- dovecot - dovecot.org

[Dovecot] Confused about "Authentication Mechanism" and "Password Schemes"
by Thomas Pries 10 Jan '13

10 Jan '13

Hi, I am currently setting up a Mailserver and decided to use Dovecot as IMAP/POP3-Server. I read the wiki an thought about how to transmit and store the passwords (I want to use a MySQL-database). I want to use encrypted transmission and encrypted storage. The wiki says: "If you want to use only one non-plaintext mechanism, you can store the passwords using the mechanism's own password scheme. " Ok, one secure mechanism is acceptable in my scenario and the wiki gives a list of supported authentication mechanisms and a list of supported password schemes. But I am missing the relation between the two lists, which mechanism expects which storage scheme? Did I overlooked any easy answer (other then "read the RFCs"). Best Regards Thomas

2 1

[Dovecot] v2.2.beta1 released
by Timo Sirainen 10 Jan '13

10 Jan '13

http://dovecot.org/releases/2.2/beta/dovecot-2.2.beta1.tar.gz http://dovecot.org/releases/2.2/beta/dovecot-2.2.beta1.tar.gz.sig Lots of fixes since 2.2.alpha1, especially related to dsync. Also dsync now supports syncing private message flags when INDEXPVT is used. Here's again the list of all the major changes in v2.2: * When creating home directories, the permissions are copied from the parent directory if it has setgid-bit set. For full details, see http://wiki2.dovecot.org/SharedMailboxes/Permissions * "doveadm auth" command was renamed to "doveadm auth test" * IMAP: ID command now advertises server name as Dovecot by default. It was already trivial to guess this from command replies. * dovecot.index.cache files can be safely accessed only by v2.1.11+. Older versions may think they're corrupted and delete them. + Implemented IMAP MOVE and BINARY extensions + Implemented IMAP CATENATE, URLAUTH and URLAUTH=BINARY extensions (by Stephan Bosch). + Implemented IMAP NOTIFY extension. Requires mailbox_list_index=yes to be enabled. + Redesigned and rewritten dsync. The new design makes the syncing faster, more reliable and more featureful. The new dsync protocol isn't backwards compatible with old dsync versions (but is designed to be forwards compatible with future versions). + All mailbox formats now support per-user message flags for shared mailboxes by using a private index. It can be enabled by adding :INDEXPVT=<path> to mail location. This should be used instead of :INDEX also for Maildir/mbox to improve performance. + Improved mailbox list indexes. They should be usable now, although still disabled by default. + Added LAYOUT=index. The mailbox directories are created using their GUIDs in the filesystem, while the actual GUID <-> name mapping exists only in the index. + LMTP proxy: Implemented XCLIENT extension for passing remote IP address through proxy.

2 4

[Dovecot] Mark Crispin - RIP
by Robert Moskowitz 09 Jan '13

09 Jan '13

'Father' of the IMAP protocol. Died Dec 28. http://en.wikipedia.org/wiki/Mark_Crispin Had a TOPS-20 in his basement that did a great job of keeping the house warm in the cool months (I remember one BAR bof where he extoled the benefits of this form of home heating).

3 2

[Dovecot] Squat FTS plugin not kicking in
by Frerich Raabe 09 Jan '13

09 Jan '13

Hi, I'm running Dovecot 2.1.12 on FreeBSD. I configured Dovecot to use the Squat plugin to provide faster full-text searches. The output of 'dovecot -n' is attached to this mail. However, I just noticed that this plugin doesn't seem to kick in. A raw telnet session seems to confirm this: [..] . SEARCH BODY abcdefg * OK Searched 57% of the mailbox, ETA 0:06 * SEARCH 3425 6254 14710 . OK Search completed (17.262 secs). . SEARCH BODY abcdefg * OK Searched 63% of the mailbox, ETA 0:05 * SEARCH 3425 6254 14710 . OK Search completed (18.651 secs). [..] A SEARCH BODY command doesn't create the dovecot.index.search or dovecot.index.search.uids files mentioned on http://wiki2.dovecot.org/Plugins/FTS/Squat . Also, two subsequent SEARCH BODY invocations don't seem to be any different as far as search time goes. I checked the logs but couldn't see anything which is related, except: Jan 8 21:36:10 imap2 dovecot: indexer-worker(frerich): Indexed 0 messages in INBOX Does anybody have some idea how to get more logging out of index-worker, or whether there's a flaw in my configuration? -- Frerich Raabe - raabe(a)froglogic.com www.froglogic.com - Multi-Platform GUI Testing

1 1

Re: [Dovecot] Migrating mailboxes - SOLVED
by Odhiambo Washington 09 Jan '13

09 Jan '13

On Wed, Jan 9, 2013 at 5:36 PM, Eduardo M KALINOWSKI < eduardo(a)kalinowski.com.br> wrote: > On Qua, 09 Jan 2013, Odhiambo Washington wrote: > >> See the output below >> >> [root@mail home]# cd johndoe/ >> [root@mail johndoe]# du -h mail/ >> 32K mail/.imap/Sent >> 40K mail/.imap/Trash >> 32K mail/.imap/Drafts >> 176K mail/.imap/INBOX >> 284K mail/.imap >> 88M mail/ >> > > Clearly most of the data (probably the emails) is not under the .imap > subdir, which is exactly what you didn't show us. It's probably mbox files. > > Sure! Looking further, I have found the mboxes and I am now able to migrate! Thanks for being my "third eye". That version of Dovecot had shocked my senses senseless!! -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ I can't hear you -- I'm using the scrambler.

