- dovecot - dovecot.org

Re: [Dovecot] Dovecot for POP3S proxying
by Gilles Albusac 09 May '12

09 May '12

Dovecot is installed but actually I just use auth module (for postfix authentication). In your dovecot.conf example, I don't see the "proxy" command ? Could you give me a few more details on the "proxy" command usage (ExtraFields/Proxy is not clear for me)? Regards -----Message d'origine----- From: David Jonas Sent: Thursday, May 03, 2012 8:04 PM To: Gilles Albusac Subject: Re: [Dovecot] Dovecot for POP3S proxying On Thu May 3 05:14:40 2012, Gilles Albusac wrote: > Dovecot is already installed in my architecture and I just would like > to know how to configure Dovecot for POP3S proxying with authentication. > > For security reasons I prefer to install as little as possible binary > (see vulnerability 2011 - remote exploit - STUNNEL). If you already have dovecot running in proxy mode it's easy to add pop3s. If not, see http://wiki2.dovecot.org/PasswordDatabase/ExtraFields/Proxy See http://wiki2.dovecot.org/Services search the page for pop3s. A simple example: ssl = yes ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/dovecot.pem service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } Of course there is a lot more SSL tuning that can be done: http://wiki2.dovecot.org/SSL/DovecotConfiguration > -----Message d'origine----- From: David Jonas > Sent: Wednesday, May 02, 2012 10:29 PM > To: Gilles Albusac > Cc: dovecot(a)dovecot.org > Subject: Re: [Dovecot] Dovecot for POP3S proxying > > On Wed May 2 06:41:00 2012, Gilles Albusac wrote: >> I would like to configure Dovecot for POP3S proxying all users from >> the Internet to the internal Exchange Mail Server. > > Unless I'm missing something with your request, you don't need dovecot. > Any ssl proxy can do that for you, such as stunnel > (http://www.stunnel.org/) We use the hardware ssl termination on our > load balancers for pop3s, imaps, and smtps.

3 4

[Dovecot] IMAP NOTIFY extension
by ashley willis 09 May '12

09 May '12

your work on NOTIFY was brought to my attention, and I see it hasn't been changed in two months, a week after you announced it. a few users and some mail admins have been wanting something like this for k9 mail, which I help develop. what is the current status? is it worth installing and starting work in getting k9 to support it yet? I'd offer help on your end, but I just know java and perl. c code usually confuses me (i keep meaning to learn, but...). thanks! -ashley -- Sent from my Android phone with K-9 Mail. Please excuse my brevity.

2 1

Re: [Dovecot] [exim] Exim / Dovecot and AUTH LOGIN
by Frank Elsner 08 May '12

08 May '12

On Tue, 08 May 2012 19:47:39 +0200 Jonas Eckerman wrote: > On 2012-05-08 15:22, Frank Elsner wrote: > > [About exim authenticating PLAIN and LOGIN against dovecot auth socket] > > > PLAIN Authentication works perfect, LOGIN gives > > > 2012-05-08 15:08:43 login authenticator failed for xxxxxx.tu-berlin.de [130.149.X.YY]: 435 Unable to authenticate at present: authentication socket protocol error > > This is just a guess since I'm not too good at dovecot, but could it be > that you need to set at least "auth_mechanisms = plain login" your in > dovecot config? Yeah, that was it! You made my day! --Frank Elsner

1 0

[Dovecot] [+]: Exim / Dovecot and AUTH LOGIN
by Frank Elsner 08 May '12

08 May '12

On Tue, 8 May 2012 15:22:11 +0200 Frank Elsner wrote: > > Hi to both adressed mailing lists, > > I followed the instructions in http://wiki2.dovecot.org/HowTo/EximAndDovecotSASL Forgot to mention the versions :-( exim 4.77 dovecot 2.1.6 self compiled under Fedora 14. --Frank Elsner

1 0

[Dovecot] dovecot smtp authentication with sendmail
by Hadi Salem 08 May '12

08 May '12

Hi, It’s possible to use sasl dovecot smtp authentication with sendmail ? Hadi.Salem

