- dovecot - dovecot.org

[Dovecot] Dovecot, postifx, virtual domains and deliver, what about luser_relay/fallback_relay?
by Alexander Hoogerhuis 10 Oct '07

10 Oct '07

I've read documentation (obviously not the right parts) and googled, but I can't seem how to solve this simple problem: I have a machine running postfix/dovecot and using virtual domains, delivery happens with dovecot's LDA. I also have an Exchange machine that I have to house some of the users of a given domain. How can I tell either postifx in general or dovecot's LDA that whatever specific user that cannot be found in the virutal setup can be pawned off to a given relay-server which will sort it out? -A

2 1

[Dovecot] FW: IMAP proxy with dovecot and hostname
by Limperis Antonis 10 Oct '07

10 Oct '07

Good morning dovecot users I read in http://wiki.dovecot.org/PasswordDatabase/ExtraFields/Proxy that dovecot need ip address in host field and then "This field is required. Note that currently it's required to use an IP address since no DNS resolving is done.". I use a qmail cluster and Courier IMAP. In this system used the ldap field mailhost for proxy functionality with dns name as value. Is there a plan to add the DNS resolving to dovecot in host field; Is there any patch; Thanks Antonis

3 2

[Dovecot] User database ldap lookups and sasl
by Olivier Castan 10 Oct '07

10 Oct '07

Hello I'm currently trying to use Active Directory with Unix extensions to store UID, GID and homedir and retrieve them with ldap. I don't want to allow anonymous bindings and I would rather not use TLS and manage a PKI. So I'm trying to use SASL to do a Kerberos authentication for Dovecot against AD LDAP. I'm currently getting GSSAPI errors about the lack of "credentials cache". Looking at similar cases where services act as clients, like using nss_ldap for unix host accounts, I understand the credentials cache should be initiated by an external program (cron and startup script), at least with the TGT and maybe the TGS for ldap. Since usually kerberosv5 cache is based on the user id ( /tmp/krb5cc_0 for root) there's an option in ldap.conf (krb5_ccname) to set the filename (/etc/.ldapcache in nss_ldap tutorials) for this cache. Is there any way to do this with dovecot-ldap.conf or should I try to use "auth user" default cache filename ? Thanks in advance