1 0

[Dovecot] Migrating mailboxes
by Odhiambo Washington 09 Jan '13

09 Jan '13

Hello everyone and Happy 2013! I have a situation -- the first ever I have come across -- which I don't understand. A friend was/is running Postfix and Dovecot - with default configs - nothing was ever changed :-) [root@mail home]# dovecot --version 0.99.11 Anyway, he had a problem with a user mailbox which I wasn't able to diagnose and fix easily. maillog showed: Jan 9 16:11:29 mail imap-login: Login: userx [::ffff:127.0.0.1] Jan 9 16:11:29 mail imap(userx): file lib.c: line 37 (nearest_power): assertion failed: (num <= ((size_t)1 << (BITS_IN_SIZE_T-1))) Jan 9 16:11:29 mail dovecot: child 25217 (imap) killed with signal 6 Jan 9 16:12:03 mail imap-login: Login: userx [::ffff:127.0.0.1] Jan 9 16:12:03 mail imap(userx): file lib.c: line 37 (nearest_power): assertion failed: (num <= ((size_t)1 << (BITS_IN_SIZE_T-1))) Jan 9 16:12:03 mail dovecot: child 25229 (imap) killed with signal 6 Jan 9 16:13:15 mail pop3-login: Login: userx [::ffff:192.168.0.55] Jan 9 16:13:15 mail pop3(userx): file lib.c: line 37 (nearest_power): assertion failed: (num <= ((size_t)1 << (BITS_IN_SIZE_T-1))) My aim is not to fix the above. I have reconfigured both Postfix and Dovecot to use Maildir now and things are fine (not securitywise, but I don't care about that) for now. However, I'd like to migrate old mail for some users, but I don't know how to go about this, given the mailbox format, which I don't understand: Here is what a typical one looks like: [root@mail home]# ls -al johndoe/mail/.imap/ total 24 drwx------ 6 johndoe users 4096 May 27 2010 . drwx------ 3 johndoe users 4096 May 27 2010 .. drwx------ 2 johndoe users 4096 May 27 2010 Drafts drwx------ 2 johndoe users 4096 Jan 9 15:46 INBOX drwx------ 2 johndoe users 4096 May 27 2010 Sent drwx------ 2 johndoe users 4096 May 27 2010 Trash [root@mail home]# ls -al johndoe/mail/.imap/INBOX/ total 180 drwx------ 2 johndoe users 4096 Jan 9 15:46 . drwx------ 6 johndoe users 4096 May 27 2010 .. -rw------- 1 johndoe users 5 Dec 18 2007 .customflags -rw------- 1 johndoe users 10272 Jan 9 15:46 .imap.index -rw------- 1 johndoe users 132774 Jan 9 11:27 .imap.index.data -rw------- 1 johndoe users 5136 Sep 26 2011 .imap.index.log -rw------- 1 johndoe users 9404 Jan 8 18:44 .imap.index.tree [root@mail home]# ls -al johndoe/mail/.imap/Sent/ total 36 drwx------ 2 johndoe users 4096 May 27 2010 . drwx------ 6 johndoe users 4096 May 27 2010 .. -rw------- 1 johndoe users 5 May 27 2010 .customflags -rw------- 1 johndoe users 1608 May 27 2010 .imap.index -rw------- 1 johndoe users 10264 May 27 2010 .imap.index.data -rw------- 1 johndoe users 2576 May 27 2010 .imap.index.log -rw------- 1 johndoe users 1556 May 27 2010 .imap.index.tree [root@mail home]# ls -al johndoe/mail/.imap/Drafts/ total 36 drwx------ 2 johndoe users 4096 May 27 2010 . drwx------ 6 johndoe users 4096 May 27 2010 .. -rw------- 1 johndoe users 5 May 27 2010 .customflags -rw------- 1 johndoe users 1608 May 27 2010 .imap.index -rw------- 1 johndoe users 10264 May 27 2010 .imap.index.data -rw------- 1 johndoe users 2576 May 27 2010 .imap.index.log -rw------- 1 johndoe users 1556 May 27 2010 .imap.index.tree [root@mail home]# ls -al johndoe/mail/.imap/Trash/ total 44 drwx------ 2 johndoe users 4096 May 27 2010 . drwx------ 6 johndoe users 4096 May 27 2010 .. -rw------- 1 johndoe users 5 May 27 2010 .customflags -rw------- 1 johndoe users 1608 May 27 2010 .imap.index -rw------- 1 johndoe users 17950 May 27 2010 .imap.index.data -rw------- 1 johndoe users 2576 May 27 2010 .imap.index.log -rw------- 1 johndoe users 1556 May 27 2010 .imap.index.tree How can I migrate these mails into /home/johndoe/Maildir/ ?? They don't seem like mbox to me so mb2md.pl doesn't seem to apply here.. -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ I can't hear you -- I'm using the scrambler.

