- dovecot - dovecot.org

[Dovecot] New error messages
by Robin Atwood 23 Oct '09

23 Oct '09

I was glancing at my logwatch report when I noticed: dovecot: IMAP(robinmail): fchown(/home/robinmail/mail/.imap/INBOX/dovecot.index.log.newlock, -1, 10(wheel)) failed: Operation not permitted (egid=100(users), group based on /var/mail/robinmail): 1 Time(s) dovecot: IMAP(robinmail): fchown(/home/robinmail/mail/.imap/INBOX/dovecot.index.tmp, -1, 10(wheel)) failed: Operation not permitted (egid=100(users), group based on /var/mail/robinmail): 3 Time(s) So what's going on here? :) I am fairly sure I never had them before. Running dovecot 1.2.6. TIA -Robin -- ---------------------------------------------------------------------- Robin Atwood. "Ship me somewheres east of Suez, where the best is like the worst, Where there ain't no Ten Commandments an' a man can raise a thirst" from "Mandalay" by Rudyard Kipling ----------------------------------------------------------------------

2 2

[Dovecot] v2.0.alpha2 released
by Timo Sirainen 23 Oct '09

23 Oct '09

http://dovecot.org/releases/2.0/alpha/dovecot-2.0.alpha2.tar.gz http://dovecot.org/releases/2.0/alpha/dovecot-2.0.alpha2.tar.gz.sig Changes since alpha1: - All debug messages are now logged to debug log (debug_log_path setting, defaults to info_log_path). Patch by Pascal Volk. - Added support for SORT=DISPLAY IMAP extension. - Added doveadm who command for listing currently logged in users. - ssl_ciphers_list: Disable anonymous and export ciphers by default. - mail_chroot can now contain %variables (e.g. /home/%u) - fixed a bad maildir crashing bug - ssl-params is now run with +15 priority when generating the ssl parameters - Redesigned how login processes log in and create imap/pop3 processes. This fixes several settings and some other problems, plus it's now also possible for a single imap/pop3 process to handle multiple connections. If you want to try this, modify master.conf: service imap { # comment out: #service_count = 1 # This should be at least the number of CPUs, maybe more (2-3x?) process_min_avail = 4 # Limit the number of clients a single process can handle. # Disk IO is blocking, so some commands can take a while. client_limit = 5 } It currently doesn't even try to group same user's connections to same process, they'll just go randomly to whichever process manages to accept it first. Some day perhaps there should be a new service in the middle that keeps track of existing connections and forwards new ones to right mail processes. v2.0.beta1 TODO list: - master.conf has to be somehow put into defaults, so doveconf -n doesn't show its contents. an example master.conf would be minimal and show only those settings that admin might want to change (and those would show up in doveconf -n) - verbose_proctitle=yes is now quite useless because of the imap/pop3 process creation change. Probably enable linux-proctitle-hack and start changing the proctitle much more often. For example it could contain the command that's currently being run by user. And login processes could contain how many client connections they currently have. And other processes too something similar.. - change plugin hook design to allow multiple users in same process to run different plugins See alpha1 release announcement for more about these TODO: - v1.x config backwards compatibility - dsync is buggy - config process is slow - tcp-wrappers support

4 4

[Dovecot] Capability info in hello message not complete?
by Michal Hlavinka 23 Oct '09

23 Oct '09

Hi, one Fedora user complains about not some troubles after update to dovecot 1.2. He suspects wrong capability information given by dovecot 1.2 In dovecot.conf he uses imap_capability= option. While response to 'A CAPABILITY' respects imap_capability value, the capability info in hello message does not. for imap_capability=IMAP4 IMAP4rev1 ACL NAMESPACE CHILDREN SORT QUOTA THREAD=ORDEREDSUBJECT UNSELECT IDLE STARTTLS AUTH=PLAIN A CAPABILITY response is: * CAPABILITY IMAP4 IMAP4rev1 ACL NAMESPACE CHILDREN SORT QUOTA THREAD=ORDEREDSUBJECT UNSELECT IDLE STARTTLS AUTH=PLAIN but hello message is: * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE STARTTLS AUTH=PLAIN] Dovecot ready. But it seems even when imap_capability is not used capability in hello message is not complete: * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE STARTTLS AUTH=PLAIN] Dovecot ready. vs. * CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE SORT THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT IDLE CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH STARTTLS AUTH=PLAIN is this expected? Do you think capability information in hello message really can befool clients? Regards, Michal Hlavinka

2 7

[Dovecot] HA Dovecot Config?
by dovecot＠corwyn.net 23 Oct '09

23 Oct '09

Hi! I'm currently running Dovecot 1.1.8 on a HP server using CentOS 5.2 as my IMAP server, receiving mail from postfix, and also using squirrelmail as the frontend. As I look at upgrading the mail server, I'd like to change to a higher availability configuration (where the server can fail and I don't have to reconfig my imap users). For the SMTP that's easy, because I can use multiple MX records, and I can redirect a port forward from one server to another. But IMAP doesn't have the same functionality, because it's the storage that matters. What's the "best" way to do that? Clustered servers using a SAN? NAS? some sort of appliance in front? Suggestions? Thanks! Rick Rick Steeves http://www.sinister.net In reality nothing is more damaging to the adventurous spirit within a man than a secure future - Alexander Supertramp

