- dovecot - dovecot.org

[Dovecot] Dovecot 2 and managesieve
by Darek 25 Jun '13

25 Jun '13

Having some difficulty finding out whether managesieve is still a separate package (not seeing it in the FreeBSD ports tree, only one for 1.x) or whether it was integrated into the main 2.x package. I've only been using 1.2.x up to now, and trying to document a system install. So is it in the main distribution now? -- Darek

2 1

[Dovecot] NTLM Authentication with Dovecot and Postfix
by Matthew Larsen 25 Jun '13

25 Jun '13

I'm trying to get NTLM authentication working with Dovecot to authenticate Postfix SMTP clients. I can authenticate postfix smtp clients using the plain text login mechanism via Dovecot and winbind. However, using the NTLM mechanism gives me an error in my maillog that says: "dovecot: auth: winbind(?,10.20.2.0): user not authenticated: NT_STATUS_UNSUCCESSFUL". At this point, I'm rather stuck. It appears PAM and winbind work for authenticating with AD because it works with the plain text mechanism, but I'm missing something with the NTLM authentication method. Any suggestions as to what I've got wrong, or other logging I can turn up / examine that might shed some light on this? /// Logging and configuration information below /// -- When I use the LOGIN mechanism I see this in the mail logging and the message is relayed: Jun 21 13:12:58 SBSMTPNV05 postfix/smtpd[1501]: connect from nvit01b.mydomain.com[10.20.2.0] Jun 21 13:12:58 SBSMTPNV05 dovecot: auth: Debug: auth client connected (pid=1501) Jun 21 13:12:58 SBSMTPNV05 dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=smtp#011nologin#011lip=10.20.4.12#011rip=10.20.2.0#011resp=AG[...snip...]g== Jun 21 13:12:58 SBSMTPNV05 dovecot: auth: Debug: pam(myusername,10.20.2.0): lookup service=dovecot Jun 21 13:12:58 SBSMTPNV05 dovecot: auth: Debug: pam(myusername,10.20.2.0): #1/1 style=1 msg=Password: Jun 21 13:12:58 SBSMTPNV05 dovecot: auth: Debug: client out: OK#0111#011user=myusername Jun 21 13:12:58 SBSMTPNV05 postfix/smtpd[1501]: 54EAF8059B: client=nvit01b.mydomain.com[10.20.2.0], sasl_method=PLAIN, sasl_username=myusername Jun 21 13:12:58 SBSMTPNV05 postfix/cleanup[1504]: 54EAF8059B: message-id=<51C4B3C8.30008(a)domain1.com> Jun 21 13:12:58 SBSMTPNV05 postfix/qmgr[1499]: 54EAF8059B: from=<someone(a)domain1.com>, size=2700, nrcpt=1 (queue active) Jun 21 13:12:58 SBSMTPNV05 postfix/smtpd[1501]: disconnect from nvit01b.mydomain.com[10.20.2.0] Jun 21 13:12:59 SBSMTPNV05 postfix/smtp[1505]: 54EAF8059B: to=<someone(a)gmail.com>, relay=gmail-smtp-in.l.google.com[74.125.25.27]:25, delay=1.2, delays=0.23/0.04/0.16/0.72, dsn=2.0.0, status=sent (250 2.0.0 OK 1371845579 wf5si3786287pab.138 - gsmtp) Jun 21 13:12:59 SBSMTPNV05 postfix/qmgr[1499]: 54EAF8059B: removed -- I also see this in the secure log: Jun 21 13:12:58 SBSMTPNV05 auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=myusername rhost=10.20.2.0 user=myusername Jun 21 13:12:58 SBSMTPNV05 auth: pam_winbind(dovecot:auth): getting password (0x00000010) Jun 21 13:12:58 SBSMTPNV05 auth: pam_winbind(dovecot:auth): pam_get_item returned a password Jun 21 13:12:58 SBSMTPNV05 auth: pam_winbind(dovecot:auth): user 'myusername' granted access Jun 21 13:12:58 SBSMTPNV05 auth: pam_winbind(dovecot:account): user 'myusername' granted access -- However, when I switch the mechanism to NTLM in the Thurnderbird MUA I see this: Jun 21 13:15:46 SBSMTPNV05 postfix/smtpd[1506]: connect from nvit01b.mydomain.com[10.20.2.0] Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: Debug: auth client connected (pid=1506) Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: Debug: client in: AUTH#0111#011NTLM#011service=smtp#011nologin#011lip=10.20.4.12#011rip=10.20.2.0#011resp=TlRMT[...snip...]A= Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: Debug: client out: CONT#0111#011TlRMT[[...snip...]A Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: Debug: client in: CONT#0111#011TlRMT[...snip...]A= Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: winbind(?,10.20.2.0): user not authenticated: NT_STATUS_UNSUCCESSFUL Jun 21 13:15:48 SBSMTPNV05 postfix/smtpd[1506]: warning: nvit01b.mydomain.com[10.20.2.0]: SASL NTLM authentication failed: TlRMT[...snip...]A Jun 21 13:15:48 SBSMTPNV05 dovecot: auth: Debug: client out: FAIL#0111 Jun 21 13:15:49 SBSMTPNV05 postfix/smtpd[1506]: disconnect from nvit01b.mydomain.com[10.20.2.0] -- with nothing in the secure log and I don't see anything show up in the winbind logs either. -- I've reviewed these pages as reference, and I'm not sure what I'm missing: http://wiki2.dovecot.org/HowTo/ActiveDirectoryNtlm http://wiki2.dovecot.org/Authentication/Mechanisms/NTLM http://www.dovecot.org/list/dovecot/2008-December/035630.html http://www.dovecot.org/list/dovecot/2010-February/046763.html http://blog.al-shami.net/2008/05/freebsd-postfix-dovecot-and-active-directo… http://wiki2.dovecot.org/HowTo/PostfixAndDovecotSASL -- Here's some of my relevant configuration as I understand it: -- I've joined the computer to the AD domain. The wbinfo tests work fine: # wbinfo -t checking the trust secret for domain MYDOMAIN via RPC calls succeeded # doveconf -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-358.11.1.el6.x86_64 x86_64 CentOS release 6.4 (Final) auth_debug_passwords = yes auth_mechanisms = plain ntlm login auth_use_winbind = yes auth_username_format = %Lu listen = * mbox_write_locks = fcntl passdb { driver = pam } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } //////////////////// # postconf -n alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases command_directory = /usr/sbin config_directory = /etc/postfix daemon_directory = /usr/libexec/postfix data_directory = /var/lib/postfix debug_peer_level = 7 html_directory = no inet_interfaces = all inet_protocols = ipv4 line_length_limit = 6144 mail_owner = postfix mailq_path = /usr/bin/mailq.postfix manpage_directory = /usr/share/man mydestination = $myhostname, localhost.$mydomain, localhost myhostname = srvsbsmtp05.mydomain.com newaliases_path = /usr/bin/newaliases.postfix queue_directory = /var/spool/postfix readme_directory = /usr/share/doc/postfix-2.6.6/README_FILES sample_directory = /usr/share/doc/postfix-2.6.6/samples sendmail_path = /usr/sbin/sendmail.postfix setgid_group = postdrop smtpd_recipient_restrictions = permit_sasl_authenticated,reject_unauth_destination smtpd_sasl_auth_enable = yes smtpd_sasl_path = private/auth smtpd_sasl_type = dovecot unknown_local_recipient_reject_code = 550 ///////////////////// # cat /etc/krb5.conf [logging] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin_server = FILE:/var/log/kadmind.log [libdefaults] default_realm = MYDOMAIN.COM dns_lookup_realm = true dns_lookup_kdc = true ticket_lifetime = 24h renew_lifetime = 7d forwardable = true [domain_realm] .mydomain.com = MYDOMAIN.COM mydomain.com = MYDOMAIN.COM //////////////////// system keytab: # klist -ke Keytab name: FILE:/etc/krb5.keytab KVNO Principal ---- -------------------------------------------------------------------------- 3 host/sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM (des-cbc-crc) 3 host/sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM (des-cbc-md5) 3 host/sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM (arcfour-hmac) 3 host/sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM (aes128-cts-hmac-sha1-96) 3 host/sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM (aes256-cts-hmac-sha1-96) 3 host/sbsmtpnv05(a)MYDOMAIN.COM (des-cbc-crc) 3 host/sbsmtpnv05(a)MYDOMAIN.COM (des-cbc-md5) 3 host/sbsmtpnv05(a)MYDOMAIN.COM (arcfour-hmac) 3 host/sbsmtpnv05(a)MYDOMAIN.COM (aes128-cts-hmac-sha1-96) 3 host/sbsmtpnv05(a)MYDOMAIN.COM (aes256-cts-hmac-sha1-96) 3 SBSMTPNV05$(a)MYDOMAIN.COM (des-cbc-crc) 3 SBSMTPNV05$(a)MYDOMAIN.COM (des-cbc-md5) 3 SBSMTPNV05$(a)MYDOMAIN.COM (arcfour-hmac) 3 SBSMTPNV05$(a)MYDOMAIN.COM (aes128-cts-hmac-sha1-96) 3 SBSMTPNV05$(a)MYDOMAIN.COM (aes256-cts-hmac-sha1-96) 5 smtp/sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM (des-cbc-crc) 5 smtp/sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM (des-cbc-md5) 5 smtp/sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM (arcfour-hmac) 5 smtp/sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM (aes128-cts-hmac-sha1-96) 5 smtp/sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM (aes256-cts-hmac-sha1-96) //////////////////// Samba config: [global] workgroup = MYDOMAIN realm = MYDOMAIN.COM server string = Samba Server Version %v security = ADS kerberos method = system keytab log file = /var/log/samba/log.%m max log size = 50 printcap name = /dev/null domain master = No template shell = /bin/bash winbind separator = + winbind use default domain = Yes idmap config * : range = 10000-50000 idmap config * : backend = tdb printing = bsd cups options = raw print command = lpr -r -P'%p' %s lpq command = lpq -P'%p' lprm command = lprm -P'%p' %j