4 3

[Dovecot] Exim / Dovecot and AUTH LOGIN
by Frank Elsner 08 May '12

08 May '12

Hi to both adressed mailing lists, I followed the instructions in http://wiki2.dovecot.org/HowTo/EximAndDovecotSASL exim.conf: | plain: | driver = dovecot | public_name = PLAIN | server_socket = /var/run/dovecot/auth-client | server_set_id = $auth1 | | login: | driver = dovecot | public_name = LOGIN | server_socket = /var/run/dovecot/auth-client | server_set_id = $auth1 10-master.conf for dovecot: | service auth { | # auth_socket_path points to this userdb socket by default. It's typically | # used by dovecot-lda, doveadm, possibly imap process, etc. Its default | # permissions make it readable only by root, but you may need to relax these | # permissions. Users that have access to this socket are able to get a list | # of all usernames and get results of everyone's userdb lookups. | # unix_listener auth-userdb { | #mode = 0600 | #user = | #group = | # } | | # Exim SMTP AUTH | unix_listener auth-client { | mode = 0660 | user = exim | group = exim | } PLAIN Authentication works perfect, LOGIN gives 2012-05-08 15:08:43 login authenticator failed for xxxxxx.tu-berlin.de [130.149.X.YY]: 435 Unable to authenticate at present: authentication socket protocol error Where is the problem? Kind regards, Frank Elsner

1 0

Re: [Dovecot] Shared namespace
by Daniel L. Miller 08 May '12

08 May '12

On 5/7/2012 6:46 AM, Daniel L. Miller wrote: > On 5/6/2012 8:34 PM, Daniel L. Miller wrote: >> I'm not sure what's triggered it - I THINK it has something to do >> with a force-resync, but not sure. >> >> I'm no longer viewing my full list of shared mailboxes. I used to >> have a number of users shown - they had all had their ACL's set >> individually and were shown in the list. "doveadm acl debug" shows >> they SHOULD be shown - at least I think so, as the output for the >> mailboxes that DO appear is identical for those that don't. >> >> Where should I look for breakage? > > After upgrading to 2.1.6 - mailboxes are back. Not sure I want to TRY > to break it again... > Ok - I broke it again. Tried changing mail_shared_explicit_inbox to no - problem mailboxes disappeared again. Changed back to yes - they came back. Problem with both Thunderbird and Roundcube as clients. -- Daniel

2 9

[Dovecot] courier to dovecot
by Grafibit Rendszergazda 08 May '12

08 May '12

Dear All, I know there were many threads on this topic. I was searching the archive and the net also, but did not find a solution on my problem. I hope you can help me. I am migrating from an old server using courier to a new server with dovecot and i can not manage to have the same uids after the migration. After copying the message files from the old server to the new, and executing the script from the wiki page the messages are still re-downloaded by the mail clients. After telnet and logging in to the old server port 110, I got the following on the command *uidl*: 1 UID377-1278276092 2 UID387-1278276092 3 UID394-1278276092 4 UID498-1278276092 5 UID499-1278276092 6 UID564-1278276092 On the new server i set up the *pop3_uidl_format = UID%u-%v* because it seems for me that the old server is using the same uidl format. Either if i execute the /./courier-dovecot-migrate.pl --to-dovecot --recursive --convert /command or i don't the uidls on the new server won't be the same. Both the %u and %v numbers are differ. Please give me any hints how to continue the investigation to have a successful migration. Thank you in advance, Tamás * dovecot -n* # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-0.bpo.2-amd64 x86_64 Debian 6.0.4 protocols: imap imaps pop3 pop3s managesieve ssl_cert_file: /var/lib/dtc/etc/ssl/dovecot/new.cert.cert ssl_key_file: /var/lib/dtc/etc/ssl/dovecot/new.cert.key disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login mail_location: maildir:%h/Maildir mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve pop3_uidl_format: UID%u-%v managesieve_logout_format(default): bytes=%i/%o managesieve_logout_format(imap): bytes=%i/%o managesieve_logout_format(pop3): bytes=%i/%o managesieve_logout_format(managesieve): bytes ( in=%i : out=%o ) namespace: type: private separator: . prefix: INBOX. inbox: yes list: yes subscriptions: yes lda: postmaster_address: mail(a)exemple.com mail_plugin_dir: /usr/lib/dovecot/modules/lda auth_socket_path: /var/run/dovecot-auth-master log_path: /var/log/sieve.log info_log_path: /var/log/sieve.info mail_plugins: sieve quota auth default: passdb: driver: sql args: /var/lib/dtc/etc/dovecot-mysql.conf userdb: driver: prefetch userdb: driver: sql args: /var/lib/dtc/etc/dovecot-mysql.conf socket: type: listen client: path: /var/run/dovecot/dovecot-auth-client mode: 438 master: path: /var/run/dovecot-auth-master mode: 384 user: dtc plugin: sieve: ~/.dovecot.sieve sieve_dir: ~/sieve quota: maildir