1 0

[Dovecot] SpamAssassin and Public Namespace
by James 10 Oct '07

10 Oct '07

Hi I know i might get flamed for asking this in the dovecot mailing list instead of the spamassassin one but i thought someone might be kind enough to help anyway. TIA I'm trying to do site-wide spam filtering with a public namespace but it's not reading the folder i have in the public namespace This is the public namespace set in my dovecot.conf #public spam folder namespace public { separator = / prefix = Filter/ location = maildir:/home/vmail/domains/Spam/Maildir/ hidden = no } There's also a .Spam and .Non-spam folder created in that directory server:/home/vmail/domains/Spam/Maildir# ls -al total 32 drwxrwxrwx 7 vmail vmail 4096 2007-10-09 10:35 . drwxrwxrwx 3 vmail vmail 4096 2007-10-05 13:23 .. drwx------ 2 vmail vmail 4096 2007-10-09 10:35 cur drwx------ 2 vmail vmail 4096 2007-10-09 10:35 new drwxrwxrwx 5 vmail vmail 4096 2007-10-09 11:20 .Non-Spam drwxrwxrwx 5 vmail vmail 4096 2007-10-09 11:19 .Spam -rw------- 1 vmail vmail 14 2007-10-08 11:58 subscriptions drwx------ 2 vmail vmail 4096 2007-10-09 10:35 tmp I'm trying to use this script to login and get the spam from the public spam folders and send it to spamassassin to learn I've highlighted the important parts There are 13 messages in Spam There are 5 messages in Non-Spam Here's the script: ######################################################################################### #!/usr/bin/perl # # Process mail from imap server shared folder 'spam' & 'not-spam' through spamassassin sa-learn # dmz(a)dmzs.com - March 19, 2004 # http://www.dmzs.com/tools/files/spam.phtml # LGPL # # Things to try if it doesn't work # 1) Turn debug onto 1 and see if you connect to imap server ad get messages (yes i could have made a command line flag, just didn't see the need once I got it working :) # 2) Check your local.cf for spamassassin (in debian it's /etc/spamassassin/local.cf) bayes_path settings. # # Also be sure to check that your spamassassin is truely using the bayes files (-D manual startup of spamd to debug there) # use Mail::IMAPClient; use IO::Socket::SSL; my $debug=1; my $salearn; my $username = 'user'; my $password = 'password'; my $server = 'server.example.com'; my $ssl=new IO::Socket::SSL("$server:imaps"); die ("Error connecting - $@") unless defined $ssl; $ssl->autoflush(1); my $imap = Mail::IMAPClient->new( #Server=> 'imapmailhost:143', Socket => $ssl, User => $username, Password => $password, Debug => $debug ); if (!defined($imap)) { die "IMAP Login Failed"; } # If debugging, print out the total counts for each mailbox if ($debug) { foreach my $foldername ($imap->folders) { my $number_of_messages = $imap->message_count( $foldername ); print $foldername, " is imap folder\n"; }* my $spamcount = $imap->message_count('Filter/Spam');* print $spamcount, " Spam to process\n"; * my $nonspamcount = $imap->message_count('Filter/Non-Spam');* print $nonspamcount, " Notspam to process\n" if $debug; } # Process the spam mailbox *$imap->select('Filter/Spam');* my @msgs = $imap->search("ALL"); for (my $i=0;$i <= $#msgs; $i++) { # I put it into a file for processing, doing it into a perl var & piping through sa-learn just didn't seem to work $imap->message_to_file("/tmp/salearn",$msgs[$i]); # execute sa-learn w/data # if ($debug) { $salearn = `/usr/bin/sa-learn -D --no-sync --showdots --spam /tmp/salearn`; } # else { $salearn = `/usr/bin/sa-learn --no-sync --showdots --spam /tmp/salearn`; } print "-------\nSpam: ",$salearn,"\n-------\n" if $debug; # delete processed message $imap->delete_message($msgs[$i]); unlink("/tmp/salearn"); } $imap->expunge(); $imap->close(); # Process the not-spam mailbox *$imap->select('Filter/Non-spam');* my @msgs = $imap->search("ALL"); for (my $i=0;$i <= $#msgs; $i++) { $imap->message_to_file("/tmp/salearn",$msgs[$i]); # execute sa-learn w/data # if ($debug) { $salearn = `/usr/bin/sa-learn -D --no-sync --showdots --ham /tmp/salearn`; } # else { $salearn = `/usr/bin/sa-learn --no-sync --showdots --ham /tmp/salearn`; } print "-------\nNotSpam: ",$salearn,"\n-------\n" if $debug; # delete processed message $imap->delete_message($msgs[$i]); unlink("/tmp/salearn"); } $imap->expunge(); $imap->close(); $imap->logout(); # integrate learned stuff my $sarebuild = `/usr/bin/sa-learn --sync`; print "-------\nRebuild: ",$sarebuild,"\n-------\n" if $debug; ######################################################################################### Results: server:/home/james# ./DMZS-sa-learn.pl Using Mail::IMAPClient version 2.2.9 and perl version 5.8.8 (5.008008) Spam to process Notspam to process . ------- Spam: Learned tokens from 0 message(s) (1 message(s) examined) ------- Autoloading: UID store +FLAGS.SILENT (\Deleted) . ------- NotSpam: Learned tokens from 1 message(s) (1 message(s) examined) ------- Autoloading: UID store +FLAGS.SILENT (\Deleted) ------- Rebuild: bayes: synced databases from journal in 0 seconds: 4 unique entries (4 total entries) -------

1 1

[Dovecot] Dovecot hanging up with many defunct processes
by Mayank Joshi 09 Oct '07

09 Oct '07

Hi, I am in a very awkward situation and need some kind of immediate fix up. I had installed dovecot in my organization as part of migration of email server. The setup involves sendmail, dovecot (imaps+pop3s) and webmail (squirrelmail) running on apache webserver. All was working fine until one day I found a lot of defunct processes on system related to dovecot. dovecot-auth, imap-login and imap were all defunct. The system is using pam_ldap and nss_ldap to authenticate users to a Windows 2003 Active Directory. Immediate restart of dovecot solved the problem for me that day, however since then it's been about 3 times that I've faced this problem. After visiting various forums I came to know one thing, that it has something to do with pam_ldap and nss_ldap. However with UW-IMAP we were using the same setup and we didn't find any problems there. It would be very kind of you, if you can help me out on this front as apart from these mishaps the mail server is running perfectly fine and we wish to continue using Dovecot for our setup in future as well. Following is the system details: 1) OS: RHEL4 (Kernel - 2.6.9-5.ELsmp) 2) Dovecot: Dovecot (Version - 1.0.3) 3) Following is dovecot configuration: log_path: /var/log/dovecot.log protocols: imaps pop3s ssl_cert_file: /usr/share/ssl/certs/imapd.pem ssl_key_file: /usr/share/ssl/private/imapd.pem login_dir: /usr/local/var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login max_mail_processes: 10240 mail_location: mbox:~/mail:INBOX=/var/mail/%u mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %08Xu%08Xv auth default: passdb: driver: pam userdb: driver: passwd 4) Dovecot's PAM file (/etc/pam.d/dovecot) #%PAM-1.0 auth required pam_ldap.so account required pam_ldap.so session required pam_mkhomedir.so skel=/etc/skel umask=0077 session required pam_ldap.so As far as I feel it's problem with pam_ldap not able to authenticate against Windows 2003 Active Directory due to some reason or the other. However I'm not sure why is this happening. Regards, Mayank Joshi.

