- dovecot - dovecot.org

[Dovecot] help with AES_DECRYPT and password lookup - mysql password_query
by jeep＠rahul.net 29 Apr '12

29 Apr '12

Hello- Sorry if this is a noob question, but I cant seem to get my password_query to work with dovecot + mysql. Im using 'Password verification by SQL server' at: http://wiki2.dovecot.org/AuthDatabase/SQL trying to modify it to work with my encrypted passwords in the DB. Im using the following which isnt working: password_query = SELECT NULL AS password, \ 'Y' as nopassword, userid AS user \ FROM users WHERE userid='%u' AND AES_DECRYPT(password, 'mykey')=password 1. Is it even possible to do this via 'password_query'? 2. If so, what am I doing wrong? Thanks, Jeff /mf/home/jeep/shell/.signature

3 10

[Dovecot] Session IDs
by Timo Sirainen 28 Apr '12

28 Apr '12

v2.1.2 added support for "session IDs", which is a 9 year unique identifier for that specific IMAP/POP3 connection. Initially I thought it would only be useful for tracking connections going through Dovecot proxies to backends (the session ID is forwarded), but then I thought it could be useful for everyone if auth process also logs the session ID. So I thought for v2.1.6 I'd change the defaults: a) Failed login: Apr 28 17:37:23 auth: Debug: client in: AUTH 1 PLAIN service=imap secured session=XtG7KL6+jQB/AAAB lip=127.0.0.1 rip=127.0.0.1 lport=143 rport=42125 resp=<hidden> Apr 28 17:37:23 auth: Debug: passwd-file(foo,127.0.0.1,<XtG7KL6+jQB/AAAB>): lookup: user=foo file=/usr/local/etc/passwd.imap Apr 28 17:37:23 auth: Info: passwd-file(foo,127.0.0.1,<XtG7KL6+jQB/AAAB>): unknown user Apr 28 17:37:25 auth: Debug: client out: FAIL 1 user=foo Apr 28 17:37:50 imap-login: Info: Aborted login (auth failed, 1 attempts in 27 secs): user=<foo>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured, session=<XtG7KL6+jQB/AAAB> b) Successful login: Apr 28 17:38:27 auth: Debug: client in: AUTH 2 PLAIN service=imap secured session=rNuHLL6+jgB/AAAB lip=127.0.0.1 rip=127.0.0.1 lport=143 rport=42126 resp=<hidden> Apr 28 17:38:27 auth: Debug: passwd-file(tss,127.0.0.1,<rNuHLL6+jgB/AAAB>): lookup: user=tss file=/usr/local/etc/passwd.imap Apr 28 17:38:27 auth: Debug: client out: OK 2 user=tss Apr 28 17:38:27 auth: Debug: master in: REQUEST 1375993857 14321 2 0f2f78deedcb7e38a278cf79819360c5 Apr 28 17:38:27 auth: Debug: passwd-file(tss,127.0.0.1,<rNuHLL6+jgB/AAAB>): lookup: user=tss file=/usr/local/etc/passwd.imap Apr 28 17:38:27 auth: Debug: master out: USER 1375993857 tss uid=1000 gid=1000 home=/home/tss Apr 28 17:38:27 imap-login: Info: Login: user=<tss>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=14338, secured, session=<rNuHLL6+jgB/AAAB> .. Apr 28 17:47:15 imap(tss,<rNuHLL6+jgB/AAAB>): Info: Disconnected: Logged out in=8 out=369 The last line requires a modified mail_log_prefix, I wasn't planning on changing its default. I'm mainly wondering: 1) Does this change break someone's auth log line parsing? 2) Does the auth prefix look prettier with or without <> around session id? :) 3) Anything else I should do about this now that I'm changing it anyway?

2 1

[Dovecot] ERR Attentication error dovecot
by SARAVANAJ 28 Apr '12

28 Apr '12

-- View this message in context: http://old.nabble.com/ERR-Attentication-error-dovecot-tp33763251p33763251.h… Sent from the Dovecot mailing list archive at Nabble.com.

1 0

[Dovecot] dovecot LDA error
by Hadi Salem 28 Apr '12

28 Apr '12

Hi, My dovecot version is , # 2.0.20: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.18-164.el5 x86_64 CentOS release 5.4 (Final) auth_debug = yes auth_debug_passwords = yes auth_verbose = yes auth_verbose_passwords = plain debug_log_path = /var/log/dovecot.log disable_plaintext_auth = no hostname = host1.bigmama.com info_log_path = /var/log/dovecot.log log_path = /var/log/dovecot.log mail_debug = yes mail_location = maildir:~/Maildir passdb { args = scheme=PLAIN username_format=%u /etc/dovecot/users driver = passwd-file } postmaster_address = root(a)host1.bigmama.com service auth { unix_listener auth-userdb { group = mail mode = 0660 user = mail } } ssl = no userdb { args = username_format=%u /etc/dovecot/users driver = passwd-file } protocol lda { info_log_path = /var/log/dovecot-lda.log log_path = /var/log/dovecot-lda-errors.log } Im getting error from dovecot LDA logs log_path = /var/log/dovecot-lda-errors.log Apr 24 20:25:46 lda(jamal(a)example.com): Fatal: setgid(5000(vmail) from userdb lo okup) failed with euid=8(mail), gid=12(mail), egid=12(mail): Operation not permi tted (This binary should probably be called with process group set to 5000(vmail ) instead of 12(mail)) My usersdb config jamal@example.com:{PLAIN}123:5000:5000::/var/vmail/example.com/jamal/ user 5000 system user as vmail Permissions for the /var/vmail directory as follow drwxr-xr-x 3 vmail vmail 4096 Apr 24 20:18 /var/vmail/ drwx------ 3 vmail vmail 4096 Apr 24 20:18 /var/vmail/example.com/ drwx------ 3 vmail vmail 4096 Apr 24 20:18 /var/vmail/example.com/jamal/ drwx------ 5 vmail vmail 4096 Apr 24 20:20 /var/vmail/example.com/jamal/Maildir/