3 3

Re: [Dovecot] Upgrading known problems (2.0 to 2.1) ?
by Timo Sirainen 08 May '12

08 May '12

Yes, that's possible. The IMAP/POP3 servers behind Dovecot director wouldn't even need to be Dovecots at all. Although you really want to use v2.1 director since it has a lot of fixes compared to v2.0. On 8.5.2012, at 0.02, Jean Michel wrote: > Thanks, an other thing is that I didnt saw anything about a cenario like this, its possible to have a director working on 2.0 and a backend with 2.1 simultaneously and vice-versa? > > 2012/5/7 Timo Sirainen <tss(a)iki.fi> > On 7.5.2012, at 23.21, Jean Michel wrote: > > > Is there any known/possible problem while upgrading from dovecot 2.0 to 2.1 > > ? > > Did anybody had any trouble with this ? > > http://wiki2.dovecot.org/Upgrading/2.1 lists all known problems. > > > > > -- > ------------------------------ > Jean Michel Feltrin >

1 0

[Dovecot] Upgrading known problems (2.0 to 2.1) ?
by Jean Michel 07 May '12

07 May '12

Is there any known/possible problem while upgrading from dovecot 2.0 to 2.1 ? Did anybody had any trouble with this ? ------------------------------ Jean Michel Feltrin

2 1

[Dovecot] dsync with virtual users
by Ken Stevenson 07 May '12

07 May '12

I'm using dovecot v2.0.16

3 3

[Dovecot] Panic in index-sync.c: line 25 on dovecot-1.2.17
by Leon Meßner 07 May '12

07 May '12

Hi, with dovecot-1.2.17 (yes i know it's old) i'm getting the folowing error after doing a system upgrade. May 7 22:04:26 mail dovecot: deliver(elon): Panic: file index-sync.c: line 25 (index_mailbox_set_recent_uid): assertion failed: (seq_range_exists(&ibox->recent_flags, uid)) May 7 22:04:27 mail kernel: pid 79989 (deliver), uid 4873: exited on signal 6 (core dumped) this only happens to one user and only with mail from one mailinglist (this one). Mails do get filtered by sieve. After some delivery attempts the mail finaly gets stored alright in the maildir. May 7 22:23:27 mail dovecot: deliver(elon): sieve: msgid=<assp.047487a390.4FA82AA5.60907 09(a)amfes.com>: stored mail into mailbox 'dovecot' May 7 22:23:27 mail postfix/local[82289]: 7DED511402: to=<elon(a)physik.tu-berlin.de>, orig_to=<l.messner(a)physik.tu-berlin.de>, relay=local, delay=1141, delays=1141/0.01/0/0.26, dsn=2.0.0, status=sent (delivered to command: /usr/local/libexec/dovecot/deliver) May 7 22:23:27 mail postfix/qmgr[1303]: 7DED511402: removed After that a new mail does the same dance (perhaps until the next one to this ML arrives). The maildirs are on NFS and in this case only beeing used with my instance of mutt and two other postfix+dovecot servers which are quite idle. Whats the way to debug this ? Thanks, Leon

2 2

[Dovecot] Proxying for some users and having the rest local?
by Dr Josef Karthauser 07 May '12

