- dovecot - dovecot.org

[Dovecot] All Mail folder as in Gmail
by Dmitry Podkovyrkin 27 Apr '14

27 Apr '14

Hello How to make a folder "All Mail" so that it got a letter from the Inbox and Sent? Mail client makes a copy of emails sent to the folder Sent. -- Regards Dmitry Podkovyrkin email: dmirty(a)rutelecom.company

2 2

[Dovecot] Dovecot cannot connect to PostgreSQL server
by Chris Vaas 26 Apr '14

26 Apr '14

I am currently facing the following log output: Apr 26 16:40:28 h2290750 dovecot: auth: Error: pgsql(localhost): Connect failed to database mail: could not connect to server: Permission denied Apr 26 16:40:28 h2290750 dovecot: auth: Error: #011Is the server running on host "localhost" (::1) and accepting Apr 26 16:40:28 h2290750 dovecot: auth: Error: #011TCP/IP connections on port 5432? I have double checked the database. It is listening correctly and I can connect to it via psql -U mailreader mail I provided all necessary information to dovecot via this configuration snippet: driver = pgsql connect = host=localhost dbname=mail user=mailreader password=secret default_pass_scheme = SHA512 password_query = SELECT email as user, password, 'maildir:/home/mail'||maildir as userdb_mail FROM users WHERE email = '%u' How can I debug this situation? Cheers Chris

4 4

Re: [Dovecot] Dovecot cannot connect to PostgreSQL server
by Reindl Harald 26 Apr '14

26 Apr '14

first: don't reply off-list and don't top-post Am 26.04.2014 18:26, schrieb Christian Vaas: > How do I determine my postgresql socket location? > > On Apr 26, 2014 6:17 PM, "Reindl Harald" <h.reindl(a)thelounge.net <mailto:h.reindl@thelounge.net>> wrote: > > Am 26.04.2014 18 <tel:26.04.2014%2018>:06, schrieb Chris Vaas: > > I am currently facing the following log output: > > > > Apr 26 16:40:28 h2290750 dovecot: auth: Error: pgsql(localhost): Connect > > failed to database mail: could not connect to server: Permission denied > > Apr 26 16:40:28 h2290750 dovecot: auth: Error: #011Is the server running on > > host "localhost" (::1) and accepting > > Apr 26 16:40:28 h2290750 dovecot: auth: Error: #011TCP/IP connections on > > port 5432? > > > > I have double checked the database. It is listening correctly and I can > > connect to it via > > > > psql -U mailreader mail > > > > I provided all necessary information to dovecot via this configuration > > snippet: > > > > driver = pgsql > > connect = host=localhost dbname=mail user=mailreader password=secret > > default_pass_scheme = SHA512 > > password_query = SELECT email as user, password, > > 'maildir:/home/mail'||maildir as userdb_mail FROM users WHERE email = '%u' > > > > How can I debug this situation? > > try "host=/path/to/your/unix/socket" instead just only "localhost" > or switch to TCP with using 127.0.0.1 instead localhost > > in case of mysqld this would be "host=/var/lib/mysql/mysql.sock" why don't you know that? it's your machine and i don't use PostgreSQL at all "updatedb; locate post | grep socket" may be a good start just read the man page of your distribtion or use google google: "name-of-your-distribution postgresql unix socket" or simply try 127.0.0.1 which is as explained different to localhost localhost is typically unix-socket and 127.0.0.1 TCP/IP, in any case you have to make sure that the user is allowed in case of mysql i can set different permissions for "user1@localhost" and "user1(a)127.0.0.1", most likely PostgeSQL supports that too

1 0

[Dovecot] Incompatibility Thunderbirds Auth Mech TLS-Certificate <-> Dovecot
by Christian Felsing 25 Apr '14

