- dovecot - dovecot.org

[Dovecot] OT: Run Sieve On A Mailbox Manually
by Neil 22 Nov '08

22 Nov '08

(Apologies for being offtopic.) The subject basically says it all...does anyone know of a tool to run a sieve script on a mailbox (in particular, Maildirs) manually? Ideally, I'd like to do it without adding a bunch of new headers to the mail. So, could I just do a find (or for-loop, if it was just one maildir) command and pipe all the mails into deliver..? Thanks, Neil.

2 3

[Dovecot] folder deletion response problem
by Amr Shahin 22 Nov '08

22 Nov '08

dovecot version: 1.1.6 dovecot -n output # 1.1.6: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-53.el5PAE i686 CentOS release 5.2 (Final) ext3 log_path: /usr/local/dovecot/log protocols: imap ssl_disable: yes disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/local/dovecot/libexec/dovecot/imap-login last_valid_uid: 510 mail_location: maildir:/var/mails/%n:CONTROL=/var/no-quota/%n mail_executable: /usr/local/dovecot/libexec/dovecot/imap mail_plugins: quota imap_quota mail_plugin_dir: /usr/local/dovecot/lib/dovecot imap_capability: IMAP4rev1 SORT THREAD=REFERENCES MULTIAPPEND UNSELECT LITERAL+ IDLE CHILDREN NAMESPACE LOGIN-REFERRALS UIDPLUS LIST-EXTENDED I18NLEVEL=1 AUTH=PLAIN auth default: executable: /usr/local/dovecot/libexec/dovecot/dovecot-auth debug: yes passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: passwd socket: type: listen client: path: /var/run/dovecot/auth-client mode: 432 master: path: /var/run/dovecot/auth-master mode: 438 plugin: quota: maildir:User quota quota_rule: *:storage=1G quota_rule2: Trash:ignore quota_rule3: Spam:ignore sieve: /var/sieve-scripts/%n.sieve ============================================= grep -v '^ *$#.*$\?$' output: auth_debug=yes protocols = imap disable_plaintext_auth = no log_path = /usr/local/dovecot/log ssl_disable = yes login_user = dovecot mail_location = maildir:/var/mails/%n:CONTROL=/var/no-quota/%n first_valid_uid = 500 last_valid_uid = 510 first_valid_gid = 1 last_valid_gid = 0 protocol imap { login_executable = /usr/local/dovecot/libexec/dovecot/imap-login mail_executable = /usr/local/dovecot/libexec/dovecot/imap imap_capability = IMAP4rev1 SORT THREAD=REFERENCES MULTIAPPEND UNSELECT LITERAL+ IDLE CHILDREN NAMESPACE LOGIN-REFERRALS UIDPLUS LIST-EXTENDED I18NLEVEL=1 AUTH=PLAIN mail_plugins = quota imap_quota mail_plugin_dir = /usr/local/dovecot/lib/dovecot } protocol pop3 { } protocol lda { postmaster_address = amrnablus(a)gmail.com hostname=maktoob.com mail_plugins = quota cmusieve mail_plugin_dir = /usr/local/dovecot/lib/dovecot/lda/ sendmail_path=/usr/sbin/sendmail.postfix auth_socket_path = /var/run/dovecot/auth-master mode = 384 } auth_executable = /usr/local/dovecot/libexec/dovecot/dovecot-auth auth default { mechanisms = plain user = root passdb sql { args = /etc/dovecot/dovecot-sql.conf } userdb sql { args = /etc/dovecot/dovecot-sql.conf } socket listen { master { path = /var/run/dovecot/auth-master mode = 0666 } client { path = /var/run/dovecot/auth-client mode = 0660 } } userdb passwd { } user = root } dict { } plugin { quota = maildir:User quota quota_rule = *:storage=1G quota_rule2 = Trash:ignore quota_rule3 = Spam:ignore sieve = /var/sieve-scripts/%n.sieve } ================================== the problem is that when i try to delete an existing directory in a mailbox, it gets actually deleted, but the response says that the mailbox does not exist, please check this log: 1 login <username> <password> 1 OK Logged in. 1 Create AAA 1 OK Create completed. 1 list "" "*" * LIST (\HasNoChildren) "." "TestDir" * LIST (\HasNoChildren) "." "Contacts" * LIST (\HasNoChildren) "." "Calendar" * LIST (\HasNoChildren) "." "Notes" * LIST (\HasNoChildren) "." "Tasks" * LIST (\HasNoChildren) "." "Spam" * LIST (\HasNoChildren) "." "Draft" * LIST (\HasNoChildren) "." "Trash" * LIST (\HasNoChildren) "." "Journal" * LIST (\HasNoChildren) "." "Sent" * LIST (\HasNoChildren) "." "AAA" * LIST (\HasNoChildren) "." "INBOX" 1 OK List completed. 1 Delete AAA 1 NO Mailbox doesn't exist: AAA 1 list "" "*" * LIST (\HasNoChildren) "." "TestDir" * LIST (\HasNoChildren) "." "Contacts" * LIST (\HasNoChildren) "." "Calendar" * LIST (\HasNoChildren) "." "Notes" * LIST (\HasNoChildren) "." "Tasks" * LIST (\HasNoChildren) "." "Spam" * LIST (\HasNoChildren) "." "Draft" * LIST (\HasNoChildren) "." "Trash" * LIST (\HasNoChildren) "." "Journal" * LIST (\HasNoChildren) "." "Sent" * LIST (\HasNoChildren) "." "INBOX" 1 OK List completed. 1 logout * BYE Logging out 1 OK Logout completed.

