovecot I create one entry in the virtusertable to catch a email and forward it to dovecot (all other email have to handled by another imap server till dovecot is running fine): dovecot(a)fechner.net idefix(a)dovecot.fechner.net I created a domain and a user in vpopmail to catch idefix(a)dovecot.fechner.net. If I execute: doveadm auth test idefix(a)dovecot.fechner.net Password: passdb: idefix(a)dovecot.fechner.net auth succeeded extra fields: user=idefix(a)dovecot.fechner.net So I think the first part is fine. But if I try to sent an email to dovecot(a)fechner.net I get the error message: Aug 14 21:48:34 anny dovecot: lda(idefix(a)dovecot.fechner.net): Fatal: setuid(89(vpopmail) from userdb lookup) failed with euid=1002(idefix): Operation not permitted (This binary should probably be called with process user set to 89(vpopmail) instead of 1002(idefix)) Aug 14 21:48:34 anny sendmail[94303]: s7EJXgma087740: to=<dovecot(a)fechner.net>, ctladdr=<idefix(a)anny.lostinspace.de> (1002/0), delay=00:14:52, xdelay=00:00:00, mailer=dovecot, pri=120389, relay=dovecot, dsn=4.0.0, stat=Deferred: dovecot mailer (/usr/local/libexec/dovecot/dovecot-lda) exited with EX_TEMPFAIL It seems to be a problem with dovecot-lda but I have no idea what is wrong. The user is set in the .m4 file and permission/group/user is set in the auth socket correctly. The output of doveconf -n is: # 2.2.13: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 10.0-STABLE amd64 zfs auth_debug_passwords = yes auth_mechanisms = plain login auth_verbose = yes first_valid_uid = 10 mail_debug = yes mail_location = maildir:/usr/local/vpopmail/domains/%d/%n/Maildir managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave duplicate namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = cache_key=%u%r%l webmail=127.0.0.1 driver = vpopmail } service auth-worker { unix_listener auth-worker { group = vchkpw user = vpopmail } } service auth { unix_listener auth-userdb { group = vchkpw mode = 0666 user = vpopmail } user = vpopmail } service imap-login { inet_listener imap { port = 22143 } inet_listener imaps { port = 22993 } } service pop3-login { inet_listener pop3 { port = 22110 } inet_listener pop3s { port = 22995 } } userdb { args = quota_template=quota_rule=*:backend=%q driver = vpopmail } Thanks for any ideas who this could be fixed. Matthias -- "Programming today is a race between software engineers striving to build bigger and better idiot-proof programs, and the universe trying to produce bigger and better idiots. So far, the universe is winning." -- Rich Cook

1 0

Trying Dovecot Replication with dsync
by Minhas Listas 14 Aug '14

14 Aug '14

Hi, I have a failover cluster for mail server with: Ubuntu12.04 + DRBD (for block replication) + Ext4 filesystem + Dovecot-2.0.19-2 with Mdbox It works fine with ~50k accounts. My cluster design: http://adminlinux.com.br/cluster_design.txt I plan to test Dovecot Replication with dsync to build an active/active cluster with load balancing. Can anyone direct me to some literature? A tutorial for example. I'm installing a cluster (for tests) with Ubuntu 14.04 + Ext4 filesystem (without Drbd) + Dovecot-2.2.9-1ubuntu2.1. My conf is in: http://adminlinux.com.br/replication-doveconf.txt I'm following this doc http://wiki2.dovecot.org/Replication but I'm getting some errors: 1) Aug 14 15:39:34 ceph1 dovecot: imap(account=domaintest.com): Error: open(/var/run/dovecot/replication-notify-fifo) failed: Permission denied What is the correct perms for /var/run/dovecot/replication-notify-fifo ? Currently: # ll /var/run/dovecot/replication-notify-fifo prw------- 1 root root 0 Aug 14 15:57 /var/run/dovecot/replication-notify-fifo| 2) Aug 14 16:02:34 ceph1 dovecot: dsync-server(account=domaintest.com): Error: Couldn't create lock */var/lib/imap/account=domaintest.com <http://domaintest.com>/*.dovecot-sync.lock: No such file or directory Aug 14 16:02:34 ceph1 dovecot: dsync-local(account=domaintest.com): Error: Couldn't create lock */var/lib/imap/account=domaintest.com <http://domaintest.com>/*.dovecot-sync.lock: No such file or directory In my production cluster, it is automatically created by dovecot when the user performs the first login: */var/lib/imap/*<account> for INDEX */var/spool/imap/*<account> for Mdbox Thanks! -- Thiago Henrique