25 Apr '14

Hello, it seems there there is an issue regarding "TLS-Certtificate" authentication in Thunderbird and Dovecot. Obviously client certificate is recognized by Dovecot: Apr 25 14:29:01 dovecot dovecot: imap-login: Valid certificate: /emailAddress=christian.felsing(a)example.net/CN=Christian Felsing (Test)/OU=CF Certificates/O=example.net/C=DE AFAIK Dovecot always requires IMAP login, even in "static" passdb config. Static means arbitrary password is ok, but not "no login" I hope, I am wrong, following log entry gave a hint, what Thunderbird does or more precisely - not do: Apr 25 14:29:01 dovecot dovecot: imap-login: Disconnected (no auth attempts in 5 secs): user=<>, rip=192.168.1.99, lip=192.168.42.1, TLS, session=<3+1THN33NQBtWq5D> Dovecot wants an IMAP login, but Thunderbird does not so. I am not sure if that is a bug (or feature) of Dovecot or Thunderbird. Thunderbird does several strange things on client certificates: 1st) If Dovecot is configured to request a client certificate and Thunderbird is configured to use plain text auth, Thunderbird offers a client certificate and login succeeds as configured in Dovecot. Unfortunately Thunderbird uses same certificate for all configured accounts to that host. Very bad if Dovecot reads username from certificate attributes. 2nd) If Dovecot is configured to request a client certificate and Thunderbird is configured to use TLS-Certificate, Thunderbird also offers a client certificate, but Dovecot requests login from Thunderbird. That fails, because Thunderbird assumes TLS-Certificate is enough for successful log. If it is true that Dovecot is not compatible to Thunderbirds way of TLS-Certificate Authentication, I consider to set up a proxy, which supports that way. May be Nginx would be a solution, it supports IMAP and LUA module plus some LUA code will fake the authentication. This is an ugly hack so I would like to avoid that, if anybody has a better solution. Thunderbird is a very widespread IMAP client so it should not be ignored. best regards Christian ---Dovecot config--- # /opt/dovecot/bin/doveconf -n # 2.2.12: /opt/dovecot/etc/dovecot-cert/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.4 auth_debug = yes auth_debug_passwords = yes auth_master_user_separator = * auth_ssl_require_client_cert = yes auth_ssl_username_from_cert = yes auth_username_chars = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@#" auth_username_translation = "@#" base_dir = /var/run/dovecot-cert first_valid_uid = 124 last_valid_uid = 124 listen = 192.168.42.1 log_timestamp = %Y-%m-%d %H:%M:%S login_greeting = example.net imap4/pop3 (cert only) ready. mail_gid = 124 mail_location = maildir:~/Maildir mail_privileged_group = vmail mail_uid = 124 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave imapflags notify namespace { list = children location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u prefix = shared/%%u/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes list = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / type = private } passdb { args = password=test driver = static } plugin { acl = vfile:/etc/dovecot/global-acls:cache_secs=300 acl_shared_dict = file:/var/lib/dovecot/shared-mailboxes autocreate = Trash autocreate2 = Drafts autosubscribe = Trash autosubscribe2 = Drafts quota = maildir:User quota quota_rule = *:storage=500M quota_rule2 = Trash:storage=+100M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u recipient_delimiter = + sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_extensions = +notify +imapflags } protocols = imap pop3 lmtp sieve service anvil { client_limit = 4000 } service auth-worker { group = vmail } service auth { client_limit = 8000 unix_listener auth-master { group = vmail mode = 0660 user = vmail } unix_listener auth-userdb { group = vmail mode = 0660 user = dovecot } user = root } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } process_limit = 1024 } service imap-postlogin { executable = script-login /opt/cfbin/lastlogin.sh } service imap { executable = imap imap-postlogin } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } process_limit = 1024 } service pop3-postlogin { executable = script-login /opt/cfbin/lastlogin.sh } service pop3 { executable = pop3 pop3-postlogin } service quota-warning { executable = script /opt/cfbin/quota-warning.sh user = vmail } ssl_ca = </opt/dovecot/etc/dovecot/client-ca.pem ssl_cert = </opt/dovecot/etc/dovecot/example.net.pem ssl_cipher_list = kEECDH:kEDH:AESGCM:ALL:+3DES:!RC4:!LOW:!EXP:!MD5:!aNULL:!eNULL ssl_dh_parameters_length = 4096 ssl_key = </opt/dovecot/etc/dovecot/example.net.key ssl_prefer_server_ciphers = yes ssl_verify_client_cert = yes verbose_ssl = yes protocol imap { imap_client_workarounds = tb-extra-mailbox-sep mail_max_userip_connections = 20 mail_plugins = quota imap_quota acl imap_acl } protocol sieve { managesieve_logout_format = bytes ( in=%i : out=%o ) } protocol pop3 { mail_plugins = quota pop3_uidl_format = %08Xu%08Xv }

2 1

[Dovecot] separating logs by port
by Hanno Böck 25 Apr '14

25 Apr '14

Hi, I wanted to ask if there's an easy way to log the port in dovecot. The background is that, as everyone's probably aware, pop3/imap usually listen on two ports (110/995 for pop3, 143/993 for imap). One port is the "classic" port that allows unencrypted and STARTTLS connections, the other is the legacy SSL port that allows TLS only connections. The legacy SSL ports are considered deprecated and I'd like to know if I can deprecate them on my severs. Therefore I'd like to know how many users use them, but at the moment I can't see which port my users use. I haven't found an easy way to detect that. The easiest thing would be if there'd be a way to add the port number to the pop3-login/imap-login lines in the log files. Any way to do that? cu, -- Hanno Böck http://hboeck.de/ mail/jabber: hanno(a)hboeck.de GPG: BBB51E42

2 1

[Dovecot] Multiple Instances Of Dovecot On One Messagebase
by Christian Felsing 25 Apr '14

25 Apr '14

Hello, I would like to run multiple instances of Dovecot with same message base (maildir format) Will this set up work or would that destroy message base? Intention is to offer different authentication methods to users, username/password and client certificates. Those instances should run on different IP addresses which is supported by Dovecot. Unfortunately Dovecot does not allow different auth configs in "local <ip> {}" sections. best regards Christian

1 0

Re: [Dovecot] integration of old mails into new dovecot Maildir
by K. C. Mohan - Personal 25 Apr '14