3 2

[Dovecot] mail_privileged_group not working for dotlock files (1.1.6)
by Rob Mangiafico 22 Nov '08

22 Nov '08

Hello, Running dovecot 1.1.6 on centOS 5 and RHEL 5. With the settings: pop3_lock_session = yes mail_privileged_group = mail mail_location = mbox:~/:INBOX=/var/spool/mail/%u mbox_read_locks = fcntl mbox_write_locks = dotlock fcntl and /var/spool/mail permissions: drwxrwx--x 2 root mail 4096 Nov 19 10:16 mail/ Trying to connect via POP3 results in this error: --- Nov 19 09:31:01 lexiconn2 dovecot: child 32127 (pop3) killed with signal 11 Nov 19 09:31:01 lexiconn2 dovecot: POP3(cerberus): file_lock_dotlock() failed with mbox file /var/spool/mail/xxx: Permission denied Nov 19 09:31:01 lexiconn2 dovecot: pop3-login: Login: user=<xxx>, method=PLAIN, rip=1.2.3.4, lip=5.6.7.8, secured --- The docs seem to indicate the above config / settings should work. Is this a bug? The reason we have dotlock as the primary format is due to procmail LDA from sendmail: --- procmail -v 2>&1|grep Locking Locking strategies: dotlocking, fcntl() --- I assume we have to make the "mbox_write_locks" match the procmail locking... Thanks. Rob

2 3

[Dovecot] expire-tool fails if mail_location contains %h
by Thorsten Vollmer 21 Nov '08

21 Nov '08

Hi Timo, not long ago you fixed a bug regarding the expansion of ~/ in mail_location that prevented expire-tool from working correctly. A similar problem exists if mail_location contains %h: expire-tool will use the wrong path to access the mailbox. After replacing %h with ~, expire-tool works as expected. Why are there two variables for the home directory? Maybe the use of %h could be discouraged, sparing you some problems. Regards, Thorsten

2 2

[Dovecot] Separate quotas not displayed correctly
by Laurent Blume 21 Nov '08

21 Nov '08

Hello all, My system is set up to have quotas both on /var/mail, where emails are received, and on /export/home, where users' homedirs are. But the client (Thunderbird) shows the same /export/home values both for the Inbox and for the folders in the homedir, so a user cannot know where she stands on her /var/mail use. This is Dovecot 1.1.5. As per the wiki, the dovecot.conf file contains this: quota = fs:INBOX:mount=/var/mail quota2 = fs:Others:mount=/export/home A sample user: # quota -v testimap Disk quotas for testimap (uid 1143): Filesystem usage quota limit timeleft files quota limit timeleft /export/home 6490 10000 15000 0 0 0 /var/mail 0 20000 25000 0 0 0 When Icheck the Quota tab in the Properties of the Inbox, the field contains "Others", and the value are 6490 out of 10000. Any idea why this doesn't display the value of /var/mail? Laurent -- / Leader de Projet & Communauté | I'm working, but not speaking for \ G11N http://fr.opensolaris.org | Bull Services http://www.bull.com / FOSUG http://guses.org |

