- dovecot - dovecot.org

[Dovecot] Are host names a secret?
by Timo Sirainen 24 Jul '09

24 Jul '09

Some time ago I added the ability for IMAP clients to fetch messages' GUIDs using FETCH X-GUID command. Because of a bug it wasn't working in 1.2.0 or 1.2.1, but I've fixed it now. But now I'm starting to wonder: With Maildirs the GUIDs are the maildir base filenames, which contain host names. Is it a bad idea to expose them to users?

8 10

[Dovecot] Maildir from offlineimap, INBOX folder created
by Ng Oon-Ee 24 Jul '09

24 Jul '09

Hi, I'm using dovecot to serve up a Maildir created/served by offlineimap. The layout is typical (as far as I know) of maildirs, with the root folder having cur, tmp, new, and subfolders being a folder within the root folder. Since I'd previously used Evolution to access this maildir, my subfolders were actual subfolders (separator /). Anyway, it all works spiffingly well, except that I can't see my inbox at all. What happens is that attempting to subscribe to Inbox will create an INBOX folder in the root folder, which is (of course) empty, so I see an empty folder. For completeness, my dovecot -n... # 1.1.17: /etc/dovecot/dovecot.conf # OS: Linux 2.6.30-ARCH x86_64 ext3 protocols: imap listen: localhost ssl_disable: yes disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login mail_location: maildir:/home/data/Profiles/OfflineIMAP/root:LAYOUT=fs auth default: passdb: driver: pam userdb: driver: passwd Thanks for the help.

3 11

[Dovecot] Commercial Support
by Tommy Ng 23 Jul '09

23 Jul '09

Hi, my company would like to subscribe the commercial support for the product, may I have more information on this? (e.g. cost, support hours, SLA). Thanks & Regards MJK Yahoo!香港提供網上安全攻略，教你如何防範黑客! 請前往 http://hk.promo.yahoo.com/security/ 了解更多!

2 1

[Dovecot] Problem with sieve scripts including sieve scripts
by Mauricio Tavares 23 Jul '09

23 Jul '09

I have the following global cmusieve scripts defined in /etc/dovecot/sieve, which is owned by the user deliver is run (virtual) as defined in the lda session of dovecot.conf: global-spam.script ====================================== require ["fileinto"]; # Move spam to spam folder if header :contains "X-Spam-Level" "********************" { fileinto "Spam"; # Stop here so that we do not reply on spam stop; } elsif header :contains "X-Spam-Flag" "Yes" { fileinto "Spam"; stop; } global-default.script ==================================== require ["include"]; include :global "global-spam.script"; i.e. all the default script does is call the spam script. I have created the compiled versions using sievec, making sure they are still owned by virtual: mail sieve # ls global-default.script global-spam.script global-vacation.script global-default.scriptc global-spam.scriptc global-vacation.scriptc mail sieve # In the plugins session of dovecot.conf I have defined the path for global scripts (so I can do the include :global thingie) and the path for the default script (just in case user does not have a custom script in the mail directory): plugin { sieve_global_dir = /etc/dovecot/sieve/ global_script_path = /etc/dovecot/sieve/global-default.script } So I send me some certifiable spam from my collection of test spam. This is what I got from the log: Jul 22 14:49:01 mail MailScanner[15047]: New Batch: Scanning 1 messages, 3206 bytes Jul 22 14:49:01 mail MailScanner[15047]: SpamAssassin cache hit for message C04F79F002F.784A8 Jul 22 14:49:01 mail MailScanner[15047]: Spam Checks: Found 1 spam messages Jul 22 14:49:02 mail MailScanner[15047]: Virus and Content Scanning: Starting Jul 22 14:49:02 mail MailScanner[15047]: Requeue: C04F79F002F.784A8 to 304C09F0012 Jul 22 14:49:02 mail postfix/qmgr[14869]: 304C09F0012: from=<raubvogel(a)gmail.com>, size=2518, nrcpt=1 (queue active) Jul 22 14:49:02 mail MailScanner[15047]: Uninfected: Delivered 1 messages Jul 22 14:49:02 mail deliver(raub(a)domain.com): Loading modules from directory: /usr/lib/dovecot/lda Jul 22 14:49:02 mail deliver(raub(a)domain.com): Module loaded: /usr/lib/dovecot/lda/lib90_cmusieve_plugin.so Jul 22 14:49:02 mail dovecot: auth(default): master in: USER 1 raub(a)domain.com service=deliver Jul 22 14:49:02 mail dovecot: auth(default): master out: USER 1 raub(a)domain.com uid=1500 gid=1500 home=/var/spool/vmail/domain.com/raub Jul 22 14:49:02 mail deliver(raub(a)domain.com): auth input: raub(a)domain.com Jul 22 14:49:02 mail deliver(raub(a)domain.com): auth input: uid=1500 Jul 22 14:49:02 mail deliver(raub(a)domain.com): auth input: gid=1500 Jul 22 14:49:02 mail deliver(raub(a)domain.com): auth input: home=/var/spool/vmail/domain.com/raub Jul 22 14:49:02 mail deliver(raub(a)domain.com): maildir: data=/var/spool/vmail/domain.com/raub Jul 22 14:49:02 mail deliver(raub(a)domain.com): maildir++: root=/var/spool/vmail/domain.com/raub, index=, control=, inbox=/var/spool/vmail/domain.com/raub Jul 22 14:49:02 mail deliver(raub(a)domain.com): cmusieve: /var/spool/vmail/domain.com/raub/.dovecot.sieve doesn't exist Jul 22 14:49:02 mail deliver(raub(a)domain.com): cmusieve: Using sieve path: /etc/dovecot/sieve/global-default.script Jul 22 14:49:02 mail deliver(raub(a)domain.com): cmusieve: Executing script /etc/dovecot/sieve/global-default.scriptc Jul 22 14:49:02 mail deliver(raub(a)domain.com): msgid=<000d01ca078a$d13122a0$6400a8c0@chameleonsh>: saved mail to INBOX Jul 22 14:49:02 mail postfix/pipe[15137]: 304C09F0012: to=<raub(a)domain.com>, relay=dovecot, delay=3.4, delays=3.3/0/0/0.1, dsn=2.0.0, status=sent (delivered via dovecot service) From what I gathered, mailscanner saw it was spam and tagged it. When the mail got back, postfix gave it to dovecot deliver, which then passed to cmusieve. Now, cmusieve saw user did not have a script defined, Jul 22 14:49:02 mail deliver(raub(a)domain.com): cmusieve: /var/spool/vmail/domain.com/raub/.dovecot.sieve doesn't exist So, it used the default script as it should, Jul 22 14:49:02 mail deliver(raub(a)domain.com): cmusieve: Using sieve path: /etc/dovecot/sieve/global-default.script Jul 22 14:49:02 mail deliver(raub(a)domain.com): cmusieve: Executing script /etc/dovecot/sieve/global-default.scriptc But, instead of calling the spam script, it simply delivered the spam mail to the inbox, Jul 22 14:49:02 mail deliver(raub(a)domain.com): msgid=<000d01ca078a$d13122a0$6400a8c0@chameleonsh>: saved mail to INBOX Why?