25 Apr '14

Steffen, Thank you for all your help in helping me resolve my mail integration. I was able to get the old mails integrated into the new server following your suggestion of 1:1 transfer. Thanks again and have a good day. -----Original Message----- From: Steffen Kaiser [mailto:skdovecot@smail.inf.fh-brs.de] Sent: Monday, April 14, 2014 2:18 AM To: K. C. Mohan Cc: dovecot(a)dovecot.org Subject: Re: [Dovecot] integration of old mails into new dovecot Maildir -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Sun, 13 Apr 2014, K. C. Mohan wrote: Please, do not top post. > Thank you Steffen, for addressing my problem of migrating old mails > into new mail server. I went through the article you pointed to but > could not succueed. I will appreciate if you could guide me to step by > step process to migrate the mails. My old mail server used 2.x dovecot version. you post very little information: 1) how are the messages storred on the old server, which storage backend do you use, maybe Maildir? 2) the storage backend on the new server? 3) do you care about the message UIDs? 4) How many users do you have (approx.) and can you access the user's mailboxes via IMAP, e.g. using a master user or do you know their password or can you switch to a known password during migration of one particular user? 5) Did you've changed namespaces? - From your first post I figure that the basic mail server functionality of the new server is working, most importantly login, message delivery and retrieval. > -----Original Message----- From: Steffen Kaiser > Sent: Thursday, April 10, 2014 6:14 AM > To: K. C. Mohan - Personal s > Cc: dovecot(a)dovecot.org > Subject: Re: [Dovecot] integration of old mails into new dovecot > Maildir > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On Tue, 8 Apr 2014, K. C. Mohan - Personal wrote: > >> I just installed dovecot 2.2.9 on to a new server and want to >> transfer all the old mails into the email accounts I imported from >> the previous server into MySQL database. I am not able to view the >> subfolders and or old mails that I copied into their respective >> maildir folders. I was very much appreciate if anyone could let me >> know how to import old mails into the new server. All I see, is the >> new mails that have come into the account since I started dovecot service in the new server. > > Check out http://wiki2.dovecot.org/Migration . Read esp. about > "preserving messages' UIDs". > > If the old server uses Maildir, too, and you don't care about the > UIDs, copy the files over and you are done. - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQEVAwUBU0t9r3D1/YhP6VMHAQL21wgAx1GgDwQDWwDMPxbMQ+1vR3i7dsyUk5jm PNmRigoV8qylbn2AuZ1YMxGN2wEZfSl2zi/j2CtSEUX+d9LOf+lvI9V8zXkvSHT6 jYEHwuIQACjPUxWmh7x8XelvQvZHB9PEH56z8eJhkgyVxpae8Rbb1EHurvmxckef O0fdmCIglXJdJJ+B9WZ7JZVsB3M6PFFsllizS17+Hus6O2NeVaszLa7o7bk5XInD m+Co4e4sCVphVlssHRCIRa8Lj6nDC+D6g3RjCR+n0rVREXRbvEcSQPerEAqrZhf8 HB46x3V3n6C2fEu7RNWLB0+DzglHLBI5p9ZqAjJRMr3D9Xy9L5SKlQ== =IH25 -----END PGP SIGNATURE----- --- This email is free from viruses and malware because avast! Antivirus protection is active. http://www.avast.com --- This email is free from viruses and malware because avast! Antivirus protection is active. http://www.avast.com

1 0

[Dovecot] Assert crash with latest HG ddf374a36057
by e-frog 24 Apr '14

24 Apr '14

Hello, Latest HG assert crashes with imap(user): Panic: file mail-storage.c: line 1836 (mailbox_transaction_begin): assertion failed: (box->opened) Full backtrace is attached. Thanks, e-frog

1 0

[Dovecot] Regarding Quota
by Joy 24 Apr '14

24 Apr '14

Dear All, One of my user is using sieve to make a copy of incoming mail in another folder all is working file. I have seen that he is using 15GB out of 20GB space of his mailbox, while calculating the same using du command returns only 9.5 GB. I am not facing this issue with any of other user. Is there something going wrong or misconfiguration causing this.

2 1

[Dovecot] Help implementing username_format in auth PAM driver
by lee＠trager.us 24 Apr '14

24 Apr '14

While configuring my server with dovecot I noticed that the PAM authentication driver does not support the username_format option as does the password file driver. This didn't seem too hard to implement so I through together a patch. As you can see in the attached patch I only modify the username sent to PAM. Despit doing this I run into the domain lost issue(http://wiki2.dovecot.org/DomainLost). This prevents me from using the domain name in my mail_location config string. What I don't understand is why does changing the username string sent to PAM for authentication trigger this issue? Shouldn't dovecot continue to use the client supplied username as I am *not* changing it anywhere in my config? Thanks, Lee

1 0

Re: [Dovecot] Allowing non-SSL connections only for certain Password Databases
by Joseph Tam 24 Apr '14

24 Apr '14

Dan Pollock <pollock(a)theorem.ca> writes: > I would like to move everyone onto more modern mail programs, but at the > moment I have a couple of them that are stuck using very old software > installed for them on work computers. The rest of my clients can connect > on ports 993 and 995 without it being a problem. You know best whether you want to take the risk of compromising passwords on your system (including compromised accounts using for spamming and blowing your mail reputation to smithereens), but I don't know whether your customers do. They may think they are only risking their Email, but it can be leveraged to also gain access to other authentication systems e.g. "Forgot password" feature. You can suggest the installation of a SSL proxy for those holdouts that won't switch mail readers (stunnel even has support down to Win98). https://www.stunnel.org/ports.html These days, cleartext passwords over the network is just begging to be compromised. Joseph Tam <jtam.home(a)gmail.com>