5 9

[Dovecot] Dsync didn't updates automatically
by Breno Moreira 08 Jan '13

08 Jan '13

Hi, I'm trying to use the Dsync cluster feature in a simple setup, without director, but I'm having some troubles. First of all, I want to know if this functionality syncs the mailbox when the user receive a mail or only when the dovecot starts? Reading the Dovecot mailing list and the design description for a dsync-replicated Dovecot cluster, I understood that it should sync every time a new mail arrives, but it isn't happening in my system. So, can I do this update automatically? If yes, why is it not working properly? Maybe is my configuration files or maybe I'm confusing the capability of this feature. I'm using Dovecot 2.1.7 included in the Debian Wheezy, with virtual users in a MySQL database, Moreover, I have the following configuration: mail_plugins = $mail_plugins notify replication service aggregator { # give enough permissions for mail processes fifo_listener replication-notify-fifo { user = vmail #mode = 0666 } unix_listener replication-notify { user = vmail #mode = 0666 } } service replicator { # start replication at startup process_min_avail = 1 } plugin { # host1 replicates to host2 #mail_replica = remote:vmail at 10.127.0.2 # host2 replicates to host1 mail_replica = remote:vmail@10.127.0.5 } dsync_remote_cmd = ssh -l vmail %{host} doveadm dsync-server -u%u -l%{lock_timeout} -n%{namespace} service doveadm { # if you're using a single virtual user, set this to # start ssh as vmail (not root) user = vmail } service config { unix_listener config { user = vmail } } The vmail user has rsa id's in both servers, so it can do ssh connections without asking for password. I appreciate your help. Best Regards, -- --------------------------------------------------------------------- Breno Moreira "I have no idols. I admire work, dedication and competence." Ayrton Senna

2 6

[Dovecot] dovecot-antispam-plugin compile error
by Bradley Giesbrecht 08 Jan '13

08 Jan '13

$ hg --cwd ./work/dovecot-antispam-plugin-50 glog -l3 --style compact @ 50[tip] 0319240072d8 2012-12-20 03:56 +0200 Eugene Paskevich <eugene(a)raptor.kiev.ua> | Made use of new DOVECOT_ABI_VERSION macro. ... $ configure; make Compiling signature-log.c (plugin)... signature-log.c:122: error: too many arguments to function ‘dict_init’ ... Reverting src/signature-log.c from r49 to r30 allows make to succeed again. Regards, Bradley Giesbrecht (pixilla)

1 0

[Dovecot] Question about supporting EAI in Devecot
by Abdulrahman I. ALGhadir 08 Jan '13

08 Jan '13

Dear all, I would like to ask the staff of Devecot if they are planning (working) or supporting EAI (http://tools.ietf.org/wg/eai/) in the future versions? If there is a working progress on it can anybody guide me to it? Thank you, AbdulRahman, ----------------------------------------------------------------------------------- Disclaimer: This message and its attachment, if any, are confidential and may contain legally privileged information. If you are not the intended recipient, please contact the sender immediately and delete this message and its attachment, if any, from your system. You should not copy this message or disclose its contents to any other person or use it for any purpose. Statements and opinions expressed in this e-mail are those of the sender, and do not necessarily reflect those of the Communications and Information Technology Commission (CITC). CITC accepts no liability for damage caused by this email.

2 3

[Dovecot] imap: Error: net_connect_unix(/.../auth-master) failed: Invalid argument
by Joan Picanyol i Puig 08 Jan '13

08 Jan '13

Hi, I'm unable to get past the subject error trying to setup dovecot 2.1.10 on FreeBSD 6.4: right after login the server closes the connection (testing with telnet) I've tried manualy chown()ing auth-master to 666, so permission issues should be ruled out. I'm attaching logs, config and excerpt of ktrace -id. I've built a version with debug symbols, but I don't seem to hit a breakpoint in net_connect_unix on lib/network.c What can I look at? tks -- pica

2 3

[Dovecot] Access to deleted mails in mdbox storage
by Wolfgang.Friebel＠desy.de 08 Jan '13

08 Jan '13

Hi Timo, we are currently running dovecot 2.1.10 using mdbox storage. Sometimes we get requests from users to restore accidentally deleted mails. If the mails got deleted before a backup was made, such mails could of course not be restored from backup. One option to help users in this respect would be to use the lazy expunge plugin. On the other hand I have seen, that the deleted mails stay intact in the mdbox storage until a doveadm purge has been performed. Therefore without using the plugin it is in principle possible to get access to any deleted mails. As in our case the expunge runs once a week while the backup is done daily we can basically recover all mails ever received. My question: doveadm has currently no command similar to doveadm search or fetch to get to deleted mails. Would it be useful to have such a command? As a proof of concept I wrote a little script to mimic the doveadm fetch as closely as possible given the limited amount of information in the mdbox/storage/m.* files and could indeed get access to deleted mails. Do you regard such a procedure (within doveadm) useful or would you recommend nevertheless using the lazy expunge plugin? I am aware of the fact that this is a solution for mdbox storage only. -- Wolfgang Friebel Deutsches Elektronen-Synchrotron DESY Phone/Fax: +49 33762 77372/216 Platanenallee 6 Mail: Wolfgang.Friebel AT desy.de D-15738 Zeuthen Germany