1 0

[Dovecot] v2.2.4 released
by Timo Sirainen 25 Jun '13

25 Jun '13

http://dovecot.org/releases/2.2/dovecot-2.2.4.tar.gz http://dovecot.org/releases/2.2/dovecot-2.2.4.tar.gz.sig OK, this should be a pretty good and stable version. + doveadm: Added "flags" command to modify message flags. + doveadm: Added "deduplicate" command to expunge message duplicates. + dsync: Show the state in process title with verbose_proctitle=yes. - imap/pop3 proxy: Master user logins were broken in v2.2.3 - sdbox/mdbox: A corrupted index header with wrong size was never automatically fixed in v2.2.3. - mbox: Fixed assert-crashes related to locking.

4 6

[Dovecot] Configuring TLS 1.2
by Phillip Odam 25 Jun '13

25 Jun '13

Hi I'm running dovecot 2.1.6 and am trying to configure it to require TLS 1.2. So far I've only got as far as getting TLS 1.0 going. In the config file <dovecot root>/etc/dovecot/conf.d/10-ssl.conf, I've tried setting ssl_protocols to values like TLSv1.2:!TLSv1:!SSL3 but without any success. Attempts to google this matter turns up results for dovecot v1.2 as opposed to configuring TLS 1.2 in dovecot And having a look over the mailing list archive hasn't turned anything up thus far. Any pointers would be greatly appreciated. Thanks Phillip

2 2

[Dovecot] Sieve file permission problem
by Zoltan Lippai 25 Jun '13

25 Jun '13

Hi folks, I am using dovecot 2.1.7 with the ManageSieve plugin which works great. Recently I set up Afterlogic webmail on my server (the community version) and it has a nice UI to manage the sieve settings. It uses port 2000 to communicate with dovecot via the ManageSieve plugin. Also, dovecot uses Maildirs to store the messages. The problem is that the permissions on the files that store the sieve rules are to strict. I am talking about the "sieve" directory and the .dovecot.sieve file. The sieve folder has a chmod 700 and the .dovecot.sieve is chmod 600. Both are owned by vmail:mail If I delete these two items, then the rules can be saved via the web interface. Then these files are created but for some reason the ManageSieve plugin can't modify them. Here is the output of dovecot -n: http://pastebin.com/4eqyBKCA Can you help me out on this? Thanks a lot! Zoltan

5 7

[Dovecot] dsync assert failure in 2.2.2
by Tomas Olsson 25 Jun '13

25 Jun '13

Hi, with 2.2.2 and today's hg, dsync crashes with dsync(root): Panic: file ../../../../../src/lib-storage/index/mbox/mbox-lock.c: line 797 (mbox_lock): assertion failed: (lock_type == F_RDLCK || mbox->mbox_lock_type != F_RDLCK) when I run USER=root 2.2-hg/bin/dsync -c etc/dovecot.conf -f -o mail_location=mbox:/tmp/imap/fwadmin.tmp:INBOX=/tmp/imap/fwadmin.tmp/INBOX mirror mdbox:/tmp/imap/fwadmin It seems to happen for all mailboxes that are not empty. 2.2.1 completes the conversion without any complaints. config: # 2.2.2 (a3b5b762639a): etc/dovecot.conf # OS: Linux 3.2.0-32-generic i686 Ubuntu 12.04.2 LTS default_internal_user = nobody default_login_user = nobody Backtrace (hg version): #0 i_panic (format=0x252530 "file %s: line %d (%s): assertion failed: (%s)") at ../../../src/lib/failures.c:255 #1 0x001c643f in mbox_lock (mbox=0x80d9b40, lock_type=<optimized out>, lock_id_r=0x811352c) at ../../../../../src/lib-storage/index/mbox/mbox-lock.c:797 #2 0x001c695c in mbox_mail_seek (mail=0x81188e0) at ../../../../../src/lib-storage/index/mbox/mbox-mail.c:82 #3 0x001c6ee1 in mbox_mail_init_stream (mail=0x81188e0) at ../../../../../src/lib-storage/index/mbox/mbox-mail.c:335 #4 mbox_mail_get_stream (_mail=0x81188e0, get_body=false, hdr_size=0x0, body_size=0x0, stream_r=0xbffff77c) at ../../../../../src/lib-storage/index/mbox/mbox-mail.c:375 #5 0x001e65b0 in mail_get_hdr_stream (mail=0x81188e0, hdr_size=0x0, stream_r=0xbffff77c) at ../../../src/lib-storage/mail.c:226 #6 0x00215532 in index_mail_get_header_stream (_mail=0x81188e0, headers=0x8106fd0, stream_r=0xbffff7e0) at ../../../../src/lib-storage/index/index-mail-headers.c:837 #7 0x001e649d in mail_get_header_stream (mail=0x81188e0, headers=0x8106fd0, stream_r=0xbffff7e0) at ../../../src/lib-storage/mail.c:190 #8 0x08084bf2 in dsync_mail_get_hdr_hash (mail=0x81188e0, hdr_hash_r=0xbffff8ec) at ../../../../src/doveadm/dsync/dsync-mail.c:32 #9 0x080736a8 in importer_try_next_mail (wanted_uid=1, importer=0x81136e0) at ../../../../src/doveadm/dsync/dsync-mailbox-import.c:515 #10 importer_next_mail (importer=0x81136e0, wanted_uid=1) at ../../../../src/doveadm/dsync/dsync-mailbox-import.c:536 #11 0x0807729a in dsync_mailbox_import_changes_finish (importer=0x81136e0) at ../../../../src/doveadm/dsync/dsync-mailbox-import.c:1754 #12 0x08072e3b in dsync_brain_recv_mail_change (brain=0x80beaf8) at ../../../../src/doveadm/dsync/dsync-brain-mails.c:102 #13 dsync_brain_sync_mails (brain=0x80beaf8) at ../../../../src/doveadm/dsync/dsync-brain-mails.c:319 #14 0x0806f11b in dsync_brain_run_real (changed_r=0xbffffae6, brain=0x80beaf8) at ../../../../src/doveadm/dsync/dsync-brain.c:440 #15 dsync_brain_run (brain=0x80beaf8, changed_r=0xbffffae6) at ../../../../src/doveadm/dsync/dsync-brain.c:469 #16 0x0806d1ef in cmd_dsync_run_local (ibc2=0x80be8d8, brain=0x80beaf8, user=0x80ba8f0, ctx=0x80b2ca8) at ../../../../src/doveadm/dsync/doveadm-dsync.c:356 #17 cmd_dsync_run (_ctx=0x80b2ca8, user=0x80ba8f0) at ../../../../src/doveadm/dsync/doveadm-dsync.c:543 #18 0x08055424 in doveadm_mail_next_user (error_r=0xbffffbcc, ctx=0x80b2ca8, input=<optimized out>) at ../../../src/doveadm/doveadm-mail.c:308 #19 doveadm_mail_next_user (ctx=0x80b2ca8, input=<optimized out>, error_r=0xbffffbcc) at ../../../src/doveadm/doveadm-mail.c:267 #20 0x080560fc in doveadm_mail_cmd (argv=0x80af1ec, argc=<optimized out>, cmd=0x80b226c) at ../../../src/doveadm/doveadm-mail.c:517 #21 doveadm_mail_try_run (cmd_name=0x80af286 "sync", argc=3, argv=0x80af1e4) at ../../../src/doveadm/doveadm-mail.c:609 #22 0x08055046 in main (argc=3, argv=0x80af1e4) at ../../../src/doveadm/doveadm.c:398 I'm attaching the mbox file. /t