2 2

[Dovecot] 1.1.8 upgrade to 1.2
by Guy 23 Jul '09

23 Jul '09

Hi, I'm hoping to upgrade to 1.2 in the next couple of days. I remember seeing something mentioning some sort of config change, but unfortunately I don't remember where I saw it nor what the config option was. Are there any gotchas I need to watch out for in the change to 1.2 from 1.1.8? I've included dovecot -n below. Thanks Guy #dovecot -n # 1.1.8: /etc/dovecot/dovecot.conf # OS: Linux 2.6.24-23-server x86_64 Ubuntu 8.04.2 protocols: imap imaps pop3 pop3s listen(default): *:143 listen(imap): *:143 listen(pop3): *:110 ssl_listen(default): *:993 ssl_listen(imap): *:993 ssl_listen(pop3): *:995 ssl_cert_file: /etc/ssl/certs/imapd.pem ssl_key_file: /etc/ssl/private/imapd.pem disable_plaintext_auth: no verbose_ssl: yes login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_greeting: Dovecot ready on mink.domain.org. login_process_per_connection: no login_processes_count: 5 login_max_processes_count: 1024 login_max_connections: 1024 max_mail_processes: 1024 mail_max_userip_connections: 20 verbose_proctitle: yes mail_location: maildir:%h/Maildir/ mail_debug: yes mail_full_filesystem_access: yes mmap_disable: yes dotlock_use_excl: no mail_nfs_storage: yes mail_nfs_index: yes lock_method: dotlock mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugins(default): imap_quota quota mail_plugins(imap): imap_quota quota mail_plugins(pop3): quota mail_log_max_lines_per_sec: 30 imap_client_workarounds(default): outlook-idle delay-newmail netscape-eoh imap_client_workarounds(imap): outlook-idle delay-newmail netscape-eoh imap_client_workarounds(pop3): pop3_uidl_format(default): %08Xu%08Xv pop3_uidl_format(imap): %08Xu%08Xv pop3_uidl_format(pop3): %08Xv%08Xu pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh namespace: type: private separator: / inbox: yes list: yes subscriptions: yes namespace: type: private separator: / prefix: mail/ location: maildir:%h/Maildir/ hidden: yes subscriptions: yes auth default: cache_size: 2048 cache_ttl: 300 cache_negative_ttl: 1 username_chars: abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@' master_user_separator: * debug: yes passdb: driver: passwd-file args: /etc/dovecot/dovecot-master.pwd master: yes passdb: driver: sql args: /etc/dovecot/dovecot-mysql.conf userdb: driver: sql args: /etc/dovecot/dovecot-mysql.conf plugin: quota: maildir quota_rule: *:storage=100M quota_rule2: Trash:ignore -- Don't just do something...sit there!

2 1

[Dovecot] flat file dict
by Sven Strickroth 23 Jul '09

23 Jul '09

Hi, I'm using version 1.2.1 with acl. How do I use acl_shared_dict? Especially with file:-dictionary. What's the layout of that file? Is it possible that the file is ignored with the current version? If the file doesn't exist or isn't readable, I don' get any error message. Best regards, Sven

2 3

[Dovecot] PostLogout on Dovecot
by Fcuk F 23 Jul '09

23 Jul '09

Hi Timo/All Is it possible to have postlogout script for dovecot, similar to as you can have post logging in? Please advise.. Thanks Neil

1 0

[Dovecot] Released Sieve v0.1.9 for Dovecot v1.2.1
by Stephan Bosch 23 Jul '09

23 Jul '09

Hello Dovecot users, Relatively many bugs and problems were reported recently in a short period of time. Apparently, now that Dovecot v1.2 is finally stable, the new Sieve plugin is also starting to get used much more. No known bugs remain. Let's hope I didn't spawn any new ones. Apart from the bugfixes I made the deprecated notify plugin implementation compatible with CMUSieve. You can use it, but keep in mind that the (rather stupid) denotify command is not (yet) implemented and that the $text$ substitution does not work (yes, there is a world of differences compared to enotify). Changelog Sieve v0.1.9: * Removed the unfinished sieve-filter tool from the default build. It is now only built when the --with-unfinished-features switch is supplied during configure. + Started building support for the ereject version of the reject action, which has a preference to use an SMTP/LMTP protocol error in stead of a bounce message. This is to be used to make the Sieve plugin honour Deliver's -e parameter. This is not yet finished and not built by default. + Improved 'Permission denied' error messages just like Dovecot does, precisely specifying what permission is missing to access or create a file. + Added additional headers to the list of allowed headers for the address test. The restrictive nature of the address test is not always appropriate. Still thinking of a better, less restrictive implementation. + Made the deprecated notify extension compatible with the old CMUSieve plugin. However, the denotify command and the $text$ substitution are not yet supported. + Made the discard action log a message to avoid confusion about disappearing messages. - Fixed behavior of fileinto when delivering into a namespace prefix. It now uses silent delivery into INBOX as fallback. - Fixed logging of folder namespace prefix upon delivery into a prefixed namespace. Formerly it only logged the bare folder name. - Fixed a potential segfault in the argument validation. It didn't surface because no command could have a :tag followed by an associated parameter as last argument. - Fixed segfault bug occuring in envelope test when performed on null (<>) envelope path. The fix involves a rather large restructuring of the code to make sure envelope addresses are properly handled everywhere (bug reported by Nikita Koshikov) - Envelope: fixed bug in application of address parts; failure to obtain the part would cause inappropriate match success (bug reported by Ron Lee) - Fixed extension conflict checks during validation. It could sometimes produce useless errormessages. This is currently only used by the deprecated extensions. - Forgot to remove old explicit storage library dependency (patch by Arkadiusz Miskiewicz). - Fixed compiler warnings on certain platforms regarding the use fwrite for outgoing message construction -- The releases are available as follows: http://www.rename-it.nl/dovecot/1.2/dovecot-1.2-sieve-0.1.9.tar.gz http://www.rename-it.nl/dovecot/1.2/dovecot-1.2-sieve-0.1.9.tar.gz.sig -- Have fun testing the new releases and don't hesitate to notify me when there are problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

3 2

[Dovecot] Compiling Dovecot
by Jason Silkey 23 Jul '09

23 Jul '09

I'm attempting to compile Dovecot 1.2.1 from source with support for ManageSieve, with little success. ./configure seems to complete successfully, but make fails with the message: make: *** No targets. Stop. I checked the Makefile, and it's empty. I run into the same problem no matter the configure options, with or without the managesieve patch applied, and even with earlier versions (I also tried 1.2.0 and 1.1.17 just to see if it would work, but no go). I've had no problems compiling other software, so I'm at a bit of a loss here. Any thoughts?