2 1

[Dovecot] 2 node dovecot
by Lazy 08 Jan '13

08 Jan '13

Hi, We run dovecot 2.1 on 2 nodes with shared nfs storage. Index files are kept on local disk. Second node is usually used only for email snapshots access. If primary node fails it is configured to take place of the primary imap server. Snapshots are additional namespaces with mail from various points in time. We need a way to easly copy multiple messages from snapshots to current mailboxes. It would be best to make current mailbox available as another namespace so one would simply copy messages from one folder to another. Is it safe ? There will be times when given user is writing to the same nfs based Maildir mailbox from 2 nodes both of them having separate index files. What will happen if already present message gets copied back from the snapshot ? Regards, Michał Grzędzicki

2 2

[Dovecot] lda crash?
by kjonca＠o2.pl 08 Jan '13

08 Jan '13

When I try to refilter some messages lda crash: Dec 29 16:07:34 LDA(kjonca): Info: sieve: msgid=<003a01bf6d8f$c9d69f20$9c2dcdc3(a)tiger.com.pl>: stored mail into mailbox 'scott/Sent' Dec 29 16:08:02 lda: Debug: Loading modules from directory: /usr/lib/dovecot/modules Dec 29 16:08:02 lda: Debug: Module loaded: /usr/lib/dovecot/modules/lib90_sieve_plugin.so Dec 29 16:08:02 LDA(kjonca): Debug: Effective uid=1000, gid=1000, home=/home/kjonca Dec 29 16:08:02 LDA(kjonca): Debug: Namespace : type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~/Mail/0:LAYOUT=fs:INBOX=~/Mail/0/INBOX Dec 29 16:08:02 LDA(kjonca): Debug: fs: root=/home/kjonca/Mail/0, index=, control=, inbox=/home/kjonca/Mail/0/INBOX, alt= Dec 29 16:08:02 LDA(kjonca): Debug: userdb lookup skipped, username taken from USER environment Dec 29 16:08:02 LDA(kjonca): Debug: none: root=, index=, control=, inbox=, alt= Dec 29 16:08:02 LDA(kjonca): Debug: Destination address: kjonca(a)alfa.kjonca (source: user@hostname) Dec 29 16:08:02 LDA(kjonca): Debug: sieve: include: sieve_global_dir is not set; it is currently not possible to include `:global' scripts. Dec 29 16:08:02 LDA(kjonca): Debug: sieve: Pigeonhole Sieve Extprograms plugin version 0.1.0 loaded Dec 29 16:08:02 LDA(kjonca): Debug: sieve: using the following location for user's Sieve script: /home/kjonca/.dovecot.sieve Dec 29 16:08:02 LDA(kjonca): Debug: sieve: opening script /home/kjonca/.dovecot.sieve Dec 29 16:08:02 LDA(kjonca): Debug: sieve: script binary /home/kjonca/.dovecot.svbin successfully loaded Dec 29 16:08:02 LDA(kjonca): Debug: sieve: binary save: not saving binary /home/kjonca/.dovecot.svbin, because it is already stored Dec 29 16:08:02 LDA(kjonca): Debug: sieve: executing script from /home/kjonca/.dovecot.svbin Dec 29 16:08:02 LDA(kjonca): Info: sieve: msgid=<001b01bf7227$18649840$9c2dcdc3(a)tiger.com.pl>: stored mail into mailbox 'scott/Sent' doveconf -n output KJ -- http://sporothrix.wordpress.com/2011/01/16/usa-sie-krztusza-kto-nastepny/ Little known fact about Middle Earth: The Hobbits had a very sophisticated computer network! It was a Tolkien Ring...

3 6

[Dovecot] Director and forwarding LDAP user as Master user
by Alexandr Sabitov 08 Jan '13