2 5

[Dovecot] FW: nfs troubles
by Bas van Oosterum 21 Nov '08

21 Nov '08

Hi all, I upgraded to dovecot 1.1.6 to be able to use NFS. Got a little issue: I can't move mail to another IMAP folder (so I can't delete to: moving to .trash does not work. Error message Oct 31 11:07:45 jozua-mailserver dovecot: IMAP(nicolette(a)kerknet.org): fdatasync_path(/var/mail/kerknet.org/nicolette/Maildir/.Trash/cur) failed: Invalid Argument I tried to use ll sorts of locking: no difference Who can help? Regards, Bas

2 3

[Dovecot] Dovecot and Bogofilter
by Matthias-Christian Ott 21 Nov '08

21 Nov '08

Hi, on my small Xen-virtualised server with 48 MiB RAM I use Postfix and Dovecot, because the Debian administrators dislike qmail [1], which is in my opinion despite some maintainability and code quality issues a quite well designed software, because it mostly follows the UNIX principles. Postfix is not able to sort my E-Mail into different Maildir folders and after I looked at procmail's source code, I decided to use Dovecot's LDA, because it supports sieve via a plugin. All in all it worked after some tweaking and Dovecot is now responsible for authentication and delivery. Furthermore I want to setup a spam filter and due to the memory constraints I decided in favour of bogofilter (I made no real world tests, but the authors claim that it's fast and has a small memory footprint). My first idea was train bogofilter via a cronjob that runs bogofilter for each E-Mail in my spam folder and deletes them afterwards. Then I stumbled upon the dovecot antispam [2] plugin and quickly wrote a backend for bogofilter. During the development I realised that bogofilter has to update the X-Bogosity header of the reclassified E-Mails. Johannes Berg told me that he wasn't sure whether dovecot would be able to do this and recommended to ask this on the mailing list. An other problem is that each mail needs to be initially classified and due to the fact that sieve is not able to execute external programmes, deliver has to do this task. I'm currently thinking of possibilities to implement this, so far I came up with the following: 1. Write a generic pipe plugin which can execute an arbitrary number of programmes. The problem with this is that I'm not sure how to integrate this is in Dovecot's configuration file. I thought of something like this: pipe = prg1 | prg2 2. Write a bogofilter-specific plugin for this. Anyhow I would like to take this opportunity to criticise Dovecot for being a bloated (unnecessary abstractions, verbose, pseudo object-oriented, ...), non-suckless [3] and non-unixish (plugin architecture, monolithic design, ...) software which in return works quite well and stable so far. I appreciate any suggestions, ideas or criticism. I would really like to finish configuring my mail server as soon as possible. Regards, Matthias-Christian [1] http://smarden.org/pape/Debian/1215531259.4854_332.werc [2] http://johannes.sipsolutions.net/Projects/dovecot-antispam [3] http://www.suckless.org/common/

9 16

[Dovecot] nfs_flush_fcntl failed: No locks available
by Mark Zealey 21 Nov '08

21 Nov '08

Hi there, I've been seeing this error in our logs quite frequently on our nfs storage (v3): 2008-11-10T13:24:26+00:00 mail8 dovecot: IMAP(XXX(a)YYY.com): nfs_flush_fcntl: fcntl(/var/spool/mail/XXX/Maildir/dovecot.index.cache, F_RDLCK) failed: No locks available Which is because we don't run lockd on our servers. Why is dovecot trying to use fcntl() ? I explicitly set it to use dotlocks in the dovecot config: # 1.1.6: /etc/dovecot.conf # OS: Linux 2.6.18-92.el5 i686 CentOS release 5.2 (Final) base_dir: /var/run/dovecot/ protocols: imap pop3 mail_location: maildir:~/Maildir mmap_disable: yes mail_nfs_storage: yes mail_nfs_index: yes lock_method: dotlock maildir_copy_preserve_filename: yes mbox_write_locks: dotlock This happens for both pop and imap (however more frequently with imap). Thanks, Mark -- Mark Zealey -- Shared Hosting Team Leader Product Development * Webfusion 123-reg.co.uk, webfusion.co.uk, donhost.co.uk, supanames.co.uk This mail is subject to http://www.gxn.net/disclaimer

2 2

[Dovecot] For Configuration Help: per-user quota for virtual users.
by sales＠100n.org 21 Nov '08