3 2

[Dovecot] undelete messages?
by Cory Coager 08 Oct '07

08 Oct '07

I'm using the lazy expunge plugin as configured in: http://wiki.dovecot.org/Plugins/Lazyexpunge The page claims users can undelete messages without assistance from a sysadmin. How is this accomplished? When I try to subscribe to the folders under the EXPUNGED namespace, nothing happens. ~Cory Coager

2 4

[Dovecot] global sieve script
by Jorge Salamero Sanz 08 Oct '07

08 Oct '07

hi all, i'm moving from a maildrop+courier setup to lda(sieve)+dovecot setup. with maildrop i had a global filter for all the users, so i could filter and archive into the spam folder spam tagged emails for users without custom filters, including them if they exist: LOGNAME=tolower($LOGNAME) `test -e $LOGNAME` if ( $RETURNCODE != 0 ) { `maildirmake $LOGNAME` `maildirmake $LOGNAME/._spam` } `test -f $LOGNAME/mailfilter` if ( $RETURNCODE == 0 ) { include "$LOGNAME/mailfilter" } if ( /^X-Spam-Status: YES */) { to "$LOGNAME/._spam" } else { to "$LOGNAME/" } how could i get this behaviour with dovecot lda and sieve ? thanks !

3 2

Re: [Dovecot] Moving email from a folder to another using IMAP isvery slow (sometimes)
by Stefano Scalise 08 Oct '07

08 Oct '07

Hi to all, I can confirm that if I downgrade to 1.0.5 version I have no more the slowness problem. Then I think it is a bug introduced in th 1.1.x releases. Stefano. ----- Original Message ----- From: "Stefano Scalise" <s.scalise(a)tno.it> To: "Stefano Scalise" <s.scalise(a)tno.it>; "Timo Sirainen" <tss(a)iki.fi> Cc: <dovecot(a)dovecot.org> Sent: Tuesday, October 02, 2007 12:04 PM Subject: Re: [Dovecot] Moving email from a folder to another using IMAP isvery slow (sometimes) > Hi to all, > > very strange! I tried to debug why imap process takes 100% CPu and it is > very slow when I move an email from an imap folder to another imap folder > and then I typed: > > strace -tt -o /log-imap.txt -p <process number> > > well, during the trace the imap process doesn't crash and it is very fast. > If I stop the tracing, I have again the problem and sometimes the crash of > the process. > > Any help? > Thank you, > Stefano. > > ----- Original Message ----- > From: "Stefano Scalise" <s.scalise(a)tno.it> > To: "Timo Sirainen" <tss(a)iki.fi> > Cc: <dovecot(a)dovecot.org> > Sent: Monday, October 01, 2007 4:21 PM > Subject: Re: [Dovecot] Moving email from a folder to another using IMAP > isvery slow (sometimes) > > >> Sorry, but with the new version (1.1.beta2), I still have the same >> problem of very slowness during moving email between two imap folders. >> What can I do for debugging it? >> Stefano. >> >> ----- Original Message ----- >> From: "Timo Sirainen" <tss(a)iki.fi> >> To: "Stefano Scalise" <s.scalise(a)tno.it> >> Cc: <dovecot(a)dovecot.org> >> Sent: Sunday, September 30, 2007 1:52 PM >> Subject: Re: [Dovecot] Moving email from a folder to another using IMAP >> isvery slow (sometimes) >> >> On Wed, 2007-09-26 at 12:05 +0200, Stefano Scalise wrote: >>> Update to the problem: >>> >>> I tried to stress the server with many moving and I received: >>> >>> Sep 26 10:56:40 sirio3 dovecot: IMAP(<email_address>): Trying to >>> allocate 0 >>> bytes >> >> This should fix it: http://hg.dovecot.org/dovecot/rev/c6b85cf1e63a >> >> I'll probably make a beta2 release today after fixing several other >> things. >> >> >