07 May '12

I'm migrating a load of mailboxes from cyrus to a new dovecot server. What I'd like to do is to switch the DNS to dovecot, and set things up so that all old imap mailboxes are accessed through the dovecot proxy. That way I can migrate them one at a time independent of DNS issues. I've got a load of users specified in mysql, and that configuration works well for local mailboxes. How do I configure things so that I can switch proxy access on and off? What's I've got so far is: password_query = SELECT user, domain, password, "masteruser" as master, "masterpass" as pass, proxy, "remoteimap.server" as host FROM mailboxes \ WHERE user = '%n' AND isMailbox AND active AND domain = '%d' I imagined that I could switch the proxy per user by setting proxy='n' or proxy=null for any users that want to be local, and proxy='y' for any users that I want to forward on to the original server. It doesn't appear to work that way though. Irrespective of the proxy value dovecot appears to try and proxy all users. What am I doing wrong? I can't work it out from the docs, and the source will take quite a bit of studying to get to the bottom of it all. Thanks :), Joe

2 3

Re: [Dovecot] mdbox packing
by Daniel L. Miller 07 May '12

07 May '12

On 5/6/2012 8:12 PM, Daniel L. Miller wrote: > On 5/6/2012 8:09 PM, Daniel L. Miller wrote: >> On 4/30/2012 5:23 PM, Timo Sirainen wrote: >>> On Mon, 2012-04-30 at 12:43 -0700, Daniel L. Miller wrote: >>>> Is there a way to manually force an mdbox storage to be rebuilt >>>> into new >>>> files? Particularly files of the maximum size? >>> You could do it with dsync. >>> >>> >> dsync seems to do a marvelous job - new question.? >> >> Given a mailbox with a larger number of older mails - assuming any >> new mails will have later dates - will the new mail storage files be >> identical? I'm probably not saying the right - let me try this: >> >> 1. "dsync backup mdbox" (with appropriate args) is run for a given >> user. >> 2. "dsync mirror mdbox" is done just to catch up. >> 3. Old mailstore moved off. >> 4. New mailstore moved to active location. >> >> I'm sure there's a safer way to do the above - but I've got a >> low-traffic site and I can just shut down mail service altogether for >> a few minutes if I want during this. >> >> Now - repeat the above four steps. Will mail files m.1 through >> m.(n-1) be identical to the last run? Is this a valid packing >> strategy prior to performing an rsync type backup - assuming no >> changes are being made to the archived mails between pack runs? > > Given the above, and SIS - if the backup is performed in the same > spool, i.e. original is /var/mail/domain/user, backup is > /var/mail/domain/user-new - will this result in any problems with > SIS? If after the pack and rename operation, the old mail tree is > simply deleted - will that leave SIS files unreferenced if the user > later deletes the messages from their active store? > And yet another one - dsync does not APPEAR to be copying ACL's in this process. -- Daniel

2 1

[Dovecot] This binary should probably be called with process group set to (vmail) instead of (userid)
by jeep＠rahul.net 07 May '12

07 May '12

Im sorry to ask another basic question, but Ive tried to find this answer for several hours now and it eludes me. Im getting the following when dovecot tries to deliver an email: May 6 19:29:21 mydomain dovecot: lda: Debug: auth input: jeff home=/opt/imapdata/j/jeff/INBOX uid=1001 gid=999 May 6 19:29:21 mydomain dovecot: lda(jeff): Fatal: setgid(999(vmail) from userdb lookup) failed with euid=999(vmail), gid=500(jeff), egid=500(jeff): Operation not permitted (This binary should probably be called with process group set to 999(vmail) instead of 500(jeff)) I cannot seem to find where its trying to call dovecot-lda with uid(jeff) at? AFAIK Ive set everything up to use/deliver as 'vmail'. 'jeff' is the only person on this box with a unix account which is uid 500, but how do I make it use vmail instead? Thanks for the help! Jeff postfix master.cf: virtual_transport = vmail mailbox_command=/opt/dovecot/libexec/dovecot/dovecot-lda -f "$SENDER" -a "$RECIPIENT" dovecot -n: # 2.1.5: /opt/dovecot/etc/dovecot/dovecot.conf # OS: Linux 2.6.35.14-106.fc14.x86_64 x86_64 Fedora release 14 (Laughlin) ext4 auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login auth_socket_path = /opt/dovecot215/var/run/dovecot/auth-userdb auth_verbose = yes auth_verbose_passwords = plain default_client_limit = 225 default_internal_user = vmail disable_plaintext_auth = no first_valid_gid = 999 first_valid_uid = 999 listen = * lock_method = flock mail_debug = yes mail_gid = vmail mail_home = /opt/imapdata/vmailhome mail_location = mbox:/opt/imapdata/%1n/%n:INDEX=/opt/imapdata/%1n/%n mail_privileged_group = vmail mail_uid = vmail mbox_lock_timeout = 1 mins mbox_write_locks = fcntl namespace { inbox = yes location = prefix = separator = / type = private } passdb { args = /opt/dovecot/etc/dovecot/conf.d/dovecot-sql.conf.ext driver = sql } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size } protocols = imap service auth { inet_listener { port = 12345 } unix_listener auth-userdb { group = vmail mode = 0666 user = vmail } user = $default_internal_user } service imap-login { inet_listener imap { port = 143 } service_count = 1 } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = /opt/dovecot/etc/dovecot/conf.d/dovecot-sql.conf.ext driver = sql } userdb { args = /opt/dovecot/etc/dovecot/conf.d/dovecot-sql.conf.ext driver = sql } userdb { args = /opt/dovecot/etc/dovecot/conf.d/dovecot-sql.conf.ext driver = sql } protocol imap { imap_idle_notify_interval = 1 mins imap_max_line_length = 64 k mail_max_userip_connections = 5 } /mf/home/jeep/shell/.signature