1 1

[Dovecot] Quota based on LDAP group
by Pavel Herrmann 25 Jun '13

25 Jun '13

Hi I have a setup where my dovecot (2.0, if that makes a difference) authenticates against an LDAP directory. In my scenario, I have two types of users, lets call them "normal" and "privileged". What I need is for the normal user to have a fixed quota, but for the priviledged to have none. (The users do not exist on the underlying system, so I cant do quota based on FS) The issue is that my LDAP is actually an AD, and there is a fair amount of new accounts over the time (in other words, I cannot use LDAP attribute for storing quota, because the AD tools don't understand it, and I would have to add it manually for each new account). The approach I had in mind is using quota based on user group (I do have groups representing both normal and priviledged users), but I cannot find a way to set it up in dovecot. Am I missing something or does dovecot not support LDAP groups as attribute source? thanks Pavel Herrmann

2 4

[Dovecot] chown
by Yann Shukor 25 Jun '13

25 Jun '13

Hi I currently have to execute the following command everytime I restart Dovecot : chown dovenull:vmail /var/run/dovecot/login What should I change in my config files to avoidhaving to do this ? thanks yann ========= Dovecot -n: ========= # 2.2.2 (45399357008a): /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-686-pae i686 Debian 7.0 ext4 auth_debug = yes auth_mechanisms = plain login auth_socket_path = /var/run/dovecot/auth-userdb auth_verbose = yes disable_plaintext_auth = no first_valid_gid = 5000 first_valid_uid = 5000 hostname = holimail.holinice.com last_valid_gid = 5000 last_valid_uid = 5000 listen = * mail_debug = yes mail_gid = vmail mail_location = maildir:/var/vmail/%d/%n/Maildir mail_privileged_group = mail mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = maildir:/var/vmail/%d/%n/Maildir mailbox Brouillons { special_use = \Drafts } mailbox "Courrier indesirable" { special_use = \Junk } mailbox "Elements envoyes" { special_use = \Sent } mailbox "Elements supprimes" { special_use = \Trash } prefix = subscriptions = yes } passdb { args = scheme=CRAM-MD5 /etc/dovecot/users.conf driver = passwd-file } passdb { driver = pam } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = azurtem(a)holinice.com protocols = " imap sieve pop3" service auth-worker { user = $default_internal_user } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } } service imap-login { group = dovecot inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service imap { process_limit = 1024 } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service pop3 { process_limit = 1024 } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = uid=5000 gid=5000 home=/var/vmail/%d/%n allow_all_users=yes driver = static } userdb { driver = passwd } protocol lda { mail_plugins = " sieve" }

2 1

[Dovecot] auth probes without IP - "Initial status notification not received ..."
by LEVAI Daniel 25 Jun '13

25 Jun '13

Hi! I've been getting a bunch of these messages lately in my logs: dovecot: master: Error: service(auth): Initial status notification not received in 30 seconds, killing the process dovecot: auth: Fatal: master: service(auth): child 11016 killed with signal 9 dovecot: master: Error: service(auth): Initial status notification not received in 30 seconds, killing the process dovecot: auth: Fatal: master: service(auth): child 27660 killed with signal 9 # fgrep -c -e "master: Error: service(auth): Initial status" dovecot.log* [...] dovecot.log.1:501 dovecot.log.2:250 [...] But I can not link these auth probes to any IP addresses within the dovecot log files. This is dovecot-2.2.2 on OpenBSD-stable. What do you guys suggest? Thanks, Daniel -- LÉVAI Dániel PGP key ID = 0x83B63A8F Key fingerprint = DBEC C66B A47A DFA2 792D 650C C69B BE4C 83B6 3A8F

2 2

[Dovecot] Warning recipient when message delivery fails due to over-quota
by Ben Johnson 24 Jun '13

24 Jun '13

I'm working to configure automated quota notifications in Dovecot and am wondering if it is possible to send a warning message to a user when message delivery fails because the user is over-quota. I already have the following directives configured: quota_warning = storage=95%% quota-warning 95 %u %d quota_warning2 = storage=80%% quota-warning 80 %u %d quota_warning3 = -storage=100%% quota-below below %u %d These seem to function as expected, but the problem I'm facing is that when a message is large enough to take the user's quota from, say, 84% to over 100%, the message is rejected (as expected), but the user is never warned that a message failed to be delivered because it would have put him over 100% usage. I suppose that I'm looking for a trigger that is tripped when delivering the message *would* put the user over-quota (as opposed to *does in fact* put the user over). The sender receives an automated rejection message already. I'm wondering if the recipient can be warned at the same time. (I'm not concerned about further increasing the user's quota consumption with the warning message; I would set noenforcing to 1.) Is this possible? Any help is much appreciated. Thanks in advance. -Ben

3 4

[Dovecot] mail_max_userip_connections on a per user basis
by Antonio Leding 24 Jun '13

24 Jun '13

Hello, Can the above setting be applied on a per user account basis? I thought that maybe something like per account quotas might be a possible method but not sure. Thanks.

2 1

[Dovecot] doveadm move command
by vincent truc 24 Jun '13

24 Jun '13

Hello I want to transfer an email from user1(a)domain.com to put it in a folder of another user: user2(a)domain.com For that, it seems to me appropriate to use 'doveadm move' command, but I can not get the right result. Can you help me? syntax: doveadm move [-u <user>|-A] [-S <socket_path>] <destination> [user <source user>] <search query> my attempts: doveadm move -u user2(a)domain.com DIRECTORY_2 mailbox user1(a)domain.com:'DIRECTORY_1' all return: Error: Syncing mailbox user1@domaine.fr:DOSSIER_1 failed: Mailbox doesn't exist: user1@domaine.fr:DOSSIER_1 doveadm -u user2(a)domain.com DIRECTORY_2 mailbox sdbox:/complete/path/user1@domain.com/mailboxes/DIRECTORY_1 all return: Error: Syncing mailbox sdbox:/complete/path/user1@domain.com/mailboxes/DIRECTORY_1 failed: Mailbox doesn't exist: sdbox:/complete/path/user1@domain.com/mailboxes/DIRECTORY_1 doveadm move -u user2(a)domain.com DIRECTORY_2 mailbox user1(a)domain.com 'DIRECTORY_2' all return: Fatal: Unknown argument DIRECTORY_2