11 16

[Dovecot] doveadm who
by Timo Sirainen 23 Oct '09

23 Oct '09

Pascal Volk suggested this, and it was pretty quick to implement for Dovecot v2.0. Ideas welcome how to improve it, or if it's already perfect :) The first line is written to stderr, so |sort can be used: # doveadm who|sort username # (ips) (pids) timo 1 (127.0.0.1) (2457) tss 2 (127.0.0.1) (617 1345) tss2 2 (127.0.0.2 127.0.0.1) (2392 2799) # doveadm who|sort -k2 -nr username # (ips) (pids) tss2 2 (127.0.0.2 127.0.0.1) (2392 2799) tss 2 (127.0.0.1) (617 1345) timo 1 (127.0.0.1) (2457) You can filter connections: # doveadm who 127.0.0.2 username # (ips) (pids) tss2 2 (127.0.0.2 127.0.0.1) (2392 2799) # doveadm who 127.0.0.0/24 username # (ips) (pids) tss2 2 (127.0.0.2 127.0.0.1) (2392 2799) timo 1 (127.0.0.1) (2457) tss 2 (127.0.0.1) (617 1345) # doveadm who tss username # (ips) (pids) tss2 2 (127.0.0.2 127.0.0.1) (2392 2799) tss 2 (127.0.0.1) (617 1345) # doveadm who tss 127.0.0.1 username # (ips) (pids) tss2 2 (127.0.0.2 127.0.0.1) (2392 2799) tss 2 (127.0.0.1) (617 1345)

1 0

[Dovecot] Need a little shadow to MySQL conversion help
by Marc Perkel 22 Oct '09

22 Oct '09

Excuse me for being stupid and confused. I'm trying to convert my dovecot install from passwd-file to mysql. I have a single table called "users" that has 3 fields, user_name, domain_name and password. The data came from passwd/shadow files so it uses the same password encryption as the shadow files do. The directory where the email is stored is calculated elsewhere and not stored in the database. The UID and GID are both mail for all virtual users. The user logs in passing the full email address and the password. So - what would be the config for using MySQL? Do I even need a userdb? If so - what would it be? Thanks in advance.

4 11

[Dovecot] VZW Blackberry BIS problems?
by B. Cook 22 Oct '09

22 Oct '09

Ever since Columbus day things have been strange with my two dovecot servers, according to my Blackberry users. We do not have a BES just the standard BIS that comes with a personal account. Several people have told me that since that Monday that they get occasional duplicate copies of messages which only appear singularly in their Maildir inboxes. I myself even called VZW and got transferred to RIM themselves where they 'reset' my account; (same as me going into the BIS server and deleting and adding again) only to have the same thing happen; again occasionally.. Below is relevant dovecot info.. -r-xr-xr-x 1 root wheel 164064 Oct 1 17:16 /usr/local/sbin/dovecot (date it was built; prior to any problems.. *whew*) ;) 1 # 1.2.4: /usr/local/etc/dovecot.conf 2 # OS: FreeBSD 7.2-RELEASE-p3 i386 3 ssl_cert_file: /usr/local/etc/lighttpd/ssl/mail.poughkeepsieschools.org.pem 4 ssl_key_file: /usr/local/etc/lighttpd/ssl/mail.poughkeepsieschools.org.pem 5 disable_plaintext_auth: no 6 verbose_ssl: yes 7 login_dir: /var/run/dovecot/login 8 login_executable: /usr/local/libexec/dovecot/imap-login 9 login_greeting: mail.poughkeepsieschools.org OK 10 first_valid_uid: 89 11 last_valid_uid: 89 12 first_valid_gid: 89 13 last_valid_gid: 89 14 maildir_copy_preserve_filename: yes 15 mail_plugins: quota imap_quota 16 imap_client_workarounds: delay-newmail outlook-idle tb-extra-mailbox-sep 17 auth default: 18 mechanisms: plain login 19 user: vpopmail 20 passdb: 21 driver: vpopmail 22 userdb: 23 driver: vpopmail 24 socket: 25 type: listen 26 client: 27 path: /var/run/dovecot/auth-client 28 mode: 438 29 plugin: 30 quota: maildir:User quota 31 expire: Trash 7 Spam 30 Now what does not show here is something that I put in that it looked like it was supposed to help but didn't.. mailbox_idle_check_interval = 30 after looking around at other people complaining about BIS and possible dovecot issues it seemed that that entry was the 'magic' the BIS was missing; except I never had it and never had troubles. I'm assuming this is a BIS issue of some sort, but I can't tell. After looking on the wiki I didn't see anything that says "BIS users look here for tips.. " So I'm assuming there aren't any; I think it should just work with the IMAP server.. Any help would be appreciated as everyone thinks this is 'our problem' and "if we had an exchange server we wouldn't be having these problems.." Thanks in advance..

3 3

[Dovecot] sieve + redirect + as attachment
by Jerry 22 Oct '09

22 Oct '09

Is it possible to use the 'redirect' function in 'sieve' to forward a message as an attachment rather than in-line? -- Jerry gesbbb(a)yahoo.com |::::======= |::::======= |=========== |=========== | A woman was in love with fourteen soldiers, it was clearly platoonic.