1 0

Re: [Dovecot] ImapTest utility not compiling
by Hein, Brad 23 Apr '14

23 Apr '14

* Found my error. I moved the dovecot source code after compiling it. Didn’t realize there were embedded/absolute URLS within the dovecot source tree. All I needed to do was make clean && make dovecot, then imaptest compiled no problem. [Brad Hein] From: <Hein>, Local Administrator <Brad_Hein(a)cable.comcast.com<mailto:Brad_Hein@cable.comcast.com>> Date: Wednesday, April 23, 2014 at 2:00 PM To: "dovecot(a)dovecot.org<mailto:dovecot@dovecot.org>" <dovecot(a)dovecot.org<mailto:dovecot@dovecot.org>> Subject: ImapTest utility not compiling Following the wiki instructions here: http://www.imapwiki.org/ImapTest/Installation I’ve run into a wall trying to compile the imapTest utility (dovecot compiled without any problems). I think there’s a problem in the imapTest utility? Copy/pasted compile output and attached. The gist of the problem seems to be that imaptest can’t find the dovecot headers and libraries (configure script was executed like this: ./configure --with-dovecot=/usr/src/dovecot-20140420 checkpoint.c:3:17: error: lib.h: No such file or directory checkpoint.c:4:17: error: str.h: No such file or directory <and many more> Based on these errors I believe there’s a compatibility problem between the current imapTest utility and dovecot. The configure script said to report errors to this email address. [Brad Hein]

1 0

[Dovecot] Latest HG 09c114091c88 2.2.12 Assertion Failure
by Thomas Leuxner 23 Apr '14

23 Apr '14

Latest HG reproducibly crashes when accessing a virtual namespace: Apr 22 14:49:38 spectre dovecot: master: Dovecot v2.2.12 (09c114091c88) starting up for imap, lmtp […] Apr 22 14:50:05 spectre dovecot: imap(tlx(a)leuxner.net): Panic: file mail-storage.c: line 1735 (mailbox_notify_changes): assertion failed: (box->opened) Apr 22 14:50:05 spectre dovecot: imap(tlx(a)leuxner.net): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x6bbaf) [0x7f7dad859baf] -> /usr/lib/dovecot/libdovecot.so.0(+0x6bc0e) [0x7f7dad859c0e] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f7dad81328e] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x81fda) [0x7f7dadb45fda] -> /usr/lib/dovecot/modules/lib20_virtual_plugin.so(+0x8ca3) [0x7f7dabffbca3] -> dovecot/imap [tlx(a)leuxner.net 95.223.79.50 IDLE](cmd_idle+0x45) [0x410495] -> dovecot/imap [tlx(a)leuxner.net 95.223.79.50 IDLE](command_exec+0x3c) [0x41839c] -> dovecot/imap [tlx(a)leuxner.net 95.223.79.50 IDLE]() [0x417400] -> dovecot/imap [tlx(a)leuxner.net 95.223.79.50 IDLE]() [0x4174ba] -> dovecot/imap [tlx(a)leuxner.net 95.223.79.50 IDLE](client_handle_input+0x115) [0x417775] -> dovecot/imap [tlx(a)leuxner.net 95.223.79.50 IDLE](client_input+0x72) [0x417b22] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x4e) [0x7f7dad86a91e] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0xd7) [0x7f7dad86b917] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x9) [0x7f7dad86a9a9] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f7dad86aa28] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f7dad818633] -> dovecot/imap [tlx(a)leuxner.net 95.223.79.50 IDLE](main+0x298) [0x40c128] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xfd) [0x7f7dad481ead] -> dovecot/imap [tlx(a)leuxner.net 95.223.79.50 IDLE]() [0x40c28d] Apr 22 14:50:05 spectre dovecot: imap(tlx(a)leuxner.net): Fatal: master: service(imap): child 25774 killed with signal 6 (core not dumped) I'm not sure how to generate a core in this scenario, but commenting out the namespace configuration seems to prevent crashes for now. This appears to have been introduced in the last 5 days mercurial updates according to logs. Previously working namespace: namespace { prefix = Virtual/ separator = / location = virtual:~/mdbox/virtual } Regards Thomas