2 1

[Dovecot] Dsync only one mailbox
by Piotr Janusz 24 Jun '13

24 Jun '13

Hi, I am looking for a way to sync only selected files/mailbox'es using dsync. Am I using the dsync -m option incorectly? It looks like it's being ignored. And as for the main INBOX (/var/mail/username) what should be the parameter for -m? dovecot --version 2.1.7 dsync -u pj -D -v -m Alerts -o mail_location=mdbox:/home/pj/mdbox backup mbox:/home/pj/:INBOX=/var/mail/pj doveadm(root): Debug: Loading modules from directory: /usr/lib/dovecot/modules doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/lib10_quota_plugin.so doveadm(root): Debug: Loading modules from directory: /usr/lib/dovecot/modules/doveadm doveadm(root): Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_acl_plugin.so: undefined symbol: acl_user_module (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_expire_plugin.so: undefined symbol: expire_set_lookup (this is usually intentional, so just ignore this message) doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_quota_plugin.so doveadm(root): Debug: Skipping module doveadm_zlib_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_zlib_plugin.so: undefined symbol: i_stream_create_deflate (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_fts_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib20_doveadm_fts_plugin.so: undefined symbol: fts_list_backend (this is usually intentional, so just ignore this message) doveadm(pj): Debug: Effective uid=3195, gid=3195, home=/home/pj doveadm(pj): Debug: Quota root: name=INBOX backend=fs args=mount=/var/:user doveadm(pj): Debug: Quota root: name=Katalog_domowy backend=fs args=mount=/home/:user doveadm(pj): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=mdbox:/home/pj/mdbox doveadm(pj): Debug: fs: root=/home/pj/mdbox, index=, control=, inbox=, alt= doveadm(pj): Debug: fs quota add mailbox dir = /var/ doveadm(pj): Debug: fs quota block device = /dev/cciss/c0d0p4 doveadm(pj): Debug: fs quota mount point = /var doveadm(pj): Debug: fs quota mount type = ext4 doveadm(pj): Debug: fs quota add mailbox dir = /home/ doveadm(pj): Debug: fs quota block device = /dev/cciss/c0d1p1 doveadm(pj): Debug: fs quota mount point = /home doveadm(pj): Debug: fs quota mount type = ext4 doveadm(pj): Debug: Namespace : Using permissions from /home/pj/mdbox: mode=0700 gid=-1 dsync(pj): Debug: Effective uid=3195, gid=3195, home=/home/pj dsync(pj): Debug: Quota root: name=INBOX backend=fs args=mount=/var/:user dsync(pj): Debug: Quota root: name=Katalog_domowy backend=fs args=mount=/home/:user dsync(pj): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=mbox:/home/pj/:INBOX=/var/mail/pj dsync(pj): Debug: fs: root=/home/pj, index=, control=, inbox=/var/mail/pj, alt= dsync(pj): Debug: fs quota add mailbox dir = /var/ dsync(pj): Debug: fs quota block device = /dev/cciss/c0d0p4 dsync(pj): Debug: fs quota mount point = /var dsync(pj): Debug: fs quota mount type = ext4 dsync(pj): Debug: fs quota add mailbox dir = /home/ dsync(pj): Debug: fs quota block device = /dev/cciss/c0d1p1 dsync(pj): Debug: fs quota mount point = /home dsync(pj): Debug: fs quota mount type = ext4 dsync(pj): Debug: Namespace : Using permissions from /home/pj: mode=0700 gid=-1 dsync(pj): Error: Failed to sync mailbox www/IMG_20121119_184255.jpg: Mailbox isn't a valid mbox file dsync(pj): Error: Failed to sync mailbox www/rtranalizer.exe: Mailbox isn't a valid mbox file dsync(pj): Error: Failed to sync mailbox www/raport_nsm.rar: Mailbox isn't a valid mbox file .... -- Piotr Janusz

2 1

[Dovecot] dovecot-lda - dovecot: quota-warning: Error: lda: Fatal: Unknown argument
by Ben Johnson 24 Jun '13

24 Jun '13

Hi, everyone, I'm attempting to configure automated quota warnings for users and have hit a snag. The script I'm using is as follows: --------------------------------------------------------------------- #!/bin/sh PERCENT=$1 MAILBOX=$2 DOMAIN=$3 cat << EOF | /usr/lib/dovecot/dovecot-lda -d $USER -o "plugin/quota=dict:user::file:/var/vmail/%d/%n/.quotausage" From: postmaster@$DOMAIN Subject: Email quota warning - mailbox over $PERCENT% full [...] --------------------------------------------------------------------- When the script is triggered, here's what appears in the log: --------------------------------------------------------------------- Jun 24 11:16:53 host dovecot: quota-warning: Error: lda: Fatal: Unknown argument: plugin/quota=dict:user::noenforcing:file:/var/vmail/%d/%n/.quotausage Jun 24 11:16:53 host dovecot: master: Error: service(quota-warning): child 22415 returned error 64 --------------------------------------------------------------------- If I paste the same on the command line, the message is delivered, as expected: /usr/lib/dovecot/dovecot-lda -d user(a)example.com -o "plugin/quota=dict:user::noenforcing:file:/var/vmail/%d/%n/.quotausage" -p /tmp/test.txt The problem seems to be that the -o switch isn't being interpreted correctly when dovecot-lda is called from within the script. -o is the correct switch, yes? From the manual at http://wiki2.dovecot.org/LDA : -o name=value: Override a setting from dovecot.conf. You can give this parameter multiple times. What am I missing here? Is some shell script escaping or similar required? Thanks for any tips! -Ben

1 1

[Dovecot] NTLM Authentication for Postfix SMTP clients
by Matthew Larsen 24 Jun '13