21 Nov '08

Dear dovecot list: Could any experts help me on the configuration of per-user for dovecot on FreeBSD 7.x with postfix-2.5.4,1. I followed the howto of http://workaround.org/articles/ispmail-etch/, it is an excellent file, my mailserver worked very well. When I configured per-user quota plug-in, quota_rule with 20MB limits can not be overrided by the Mysql query statement, Although I followed the document at : http://wiki.dovecot.org/Quota. Below is the output of dovecot --version, dovecot -n and dovecot-sql.conf. Could any experts help me? Thanks in advance ! Best Regards, Forrest --------------------------------- ns1# dovecot --version 1.1.2 ns1# dovecot -n # 1.1.2: /usr/local/etc/dovecot.conf protocols: imap pop3 pop3s imaps login_dir: /var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login verbose_proctitle: yes first_valid_gid: 0 mail_privileged_group: mail mail_location: maildir:/home/vmail/%d/%n/Maildir mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 imap_client_workarounds(default): delay-newmail netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(imap): delay-newmail netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: mechanisms: plain login passdb: driver: sql args: /usr/local/etc/dovecot-sql.conf userdb: driver: passwd userdb: driver: static args: uid=5000 gid=5000 home=/home/vmail/%d/%n allow_all_users=yes socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail plugin: quota: maildir quota_rule: *:storage=20M quota_rule2: Trash:storage=10M quota_warning: storage=95%% /usr/local/bin/quota-warning.sh 95 quota_warning2: storage=80%% /usr/local/bin/quota-warning.sh 80 ns1# grep -v '^ *$#.*$\?$' dovecot-sql.conf driver = mysql connect = host=127.0.0.1 dbname=****** user=****** password=******** default_pass_scheme = PLAIN-MD5 password_query = SELECT email as user, password FROM view_users WHERE email='%u'; user_query = select 5000 as uid, 5000 as gid, '/home/vmail/%d/%n' as home, \ concat('*:bytes=', quota_bytes) as quota_rule \ from email_quota where email = '%u'

2 1

[Dovecot] Problem witch dovecot-auth continue
by Grzegorz Zalewski 21 Nov '08

21 Nov '08

I`m forgot paste rest of the log: dovecot: 2008-11-07 10:16:44 Panic: auth(default): file auth-worker-server.c: line 54 (auth_worker_idle_timeout): assertion failed: (array_count(&conn->requests) == 0)

2 1

[Dovecot] Per User Quotas
by Peter Fraser 21 Nov '08

21 Nov '08

HI All Asking for a little patience and a bit of help here. I'm using dovecot-1.1.3_1 with postfix and squirrelmail. I have implemented a global quota successfully. That works fine. I want to now implement per user quotas. So far I have read the howto in the documentation and searched several threads but can't seem to get it working properly. My LDAP server is Windows 2003 Active Directory. Is there any documentation specific to AD that I could look at or any other doc that could help me? My last effort was to put this in dovecot-ldap.conf user_attrs = streetAddress=quota_rule4=*:storage=%$M ,=uid=1002,=gid=1002,=home=/home/vmail/%u and this in dovecot.conf in addition to the other quota rules. quota_rule4 = *:bytes=%$ I then put the quota in the streetAddress area of AD. I'd certainly appreciate any help. Thanks.

2 4

[Dovecot] make archive emails undeletable?
by Rob Nichols 21 Nov '08

21 Nov '08

I've been using dovecot for a year or two now, and really like it. I have a fairly simple setup, but I think it's time to get a little more advanced. I keep an "archive" of all my email, both sent and received. Every once in a while I get confused, and accidentally delete something from my archive. I also worry that I'll misconfigure a mail client some day and accidentally wipe out my "trash" folder. I would like some way to prevent deletion in several mailboxes. Is that possible? It looks like ACL could do this, but I can't quite figure out where to start. Any pointers would be greatly appreciated. Thanks, Rob

2 1

[Dovecot] Disconnecting without unbinding?
by Maykel Moya 21 Nov '08

21 Nov '08

Timo Please have a look at this short thread[1]. That message stops appearing whenever I shutdown dovecot. I'm using dovecot 1.0.15. dovecot-ldap.conf ----------------- dn = ... dnpass = ... ldap_version = 3 auth_bind = no base = ... pass_filter = ... pass_attrs = ... user_filter = ... user_attrs = ... default_pass_scheme = MD5-CRYPT user_global_uid = vmail user_global_gid = vmail Regards, maykel [1] http://www.openldap.org/lists/openldap-software/200811/msg00078.html --------------------------------------- Red Telematica de Salud - Cuba CNICM - Infomed

2 1

[Dovecot] Auth Issues - Urgent - Help!
by David Cunningham 21 Nov '08

21 Nov '08

After a few hours of running, I get tons of the following errors in my logs: dovecot: Oct 08 07:41:50 Error: auth(default): ldap(user(a)domain,x.x.x.x): Request queue is full I removed the username and IP, obviously. Any idea how to stop this? I have about 5 Thousand users using horde that login ever 1-5 minutes to refresh their page. I assume it is a setting, but I am confused as to why it doesn't happen almost right away. It seems to take some time to build up. Please help! This is taking my webmail system down hourly.

