- dovecot - dovecot.org

[Dovecot] sieve_execute_bytecode failed with squirrelmail
by Gregory Charot (EVENIUM) 14 Sep '12

14 Sep '12

Hello all, I'm using dovecot on CentOS 5.8 (official CentOS package) and have lot of lock and "sieve_execute_bytecode error" in my dovecot.log. $ cat /etc/redhat-release CentOS release 5.8 (Final) $ dovecot --version 1.0.13 The sieve scripts are generated by squirrelmail mail and are mostly mail filters and vacations notices. $ yum info squirrelmail.noarch Installed Packages Name : squirrelmail Arch : noarch Version : 1.4.8 Release : 5.el5.centos.13 When I look at my dovecot.log I have a lot of sieve error : deliver(foo): Sep 11 15:08:04 Info: msgid=<1881992580.96697.1347363282479.JavaMail.jboss(a)gula1.xxx.com>: save failed to EvSUPPORT: Timeout while wait ing for lock deliver(foo): Sep 11 15:08:04 Info: sieve runtime error: Fileinto: Generic Error deliver(foo): Sep 11 15:08:04 Error: sieve_execute_bytecode(/home/foo/.dovecot.sievec) failed The server hosts around 50 mailboxes, some people does have sieve errors some doesn't. Is there any way to get more details about the runtime error ? How can I debug this issue ? Thanks a lot in advance, Greg My config below : #dovecot -n # 1.0.13: /etc/dovecot.conf log_path: /var/log/dovecot.log ssl_ca_file: /etc/pki/roch_crt/roch_evenium_com.ca-bundle ssl_cert_file: /etc/pki/roch_crt/roch_evenium_com.crt ssl_key_file: /etc/pki/roch_crt/private/roch-private.key ssl_cipher_list: ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+SSLv3 login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_process_per_connection: no login_process_size: 256 login_processes_count: 10 login_max_connections: 32 mail_privileged_group: mail dotlock_use_excl: yes fsync_disable: yes maildir_copy_with_hardlinks: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls,oe-ns-eoh auth default: passdb: driver: pam userdb: driver: passwd socket: type: listen client: path: /var/run/dovecot/auth-client mode: 438 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384

2 3

[Dovecot] Possible mbox corruption if mail is saved with wrong Content-Length header (2.1.6)
by Jost Krieger 14 Sep '12

14 Sep '12

One of our users likes to delete attachments from his mails. He is using roundcube and we installed a plugin for that. He reports that from time to time one of his mails gets corrupted (cut off in the middle). I could verify there is something wrong in the logs: imap(x1234567): Error: Cached message size larger than expected (6796 > 2844) imap(x1234567): Error: Corrupted index cache file /net/mbx3/disc2/home/85/x1234567/Index/.imap/Sent/dovecot.index.cache: Broken physical size for mail UID 5001 imap(x1234567): Error: read(/net/mbx3/disc2/home/85/x1234567/Mail/Sent) failed: Input/output error (FETCH for mailbox Sent UID 5001) imap(x1234567): Info: Disconnected: Internal error occurred. Refer to server log for more information. [2012-08-23 00:00:49] in=1124145 out=1324791 I had a look at the plugin and it works by duplicating the message and leaving out the attachment(s). The headers are also duplicated, including Content-Length. I've fixed that in the plugin, (don't know yet if it helps), but I think it shouldn't cause such breakage in dovecot. # doveconf -n # 2.1.6: /usr/local/dovecot/etc/dovecot/dovecot.conf # OS: Linux 2.6.9-103.ELsmp i686 Red Hat Enterprise Linux AS release 4 (Nahant Update 9) doveconf: Warning: Dovecot was last started using /usr/local/dovecot/etc/dovecot.conf, but this config is /usr/local/dovecot/etc/dovecot/dovecot.conf auth_master_user_separator = * disable_plaintext_auth = no doveadm_password = (hidden) lda_mailbox_autocreate = yes log_path = /dev/stderr log_timestamp = mail_location = mbox:~/Mail:INBOX=~/Mailbox:INDEX=~/Index mail_plugins = " quota zlib mail_log notify virtual" mdbox_rotate_size = 5 M namespace { hidden = no inbox = yes location = prefix = separator = / type = private } namespace { hidden = yes inbox = no list = children location = maildir:~/Maildir prefix = "#MD/" separator = / type = private } passdb { driver = pam } passdb { args = /usr/local/dovecot/etc/passwd.dovcot.master driver = passwd-file master = yes } plugin { acl = vfile mail_log_events = undelete mailbox_delete mailbox_rename mailbox_create mail_log_fields = uid box msgid size quota = fs:Disk quota } protocols = pop3 imap service auth { client_limit = 4300 user = root } service doveadm { inet_listener { port = 542 } } service imap-login { inet_listener imap { address = 134.147.64.42 port = 143 } service_count = 0 } service imap { drop_priv_before_exec = yes process_limit = 4096 vsz_limit = 1 G } service pop3-login { inet_listener pop3 { address = 134.147.64.42 port = 110 } service_count = 0 } service pop3 { drop_priv_before_exec = yes process_limit = 2048 vsz_limit = 512 M } ssl = no userdb { driver = passwd } protocol imap { mail_max_userip_connections = 50 mail_plugins = " quota zlib mail_log notify virtual imap_quota imap_zlib" } Thanks Jost Krieger -- | Helft Spam ausrotten! HTML in Mail ist unhöflich. | | Postmaster, JAPH, manchmal Wahrsager am RZ der RUB | | Wahre Worte sind nicht gefällig, gefällige Worte sind nicht wahr.| | Lao Tse, Tao Te King 81 |

2 4

[Dovecot] Couldn't drop privileges: User is missing UID (see mail_uid setting)
by Carsten Laun-De Lellis 14 Sep '12

14 Sep '12

Hi all I hope anyone could help me out with my problem regarding the user_id settings. I am running my mail servers just for fun and I am not a professional mail admin. After I am using postfix and dovecot for my mail servers with a mysql backend for the last 2 years I have tried to set up an installation with a ldap backend. I followed the how-to from the Postfix Book and now I have always the following error message: Couldn't drop privileges: User is missing UID (see mail_uid setting) This error message occurs whenever I try to connect via a mail client. System emails were delivered the way I expected. So I assume postfix is working fine. The ldap search I use for user authentication is as follows: uris = ldap://myserver.com dn = cn=admin, dc=mydomain, dc=com dnpass = secure tls = no base = ou=mailuser,dc=mydomain,dc=com ldap_version = 3 user_attrs = pfMailMessageStore=home user_filter = (&(objectClass=PFMailAccount)(pfMail=%u)) pass_attrs = pfClearPassword=password,pfMailMessageStore=userdb_home pass_filter = (&(objectClass=PFMailAccount)(pfMail=%u)) default_pass_scheme = PLAIN user_global_uid = 5000 user_global_gid = 5000 I am using dovecot 2.1.9, postfix 2.8.5 and openldap 2.4.23 I would appreciate any help or tipps. ~ Mit freundlichem Gruß Carsten Laun-De Lellis Dipl.-Ing. Elektrotechnik Certified Information Systems Auditor (CISA) Hauptstrasse 13 D-67705 Trippstadt Phone: +49 (6306) 992140 Mobile: +49 (151) 27530865 Fax: +49 (6306) 992142 email: <mailto:carsten.delellis@delellis.net> carsten.delellis(a)delellis.net