2 2

[Dovecot] LDA crashes on delivery (using sieve)
by interfaSys sàrl 27 Apr '12

27 Apr '12

Hello, The current version of LDA can crash (seg fault 11) under certain circumstances. I don't know why it happens only with some accounts, but here is a backtrace. The user has a sieve filter in place : (gdb) bt full #0 0x0000000800443434 in smtp_client_open () from /usr/lib/dovecot/libdovecot-lda.so.0 No symbol table info available. #1 0x00000008009943ab in lda_sieve_smtp_open.2406.2210 () from /usr/lib/dovecot/lib90_sieve_plugin.so No symbol table info available. #2 0x0000000800e80532 in sieve_smtp_open () from /usr/lib/dovecot/libdovecot-sieve.so.0 No symbol table info available. #3 0x0000000800e6157d in act_redirect_send.23018 () from /usr/lib/dovecot/libdovecot-sieve.so.0 No symbol table info available. #4 0x0000000800e7e175 in act_redirect_commit.23025 () from /usr/lib/dovecot/libdovecot-sieve.so.0 No symbol table info available. #5 0x0000000800e5f2bd in sieve_result_execute () from /usr/lib/dovecot/libdovecot-sieve.so.0 No symbol table info available. #6 0x0000000800e5ee7b in sieve_multiscript_execute.25305 () from /usr/lib/dovecot/libdovecot-sieve.so.0 No symbol table info available. #7 0x0000000800e496f8 in sieve_multiscript_run () from /usr/lib/dovecot/libdovecot-sieve.so.0 No symbol table info available. #8 0x0000000800994652 in lda_sieve_multiscript_execute.2399.2297 () from /usr/lib/dovecot/lib90_sieve_plugin.so No symbol table info available. #9 0x00000008009942c7 in lda_sieve_deliver_mail.2402.2206 () from /usr/lib/dovecot/lib90_sieve_plugin.so No symbol table info available. #10 0x00000008004435d8 in mail_deliver () from /usr/lib/dovecot/libdovecot-lda.so.0 No symbol table info available. #11 0x00000000004029f7 in main (argc=7, argv=0x7fffffffe830) at main.c:434 set_roots = {0x404520, 0x0} ctx = {pool = 0x800a0d820, set = 0x800a3cc98, session = 0x800a0d840, dup_ctx = 0x800abf0c0, session_id = 0x0, src_mail = 0x800a34840, src_envelope_sender = 0x800a0d858 "mailtest(a)example.com", dest_user = 0x800a89040, dest_addr = 0x7fffffffebfd "test(a)example.com", final_dest_addr = 0x7fffffffebfd "test(a)example.com", dest_mailbox_name = 0x40356b "INBOX", dest_mail = 0x0, var_expand_table = 0x0, tried_default_save = false, saved_mail = false, save_dest_mail = false, mailbox_full = false, dsn = false} service_flags = 1027 user = (const __unknown__ *) 0x7fffffffebcc "test(a)example.com" errstr = (const __unknown__ *) 0x0 path = (const __unknown__ *) 0x0 storage_service = (struct mail_storage_service_ctx *) 0x800a30840 service_user = (struct mail_storage_service_user *) 0x800a3c0a0 service_input = {module = 0x403567 "lda", service = 0x403567 "lda", username = 0x7fffffffebcc "test(a)example.com", session_id = 0x0, local_ip = {family = 0, u = {ip6 = {__u6_addr = {__u6_addr8 = '\0' <repeats 15 times>, __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, ip4 = { s_addr = 0}}}, remote_ip = {family = 0, u = {ip6 = {__u6_addr = {__u6_addr8 = '\0' <repeats 15 times>, __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, ip4 = {s_addr = 0}}}, local_port = 0, remote_port = 0, userdb_fields = 0x0, flags_override_add = 0, flags_override_remove = 0, no_userdb_lookup = 0} storage = (struct mail_storage *) 0x0 user_source = (const __unknown__ *) 0x4034c0 "" destaddr_source = (const __unknown__ *) 0x403576 "-a parameter" process_euid = 0 stderr_rejection = false ret = 1 c = -1 error = MAIL_ERROR_NONE Cheers, Olivier

4 8

[Dovecot] LDA crashes on delivery (using sieve)
by interfaSys sàrl 26 Apr '12

26 Apr '12

I can confirm that the issues are gone when using pigeonhole-0.3.0 I thought the sievec crashes might re-appear, but this isn't the case. Thank you Robert. Olivier > Am 26.04.2012 17:47, schrieb interfaSys sàrl: > >/ Latest revision from these repositories: > />/ dovecot-2.1 > />/ dovecot-2.1-pigeonhole > / > dovecot-2.1-pigeonhole from hg ,is your problem > use i.e > > http://www.rename-it.nl/dovecot/2.1/dovecot-2.1-pigeonhole-0.3.0.tar.gz > to recompile , this works > > >/ > />/ > />/ On 26/04/2012 16:35, Timo Sirainen wrote: > />>/ On 26.4.2012, at 18.32, interfaSys sàrl wrote: > />>/ > />>>/ The current version of LDA can crash (seg fault 11) under certain > />>>/ circumstances. > />>/ > />>/ > />>/ "The current" means what exactly? (Stephan's autobuilt .debs?) > />>/ > />>/ > />>/ > / > > -- > Best Regards > > MfG Robert Schetterer > > Germany/Munich/Bavaria

1 0

[Dovecot] OT but E-Mail related. save a copy off all mail as eml
by Götz Reinicke 26 Apr '12