2 2

[Dovecot] dovecot qmail-ldap
by Gustavo Coelho 23 Apr '14

23 Apr '14

Hi folks, i am trying to get dovecot to work in my qmail-ldap instalation but no success so far. I respectfuly request your help. Here is my /etc/dovecot/dovecot.conf : auth_debug = yes auth_verbose = yes base_dir=/var/dovecot default_process_limit=100 disable_plaintext_auth=no listen=200.235.128.97 log_path=/var/log/dovecot.log login_greeting = Etosha Messaging Suite IMAP ready mail_uid=vmail mail_gid=vmail mail_location = maildir:/var/pop/%u/Inbox mail_max_userip_connections = 100 passdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } userdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid from subject mail_log_group_events = mechanisms = plain login quota = maildir quota_rule = ?:storage=0 quota_rule2 = Trash:storage=+1024000 quota_rule3 = SPAM:ignore trash = /etc/dovecot/dovecot-trash.conf } protocols = imap service imap-login { inet_listener imaps { port = 993 ssl = yes } process_min_avail = 1 } service imap { executable = imap } protocol imap { mail_plugins = quota mail_log notify imap_quota } ssl_cert = </etc/ssl/dovecotcert.pem ssl_key = </etc/ssl/private/dovecot.pem Here is my dovecot-ldap.conf : host = x.y.z.k dn = cn=mail,ou=appsrv,dc=ufv,dc=br dnpass = MaIlAsuopdVpw sasl_bind = no auth_bind = yes ldap_version = 3 base = ou=people,dc=ufv,dc=br scope = subtree pass_filter = (&(objectClass=qmailUser)(uid=%u)) pass_attrs = uid=user,mailHost=host,=y=proxy_maybe user_filter = (&(objectClass=qmailUser)(uid=%u)) user_attrs = mailmessagestore=home,mailQuotaSize=quota_rule=*:bytes=%$,mailHost=host,=y=proxy_maybe Here is the output of pkg_info for my openbsd server 5.4 amd64. obsd# pkg_info | grep dovecot dovecot-2.1.17 compact IMAP/POP3 server dovecot-ldap-2.1.17 LDAP authentication support for Dovecot obsd# Here the output : sioux@obsd$ telnet obsd imap Trying x.y.z.k... Connected to obsd. Escape character is '^]'. * OK Waiting for authentication process to respond.. Connection closed by foreign host. sioux@obsd$ I just hit "enter" and the message was that, "Ok waiting for authentication ..." May somehere help me ? Thanks a lot for your time and cooperation.

1 0

[Dovecot] stats: Error: Mail server input error: UPDATE-SESSION username imap: stats shrank: mrbytes 26961885 < 28237323
by kadafax＠gmail.com 23 Apr '14

23 Apr '14

Hi List, If anyone is still reading this list, I have another problem beside the FTS's one. From time to time I have this showing up in dovecot-error.log (for several users, not always the same one): stats: Error: Mail server input error: UPDATE-SESSION username imap: stats shrank: mrbytes 26961885 < 28237323 A search in google tell me that it should have been corrected in 2.1.13 but I am using 2.2.12. Is there a human here that can direct me to a solution ? Thanks # 2.2.12: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-431.11.2.el6.x86_64 x86_64 CentOS release 6.5 (Final) ext4 auth_cache_size = 10 M auth_debug = yes auth_master_user_separator = * auth_socket_path = /var/run/dovecot/auth-userdb auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@* auth_verbose = yes auth_verbose_passwords = sha1 base_dir = /var/run/dovecot/ debug_log_path = /var/log/dovecot-debug.log default_client_limit = 2128 default_process_limit = 512 default_vsz_limit = 2 G hostname = mydomain.com info_log_path = /var/log/dovecot.log lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes listen = * log_path = /var/log/dovecot-error.log login_greeting = Welcome login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c mail_debug = yes mail_gid = vmail mail_location = maildir:/var/vmail/%Ln mail_plugins = fts fts_lucene quota stats mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { inbox = yes location = maildir:/var/vmail/%Ln mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = type = private } passdb { args = /usr/local/etc/dovecot/deny-users deny = yes driver = passwd-file } passdb { args = /usr/local/etc/dovecot/master-users driver = passwd-file master = yes } passdb { args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { fts = lucene fts_autoindex = yes fts_autoindex_max_recent = 1000 fts_lucene = whitespace_chars=@ quota = maildir:User quota quota_rule = *:storage=20GB quota_rule2 = Trash:storage=+200M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = /var/sieve-scripts/%Ln.sieve sieve_dir = /var/vmail/%Ln/home/sieve stats_command_min_time = 1 mins stats_domain_min_time = 12 hours stats_ip_min_time = 12 hours stats_memory_limit = 16 M stats_refresh = 30 secs stats_session_min_time = 15 mins stats_track_cmds = yes stats_user_min_time = 1 hours } postmaster_address = postmaster(a)mydomain.com protocols = imap pop3 sieve sieve service auth-worker { user = root } service auth { unix_listener /var/spool/postfix/private/auth { mode = 0777 user = vmail } } service decode2text { executable = script /usr/local/libexec/dovecot/decode2text.sh unix_listener decode2text { mode = 0666 } user = dovecot } service imap-login { inet_listener imaps { port = 993 ssl = yes } process_min_avail = 5 } service imap { process_limit = 1024 } service managesieve-login { inet_listener sieve { port = 4190 } } service pop3-login { inet_listener pop3s { port = 995 ssl = yes } } service quota-warning { executable = script /usr/local/bin/quota-warning.sh user = nobody } service stats { fifo_listener stats-mail { mode = 0600 user = vmail } } ssl_cert = </etc/pki/tls/certs/mail.mydomain.com.pem ssl_key = </etc/pki/tls/private/mail.mydomain.com.key userdb { args = /usr/local/etc/dovecot/dovecot-ldap-userdb.conf.ext driver = ldap override_fields = uid=vmail gid=vmail home=/var/vmail/%Ln/home } verbose_proctitle = yes protocol lda { mail_plugins = fts fts_lucene quota stats sieve virtual } protocol imap { mail_plugins = fts fts_lucene quota stats imap_quota virtual imap_stats }