1 0

[Dovecot] best way to activate quota
by Angel L. Mateo 14 Sep '12

14 Sep '12

Hello, I'm planning to activate quota control in dovecot, with maildir quota backend. I have about 70k users in my system directed to 4 backend servers (with a director to ensure that a user is always directed to the same server). I have tried to activate it in one of my nodes. The problem is that load of it has increase a lot, as much as the system was unusable (maildir is in nfs storage, with indexes in local disks). What do you think is the best to activate it? I have think that I could use doveadm commands to calculate an initial quota (on low load periods) and then activate quota, hoping that although quota is not correct, it would be used. Should this work?

5 9

[Dovecot] antispam_plugin prevents IMAP login (error 3) [Dovecot 2.0.19]
by dof＠projektfabrik.com 13 Sep '12

13 Sep '12

Hi everybody, trying to get the Dovecot antispam_plugin to work and I must be doing something wrong, because as soon as it is enabled with a certain backend, imap logins do not work anymore (the session is immediately closed after a successful login). Interestingly, pipe and spool2dir are working (that is, the session won't be closed), dspam-exec and crm114-exec are not. If this happens, mail_debug output is as follows: imap-login: Login: user=<dof>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=10420, secured imap: Debug: Loading modules from directory: /usr/lib/dovecot/modules imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib20_autocreate_plugin.so imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib20_fts_plugin.so imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib21_fts_squat_plugin.so imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib90_antispam_plugin.so imap(dof): Debug: Effective uid=23244, gid=8, home=/var/spool/dovecot/userdata/dof imap(dof): Debug: Home dir not found: /var/spool/dovecot/userdata/dof master: Error: service(imap): child 10420 returned error 3 Without the plugin I get: imap-login: Login: user=<dof>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=10469, secured imap: Debug: Loading modules from directory: /usr/lib/dovecot/modules imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib20_autocreate_plugin.so imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib20_fts_plugin.so imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib21_fts_squat_plugin.so imap(dof): Debug: Effective uid=23244, gid=8, home=/var/spool/dovecot/userdata/dof imap(dof): Debug: Home dir not found: /var/spool/dovecot/userdata/dof imap(dof): Debug: fs: root=/var/spool/dovecot/mail/dof, index=, control=, inbox=/var/spool/dovecot/mail/dof/INBOX, alt= imap(dof): Debug: Namespace : Using permissions from /var/spool/dovecot/mail/dof: mode=0755 gid=-1 Hopefully this is just a configuration problem. I tried the plugin in the Ubuntu repository (I'm using LTS 12.04) and even checked out the source from git and compiled it myself, but to no avail. Thanks a lot in advance and best regards, Florian ------------------- dovecot -n output: auth_cache_size = 128 k auth_cache_ttl = 20 mins auth_failure_delay = 10 secs auth_mechanisms = plain login disable_plaintext_auth = no login_greeting = Projektfabrik IMAP ready. mail_gid = mail mail_home = /var/spool/dovecot/userdata/%u mail_location = maildir:/var/spool/dovecot/mail/%u:INBOX=/var/spool/dovecot/mail/%u/INBOX:LAYOUT=fs mail_uid = dovemail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date passdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } plugin { antispam_backend = dspam-exec antispam_dspam_binary = /usr/bin/dspam antispam_signature = X-DSPAM-Signature antispam_signature_missing = error antispam_spam = Spam antispam_trash = trash;Trash;Deleted Items; Deleted Messages autocreate = INBOX/Sent Mail autocreate2 = INBOX/Spam autocreate3 = INBOX/Trash autosubscribe = INBOX/Sent Mail autosubscribe2 = INBOX/Spam autosubscribe3 = INBOX/Trash fts = squat sieve = /var/spool/dovecot/sieve/%u/defaultbc sieve_before = /etc/dovecot/sieve/spam.sieve sieve_dir = /var/spool/dovecot/sieve/%u } protocols = imap pop3 sieve service auth { unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0600 user = postfix } unix_listener auth-userdb { mode = 0600 user = dovemail } user = dovenull } service imap-login { inet_listener imap { address = localhost port = 143 } inet_listener imaps { address = localhost XX.XXX.XX.XXX port = 993 } service_count = 1 user = dovenull } service managesieve-login { inet_listener sieve { address = localhost port = 2000 } service_count = 1 user = dovenull } service pop3-login { inet_listener pop3 { address = localhost port = 110 } inet_listener pop3s { address = XX.XXX.XX.XXX port = 995 } service_count = 1 user = dovenull } ssl_ca = </etc/ssl/dovecot/cacert.pem ssl_cert = </etc/ssl/dovecot/cert.pem ssl_key = </etc/ssl/dovecot/key.pem protocol imap { imap_client_workarounds = tb-extra-mailbox-sep mail_plugins = antispam autocreate fts fts_squat } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_lock_session = yes } protocol lda { mail_fsync = optimized mail_plugins = sieve postmaster_address = postmaster(a)projektfabrik.com }

2 1

[Dovecot] cyrus2dovecot script converts mailboxes to bigger sizes
by Igor Zinovik 13 Sep '12

13 Sep '12

Hello, list. I'm asking question not directly connected with dovecot. I'm planning a migration from cyrus-imapd to dovecot and i'm using cyrus2dovecot script (by Freie Universität Berlin) to convert mailboxes of users, but i'm wondering why size of mailbox in Maildir++ is so much bigger than mailbox in cyrus format after conversion: linux-a9qw:~/ # du -sh /mnt/imap/z/user/zinovik /srv/vmail/petrsu.ru/z/zinovik/Maildir 238M /mnt/imap/z/user/zinovik 1.2G /srv/vmail/mydom.ru/z/zinovik/Maildir I was planning to implement quota for mailboxes about 1 gigabyte, but after conversion I would not be able to receive messages to my own box, because i'm overquota. I think the only way would be to set quota up to 15 GB since some of users have mailbox with 12GB after conversion, but I have no such disk capacity to allow more than 1500 users have 15GB quota. Would it be practical solution to compress all files after conversion and enable zlib support in dovecot?