2 1

[Dovecot] PAM_USER falsely assumed immutable
by Aaron Richton 23 Jul '09

23 Jul '09

In 1.2.1 there's: passdb-pam.c:230 status = pam_get_item(pamh, PAM_USER, &item); passdb-pam.c:237 auth_request_set_field(request, "user", item, NULL); so "item" is PAM_USER, which is then checked by auth_request_set_field: 1022 if (strcmp(request->user, value) != 0) { 1023 auth_request_log_debug(request, "auth", 1024 "username changed %s -> %s", 1025 request->user, value); that it hasn't changed. You're not allowed to assume that PAM_USER doesn't change. See, for example, http://www.kernel.org/pub/linux/libs/pam/Linux-PAM-html/adg-security-user-i… to say nothing of the fact that Rutgers has PAM modules that do exactly that (change PAM_USER). This check needs to be relaxed (or, perhaps if you want a config directive for DontComplyWithThePAMSpec = true, you can have a tunable). Can this be as simple as ditching the call to auth_request_set_field, or is there concern over interactions between PAM and other auth features?

2 2

[Dovecot] Defunct processes w/ v1.2.1
by Chris O'Regan 22 Jul '09

22 Jul '09

I have limited information at the moment (currently distracted by other projects) but I'm hoping that someone has already found and solved this problem. I have a v1.2.1 installed on my development box waiting for me to tinker with the configuration. On several occasions, I have noticed that all the dovecot processes are listed as "defunct". I don't recall seeing anything significant in the logs the last time I checked. The system is not under any load. Has anyone else encountered this before? If not, I will dig deeper. BTW, ignore the fd limit warning below; limits are set in the init script. # /local/bin/dovecot -n # 1.2.1: /local/pkg/dovecot-1.2.1/root/etc/dovecot.conf Warning: fd limit 1024 is lower than what Dovecot can use under full load (more than 10240). Either grow the limit or change login_max_processes_count and max_mail_processes settings # OS: Linux 2.4.21-58.ELsmp i686 Red Hat Enterprise Linux AS release 3 (Taroon Update 9) listen: localhost ssl_listen: * ssl_cert_file: /usr/share/ssl/certs/mail.encs.pem ssl_key_file: /usr/share/ssl/certs/mail.encs.pem login_dir: /var/run/dovecot/login login_executable: /local/pkg/dovecot-1.2.1/root/libexec/dovecot/imap-login login_processes_count: 32 login_max_processes_count: 2048 max_mail_processes: 8192 first_valid_uid: 200 mail_location: mbox:~/mail:INBOX=/var/spool/mail/%1u/% u:INDEX=/local/data/dovecot/indexes/mail/%1u/%u namespace: type: private separator: / inbox: yes list: yes subscriptions: yes namespace: type: private separator: / prefix: mail/ hidden: yes list: no subscriptions: yes namespace: type: private separator: / prefix: ~/mail/ hidden: yes list: no subscriptions: yes namespace: type: private separator: / prefix: ~%u/mail/ hidden: yes list: no subscriptions: yes auth default: passdb: driver: pam userdb: driver: passwd -- Chris O'Regan <chris(a)encs.concordia.ca> Senior Unix Systems Administrator, Academic IT Services Faculty of Engineering and Computer Science Concordia University, Montreal, Canada

3 10

[Dovecot] virtual plugin question
by Nikita Koshikov 22 Jul '09

22 Jul '09

Hello list, After enabling virtual plugin in dovecot config, I got imap segmentation faults from time to time. I can't say what event trigs this behavior, but in logs I see: Jul 22 13:55:01 dovecot: Error: child 20908 (imap) killed with signal 11 (core dumped) Jul 22 13:56:43 dovecot: Error: child 19466 (imap) killed with signal 11 (core dumped) Jul 22 14:06:16 dovecot: Error: child 22629 (imap) killed with signal 11 (core dumped) Jul 22 14:08:17 dovecot: Error: child 22879 (imap) killed with signal 11 (core dumped) Here is my config section, which I added to enable virtual plugin: namespace private { prefix = Company/ separator = / location = virtual:/var/mail/virtual subscriptions = no } and "virtual" to mail_plugins in imap and lda section. Full dovecot -n config provided at the end of this message. I'm not sure, if it is save to enable virtual location for all users using the same path, but the main goal for me - to create dovecot-virtual files once for all users. Maybe INDEX-es should be personalize for this setup work correct ? ls -la /var/mail/virtual/ drwxr-xr-x 2 mail mail 4096 Июл 22 15:43 all drwxr-xr-x 2 mail mail 4096 Июл 22 15:37 favorites -rw-r--r-- 1 mail mail 14 Июл 22 13:53 .virtual-subscriptions cat /var/mail/virtual/all/dovecot-virtual #all emails * all cat /var/mail/virtual/favorites/dovecot-virtual #Mark messages * flagged Core dump: gdb /usr/libexec/dovecot/imap /data/mail/domain.com/koshikov.n/core GNU gdb 6.8 Copyright (C) 2008 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "i686-pc-linux-gnu"... (no debugging symbols found) warning: Can't read pathname for load map: Input/output error. Reading symbols from /lib/libdl.so.2...(no debugging symbols found)...done. Loaded symbols for /lib/libdl.so.2 Reading symbols from /lib/libc.so.6...(no debugging symbols found)...done. Loaded symbols for /lib/libc.so.6 Reading symbols from /lib/ld-linux.so.2...(no debugging symbols found)...done. Loaded symbols for /lib/ld-linux.so.2 Reading symbols from /usr/lib/dovecot/imap/lib10_quota_plugin.so...(no debugging symbols found)...done. Loaded symbols for /usr/lib/dovecot/imap/lib10_quota_plugin.so Reading symbols from /usr/lib/dovecot/imap/lib11_imap_quota_plugin.so...(no debugging symbols found)...done. Loaded symbols for /usr/lib/dovecot/imap/lib11_imap_quota_plugin.so Reading symbols from /usr/lib/dovecot/imap/lib11_trash_plugin.so... (no debugging symbols found)...done. Loaded symbols for /usr/lib/dovecot/imap/lib11_trash_plugin.so Reading symbols from /usr/lib/dovecot/imap/lib20_autocreate_plugin.so...(no debugging symbols found)...done. Loaded symbols for /usr/lib/dovecot/imap/lib20_autocreate_plugin.so Reading symbols from /usr/lib/dovecot/imap/lib20_expire_plugin.so...(no debugging symbols found)...done. Loaded symbols for /usr/lib/dovecot/imap/lib20_expire_plugin.so Reading symbols from /usr/lib/dovecot/imap/lib20_virtual_plugin.so...(no debugging symbols found)...done. Loaded symbols for /usr/lib/dovecot/imap/lib20_virtual_plugin.so Reading symbols from /usr/lib/dovecot/imap/lib20_zlib_plugin.so...(no debugging symbols found)...done. Loaded symbols for /usr/lib/dovecot/imap/lib20_zlib_plugin.so Reading symbols from /lib/libz.so.1... (no debugging symbols found)...done. Loaded symbols for /lib/libz.so.1 Reading symbols from /lib/libbz2.so.1...(no debugging symbols found)...done. Loaded symbols for /lib/libbz2.so.1 (no debugging symbols found) Core was generated by `imap'. Program terminated with signal 11, Segmentation fault. [New process 29801] #0 0xb7f6157c in ?? () from /usr/lib/dovecot/imap/lib20_virtual_plugin.so (gdb) bt full #0 0xb7f6157c in ?? () from /usr/lib/dovecot/imap/lib20_virtual_plugin.so No symbol table info available. #1 0x083895d8 in ?? () No symbol table info available. #2 0x00000573 in ?? () No symbol table info available. #3 0xbfbeada0 in ?? () No symbol table info available. #4 0xbfbeadc8 in ?? () No symbol table info available. #5 0xbfbeadeb in ?? () No symbol table info available. #6 0x08389da4 in ?? () No symbol table info available. #7 0xbfbeadb8 in ?? () No symbol table info available. #8 0x08389da8 in ?? () No symbol table info available. #9 0x00000000 in ?? () No symbol table info available. dovecot -n: # 1.2.1: /etc/dovecot/dovecot.conf Warning: Growing pool 'settings' with: 8192 # OS: Linux 2.6.26-gentoo-r4 i686 Gentoo Base System release 1.12.11.1 log_path: /var/log/dovecot/dovecot-error.log info_log_path: /var/log/dovecot/dovecot.log protocols: imaps managesieve ssl_cert_file: /etc/ssl/dovecot/imaps.crt ssl_key_file: /etc/ssl/dovecot/imaps.key login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(managesieve): /usr/libexec/dovecot/managesieve-login login_greeting: Server ready. login_processes_count: 10 login_max_processes_count: 512 first_valid_uid: 8 last_valid_uid: 8 first_valid_gid: 12 last_valid_gid: 12 mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(managesieve): /usr/libexec/dovecot/managesieve mail_plugins(default): quota imap_quota trash expire zlib autocreate virtual mail_plugins(imap): quota imap_quota trash expire zlib autocreate virtual mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(managesieve): /usr/lib/dovecot/managesieve imap_client_workarounds(default): delay-newmail imap_client_workarounds(imap): delay-newmail imap_client_workarounds(managesieve): namespace: type: private separator: / inbox: yes list: yes subscriptions: yes namespace: type: private separator: / prefix: Company/ location: virtual:/var/mail/virtual list: yes namespace: type: public separator: / prefix: #Public/ location: maildir:/var/mail/public list: yes auth default: mechanisms: plain login cache_size: 10240 cache_negative_ttl: 0 user: dovecot_auth master_user_separator: * worker_max_count: 50 passdb: driver: passwd-file args: /etc/dovecot/passdb/master.pwd master: yes passdb: driver: passwd-file args: /etc/dovecot/passdb/users.pwd passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf userdb: driver: prefetch userdb: driver: ldap args: /etc/dovecot/dovecot-userdb-ldap.conf userdb: driver: passwd-file args: /etc/dovecot/passdb/users.pwd socket: type: listen client: path: /var/run/dovecot/auth-client mode: 432 user: mail group: dovecot_auth master: path: /var/run/dovecot/auth-master mode: 384 user: mail group: mail plugin: quota_warning: storage=95%% /etc/dovecot/plugins/quota_warning.sh 95 quota: maildir:Mailbox quota quota_rule: *:storage=500M quota_rule2: Trash:storage=10%% trash: /etc/dovecot/plugins/dovecot-trash.conf expire: Trash 30 Spam 30 expire_dict: proxy::expire autocreate: Drafts autocreate2: Sent autocreate3: Spam autocreate4: Trash autosubscribe: Drafts autosubscribe2: Sent autosubscribe3: Spam autosubscribe4: Trash sieve: ~/.dovecot.sieve sieve_dir: ~/sieve sieve_before: /etc/dovecot/sieve/default.sieve dict: expire: sqlite:/etc/dovecot/plugins/expire.conf