26 Apr '12

Hi, I'm sorry to bug you with an not directly dovecot related question, but this is for me right now the place with the best mailsystem admins I know. I'm asked if there is a way to save a copy of all mail we send trough our sendmail server (Red Hat EL 5.x) in and out as an .eml file for further processing by a DMS system. The files should be saved on some network share. Any suggestion are welcome and thanks. Best regards Götz -- Götz Reinicke IT-Koordinator Tel. +49 7141 969 82 420 Fax +49 7141 969 55 420 E-Mail goetz.reinicke(a)filmakademie.de Filmakademie Baden-Württemberg GmbH Akademiehof 10 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzender des Aufsichtsrats: Jürgen Walter MdL Staatssekretär im Ministerium für Wissenschaft, Forschung und Kunst Baden-Württemberg Geschäftsführer: Prof. Thomas Schadt

2 1

[Dovecot] Troubles with /.dovecot.lda-dupe on dovecot 2.1.5
by Jean Michel 26 Apr '12

26 Apr '12

Seems that is something with vacation message, Apr 26 12:20:02 server dovecot: lmtp(26937, user@domain): Error: file_dotlock_create(/storage/domain/users/user/.dovecot.lda-dupes) failed: Resource temporarily unavailable Apr 26 12:20:02 server dovecot: lmtp(26937, user@domain): Fatal: master: service(lmtp): child 26937 killed with signal 11 (core dumps disabled) And its created a .dovecot.lda-dupes.lock Any idea ? -- ------------------------------ Jean Michel Feltrin

2 1

[Dovecot] LDA crashes on delivery (using sieve)
by interfaSys sàrl 26 Apr '12

26 Apr '12

Hello, The current version of LDA can crash (seg fault 11) under certain circumstances. I don't know why it happens only with some accounts, but here is a backtrace. The user has a sieve filter in place : (gdb) bt full #0 0x0000000800443434 in smtp_client_open () from /usr/lib/dovecot/libdovecot-lda.so.0 No symbol table info available. #1 0x00000008009943ab in lda_sieve_smtp_open.2406.2210 () from /usr/lib/dovecot/lib90_sieve_plugin.so No symbol table info available. #2 0x0000000800e80532 in sieve_smtp_open () from /usr/lib/dovecot/libdovecot-sieve.so.0 No symbol table info available. #3 0x0000000800e6157d in act_redirect_send.23018 () from /usr/lib/dovecot/libdovecot-sieve.so.0 No symbol table info available. #4 0x0000000800e7e175 in act_redirect_commit.23025 () from /usr/lib/dovecot/libdovecot-sieve.so.0 No symbol table info available. #5 0x0000000800e5f2bd in sieve_result_execute () from /usr/lib/dovecot/libdovecot-sieve.so.0 No symbol table info available. #6 0x0000000800e5ee7b in sieve_multiscript_execute.25305 () from /usr/lib/dovecot/libdovecot-sieve.so.0 No symbol table info available. #7 0x0000000800e496f8 in sieve_multiscript_run () from /usr/lib/dovecot/libdovecot-sieve.so.0 No symbol table info available. #8 0x0000000800994652 in lda_sieve_multiscript_execute.2399.2297 () from /usr/lib/dovecot/lib90_sieve_plugin.so No symbol table info available. #9 0x00000008009942c7 in lda_sieve_deliver_mail.2402.2206 () from /usr/lib/dovecot/lib90_sieve_plugin.so No symbol table info available. #10 0x00000008004435d8 in mail_deliver () from /usr/lib/dovecot/libdovecot-lda.so.0 No symbol table info available. #11 0x00000000004029f7 in main (argc=7, argv=0x7fffffffe830) at main.c:434 set_roots = {0x404520, 0x0} ctx = {pool = 0x800a0d820, set = 0x800a3cc98, session = 0x800a0d840, dup_ctx = 0x800abf0c0, session_id = 0x0, src_mail = 0x800a34840, src_envelope_sender = 0x800a0d858 "mailtest(a)example.com", dest_user = 0x800a89040, dest_addr = 0x7fffffffebfd "test(a)example.com", final_dest_addr = 0x7fffffffebfd "test(a)example.com", dest_mailbox_name = 0x40356b "INBOX", dest_mail = 0x0, var_expand_table = 0x0, tried_default_save = false, saved_mail = false, save_dest_mail = false, mailbox_full = false, dsn = false} service_flags = 1027 user = (const __unknown__ *) 0x7fffffffebcc "test(a)example.com" errstr = (const __unknown__ *) 0x0 path = (const __unknown__ *) 0x0 storage_service = (struct mail_storage_service_ctx *) 0x800a30840 service_user = (struct mail_storage_service_user *) 0x800a3c0a0 service_input = {module = 0x403567 "lda", service = 0x403567 "lda", username = 0x7fffffffebcc "test(a)example.com", session_id = 0x0, local_ip = {family = 0, u = {ip6 = {__u6_addr = {__u6_addr8 = '\0' <repeats 15 times>, __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, ip4 = { s_addr = 0}}}, remote_ip = {family = 0, u = {ip6 = {__u6_addr = {__u6_addr8 = '\0' <repeats 15 times>, __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, ip4 = {s_addr = 0}}}, local_port = 0, remote_port = 0, userdb_fields = 0x0, flags_override_add = 0, flags_override_remove = 0, no_userdb_lookup = 0} storage = (struct mail_storage *) 0x0 user_source = (const __unknown__ *) 0x4034c0 "" destaddr_source = (const __unknown__ *) 0x403576 "-a parameter" process_euid = 0 stderr_rejection = false ret = 1 c = -1 error = MAIL_ERROR_NONE Cheers, Olivier