3 6

[Dovecot] Public Folders
by Peter Fraser 22 Oct '09

22 Oct '09

Hi All I'm trying to implement public folders. My dovecot -n readout is at the bottom. I created a maildir called resumes in /home/public Its contents are: mail# ls -la /home/public/resumes total 6 drwx------ 3 vmail vmail 512 Oct 22 08:58 . drwx------ 4 vmail vmail 512 Oct 22 08:47 .. drwx------ 5 vmail vmail 512 Oct 22 08:58 Maildir -rw------- 1 vmail vmail 0 Oct 21 18:30 dovecot-acl-list Then I created a directory called resumes in /usr/local/etc/dovecot-acls and in it, I created the file dovecot-acl I put the following entries in dovecot-acl owner lrwstiekxa user=user1 rwl When I connect as user1 in thunderbird, right click on the inbox and go subscribe, I see a greyed out public which I cannot subscribe to. I do not see resumes. Any ideas on why this is? mail# dovecot -n # 1.2.4: /usr/local/etc/dovecot.conf # OS: FreeBSD 7.2-RELEASE-p1 i386 protocols: imap imaps pop3 pop3s ssl_cert_file: /usr/local/etc/dovecot/ssl/certs/dovecot.pem ssl_key_file: /usr/local/etc/dovecot/ssl/private/dovecot.pem ssl_cipher_list: ALL:!ADH!LOW:!SSLv2:!EXP:+HIGH:+MEDIUM disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login login_greeting: Mail Server ready. verbose_proctitle: yes first_valid_uid: 1000 first_valid_gid: 1000 mail_privileged_group: vmail mail_location: maildir:~/Maildir:INBOX=~/Maildir/:INDEX=~/Maildir/tmp/index mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota acl imap_acl mail_plugins(imap): quota imap_quota acl imap_acl mail_plugins(pop3): quota mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 imap_client_workarounds(default): delay-newmail netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(imap): delay-newmail netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh dict_db_config: /usr/local/etc/dovecot-db.conf namespace: type: public separator: / prefix: public/ location: maildir:/home/public list: yes subscriptions: yes namespace: type: private separator: / location: maildir:/home/vmail/%u/Maildir inbox: yes list: yes subscriptions: yes lda: mail_plugins: quota acl postmaster_address: postmaster(a)example.com sendmail_path: /usr/sbin/sendmail auth default: mechanisms: plain login username_format: %Lu debug: yes passdb: driver: pam args: session=yes dovecot passdb: driver: ldap args: /usr/local/etc/dovecot-ldap.conf userdb: driver: static args: uid=1002 gid=1002 home=/home/vmail/%u allow_all_users=yes socket: type: listen client: path: /var/run/dovecot/auth-client mode: 432 master: path: /var/run/dovecot/auth-master mode: 384 plugin: quota: maildir quota2: maildir:user quota quota_rule: *:storage=512M quota_rule2: Trash:storage=10M quota_rule3: SPAM:ignore quota_warning: storage=95%% /usr/local/etc/dovecot/quota-warning.sh 95 quota_warning2: storage=80%% /usr/local/etc/dovecot/quota-warning.sh 80 acl: vfile:/usr/local/etc/dovecot-acls:cache_secs=300

2 1

Re: [Dovecot] pop3-login: Fatal: io_loop_handle_add: epoll_ctl(1, 5):
by Brandon Davidson 22 Oct '09

22 Oct '09

Hi Marco, On 10/22/09 1:50 AM, "Marco Nenciarini" <mnencia(a)prato.linux.it> wrote: > This morning it happened another time, another time during the daily > cron execution. > > Oct 22 06:26:57 server dovecot: pop3-login: Panic: Leaked file fd 5: dev > 0.12 inode 1005 > Oct 22 06:26:57 server dovecot: dovecot: Temporary failure in creating > login processes, slowing down for now > Oct 22 06:26:57 server dovecot: dovecot: child 21311 (login) killed with > signal 6 (core dumps disabled) > > I have dovecot 1.2.6 with Timo's patch to check leaked descriptors. I rebuilt the binaries on our hosts with optimization disabled, and I'm still waiting for it to reoccur so I can gather file descriptor information and a core. I don't have the leak-detect patch applied. Let's see what Timo has to say about that log file bit. Since it seems to happen to you fairly frequently, it might be worth enabling core dumps as well? -Brad

2 1

[Dovecot] NFS random redirects
by Thomas Hummel 22 Oct '09

22 Oct '09

Hello, Dovecot documentation states that the "random redirects to multiple servers" NFS solution is to be avoided and I'm investigation the actual risks of it and a way to put it to test. I'm running dovecot-1.2.6 with Maildir (indexes, mailboxes and control files are all on NFS) and I'm using procmail instead of deliver as the LDA. 1. Documentation says : "Dovecot locks the maildir while doing modifications to it or while looking for new messages in it" and then mention the "dovecot-uidlist.lock" dotlock file. a) if that file fcntl'ed in addition (i.e. dotlocked + fcntled or just dotlocked) ? b) is that file THE way to lock the Maildir mentionned above or is it just something else used only for updating that particular file (i.e. is Maildir locked in some way + dovecot-uidlist.lock created or just dovecot-uidlist.lock created) ? 2. Documentation says : "NFS caching is a big problem when multiple computers are accessing the same mailbox simultaneously" I guess it's because of the dotlocks files and not fcntl locking ? Is there anything else than dovecot-uidlist which is dotlocked ? If yes, is it dotlocked only or dotlocked and fcntled ? 3. Documentation says : "Dovecot v1.1 flushes NFS caches when needed if you set mail_nfs_storage=yes" How can a program flush the NFS caches ? By which (system) call ? 4. Documentation says : "Besides the NFS cache problems described above, mailbox contents can't be cached as well in the memory either." Is it about in-memory indexes or part of indexes loaded into memory ? 5. How can I torture-test concurrent access to the same mailbox through 2 dovecot servers ? I don't see imaptest.c anymore on http://dovecot.org/tools but I see 2 nfs_test ? Is there some command line options I should use ? 6. when and why can a random redirect to multiple server can cause mailbox corruption ? On flags only or on content as well ? Thanks -- Thomas Hummel | Institut Pasteur <hummel(a)pasteur.fr> | Pôle informatique - systèmes et réseau

4 9

[Dovecot] deliver+sieve: Destination address (-a) parsing changes
by Frank Behrens 21 Oct '09