1 1

[Dovecot] doveadm director map : User listing returned failure
by Ramón Frontera 13 Sep '12

13 Sep '12

Hello we are running Dovecot 2.1.9. We have 2 proxies with director and 4 mail servers. We have the user information in a LDAP. I try to do: # doveadm director map doveadm(root): Error: User listing returned failure doveadm(root): Error: user listing failed user mail server ip expire time <unknown> x.x.x.x 2012-09-12 10:52:17 <unknown> x.x.x.x 2012-09-12 10:55:53 in the dovecot log i have found: dovecot: auth: Error: Trying to iterate users, but userdbs don't support it What can I do to solve this problem? Thanks in advance. -- ------------------------------------------ Ramon Frontera Gallardo Universitat de les Illes Balears

2 1

[Dovecot] Dovecot 1.x POP3 to Dovecot 2.x POP3 mbox to Maildir best transfer program/method
by Tim E. 12 Sep '12

12 Sep '12

I have a box running Dovecot 1.x POP3 only server using mbox format. I want to port the mail over to a Centos 6.3 box running a Dovecot 2.x POP3 only server using Maildir format. The main thing I want to do is support XUID/read/unread status so the transfer is transparent for the end user. I have been able to achieve transfers from the mbox format to Maildir but loose the XUID/read/unread status so that the Thunderbird client always re-downloads all the mail as if it were new. Ive googled and I have tried the following: dsync : dovecot 1.x server is too old and doesnt support the command? mb2md.pl: transfers the mbox to maildir and creates file dovecot-uidlist but the Thunderbird client redownloads the files virtualmin copy-mailbox: transfers the mailbox to Maildir but doesnt reproduce the dovecot indexes. Any thoughts would be appreciated. I would like to produce a howto of the process when I am done.

2 6

[Dovecot] TIMO HELP! director ring wont stay connected
by Kelsey Cummings 12 Sep '12

12 Sep '12

I've had 2x director ring up and running with production load on 2.1.8 with around 10,000 active connections for two weeks and everything has been working great - until this morning. There isn't anything obvious in the logs beyond the fact that the director connections started bouncing. It was not resolved by reloads or restarts or an upgrade to 2.1.9 (only the directors.) I've dropped one of the servers out of the ring to prevent suffering but this is a less than ideal situation. Any idea what is going on? Load today is consistent with low weekend load since it is a major US holiday so this wouldn't appear to be a load related issue. auth_master_user_separator = * auth_username_format = %Ln auth_verbose = yes default_client_limit = 10000 director_mail_servers = 1.1.1.1 1.1.1.2 1.1.1.3 1.1.1.4 director_servers = a.director.foo b.director.foo disable_plaintext_auth = no doveadm_proxy_port = 1842 login_trusted_networks = 10.0.0.1 mbox_write_locks = fcntl passdb { args = /etc/dovecot/master-users driver = passwd-file master = yes pass = yes } passdb { args = proxy=y nopassword=y driver = static } service anvil { client_limit = 20103 } service auth { client_limit = 41704 } service director { fifo_listener login/proxy-notify { mode = 0666 } inet_listener { port = 9321 } unix_listener login/director { mode = 0666 } } service imap-login { executable = imap-login director process_limit = 20000 process_min_avail = 32 } service imap { process_limit = 20480 } service pop3-login { executable = pop3-login director process_limit = 20000 process_min_avail = 32 } ssl_ca = </etc/dovecot/ssl/gd_bundle.crt ssl_cert = </etc/dovecot/ssl/imap.sonic.net.crt ssl_key = </etc/dovecot/ssl/imap.sonic.net.key ssl_parameters_regenerate = 1 days syslog_facility = local0 protocol imap { ssl_ca = </etc/dovecot/ssl/gd_bundle.crt ssl_cert = </etc/dovecot/ssl/imap.sonic.net.crt ssl_key = </etc/dovecot/ssl/imap.sonic.net.key } protocol pop3 { ssl_ca = </etc/dovecot/ssl/pop.sonic.net.ca-bundle ssl_cert = </etc/dovecot/ssl/pop.sonic.net.crt ssl_key = </etc/dovecot/ssl/pop.sonic.net.key } >Sep 3 09:22:42 b.director. b dovecot: director: Error: Director 10.10.10.71:9321/right disconnected >Sep 3 09:22:45 a.director. a dovecot: director: Error: Director 10.10.10.37:9321/left disconnected >Sep 3 09:22:49 b.director. b dovecot: director: Error: Director 10.10.10.71:9321/left disconnected >Sep 3 09:22:53 b.director. b dovecot: director: Error: Director 10.10.10.71:9321/left disconnected >Sep 3 09:22:54 a.director. a dovecot: director: Error: Director 10.10.10.37:9321/left disconnected >Sep 3 09:22:59 b.director. b dovecot: director: Error: Director 10.10.10.71:9321/left disconnected >Sep 3 09:23:02 a.director. a dovecot: director: Error: Director 10.10.10.37:9321/right disconnected >Sep 3 09:23:02 a.director. a dovecot: director: Warning: director: Couldn't connect to right side, we must be the only director left >Sep 3 09:23:02 b.director. b dovecot: director: Error: Director 10.10.10.71:9321/right disconnected >Sep 3 09:23:02 b.director. b dovecot: director: Warning: director: Couldn't connect to right side, we must be the only director left >Sep 3 09:23:32 a.director. a dovecot: director: Error: director: User foo host lookup failed: Timeout - queued for 47 secs (Ring synced for 30 secs, weak user, user refreshed 47 secs ago) >Sep 3 09:23:32 a.director. a dovecot: director: Error: director: User bar host lookup failed: Timeout - queued for 38 secs (Ring synced for 30 secs, weak user, user refreshed 38 secs ago) >Sep 3 09:23:32 a.director. a dovecot: director: Error: director: User bla host lookup failed: Timeout - queued for 30 secs (Ring synced for 30 secs) >Sep 3 09:23:32 a.director. a dovecot: director: Error: director: User bla2 host lookup failed: Timeout - queued for 30 secs (Ring synced for 30 secs) >Sep 3 09:23:32 a.director. a dovecot: director: Error: Director 10.10.10.37:9321/right disconnected >Sep 3 09:23:32 a.director. a dovecot: director: Warning: director: Couldn't connect to right side, we must be the only director left >Sep 3 09:23:32 a.director. a dovecot: director: Warning: director: Couldn't connect to right side, we must be the only director left >Sep 3 09:23:32 b.director. b dovecot: director: Error: Director 10.10.10.71:9321/out disconnected before handshake finished >Sep 3 09:23:32 b.director. b dovecot: director: Warning: director: Couldn't connect to right side, we must be the only director left >Sep 3 09:24:02 b.director. b dovecot: director: Error: Director 10.10.10.71:9321/out disconnected before handshake finished >Sep 3 09:24:02 b.director. b dovecot: director: Warning: director: Couldn't connect to right side, we must be the only director left >Sep 3 09:24:05 a.director. a dovecot: director: Warning: Delaying new user requests until ring is synced >Sep 3 09:24:32 a.director. a dovecot: director: Warning: Ring is synced, continuing delayed requests >Sep 3 09:24:41 b.director. b dovecot: director: Error: Director 10.10.10.71:9321/right disconnected >Sep 3 09:24:41 b.director. b dovecot: director: Warning: director: Couldn't connect to right side, we must be the only director left >Sep 3 09:24:41 a.director. a dovecot: director: Error: Director 10.10.10.37:9321/right disconnected >Sep 3 09:24:41 a.director. a dovecot: director: Warning: director: Couldn't connect to right side, we must be the only director left >Sep 3 09:25:11 b.director. b dovecot: director: Error: User hash 2285697953 is being redirected to two hosts: 10.10.10.39 and 10.10.10.76 (old_ts=1346689481,handshaking,recv_ts=1346689467) >Sep 3 09:25:12 b.director. b dovecot: director: Error: User hash 623192092 is being redirected to two hosts: 10.10.10.76 and 10.10.10.39 (old_ts=1346689481,handshaking,recv_ts=1346689468) >Sep 3 09:25:12 b.director. b dovecot: director: Error: User hash 1683990717 is being redirected to two hosts: 10.10.10.43 and 10.10.10.76 (old_ts=1346689481,handshaking,recv_ts=1346689468) >Sep 3 09:25:12 a.director. a dovecot: director: Error: Director 10.10.10.37:9321/right disconnected >Sep 3 09:25:12 a.director. a dovecot: director: Warning: director: Couldn't connect to right side, we must be the only director lef -- Kelsey Cummings - kgc(a)corp.sonic.net sonic.net, inc. System Architect 2260 Apollo Way 707.522.1000 Santa Rosa, CA 95407