1 0

[Dovecot] dovecot 2:2.1.5-0~auto+6 on debian squeeze
by Tomislav Mihalicek 26 Apr '12

26 Apr '12

After upgrade from latest 2.1.4 to 2.1.5 occasional coredumps on lmtp/lda daemon happens. It results in deffering mail in previous hop server and mail delay [1383350.925251] lmtp[22130]: segfault at 0 ip 00007f8829e2b4c5 sp 00007fff29fd37e0 error 4 in libdovecot-lda.so.0.0.0[7f8829e23000+b000] [1383351.038095] lmtp[22121]: segfault at 0 ip 00007f18863084c5 sp 00007fff65d87b20 error 4 in libdovecot-lda.so.0.0.0[7f1886300000+b000] [1383366.682285] lmtp[22101]: segfault at 0 ip 00007fe87a36a4c5 sp 00007fffb391b430 error 4 in libdovecot-lda.so.0.0.0[7fe87a362000+b000] [1383530.705974] lmtp[22126]: segfault at 0 ip 00007f0a7caa74c5 sp 00007ffff5bd0050 error 4 in libdovecot-lda.so.0.0.0[7f0a7ca9f000+b000] [1383530.844101] lmtp[17613]: segfault at 0 ip 00007f43aa1e84c5 sp 00007fff977ffd70 error 4 in libdovecot-lda.so.0.0.0[7f43aa1e0000+b000] [1383544.463542] lmtp[17576]: segfault at 0 ip 00007fbec6bc64c5 sp 00007fff3e347910 error 4 in libdovecot-lda.so.0.0.0[7fbec6bbe000+b000] -- View this message in context: http://old.nabble.com/dovecot-2%3A2.1.5-0%7Eauto%2B6-on-debian-squeeze-tp33… Sent from the Dovecot mailing list archive at Nabble.com.

1 0

[Dovecot] Permission problems when trying to create new folders with ACL plugin
by Markus Petri 26 Apr '12

26 Apr '12

Hi, I have the a problem with shared folders and the ACL plugin. The user "markus" has full access to "Shared/shared-user/Data": 3 GETACL "Shared/shared-user/Data" * ACL "Shared/shared-user/Data" "markus" akxeilprwtscd 3 OK Getacl completed. but creating a new subfolder under "Data" fails: 4 CREATE "Shared/shared-user/Data/New1" 4 NO [NOPERM] Permission denied This used to work with the same configuration and Dovecot 2.0. Cheers, Markus dovecot -n output: # 2.1.5: /opt/dovecot-2.1/etc/dovecot/dovecot.conf # OS: Linux 3.2.0-2-amd64 x86_64 Debian wheezy/sid auth_mechanisms = plain login disable_plaintext_auth = no listen = 192.168.56.11 mail_location = maildir:~/Maildir mail_plugins = acl managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { inbox = yes location = prefix = separator = / subscriptions = yes type = private } namespace { inbox = no list = children location = maildir:%%h/Maildir:INDEX=~/Maildir/index/shared/%%u prefix = Shared/%%u/ separator = / subscriptions = no type = shared } passdb { args = /opt/dovecot-2.1/etc/dovecot/passwd driver = passwd-file } plugin { acl = vfile acl_anyone = allow acl_shared_dict = file:/var/lib/vdovecot/shared-mailboxes.db } protocols = imap service auth { unix_listener auth-userdb { mode = 0600 user = vdovecot } } ssl = no userdb { args = /opt/dovecot-2.1/etc/dovecot/passwd driver = passwd-file } verbose_proctitle = yes protocol imap { mail_plugins = acl imap_acl }

2 2

[Dovecot] v2.1.5 released
by Timo Sirainen 26 Apr '12

26 Apr '12

http://dovecot.org/releases/2.1/dovecot-2.1.5.tar.gz http://dovecot.org/releases/2.1/dovecot-2.1.5.tar.gz.sig A few announcements first: I'm now going to start being more strict about not answering Dovecot questions sent to me privately (especially support requests, but also bug reports, feature requests, etc). Often those questions could be answered by other people in the mailing list as well, so they just waste my time. Even if you're sure that I'm the only person who can possibly answer it, it may be something that others are interested of as well and replying privately denies them the possibility of reading about it. If you really do not want to send something publicly, you still have an option for private communication: just buy one of the Dovecot support packages. This is also the first Dovecot release that has run through automated release testing. I've been planning on doing that for last 5 years at least, and finally it's done. The testing includes running a lot of tests to verify that the IMAP server gives proper responses, stress testing doesn't break it, memory isn't leaked and several other things. The tests are run for many different kinds of configurations. Some bugs show up only for some specific combination of settings, but unfortunately because there's such a large number of them it's impossible to test every combination. So here's another advantage that Dovecot support customers have: they can have their specific configuration included in the automated tests. This release already fixes one bug I found only after testing a customer's config. Oh, and looks like I got accepted as a speaker to LinuxTag 2012. The plan is to talk about some new things in Dovecot and dsync replication (looks like I have to hurry up with the dsync rewrite). And finally, the most important changes since v2.1.4: * IMAP: When neither the session nor the mailbox has modseq tracking enabled, return the mailbox as having NOMODSEQ in SELECT/EXAMINE reply. Old versions in this situation always simply returned HIGHESTMODSEQ as 1, which could have broken some clients. + dict file: Added optional fcntl/flock locking (default is dotlock) + fts-solr: doveadm fts rescan now resets indexes, which allows reindexing mails. (This isn't a full rescan implementation like fts-lucene has.) + doveadm expunge: Added -d parameter to delete mailbox if it's empty after expunging. - IMAP: Several fixes related to mailbox listing in some configs - director: A lot of fixes and performance improvements - v2.1.4 didn't work without a mail home directory set - mbox: Deleting a mailbox didn't delete its index files. - pop3c: TOP command was sent incorrectly - trash plugin didn't work properly - LMTP: Don't add a duplicate Return-Path: header when proxying. - listescape: Don't unescape namespace prefixes.