21 Oct '09

When I upgraded my old, long running dovecot 1.1 to newer dovecot-1.2.4 + doevecot-sieve- 0.1.12 I observed a change in destination address (-a) parsing. Old behaviour: When Timo introduced this feature (http://www.dovecot.org/list/dovecot/2007-September/025813.html) it was possible to hand over only the detail part. In my sendmail configuration I used "-a +$h", where $h contains the detail part and may be empty. By default sendmail can call the delivery agent with the following information: $u: The recipient user (always set) $h: Detail part, may be empty $g: The sender address (relative to the recipient). New behaviour: The current sieve version needs a complete address with local- and domain-part. Otherwise we get a warning like deliver(user): sieve: envelope recipient address 'user' is unparseable. The problem is, that the domain part is not always available, e.g. for local delivered emails. This is the main problem, although the setup could be simplified if deliver would accept the old syntax. I'm going to make modifications to sendmail to be able to have all address information available, but this will not solve the problem with missing domain. Now comes my question: Is it better to enhance the address parsing in sieve plugin or should I use a wrapper around deliver? The latter is not very difficult, but introduces an additional process (that may fail). Regards, Frank -- Frank Behrens, Osterwieck, Germany PGP-key 0x5B7C47ED on public servers available.

3 7

[Dovecot] Courier to dovecot migration issue
by Rami Rami 21 Oct '09

21 Oct '09

Hello, I am trying to migrate users form courier to dovecot 1.2.6. The main configuration parameters are as follows : ------------------------------------------------------------------------------------------------------ # 1.2.6: /usr/local/etc/dovecot.conf Warning: fd limit 1024 is lower than what Dovecot can use under full load (more than 2304). Either grow the limit or change login_max_processes_count and max_mail_processes settings # OS: Linux 2.6.16-1.2133_FC5 i686 Fedora Core release 5 (Bordeaux) base_dir: /usr/local/var/run/ log_path: /var/log/dovecot.log info_log_path: /var/log/maillog protocols: imap imaps pop3 pop3s ssl: no disable_plaintext_auth: no login_dir: /usr/local/var/run//login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login max_mail_processes: 2048 verbose_proctitle: yes first_valid_uid: 100 last_valid_uid: 1000000 mail_location: maildir:~/Maildir:INDEX=/tmp/QUOTA/index/%u:CONTROL=/tmp/QUOTA/control/%u mail_debug: yes mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 namespace: type: private prefix: INBOX. inbox: yes list: yes subscriptions: yes auth default: passdb: driver: pam args: * userdb: driver: passwd plugin: quota: fs:acad_proto ------------------------------------------------------------------------------------------------ After using the "courier-dovecot-migrate.pl" script users using pop3 are re-downloading their old emails as duplicates. This issue is resolved by replacing : maildir:~/Maildir:INDEX=/tmp/QUOTA/index/%u:CONTROL=/tmp/QUOTA/control/%u with maildir:~/Maildir any idea on the reason of these duplicates or workarounds to prevent them while keeping indexes in /tmp. Thank you.

3 3

[Dovecot] testing needed
by Timo Sirainen 21 Oct '09

21 Oct '09

Can someone find an OS where the attached program doesn't work? It should print "success". So far tested for success: Linux 2.6, Solaris 10, FreeBSD 7.2, OpenBSD 4.2.

24 30

Re: [Dovecot] IMAP goes down from time to time
by Juan Felipe Estrada 20 Oct '09

20 Oct '09

Good afternoon again I was thinking about the Dovecot upgrading so i´m doing this in the next hours. in the other hand here i show you the dovecot-ldap.conf file I think it has just the necessary options to bind the LDAP server. /hosts = ********* base = ou=People,o=*****,o=****** ldap_version = 3 auth_bind = yes auth_bind_userdn = uid=%u,ou=People,o=******,o=****** /About the dovecot.conf should I use some login options as /login_process_per_connection = yes /or /login_processes_count = 1/? For now thanks so much for the help i´ll inform about the new version installation Juan Felipe Estrada dovecot-request(a)dovecot.org escribió: > Send dovecot mailing list submissions to > dovecot(a)dovecot.org > > To subscribe or unsubscribe via the World Wide Web, visit > http://dovecot.org/cgi-bin/mailman/listinfo/dovecot > or, via email, send a message with subject or body 'help' to > dovecot-request(a)dovecot.org > > You can reach the person managing the list at > dovecot-owner(a)dovecot.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of dovecot digest..." > > > Today's Topics: > > 1. Re: Need a little shadow to MySQL conversion help (Jerry) > 2. Re: Need a little shadow to MySQL conversion help (Marc Perkel) > 3. Re: Need a little shadow to MySQL conversion help > (Andreas Ntaflos) > 4. Re: Need a little shadow to MySQL conversion help > (Andreas Ntaflos) > 5. IMAP goes down from time to time (Juan Felipe Estrada) > 6. Re: VZW Blackberry BIS problems? (Patrick Domack) > 7. Re: IMAP goes down from time to time (Andreas Ntaflos) > 8. Re: IMAP goes down from time to time (Timo Sirainen) > 9. Re: VZW Blackberry BIS problems? (Timo Sirainen) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Tue, 20 Oct 2009 12:49:16 -0400 > From: Jerry <gesbbb(a)yahoo.com> > Subject: Re: [Dovecot] Need a little shadow to MySQL conversion help > To: dovecot(a)dovecot.org > Message-ID: <20091020124916.114b8820(a)scorpio.seibercom.net> > Content-Type: text/plain; charset=US-ASCII > > On Tue, 20 Oct 2009 17:57:35 +0200 > Andreas Ntaflos <daff(a)dword.org> wrote: > > >> On Tuesday 20 October 2009 17:07:49 Timo Sirainen wrote: >> >>> On Oct 20, 2009, at 9:45 AM, Andreas Ntaflos wrote: >>> >>>> I'd say you need a static userdb. Something like this: >>>> >>> A couple of small things: >>> >>>> passdb sql { >>>> args = /etc/dovecot/dovecot-sql.conf >>>> } >>>> >>>> userdb static { >>>> args = uid=vmail gid=vmail home=/var/vmail/%Ld/%Ln >>>> allow_all_users=yes } >>>> >>> %Ld/%Ln at this point works for now, but maybe not in future. I'd >>> have passdb already change it lowercase. Also allow_all_users=yes >>> isn't required (but maybe not harmful) since passdb sql is used. >>> >> That's good to know, thanks. And you're right of course, the passdb >> should already return the correct information, Dovecot shouldn't be >> asked to change anything afterwards. >> >> Fortunately I myself don't use MySQL anymore but have migrated >> everything to PostgreSQL. It does a much better job as a DBMS >> (remote, secured access to the DB, fine-grained permissions and >> rules) and also knows about case sensitivity. So foobar(a)example.com >> is not the same as FooBar(a)example.com. Which eliminates this problem >> class altogether. >> > > MySQL, since at least 5.x knows about case. You can Google for the > information if you want. > > >>>> password_query = SELECT password FROM view_users WHERE email='%u'; >>>> >>> SELECT password, email AS user FROM .. >>> >>> changes username to same case as it's in the database (so lowercase >>> probably) and there's no need to use %L anymore. >>> >> You mean something like >> >> SELECT password, LOWER(email) as user FROM view_users WHERE email='%u' >> >> should do the trick? I shall test this on my test server, just for >> fun. >> >> Andreas >>