08 Jan '13

Hello guys, Would you be able to help me with this little issue. I bet someone has the same config so if you can copy-paste it I will very appreciate it. So main idea is to enable Dovecot director to authenticate a LDAP user with plain or encrypted password and send the user to back-end Dovecot server after the authentication. According to Wiki it is only possible if we use the master user to communicate to the back-end server. On the back-end Dovecot server it is working fine, I can log in as normal user/user_password or as user*masteruser/master_password. The back-end config is: auth_master_user_separator = * passdb { driver = passwd-file args = /usr/local/dovecot/etc/dovecot/passwd.masterusers master = yes pass = yes } passdb { driver = ldap args = /usr/local/dovecot/etc/dovecot/dovecot-ldap.conf.ext } userdb { driver = ldap args = /usr/local/dovecot/etc/dovecot/dovecot-ldap.conf.ext } Now front-end: how to get director forward the user to the back-end after authentication on the director? With my director config the user stays on the director all the time: passdb { driver = static args = proxy=y master=masteruser pass=master_password destuser=%u*masteruser } passdb { driver = ldap args = /usr/local/dovecot/etc/dovecot/dovecot-ldap.conf.ext } userdb { driver = ldap args = /usr/local/dovecot/etc/dovecot/dovecot-ldap.conf.ext } The only way to forward the user is to setup nopassword=y in args of static passdb but in that case the user will be authenticated on the backend but not on the director... What do I missing ? Please help me Best Regards, Alexandr Sabitov

2 2

Re: [Dovecot] Problem setting up dovecot on Debian: "telnet: Unable to connect to remote host: Connection refused"
by Joseph Tam 08 Jan '13

08 Jan '13

Noel Butler writes: > I build from sources all key daemon software anyway, package maintainers > can only account for so many configurations. Its not so critical with > dovecot now since v2, because, regrettably, Timo removed a lot of fine > tune config options that allowed us to only build in what we wanted, > now, tuff, most the auth methods and stuff must be built even if we dont > want them. That hasn't been my experience, but maybe because the non-optional stuff are what I need. For example, my configure for v2.1.x summarizes Install prefix . : /opt/dovecot File offsets ... : 64bit I/O polling .... : poll I/O notifys .... : none SSL ............ : yes (OpenSSL) GSSAPI ......... : no passdbs ........ : static passwd passwd-file checkpassword : -shadow -pam -bsdauth -sia -ldap -sql -vpopmail userdbs ........ : static prefetch passwd passwd-file checkpassword : -ldap -sql -vpopmail -nss SQL drivers .... : : -pgsql -mysql -sqlite Full text search : squat : -lucene -solr A few auth methods, which even if you don't use, is a nice fallback for exceptions or niche caches, no dbs, one mandatory text search method. Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] BLF-CRYPT
by Kristof Bajnok 07 Jan '13

07 Jan '13

Hi, I get "Unknown scheme: BLF-CRYPT" messages if I try to use Blowfish-encrypted passwords, even though it is supposed to be supported. I'm on 2.1.7, Debian Squeeze backports. Do you have any information whether Blowfish is supported with Debian Squeeze crypt(), or is there any other knobs I can turn on to make this algorithm available? Thanks, Kristof

2 1

[Dovecot] Problem setting up dovecot on Debian: "telnet: Unable to connect to remote host: Connection refused"
by Chris Evans 07 Jan '13

07 Jan '13

I would like to get dovecot running on my laptop so I can transfer a lot of old Email from Thunderbird mailbox files to a hosted zimbra service. However I'm falling at the first hurdle. I'm running Debian squeeze i386 (kernel 2.6.32-5-686) and have installed dovecot-imapd and dovecot-common with synaptic and edited /etc/dovecot/dovecot.conf to make sure it has the right protocols and listen instructions. Here's dovecot -n root@delldeb:/etc/dovecot# dovecot -n # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-686 i686 Debian 6.0.6 log_timestamp: %Y-%m-%d %H:%M:%S listen: 143 993 disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login mail_privileged_group: mail mbox_write_locks: fcntl dotlock auth default: passdb: driver: pam userdb: driver: passwd Here's ps: root@delldeb:/etc/dovecot# ps aux | grep dove root 10353 0.0 0.0 3944 792 ? Ss 15:32 0:00 /usr/sbin/dovecot -c /etc/dovecot/dovecot.conf root 10356 0.0 0.0 10008 2420 ? S 15:32 0:00 dovecot-auth root 10360 0.0 0.0 10008 2372 ? S 15:32 0:00 dovecot-auth -w dovecot 10361 0.0 0.0 5412 2024 ? S 15:32 0:00 imap-login dovecot 10362 0.0 0.0 5412 2024 ? S 15:32 0:00 imap-login dovecot 10363 0.0 0.0 5412 2028 ? S 15:32 0:00 imap-login root 10393 0.0 0.0 3304 772 pts/2 S+ 15:33 0:00 grep dove Here's netstat: root@delldeb:/etc/dovecot# netstat -tap | grep 143 tcp 0 0 0.0.0.143:imap2 *:* LISTEN 9178/dovecot tcp 0 0 0.0.0.143:imaps *:* LISTEN 9178/dovecot I can telnet into SMTP OK with telnet localhost 25 but telnet localhost 143 gets me the "Connection refused" message. I've changed auth_debug to "yes" and now /var/log/mail.info says: Jan 5 15:32:13 delldeb dovecot: Dovecot v1.2.15 starting up (core dumps disabled) Jan 5 15:32:14 delldeb dovecot: auth(default): new auth connection: pid=10361 Jan 5 15:32:14 delldeb dovecot: auth(default): new auth connection: pid=10362 Jan 5 15:32:14 delldeb dovecot: auth(default): new auth connection: pid=10363 That doesn't change after I try the telnet login again so I think that's just telling me that the dovecot daemon started and launched it's listeners (but I know I don't know how to read this so correction welcome). My reading of all of this is that the dovecot daemon is up and running, that it's listening correctly on 143 and 993 and that I have to do something else to get authorisation even to start the IMAP dialogue with the server. I would like to get it working and locked to SSL only but thought I should start with both unencrypted and encrypted. Can someone help me or point me to the bits of documentation or good web howto or the like that I've missed? TIA, Chris (long term Debian user but it's some years since I last ran my own mail server and I'm a total newby to imap and dovecot)