2 1

[Dovecot] How to bring dovecot to using a slightly modified passwd file
by Stephan von Krawczynski 23 Apr '14

23 Apr '14

Hello all, I am trying to use a setup where domains have separate passwd files with a slightly different layout. Is there a way to tell dovecot that a passwd file contains everything it looks for but on different positions inside the passwd file line? Standard passwd: USERNAME:PASSWD:UID:GID:HOME:extras different layout: USERNAME:PASSWD:extras:UID:GID:HOME Or do I have to patch the source, and where if necessary? Thanks for your help. -- Regards, Stephan

4 5

[Dovecot] Allowing non-SSL connections only for certain Password Databases
by Dan Pollock 23 Apr '14

23 Apr '14

I'm trying to set up my system (using Dovecot 2.0.9) so that certain Password Databases are available over pop3 and imap and others are available over pop3s and imaps. In particular, I would like users to be able to connect without SSL to accounts set up in vpopmail, but to require SSL for system accounts. Is there a way to set "disable_plaintext_auth" to different values for different Password Databases? Is there another way to do it? Thank you, Dan

3 7

Re: [Dovecot] Allowing non-SSL connections only for certain Password Databases
by Dan Pollock 23 Apr '14

23 Apr '14

On Apr 22, 2014, Urban Loesch wrote: > > > > Is there a way to set "disable_plaintext_auth" to different values for different Password Databases? Is there another way to do it? > > > > Why do you not force SSL for all users? I have some users whose mail clients don't properly support SSL. For users using system accounts, it's important that passwords are protected (as they can use that password to log in to things other than email). It's not as critical to keep virtual mailboxes on vpopmail encrypted, as those accounts only have access to email. Dan

3 2

[Dovecot] Shared mailboxes not working with . dot namespace separator - values truncated in SQL
by Frantisek Kucera 23 Apr '14

23 Apr '14

Hello, I have Dovecot configured for multiple domains (usernames are user(a)domain.tld) and I wanted to enable shared mailboxes. But there is some problem - if I share a folder, other user can't see it. In the log I foud: > Apr 22 19:21:02 veverka dovecot: imap(user(a)veverka.tld): Error: Couldn't create namespace 'shared.' for user petr: userdb didn't return a home directory, but location used it (%h): maildir:%h/Maildir:INDEX=~/Maildir/shared/%%u > Apr 22 19:21:02 veverka dovecot: imap(user(a)veverka.tld): Error: Couldn't create namespace 'shared.' for user emclient@veverka: userdb didn't return a home directory, but location used it (%h): maildir:%h/Maildir:INDEX=~/Maildir/shared/%%u Which is weird because the user name is "petr.surname" not only "petr" and the domain is "veverka.tld" not only "veverka". So I turned on SQL logging on my PostgreSQL and saw that Dovecot executes these queries: > 2014-04-22 19:21:02 CEST LOG: statement: SELECT * FROM dovecot_uzivatel WHERE login = 'petr' AND domena = '' > 2014-04-22 19:21:02 CEST LOG: statement: SELECT * FROM dovecot_uzivatel WHERE login = 'emclient' AND domena = 'veverka' The first username was "petr.surname(a)veverka.tld" and the second one was "emclient(a)veverka.tld" so it seems that it was truncated right after first "." dot and I afraid that this is a bug. Then it is obvious that Dovecot can't find the home directory and complains in log (as mentioned above). I found workaround – I had "." configured as namespace separator so I reconfigured it to "/" slash and now mailbox sharing works! But I think that it should work also with "." dot separator and the values should not be truncated in SQL queries. I tried also using '%u' in my SQL and its value was also truncated. Values in "dovecot-acl" a "shared-mailboxes" files seem to be ok. BTW: I have also another server with only one domain and simple user names (no dots) and there the mailbox sharing works – but now it seems that it works only accidentally. This might lead to hardly debuggable problems if someone has usernames with and without dots – mailbox sharing will work for some users but for some not. My old configuration: > password_query = SELECT * FROM dovecot_heslo WHERE login = '%n' AND domena = '%d' > user_query = SELECT * FROM dovecot_uzivatel WHERE login = '%n' AND domena = '%d' > iterate_query = SELECT login AS username, domena AS domain FROM dovecot_uzivatel > namespace { > type = shared > separator = . > prefix = shared.%%u. > location = maildir:%h/Maildir:INDEX=~/Maildir/shared/%%u > subscriptions = yes > list = children > } Had to be reconfigured to: > separator = / > prefix = shared/%%u/ Used version: > # dovecot --version > 2.1.7 > # uname -a > Linux veverka 3.11.0-19-generic #33-Ubuntu SMP Tue Mar 11 18:48:34 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux Regards, Franta P.S. If you have similar problem and have to switch from "." to "/" separators, don't forget to update your Sieve scripts (with fileinto). And sometimes also reconfiguration of the client is needed (e.g. NGImap4ConnectionStringSeparator in SOGo; and Kontact/KMail stopped working and I had to recreate the account in this client).