8 13

[Dovecot] LDAP Lookup not returning value in maxStorage
by Bruce, Andrew 26 Apr '12

26 Apr '12

Hi there, We're setting up a Dovecot virtual email setup - we've got everything working perfect with LDAP logins authenticating against AD and so forth, but we're having issues with retrieving the maxStorage value from AD (this is a pre-setup field in AD that we'd like to use to set per user quotas). In our LDAP lookup, we have the maxStorage entry listed under user_attrs for the quota (user_attrs = maxStorage=quota_rule=*:storage=%$M), and in the debug logs, can see it trying to get the entry, but it fails with: Mar 27 13:19:27 auth: Debug: ldap(username(a)site,192.168.1.5): user search: base=dc=site,dc=local scope=subtree filter=(&(objectClass=person)(| (userPrincipalName=username@site) (|(mail=username@site)(samAccountName=username@site)))) fields=maxStorage Mar 27 13:19:27 auth: Debug: ldap(username(a)site,192.168.1.5): no fields returned by the server At this point, we then see the default quota applied. If we change the name of the field from maxStorage to instanceType we see the value show up in the logs and passed through to the quota system and applied successfully: Mar 27 11:09:01 auth: Debug: ldap(username(a)site,192.168.1.5): user search: base=dc=site,dc=local scope=subtree filter=(&(objectClass=person)(| (userPrincipalName=username@site) (|(mail=username@site)(samAccountName=username@site)))) fields=instanceType Mar 27 11:09:01 auth: Debug: ldap(username(a)site,192.168.1.5): result: instanceType(quota_rule=*:storage=%$M)=*:storage=4M Mar 27 11:09:01 auth: Debug: master out: USER 3901227009 username@site quota_rule=*:storage=4M Which seems a bit weird. If we use ldapsearch and pass it the same search string and look for the field maxStorage, we clearly see the field and the value being returned. The result looks the same if we also lookup instanceType. We're using Dovecot 2.0.9. Does anyone have any idea as to why we can't use this field? Thanks, Andrew

4 7

Re: [Dovecot] dovecot LDA with sendmail
by Joseph Tam 26 Apr '12

26 Apr '12

Timo, in response to Hadi, wrote: >> Apr 24 20:25:46 lda(jamal(a)example.com): Fatal: >> setgid(5000(vmail) from userdb lo >> okup) failed with >> euid=8(mail), gid=12(mail), egid=12(mail): Operation not permi >> tted (This binary should probably be called with process group set to 5000(vmail >> ) instead of 12(mail)) > > Configure your MTA to run dovecot-lda as vmail instead of as mail. Yeah, what he said. Someone helpfully added documentation on how to do this at the end of Dovecot1's wiki (http://wiki.dovecot.org/LDA/Sendmail) which probably should be copied to Dovecot 2's wiki. So that's what I did. Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] dovecot %u variable problem....
by Kris 26 Apr '12

26 Apr '12

Hi guys n gals, im on an ubuntu 11 VPS on linode (dovecot version 2.013). ive spent a lot of time and googling trying to get postfix, dovecot, ssl, saslauthd and mysql to all play nice together and im quite close now but theres something going on i cant quite explain and id really appreciate some help. I have been going for ten hours on this today and it seems in direct conflict with what dovecot themselves say... the problem is a variable in dovecot (%u) which is normally used as a full username in sql query strings (i.e. user@domain) and is simply dropping the domain for some reason... From dovecot docs (http://wiki2.dovecot.org/Variables) The variables that work everywhere are: %u user full username (e.g. user@domain) so i have postfix and stuff set up ok to send at least and i know this because ive tested it by hard-coding the string in the sql query myself with a successful send... but, anyway, the problem with the '%u' variable is it is doing stuff like this: (from mail.log and mysql.log) localhost dovecot: auth: Debug: sql(admin(a)microhard.com,xx.xx.xx.xx): SELECT home,uid,gid FROM users WHERE id = 'admin(a)microhard.com' this was derived from the following query in /etc/dovecot/dovecot-sql.conf.ext user_query = SELECT home,uid,gid FROM users WHERE id = '%u' so no problem there.... but then this happens when i attempt to send mail and this means the user gets rejected because dovecot cant find the user id in the db without the correct string (i.e. user@domain): localhost dovecot: auth: Debug: sql(admin,xx.xx.xx.xx): query: SELECT id as user, crypt as password FROM users WHERE id= 'admin' Query SELECT id as user, crypt as password FROM users WHERE id= 'admin' which is derived from the following query also in /etc/dovecot/dovecot-sql.conf.ext password_query = SELECT id as user, crypt as password FROM users WHERE id= '%u' and to further confuse me, this 'unchangeable' variable sometimes decides to right itself without any obvious reason... localhost dovecot: auth: Debug: sql(admin(a)microhard.com,xx.xx.xx.xx): query: SELECT id as user, crypt as password FROM users WHERE id= 'admin(a)microhard.com' im wondering if its something to do with my client dropping the domain, or whether dovecot has an error, or some other thing ive overlooked... my dovecot.conf looks a lot like this: # 2.0.13: dovecot.conf # OS: Linux 3.0.18-x86_64-linode24 x86_64 Ubuntu 11.10 ext3 first_valid_uid = 5000 last_valid_uid = 5000 login_greeting = I likes my ducks n geese I do. mail_location = maildir:/var/spool/mail/virtual/%u #enables logging all failed authentication attempts. auth_verbose=yes #enables all authentication debug logging (also enables auth_verbose). Passwords are logged as <hidden>. auth_debug=yes #does everything that auth_debug=yes does, but it also removes password hiding. auth_debug_passwords=yes #enables all kinds of mail related debug logging, such as showing where Dovecot is looking for mails. mail_debug=yes #enables logging SSL errors and warnings. Even without this setting if connection is closed because of an SSL error, the error is logged as the disconnection reason (v1.1+). verbose_ssl=yes passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { acl = vfile:/etc/dovecot/acls #quota = maildir:storage=10240:messages=1000 trash = /etc/dovecot/trash.conf } protocols = " imap" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-master { group = dovecot mode = 0660 user = dovecot } user = dovecot } ssl_ca = /etc/pki/dovecot/certs/ca-bundle.crt ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } userdb { driver = prefetch } userdb { driver = passwd } protocol imap { mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } protocol lda { info_log_path = /var/log/dovecot-deliver.log log_path = /var/log/dovecot-deliver.log mail_plugins = quota postmaster_address = admin(a)microhard.com } any help *much* appreciated! cheerz Kris