4 9

[Dovecot] v2.1.13 released
by Timo Sirainen 07 Jan '13

07 Jan '13

http://dovecot.org/releases/2.1/dovecot-2.1.13.tar.gz http://dovecot.org/releases/2.1/dovecot-2.1.13.tar.gz.sig - Some fixes to cache file changes in v2.1.11. - fts-solr: Overlong UTF8 sequences in mails were rejected by Solr and caused the mails to not be indexed. - virtual storage: Sorting mailbox by from/to/cc/bcc didn't work.

1 0

[Dovecot] wrong authentication for local delivery
by Averlon 06 Jan '13

06 Jan '13

Hi all there, I have a postfix/dovecot environment running with ldap authentication. I am able to deliver e-Mails to the internet and also receive them via fetchmail. I have a pure local domain (av.loc). Just for internal purpuse. For all mails where destination is a local mailbox, as for all of the local domain, delivery does not work. Here I can show some logs of such a process: +++ Here the process starts (I have sent an e-Mail to myself). Jan 6 17:31:06 f42252se dovecot: auth: Debug: auth client connected (pid=13250) Jan 6 17:31:06 f42252se dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=smtp#011nologin#011lip=192.168.110.150#011rip=192.168.110.165#011secured#011resp=<hidden> Jan 6 17:31:06 f42252se dovecot: auth: Debug: ldap(avadmin,192.168.110.165): pass search: base=ou=user,dc=averlon,dc=loc scope=onelevel filter=(&(objectClass=posixAccount)(uid=avadmin)) fields=mail,userPassword *Jan 6 17:31:06 f42252se dovecot: auth: Debug: auth(avadmin,192.168.110.165): username changed avadmin -> avadmin(a)av.loc* Jan 6 17:31:06 f42252se dovecot: auth: Debug: ldap(avadmin(a)av.loc,192.168.110.165): result: userPassword(password)=<hidden> mail(user)=avadmin(a)av.loc Jan 6 17:31:06 f42252se dovecot: auth: Debug: client out: OK#0111#011user=avadmin(a)av.loc#011mail=/home/vmail/avadmin/Maildir/ Jan 6 17:31:06 f42252se postfix/smtpd[13250]: 69FDB30007C: client=f42252ud.averlon.loc[192.168.110.165], sasl_method=PLAIN, sasl_username=avadmin(a)av.loc Jan 6 17:31:06 f42252se postfix/cleanup[13251]: 69FDB30007C: message-id=<50E9A6C8.1090805(a)av.loc> Jan 6 17:31:06 f42252se postfix/qmgr[11960]: 69FDB30007C: from=<avadmin(a)av.loc>, size=1224, nrcpt=1 (queue active) Jan 6 17:31:06 f42252se postfix/smtpd[13250]: disconnect from f42252ud.averlon.loc[192.168.110.165] Jan 6 17:31:09 f42252se postfix/pickup[11959]: 19A2E30007F: uid=5002 from=<avadmin(a)av.loc> Jan 6 17:31:09 f42252se postfix/cleanup[13251]: 19A2E30007F: message-id=<50E9A6C8.1090805(a)av.loc> Jan 6 17:31:09 f42252se postfix/qmgr[11960]: 19A2E30007F: from=<avadmin(a)av.loc>, size=1531, nrcpt=1 (queue active) Jan 6 17:31:09 f42252se postfix/pipe[13252]: 69FDB30007C: to=<avadmin(a)av.loc>, relay=spamassassin, delay=2.7, delays=0.01/0/0/2.7, dsn=2.0.0, status=sent (delivered via spamassassin service) Jan 6 17:31:09 f42252se postfix/qmgr[11960]: 69FDB30007C: removed Jan 6 17:31:09 f42252se dovecot: auth: Debug: master in: USER#0111#011avadmin(a)av.loc#011service=lda *Jan 6 17:31:09 f42252se dovecot: auth: Debug: ldap(avadmin(a)av.loc): pass search: base=ou=user,dc=averlon,dc=loc scope=onelevel filter=(&(objectClass=posixAccount)(uid=avadmin(a)av.loc)) fields=mail,userPassword* Jan 6 17:31:09 f42252se dovecot: auth: ldap(avadmin(a)av.loc): unknown user Jan 6 17:31:09 f42252se dovecot: auth: Debug: master out: NOTFOUND#0111 +++ I have configured my thunderbird to have a username to authenticate against ldap. In the first steps above the authentication of the sender works. But then, when delivering to the receiver, dovecot uses the e-Mail address of the receiver to check the password. I do not know why dovecot chechs the password of the receiver before delivery. I do neither know where to switch that off or set some changes in the configuration to avoid that process. Probably it is correct? But anyhow, the setup ldap-procedure just checks the username and no e-Mail address. Dovecot konfig: +++ # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-35-generic x86_64 Ubuntu 12.04.1 LTS auth_debug = yes auth_mechanisms = plain login cram-md5 auth_username_format = %Lu auth_verbose = yes hostname = mail.av.loc mail_gid = vmail mail_location = maildir:~/Maildir mail_privileged_group = vmail mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocols = imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0660 user = vmail } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_cipher_list = ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM ssl_key = </etc/ssl/private/dovecot.pem syslog_facility = avdove userdb { args = uid=vmail gid=vmail home=/home/vmail/%n driver = static } protocol lda { sendmail_path = /usr/sbin/sendmail } +++ As always, I would appreciate some hints. Thanks in advance. -- Signatur Averlon info Mit freundlichen Grüßen / Kind Regards Karl-Heinz Fischbach Skype: khfischbach jabber: averlon(a)jabber.org Blog: averlon.posterous.com Signatur: Diese e-mail ist unter Umständen signiert. Die Signatur entspricht dem Deutschen Signaturgesetz und entsprechenden europäischen Regelungen. Important Note: This e-mail may contain trade secrets or privileged, undisclosed or otherwise confidential information. If you have received this e-mail in error, you are hereby notified that any review, copying or distribution of it is strictly prohibited. Please inform us immediately and destroy the original transmittal.