1 0

panic: dsync and imapc
by Alex Ha 14 Aug '14

14 Aug '14

Hi Dovecot list! I try to sync from a remote imap server to my local dovecot server via the dsync tool with imapc. Here is my command: # /usr/local/dovecot/bin/dsync -c /usr/local/dovecot/etc/dovecot/dovecot.conf -D -o imapc_user= test(a)example.com -o imapc_password=pwd backup -R -u test(a)example.com imapc: Here the error message: dsync(test(a)example.com): Panic: file quota-maildir.c: line 827: unreached Please see the attached debug.txt for a full debug messages and stacktrace. System info OS: Ubuntu 14.04 Server 64 Bit Dovecot: 2.2.13 Thanks, Alex

1 0

Quota Help
by user7743 14 Aug '14

14 Aug '14

Hi all, First post here so hopefully I get all the required information correct. I am running a mail server on Debian, its consists of Postfix (2.9.6-2), Dovecot (2.1.7) and MySQL (5.5). Basic stuff is all working find so I decided to try and implement quotas. This is working to an extent but not properly and I am a little lost so looking for some help. In my configuration the default mailbox quota is set to "*:storage=100M". When I create a mailbox with 250M specified in the database, dovecot is applying the default quota rather than that specified in the database. So in the database I have a test user with the following entry password,email,quota_kb [hash], test(a)example.org, 25000 If I turn debugging on for mail and auth I see the following logged when the user logs in (logs pasted at the end in a bid to maintain some readability) If I check the quota with doveadm I get the limit back of 102400 which is the default mailbox size rather than that from the database. doveadm quota get -u test(a)example.org Quota, name, Type, Value, Limit, % User quota, STORAGE, 19139, 102400, 18 User quota, MESSAGE, 567, - I can't quite figure out where I am going wrong in terms of getting the database value to supersede the default value set in 90-quota.conf. I did read one thing in the quota documentation on the dovecot website (http://wiki2.dovecot.org/Quota/Configuration) that I didn't get and this might be where I am going wrong but can't check. It says "Check that dovecot-lda is called with -d parameter." Where would this be configured and where could I check? Below are some other inputs - hopefully they help. ### Debug logs at login Aug 14 14:06:24: auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Aug 14 14:06:24: auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_mysql.so Aug 14 14:06:24: auth: Debug: auth client connected (pid=8090) Aug 14 14:06:24: auth: Debug: auth client connected (pid=8093) Aug 14 14:06:24: auth: Debug: client in: AUTH#0111#011PLAIN#011service=imap#011secured#011session=2QDLu5UAKAAuBSdf#011lip=99.99.99.99#011rip=55.55.55.55#011lport=993#011rport=50216 Aug 14 14:06:24: auth: Debug: client out: CONT#0111#011 Aug 14 14:06:24: auth: Debug: client in: AUTH#0111#011PLAIN#011service=imap#011secured#011session=ZBnLu5UAKQAuBSdf#011lip=99.99.99.99#011rip=55.55.55.55#011lport=993#011rport=50217 Aug 14 14:06:24: auth: Debug: client out: CONT#0111#011 Aug 14 14:06:24: auth: Debug: client in: CONT<hidden> Aug 