2 6

[Dovecot] Can't find sieve files
by Chris Kottaridis 23 Apr '14

23 Apr '14

I have been running dovecot on a Fedora 14 host for years and am moving up to Fedora 19. I have things setup to run as a generic user vmail and have all users mailboxes in /var/vmail which is owned by the vmail user. Each user has a Maildir directory and a sieve directory. I also changed sendmail's procmail to run dovecot so it delivers into /var/vmail/<user>/Maildir instead of /var/spool/mail. I just copied the /var/vmail directory from the old machine to the new machine and made all the files there owned by vmail that had the same uid. I then compared the /etc/dovecot/conf.d files and made changes to ty and match the previous configuration as much as possible. I can send mail to a local user and se it show up in the users INBOX. However, when I watch /var/log/maillog when I send the mail I see errors like this: --------------------- script /var/vmail//ckottari/sieve/Active.sieve;name=main script (view user logfile /var/vmail//ckottari/sieve/Active.sieve.log for more information) Apr 22 17:05:46 ckottari-dhcp1 dovecot: lda(ckottari): msgid=<201404222205.s3MM5jJs003128(a)ckottari-dhcp1.wrs.com>: saved mail to INBOX --------------------- When I look at Active.sieve.log: --------------------------------------------------- sieve: info: started log at Apr 22 17:05:46. main script: line 8: error: included personal script 'My RRs.sieve' does not exist. main script: line 9: error: included personal script 'RCPL.sieve' does not exist. main script: line 10: error: included personal script 'New_Incomplete Messages.sieve' does not exist. --------------------------------------------------- Basically, I get an error message for all my scripts that get included by the Active.sieve. The Active.sieve file and all the scripts exist in the /var/vmail/<user>/sieve directory and sieve_dir is set to ~/sieve. So, I am not sure why it can't find them if it can find Active.sieve. Below is my configuration output. This has been working for years in my Fedora 14 host without errors. But, there are some configuration differences that I just kind of guessed at. Any ideas on how to get sieve working would be appreciated. $ dovecot -n # 2.2.12: /etc/dovecot/dovecot.conf # OS: Linux 3.13.5-101.fc19.x86_64 x86_64 Fedora release 19 (Schrödinger’s Cat) login_trusted_networks = 172.25.33.32/5 mail_location = maildir:~/Maildir:LAYOUT=fs managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mbox_write_locks = fcntl namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = dovecot driver = pam } plugin { sieve = ~/sieve/Active.sieve sieve_dir = ~/sieve } protocols = imap sieve ssl = required ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = uid=vmail gid=vmail home=/var/vmail/%n driver = passwd } protocol lda { mail_plugins = " sieve" } Thanks Chris Kottaridis

2 2

[Dovecot] Sieve extprograms problem (broken pipe)
by Ron Guerin 23 Apr '14

23 Apr '14

I've been trying to pipe a message to an external script, and simplifying it as much as possible, I still get a broken pipe error. Can anyone point me in the right direction? X-Sieve: Pigeonhole Sieve 0.3.1 Using this script for debugging: -------------------------------- #!/bin/bash cat > /dev/null exit 0 server log contains: -------------------- Apr 21 19:45:18 generator dovecot: script: Error: write(response) failed: Broken pipe Apr 21 19:45:18 generator dovecot: lda(support(a)example.com): Error: sieve: execution of script /vmail/example.com/support//.dovecot. sieve failed, but implicit keep was successful (user logfile /vmail/example.com/support//.dovecot.sieve.log may reveal additional details) The logfile contains: --------------------- sieve: info: started log at Apr 21 20:13:50. error: msgid=<20140422001349.EA94C2A0CFD2(a)generator.vnetworx.net>: pipe action: failed to pipe message to program `sieve-pipe-supportticket': refer to server log for more information. [2014-04-21 20:13:50]. - Ron

2 1

[Dovecot] one way replication
by Pavel Stano 22 Apr '14

22 Apr '14

Hi, anyone using one way (or master/slave) replication instead of master/master ? There is no info in documentation but in sources (src/doveadm/dsync/doveadm-dsync.c) i found some flags which looks like for setting up master/slave switch (c) { case '1': ctx->oneway = TRUE; ctx->backup = TRUE; break; case 'R': ctx->reverse_backup = TRUE; break; So on master i add -1 : replication_dsync_parameters = -1 -d -n INBOX -l 30 -U and on slave -1 -R: replication_dsync_parameters = -1 -R -d -n INBOX -l 30 -U It looks it works, if i but question is if it is production ready. -- [ Ohodnotte kvalitu mailu: http://nicereply.com/websupport/Stano/ ] Pavel Stano | Troubleshooter http://WebSupport.sk *** BERTE A VYCHUTNAVAJTE ***

1 0

[Dovecot] dovecot-openssl.cnf - switch to 2048 bits?
by A M 22 Apr '14

22 Apr '14

Hello, Just had a query, from security point of view. Shouldn't dovecot-openssl.conf defaults now be 2048 bits? i.e. default_bits = 1024 I have read that 1024 bit certificates are now deprecated, since Dec 31, 2013. So may be we should have default as 2048 and can be changed manually if someone specifically wants 1024 or lower. Regards, A M