6 20

[Dovecot] Error message in logs since 1.1.6 upgrade
by Guy 21 Nov '08

21 Nov '08

Hi, I've got two imap boxes, one is running 1.1.5 and hasn't exhibited the error below, but the one that's been upgraded to 1.1.6 is showing them. Nov 14 16:06:31 mink dovecot: imap-login: Disconnected (no auth attempts): rip=x.x.x.x, lip=x.x.x.x, TLS handshaking: SSL_accept() failed: error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac If this isn't already a known error, is there any extra data I can collect that would help diagnose what's causing it? I haven't a clue where to start with this sort of debugging I'm afraid. Thanks Guy -- Don't just do something...sit there!

2 1

[Dovecot] sieve-body extension support for deliver LDA's sieve plugin
by BrunoM 21 Nov '08

21 Nov '08

Hello, I just read your message about sieve and body-extension in Dovecot. Do you have news on that topic? I just have to filter mails containing a particular text fragment, and I cannot do without sieve body, I think.. Thank you for any clue you'd be able to give me ! Regards, Bruno --- Hi Timo & Co, Is there any time frame for updating the deliver LDA's sieve plugin code to that from Cyrus IMAPd v2.3.x? I ask as I'm looking for the functionality of the sieve-body extension, as described here: http://www.ietf.org/internet-drafts/draft-ietf-sieve-body-06.txt This requirement has come up as we're upgrading from a Courier-IMAP/maildrop configuration that has some filtering based on message body content. As an aside, if that time frame is undefined or will be long, if I use maildrop instead as my LDA, will I loose the instant delivery notification via IMAP IDLE? Thanks very much, Scott

2 1

[Dovecot] %d in deliver
by Mark Zealey 21 Nov '08

21 Nov '08

Hi there, I run a system that has a lot of virtual users. We invoke deliver from exim and pass the directory to deliver into using the HOME environment variable, so deliver doesn't do any database lookups during the delivery process. The exim pipe environment is described at http://exim.org/exim-html-current/doc/html/spec_html/index.html#toc0239, but basically I'd like to know the domain as well as the user, however deliver doesn't seem to pick this up. Is there any way that you could extend deliver to make it either pick up the domain (or correct username) from the command line, but not do an authdb lookup; or get it to read the domain from an environment variable (or be able to print the contents of an arbitrary environment variable in a formatted string)? Thanks, Mark -- Mark Zealey -- Shared Hosting Team Leader Product Development * Webfusion 123-reg.co.uk, webfusion.co.uk, donhost.co.uk, supanames.co.uk This mail is subject to http://www.gxn.net/disclaimer

2 1

[Dovecot] namespace public / namespace shared - question
by Michal Soltys 21 Nov '08

21 Nov '08

After looking through wiki/config/list I'm still not sure, what exactly is the difference between those two. Even all the examples in dovecot's wiki don't have a single "namespace shared" anywhere. And there's only short mention about the difference in dovecot.conf . Peeking into rfc2342 - would shared namespace relate to "Other Users' Namespace(s)" and public namespace to "Shared Namespace(s)" ? Does perhaps the difference only lie on the client side, depending on the namespace it's asking, while functionally it's the same from the perspective of dovecot ?

2 1

[Dovecot] userdb, Dovecot LDA not using mail_location config properly?
by k bah 21 Nov '08