14 14:06:24: auth-worker(8095): Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Aug 14 14:06:24: auth-worker(8095): Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_mysql.so Aug 14 14:06:24: auth-worker(8095): mysql(127.0.0.1): Connected to database mailserver Aug 14 14:06:24: auth-worker(8095): Debug: sql(test.example.org,55.55.55.55): query: SELECT email as user, password FROM users WHERE email='test.example.org'; Aug 14 14:06:24: auth: Debug: client out: OK#0111#011user=test.example.org Aug 14 14:06:24: auth: Debug: master in: REQUEST#0111720057857#0118090#0111#0114bf45b372441751900d7d967578b0e03 Aug 14 14:06:24: auth-worker(8095): Debug: sql(test.example.org,55.55.55.55): SELECT CONCAT('/var/vmail/',CONCAT(SUBSTRING_INDEX(email,'@',-1),'/',SUBSTRING_INDEX(email,'@',1))) AS home, 5000 AS uid, 5000 AS gid, CONCAT('maildir:storage=+',quota_kb) AS quota_rule FROM users WHERE email='test.example.org'; Aug 14 14:06:24: auth: Debug: master out: USER#0111720057857#011test.example.org#011home=/var/vmail/contriveit.com/te… Aug 14 14:06:24: imap-login: Login: user=<test.example.org>, method=PLAIN, rip=55.55.55.55, lip=99.99.99.99, mpid=8097, TLS, session=<2QDLu5UAKAAuBSdf> Aug 14 14:06:24: auth: Debug: client in: CONT<hidden> Aug 14 14:06:24: auth-worker(8095): Debug: sql(test.example.org,55.55.55.55): query: SELECT email as user, password FROM users WHERE email='test.example.org'; Aug 14 14:06:24: auth: Debug: client out: OK#0111#011user=test.example.org Aug 14 14:06:24: imap: Debug: Loading modules from directory: /usr/lib/dovecot/modules Aug 14 14:06:24: imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib10_quota_plugin.so Aug 14 14:06:24: imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib11_imap_quota_plugin.so Aug 14 14:06:24: imap: Debug: Added userdb setting: plugin/quota_rule=maildir:storage=+250000 Aug 14 14:06:24: imap(test.example.org): Debug: Effective uid=5000, gid=5000, home=/var/vmail/contriveit.com/test Aug 14 14:06:24: imap(test.example.org): Debug: Quota root: name=User quota backend=maildir args= Aug 14 14:06:24: imap(test.example.org): Debug: Quota rule: root=User quota mailbox=maildir bytes=+256000000 messages=0 Aug 14 14:06:24: imap(test.example.org): Debug: Quota rule: root=User quota mailbox=Trash bytes=+10485760 messages=0 Aug 14 14:06:24: imap(test.example.org): Debug: Namespace inbox: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/var/vmail/contriveit.com/test/Maildir Aug 14 14:06:24: auth: Debug: master in: REQUEST#011635830273#0118093#0111#011316aed6aaba731b5f79c78d2664a7c99 Aug 14 14:06:24: imap(test.example.org): Debug: maildir++: root=/var/vmail/contriveit.com/test/Maildir, index=, control=, inbox=/var/vmail/contriveit.com/test/Maildir, alt= Aug 14 14:06:24: auth-worker(8095): Debug: sql(test.example.org,55.55.55.55): SELECT CONCAT('/var/vmail/',CONCAT(SUBSTRING_INDEX(email,'@',-1),'/',SUBSTRING_INDEX(email,'@',1))) AS home, 5000 AS uid, 5000 AS gid, CONCAT('maildir:storage=+',quota_kb) AS quota_rule FROM users WHERE email='test.example.org'; Aug 14 14:06:24: auth: Debug: master out: USER#011635830273#011test.example.org#011home=/var/vmail/contriveit.com/tes… Aug 14 14:06:24: imap-login: Login: user=<test.example.org>, method=PLAIN, rip=55.55.55.55, lip=99.99.99.99, mpid=8098, TLS, session=<ZBnLu5UAKQAuBSdf> Aug 14 14:06:24: imap: Debug: Loading modules from directory: /usr/lib/dovecot/modules Aug 14 14:06:24: imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib10_quota_plugin.so Aug 14 14:06:24: imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib11_imap_quota_plugin.so Aug 14 14:06:24: imap: Debug: Added userdb setting: plugin/quota_rule=maildir:storage=+250000 Aug 14 14:06:24: imap(test.example.org): Debug: Effective uid=5000, gid=5000, home=/var/vmail/contriveit.com/test Aug 14 14:06:24: imap(test.example.org): Debug: Quota root: name=User quota backend=maildir args= Aug 14 14:06:24: imap(test.example.org): Debug: Quota rule: root=User quota mailbox=maildir bytes=+256000000 messages=0 Aug 14 14:06:24: imap(test.example.org): Debug: Quota rule: root=User quota mailbox=Trash bytes=+10485760 messages=0 Aug 14 14:06:24: imap(test.example.org): Debug: Namespace inbox: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/var/vmail/contriveit.com/test/Maildir Aug 14 14:06:24: imap(test.example.org): Debug: maildir++: root=/var/vmail/contriveit.com/test/Maildir, index=, control=, inbox=/var/vmail/contriveit.com/test/Maildir, alt= ### doveconf -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-042stab084.17 x86_64 Debian 7.6 simfs auth_debug = yes auth_mechanisms = plain login dict { quota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } mail_debug = yes mail_location = maildir:/var/vmail/%d/%n/Maildir mail_plugins = " quota" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Spam { auto = create special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { quota = maildir:User quota quota_rule = *:storage=100M quota_rule2 = Trash:storage=+10M sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = postmaster(a)example.org protocols = " imap sieve" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } ssl_cert = </etc/dovecot/cert.pem ssl_key = </etc/dovecot/key.pem userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lda { mail_plugins = " quota sieve quota" } protocol imap { mail_max_userip_connections = 15 mail_plugins = " quota imap_quota" } ### /etc/dovecot/dovecot-dict-sql.conf.ext connect = host=127.0.0.1 dbname=db user=user password=password map { pattern = priv/quota/storage table = virtual_users username_field = email value_field = quota_kb } map { pattern = priv/quota/messages table = quota username_field = username value_field = messages } map { pattern = shared/expire/$user/$mailbox table = expires value_field = expire_stamp fields { username = $user mailbox = $mailbox } } #### /etc/dovecot/dovecot-sql.conf.ext default_pass_scheme = PLAIN-MD5 password_query = SELECT email as user, password FROM users WHERE email='%u'; user_query = SELECT CONCAT('/var/vmail/',CONCAT(SUBSTRING_INDEX(email,'@',-1),'/',SUBSTRING_INDEX(email,'@',1))) AS home, 5000 AS uid, 5000 AS gid, CONCAT('maildir:storage=+',quota_kb) AS quota_rule FROM users WHERE email='%u'; Any help appreciated.