2 1

[Dovecot] "Reapplying" sieve rules
by Axel Luttgens 22 Apr '14

22 Apr '14

I did a mistake (shame on me). While migrating accounts on a new server, I didn't pay attention to a detail: sieve_max_actions, that I set to a low value for my testings, but then forgot to raise before the migration. As a result, several redirect-only accounts have now their inbox filled with messages that should have been redirected to "real people", then discarded. Would there be a nice way to "reapply" the sieve scripts, so that the messages of those mailboxes are redirected to their final recipients, the way they should have been upon arrival? Many thanks in advance, Axel

3 3

[Dovecot] FTS Lucene: Fatal: master: service(indexer-worker): child * killed with signal 6
by kfx 22 Apr '14

22 Apr '14

Hi List, Since we migrated from dovecot 1.2.4 to 2.2.12 with lucene as FTS engine, I have this in my error log: Apr 22 14:01:14 indexer-worker(username): Error: lucene index /var/vmail/username/lucene-indexes: IndexWriter() failed (#1): Lock obtain timed out Apr 22 14:01:14 indexer-worker: Error: indexer-worker [username(a)mydomain.com MailBox-1 - 20800/22707]: /home/anotherusername/newnew/clucene/src/core/CLucene/index/DocumentsWriter.cpp:210: std::string lucene::index::DocumentsWriter::closeDocStore(): Assertion `numDocsInStore*8 == directory->fileLength( (docStoreSegment + "." + IndexFileNames::FIELDS_INDEX_EXTENSION).c_str() )' failed. Apr 22 14:01:14 indexer: Error: Indexer worker disconnected, discarding 1 requests for username(a)mydomain.com Apr 22 14:01:14 indexer-worker(username(a)mydomain.com): Fatal: master: service(indexer-worker): child 31158 killed with signal 6 (core not dumped) Apr 22 14:01:16 imap(username): Error: indexer failed to index mailbox MailBox-2 Does that sound familiar to someone ? Thanks. # 2.2.12: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-431.11.2.el6.x86_64 x86_64 CentOS release 6.5 (Final) ext4 auth_cache_size = 10 M auth_debug = yes auth_master_user_separator = * auth_socket_path = /var/run/dovecot/auth-userdb auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@* auth_verbose = yes auth_verbose_passwords = sha1 base_dir = /var/run/dovecot/ debug_log_path = /var/log/dovecot-debug.log default_client_limit = 2128 default_process_limit = 512 default_vsz_limit = 2 G hostname = mydomain.com info_log_path = /var/log/dovecot.log lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes listen = * log_path = /var/log/dovecot-error.log login_greeting = Welcome login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c mail_debug = yes mail_gid = vmail mail_location = maildir:/var/vmail/%Ln mail_plugins = fts fts_lucene quota stats mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { inbox = yes location = maildir:/var/vmail/%Ln mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = type = private } passdb { args = /usr/local/etc/dovecot/deny-users deny = yes driver = passwd-file } passdb { args = /usr/local/etc/dovecot/master-users driver = passwd-file master = yes } passdb { args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { fts = lucene fts_autoindex = yes fts_autoindex_max_recent = 1000 fts_lucene = whitespace_chars=@ quota = maildir:User quota quota_rule = *:storage=20GB quota_rule2 = Trash:storage=+200M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = /var/sieve-scripts/%Ln.sieve sieve_dir = /var/vmail/%Ln/home/sieve stats_command_min_time = 1 mins stats_domain_min_time = 12 hours stats_ip_min_time = 12 hours stats_memory_limit = 16 M stats_refresh = 30 secs stats_session_min_time = 15 mins stats_track_cmds = yes stats_user_min_time = 1 hours } postmaster_address = postmaster(a)mydomain.com protocols = imap pop3 sieve sieve service auth-worker { user = root } service auth { unix_listener /var/spool/postfix/private/auth { mode = 0777 user = vmail } } service decode2text { executable = script /usr/local/libexec/dovecot/decode2text.sh unix_listener decode2text { mode = 0666 } user = dovecot } service imap-login { inet_listener imaps { port = 993 ssl = yes } process_min_avail = 5 } service imap { process_limit = 1024 } service managesieve-login { inet_listener sieve { port = 4190 } } service pop3-login { inet_listener pop3s { port = 995 ssl = yes } } service quota-warning { executable = script /usr/local/bin/quota-warning.sh user = nobody } service stats { fifo_listener stats-mail { mode = 0600 user = vmail } } ssl_cert = </etc/pki/tls/certs/mail.mydomain.com.pem ssl_key = </etc/pki/tls/private/mail.mydomain.com.key userdb { args = /usr/local/etc/dovecot/dovecot-ldap-userdb.conf.ext driver = ldap override_fields = uid=vmail gid=vmail home=/var/vmail/%Ln/home } verbose_proctitle = yes protocol lda { mail_plugins = fts fts_lucene quota stats sieve virtual } protocol imap { mail_plugins = fts fts_lucene quota stats imap_quota virtual imap_stats }

1 0