3 10

[Dovecot] Expire plugin with multiple mail servers
by Ramón Frontera 12 Sep '12

12 Sep '12

Hello we are running Dovecot 2.1.9 and I want to configure expire plugin. We have 2 proxies with director and 4 mail servers. I have configured expire plugin on a single mail server and it works Ok. I don't konw how to configure with 4 mail servers and 2 proxies. My first idea is create on each mailserver one sqlite database and configure the expire plugin on proxy, but I don't know if this is a good idea. I don't know if the database should be in one proxy, and I don't know which server has to do the "doveadm expunge" command Do you have any idea how is the best way to configure expire plugin on this scenario? Thanks in advance. -- Ramon Frontera Gallardo Universitat de les Illes Balears

3 3

[Dovecot] dovecot/log not running
by Mark Hinch 12 Sep '12

12 Sep '12

I'm running 2.1.7 as downloaded/installed by Debian (and then appropriately setup for my config, ...). It almost works. I can send/receive email from thunderbird, squirrelmail, ... However there are two anomalies: 1. dovecot/log is not running. After restarting dovecot (and waiting 30 seconds), I have this in the log files: Sep 6 17:42:16 hinch4 dovecot: master: Dovecot v2.1.7 starting up (core dumps disabled) Sep 6 17:42:56 hinch4 dovecot: master: Error: service(anvil): Initial status notification not received in 30 seconds, killing the process Sep 6 17:42:56 hinch4 dovecot: master: Error: service(log): Initial status notification not received in 30 seconds, killing the process Sep 6 17:42:56 hinch4 dovecot: master: Error: service(ssl-params): Initial status notification not received in 30 seconds, killing the process Sep 6 17:42:56 hinch4 dovecot: master: Error: service(log): child 31286 killed with signal 9 After 30 seconds, a "ps -ef | grep dovecot" yields: dovenull 1858 20223 0 18:56 ? 00:00:00 dovecot/imap-login root 1859 20223 0 18:56 ? 00:00:00 dovecot/auth -w mhinch 1860 20223 0 18:56 ? 00:00:00 dovecot/imap root 1862 14520 0 18:56 pts/3 00:00:00 grep dovecot root 20223 1 0 18:54 ? 00:00:00 /usr/sbin/dovecot -c /etc/dovecot/dovecot.conf dovenull 25144 20223 0 18:55 ? 00:00:00 dovecot/imap-login dovecot 25147 20223 0 18:55 ? 00:00:00 dovecot/anvil root 25148 20223 0 18:55 ? 00:00:00 dovecot/config dovecot 25161 20223 0 18:55 ? 00:00:00 dovecot/auth root 25174 20223 0 18:55 ? 00:00:00 dovecot/ssl-params mhinch 25208 20223 0 18:55 ? 00:00:00 dovecot/imap Seems like everything is there except dovecot/log. ssl-params and anvil came back (?!?). A "doveadm log find" dumps this in the log: Sep 6 18:52:24 hinch4 dovecot: doveadm: Debug: This is Dovecot's debug log (1346975543) Sep 6 18:52:24 hinch4 dovecot: doveadm: This is Dovecot's info log (1346975543) Sep 6 18:52:24 hinch4 dovecot: doveadm: Warning: This is Dovecot's warning log (1346975543) Sep 6 18:52:24 hinch4 dovecot: doveadm: Error: This is Dovecot's error log (1346975543) Sep 6 18:52:24 hinch4 dovecot: doveadm: Fatal: This is Dovecot's fatal log (1346975543) However, further debugging that I try to do (see next problem) does not result in ANY further input to the log files, even though I have all known logging turned on. So I *think* that logging is not actually running. If I can get that started, then I'll take a crack at the next problem myself ... 2. However, as long as I have your attention, my next problem is that it seems like dovecot/imap-login hangs(?). After a few hours, I have something like: # ps -ef | grep dovecot dovecot 530 31186 0 18:49 ? 00:00:00 dovecot/auth root 13277 31186 0 17:47 ? 00:00:00 dovecot/config dovenull 13664 31186 0 18:44 ? 00:00:00 dovecot/imap-login root 20207 14520 0 18:54 pts/3 00:00:00 grep dovecot dovenull 27599 31186 0 18:45 ? 00:00:00 dovecot/imap-login dovenull 27601 31186 0 18:45 ? 00:00:00 dovecot/imap-login dovenull 27603 31186 0 18:45 ? 00:00:00 dovecot/imap-login dovenull 27607 31186 0 18:45 ? 00:00:00 dovecot/imap-login root 31186 1 0 17:42 ? 00:00:00 /usr/sbin/dovecot -c /etc/dovecot/dovecot.conf dovecot 31289 31186 0 17:42 ? 00:00:00 dovecot/anvil with exactly 100 imap-login processes. I'm the only meaningful user on the machine (unless somebody is imap DoS-ing me), so this does not make much sense. Obviously thunderbird is polling the machine and each time is leaving around a imap-log process. As far as I can tell, thunderbird successfully logs in (i.e., I get mail) though I can't be sure whether these are successful logins or not (no logging!). What hangs imap-log processes for hours at a time? After a while of course, dovecot will not start any new imap-login processes so Thunderbird cannot get any more mail until I restart dovecot. Then everything is OK for another 12 hours or so. Ideas on either problem? -Mark

3 3

[Dovecot] Found bug on doing IMAP search with UTF8 chars
by Weinreich, Nico 12 Sep '12