1 0

[Dovecot] Expire plugin per domain
by Jose Luis Marin Perez 20 Oct '09

20 Oct '09

Dear Timo thank you for the help your giving me these. I want to set expire plugin only for some domains in the same way I set autocreate plugin. vchkpw-wrapper.sh #!/bin/bash DOMAIN=`echo $VPOPUSER|sed s/^.*@//` echo $USER > /tmp/autocreate echo $DOMAIN >> /tmp/autocreate if [ "$DOMAIN" = "operaciones.qnet.com.pe" ]; then export USERDB_AUTOCREATE=INBOX.Spam export USERDB_AUTOSUBSCRIBE=INBOX.Spam export USERDB_EXPIRE="INBOX.Spam 1 INBOX.Spam.* 1" export USERDB_EXPIRE_DICT="proxy::expire" export EXTRA="USERDB_AUTOCREATE USERDB_AUTOSUBSCRIBE USERDB_EXPIRE USERDB_EXPIRE_DICT" set > /tmp/environment fi unset USER exec $* Record the right information in the database but when you run /usr/local/sbin/dovecot --exec-mail ext /usr/local/libexec/dovecot/expire-tool --test Displays the following message Fatal: expire and expire_altmove settings not set You told me it was to migrate to Dovecot 1.2.6 with support for userdb chkpassword to use the following configuration: userdb: driver: prefetch userdb: driver: checkpassword args: /usr/local/bin/userdb.sh My problem is that I have no idea how to create the userdb.sh Please could help in the creation of this script? Thanks Jose Luis _________________________________________________________________ Explore the seven wonders of the world http://search.msn.com/results.aspx?q=7+wonders+world&mkt=en-US&form=QBRE

2 4

[Dovecot] Panic when using QRESYNC
by Michael M. Slusarz 20 Oct '09

20 Oct '09

Been seeing these occasionally for the last few weeks. Only way to fix is to remove cache files in the affected mailbox. Reproduced with both 1.2.5 and 1.2.6. IMAP transaction: ----------------- * PREAUTH [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE SORT THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT IDLE CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH] Logged in as slusarz 1 enable qresync * ENABLED QRESYNC 1 OK Enabled. 2 EXAMINE "INBOX" (QRESYNC (1254166848 789 1,2,6,7,109,113,193,230,231,279,284)) Log output: ----------- Oct 9 12:49:30 bigworm EXT(slusarz): : /home/slusarz/Maildir/dovecot.index.log: Transaction log changed unexpectedly, can't get modseq Oct 9 12:49:30 bigworm EXT(slusarz): : Panic: file imap-fetch.c: line 227 (get_expunges_fallback): assertion failed: (mail->uid > next_uid) Oct 9 12:49:30 bigworm EXT(slusarz): : Raw backtrace: /usr/lib/dovecot/imap [0x4a199b] -> /usr/lib/dovecot/imap(i_syslog_fatal_handler+0x2b) [0x4a1a5b] -> /usr/lib/dovecot/imap [0x4a10f6] -> /usr/lib/dovecot/imap(imap_fetch_begin+0x6bb) [0x42415b] -> /usr/lib/dovecot/imap(cmd_select_full+0x54a) [0x41e5ba] -> /usr/lib/dovecot/imap [0x420b4d] -> /usr/lib/dovecot/imap [0x420c2d] -> /usr/lib/dovecot/imap(client_handle_input+0x135) [0x420e55] -> /usr/lib/dovecot/imap(client_input+0x5c) [0x42192c] -> /usr/lib/dovecot/imap(io_loop_handler_run+0xbd) [0x4a988d] -> /usr/lib/dovecot/imap(io_loop_run+0x18) [0x4a8d08] -> /usr/lib/dovecot/imap(main+0x531) [0x429441] -> /lib/libc.so.6(__libc_start_main+0xfd) [0x7ffff76a09ed] -> /usr/lib/dovecot/imap [0x4199f9] Oct 9 12:49:30 bigworm dovecot: dovecot: child 9556 (imap) killed with signal 6 (core dumps disabled) GDB output: ----------- Program received signal SIGABRT, Aborted. 0x00007ffff76b3f15 in raise () from /lib/libc.so.6 (gdb) bt full #0 0x00007ffff76b3f15 in raise () from /lib/libc.so.6 No symbol table info available. #1 0x00007ffff76b5340 in abort () from /lib/libc.so.6 No symbol table info available. #2 0x00000000004a19ad in ?? () No symbol table info available. #3 0x00000000004a1a5b in i_syslog_fatal_handler () No symbol table info available. #4 0x00000000004a10f6 in i_panic () No symbol table info available. #5 0x000000000042415b in imap_fetch_begin () No symbol table info available. #6 0x000000000041e5ba in cmd_select_full () No symbol table info available. #7 0x0000000000420b4d in ?? () No symbol table info available. #8 0x0000000000420c2d in ?? () No symbol table info available. #9 0x0000000000420e55 in client_handle_input () No symbol table info available. #10 0x000000000042192c in client_input () No symbol table info available. #11 0x00000000004a988d in io_loop_handler_run () No symbol table info available. #12 0x00000000004a8d08 in io_loop_run () No symbol table info available. #13 0x0000000000429441 in main () No symbol table info available.