2 2

Domain name lost for SASL
by Dominic Wong 13 Aug '14

13 Aug '14

Hi, I'm trying to set up Postfix + Dovecot (2.0.9) + PostfixAdmin on CentoOS (the standard amazon machine image) and am having problems with my SMTP user authentication. Turning on auth debugging I can see the username is losing the first part of the domain so one(a)two.three becomes one.three dovecot: auth: Debug: sql(one.three, ... ): query: SELECT username AS user,password FROM mailbox WHERE username = 'one.three' AND active='1' I don't know if it's postfix or dovecot which is trimming the username, any tips on what causes this would be greatly appreciated. Thanks

1 0

Test / can you see my mail??
by Michael Ludwig 12 Aug '14

12 Aug '14

Hi! I have to excuse my behave and I am really sorry. Yesterday I wrote two mails to this list and they never showed up in the online archives where I checked it. So that's the reason for this testmail. I hope this mail is readable to all of you? Cheers, Michael

6 5

Defer email via LMTP when there is 'no space left on device' instead of rejecting it
by Christian Rohmann 12 Aug '14

12 Aug '14

Hello dovecot-users, (This problem was being discussed a little in this thread from 2011: http://www.dovecot.org/list/dovecot/2011-May/059009.html) I noticed (using LMTP) that Dovecot handles 'no space left on device' just like an 'over-quota', if I read this part of method "static int client_deliver(struct client *client, const struct mail_recipient *rcpt, struct mail *src_mail, struct mail_deliver_session *session)" "lmtp/commands.c" correctly: --- cut --- [...] else if (storage != NULL) { error = mail_storage_get_last_error(storage, &mail_error); if (mail_error == MAIL_ERROR_NOSPACE) { client_send_line(client, "%s <%s> %s", dctx.set->quota_full_tempfail ? "452 4.2.2" : "552 5.2.2", rcpt->address, error); } else { client_send_line(client, "451 4.2.0 <%s> %s", rcpt->address, error); } ret = -1; [...] --- /cut --- In consequence this means the configuration option quota_full_tempfail is applied in both cases. But to me there is a major difference between a full disk (a.k.a "admin fucked up") and over-quota (a.k.a. "user has simply too much stuff in his mailbox"). So I would like to be able tell Dovecot to reject messages due to full mailboxes, but simply defer those that cannot be stored due to a full disk (which I am to blame for). To me this should result in two separate configuration options for the two problem root-causes: quota_full_tempfail storage_full_tempfail Or did I simply miss or completely misunderstood anything here? Regards Christian

10 18

doveadm pw with SHA512-CRYPT won't roundtrip
by Jon Hulatt 12 Aug '14

12 Aug '14

Hi, Not sure if this is a PBKAC or not:- root@ds3:/usr/share/postfixadmin# doveadm pw -s SHA512-CRYPT -p password {SHA512-CRYPT}$6$aUgGXP0UshkMj7hY$9JV4yMRsjIe/98CzmglYrMjf.9NJ.FXzxcLE9B0v3doCRUWo2wRncc6hg6VCs0DCUHQbeC/bRDZdGCge/nB/h/ root@ds3:/usr/share/postfixadmin# doveadm pw -t {SHA512-CRYPT}$6$aUgGXP0UshkMj7hY$9JV4yMRsjIe/98CzmglYrMjf.9NJ.FXzxcLE9B0v3doCRUWo2wRncc6hg6VCs0DCUHQbeC/bRDZdGCge/nB/h/ -p password doveadm(root): Fatal: reverse password verification check failed: Password mismatch root@ds3:/usr/share/postfixadmin# dovecot --version 2.2.9 It works ok with other schemes that i’ve tried (e.g. SSHA-512). Is this a bug, or my mistake? thanks Jon

4 3

Frequent error: unknown namespace Trash
by Michael Ludwig 12 Aug '14

12 Aug '14

Hello to all of you! ;-) My first post on this list. I frequently get this error in dovecot.log every time a user logs in and out: ============================= imap(mailaddress): Error: quota: Unknown namespace: Trash ============================= When I change my conf.d/90-quota.conf from "Trash" to ".Trash" (as this is the imap/maildir folder name, the error stays the same, but with the ".Trash" in dovecot.log This is what my 90-quoato.conf looks like: ============================= plugin { quota_rule = *:storage=2G quota_rule2 = Trash:storage=+100M quota_grace = 10%% } ============================= Where can I start my search, what is going wrong? Just for letting you know: This mailserver is a fresh and clean setup. I am using postfix/dovecotvimbadmin/mysql/spamassassin/clamsmtp. Cheers, Michael

2 1

Sieve: Saving "pristine" messages for backups and spam training
by Jeff Rice 12 Aug '14