12 Sep '12

Hi! I'm using Roundcube 0.9git as mail frontend and have installed Dovecot 2.1.7 on Debian Squeeze. When searching for mail via Roundcube and the keyword contains "special" chars (like german umlauts), then Dovecot seems to die when the folder does not contain a message which contains this keyword, i.e. folder contains message /w subject "Dies ist eine Nachricht" => search for "Nachricht" => Roundcube shows that messages folder contains message /w subject "Dies ist eine Nachricht" => search for "Nachricht123" => Roundcube shows error that no messages where found folder contains message /w subject "Auflösung der Frage" => search for "Lösung" => Roundcube shows that messages folder contains message /w subject "Auflösung der Frage" => search for "Lösung123" => Roundcube shows error saying: "Connection to storage server failed" Looking into /var/log/mail.log shows: Sep 5 11:43:32 mail dovecot: imap(abc(a)def.de): Panic: search key not utf8: L.sung123 dsr_sub_allocation Sep 5 11:43:32 mail dovecot: imap(abc(a)def.de): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x4478a) [0 x7f065ba8e78a] -> /usr/lib/dovecot/libdovecot.so.0(+0x447d6) [0x7f065ba8e7d6] -> /usr/lib/dovecot/libdovecot.so.0(i_error+0) [0x7f065ba655ef ] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x9a3cb) [0x7f065bd6f3cb] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x9a8aa) [0x7f065bd6f8 aa] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x78641) [0x7f065bd4d641] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_search_args_fore ach+0x3c) [0x7f065bd4d7bc] -> /usr/lib/dovecot/libdovecot.so.0(message_parse_header+0x29) [0x7f065ba78eb9] -> /usr/lib/dovecot/libdovecot-st orage.so.0(+0x9a0cf) [0x7f065bd6f0cf] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x9b160) [0x7f065bd70160] -> /usr/lib/dovecot/libdovecot- storage.so.0(index_storage_search_next_nonblock+0x48) [0x7f065bd706e8] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_search_next_nonbl ock+0x27) [0x7f065bd51a07] -> dovecot/imap() [0x41668f] -> dovecot/imap(imap_search_start+0xd8) [0x416ad8] -> dovecot/imap(cmd_sort+0x1e6) [ 0x40e636] -> dovecot/imap(command_exec+0x3d) [0x41157d] -> dovecot/imap() [0x4104fe] -> dovecot/imap(client_handle_input+0x135) [0x410805] - > dovecot/imap(client_input+0x5f) [0x41112f] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7f065ba9a926] -> /usr/lib/dovecot/ libdovecot.so.0(io_loop_handler_run+0x9f) [0x7f065ba9b95f] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7f065ba9a8c8] -> /usr/li b/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f065ba87053] -> dovecot/imap(main+0x2a4) [0x419354] -> /lib/libc.so.6(__libc_start_ma in+0xfd) [0x7f065b706c8d] -> dovecot/imap() [0x408e79] Huh? This error only occurs when I search for a keyword, that contains probably non-ASCII-US chars (like umlauts, euro sign EUR ...) and no message was found in that folder. When there is any message which contains this keyword, then Roundcube is fine and there error above cannot be found in mail.log. Can anybody confirm this behaviour? Regards

3 10

[Dovecot] Resynchronization of indexes (or Warning: Maildir Scanning <dir> took <X> seconds)
by Angel L. Mateo 12 Sep '12

12 Sep '12

Hello, We have a dovecot servers farm with storage in NFS and indexes in local files. Under heavy load conditions we a log of messages in the form: Sep 3 12:35:49 myotis32 dovecot: imap(<imapuser>): Warning: Maildir: Scanning <maildir cur directory> took 62 seconds (9516 readdir()s, 0 rename()s to cur/, why=0x80) We have check that messages are directed with lmtp to the same server the user (scenario 3 at http://wiki2.dovecot.org/NFS with director in front of backend servers). So my question is why is dovecot using these readdirs operations? why it is scanning the whole cur directory of the user? I guess this is an index resynchronization, but I don't know could it be the cause. PS: I have attached my dovecot -n output

2 4

[Dovecot] dsync issue: "Server sent invalid input: Error parsing input: Unexpected ')'"
by Gábor Lénárt 12 Sep '12

12 Sep '12

Hi, I'm trying to use dsync (dovecot version 2.1.9) for IMAP only per-user migration from other IMAP servers to my shiny new one. One worked quite well, but there is a problem with an old IMAP server: dsync(migtest@office): Debug: imapc(imap-sunw-old.servers.intra:143): Looking up IP address dsync(migtest@office): Debug: imapc(imap-sunw-old.servers.intra:143): Connecting to 192.168.10.100:143 dsync(migtest@office): Error: imapc(imap-sunw-old.servers.intra:143): Server sent invalid input: Error parsing input: Unexpected ')' dsync(migtest@office): Debug: imapc(imap-sunw-old.servers.intra:143): Disconnected dsync(migtest@office): Error: imapc: Command failed: Disconnected from server dsync(migtest@office): Error: user migtest@office: Initialization failed: Initializing mail storage from mail_location setting failed: imapc: LIST failed: Internal error occurred. Refer to server log for more information. [2012-09-10 11:49:02] dsync(migtest@office): Fatal: User init failed What can cause this? "By hand" test with telnet'ing says: dovecot-test:~$ telnet imap-sunw-old.servers.intra 143 Trying 192.168.10.100... Connected to imap-sunw-old.servers.intra. Escape character is '^]'. * OK [CAPABILITY IMAP4 IMAP4rev1 ACL QUOTA LITERAL+ NAMESPACE UIDPLUS CHILDREN BINARY UNSELECT SORT LANGUAGE XSENDER X-NETSCAPE XSERVERINFO X-SUN-SORT X-SUN-IMAP X-ANNOTATEMORE X-UNAUTHENTICATE XUM1 AUTH=PLAIN] imap-sunw-old.servers.intra IMAP4 service (Sun Java(tm) System Messaging Server 6.3-5.02 (built Oct 12 2007; 32bit)) (this is one line of course) Is it possible that the problem about ')' is caused by this line? Or is it tottaly different issue? I just think this, because the the major difference between this and the working server on migration is to have ')' and '(' at the imap "greeting", the working server does not have those, and the error message is about something with ')'. The command was the following (no configuration in dovecot for this, only this command is given at shell level - currently mainly for testing if it works or not); doveadm -D -v -o imapc_features=rfc822.size \ -o imapc_host=192.168.10.100 \ -o imapc_user=migtest@office -o imapc_password=SECRET backup -R -f \ -u migtest@office imapc: This was OK with a dovecot v1 as the "source" (as I've written) but has the problem I've desribed with that "old" sun messaging server as the source. I've also used tcpdump then wireshark's "follow TCP stream" on it: the communication seems to be just that "greeting" line, then my (target) dovecot sends FIN. That "old" server works otherwise since years with various IMAP clients. The log of my server does not contain too much just the db lookups, which works nicely (the same for working and non-working source IMAP servers): Sep 10 11:49:02 dovecot-test dovecot: auth: Debug: prefetch(migtest@office): passdb didn't return userdb entries, trying the next userdb Sep 10 11:49:02 dovecot-test dovecot: auth: Debug: ldap(migtest@office): user search: base=cn=mail,dc=office,dc=intra scope=subtree filter=(&(objectClass=mailUser)(uid=migtest@office)) fields=uid Sep 10 11:49:02 dovecot-test dovecot: auth: Debug: ldap(migtest@office): result: uid=migtest@office Any help is welcome, - Gábor