3 9

[Dovecot] IMAP goes down from time to time
by Juan Felipe Estrada 20 Oct '09

20 Oct '09

Good Afternoon I´m really new at this and i don´t know if i´m posting at the right place. My problem is that our Dovecot IMAP is stopping from time to time with no info in the log, i just realize about this when our support person call me saying that the whatsup monitor is showing the IMAP4 process down. I can figure about this too by trying to get in our webmail Horde and i cannot login. Here i post my Dovecot -n command i´ll appreciate any help. /# 1.0.7: /etc/dovecot.conf protocols: imap pop3 imaps pop3s ssl_cert_file: /etc/httpd/conf/ssl.crt/unimail.uninorte.edu.co.crt ssl_key_file: /etc/httpd/conf/ssl.key/unimail.uninorte.edu.co.key ssl_cipher_list: ALL:!LOW:!SSLv2 login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login mail_location: maildir:/home/vmail/%u/Maildir mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 auth default: mechanisms: plain login cache_size: 300 cache_ttl: 600 worker_max_count: 200 passdb: driver: ldap args: /etc/dovecot-ldap.conf passdb: driver: pam userdb: driver: static args: uid=500 gid=500 home=/home/vmail/%u userdb: driver: passwd socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix / Thanks so much Juan Felipe Estrada Universidad del Norte Barranquilla Colombia

3 2

[Dovecot] Question about IMAP IDLE (and Palm Pre)
by Ingo Thierack 20 Oct '09

20 Oct '09

Hello, i try to understand, how it works (IDLE). Try to get it successfully work with my new Palm Pre ;-) which looks like to have a lot issues wir imap... so i'll blame not dovecot for the issues. Sent a mail, from googlemail. processed by dovecot ad 12:11. what me now confusing, is, that there in the out-log is nothing visible, I expected, to see there was sent an notification, there was a new mail. Do i miss something? After arounde 15 minutes the Palm sent a "DONE" and reconnect. then the messages was received. Regards Ingo email come in 2009-10-19 12:11:27 | dovecot: | deliver(xxxxxxx(a)ghostdive.org): sieve: msgid=<ac2e3a8f0910190311t381d9e33j99e6aa4d1e07c88a(a)mail.gmail.com>: stored mail into mailbox 'INBOX' outfile-log * OK [RAWLOG TIMESTAMP] 2009-10-19 12:09:33 <<<~~A4 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE SORT THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT IDLE CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH] Logged in >>> <<<* CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE SORT THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT IDLE CH ILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH ~~A5 OK Capability completed. >>> <<<* FLAGS (\Answered \Flagged \Deleted \Seen \Draft NonJunk) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft NonJunk \*)] Flags permitted. * 42 EXISTS * 0 RECENT * OK [UIDVALIDITY 1252956599] UIDs valid * OK [UIDNEXT 156] Predicted next UID * OK [HIGHESTMODSEQ 132] Highest ~~A6 OK [READ-WRITE] Select completed. >>> <<<* SEARCH 124 125 126 127 128 129 130 131 132 133 134 136 137 138 139 140 141 142 144 145 146 147 148 149 150 155 ~~A7 OK Search completed (0.000 secs). >>> <<<* SEARCH ~~A8 OK Search completed (0.000 secs). >>> <<<* SEARCH ~~A9 OK Search completed (0.000 secs). >>> <<<* SEARCH ~~A10 OK Search completed (0.000 secs). >>> <<<* SEARCH 155 ~~A11 OK Search completed (0.000 secs). >>> <<<+ idling >>> * OK [RAWLOG TIMESTAMP] 2009-10-19 12:14:36 <<<* OK Still here >>> * OK [RAWLOG TIMESTAMP] 2009-10-19 12:19:36 <<<* OK Still here >>> in-log <<<~~A5 capability >>> <<<~~A6 select "Inbox" >>> <<<~~A7 UID SEARCH ALL UID 124:* >>> <<<~~A8 uid search unseen UID 124:* >>> <<<~~A9 uid search answered UID 124:* >>> <<<~~A10 uid search flagged UID 124:* >>> <<<~~A11 uid search deleted UID 124:* >>> <<<~~A12 IDLE >>> <<<DONE >>>