21 Nov '08

I use Dovecot 1.0.5. I use LDAP for the user database and Dovecot LDA. --- dovecot.conf mail_location = maildir:/var/spool/mail/data/%Lu:INDEX=/var/spool/mail/index/%Lu auth default { mechanisms = plain (Note: TLS is used anyways..) userdb prefetch { } passdb ldap { # Path for LDAP configuration file, see doc/dovecot-ldap-example.conf args = /etc/dovecot/dovecot-ldap.conf_passdb (symlink do dovecot-ldap.conf) } userdb ldap { # Path for LDAP configuration file, see doc/dovecot-ldap-example.conf args = /etc/dovecot/dovecot-ldap.conf_userdb (symlink do dovecot-ldap.conf) } socket listen { master { path = /var/run/dovecot/auth-master mode = 0600 user = maildeliver group = mail } } } --- dovecot-ldap.conf Q1: auth_bind_userdn (commented since it would avoid the use of passdb and userdb, right?) # auth_bind_userdn = ... # userdb user_filter = (&(objectclass=postfixuser)(mail=%u)) user_attrs = uid=user # passdb pass_filter = (&(objectclass=inetlocalmailrecipient)(uid=%u)) pass_attrs = uid=user,userPassword=password,uid=userdb_user --- mail log host postfix/smtpd[8923]: connect from localhost[127.0.0.1] host postfix/smtpd[8923]: 5B449EA2C6: client=localhost[127.0.0.1] host postfix/cleanup[8925]: 5B449EA2C6: message-id=<20081121103114.5B449EA2C6@host> host postfix/smtpd[8923]: disconnect from localhost[127.0.0.1] host postfix/qmgr[8894]: 5B449EA2C6: from=<sender(a)otherdomain.org>, size=368, nrcpt=1 (queue active) host deliver(person(a)mydomain.com): Loading modules from directory: /usr/lib/dovecot/modules/lda host deliver(person(a)mydomain.com): Module loaded: /usr/lib/dovecot/modules/lda/lib10_quota_plugin.so host dovecot: auth(default): master in: USER 1 person(a)mydomain.com service=deliver host dovecot: auth(default): prefetch(person(a)mydomain.com): passdb didn't return userdb entries (#0) host dovecot: auth(default): ldap(person(a)mydomain.com): user search: base=dc=mydomain,dc=com scope=subtree filter=(&(objectclass=postfixuser)(mail=person(a)mydomain.com)) fields=uid host deliver(person(a)mydomain.com): auth input: person(a)mydomain.com (#1) host deliver(person(a)mydomain.com): auth input: user=person~mydomain.com host deliver(person(a)mydomain.com): auth input: uid=501 host deliver(person(a)mydomain.com): auth input: gid=12 (#2) host deliver(person(a)mydomain.com): maildir: data=/var/spool/mail/data/person@mydomain.com:INDEX=/var/spool/mail/index/person@mydomain.com (#3) host deliver(person(a)mydomain.com): maildir: root=/var/spool/mail/data/person(a)mydomain.com, index=/var/spool/mail/index/person(a)mydomain.com, control=, inbox= host dovecot: auth(default): master out: USER 1 person(a)mydomain.com user=person~mydomain.com uid=501 gid=12 host deliver(person(a)mydomain.com): msgid=<20081121103114.5B449EA2C6@host>: saved mail to INBOX host postfix/pipe[8929]: 5B449EA2C6: to=<person(a)mydomain.com>, relay=dovecot, delay=0.69, delays=0.19/0.02/0/0.48, dsn=2.0.0, status=sent (delivered via dovecot service) host postfix/qmgr[8894]: 5B449EA2C6: removed What I don't get is that since I use userdb (read mail log lines marked (#0-3) and the "mail_location" option from dovecot.conf), mail should be saved to "person~mydomain.com" and not "person(a)mydomain.com" on the disk(?). Q2: Did I misunderstood the meaning of userdb/mail_location, is that right (this behavior)? Q3: Is it misconfigured? I want to save mail on the disk to person~mydomain.com, when I get that right (save mail to what line #1 tells is "user"), I'll use mailRoutingAddress (my mailroutingaddress = person~mydomain.com(a)mydomain.com, mail_location would use %Ln). The passdb and userdb prefetch are working ok on the user is checking mail. thanks = PathMaker for Six Sigma Complete low-cost Six Sigma toolset. Equip your black and green belts. http://a8-asy.a8ww.net/a8-ads/adftrclick?redirectid=1198ebf9f950733925452d3… -- Powered by Outblaze

2 1

[Dovecot] CRAM-MD5 and proxy_maybe
by David Jonas 20 Nov '08

20 Nov '08

When using proxy_maybe CRAM-MD5 authentication fails when the connection is proxied. Is this expected behavior? Is proxy_maybe too simplified for this case? We're using SQL so I could rewrite the query with IFs to fake proxy_maybe and return the password as NULL and nologin as Y, but if it works that way couldn't it work with proxy_maybe? This works: password_query = \ SELECT NULL AS password, host, CONCAT(user,'@',domain) AS destuser \ 'Y' AS nologin, 'Y' AS nodelay, 'Y' AS proxy \ FROM accounts WHERE class='pop' AND domain='%d' This doesn't work if proxied and CRAM-MD5 auth: password_query = \ SELECT \ CONCAT(user,'@',domain) AS user, password, \ host, 'Y' AS proxy_maybe, \ target AS userdb_home, uid AS userdb_uid, gid AS userdb_gid \ FROM accounts WHERE \ class='pop' AND domain='%d' AND user='%n' \ LIMIT 1 Thanks, David

2 3

[Dovecot] Sieve RFC5229 support?
by list_dovecot＠bluerosetech.com 20 Nov '08

20 Nov '08

I'd like to take advantage of RFC5229 match variables (it would reduce the number of rules I have by an order of magnitude); however, the required extension isn't supported yet. Am I mistaken? If not, are there plans to support it?