24 Jun '13

I'm trying to get NTLM authentication working with Dovecot to authenticate Postfix SMTP clients. I can authenticate postfix smtp clients using the plain text login mechanism through winbind. However, using the NTLM mechanism gives me an error in my maillog that says: "dovecot: auth: winbind(?,10.20.2.0): user not authenticated: NT_STATUS_UNSUCCESSFUL". At this point, I'm rather stuck. It appears PAM and winbind work for authenticating with AD because it works with the plain text mechanism, but I'm missing something with the NTLM authentication method. Any suggestions as to what I've got wrong, or other logging I can turn up / examine that might shed some light on this? When I use the LOGIN mechanism I see this in the mail logging and the message is relayed: Jun 21 13:12:58 SBSMTPNV05 postfix/smtpd[1501]: connect from nvit01b.mydomain.com[10.20.2.0] Jun 21 13:12:58 SBSMTPNV05 dovecot: auth: Debug: auth client connected (pid=1501) Jun 21 13:12:58 SBSMTPNV05 dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=smtp#011nologin#011lip=10.20.4.12#011rip=10.20.2.0#011resp=AG[...snip...]g== Jun 21 13:12:58 SBSMTPNV05 dovecot: auth: Debug: pam(myusername,10.20.2.0): lookup service=dovecot Jun 21 13:12:58 SBSMTPNV05 dovecot: auth: Debug: pam(myusername,10.20.2.0): #1/1 style=1 msg=Password: Jun 21 13:12:58 SBSMTPNV05 dovecot: auth: Debug: client out: OK#0111#011user=myusername Jun 21 13:12:58 SBSMTPNV05 postfix/smtpd[1501]: 54EAF8059B: client=nvit01b.mydomain.com[10.20.2.0], sasl_method=PLAIN, sasl_username=myusername Jun 21 13:12:58 SBSMTPNV05 postfix/cleanup[1504]: 54EAF8059B: message-id=<51C4B3C8.30008(a)domain1.com> Jun 21 13:12:58 SBSMTPNV05 postfix/qmgr[1499]: 54EAF8059B: from=<someone(a)domain1.com>, size=2700, nrcpt=1 (queue active) Jun 21 13:12:58 SBSMTPNV05 postfix/smtpd[1501]: disconnect from nvit01b.mydomain.com[10.20.2.0] Jun 21 13:12:59 SBSMTPNV05 postfix/smtp[1505]: 54EAF8059B: to=<someone(a)gmail.com>, relay=gmail-smtp-in.l.google.com[74.125.25.27]:25, delay=1.2, delays=0.23/0.04/0.16/0.72, dsn=2.0.0, status=sent (250 2.0.0 OK 1371845579 wf5si3786287pab.138 - gsmtp) Jun 21 13:12:59 SBSMTPNV05 postfix/qmgr[1499]: 54EAF8059B: removed I also see this in the secure log: Jun 21 13:12:58 SBSMTPNV05 auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=myusername rhost=10.20.2.0 user=myusername Jun 21 13:12:58 SBSMTPNV05 auth: pam_winbind(dovecot:auth): getting password (0x00000010) Jun 21 13:12:58 SBSMTPNV05 auth: pam_winbind(dovecot:auth): pam_get_item returned a password Jun 21 13:12:58 SBSMTPNV05 auth: pam_winbind(dovecot:auth): user 'myusername' granted access Jun 21 13:12:58 SBSMTPNV05 auth: pam_winbind(dovecot:account): user 'myusername' granted access However, when I switch the mechanism to NTLM in the Thurnderbird MUA I see this: Jun 21 13:15:46 SBSMTPNV05 postfix/smtpd[1506]: connect from nvit01b.mydomain.com[10.20.2.0] Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: Debug: auth client connected (pid=1506) Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: Debug: client in: AUTH#0111#011NTLM#011service=smtp#011nologin#011lip=10.20.4.12#011rip=10.20.2.0#011resp=TlRMT[...snip...]A= Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: Debug: client out: CONT#0111#011TlRMT[[...snip...]A Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: Debug: client in: CONT#0111#011TlRMT[...snip...]A= Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: winbind(?,10.20.2.0): user not authenticated: NT_STATUS_UNSUCCESSFUL Jun 21 13:15:48 SBSMTPNV05 postfix/smtpd[1506]: warning: nvit01b.mydomain.com[10.20.2.0]: SASL NTLM authentication failed: TlRMT[...snip...]A Jun 21 13:15:48 SBSMTPNV05 dovecot: auth: Debug: client out: FAIL#0111 Jun 21 13:15:49 SBSMTPNV05 postfix/smtpd[1506]: disconnect from nvit01b.mydomain.com[10.20.2.0] with nothing in the secure log and I don't see anything show up in the winbind logs either. I've reviewed these pages as reference, and I'm not sure what I'm missing: http://wiki2.dovecot.org/HowTo/ActiveDirectoryNtlm http://wiki2.dovecot.org/Authentication/Mechanisms/NTLM http://www.dovecot.org/list/dovecot/2008-December/035630.html http://www.dovecot.org/list/dovecot/2010-February/046763.html http://blog.al-shami.net/2008/05/freebsd-postfix-dovecot-and-active-directo… http://wiki2.dovecot.org/HowTo/PostfixAndDovecotSASL Here's some of my relevant configuration as I understand it: I've joined the computer to the AD domain. The wbinfo tests work fine: # wbinfo -t checking the trust secret for domain MYDOMAIN via RPC calls succeeded # doveconf -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-358.11.1.el6.x86_64 x86_64 CentOS release 6.4 (Final) auth_debug_passwords = yes auth_mechanisms = plain ntlm login auth_use_winbind = yes auth_username_format = %Lu listen = * mbox_write_locks = fcntl passdb { driver = pam } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } //////////////////// # postconf -n alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases command_directory = /usr/sbin config_directory = /etc/postfix daemon_directory = /usr/libexec/postfix data_directory = /var/lib/postfix debug_peer_level = 7 html_directory = no inet_interfaces = all inet_protocols = ipv4 line_length_limit = 6144 mail_owner = postfix mailq_path = /usr/bin/mailq.postfix manpage_directory = /usr/share/man mydestination = $myhostname, localhost.$mydomain, localhost myhostname = srvsbsmtp05.mydomain.com newaliases_path = /usr/bin/newaliases.postfix queue_directory = /var/spool/postfix readme_directory = /usr/share/doc/postfix-2.6.6/README_FILES sample_directory = /usr/share/doc/postfix-2.6.6/samples sendmail_path = /usr/sbin/sendmail.postfix setgid_group = postdrop smtpd_recipient_restrictions = permit_sasl_authenticated,reject_unauth_destination smtpd_sasl_auth_enable = yes smtpd_sasl_path = private/auth smtpd_sasl_type = dovecot unknown_local_recipient_reject_code = 550 ///////////////////// # cat /etc/krb5.conf [logging] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin_server = FILE:/var/log/kadmind.log [libdefaults] default_realm = MYDOMAIN.COM dns_lookup_realm = true dns_lookup_kdc = true ticket_lifetime = 24h renew_lifetime = 7d forwardable = true [domain_realm] .mydomain.com = MYDOMAIN.COM mydomain.com = MYDOMAIN.COM //////////////////// system keytab: # klist -ke Keytab name: FILE:/etc/krb5.keytab KVNO Principal ---- -------------------------------------------------------------------------- 3 host/sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM (des-cbc-crc) 3 host/sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM (des-cbc-md5) 3 host/sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM (arcfour-hmac) 3 host/sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM (aes128-cts-hmac-sha1-96) 3 host/sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM (aes256-cts-hmac-sha1-96) 3 host/sbsmtpnv05(a)MYDOMAIN.COM (des-cbc-crc) 3 host/sbsmtpnv05(a)MYDOMAIN.COM (des-cbc-md5) 3 host/sbsmtpnv05(a)MYDOMAIN.COM (arcfour-hmac) 3 host/sbsmtpnv05(a)MYDOMAIN.COM (aes128-cts-hmac-sha1-96) 3 host/sbsmtpnv05(a)MYDOMAIN.COM (aes256-cts-hmac-sha1-96) 3 SBSMTPNV05$(a)MYDOMAIN.COM (des-cbc-crc) 3 SBSMTPNV05$(a)MYDOMAIN.COM (des-cbc-md5) 3 SBSMTPNV05$(a)MYDOMAIN.COM (arcfour-hmac) 3 SBSMTPNV05$(a)MYDOMAIN.COM (aes128-cts-hmac-sha1-96) 3 SBSMTPNV05$(a)MYDOMAIN.COM (aes256-cts-hmac-sha1-96) 5 smtp/sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM (des-cbc-crc) 5 smtp/sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM (des-cbc-md5) 5 smtp/sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM (arcfour-hmac) 5 smtp/sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM (aes128-cts-hmac-sha1-96) 5 smtp/sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM (aes256-cts-hmac-sha1-96) //////////////////// Samba config: [global] workgroup = MYDOMAIN realm = MYDOMAIN.COM server string = Samba Server Version %v security = ADS kerberos method = system keytab log file = /var/log/samba/log.%m max log size = 50 printcap name = /dev/null domain master = No template shell = /bin/bash winbind separator = + winbind use default domain = Yes idmap config * : range = 10000-50000 idmap config * : backend = tdb printing = bsd cups options = raw print command = lpr -r -P'%p' %s lpq command = lpq -P'%p' lprm command = lprm -P'%p' %j

1 0

[Dovecot] Calling dovecot-lda from within Antispam pipe script (bash) seems to have no effect
by Ben Johnson 24 Jun '13