2 3

[Dovecot] Problem with INTERNALDATE when the year in localtime and GMT different
by 도원철 21 Jul '09

21 Jul '09

In my thought utc_offset function in src/lib/utc-offset.c returns wrong offset value when the year in localtime and GMT different. /* max offset of 24 hours */ if (ltm.tm_yday < gtm.tm_yday) offset = -24 * 60; else if (ltm.tm_yday > gtm.tm_yday) offset = 24 * 60; else offset = 0; I think this code should be modified as followings. /* max offset of 24 hours */ if ((ltm.tm_year == gtm.tm_year && ltm.tm_yday < gtm.tm_yday) || (ltm.tm_year < gtm.tm_year)) offset = -24 * 60; else if ((ltm.tm_year == gtm.tm_year && ltm.tm_yday > gtm.tm_yday) || (ltm.tm_year > gtm.tm_year)) offset = 24 * 60; else offset = 0; On 1 Jan. 2009, I found an error related to this code. The intrenal date of message recieved at 01-Jan-2009 07:17:38 was not display as it received. The protocol log was as followings. FETCH (INTERNALDATE “01-Jan-2009 07:17:38 -3900” RFC822.SIZE 1597 FLAGS (\Seen) ENVELOP (“Thu, 1 Jan 2009 07:17:38 +0900 (KST)” … The INTERNALDATE must be “01-Jan-2009 07:17:38 +0900”, but it was "01-Jan- 2009 07:17:38 -3900". This error may be caused by the bug in utc_offset.c. How do you think?

2 1

[Dovecot] plugin devel
by fernando＠dfcom.com.br 21 Jul '09

21 Jul '09

Hi, I´m planning to change our maildrop lda to deliver, but I need to devel a plugin in order to have some custom filtering. Are there any documentation regarding how to develop a dovecot plugin - tips, tricks, etc ? Thanks, Fernando