1 0

[Dovecot] dovecot as layer between postfix and thunderbird
by martin svensson 05 Jan '13

05 Jan '13

Hello, im all new to this but feel i want to have a dedicated server to handle my mails from Gmail and Hotmail Basically, i installed SMS, superb Mini Server (based on slackware), and with that default install i got: dovecot, postfix, fetchmail and sendmail. The postfix part seems to work according to a "telnet localhost 25", now i want to procede with dovecot, as i understand it, its the middle layer between (in my case) postfix and thunderbird. What i expect in the very end is a dedicated server who regulary checks and fetches mails, and lets me have all contacts info in the (already up and running) LDAP server. When i start thunderbird, i want it to go grab those mails from my local machine I am, ofcourse all over manpages, HOWTOs, guides and google, but would certainly appriciate further help and points in the right direction My apologises for any weird beginner mistakes in this post

5 4

[Dovecot] Disable auth-worker log message?
by Martin Rabl 05 Jan '13

05 Jan '13

Hi, is it possible to disable the line auth-worker(17128): mysql(127.0.0.1): Connected to database mailserver in dovecot 2.1.12? Logging is in "standard" mode. Thank you, Martin

2 1

[Dovecot] permission denied message
by Averlon 05 Jan '13

05 Jan '13

Hi all, I have run successfully a postfix/dovecot installation some time ago. Now, setting up a new server, I am lost with some error messages. I would appreciate some help. +++ f42252se dovecot: pop3-login: Error: auth: connect(login) in directory / failed: Permission denied (euid=113(<getpwu id() error>) egid=65534(<getgrgid() error>) missing +x perm: /, dir owned by 5000:5000 mode=0750) +++ This is the error message I get. "directory /" is a little bit courious to me. Here my dovecot config: +++ # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-35-generic x86_64 Ubuntu 12.04.1 LTS auth_debug = yes auth_mechanisms = plain login digest-md5 cram-md5 auth_verbose = yes hostname = mail.av.loc mail_debug = yes mail_gid = vmail mail_location = maildir:~/Maildir mail_privileged_group = vmail mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocols = imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0600 user = postfix } unix_listener auth-userdb { group = vmail mode = 0660 user = vmail } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_cipher_list = ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM ssl_key = </etc/ssl/private/dovecot.pem syslog_facility = dovecot userdb { args = uid=vmail gid=vmail home=/home/vmail/%d/%n driver = static } +++ You probably see it immediatly what I fail to see. Thanks in advance -- Signatur Averlon info Mit freundlichen Grüßen / Kind Regards Karl-Heinz Fischbach Guiding Principle Tel.: +49 (8121) 7922532 Skype: khfischbach jabber: averlon(a)jabber.org Blog: averlon.posterous.com Signatur: Diese e-mail ist unter Umständen signiert. Die Signatur entspricht dem Deutschen Signaturgesetz und entsprechenden europäischen Regelungen. Important Note: This e-mail may contain trade secrets or privileged, undisclosed or otherwise confidential information. If you have received this e-mail in error, you are hereby notified that any review, copying or distribution of it is strictly prohibited. Please inform us immediately and destroy the original transmittal.