6 12

[Dovecot] dsync: convert only mbox in /var/mail to maildir?
by Jeff Simmons 26 Apr '12

26 Apr '12

I'm migrating an old UW pop server to a new Dovecot server. The old server did not allow mail to be stored on the server, so only mbox files exist in /var/mail, with nothing in /home/$user. I'd like to copy the /var/mail directory over to the new server and then use dsync to convert the mbox files and put them in /home/$user/Maildir, but every permutation of the command line I've tried dies with a variation on can't find/write either /var/mail/mail or /home/$user/mail, seems it won't deal with mbox files without an associated mail directory. Can dsync be used for this kind of conversion, or should I look elsewhere for conversion utilities? Thanks for helping a noob who can't traverse a wiki without leaving a trail of breadcrumbs. -- Jeff Simmons jeff(a)j-simmons.net Simmons Consulting - Network Engineering, Administration, Security

2 2

[Dovecot] 2.1.x changes and dsync -- Wiki suggestion
by Jeff Kletsky 26 Apr '12

26 Apr '12

There are a couple things that show up on the Upgrading/2.1 wiki page that would be useful to have on pages describing dsync (Tools/Dsync, Migration/MailFormat, Tools, perhaps others): * dsync was merged into doveadm * You can't dsync 2.0.x to/from 2.1.x That second point is especially "interesting" to me as it seems that Apple MacOS X Server is still on 2.0.16, at least from what I see on opensource.apple.com. I was planning on migrating mail off the current server onto my friend's new MacMini, but I'll have to figure out how to "downgrade" the mail jail to a 2.0 version, it seems. Thanks for all the great work, Jeff

1 0

[Dovecot] Reading Mutt mboxes from Thunderbird
by Leonardo M. Ramé 26 Apr '12

26 Apr '12

Hi, I'm a user of Mutt, and before moving to Thunderbird I'm trying to share mboxes between them. To do this, I installed Dovecot to create an IMAP server in my local machine, to serve mutt mboxes to be read by Thunderbird. So far, I can read my inbox from /var/mail/%u, but in mutt, I have many folders in ~/mail, like 2010-mails, 2011-mails, mailing-list-x, mailing-list-y, and so on. How can I configure Dovecot to read them?. In /etc/dovecot/conf.d/10-mail.conf I have this: mail_location = mbox:~/Mail:INBOX=/var/mail/%u I'm using Ubuntu 11.10, and Dovecot 2.0.13. Regards, -- Leonardo M. Ramé Medical IT - Griensu S.A. Av. Colón 636 - Piso 8 Of. A X5000EPT -- Córdoba Tel.: +54(351)4246924 +54(351)4247788 +54(351)4247979 int. 19 Cel.: +54(351)156629292

3 2

[Dovecot] How to remove duplicate GUID messages from storage?
by Daniel Parthey 26 Apr '12

26 Apr '12

Hi, I tried to import messages like this: doveadm import -u username(a)example.org mdbox:/mail/dovecot/example.org/username/mail mbox:/root/mail.txt all This seemed to have imported the same messages in the mail storage, as they were already there. And now I have got a lot of duplicates. Then I deleted the mbox:/root/mail mail stuff from "mailboxes" folder and the storage remained, with duplicate GUIDs. The following command doveadm -v force-resync -u username(a)example.org INBOX outputs lots of messages like this one, with different GUID doveadm(username(a)example.org): Error: mdbox /mail/dovecot/example.org/username/mail/storage: Duplicate GUID 0b8a032d66a0924fb42c0000de5f8128 in m.55:45484041 and m.14:52173045 The messages at m.55:45484041 and m.14:52173045 have the same content, since they were seemingly imported from the mail store itself, they are in the storage twice now and require twice as much disk space as before. How can I manually remove these identical, duplicate messages from the storage to save space? Dovecot does not do it automatically. Kind regards, Daniel