2 1

[Dovecot] [Bug] dovecot deliver v1.2.1 segfaults
by Nikita Koshikov 21 Jul '09

21 Jul '09

Hello list, I have noticed strange dovecot behavior with exim system-filter. I'm using exim+dovecot setup. My exim configuration have system filter enable, which restrict some attachments, like exe, vbs etc. When message with forbidden attachment received, exim accept the message, then construct bounce-message(Reject reason + original message) and returns it to sender. Trying to deliver such messages, I always get segmentation faults and message stayed in exim's queue. Others common delivers work fine. This only happens with bouncing system-filter messages. Steps to reproduce: 1) Create message with forbiden attachment 2) Send message. 3) Get segmentation fault. Here is more details: exim -d+all -M 1MSn7r-0003hN-BG (this command runs delivery from exim's queue) 13:14:23 11570 --------> koshikov.n(a)domain.com <-------- 13:14:23 11570 locking /var/spool/exim/db/retry.lockfile 13:14:23 11570 locked /var/spool/exim/db/retry.lockfile 13:14:23 11570 EXIM_DBOPEN(/var/spool/exim/db/retry) 13:14:23 11570 returned from EXIM_DBOPEN 13:14:23 11570 opened hints database /var/spool/exim/db/retry: flags=O_RDONLY 13:14:23 11570 dbfn_read: key=T:koshikov.n@domain.com 13:14:23 11570 no retry record exists 13:14:23 11570 search_tidyup called 13:14:23 11571 changed uid/gid: local delivery to koshikov.n <koshikov.n(a)domain.com> transport=local_delivery 13:14:23 11571 uid=8 gid=12 pid=11571 13:14:23 11571 auxiliary group list: <none> 13:14:23 11571 home=NULL current=/ 13:14:23 11571 set_process_info: 11571 delivering 1MSn7r-0003hN-BG to koshikov.n using local_delivery 13:14:23 11571 local_delivery transport entered 13:14:23 11571 direct command: 13:14:23 11571 argv[0] = /usr/libexec/dovecot/deliver 13:14:23 11571 argv[1] = -e 13:14:23 11571 argv[2] = -d 13:14:23 11571 argv[3] = $local_part@$domain 13:14:23 11571 expanding: $local_part@$domain 13:14:23 11571 result: koshikov.n(a)domain.com 13:14:23 11571 direct command after expansion: 13:14:23 11571 argv[0] = /usr/libexec/dovecot/deliver 13:14:23 11571 argv[1] = -e 13:14:23 11571 argv[2] = -d 13:14:23 11571 argv[3] = koshikov.n(a)domain.com 13:14:23 11571 Writing message to pipe 13:14:23 11571 writing data block fd=11 size=0 timeout=3600 13:14:23 11573 set_process_info: 11573 reading output from |/usr/libexec/dovecot/deliver -e -d $local_part@$domain 13:14:23 11571 writing data block fd=11 size=814 timeout=3600 13:14:23 11571 writing data block fd=11 size=0 timeout=3600 13:14:23 11571 local_delivery transport yielded 2 13:14:23 11571 search_tidyup called 13:14:23 11570 local_delivery transport returned FAIL for koshikov.n(a)domain.com 13:14:23 11570 post-process koshikov.n(a)domain.com (2) 13:14:23 11570 LOG: MAIN 13:14:23 11570 <koshikov.n(a)domain.com>: local_delivery transport output: Warning: Growing pool 'Plugin strings' with: 1024 13:14:23 11570 LOG: MAIN 13:14:23 11570 ** koshikov.n(a)domain.com F=<> R=ldap_accept T=local_delivery: Child process of local_delivery transport (running command "/usr/libexec/dovecot/deliver -e -d $local_part@$domain") was terminated by signal 11 (Segmentation fault) 13:14:23 11570 >>>>>>>>>>>>>>>> deliveries are done >>>>>>>>>>>>>>>> 13:14:23 11570 changed uid/gid: post-delivery tidying 13:14:23 11570 uid=8 gid=12 pid=11570 13:14:23 11570 auxiliary group list: <none> 13:14:23 11570 set_process_info: 11570 tidying up after delivering 1MSn7r-0003hN-BG 13:14:23 11570 Processing retry items 13:14:23 11570 Succeeded addresses: 13:14:23 11570 koshikov.n(a)domain.com: no retry items 13:14:23 11570 Failed addresses: 13:14:23 11570 Deferred addresses: 13:14:23 11570 koshikov.n(a)domain.com: no retry items 13:14:23 11570 koshikov.n(a)domain.com: no retry items 13:14:23 11570 end of retry processing 13:14:23 11570 LOG: MAIN 13:14:23 11570 Frozen (delivery error message) 13:14:23 11570 delivery deferred: update_spool=1 header_rewritten=0 13:14:23 11570 Writing spool header file 13:14:23 11570 Size of headers = 707 13:14:23 11570 end delivery of 1MSn7r-0003hN-BG 13:14:23 11570 search_tidyup called 13:14:23 11570 search_tidyup called 13:14:23 11570 >>>>>>>>>>>>>>>> Exim pid=11570 terminating with rc=0 >>>>>>>>>>>>>>>> dovecot-deliver log, while trying to deliver this message: ==> /var/log/dovecot/dovecot-deliver.log <== Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: Loading modules from directory: /usr/lib/dovecot/lda Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: Module loaded: /usr/lib/dovecot/lda/lib10_quota_plugin.so Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: Module loaded: /usr/lib/dovecot/lda/lib11_trash_plugin.so Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: Module loaded: /usr/lib/dovecot/lda/lib20_expire_plugin.so Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: Module loaded: /usr/lib/dovecot/lda/lib90_sieve_plugin.so Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: auth input: uid=8 Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: auth input: gid=12 Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: auth input: home=/data/mail/domain.com/koshikov.n Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Warning: Growing pool 'userdb lookup replys' with: 1024 Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: auth input: mail=maildir:/data/mail/domain.com/koshikov.n/data Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: Quota root: name=Mailbox quota backend=maildir args= Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: Quota rule: root=Mailbox quota mailbox=* bytes=524288000 messages=0 Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: Quota rule: root=Mailbox quota mailbox=Trash bytes=52428800 (10%) messages=0 Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: Quota warning: bytes=498073600 (95%) messages=0 command=/etc/dovecot/plugins/quota_warning.sh 95 Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Warning: Growing pool 'Expire pool' with: 1024 Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: Namespace: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: maildir: data=/data/mail/domain.com/koshikov.n/data Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: maildir++: root=/data/mail/domain.com/koshikov.n/data, index=, control=, inbox=/data/mail/domain.com/koshikov.n/data Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: Namespace: type=public, prefix=#Public/, sep=/, inbox=no, hidden=no, list=1, subscriptions=no Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: maildir: data=/var/mail/public Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: maildir++: root=/var/mail/public, index=, control=, inbox= Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Warning: Growing pool 'mail user' with: 1024 Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: trash plugin: Added 'Trash' with priority 1 Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: trash plugin: Added 'Spam' with priority 2 Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: expire: No expiring in mailbox: Dovecot Delivery Mail Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: sieve: using sieve path for user's script: /data/mail/domain.com/koshikov.n/.dovecot.sieve Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: sieve: executed before user's script(1): /etc/dovecot/sieve/default.sieve Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: sieve: opening script /etc/dovecot/sieve/default.sieve Jul 20 13:19:53 deliver(koshikov.n(a)domain.com): Info: sieve: opening script /data/mail/domain.com/koshikov.n/.dovecot.sieve In system log I get: deliver[9476]: segfault at 0 ip b7e16713 sp bfa0ba2c error 4 in libc-2.9.so[b7da4000+13d000] deliver[11572]: segfault at 0 ip b7f41713 sp bfb38b4c error 4 in libc-2.9.so[b7ecf000+13d000] deliver[12433]: segfault at 0 ip b7e7e713 sp bfb73b8c error 4 in libc-2.9.so[b7e0c000+13d000] dovecot -n: # 1.2.1: /etc/dovecot/dovecot.conf Warning: Growing pool 'settings' with: 8192 # OS: Linux 2.6.26-gentoo-r4 i686 Gentoo Base System release 1.12.11.1 log_path: /var/log/dovecot/dovecot-error.log info_log_path: /var/log/dovecot/dovecot.log protocols: imaps managesieve ssl_cert_file: /etc/ssl/dovecot/imaps.crt ssl_key_file: /etc/ssl/dovecot/imaps.key disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(managesieve): /usr/libexec/dovecot/managesieve-login login_greeting: Server ready. login_processes_count: 10 login_max_processes_count: 512 first_valid_uid: 8 last_valid_uid: 8 first_valid_gid: 12 last_valid_gid: 12 mail_debug: yes mail_drop_priv_before_exec: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(managesieve): /usr/libexec/dovecot/managesieve mail_plugins(default): quota imap_quota trash expire zlib autocreate mail_plugins(imap): quota imap_quota trash expire zlib autocreate mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(managesieve): /usr/lib/dovecot/managesieve imap_client_workarounds(default): delay-newmail imap_client_workarounds(imap): delay-newmail imap_client_workarounds(managesieve): namespace: type: private separator: / inbox: yes list: yes subscriptions: yes namespace: type: public separator: / prefix: #Public/ location: maildir:/var/mail/public list: yes auth default: mechanisms: plain login cache_size: 10240 cache_negative_ttl: 0 user: dovecot_auth master_user_separator: * worker_max_count: 50 passdb: driver: passwd-file args: /etc/dovecot/passdb/master.pwd master: yes passdb: driver: passwd-file args: /etc/dovecot/passdb/users.pwd passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf userdb: driver: prefetch userdb: driver: ldap args: /etc/dovecot/dovecot-userdb-ldap.conf userdb: driver: passwd-file args: /etc/dovecot/passdb/users.pwd socket: type: listen client: path: /var/run/dovecot/auth-client mode: 432 user: mail group: dovecot_auth master: path: /var/run/dovecot/auth-master mode: 384 user: mail group: mail plugin: quota_warning: storage=95%% /etc/dovecot/plugins/quota_warning.sh 95 quota: maildir:Mailbox quota quota_rule: *:storage=500M quota_rule2: Trash:storage=10%% trash: /etc/dovecot/plugins/dovecot-trash.conf expire: Trash 30 Spam 30 expire_dict: proxy::expire autocreate: Drafts autocreate2: Sent autocreate3: Spam autocreate4: Trash autosubscribe: Drafts autosubscribe2: Sent autosubscribe3: Spam autosubscribe4: Trash sieve: ~/.dovecot.sieve sieve_dir: ~/sieve sieve_extensions: +imapflags +notify sieve_before: /etc/dovecot/sieve/default.sieve dict: expire: sqlite:/etc/dovecot/plugins/expire.conf Linux: Gentoo x86 1.12.11.1 filesystem: ext3 I you need any addition information, please tell.