2 2

[Dovecot] [PATCH] Generalize HMAC implementation
by Florian Zeitz 11 Sep '12

11 Sep '12

Hello everyone and Timo in particular, about a year ago I implemented a SHA-1 variant of the HMAC(-MD5) present in Dovecot. I had always disliked this a bit, because it replicates a lot of code. This patch generalizes the HMAC function to take a hash_method struct as parameter, and changes existing code which uses the "old" HMAC function to use this new one. I'm not really sure this is actually a good idea, but I still felt I should provide the code in case you would want to merge it upstream. Attached is the patch as a hg export based on the revision of dovecot-2.2 current at the time of writing. Regards, Florian Zeitz

2 2

[Dovecot] FTS indexing
by Ralf Hildebrandt 11 Sep '12

11 Sep '12

I'm reacreating all FTS indices on all my users' INBOX folders: mkdir ~%s/Maildir/lucene-indexes && chown %s:users ~%s/Maildir/lucene-indexes doveadm index -u %s -q INBOX In "ps auxwww" I'm seeing this: tbudkevy 29186 3.7 0.0 6616 3056 ? S 18:11 0:15 dovecot/indexer-worker [tschuetz INBOX] how can a dovecot/indexer-worker actually access the INBOX of the user "tschuetz" (where "tbudkevy" doesn't have access, due to the different UID)...? Should ~%s/Maildir/lucene-indexes be filled after having run the command sequence for all users? -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebrandt(a)charite.de | http://www.charite.de

2 5

[Dovecot] Quota less mailbox with mdbox
by Héctor Moreno Blanco 11 Sep '12

11 Sep '12

Good morning everyone, I have a little doubt about setting a quotaless mailbox with mdbox. Currently we have dovecot 2.0.10 with Maildir as mailbox system. We want to migrate to mdbox. The migration is simple and easy, but there are some configuration settings we cannot set to work properly. In our dovecot with Maildir we have the namespace INBOX with certain quota and another one without quota. This is working like a charm. Dovecot.conf: ... namespace { separator = . prefix = inbox = yes type = private } namespace { inbox = no location = prefix = INBOX. separator = . hidden = yes type = private list = no } namespace { location = maildir:%h/Maildir/_backup prefix = _backup. separator = . type = private } ... plugin/quota = maildir:_backup:ns= ... Dovecot-ldap.conf: ... pass_filter = (&(objectClass=qmailUser)(uid=%u)(accountActive=TRUE)) pass_attrs = uid=user,userPassword=password, mailQuotaSize=quota_rule=*:bytes=%$ user_attrs = mailMessageStore=home, mailQuotaSize=quota_rule=*:bytes=%$ user_filter = (&(objectClass=qmailUser)(|(mailAlternateAddress=%u)(mail=%u)(uid=%u))(accountActive=TRUE)) ... When migrated to mdbox and changing the configuration, we don't know how to get it work. We have also tried to follow the instructions from the wiki of dovecot2 without success. Could anyone give us a clue please? If additional information is needed, please let me know. Thank you very much in advanced. Kind regards. ________________________________ [Descripción: C:\Documents and Settings\hhmb\Datos de programa\Microsoft\Firmas\logo_gmv.gif] Héctor Moreno Blanco División de Seguridad e Infraestructuras / Security and Infrastructures Division GMV Isaac Newton, 11 P.T.M. Tres Cantos E-28760 Madrid Tel. +34 91 807 21 00 Fax +34 91 807 21 99 www.gmv.com <http://www.gmv.com/> [Descripción: C:\Documents and Settings\hhmb\Datos de programa\Microsoft\Firmas\icon_blog.gif]<http://www.gmv.com/b2_gmv> [Descripción: C:\Documents and Settings\hhmb\Datos de programa\Microsoft\Firmas\icon_facebook.gif]<http://www.facebook.com/infoGMV> [Descripción: C:\Documents and Settings\hhmb\Datos de programa\Microsoft\Firmas\icon_twitter.gif]<http://www.twitter.com/infoGMV_es> [Descripción: C:\Documents and Settings\hhmb\Datos de programa\Microsoft\Firmas\icon_youtube.gif]<http://www.youtube.com/infoGMV> P Please consider the environment before printing this e-mail. ______________________ This message including any attachments may contain confidential information, according to our Information Security Management System, and intended solely for a specific individual to whom they are addressed. Any unauthorised copy, disclosure or distribution of this message is strictly forbidden. If you have received this transmission in error, please notify the sender immediately and delete it. ______________________ Este mensaje, y en su caso, cualquier fichero anexo al mismo, puede contener informacion clasificada por su emisor como confidencial en el marco de su Sistema de Gestion de Seguridad de la Informacion siendo para uso exclusivo del destinatario, quedando prohibida su divulgacion copia o distribucion a terceros sin la autorizacion expresa del remitente. Si Vd. ha recibido este mensaje erroneamente, se ruega lo notifique al remitente y proceda a su borrado. Gracias por su colaboracion. ______________________

3 2

[Dovecot] Memory leak by getting the virtual size of a IMAP folder
by Dafan Zhai 11 Sep '12