2 1

[Dovecot] About the Dovecot Missing mail.
by Vilson Lai 05 Jan '13

05 Jan '13

Dear Sir and/or Madam, I'm the newbie for using Linux, and now our company find the freelancer to change the mbox to maildir. we found that we have mail loss with error massage(ERROR: Connection dropped by IMAP server. Query: EXPUNGE), after that our freelancer do something to let this massage disappear. But now will still found we have mail loss. What can I do? I found a similar case in this page, but I can't found the solution, anyone can help me? URL: http://www.dovecot.org/list/dovecot/2011-December/062632.html Best Regards, Vilson Lai

3 4

[Dovecot] permission denied message
by Averlon 05 Jan '13

05 Jan '13

Hi all there - sorry I have to repeat the mail since I got the message it was not delivered correctly. Hi all, I have run successfully a postfix/dovecot installation some time ago. Now, setting up a new server, I am lost with some error messages. I would appreciate some help. +++ f42252se dovecot: pop3-login: Error: auth: connect(login) in directory / failed: Permission denied (euid=113(<getpwu id() error>) egid=65534(<getgrgid() error>) missing +x perm: /, dir owned by 5000:5000 mode=0750) +++ This is the error message I get. "directory /" is a little bit courious to me. Here my dovecot config: +++ # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-35-generic x86_64 Ubuntu 12.04.1 LTS auth_debug = yes auth_mechanisms = plain login digest-md5 cram-md5 auth_verbose = yes hostname = mail.av.loc mail_debug = yes mail_gid = vmail mail_location = maildir:~/Maildir mail_privileged_group = vmail mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocols = imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0600 user = postfix } unix_listener auth-userdb { group = vmail mode = 0660 user = vmail } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_cipher_list = ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM ssl_key = </etc/ssl/private/dovecot.pem syslog_facility = dovecot userdb { args = uid=vmail gid=vmail home=/home/vmail/%d/%n driver = static } +++ You probably see it immediatly what I fail to see. Thanks in advance -- Signatur Averlon info Mit freundlichen Grüßen / Kind Regards Karl-Heinz Fischbach Skype: khfischbach jabber: averlon(a)jabber.org Blog: averlon.posterous.com Signatur: Diese e-mail ist unter Umständen signiert. Die Signatur entspricht dem Deutschen Signaturgesetz und entsprechenden europäischen Regelungen. Important Note: This e-mail may contain trade secrets or privileged, undisclosed or otherwise confidential information. If you have received this e-mail in error, you are hereby notified that any review, copying or distribution of it is strictly prohibited. Please inform us immediately and destroy the original transmittal.

1 1

[Dovecot] doveadm backup issue with ACL plugin enabled
by Thomas Leuxner 05 Jan '13

05 Jan '13

Hi, when trying to backup mailboxes I noticed some hiccups when the ACL plugin is enabled. It works fine with ACL disabled: $ doveadm -o plugin/quota= backup -u tlx(a)leuxner.net mdbox:/home/backups/tlx/mdbox However, enabled (and w/ a mailbox actually using ACLs) the following error occurs: $ doveadm -o plugin/quota= backup -u tlx(a)leuxner.net mdbox:/home/backups/tlx/mdbox dsync(tlx(a)leuxner.net): Error: Couldn't update mailbox <name> metadata: Permission denied I tried to override the ACL plugin via '-o' to no avail, but I may be using the wrong syntax there. Regards Thomas -- # 2.2.alpha1 (cd093d05037e): /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-0.bpo.4-amd64 x86_64 Debian 6.0.6 auth_cache_size = 16 k auth_verbose = yes mail_location = mdbox:~/mdbox mail_plugins = acl quota stats mailbox_list_index = yes namespace { list = yes location = mdbox:/var/vmail/public prefix = Public/ separator = / subscriptions = no type = public } namespace inbox { hidden = no inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / type = private } passdb { args = username_format=%u /var/vmail/auth.d/%d/passwd driver = passwd-file } plugin { acl = vfile:/var/vmail/conf.d/%d/acls:cache_secs=300 mail_log_events = expunge mailbox_delete quota = dict:user::file:%h/mdbox/dovecot-quota quota_rule = *:storage=1GB quota_rule2 = Trash:storage=+10%% sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_global_dir = /var/vmail/conf.d/%d/sieve stats_refresh = 30s stats_track_cmds = yes } protocols = " imap lmtp" quota_full_tempfail = yes service auth-worker { unix_listener auth-worker { user = doveauth } user = doveauth } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = doveauth } service imap-login { inet_listener imap { address = 1.2.3.4 port = 143 } inet_listener imaps { port = 0 } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } service stats { fifo_listener stats-mail { mode = 0600 user = vmail } } ssl_ca = </etc/ssl/certs/SSL123_CA_Bundle.pem ssl_cert = </etc/ssl/certs/host_domain_tld.crt ssl_key = </etc/ssl/private/host_domain_tld.key syslog_facility = local1 userdb { args = username_format=%u /var/vmail/auth.d/%d/passwd driver = passwd-file } verbose_proctitle = yes protocol lmtp { mail_plugins = acl quota stats sieve } protocol imap { mail_max_userip_connections = 20 mail_plugins = acl quota stats mail_log notify imap_acl imap_quota imap_stats }

2 5