4 7

[Dovecot] quota bug
by Amr Shahin 21 Jul '09

21 Jul '09

Hello, please find this log from dovecot server * OK Dovecot ready. 1 login amrtest3 ********* 1 OK Logged in. 1 getquotaroot inbox * QUOTAROOT "inbox" 1 OK Getquotaroot completed. 1 logout * BYE Logging out 1 OK Logout completed. the user has unlimited quota, the back end authentication is mysql database, here is the record from the database account quota amrtest3 0 ... thanks for your help

2 2

[Dovecot] vpopmail and shared mailbox
by David Fuchs 20 Jul '09

20 Jul '09

hi all, I'm a long time courier-imap user and just switched to dovecot-1.2.1. my MTA is qmail and all user accounts are virtual vpopmail users. getting dovecot to work was mostly painless, but I am desperately trying to share a user's mailbox and can't seem to figure out how. unfortunately the documentation is not very helpful. I am trying to share the mailbox /home/vpopmail/domains/ example.com/someuser/Maildir here's what I put in dovecot.conf: namespace shared { separator = . prefix = shared.%%u. location = maildir:/home/vpopmail/domains/%%d/%%n/Maildir:INDEX=~/Maildir/shared/%%u subscriptions = no list = yes } I then logged in as someuser and did a "setacl anyone Inbox lrip". /home/vpopmail/domains/example.com/shared-mailboxes.db now contains an entry shared/shared-boxes/anyone/someuser(a)example.com 1 and /home/vpopmail/domains/example.com/someuser/Maildir/dovecot-acl has anyone ilpr however, when I connect to the server, the client does not see the "shared" namespace. also, dovecot seems to be creating empty shared-mailboxes.db in /home/vpopmail/domains/example/ (missing .com!). I'm very confused at this point, but I'm sure someone has gotten this to work and can help me out. fwiw, the output of dovecot -n is appended. thanks! - Dave.

2 8

[Dovecot] Problem with quota-dict
by Sascha Bendix 20 Jul '09

20 Jul '09

Hi, I wanted to migrate a mailserver from cyrus to dovecot. The new setup was using postfixadmin let the domain admins configure the hostet domains. To view the used quota in postfixadmin the usage of the quota dict backend is required. I have configured it according to the wiki but everytime I connect I get a sucessfully login and then every next command hangs. It seems to me, that the dict process itself is hanging. I even startet with a fresh mail box. The only way to login with my setup is to disable quota for the used protocol. My system is debian lenny based with dovecot 1.0.15 and PostgreSQL 8.3.7 as database server. My config is the following: # 1.0.15: /etc/dovecot/dovecot.conf log_timestamp: %Y-%m-%d %H:%M:%S protocols: imaps pop3s managesieve listen: [::] ssl_cert_file: /etc/ssl/certs/server.crt ssl_key_file: /etc/ssl/private/server.key login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login login_greeting: Ready. first_valid_uid: 8 last_valid_uid: 8 mail_privileged_group: mail mail_location: maildir:/var/mail/%d/%n mail_debug: yes mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugins(default): quota imap_quota acl mail_plugins(imap): quota imap_quota acl mail_plugins(pop3): quota mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %v.%u pop3_uidl_format(managesieve): sieve_storage(default): sieve_storage(imap): sieve_storage(pop3): sieve_storage(managesieve): /var/mail/sieve/%d/%n sieve(default): sieve(imap): sieve(pop3): sieve(managesieve): /var/mail/sieve/%d/%n.sieve namespace: type: private inbox: yes auth default: user: dovecot-auth passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: sql args: /etc/dovecot/dovecot-sql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 master: path: /var/run/dovecot/auth-master mode: 384 user: mail group: mail plugin: quota: dict:storage=10240 proxy::quota acl: vfile:/etc/dovecot/acls sieve: /var/mail/sieve/%d/%n.sieve dict: quota: pgsql:/etc/dovecot/dovecot-dict-quota.conf My /etc/dovecot/dovecot-dict-quota.conf: connect = host=localhost dbname=mail user=mail password=dovecot-passwort table = quota select_field = current where_field = path username_field = username My database table: CREATE TABLE quota ( username character varying(255) NOT NULL, path character varying(100) NOT NULL, "current" integer, CONSTRAINT quota_pkey PRIMARY KEY (username, path) ) WITH (OIDS=FALSE); ALTER TABLE quota OWNER TO mail; -- Trigger: mergequota on quota -- DROP TRIGGER mergequota ON quota; CREATE TRIGGER mergequota BEFORE INSERT ON quota FOR EACH ROW EXECUTE PROCEDURE merge_quota(); connect = host=localhost dbname=mail user=dovecot password=jianueyeePeev5o table = quota select_field = current where_field = path username_field = username My dovecot logfile with mail_debug=yes: Jul 20 21:06:17 skippy dovecot: Dovecot v1.0.15 starting up Jul 20 21:06:17 skippy dovecot: auth(default): pgsql: Connected to mail Jul 20 21:07:07 skippy dovecot: POP3(user(a)domain.tld): Loading modules from directory: /usr/lib/dovecot/modules/pop3 Jul 20 21:07:07 skippy dovecot: POP3(user(a)domain.tld): Module loaded: /usr/lib/dovecot/modules/pop3/lib10_quota_plugin.so Jul 20 21:07:07 skippy dovecot: POP3(user(a)domain.tld): Effective uid=8, gid=8 Jul 20 21:07:07 skippy dovecot: POP3(user(a)domain.tld): maildir: data=/var/mail/domain.tld/user Jul 20 21:07:07 skippy dovecot: POP3(user(a)domain.tld): maildir: root=/var/mail/domain.tld/user, index=/var/mail/domain.tld/user, control=, inbox= Jul 20 21:07:07 skippy dovecot: POP3(user(a)domain.tld): dict quota: uri = proxy::quota Jul 20 21:07:07 skippy dovecot: POP3(user(a)domain.tld): dict quota: byte limit = 52428800 Jul 20 21:07:07 skippy dovecot: POP3(user(a)domain.tld): dict quota: count limit = 0 Jul 20 21:07:07 skippy dovecot: pop3-login: Login: user=<user(a)domain.tld>, method=PLAIN, rip=::ffff:1.2.3.4, lip=::ffff:1.2.3.5, TLS Jul 20 21:07:07 skippy dovecot: dict: pgsql: Connected to mail Jul 20 21:07:07 skippy dovecot: dict: Timeout leak: 0x40e150 Jul 20 21:07:07 skippy dovecot: dict: WARNING: there is no transaction in progress I'm a little bit clueless because there is no significant output (even in strace). Can you please give me a clue? Regards, Sascha Bendix