11 Sep '12

Hi everyone, I am writing a dovecot statistic plugin, which calls the 'mailbox_get_metadata' function with MAILBOX_METADATA_VIRTUAL_SIZE as the 2nd parameter. enum mailbox_status_items metadata_items = MAILBOX_METADATA_VIRTUAL_SIZE; struct mailbox_metadata metadata; mailbox_get_metadata(mailbox, metadata_items, &metadata); but Valgrind finds a memory leak when this function is called: ---------------------------------------------------snip-------------------------------------------------------------- ==10304== 12,288 bytes in 3 blocks are definitely lost in loss record 74 of 76 ==10304== at 0x40222A4: calloc (in /usr/lib/valgrind/vgpreload_memcheck-x86-linux.so) ==10304== by 0x416EE9F: block_alloc (mempool-alloconly.c:237) ==10304== by 0x416F16C: pool_alloconly_create (mempool-alloconly.c:140) ==10304== by 0x409C07D: mail_search_build_init (mail-search-build.c:187) ==10304== by 0x40C77F1: index_mailbox_get_metadata (index-status.c:200) ==10304== by 0x4067102: maildir_mailbox_get_metadata (maildir-storage.c:486) ==10304== by 0x409F78B: mailbox_get_metadata (mail-storage.c:1298) ==10304== by 0x490492D: mailbox_status_update (statistic-plugin.c:310) ==10304== by 0x4904E2E: statistic_mail_save (statistic-plugin.c:426) ==10304== by 0x41A054D: notify_contexts_mail_save (notify-plugin.c:61) ==10304== by 0x41A104F: notify_save_finish (notify-storage.c:143) ==10304== by 0x409EE94: mailbox_save_finish (mail-storage.c:1673) ---------------------------------------------------snip-------------------------------------------------------------- I have looked into the source code, and found that from the 'mail_search_build_init' function call in lib-storage/index/index-status.c:200 a pool is created, but the pool is not freed in the mailbox_search_deinit function call in lib-storage/index/index-status.c:218. This may be the reason of the memory leak. But I do not know how to free the pool. It seems to me that doveadm is having the same memory leak because it is using 'mail_search_build_init' too. ---------------------------------------------------snip-------------------------------------------------------------- # valgrind --leak-check=full doveadm mailbox status -u testuser1 vsize INBOX ==10457== Memcheck, a memory error detector ==10457== Copyright (C) 2002-2010, and GNU GPL'd, by Julian Seward et al. ==10457== Using Valgrind-3.6.1 and LibVEX; rerun with -h for copyright info ==10457== Command: doveadm mailbox status -u testuser1 vsize INBOX ==10457== INBOX vsize=41643319 ==10457== ==10457== HEAP SUMMARY: ==10457== in use at exit: 4,356 bytes in 3 blocks ==10457== total heap usage: 440 allocs, 437 frees, 539,124 bytes allocated ==10457== ==10457== 4,096 bytes in 1 blocks are definitely lost in loss record 3 of 3 ==10457== at 0x40222A4: calloc (in /usr/lib/valgrind/vgpreload_memcheck-x86-linux.so) ==10457== by 0x41AEE9F: ??? (in /usr/lib/dovecot/libdovecot.so.0.0.0) ==10457== by 0x41AF16C: pool_alloconly_create (in /usr/lib/dovecot/libdovecot.so.0.0.0) ==10457== by 0x40DC07D: mail_search_build_init (in /usr/lib/dovecot/libdovecot-storage.so.0.0.0) ==10457== by 0x8057EB8: doveadm_mail_mailbox_search_args_build (in /usr/bin/doveadm) ==10457== by 0x805855A: ??? (in /usr/bin/doveadm) ==10457== by 0x8053A7B: doveadm_mail_single_user (in /usr/bin/doveadm) ==10457== by 0x8053D2B: ??? (in /usr/bin/doveadm) ==10457== by 0x80541CF: doveadm_mail_try_run (in /usr/bin/doveadm) ==10457== by 0x805B863: main (in /usr/bin/doveadm) ==10457== ==10457== LEAK SUMMARY: ==10457== definitely lost: 4,096 bytes in 1 blocks ==10457== indirectly lost: 0 bytes in 0 blocks ==10457== possibly lost: 0 bytes in 0 blocks ==10457== still reachable: 260 bytes in 2 blocks ==10457== suppressed: 0 bytes in 0 blocks ==10457== Reachable blocks (those to which a pointer was found) are not shown. ==10457== To see them, rerun with: --leak-check=full --show-reachable=yes ==10457== ==10457== For counts of detected and suppressed errors, rerun with: -v ==10457== ERROR SUMMARY: 1 errors from 1 contexts (suppressed: 122 from 35) ---------------------------------------------------snip-------------------------------------------------------------- Dovecot version: 2.1.9 OS: Linux 3.0.30-dist i686 maildir:~/Maildir:LAYOUT=fs:INBOX=~/Maildir/INBOX I have applied the following patches from the dovecot 2.1 branch fixing memory leaks: http://hg.dovecot.org/dovecot-2.1/rev/7bdbca7b0913 http://hg.dovecot.org/dovecot-2.1/rev/963482677c0b It would be nice if you could give me some hints how I can address this issue? Thanks in advance! Greetings, Dafan

2 2

[Dovecot] dovecot proxy ssl-parameter from database?
by Daniel Funke 11 Sep '12

11 Sep '12

Hi List, I want to migrate my IMAP-users from an old Courier-IMAP-Server to a new dovecot-Server. The old server supports IMAP without and with TLS. The new one only with TLS. To users should be migrated one by one with changing some client parameters. To leave the servername of the imap server I want to use the dovecot proxy during migration. the proxy uses a sql db to look for the old or new host for every user. So far all works fine. My question is the TLS or noTLS connection from the client to the proxy. How can I make the ssl-parameter user-dependant? clients to the old courier server should work without or with tls through the proxy and clients to the new dovecot server should only work WITH TLS between Client and proxy. (After migration of all clients the proxy should be switched off an all clients connect directly to the dovecot server.) I tried with http://wiki2.dovecot.org/UserDatabase/ExtraFields and returned a field "userdb_ssl" ("required" for host dovecot, "yes" for host courier). But it doesn't work. A migrated user can still login without tls to the proxy and the dovecot backend. Any ideas? Daniel Here is my doveconf -n # 2.1.9: /opt/dovecot/etc/dovecot/dovecot.conf doveconf: Warning: service anvil { client_limit=1000 } is lower than required under max. load (1503) # OS: Linux 2.6.32-279.2.1.el6.x86_64 x86_64 CentOS release 6.3 (Final) auth_mechanisms = plain login default_process_limit = 500 disable_plaintext_auth = no listen = * managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /opt/dovecot/etc/dovecot/sql.conf driver = sql } protocols = imap pop3 service imap-login { inet_listener imaps { port = 0 } } service pop3-login { inet_listener pop3s { port = 0 } } ssl_cert = </etc/pki/tls/certs/server.crt ssl_key = </etc/pki/tls/private/server.key userdb { driver = prefetch } verbose_proctitle = yes

2 1

[Dovecot] Alerts when process limits are met
by David Anderson 11 Sep '12

11 Sep '12

Hi, I've not found the answer to this question anywhere - please forgive me if I overlooked. I'd like to be able to be automatically alerted if process limits are hit (e.g. max POP3 logins). Is there a way that I can configure a script to be run, in the same way that I can with quota warnings? I can of course use logwatch, but this alerts me the next day, and logwatch can be noisy and it's easy to overlook. My motivation: for some reason my POP3 listener was hanging, and I had to restart dovecot (this is 2.0.9). But I was not aware - the process was still there, it was accepting connections (but not doing anything useful with them) and was actually managing to log the fact that the process limit was being hit (as more and more connections came in). If I could have been alerted I could have restarted dovecot earlier. Many thanks, David -- WordShell - WordPress fast from the CLI - www.wordshell.net

3 2

[Dovecot] ACL MySQL dict: to_user==from_user entries
by Roland Rosenfeld 11 Sep '12