2 1

[Dovecot] Unbreakable NFS locking issues...
by Rod Treweek 20 Nov '08

20 Nov '08

Hello All, We are struggling to find a solution to a problem we are encountering with a load-balanced email setup. Currently, we have a Coyote loadbalancer, and 3 Postfix/Dovecot nodes that then get their information from a mysql database. The problem is that after a couple weeks, we start seeing NFS locking issues occur, which then takes email completely down, requiring a site visit to basically do an interactive mode reboot to shut off NFS so that we can remount the filesystem again. We have our mailstore on an Aberdeen NAS which is accessed over NFS v. 4. Dovecot version 1.1.2 Here's the relevant mysql string: grep -v '^ *$#.*$\?$' dovecot-mysql.conf driver = mysql connect = host=X.X.X.X dbname=Something user=Something password=Something password_query = SELECT username as user, password, concat('/NFS1MAILDIR/mailSysV2/', maildir) as userdb_home, concat('maildir:/NFS1MAILDIR/mailSysV2/', maildir) as userdb_mail, 143 as userdb_uid, 143 as userdb_gid, concat('*:bytes=', floor(quota*1024)) AS quota_rule FROM mailbox WHERE username = '%u' AND active = '1' user_query = SELECT concat('/NFS1MAILDIR/mailSysV2/', maildir) as home, concat('maildir:/NFS1MAILDIR/mailSysV2/', maildir) as mail, concat('maildir:/NFS1MAILDIR/mailSysV2/', maildir) as maildir, 143 AS uid, 143 AS gid, concat('*:bytes=', floor(quota*1024)) AS quota_rule FROM mailbox WHERE username = '%u' AND active = '1' And here's what our configuration is on each of the nodes: dovecot -n # 1.1.2: /usr/local/etc/dovecot.conf protocols: imap pop3 ssl_ca_file: /usr/local/etc/dovecot/certs/tdpserver.crt ssl_cert_file: /usr/local/etc/dovecot/certs/tdpserver.crt ssl_key_file: /usr/local/etc/dovecot/certs/tdpserver.key ssl_parameters_regenerate: 0 ssl_cipher_list: ALL:!LOW:!SSLv2 disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login login_user: postfix login_greeting: Something witty here.. login_process_per_connection: no login_max_connections: 512 max_mail_processes: 2048 mail_max_userip_connections: 50 verbose_proctitle: yes first_valid_uid: 69 last_valid_uid: 500 first_valid_gid: 69 last_valid_gid: 500 mail_access_groups: postfix mail_privileged_group: postfix mail_location: mbox:/NFS1MAILDIR/mailSysV2/%d/%u:INDEX=/usr/local/mail/indexes/%d/%1n/%n mmap_disable: yes dotlock_use_excl: no mail_nfs_storage: yes mail_nfs_index: yes mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 imap_client_workarounds(default): delay-newmail netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(imap): delay-newmail netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: mechanisms: login plain user: dovecot passdb: driver: sql args: /usr/local/etc/dovecot-mysql.conf userdb: driver: sql args: /usr/local/etc/dovecot-mysql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: dovecot group: dovecot plugin: quota: dict:user::proxy::quota imap_quota: dict:user::proxy::quota quota_rule: *:storage=528576 dict: quota: mysql:/usr/local/etc/dovecot/dovecot-dict-quota.conf Any help you can offer is greatly, greatly appreciated, as well as opinions on any other 'validated' postfix/dovecot email enterprise design solutions. Thanks Very Much In Advance, R.T

6 13

[Dovecot] New message notification
by Juan Asensio Sánchez 19 Nov '08

19 Nov '08

Hi What is the best option to notify a user that a message has arrived? The intention is to write a script that connects to a jabber server and checks if the user is online, so then a message is sent to user notifying him that he has received a new message. The solution should be compatible with Sieve filtering, so the script should not be executed when the message is moved to the SPAM folder, or pass to the script an argument specifying the folder where the message has been saved. Regards and thanks in advance. Juan Asensio Sánchez - http://www.nutum.es