2 1

[Dovecot] Filesystem size limitation?
by Tommy Ng 20 Jul '09

20 Jul '09

I'm new to dovecot, nice to meet you guys here. Referring to Redhat, 32bit Linux v5 GFS supports 16TB filesystem size while 64bit version supports 8 EB (1EB = 1024TB) size. Reference: http://www.redhat.com/rhel/compare/ My question is, any limitation on a single filesystem (Redhat GFS) that Dovecot can handle? or Dovecot depends only on the limitation of OS? Thanks in advance! MJK Yahoo!香港提供網上安全攻略，教你如何防範黑客! 請前往 http://hk.promo.yahoo.com/security/ 了解更多!

2 1

[Dovecot] Bug in Dovecot Managesieve or Horde ?
by Christian Felsing 20 Jul '09

20 Jul '09

Hello, there is a problem between Dovevot 1.2 Managesieve 0.11.7 and Horde webmail 1.2.2 (possibly also in 1.2.3) in imap4flags $ telnet localhost 2000 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. "IMPLEMENTATION" "dovecot" "SIEVE" "fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include body variables enotify environment" "SASL" "PLAIN LOGIN" "STARTTLS" "NOTIFY" "mailto" "VERSION" "1.0" OK "taunusstein.net imap4/pop3 ready." This shows imap4flags, Cyrus sieve shows imapflags instead that. Horde Ingos does not like that and complains about missing "imapflags". Two small patches in Horde code resolves that, but I do not know if that's the right way. cd webmail2/ingo/lib vi ./Script/sieve.php: function requires() { //return array('imapflags'); return array('imap4flags'); } vi ./tests/SieveTest.php: function testBlacklistMarker() { $bl = &new Ingo_Storage_blacklist(3); $bl->setBlacklist(array('spammer(a)example.com')); $bl->setBlacklistFolder(INGO_BLACKLIST_MARKER); $this->store($bl); //$this->assertScript('require "imapflags"; $this->assertScript('require "imap4flags"; if address :all :comparator "i;ascii-casemap" :is ["From", "Sender", "Resent-From"] "spammer(a)example.com" { addflag "\\\\Deleted"; keep; removeflag "\\\\Deleted"; stop; }'); } After that, Horde Ingo likes Dovecot mailsieve. Is it a bug of mailsieve ? Regards Christian

3 3

[Dovecot] dovecot 1.2rc5 fails to authenticate user via GSSAPI
by Michal Hlavinka 20 Jul '09

20 Jul '09

Hi, we're facing problem where dovecot 1.2rc5 is not able to authenticate user via gssapi. (I'm forwarding information from red hat's bugzilla) Steps to reproduce: 1. Install dovecot with kerberos support, create mailboxes for the client 2. Get initial credentials on client side 3. Attempt to log in via dovecot using gssapi -> login failed Client side 1. Email client displays: "[AUTHENTICATIONFAILED] Authentication failed." 2. klist before login shows: Valid starting Expires Service principal 06/18/09 20:01:01 06/19/09 20:01:01 krbtgt/realm@realm 3. klist after login attempt shows: Valid starting Expires Service principal 06/18/09 20:01:01 06/19/09 20:01:01 krbtgt/realm@realm 06/18/09 20:01:28 06/19/09 20:01:01 imap/mail.domain@realm Server side 1. /var/log/maillog: dovecot: auth(default): gssapi(user,192.168.0.1): authn_name not authorized dovecot: imap-login: Aborted login (auth failed, 1 attempts): user=<user>, method=GSSAPI, rip=192.168.0.1, lip=192.168.0.2, TLS ---------------- It is possible for the same user to login via other mechanisms. The issue reproduced with different email clients. Evolution and a custom java-based client were attempted. example of dovecot.conf: protocols = imap mail_location = maildir:/home/virtual/%u/Maildir protocol imap { } auth_krb5_keytab=/etc/dovecot.keytab auth default { mechanisms = gssapi userdb static { args = uid=vmail gid=vmail home=/home/virtual/%u } } ------------------------- Exactly the same dovecot setup was working just fine with dovecot 1.1 series. Authentication using kinit works just fine and kerberos infrastructure is functioning well as I use kerberos auth for other services like apache and ssh successfully. /var/log/maillog with using auth_debug=yes can be found here: https://bugzilla.redhat.com/attachment.cgi?id=348710 Regards, Michal Hlavinka