2 2

Re: [Dovecot] Shared namespace
by Daniel L. Miller 07 May '12

07 May '12

On 5/6/2012 8:34 PM, Daniel L. Miller wrote: > I'm not sure what's triggered it - I THINK it has something to do with > a force-resync, but not sure. > > I'm no longer viewing my full list of shared mailboxes. I used to > have a number of users shown - they had all had their ACL's set > individually and were shown in the list. "doveadm acl debug" shows > they SHOULD be shown - at least I think so, as the output for the > mailboxes that DO appear is identical for those that don't. > > Where should I look for breakage? After upgrading to 2.1.6 - mailboxes are back. Not sure I want to TRY to break it again... -- Daniel

1 0

Re: [Dovecot] IMAP STARTTLS Problem
by Patrick Ben Koetter 07 May '12

07 May '12

* markus(a)opsys.de <markus(a)opsys.de>: > Yep, I set the rights for the cert in Thunderbird. With this CERT > SSL is working in Thunderbird but not with STARTTLS. > > 4440[af7d580]: bcde800:mail.opsys.de:NA:CreateNewLineFromSocket: 1 > BAD TLS not available due to temporary reason Your server responds it has a temporary problem. Set the server verbose to get more useful log output. p@rick P.S. And please keep this thread onlist. > That's the message I get from Thunderbird. > > And that's the hole log: > > 4440[af7d580]: ImapThreadMainLoop entering [this=bcde800] > 0[c0f140]: bcde800:mail.opsys.de:NA:SetupWithUrl: clearing > IMAP_CONNECTION_IS_OPEN > 4440[af7d580]: bcde800:mail.opsys.de:NA:ProcessCurrentURL: entering > 4440[af7d580]: bcde800:mail.opsys.de:NA:ProcessCurrentURL:imap://markus%40opsys%2Ede@mail.opsys.de:143/select%3E.INBOX: > = currentUrl > 4440[af7d580]: ReadNextLine [stream=bc59ca8 nb=118 needmore=0] > 4440[af7d580]: bcde800:mail.opsys.de:NA:CreateNewLineFromSocket: * > OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE > STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready. > > 4440[af7d580]: bcde800:mail.opsys.de:NA:SendData: 1 STARTTLS > > 4440[af7d580]: ReadNextLine [stream=bc59ca8 nb=49 needmore=0] > 4440[af7d580]: bcde800:mail.opsys.de:NA:CreateNewLineFromSocket: 1 > BAD TLS not available due to temporary reason > > 4440[af7d580]: try to log in > 4440[af7d580]: IMAP auth: server caps 0x4405427, pref 0x1006, failed > 0x0, avail caps 0x1006 > 4440[af7d580]: (GSSAPI = 0x1000000, CRAM = 0x20000, NTLM = 0x100000, > MSN = 0x200000, PLAIN = 0x1000, LOGIN = 0x2, old-style IMAP login = > 0x4)auth external IMAP login = 0x20000000 > 4440[af7d580]: trying auth method 0x1000 > 4440[af7d580]: got new password > 4440[af7d580]: IMAP: trying auth method 0x1000 > 4440[af7d580]: PLAIN auth > 4440[af7d580]: bcde800:mail.opsys.de:NA:SendData: 2 authenticate plain > > 4440[af7d580]: ReadNextLine [stream=bc59ca8 nb=4294967295 needmore=0] > 4440[af7d580]: bcde800:mail.opsys.de:NA:CreateNewLineFromSocket: > clearing IMAP_CONNECTION_IS_OPEN - rv = 80470002 > 4440[af7d580]: bcde800:mail.opsys.de:NA:TellThreadToDie: close > socket connection > 4440[af7d580]: bcde800:mail.opsys.de:NA:CreateNewLineFromSocket: (null) > 4440[af7d580]: authlogin failed > 4440[af7d580]: marking auth method 0x1000 failed > 4440[af7d580]: IMAP auth: server caps 0x4405427, pref 0x1006, failed > 0x1000, avail caps 0x6 > 4440[af7d580]: (GSSAPI = 0x1000000, CRAM = 0x20000, NTLM = 0x100000, > MSN = 0x200000, PLAIN = 0x1000, LOGIN = 0x2, old-style IMAP login = > 0x4)auth external IMAP login = 0x20000000 > 4440[af7d580]: trying auth method 0x2 > 4440[af7d580]: login failed entirely -- state of mind () http://www.state-of-mind.de Franziskanerstraße 15 Telefon +49 89 3090 4664 81669 München Telefax +49 89 3090 4666 Amtsgericht München Partnerschaftsregister PR 563