11 Sep '12

Hi! We run dovecot 2.1.6 with ACL support and MySQL dict for shared/shared-boxes/user/$to/$from. When a user does a SETACL (via IMAP) to himself he is added as $to and $from to the MySQL dict. Se for example this IMAP conversation: 5 GETACL INBOX * ACL "INBOX" "user@domain" lrwstipekxacd 5 OK Getacl completed. 6 SETACL INBOX user@domain lrwstipekxacd 6 OK Setacl complete. 7 GETACL INBOX * ACL "INBOX" "user@domain" akxeilprwtscd 7 OK Getacl completed. As you can see, user@domain sets the ACL of his INBOX to the same value it was set before (reading it from the server after this idempotent write changed the order but none of the flags). But after "SETACL INBOX user@domain lrwstipekxacd" I see a new entry in my imap_acl_shares table where to_user and from_user both contain the value "user@domain". As far as I can see, this entry does not make much sense in the database, because every user should be able so see its own folders. But adding this line may blow up the database especially according to the full table scan problem for acl dict rebuild mentioned in http://www.dovecot.org/list/dovecot/2012-August/067548.html. Does it make sense to run a daily cron job, that removes all entries with from_user=to_user or may this cause other inconsistencies? If you need to have a look at my complete setup, it's in http://www.dovecot.org/list/dovecot/2012-July/067130.html, so I don't have to clone this here. Tschoeeee Roland

2 1

[Dovecot] imap_idle_notify_interval
by Andreas Meyer 11 Sep '12

11 Sep '12

Hi! I want to change the imap_idle_notify_interval t0 29 minutes and have edited the 20-imap.conf with imap_idle_notify_interval = 29 mins and restarted the server. doveconf -n shows me this: .... protocol imap { imap_idle_notify_interval = 29 mins mail_max_userip_connections = 10 mail_plugins = " quota imap_quota autocreate" } .... doveconf |grep idle shows me the following output: default_idle_kill = 1 mins imap_idle_notify_interval = 2 mins mailbox_idle_check_interval = 30 secs idle_kill = 0 idle_kill = 4294967295 secs idle_kill = 0 idle_kill = 0 idle_kill = 0 idle_kill = 0 idle_kill = 4294967295 secs idle_kill = 0 idle_kill = 0 idle_kill = 0 idle_kill = 0 idle_kill = 0 idle_kill = 0 idle_kill = 0 idle_kill = 0 idle_kill = 4294967295 secs idle_kill = 0 idle_kill = 0 idle_kill = 0 idle_kill = 0 idle_kill = 4294967295 secs idle_kill = 0 idle_kill = 4294967295 secs imap_idle_notify_interval = 29 mins I see two line of imap_idle_notify_interval. What is the right one? Greetings Andreas

2 2

[Dovecot] Is it possible to save only some messages compressed to mdbox? (2.1.6)
by Jost Krieger 11 Sep '12

11 Sep '12

I'm trying to save some messages as compressed (via zlib plugin) and it doesn't seem to work. Here's a log line (I'm logging to stderr): d k 1345467448.705591500 1345467448.705596500 1345467448.974808500 1650 <XXXXXXXXXXXXXXXXXXXXXXXXXX(a)YYY.ruhr-uni-bochum.de> local.jost.krieger+hirn(a)ruhr-uni-bochum.de 10909 80 Extra: -o plugin/zlib_save_level=9 -o plugin/zlib_save=bz2 lda(kriegjcb): Info: msgid=<20120820125728.58CC9172B6C(a)c2-4-7.noc.ruhr-uni-bochum.de>: saved mail to Hirn-2012-08 did 0+0+1 This probably doesn't make much sense to anyone except the last line but 1. It is a somewhat complicated qmail/maildrop/dovecot setup, which works for the standard cases. The Extra gets interpolated into the lda command and this works because an incorrect option blows up the delivery. The mails arrive uncompressed. So here's the questions: 1. Is it possible to have compressed/uncompressed mails mixed in an mdbox? 2. Will it work via "-o" in lda delivery? I tried to find out in the source but found it hard to see which options are pulled in when. Thanks Jost Krieger -- | Helft Spam ausrotten! HTML in Mail ist unhöflich. | | Postmaster, JAPH, manchmal Wahrsager am RZ der RUB | | Wahre Worte sind nicht gefällig, gefällige Worte sind nicht wahr.| | Lao Tse, Tao Te King 81 |

2 2

Re: [Dovecot] ChgrpNoPerm issue
by Joseph Tam 11 Sep '12

11 Sep '12

Robert JR <roundcube222(a)alaadin.org> writes: > The problem is /var/mail (Owner is > useraccount and the group us mail) , and here comes the problem > Dovecot > keeps trying to chown the imap folder inside the homedirectory with > user:mail account and since > And this is the reason of error that appears > in my log file. Dovecot is trying to keep the permission of your index caches consistent with that of your mailbox it indexes. The INBOX index cache is kept in your user's mail directory (as per your default settings), although you can change that location. > The option mail_access_groups=mail solve the problem.. > but I read it is not secure.. > With my current configutation, users login > with imap to read mail , can they use > any the mail_access_groups=mail > and read other poeple mail ? Yes, that's the security problem. > does my configutation > is a shard mailbox > and could be unsecure.. Could not parse your question/comment. > why didnot have > this issue with uw-imapd? and why dovecot try to chown the .imap > folder > with the mail group ? uw-imapd was not as picky. The extra consideration for group ownership is so that shared access to mailbox files, and their associated index caches, remain consistent. For example, if you shared a mailbox among your colleagues in group "staff" and the mailbox has group=staff,perm=g+rw, then the index caches will inherit those permissions, and members of group staff can access mailbox and indices alike. [You later write ...] > Sep 9 11:22:30 dovecot: pop3(r): Error: > fchown(/home/r/.imap/INBOX/dovecot.index.log.newlock, -1, 12(mail)) > failed: Operation not permitted (egid=501(r), group based on > /var/mail/r) > > i know that chmod 0600 /var/mail , will solve the problem > and i will no longer receive the above errors again You also have to make sure that autocreated INBOXs (i.e. a brand new account) does not start out with anything other than 0600. You may have to use dovecot's LDA or twist your LDA's arm to create mailboxes that way. I guess you can also avoid these errors by using memory indices, but you forego the advantages of persistent indices. > But my question is > that incase i did not set chmod /var/mail 0600, can i ignore such > errors, is these errors harmful ? if this errors keep coming and i > ignored them would this cause mbx corruption .. please advise No, you can't ignore these errors. They will break IMAP access to those mailboxes (as you will find out). Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] precise reading of plugin deleted to trash
by ml 10 Sep '12

10 Sep '12

hello timo and other dev after a precise reading of plugin deleted to trash it appears to me like things more varariables are declared NULL in the code. it appears to me as being possible to achieve actions even if messages with the same id appears several times in different INBOX when it is the exact order of things -- http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC2626742 gpg --keyserver pgp.mit.edu --recv-key C2626742 http://about.me/fakessh http://urlshort.eu fakessh @ http://gplus.to/sshfake http://gplus.to/sshswilting http://gplus.to/john.swilting https://lists.fakessh.eu/mailman/ This list is moderated by me, but all applications will be accepted provided they receive a note of presentation

1 0