3 12

Re: [Dovecot] exim4 dovecot sasl problem
by Tristan Rex Santiago 20 Jul '09

20 Jul '09

what flag do i need to set in recompiling exim4 to enable dovecot-sasl support? i tried --enable-dovecot-sasl but exim4 still reported dovecot driver error. many thanks --- On Fri, 7/17/09, Tristan Rex Santiago <pgtr3s(a)yahoo.com> wrote: From: Tristan Rex Santiago <pgtr3s(a)yahoo.com> Subject: exim4 dovecot sasl problem To: dovecot(a)dovecot.org Cc: tansanph(a)gmail.com Date: Friday, 17 July, 2009, 4:36 PM hi! i'm trying to do smtp authentication using dovecot and exim4 by following this guide http://wiki.dovecot.org/HowTo/ EximAndDovecotSASL. for the exim4 part, i got an authenticator dovecot: cannot find authenticator driver "dovecot" error after i entered the codes in /etc/exim4/exim4.conf.template and reloaded exim4 with the update-exim4.conf command. i'm running debian lenny. here's the authentication section of exim4.conf.template: begin authenticators cram_md5: driver = cram_md5 public_name = CRAM-MD5 client_name = ${extract{1}{:}{${lookup{$ host}nwildlsearch{CONFDIR/ passwd.client}{$value}fail}}} client_secret = ${extract{2}{:}{${lookup{$ host}nwildlsearch{CONFDIR/ passwd.client}{$value}fail}}} PASSWDLINE=${sg{\ ${lookup{$host}nwildlsearch{ CONFDIR/passwd.client}{$value} fail}\ }\ {\\N[\\^]\\N}\ {^^}\ } plain: driver = plaintext public_name = PLAIN .ifndef AUTH_CLIENT_ALLOW_NOTLS_ PASSWORDS client_send = "<; ${if !eq{$tls_cipher}{}\ {^${extract{1}{:}{PASSWDLINE}} \ ^${sg{PASSWDLINE}{\\N([^:]+:)( .*)\\N}{\\$2}}\ }fail}" .else client_send = "<; ^${extract{1}{:}{PASSWDLINE}}\ ^${sg{PASSWDLINE}{\\N([^:]+:)( .*)\\N}{\\$2}}" .endif login: driver = plaintext public_name = LOGIN .ifndef AUTH_CLIENT_ALLOW_NOTLS_ PASSWORDS # Return empty string if not non-TLS AND looking up $host in passwd-file # yields a non-empty string; fail otherwise. client_send = "<; ${if and{\ {!eq{$tls_cipher}{}}\ {!eq{PASSWDLINE}{}}\ }\ {}fail}\ ; ${extract{1}{::}{PASSWDLINE}}\ ; ${sg{PASSWDLINE}{\\N([^:]+:)(. *)\\N}{\\$2}}" .else # Return empty string if looking up $host in passwd-file yields a # non-empty string; fail otherwise. client_send = "<; ${if !eq{PASSWDLINE}{}\ {}fail}\ ; ${extract{1}{::}{PASSWDLINE}}\ ; ${sg{PASSWDLINE}{\\N([^:]+:)(. *)\\N}{\\$2}}" .endif dovecot_login: driver = dovecot public_name = LOGIN server_socket = /var/run/dovecot/auth-client server_set_id = $auth1 dovecot_plain: driver = dovecot public_name = PLAIN server_socket = /var/run/dovecot/auth-client server_set_id = $auth1 Design your own exclusive Pingbox today! It's easy to create your personal chat space on your blogs Connect instantly with more friends on your blog and personal website? Create your latest Pingbox today! http://ph.messenger.yahoo.com/pingbox

2 1

[Dovecot] RFC: Different quota for dovecot and deliver
by Philipp Marek 20 Jul '09

20 Jul '09

Hello everybody, I've been with this question in IRC the last days, but no solution was found. So I looked into the sources, and came up with the attached (untested, not even compiled) patch against 1.2.1. Rationale ----------- I'd like to bounce on the external side, which is quite easy if the quota is stored in a SQL database; then eg. postfix can directly query it, and reject accordingly without doing any real work. Now, as discussed some time ago on the postfix list (cannot find it anymore, sorry), it would be best to *not* bounce internally, ie. when the mail is delivered in the mailbox, but to allow a small bit of over-usage instead. Thoughts ---------- Why don't we simply set the value seen by postfix down a bit? I don't think that this is the correct solution; if the difference between these two values is smaller than the allowed mail size we'd get internal bounces again. (And we wouldn't allow to *get* the amount of mail, btw, only to use it via COPY.) There are more complicated schemes, like putting a slightly higher quota in the configuration, and subtracting a bit in postfix again. I wouldn't see that as aesthetical, too. Furthermore all such schemes have the problem of being unstable - larger mails get (internally) rejected earlier than small ones. Wanted behaviour ------------------ What I'd like to achieve is that postfix uses the trigger value from the Database as well, but that deliver allows a small bit more - say 5, 10, or 20MB. Then one incoming mail simply makes the quota go over the defined limit; now postfix no longer accepts mail, but the incoming queue (amavis etc.) can be drained - at least if there's not some big hiccup in queue processing, and that's why I'd like to use a *different* quota, and not simply *none* (for deliver). Idea to solve this -------------------- The idea is that in the SQL configuration the name of an environment variable can be given to the SELECT query; this name, and the value of the environment variable, are used as an additional WHERE constraint. It would be much nicer if a stored procedure could be called with parameters (like Postfix allows), but that would mean a fair bit of change to dovecot. (And in Postgres at least the query could be rewritten with rules - but that's not that nice, either.) I've now looked into the sources, and tried to sketch the basic change that I imagine; please see the attached patch. Would something like that be acceptable? I thought for some time whether the additional query should use the filename part of the executable; then similar things could be done. But as this is a bit more general I settled for the environment variable. Thank you for all answers. Regards, Phil

3 6

[Dovecot] dovecot as lda : nothing happens
by denis 19 Jul '09

19 Jul '09

Hi, On debian lenny, I try to configure my setup (with Postfix virtual domains) to use dovecot as lda. I adjusted my settings to postfix and dovecot, but nothing happens... The dovecot.log is always empty and nothing seems to change, as if it had no effect. Here are my changes, if someone sees what would be problematic ... Thanks Denis main.cf ###### virtual_transport = dovecot dovecot_destination_recipient_limit = 1 # conf -> http://pastebin.com/mfdf596e master.cnf ######## dovecot unix - n n - - pipe flags=DRhu user=www-data:www-data argv=/usr/lib/dovecot/deliver -d $(recipient) http://pastebin.com/m41e07df0 ## conf -> http://pastebin.com/m41e07df0 ## postconf -n -> http://pastebin.com/m293a05f7 dovecot.conf ########## protocol lda { postmaster_address = root@xxx auth_socket_path = /var/run/dovecot/auth-master mail_plugins = cmusieve log_path = /var/log/dovecot.log } ## conf -> http://pastebin.com/m5c55d5b2 ## dovecot -n -> http://pastebin.com/m268fdb89

2 4

[Dovecot] Changed URLs of the automated Debian repositories
by Stephan Bosch 19 Jul '09

19 Jul '09

Hi, Due to the advent of Dovecot v2.0, I restructured the automated Debian package builder to build packages for v2.0 as well. Those of you using the automated repositories should change their /etc/apt/sources.list files as follows: Dovecot v1.1 for Debian Testing (binary and source): deb http://xi.rename-it.nl/debian/ testing-auto/dovecot-1.1 main deb-src http://xi.rename-it.nl/debian/ testing-auto/dovecot-1.1 main Dovecot v1.2 for Debian Testing (binary and source): deb http://xi.rename-it.nl/debian/ testing-auto/dovecot-1.2 main deb-src http://xi.rename-it.nl/debian/ testing-auto/dovecot-1.2 main Dovecot v2.0 for Debian Testing (binary and source): deb http://xi.rename-it.nl/debian/ testing-auto/dovecot-2.0 main deb-src http://xi.rename-it.nl/debian/ testing-auto/dovecot-2.0 main Dovecot v2.0 ManageSieve and Sieve need quite a few changes yet to become fully functional. ManageSieve is even still pretty much broken for the new Dovecot version. This means that Dovecot v2.0 (at least with respect to the Sieve support) is not quite ready for testing. That is also why the the v2.0 repository is not mentioned in the wiki. Regards, -- Stephan Bosch stephan(a)rename-it.nl

1 0