2 2

[Dovecot] deliver and stale NFS file handles
by Leon Meßner 20 Oct '09

20 Oct '09

Hello, since updating two of our backup mailservers from dovecot 1.1.16 to 1.2.4 i get the following errors from dovecot-deliver when receiving (smtp) mail. Oct 16 00:10:42 mail3 dovecot: deliver(user): write_full(/home/r/user/.temp.backupmail.22774.d17050a07b2108e8) failed: Stale NFS file handle Oct 16 00:10:42 mail3 dovecot: deliver(user): copy: i_stream_read() failed: Stale NFS file handle Oct 16 00:10:43 mail3 dovecot: deliver(user): msgid=<d0acb2021be1922ae2d35fbd6b09994c.squirrel(a)www.physik.tu-berlin.de>: save failed to INBOX: Internal error occurred. Refer to server log for more information. [2009-10-16 00:10:42] It nearly never happens with text/plain mails but _very_ often when mails have attachments of some different type. This is inside a 7.2-RELEASE-p2 FreeBSD jail. The NFS export is mounted from the machine that is running the jail. Locking with lockf works. Following is the output of `dovecot -n` from the mailserver. Please tell me if you need any further information. Thanks in Advance, Leon $ dovecot -n # 1.2.4: /usr/local/etc/dovecot.conf # OS: FreeBSD 7.2-RELEASE-p2 amd64 log_path: /var/log/dovecot.log protocols: imaps pop3s managesieve listen: mail3.physik.tu-berlin.de ssl_cert_file: /etc/private/backupmail.pem ssl_key_file: /etc/private/backupmail_privatekey.pem login_dir: /var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login login_executable(managesieve): /usr/local/libexec/dovecot/managesieve-login login_processes_count: 6 login_max_processes_count: 256 verbose_proctitle: yes first_valid_uid: 200 first_valid_gid: 300 mail_privileged_group: mail mail_location: maildir:~/maildir mmap_disable: yes mail_nfs_storage: yes mail_nfs_index: yes mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_executable(managesieve): /usr/local/libexec/dovecot/managesieve mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 mail_plugin_dir(managesieve): /usr/local/lib/dovecot/managesieve imap_client_workarounds(default): delay-newmail netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(imap): delay-newmail netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(pop3): imap_client_workarounds(managesieve): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh pop3_client_workarounds(managesieve): namespace: type: private separator: / inbox: yes list: yes subscriptions: yes namespace: type: private separator: / prefix: mail/ location: mbox:~/mail list: yes subscriptions: yes lda: postmaster_address: postmaster(a)physik.tu-berlin.de log_path: info_log_path: mail_plugins: sieve quota_full_tempfail: yes sendmail_path: /usr/sbin/sendmail auth default: mechanisms: gssapi plain login username_format: %Lu krb5_keytab: /etc/mail3.krb5.keytab gssapi_hostname: backupmail worker_max_count: 120 passdb: driver: pam args: session=yes failure_show_msg=yes max_requests=100 dovecot userdb: driver: passwd args: blocking=yes socket: type: listen client: path: /var/run/dovecot/auth-client mode: 432 master: path: /var/run/dovecot/auth-master mode: 384 plugin: sieve: ~/.dovecot.sieve sieve_dir: ~/.sieve

4 4

[Dovecot] Unknown setting: driver
by Rodolfo González González 20 Oct '09

20 Oct '09

Hi, the conversion from courier was done without problems, but now I have a problem with my auth config. I followed the sql example included in the latest dovecot source, and put driver=mysql in dovecot.conf (outside any section), and now I get: --- Error: Error in configuration file /usr/local/etc/dovecot.conf line 50: Unknown setting: driver Fatal: Invalid configuration in /usr/local/etc/dovecot.conf Starting DovecotError: Error in configuration file /usr/local/etc/dovecot.conf line 50: Unknown setting: driver Fatal: Invalid configuration in /usr/local/etc/dovecot.conf --- So I'm lost... what's wrong? if I followed the example :o Then, another question: I had to go back to courier so my users still can work, but I already created the files using the migration script: do I need to rerun the migration script? or what do I need to do when I manage to fix the error above and run dovecot? Thanks.

3 2

[Dovecot] clarify 'type', 'executable' & 'path' in 2.0 master.conf?
by PGNet Dev 19 Oct '09

19 Oct '09

@2.0's master.conf, there's, e.g., service config { type= config executable =config unix_listener { path = config mode = 0666 } } can someone please explain function/usage for the 'type', 'executable' & 'path' fields? and, for any file paths, are the presumed to be _relative_ to the dovecot executable? in $PATH? can they accept full/absolute paths? thanks.

4 45

[Dovecot] Can't use string ("0") as a HASH ref while "strict refs" in use at /usr/local/sbin/courier-dovecot-migrate.pl line 300.
by Rodolfo González González 19 Oct '09

19 Oct '09

Hello, I need to migrate from courier-imap to dovecot. I'm trying to use courier-dovecot-migrate.pl to migrate the users' maildirs but I'm getting these messages: --- # courier-dovecot-migrate.pl --to-dovecot --recursive mydomain.com Testing conversion to Dovecot format Finding maildirs under mydomain.com mydomain.com/contact/./Maildir: No imap/pop3 uidlist files mydomain.com/someone/./Maildir/courierpop3dsizelist: Broken header: /1 9 Can't use string ("0") as a HASH ref while "strict refs" in use at /usr/local/sbin/courier-dovecot-migrate.pl line 300. --- The courierpop3dsizelist files have contents like this one: --- /1 9 1181869523.M278844P24357V000000000000080CI006E803B_0.email,S=1216:2, 1241 8 --- and it seems that the script is failing with all the maildirs with courierpop3dsizelist. I use courier-imap 4.6.0, access using pop3 causes no problems. Any hint on what's wrong is appreciated, thanks. Salut, Rodolfo.