2 5

[Dovecot] v2.1.6 released
by Timo Sirainen 07 May '12

07 May '12

http://dovecot.org/releases/2.1/dovecot-2.1.6.tar.gz http://dovecot.org/releases/2.1/dovecot-2.1.6.tar.gz.sig * Session ID is now included by default in auth and login process log lines. It can be added to mail processes also by adding %{session} to mail_log_prefix. + Added ssl_require_crl setting, which specifies if CRL check must be successful when verifying client certificates. + Added mail_shared_explicit_inbox setting to specify if a shared INBOX should be accessible as "shared/$user" or "shared/$user/INBOX". - v2.1.5: Using "~/" as mail_location or elsewhere failed to actually expand it to home directory. - dbox: Fixed potential assert-crash when reading dbox files. - trash plugin: Fixed behavior when quota is already over limit. - mail_log plugin: Logging "copy" event didn't work. - Proxying to backend server with SSL: Verifying server certificate name always failed, because it was compared to an IP address.

1 0

[Dovecot] Shared namespace
by Daniel L. Miller 07 May '12

07 May '12

I'm not sure what's triggered it - I THINK it has something to do with a force-resync, but not sure. I'm no longer viewing my full list of shared mailboxes. I used to have a number of users shown - they had all had their ACL's set individually and were shown in the list. "doveadm acl debug" shows they SHOULD be shown - at least I think so, as the output for the mailboxes that DO appear is identical for those that don't. Where should I look for breakage? -- Daniel

1 0

Re: [Dovecot] mdbox packing
by Daniel L. Miller 07 May '12

07 May '12

On 5/6/2012 8:09 PM, Daniel L. Miller wrote: > On 4/30/2012 5:23 PM, Timo Sirainen wrote: >> On Mon, 2012-04-30 at 12:43 -0700, Daniel L. Miller wrote: >>> Is there a way to manually force an mdbox storage to be rebuilt into >>> new >>> files? Particularly files of the maximum size? >> You could do it with dsync. >> >> > dsync seems to do a marvelous job - new question.? > > Given a mailbox with a larger number of older mails - assuming any new > mails will have later dates - will the new mail storage files be > identical? I'm probably not saying the right - let me try this: > > 1. "dsync backup mdbox" (with appropriate args) is run for a given user. > 2. "dsync mirror mdbox" is done just to catch up. > 3. Old mailstore moved off. > 4. New mailstore moved to active location. > > I'm sure there's a safer way to do the above - but I've got a > low-traffic site and I can just shut down mail service altogether for > a few minutes if I want during this. > > Now - repeat the above four steps. Will mail files m.1 through > m.(n-1) be identical to the last run? Is this a valid packing > strategy prior to performing an rsync type backup - assuming no > changes are being made to the archived mails between pack runs? Given the above, and SIS - if the backup is performed in the same spool, i.e. original is /var/mail/domain/user, backup is /var/mail/domain/user-new - will this result in any problems with SIS? If after the pack and rename operation, the old mail tree is simply deleted - will that leave SIS files unreferenced if the user later deletes the messages from their active store? -- Daniel