24 Jun '13

Hello, I'm attempting to configure the Dovecot Antispam plug-in on Ubuntu 12.04 LTS with Dovecot 2.0.19. Everything seems to be in order with one considerable exception: when my pipe script (a simple Bash shell script) calls the dovecot-lda executable, absolutely nothing seems to result. If I copy/paste the exact same command into the terminal, the mail is delivered to the target mailbox, as expected. Here's my pipe script: http://pastebin.com/DBXAZqsN When I move a message from INBOX -> Junk, or from Junk -> INBOX, the pipe script is called, and here's the output: --------------------------------------------------------------- 31465-start (--debug --username=amavis --ham) Checking if the command-line input argument string (--debug --username=amavis --ham) contains the string "ham" or "spam" Mode is "HAM" Calling (as user vmail) '/usr/lib/dovecot/deliver -d "sa-training(a)example.com" -m "Training.HAM" -p "/tmp/sendmail-msg-31465.txt"' 31465-end --------------------------------------------------------------- But, for some reason, the call to "/usr/lib/dovecot/deliver" doesn't seem to do anything. If I copy the above output and paste it into the terminal: /usr/lib/dovecot/deliver -d "sa-training(a)example.com" -m "Training.HAM" -p "/tmp/sendmail-msg-31465.txt" Dovecot does indeed deliver the message. This works whether I execute the above command as "root" or "vmail". Why does this command have no effect when called from within the pipe script? Here is my "doveconf -n" output: # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-042stab076.8 x86_64 Ubuntu 12.04.2 LTS auth_mechanisms = plain login disable_plaintext_auth = no listen = *,[::] log_timestamp = "%Y-%m-%d %H:%M:%S " mail_privileged_group = vmail passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { antispam_backend = pipe antispam_debug_target = syslog antispam_pipe_program = /usr/bin/sa-learn-pipe.sh antispam_pipe_program_args = --debug;--username=amavis antispam_pipe_program_notspam_arg = --ham antispam_pipe_program_spam_arg = --spam antispam_pipe_tmpdir = /tmp antispam_spam_pattern_ignorecase = SPAM;JUNK antispam_trash_pattern_ignorecase = trash;Deleted * antispam_verbose_debug = 1 quota = dict:user::file:/var/vmail/%d/%n/.quotausage quota_rule2 = Trash:storage=+100M quota_rule3 = Junk:ignore quota_warning = storage=95%% quota-warning 95 %u %d quota_warning2 = storage=80%% quota-warning 80 %u %d quota_warning3 = -storage=100%% quota-below below %u %d sieve = /var/vmail/%d/%n/.sieve } protocols = imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } user = root } service quota-below { executable = script /usr/local/bin/quota-below.sh user = vmail } service quota-warning { executable = script /usr/local/bin/quota-warning.sh user = vmail } ssl_cert = </etc/postfix/smtpd.cert ssl_key = </etc/postfix/smtpd.key userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocol imap { mail_plugins = quota imap_quota antispam } protocol pop3 { mail_plugins = quota pop3_uidl_format = %08Xu%08Xv } protocol lda { info_log_path = /var/log/dovecot-lda.log log_path = /var/log/dovecot-lda-errors.log mail_plugins = sieve quota } Thank you, -Ben

5 12

[Dovecot] Config for master user in dovecot 1.1.20
by izul 24 Jun '13

24 Jun '13

Hi folks.. Im planning to migrate my mail server using imapsync.I need master user in my dovecot 1.1.20.Im so blind about this.Anybody can help me? Below is my 'dovecot -n' : ############### [root@mail etc]# dovecot -n # 1.1.20: /etc/dovecot.conf # OS: Linux 2.6.18-194.8.1.el5 i686 CentOS release 5.5 (Final) log_path: /var/log/dovecot.log protocols: pop3 pop3s imap imaps listen: * ssl_cert_file: /etc/pki/tls/certs/iRedMail_CA.pem ssl_key_file: /etc/pki/tls/private/iRedMail.key login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login mail_uid: 507 mail_gid: 507 mail_location: maildir:/%Lh/Maildir/:INDEX=/%Lh/Maildir/ mail_debug: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota zlib mail_plugins(imap): quota imap_quota zlib mail_plugins(pop3): quota zlib mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh lda: postmaster_address: root auth_socket_path: /var/run/dovecot/auth-master mail_plugins: cmusieve quota sieve_global_path: /var/vmail/sieve/dovecot.sieve log_path: /var/log/sieve.log auth default: mechanisms: plain login user: vmail master_user_separator: * verbose: yes debug: yes debug_passwords: yes passdb: driver: sql args: /etc/dovecot-mysql.conf passdb: driver: passwd-file args: /etc/dovecot-master-user-password pass: yes master: yes userdb: driver: sql args: /etc/dovecot-mysql.conf socket: type: listen client: path: /var/spool/postfix/dovecot-auth mode: 438 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 438 user: vmail group: vmail plugin: quota_warning: storage=85%% /usr/bin/dovecot-quota-warning.sh 85 quota_warning2: storage=90%% /usr/bin/dovecot-quota-warning.sh 90 quota_warning3: storage=95%% /usr/bin/dovecot-quota-warning.sh 95 quota: maildir quota_rule: *:storage=100M expire: Trash 7 Trash/* 7 Junk 30 expire_dict: proxy::expire auth_socket_path: /var/run/dovecot/auth-master dict: expire: db:/var/lib/dovecot/expire/expire.db [root@mail etc]# ############### And below is my dovecot.conf : (part of it) ############### auth_master_user_separator = * auth default { auth_master_user_separator= * mechanisms = plain login user = vmail passdb sql { args = /etc/dovecot-mysql.conf } userdb sql { args = /etc/dovecot-mysql.conf } socket listen { master { path = /var/run/dovecot/auth-master mode = 0666 user = vmail group = vmail } client { path = /var/spool/postfix/dovecot-auth mode = 0666 user = postfix group = postfix } } # Add below lines passdb passwd-file { args = /etc/dovecot-master-user-password master = yes pass = yes } } ############### -- View this message in context: http://dovecot.2317879.n4.nabble.com/Config-for-master-user-in-dovecot-1-1-… Sent from the Dovecot mailing list archive at Nabble.com.

9 13

[Dovecot] Dovecot + SELinux permission problems
by Johnny 24 Jun '13

24 Jun '13

Hi, I have set-up dovecot on a F17 box and am encountering weirdnesses with SELinux (who isn't??). Again, I am trying to refrain from disabling SWLinux all together, however tempting, but am stuck in troubleshooting and hope for some ideas... With SELinux set to permissive, I can connect to dovecot and log in to access my mail as expected. With SELinux enforcing, I can connect to dovecot, but cannot login to access mail. The log states ,---- log_path = /var/log/dovecot (set in 10-logging.conf) | Jun 23 15:43:58 imap-login: Info: Login: user=<johndoe>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=15189, secured, session=<xJl+U9PfvgB/AAAB> | Jun 23 15:43:58 imap(johndoe): Error: chdir(/home/user/data1/Maildir//) failed: Permission denied (euid=1000(user) egid=1000(user) missing +w perm: /home/user/data1/Maildir// stat(/home/user/data1/Maildir//) failed: Permission denied) | Jun 23 15:43:58 imap(johndoe): Error: chdir(/home/user/data1/Maildir/) failed: Permission denied | Jun 23 15:43:58 imap(johndoe): Error: user johndoe: Initialization failed: Namespace '': stat(/home/user/data1/Maildir//johndoe) failed: Permission denied (euid=1000(user) egid=1000(user) missing +w perm: /home/user/data1/Maildir//johndoe stat(/home/user/data1/Maildir//johndoe) failed: Permission denied) | Jun 23 15:43:58 imap(johndoe): Error: Invalid user settings. Refer to server log for more information. `---- Only thing I can grasp is *write permission* error. ls -l on the Maildirs shows this should not be the case for uid 1000. ,---- ls -l | drwxrwxr-x. 11 user user 4096 Jul 8 2012 Maildir | \> drwx------. 19 user user 4096 Feb 5 09:04 johndoe `---- I have no idea what the server log is referring to, in the debug log I get ,---- debug_log_path = /var/log/dovecot_debug (set in 10-logging.conf) | Jun 23 15:43:58 imap: Debug: Added userdb setting: mail=maildir:~/johndoe | Jun 23 15:43:58 imap(johndoe): Debug: Effective uid=1000, gid=1000, home=/home/user/data1/Maildir/ | Jun 23 15:43:58 imap(johndoe): Debug: Namespace inbox: type=private, prefix=, sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~/johndoe | Jun 23 15:43:58 imap(johndoe): Debug: maildir++: root=/home/user/data1/Maildir//johndoe, index=, control=, inbox=/home/user/data1/Maildir//johndoe, alt= `---- I had thought SELinux would log something, but /var/log/audit/audit.log is blank... Where to go from here?? Any ideas appreciated... -- Johnny

2 2

[Dovecot] Preoccupied at the moment
by Stephan Bosch 23 Jun '13

23 Jun '13

Hi, Something's come up and I am preoccupied at the moment until the 2nd of July. I won't be answering Dovecot mailing list until then (maybe a day or two earlier). Regards, Stephan.