2 3

[Dovecot] dovecot-lda error
by Hadi Salem 26 Apr '12

26 Apr '12

Hi, im getting the fallowing error. from dovecot-lda log Apr 25 17:30:41 lda(jamal(a)example.com): Fatal: setgid(5003(vmail) from userdb lookup) failed with euid=8(mail), gid=12(mail), egid=12(mail): Operation not permitted (This binary should probably be called with process group set to 5003(vmail) instead of 12(mail)) this error occur if im using different uid and gid part from mail uid.. jamal@example.com:{PLAIN}123:5003:5003::/var/vmail/example.com/jamal/::userdb_mail=maildir:~/Maildir but if i use mail uid it work fine.. jamal@example.com:{PLAIN}123:8:12::/var/vmail/example.com/jamal/::userdb_mail=maildir:~/Maildir i tried using multiple uids as mention in wiki2.dovecot.org/LDA bye setting up setuid-root for dovecot-lda but im getting on-there error from sendmail :- Apr 25 17:30:41 host1 sendmail[31024]: q3PEUen2031022: to=<jamal(a)example.com>, delay=00:00:00, xdelay=00:00:00, mailer=dovecot, pri=120359, relay=dovecot, dsn=4.0.0, stat=Deferred: dovecot mailer (/usr/local/libexec/dovecot/dovecot-lda) exited with EX_TEMPFAIL im using sendmail. [root@host1 conf.d]# doveconf -n # 2.0.20: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.18-164.el5 x86_64 CentOS release 5.4 (Final) auth_debug = yes auth_debug_passwords = yes auth_verbose = yes auth_verbose_passwords = plain debug_log_path = /var/log/dovecot.log disable_plaintext_auth = no first_valid_gid = 12 first_valid_uid = 8 hostname = host1.bigmama.com info_log_path = /var/log/dovecot.log last_valid_gid = 50000 last_valid_uid = 50000 log_path = /var/log/dovecot.log mail_debug = yes mail_gid = mail mail_location = maildir:~/Maildir mail_uid = mail passdb { args = scheme=PLAIN username_format=%u /etc/dovecot/users driver = passwd-file } postmaster_address = root(a)host1.bigmama.com service auth { unix_listener auth-userdb { group = mail mode = 0666 user = mail } } ssl = no userdb { args = username_format=%u /etc/dovecot/users driver = passwd-file } protocol lda { info_log_path = /var/log/dovecot-lda.log log_path = /var/log/dovecot-lda-errors.log }

2 1

[Dovecot] 2.1.5 problem with mail_location
by postmaster 25 Apr '12

25 Apr '12

I've been advised to set : mail_location = maildir:~/ as the home directory is found through a sql request. this has been working perfectly up to and including 2.1.4 from 2.1.5 however this setting gives cause to a problem : instead of looking in the mail home eg /var/mail/domain/user\@domain/ dovecot is looking for mail in /var/mail/domain/user\@domain/~ the '~' directory is created upon the first request for mail and all future mail transactions in dovecot is done relative to this folder. is this behavior a bug or a feature ??? -- Bjarne D Mathiesen København N ; Danmark ; Europa ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ denne besked er skrevet i et totalt M$-frit miljø MacOS X 10.7.3 Lion ; 2.8GHz Intel Core i7 ; 16GB 1067MHz DDR3

2 1

[Dovecot] sieve vacation redirect problem
by Robert Schetterer 25 Apr '12

25 Apr '12

Hi , since upgrade sieve vacation, redirect stopped working getting postfix error while sending end of data -- message may be sent more than once i played a lot about sieve , lda submission host conf entries etc but all failed , i am not seeing any heavy bug in the logs -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

4 15

[Dovecot] Error compiling pigeonhole 0.3.0 with dovecot-2.1.5 in openbsd 5.0
by Joseba Torre 25 Apr '12

25 Apr '12

Hi, I've just tried to compile dovecot & pigeonhole in my openbsd box, and got this: gcc -DHAVE_CONFIG_H -I. -I../.. -I/home/seajob/build/dovecot-2.1.5 -I/home/seajob/build/dovecot-2.1.5/src/lib -I/home/seajob/build/dovecot-2.1.5/src/lib-dict -I/home/seajob/build/dovecot-2.1.5/src/lib-dns -I/home/seajob/build/dovecot-2.1.5/src/lib-mail -I/home/seajob/build/dovecot-2.1.5/src/lib-imap -I/home/seajob/build/dovecot-2.1.5/src/lib-fs -I/home/seajob/build/dovecot-2.1.5/src/lib-charset -I/home/seajob/build/dovecot-2.1.5/src/lib-index -I/home/seajob/build/dovecot-2.1.5/src/lib-storage -I/home/seajob/build/dovecot-2.1.5/src/lib-storage/index -I/home/seajob/build/dovecot-2.1.5/src/lib-storage/index/raw -I../.. -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -I/usr/include -MT managesieve-quote.o -MD -MP -MF .deps/managesieve-quote.Tpo -c -o managesieve-quote.o managesieve-quote.c mv -f .deps/managesieve-quote.Tpo .deps/managesieve-quote.Po gcc -DHAVE_CONFIG_H -I. -I../.. -I/home/seajob/build/dovecot-2.1.5 -I/home/seajob/build/dovecot-2.1.5/src/lib -I/home/seajob/build/dovecot-2.1.5/src/lib-dict -I/home/seajob/build/dovecot-2.1.5/src/lib-dns -I/home/seajob/build/dovecot-2.1.5/src/lib-mail -I/home/seajob/build/dovecot-2.1.5/src/lib-imap -I/home/seajob/build/dovecot-2.1.5/src/lib-fs -I/home/seajob/build/dovecot-2.1.5/src/lib-charset -I/home/seajob/build/dovecot-2.1.5/src/lib-index -I/home/seajob/build/dovecot-2.1.5/src/lib-storage -I/home/seajob/build/dovecot-2.1.5/src/lib-storage/index -I/home/seajob/build/dovecot-2.1.5/src/lib-storage/index/raw -I../.. -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -I/usr/include -MT managesieve-parser.o -MD -MP -MF .deps/managesieve-parser.Tpo -c -o managesieve-parser.o managesieve-parser.c managesieve-parser.c: In function 'quoted_string_istream_read': managesieve-parser.c:639: error: 'EPROTO' undeclared (first use in this function) managesieve-parser.c:639: error: (Each undeclared identifier is reported only once managesieve-parser.c:639: error: for each function it appears in.) *** Error code 1 Stop in /home/seajob/build/dovecot-2.1-pigeonhole-0.3.0/src/lib-managesieve (line 92 of /usr/share/mk/sys.mk). *** Error code 1 Stop in /home/seajob/build/dovecot-2.1-pigeonhole-0.3.0/src (line 289 of Makefile). *** Error code 1 Stop in /home/seajob/build/dovecot-2.1-pigeonhole-0.3.0 (line 474 of Makefile). *** Error code 1 Stop in /home/seajob/build/dovecot-2.1-pigeonhole-0.3.0 (line 353 of Makefile).