12 Aug '14

Hello, I'm trying to work out a way to have my Sieve filter save a "pristine" version of email messages as a backup, primarily to use for training the spam filter. I would like is to have every message saved into a single, site-wide directory (in the global sieve) before being processed additionally and delivered. The messages in that directory will be used to train the spam filter without having to worry about removing Spamassassin headers and so forth. I thought fileinto :copy might do what I wanted, but this creates a backup directory individually for each user. That's unmanageable for the spam training process I use. redirect *could* work, but that adds a header during the process so the email saved would not be "pristine". I'm thinking of using the extprograms plugin to pipe to a program that will do a simple copy. That feels very hackish, however, and I'm hoping there is a more elegant solution. Am I missing something obvious here? Thanks! Jeff

4 4

Re: Throttling pop3-login connections
by Joseph Tam 12 Aug '14

12 Aug '14

Alex <mysqlstudent(a)gmail.com> writes: > Okay, that makes sense, and is in line with what I was also thinking. This > is like 30 concurrent requests, then nothing for a minute or two, then > another 30 concurrent requests. 30 concurrent requests at 1 or 2 minute intervals? This seems weird, as I would expect it to be more or less randomly distributed over that interval. Does this happen at the top of each minute? If what you observe is true, the only situation I can think of that would cause this is a bunch of POP3 fetch clients running as a cron job synchronized to a minute grid (i.e seconds=0). Joseph Tam <jtam.home(a)gmail.com>

1 0

Options mail_nfs_storage and mail_nfs_index not in 2.2(.13) example config anymore?
by Christian Rohmann 11 Aug '14

11 Aug '14

Hey dovecot-users, did I miss anything anywhere about the configuration variables "nfs_storage" and "mail_nfs_index" being removed from the example configuration in 2.2? In 2.1 they where both in 10-mail.conf commented out and set to their default "no". But with 2.2 they are not in any of the exmaple config files anymore. doveadm is still showing the variables and they can be used as ever still. Just wondering if I missed something and this should be configured differently on 2.2 now. Regards Christian

2 1

poolmon improvements
by Timo Sirainen 11 Aug '14

11 Aug '14

I've been planning to improve poolmon failure checking for a long time already, but I still haven't managed to get to it. Maybe somebody else has more time, so here's a feature request for anyone to implement: poolmon currently gives up immediately if the first check to any service fails. It really should be trying multiple times over multiple seconds before giving up. I think ideally it would be: - Individual check timeout could still be the default 5 seconds - Add full check time setting, which could be e.g. 15 seconds. If all checks fail during this time then disable the host. - If request fails because connection gets rejected, retry quickly, e.g. after 0,1 seconds - If check fails because of protocol errors, wait for a long time, e.g. 1 second So this would avoid backend being removed in situations where it really shouldn't be removed: - Dovecot restarts - Dovecot reloads - load spikes and other random issues that cause temporary problems Especially the load spike is an annoying issue which my plan doesn't even fully solve. The solution to fix a heavily overloaded cluster isn't really to start removing all of its backends that are busy working..

1 0

Frequent error: unknown namespace Trash
by Michael Ludwig 11 Aug '14

11 Aug '14

Hello to all of you! ;-) My first post on this list. I frequently get this error in dovecot.log every time a user logs in and out: ============================= imap(mailaddress): Error: quota: Unknown namespace: Trash ============================= When I change my conf.d/90-quota.conf from "Trash" to ".Trash" (as this is the imap/maildir folder name, the error stays the same, but with the ".Trash" in dovecot.log This is what my 90-quoato.conf looks like: ============================= plugin { quota_rule = *:storage=2G quota_rule2 = Trash:storage=+100M quota_grace = 10%% } ============================= Where can I start my search, what is going wrong? Just for letting you know: This mailserver is a fresh and clean setup. I am using postfix/dovecotvimbadmin/mysql/spamassassin/clamsmtp. Cheers, Michael

1 0