1 0

[Dovecot] tables between dovecot and postfix and a paradoxical question
by Mohsen Pahlevanzadeh 23 Jun '13

23 Jun '13

Dear all, I read we create the following table in wiki2 : CREATE TABLE users ( userid VARCHAR(128) NOT NULL, domain VARCHAR(128) NOT NULL, password VARCHAR(64) NOT NULL, home VARCHAR(255) NOT NULL, uid INTEGER NOT NULL, gid INTEGER NOT NULL ); But i read the following text in the official postfix documentation : "DO create tables with each matching item as a key and with an arbitrary value. With SQL databases it is not uncommon to return the key itself or a constant value." ref: http://www.postfix.org/mysql_table.5.html How can i combine together? --mohsen

3 2

[Dovecot] use Alternative Storage as a cloud mail service
by ♥ NiNJA ♂ 22 Jun '13

22 Jun '13

Hi all I'm trying to create a mail service provider I like to know is it possible to have some servers as storage servers And automatically put email datas on the servers Something like having 3 servers , If server two get full , Automatically use server three If it's possible give me some solutions to use I like to use CentOS OS on my servers Thanks in advance

1 0

[Dovecot] Problem with virtual user mailbox initialization
by Denis Kasak 22 Jun '13

22 Jun '13

Hello, I'm trying to set up a postfix/dovecot server where postfix hands over incoming mail to dovecot using lmtp virtual transport via a Unix socket. Dovecot is then supposed to write the mail to /var/mail/<domain>/<user>/ using a virtual users setup. It seems to work except for failing when the mailbox is supposed to be initially created: Jun 22 03:25:04 lmtp(2400, dkasak(a)foo.org) Error: user dkasak(a)foo.org: Initialization failed: Namespace '': mkdir(/var/mail/foo.org/dkasak) failed: Permission denied (euid=5000(postman) egid=5000(postman) missing +w perm: /var/mail, we're not in group 6(mail), dir owned by 0:6 mode=0775) As can be seen from the error message, I've set mail_uid and mail_gid to account/group postman. /var/mail/ is empty and owned by root:mail so I've also set mail_privileged_group = mail. I was under the impression that mail_privileged_group is used precisely for these situations (when dotlocking or initial creation of the mailbox fail due to insufficient privileges), but it still doesn't work. If I either set mail_gid = mail, or set mail_access_groups = mail, or create foo.org/ owned by postman:postman by hand, it works as expected. Here is the complete configuration: # 2.2.2: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 9.1-RELEASE-p4 i386 ufs base_dir = /var/run/dovecot/ mail_gid = postman mail_location = maildir:/var/mail/%d/%n/:LAYOUT=fs mail_privileged_group = mail mail_uid = postman managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / type = private } passdb { args = scheme=CRYPT username_format=%u /etc/dovecot/users driver = passwd-file } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap lmtp service auth-worker { user = $default_internal_user } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } service imap-login { inet_listener imap { port = 143 } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } ssl = required ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = username_format=%u /etc/dovecot/users default_fields = quota_rule=*:storage=2G driver = passwd-file } protocol imap { mail_plugins = " notify mail_log" } Any ideas? -- Denis Kasak

1 0

Re: [Dovecot] Calling dovecot-lda from within Antispam pipe script (bash) seems to have no effect
by Joseph Tam 22 Jun '13

22 Jun '13

Ben Johnson <ben(a)indietorrent.org> writes: > I added debugging output to the script, which now prints the environment > variables. My script now outputs the following: > ... > CONFIG_FILE=/var/run/dovecot/config > ... > Does anything jump-out at you? You didn't provide the analogous output from the interactive shell to see the differences (for example, USER might be being used), but from your later strace, I guess CONFIG_FILE has something to do with it. These threads seems relevant http://www.dovecot.org/list/dovecot/2011-May/059127.html http://www.mail-archive.com/dovecot@dovecot.org/msg38349.html That thread poster solved his problem by commenting out service imap-postlogin { # user = $default_internal_user ... } but I have no idea if it works, or whether it's a good idea, for your case. More docs http://wiki2.dovecot.org/PostLoginScripting Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] Getting NTLM authentication for Postfix SMTP clients to work
by Matthew Larsen 22 Jun '13