2 2

[Dovecot] dsync on large mailbox "fails"
by Jeff Kletsky 25 Apr '12

25 Apr '12

I've been trying to convert an existing set of mbox mail to maildir using dsync, but it seems to fail when it gets to the large boxes. $ dsync -Dv mirror maildir:~/Maildir Everything seems to work reasonably well until the first of the large boxes hits: dsync(jeff): Warning: Maildir /home/jeff/Maildir/.cron.2010-07-10: Synchronization took 1210 seconds (102289 new msgs, 0 flag change attempts, 0 expunge attempts) dsync(jeff): Warning: Transaction log file /home/jeff/Maildir/.cron.2010-07-10/dovecot.index.log was locked for 1210 seconds After this, the doveadm process goes from ~75% of the CPU core utilization to 100% and stays there, even overnight. I've also tried $ dsync -Dv backup maildir:~/Maildir with similar results. While I did see some threads on dsync speed, they seemed to be minutes for a few GB of data, not hours. There is plenty of space on the drive, and, from what I understand, there is not a file-count limit on FreeBSD's ufs (at least not one that I'm anywhere near) Any suggestions? Thanks! Jeff [jeff@mail ~]$ du -h -d 0 ~/mail 3.9G /home/jeff/mail [jeff@mail ~]$ ls -lh /var/mail/jeff -rw------- 1 jeff jeff 554M Apr 23 11:27 /var/mail/jeff [jeff@mail ~]$ df -h Filesystem Size Used Avail Capacity Mounted on /dev/ada0s2g 38G 18G 16G 53% / (Note that the hostname and the location of the ssl certificate has been manually edited for this message in the following output) From dmesg.boot: Copyright (c) 1992-2012 The FreeBSD Project. Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD is a registered trademark of The FreeBSD Foundation. FreeBSD 9.0-STABLE #0: Sat Apr 21 17:13:07 PDT 2012 root@my.host.name:/usr/obj/usr/src/sys/GENERIC i386 CPU: Intel(R) Atom(TM) CPU 330 @ 1.60GHz (1600.03-MHz 686-class CPU) Origin = "GenuineIntel" Id = 0x106c2 Family = 6 Model = 1c Stepping = 2 Features=0xbfe9fbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE> Features2=0x40e31d<SSE3,DTES64,MON,DS_CPL,TM2,SSSE3,CX16,xTPR,PDCM,MOVBE> AMD Features=0x20100000<NX,LM> AMD Features2=0x1<LAHF> TSC: P-state invariant, performance statistics real memory = 2147483648 (2048 MB) avail memory = 2077757440 (1981 MB) [jeff@mail ~]$ doveconf -n # 2.1.3: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 9.0-STABLE i386 auth_mechanisms = plain login disable_plaintext_auth = no first_valid_gid = 1000 first_valid_uid = 1000 listen = * mail_location = mbox:~/mail/:INBOX=/var/mail/%u mail_privileged_group = mail namespace { inbox = yes location = prefix = separator = / } passdb { args = session=yes dovecot driver = pam } protocols = imap service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-master { mode = 0600 } user = root } service imap-login { inet_listener imap { port = 0 } process_limit = 200 } ssl = required ssl_cert = </path/to/certificate.pem ssl_key = </path/to/certificate.pem userdb { args = blocking=yes driver = passwd } verbose_proctitle = yes protocol imap { imap_client_workarounds = tb-extra-mailbox-sep }

2 5

[Dovecot] trash plugin bug?
by Cor Bosman 25 Apr '12

25 Apr '12

Hey all, has anyone ever tried turning on the trash plugin when the directory is already over quota? I see some messages being deleted, but it seems it just deletes enough to fit the new email, not enough to go below quota. Example: . getquotaroot "Spam" * QUOTAROOT "Spam" "User quota" "Spam Quota" * QUOTA "User quota" (STORAGE 591036 5242880) * QUOTA "Spam Quota" (STORAGE 21173 20480) I now move a 5K message into this folder, and I see: Apr 23 22:26:43 lmtp1 dovecot: imap(cor): expunge: box=Spam, uid=226337, msgid=<3YVKIIE4II6R0064BA7IM55C2Q4MD01VX12U1I(a)shedevils.com>, size=12984 Apr 23 22:26:43 lmtp1 dovecot: imap(cor): expunge: box=Spam, uid=226338, msgid=<aab6bffa3ad83767d4a7bc571c31449c(a)bonus-news.com>, size=5623 Apr 23 22:26:43 lmtp1 dovecot: imap(cor): save: box=Spam, uid=227759, msgid=<20120423191509.F3B584A355B(a)signal.groundspeak.com>, size=2694 And now: . getquotaroot "Spam" * QUOTAROOT "Spam" "User quota" "Spam Quota" * QUOTA "User quota" (STORAGE 591016 5242880) * QUOTA "Spam Quota" (STORAGE 21158 20480) . OK Getquotaroot completed. This seems like a possible bug. For one, it shouldnt be allowed to actually save a message into that folder, but it does. The email does end up in the Spam folder even though the folder is over quota. And of course it doesnt clear up enough space to have the new email fit, it just deleted enough to match the 5K. Without the trash plugin quota is being properly enforced. Everything works fine if you start out below the quota limit btw. Regards, Cor ps: this is 2.1.4, but with the recent trash and quota patches applied.

2 3