2 1

[Dovecot] Solving CVE-2008-4870
by Michal Hlavinka 19 Nov '08

19 Nov '08

Hi, we're trying to solve CVE-2008-4870 = rhbz#436287 = dovecot.conf is world readable - possible password exposure. This problem seems to be little more complicated than we thought. dovecot.conf can contain passphrase for ssl key, which is available for everyone since dovecot.conf has world readable permissions. (In CVE's description is note that it RHEL's/Fedora's problem, but it affects all systems imo) We was thinking about few ways how to fix it: 1) 0640 permissions for dovecot.conf - but it can became not readable for dovecot 2) 0640 root:mail and set deliver to group mail with sgid - possible security problem 3) don't store passphrase in dovecot.conf, just ask for it when dovecot's started - can hang boot process, not good As part of investigating, I've found dovecot is storing all variables in environment variables - it means even passphrase? I'm not completely sure, but all variables can be read via /proc/<pid>/environ (I don't know if it becomes readable in some circumstances.) Is there any plan to solve this problem? Cheers, Michal

3 3

[Dovecot] patch: list shared namespace
by Bernhard Herzog 19 Nov '08

19 Nov '08

Hi, I've been working on a patch for dovecot 1.2 from the Kolab branch (http://hg.intevation.org/kolab/dovecot-1.2_kolab-branch/) that implements listing of shared namespaces. I've got something that works in some basic way but is still missing some pieces. See the attached patch, which also contains some installation and configuration notes. Implementation notes: One of the main problems the patch addresses is getting a list of all users that have mailboxes the logged in user can see. The patch uses a dict to cache information about which users have at least one mailbox that is visible to other users. The dict doesn't cache which other users, though. The cache entry for a given user is updated whenever the dovecot-acl-list file in the maildir root directory is updated. This ties the implementation to a specific acl backend to an extent, but that shouldn't be a problem at the moment. Another problem is that namespaces for all those users have to be created. The patch does that in shared-storage.c when the shared storage is created. At this stage of development of the patch that works well enough, I think, but it might be better to update the namespaces whenever a list iterator is created. To avoid unnecessary coupling between the shared namespace code and the ACL plugin, the shared namespace code has a hook that it calls when it needs a list of all the users who may have mailboxes visible to the current user. The ACL plugin sets that hook and uses the dict to produce that list. This way, the ACL plugin depends on the shared namespace code but not the other way round and all the dict handling is in the ACL plugin. I'm not sure the new hook is really needed. The patch could perhaps just as well extend the acl_next_hook_mail_storage_created and acl_next_hook_mailbox_list_created functions to do the namespace creation when they're called for a shared storage or mailbox list. Problems: All of my tests so far involved a shared namespace of the form namespace shared { separator = / prefix = users/%%u/ location = maildir:.../var/mail/%%u:... subscriptions = no list = yes hidden = no } Also, let's assume two users, ford and arthur with ford's "INBOX/hhgttg" available to arthur as "users/ford/INBOX/hhgttg". Arthur may not list ford's INBOX, though. In the following the current user is always arthur. I found the following problems: - LIST response includes namespaces the user doesn't really have access to. E.g. if there's another user, zaphod who's made some mailbox available to somebody else, but not arthur, arthur still sees * LIST (\Noselect \HasChildren) "/" "users/zaphod" Not sure it's worth fixing this, though. - List with "%" doesn't list all intermediate mailboxes. On the one hand arthur sees this: x LIST "" "*" ... * LIST (\Noselect \HasChildren) "/" "users/ford" * LIST (\HasNoChildren) "/" "users/ford/INBOX/hhgttg" x OK List completed. OTOH, with "%" only this: x LIST "" "users/ford/%" x OK List completed. cyrus shows x LIST "" "users/ford/%" * LIST (\Noselect \HasChildren) "/" "users/ford/INBOX" x OK List completed. At least Kontact resp. KMail rely on this. - The dovecot-acl-list is not always rebuilt, even when it should have been, AFAICT. In particular, if the file exists but is empty, it's never updated, even when ACL later change. Maybe this is a bug in the Kolab branch. Cheers, Bernhard -- Bernhard Herzog | ++49-541-335 08 30 | http://www.intevation.de/ Intevation GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 18998 Geschäftsführer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner

2 16