22 Jun '13

I'm trying to get NTLM authentication working with Dovecot to authenticate Postfix SMTP clients. I can authenticate postfix smtp clients using the plain text login mechanism through winbind. However, using the NTLM mechanism gives me an error in my maillog that says: "dovecot: auth: winbind(?,10.20.2.0): user not authenticated: NT_STATUS_UNSUCCESSFUL". At this point, I'm rather stuck. It appears PAM and winbind work for authenticating with AD because it works with the plain text mechanism, but I'm missing something with the NTLM authentication method. Any suggestions as to what I've got wrong, or other logging I can turn up / examine that might shed some light on this? When I use the LOGIN mechanism I see this in the mail logging and the message is relayed: Jun 21 13:12:58 SBSMTPNV05 postfix/smtpd[1501]: connect from nvit01b.mydomain.com[10.20.2.**0] Jun 21 13:12:58 SBSMTPNV05 dovecot: auth: Debug: auth client connected (pid=1501) Jun 21 13:12:58 SBSMTPNV05 dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=**smtp#011nologin#011lip=10.20.**4 .12#011rip=10.20.2.0#011resp=**AG[...snip...]g== Jun 21 13:12:58 SBSMTPNV05 dovecot: auth: Debug: pam(myusername,10.20.2.0): lookup service=dovecot Jun 21 13:12:58 SBSMTPNV05 dovecot: auth: Debug: pam(myusername,10.20.2.0): #1/1 style=1 msg=Password: Jun 21 13:12:58 SBSMTPNV05 dovecot: auth: Debug: client out: OK#0111#011user=myusername Jun 21 13:12:58 SBSMTPNV05 postfix/smtpd[1501]: 54EAF8059B: client= nvit01b.mydomain.com[**10.20.2.0], sasl_method=PLAIN, sasl_username=myusername Jun 21 13:12:58 SBSMTPNV05 postfix/cleanup[1504]: 54EAF8059B: message-id=< 51C4B3C8.30008(a)**domain1.com <51C4B3C8.30008(a)domain1.com>> Jun 21 13:12:58 SBSMTPNV05 postfix/qmgr[1499]: 54EAF8059B: from=< someone(a)domain1.com>, size=2700, nrcpt=1 (queue active) Jun 21 13:12:58 SBSMTPNV05 postfix/smtpd[1501]: disconnect from nvit01b.mydomain.com[10.20.2.**0] Jun 21 13:12:59 SBSMTPNV05 postfix/smtp[1505]: 54EAF8059B: to=< someone(a)gmail.com>, relay=gmail-smtp-in.l.google.**com<http://gmail-smtp-in.l.google.com/>[74.125.25.27]:25, delay=1.2, delays=0.23/0.04/0.16/0.72, dsn=2.0.0, status=sent (250 2.0.0 OK 1371845579 wf5si3786287pab.138 - gsmtp) Jun 21 13:12:59 SBSMTPNV05 postfix/qmgr[1499]: 54EAF8059B: removed I also see this in the secure log: Jun 21 13:12:58 SBSMTPNV05 auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=myusername rhost=10.20.2.0 user=myusername Jun 21 13:12:58 SBSMTPNV05 auth: pam_winbind(dovecot:auth): getting password (0x00000010) Jun 21 13:12:58 SBSMTPNV05 auth: pam_winbind(dovecot:auth): pam_get_item returned a password Jun 21 13:12:58 SBSMTPNV05 auth: pam_winbind(dovecot:auth): user 'myusername' granted access Jun 21 13:12:58 SBSMTPNV05 auth: pam_winbind(dovecot:account): user 'myusername' granted access However, when I switch the mechanism to NTLM in the Thurnderbird MUA I see this: Jun 21 13:15:46 SBSMTPNV05 postfix/smtpd[1506]: connect from nvit01b.mydomain.com[10.20.2.**0] Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/**libauthdb_ldap.so Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/**libdriver_sqlite.so Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/**libmech_gssapi.so Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: Debug: auth client connected (pid=1506) Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: Debug: client in: AUTH#0111#011NTLM#011service=**smtp#011nologin#011lip=10.20.**4. 12#011rip=10.20.2.0#011resp=**TlRMT[...snip...]A= Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: Debug: client out: CONT#0111#011TlRMT[[...snip...**]A Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: Debug: client in: CONT#0111#011TlRMT[...snip...]**A= Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: winbind(?,10.20.2.0): user not authenticated: NT_STATUS_UNSUCCESSFUL Jun 21 13:15:48 SBSMTPNV05 postfix/smtpd[1506]: warning: nvit01b.mydomain.com[10.20.2.**0]: SASL NTLM authentication failed: TlRMT[...snip...]A Jun 21 13:15:48 SBSMTPNV05 dovecot: auth: Debug: client out: FAIL#0111 Jun 21 13:15:49 SBSMTPNV05 postfix/smtpd[1506]: disconnect from nvit01b.mydomain.com[10.20.2.**0] with nothing in the secure log and I don't see anything show up in the winbind logs either. I've reviewed these pages as reference, and I'm not sure what I'm missing: http://wiki2.dovecot.org/**HowTo/ActiveDirectoryNtlm<http://wiki2.dovecot.org/HowTo/ActiveDirectoryNtlm> http://wiki2.dovecot.org/**Authentication/Mechanisms/NTLM<http://wiki2.dovecot.org/Authentication/Mechanisms/NTLM> http://www.dovecot.org/list/**dovecot/2008-December/035630.**html<http://www.dovecot.org/list/dovecot/2008-December/035630.html> http://www.dovecot.org/list/**dovecot/2010-February/046763.**html<http://www.dovecot.org/list/dovecot/2010-February/046763.html> http://blog.al-shami.net/2008/**05/freebsd-postfix-dovecot-** and-active-directory/<http://blog.al-shami.net/2008/05/freebsd-postfix-dovecot-and-active-directo…> http://wiki2.dovecot.org/**HowTo/PostfixAndDovecotSASL<http://wiki2.dovecot.org/HowTo/PostfixAndDovecotSASL> Here's some of my relevant configuration as I understand it: I've joined the computer to the AD domain. The wbinfo tests work fine: # wbinfo -t checking the trust secret for domain MYDOMAIN via RPC calls succeeded # doveconf -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-358.11.1.el6.x86_64 x86_64 CentOS release 6.4 (Final) auth_debug_passwords = yes auth_mechanisms = plain ntlm login auth_use_winbind = yes auth_username_format = %Lu listen = * mbox_write_locks = fcntl passdb { driver = pam } service auth { unix_listener /var/spool/postfix/private/**auth { group = postfix mode = 0666 user = postfix } } ssl_cert = </etc/pki/dovecot/certs/**dovecot.pem ssl_key = </etc/pki/dovecot/private/**dovecot.pem userdb { driver = passwd } //////////////////// # postconf -n alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases command_directory = /usr/sbin config_directory = /etc/postfix daemon_directory = /usr/libexec/postfix data_directory = /var/lib/postfix debug_peer_level = 7 html_directory = no inet_interfaces = all inet_protocols = ipv4 line_length_limit = 6144 mail_owner = postfix mailq_path = /usr/bin/mailq.postfix manpage_directory = /usr/share/man mydestination = $myhostname, localhost.$mydomain, localhost myhostname = srvsbsmtp05.mydomain.com newaliases_path = /usr/bin/newaliases.postfix queue_directory = /var/spool/postfix readme_directory = /usr/share/doc/postfix-2.6.6/**README_FILES sample_directory = /usr/share/doc/postfix-2.6.6/**samples sendmail_path = /usr/sbin/sendmail.postfix setgid_group = postdrop smtpd_recipient_restrictions = permit_sasl_authenticated,**reje ct_unauth_destination smtpd_sasl_auth_enable = yes smtpd_sasl_path = private/auth smtpd_sasl_type = dovecot unknown_local_recipient_**reject_code = 550 ///////////////////// # cat /etc/krb5.conf [logging] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin_server = FILE:/var/log/kadmind.log [libdefaults] default_realm = MYDOMAIN.COM <http://mydomain.com/> dns_lookup_realm = true dns_lookup_kdc = true ticket_lifetime = 24h renew_lifetime = 7d forwardable = true [domain_realm] .mydomain.com = MYDOMAIN.COM <http://mydomain.com/> mydomain.com = MYDOMAIN.COM <http://mydomain.com/> //////////////////// system keytab: # klist -ke Keytab name: FILE:/etc/krb5.keytab KVNO Principal ---- ------------------------------**------------------------------** -------------- 3 host/sbsmtpnv05.mydomain.com(a)**MYDOMAIN.COM<sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM> (des-cbc-crc) 3 host/sbsmtpnv05.mydomain.com(a)**MYDOMAIN.COM<sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM> (des-cbc-md5) 3 host/sbsmtpnv05.mydomain.com(a)**MYDOMAIN.COM<sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM> (arcfour-hmac) 3 host/sbsmtpnv05.mydomain.com(a)**MYDOMAIN.COM<sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM> (aes128-cts-hmac-sha1-96) 3 host/sbsmtpnv05.mydomain.com(a)**MYDOMAIN.COM<sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM> (aes256-cts-hmac-sha1-96) 3 host/sbsmtpnv05(a)MYDOMAIN.COM (des-cbc-crc) 3 host/sbsmtpnv05(a)MYDOMAIN.COM (des-cbc-md5) 3 host/sbsmtpnv05(a)MYDOMAIN.COM (arcfour-hmac) 3 host/sbsmtpnv05(a)MYDOMAIN.COM (aes128-cts-hmac-sha1-96) 3 host/sbsmtpnv05(a)MYDOMAIN.COM (aes256-cts-hmac-sha1-96) 3 SBSMTPNV05$(a)MYDOMAIN.COM <http://mydomain.com/> (des-cbc-crc) 3 SBSMTPNV05$(a)MYDOMAIN.COM <http://mydomain.com/> (des-cbc-md5) 3 SBSMTPNV05$(a)MYDOMAIN.COM <http://mydomain.com/> (arcfour-hmac) 3 SBSMTPNV05$(a)MYDOMAIN.COM <http://mydomain.com/> (aes128-cts-hmac-sha1-96) 3 SBSMTPNV05$(a)MYDOMAIN.COM <http://mydomain.com/> (aes256-cts-hmac-sha1-96) 5 smtp/sbsmtpnv05.mydomain.com(a)**MYDOMAIN.COM<sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM> (des-cbc-crc) 5 smtp/sbsmtpnv05.mydomain.com(a)**MYDOMAIN.COM<sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM> (des-cbc-md5) 5 smtp/sbsmtpnv05.mydomain.com(a)**MYDOMAIN.COM<sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM> (arcfour-hmac) 5 smtp/sbsmtpnv05.mydomain.com(a)**MYDOMAIN.COM<sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM> (aes128-cts-hmac-sha1-96) 5 smtp/sbsmtpnv05.mydomain.com(a)**MYDOMAIN.COM<sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM> (aes256-cts-hmac-sha1-96) //////////////////// Samba config: [global] workgroup = MYDOMAIN realm = MYDOMAIN.COM <http://mydomain.com/> server string = Samba Server Version %v security = ADS kerberos method = system keytab log file = /var/log/samba/log.%m max log size = 50 printcap name = /dev/null domain master = No template shell = /bin/bash winbind separator = + winbind use default domain = Yes idmap config * : range = 10000-50000 idmap config * : backend = tdb printing = bsd cups options = raw print command = lpr -r -P'%p' %s lpq command = lpq -P'%p' lprm command = lprm -P'%p' %j

1 0

[Dovecot] Sieve Plugin Setup
by Denny Jones 22 Jun '13

22 Jun '13

I've got an existing setup that I want to add Sieve filtering to. I'm on QmailToaster: qmailadmin-toaster-1.2.16-1.4.0 I using Dovecot version 2.0.11 I'm looking for a good tutorial for installing Sieve Rules functionality on an existing system. Anybody know of one? Anybody else done this? Do I just install the latest Dovecot-sieve plugin release with wget, etc? What kind of configuration can I expect to have to go through. Do I have to reconfigure Dovecot to work in conjunction with the Sieve plugin? I'm hoping to find someone else has done this that can help me navigate the waters so-to-speak. Thanks in advance, Denny

2 1