1 0

[Dovecot] mdbox packing
by Daniel L. Miller 07 May '12

07 May '12

Is there a way to manually force an mdbox storage to be rebuilt into new files? Particularly files of the maximum size? -- Daniel

3 3

[Dovecot] Authentication process holding open filehandles
by George Barnett 07 May '12

07 May '12

Hi, We're using dovecot to provide pop3 for a number of mailboxes. The setup is pretty simple: Each user / domain has a mailstore in /data/mailstore/<domain>/<user>/Maildir (backed by NFS). Passwords are in simple passwd-file format in the top level domain directory eg: # cat /data/mailstore/foo.com/.passwd user:{plain}password The passdb setup looks like this. passdb { args = username_format=%n /data/mailstore/%d/.passwd driver = passwd-file } The problem we're having is that when we want to remove a domain from the system and we go to rm -rf /data/mailstore/<domain>/ we are unable to because the auth process is still holding onto the file handles for the password file. Can somebody suggest an alternative pattern that I could use for storing password files? Ideally, we'd avoid one large file to prevent locking issues and would also keep the passwd-file setup since it's simple. It would be possible to have the password files in a separate dir, but over time I'm guessing that would lead to nfs turds? Easy to clean up I suppose, but maybe there's a simpler solution I'm missing? George

2 1

[Dovecot] smtp -auth with using clear text password
by Agnello George 06 May '12

06 May '12

Hi I am setting up a mailserver .. where clients need to authenticate to the mail server . The mta i am using is postfix . It is possible to use a file like this : ---------------------------------- cat /etc/postfix/dovecote_passwd agnello:123456 --------------------------------- where user is agnello and password is 123456 If you can please send me some reference links thanks a ton -- Regards Agnello D'souza

5 9

Re: [Dovecot] IMAP STARTTLS Problem
by Patrick Ben Koetter 06 May '12

06 May '12

* markus(a)opsys.de <markus(a)opsys.de>: > Am 05.05.2012 22:44, schrieb Patrick Ben Koetter: > >* Markus Fritz <markus.fritz(a)opsys.de>: > >>Am 05.05.2012 21:06, schrieb Markus Fritz: > >Assuming your server cert is located in > >/etc/ssl/certs/ca-certificates.crt try > >this on your server: > > > >openssl s_client -starttls imap -CAfile > >/etc/ssl/certs/ca-certificates.crt -connect localhost:143 > > > >Use "2 logout" to get out of the session. > > > >If it works, try the same from your client host. > > > >Does it work both times? > > yes: > > Verify return code: 0 (ok) > --- > . OK Capability completed. > > it works. But I cannot login with Thunderbird. I imported the cert > in Thunderbird, too. IIRC it is not enough to import the cert. You also need to set a policy i.e. allow the cert to be used for e-mail. p@rick -- state of mind () http://www.state-of-mind.de Franziskanerstraße 15 Telefon +49 89 3090 4664 81669 München Telefax +49 89 3090 4666 Amtsgericht München Partnerschaftsregister PR 563

1 0

[Dovecot] HG 3d8a25a4394d Patch breaks UserDB Lookups
by Thomas Leuxner 06 May '12

06 May '12

Patch http://hg.dovecot.org/dovecot-2.1/rev/3d8a25a4394d breaks auth May 5 09:01:52 spectre dovecot: lmtp(24442): Connect from local May 5 09:01:52 spectre dovecot: lmtp(24442): Error: userdb lookup(tlx(a)leuxner.net): Disconnected unexpectedly May 5 09:01:52 spectre dovecot: auth: Fatal: master: service(auth): child 24443 killed with signal 11 (core not dumped) May 5 09:01:52 spectre dovecot: lmtp(24442): Disconnect from local: Client quit (in reset) Regards Thomas

2 2