2 3

[Dovecot] Detect client application
by Thu NGUYEN 19 Oct '09

19 Oct '09

Hello, Do you have any way to detect the client which is connecting to our IMAP server? I actually have an mail server which use dovecot but I just want to allow mobile device access to this server to get email, not desktop as Outlook, Thunderbird ... Thanks for your advice. -- Regards, Thu NGUYEN

4 6

[Dovecot] Dovecot deliver with AD LDAP userdb
by Mark Schaub 19 Oct '09

19 Oct '09

Good Afternoon, I have my virtual users stored in an Active Directory database. As far as mail info goes the 2 important fields are: mail (their primary email address) and otherMailbox (a multivalue attribute containing their mail aliases). Right now all email addresses belong in the same domain and there are no immediate plans to change this. If I use Postfix to do the lookups and delivery only using Dovecot for passdb Pam driver and a static userdb then everything delivers fine to mail and otherMailbox addresses. I have been working on switching over to Dovecot's deliver process in order to integrate sieve capability. I have configured userdb ldap and passdb ldap in Dovecot and have set up master and client sockets. Before I describe my problem let me show you my configuration (as I think the dovecot-ldap.conf in particular needs to be explained). Here are the important parts of dovecot.conf: auth default { socket listen { master { path = /usr/var/run/dovecot/auth-master mode = 0666 user = vmail group = vmail } client { path = /var/spool/postfix/private/auth mode = 0666 user = postfix group = postfix } } passdb ldap { args = /etc/dovecot-ldap.conf } userdb ldap { # Path for LDAP configuration file, see doc/dovecot-ldap-example.conf args = /etc/dovecot-ldap.conf } and my dovecot -n: lda: postmaster_address: postmaster(a)sau24.org mail_plugins: sieve auth default: mechanisms: plain login debug: yes passdb: driver: ldap args: /etc/dovecot-ldap.conf userdb: driver: ldap args: /etc/dovecot-ldap.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 438 user: postfix group: postfix master: path: /usr/var/run/dovecot/auth-master mode: 438 user: vmail group: vmail plugin: sieve: ~/.dovecot.sieve sieve_dir: ~/sieve sieve_storage: ~/sieve Further, here is my dovecot-ldap.conf: hosts = delldb.sau24.org:3268 base = dc=sau24, dc=org ldap_version = 3 dn = cn=Mail User,cn=Users,dc=sau24,dc=org dnpass = secret auth_bind = yes scope = subtree user_attrs = sAMAccountName=home=/home/vmail/%$,=uid=501,=gid=501 pass_attrs = sAMAccountName=user user_filter = (&(objectclass=person)(|(sAMAccountName=%n)(mail=%n@sau24.org)(otherMailbox=%n@sau24.org))) pass_filter = (&(objectclass=person)(|(sAMAccountName=%n)(mail=%n@sau24.org)(othermailbox=%n@sau24.org))) Now, you'll notice that the user_filter and pass_filter have the domain statically placed after the mail and othermailbox attributes. This reason for this is that this ldap configuration is used for both authentication purposes and local delivery, so its not always being passed the domain info (for authentication it gets the users IP address). Since all my users are on the same domain I can statically set this here. This setup authenticates users to imap and pop (users use their sAMAccountName as their username when they log in), and pulls their correct home directory. Checking mail is not a problem at all. Further, this setup will deliver mail correctly to mail addressed to the value in the "mail" attribute. The problem seems to be in the otherMailbox attribute, it cannot lookup the users sAMAccountName based off of the otherMailbox field. Here is what it looks like in the logs for mail sent to my "mail" attribute (mark.schaub(a)sau24.org) Oct 14 12:36:19 auth(default): Info: master in: USER 1 mark.schaub(a)sau24.org service=deliver Oct 14 12:36:19 auth(default): Info: ldap(mark.schaub(a)sau24.org): user search: base=dc=sau24, dc=org scope=subtree filter=(&(objectclass=user)(|(sAMAccountName=mark.schaub)(mail=mark.schaub@sau24.org)(otherMailbox=mark.schaub@sau24.org))) fields=sAMAccountName Oct 14 12:36:19 auth(default): Info: ldap(mark.schaub(a)sau24.org): result: sAMAccountName(home=/home/vmail/%$)=/home/vmail/mschaub Oct 14 12:36:19 auth(default): Info: master out: USER 1 mark.schaub(a)sau24.org home=/home/vmail/mschaub uid=501 gid=501 Oct 14 12:36:19 deliver(mark.schaub(a)sau24.org): Info: sieve: msgid=<6b71e3a70910140936v4e8cd6fdwd847a1721a9d9786(a)mail.gmail.com>: stored mail into mailbox 'INBOX' But this is what I get when I try to send to an address listed in my otherMailbox field (tech(a)sau24.org) Oct 14 12:30:58 auth(default): Info: master in: USER 1 tech(a)sau24.org service=deliver Oct 14 12:30:58 auth(default): Info: ldap(tech(a)sau24.org): user search: base=dc=sau24, dc=org scope=subtree filter=(&(objectclass=user)(|(sAMAccountName=tech)(mail=tech@sau24.org)(otherMailbox=tech@sau24.org))) fields=sAMAccountName Oct 14 12:30:58 auth(default): Info: ldap(tech(a)sau24.org): Unknown user Oct 14 12:30:58 auth(default): Info: master out: NOTFOUND 1 As a test I tried modifying my dovecot-ldap.conf to use different fields instead of otherMailbox. Sending to some of those attributes worked, others didnt. I could use the "sn" and "givenName" attributes, but "postalCode" and "title" would give the same error as otherMailbox. My question is this: is there something wrong with my configuration or can Dovecot only query certain fields in the user_attr string? Thanks, ~ Mark

4 7