1 0

[Dovecot] User database ldap lookups and sasl
by olivier castan 08 Oct '07

08 Oct '07

Hello I'm currently trying to use Active Directory with Unix extensions to store UID, GID and homedir and retrieve them with ldap I don't want to allow anonymous bindings and I would rather not use TLS and manage a PKI. So I'm trying to use SASL to do a Kerberos authentication for Dovecot against AD LDAP. I'm currently getting GSSAPI errors about the lack of "credentials cache". Looking at similar cases where services act as clients, like using nss_ldap for unix host accounts, I understand the credentials cache should be initiated by an external program (cron and startup script), at least with the TGT and maybe the TGS for ldap. Since usually kerberosv5 cache is based on the user id ( /tmp/krb5cc_0 for root) there's an option in ldap.conf (krb5_ccname) to set the filename (/etc/.ldapcache in nss_ldap tutorials) for this cache. Is there any way to do this with dovecot-ldap.conf or should I try to use "auth user" default cache filename ? Thanks in advance

1 0

[Dovecot] quota exceeded not showing email address
by JC 07 Oct '07

07 Oct '07

Hi everyone, I have a mail server with postfix 2.3.8-2, dovecot 1.0.0 and mysql with virtual users and domains. Everything is working but when a mail bounces it doesn't show me what is the email address with overquota. I'm using Dovecot Delivery Agent to send a mail when an email bounces. This is the message that shows me: Your message was automatically rejected by Dovecot Mail Delivery Agent. The following reason was given: Quota exceeded It doesn't show me what is the email address. In my /etc/postfix/master.cf I added this: dovecot unix - n n - - pipe flags=DRhu user=xyz:xyz argv=/usr/lib/dovecot/deliver -d ${recipient} In my /etc/postfix/main.cf I added this: dovecot_destination_recipient_limit = 1 virtual_transport = dovecot In my /etc/dovecot/dovecot.conf : protocol lda { postmaster_address = <postmaster-address> auth_socket_path = /var/run/dovecot/auth-master } ... user = xyz socket listen { master { path = /var/run/dovecot/auth-master mode = 0660 user = xyz group = xyz } } What should i have to show the email address?

1 0

Re: [Dovecot] Postfix with Deliver (LDA) - user unknown
by Branislav Baca 06 Oct '07

06 Oct '07

Glenn wrote: > Howdy BB! Hopefully this helps to answer your questions... > > /etc/mail/postfix/vmailboxes contains: > > test(a)geekinetdev.com test/ > > /etc/passwd contains: > > test:*:5000:5000:test account for email:/var/mailboxes/test:/nonexistent probably you need here to have a full user@domain name. i.e: test@geekinetdev.com:*:5000:5000:test account for email:/var/mailboxes/test:/nonexistent > > The reason for the virtual_* stuff is that I am testing each program > configuration as I set up a new SMTP server. The goal is to move all > the virtual_* settings to MySQL. However, I want to walk before I run. > Not sure if that is part of my problem.?. Of course, you can leave it there, I've just said it is not necessary for dovecot to work. Also try to avoid using mysql, except you have dedicated mysql server or playing on small site with a lot of RAM. This is by my own experiences. LDAP is probably better solution but more complex to setup. > > Thanks for your assistance! > > glenn > > > Branislav Baca wrote: >> You have set in the main.cf: >> virtual_mailbox_maps = hash:/etc/mail/postfix/vmailboxes >> but dovecot deliver is using userdb for this purpose, which you have >> set to >> passwd. Have you equivalent data in both places? Similary nearly all >> configuration parameters in the main.cf of the postfix starting with >> virtual_??? are not required, but should be provided by userdb for >> dovecot >> deliver. >> >> BB >> >> On 1:26 04/10/07 "Karin Gregorec" <karinnv1(a)gmail.com> wrote: >>> Good Day All! I am attempting to configure deliver as our LDA. I am >>> also configuring the server to use Postfix instead of Sendmail. I >>> have followed the all the documentation and examples I could find. >>> >>> Below are my Dovecot and Postfix configs. Can someone please smack me >>> upside the head and tell me why I am getting "user unknown" errors? >>> If i don't use deliver as the LDA, all works perfectly. Help... >>> >>> TIA, >>> glenn >>> >>> ========== >>> >>> >>> *** Dovecot Config *** >>> >>> dovecot -n >>> # 1.0.5: /usr/local/etc/dovecot.conf >>> base_dir: /var/run/dovecot/ >>> log_path: /var/log/maillogs/dovecot.log >>> protocols: imap imaps pop3 pop3s >>> ssl_cipher_list: ALL:!LOW >>> disable_plaintext_auth: no >>> verbose_ssl: yes >>> login_dir: /var/run/dovecot/login >>> login_executable(default): /usr/local/libexec/dovecot/imap-login >>> login_executable(imap): /usr/local/libexec/dovecot/imap-login >>> login_executable(pop3): /usr/local/libexec/dovecot/pop3-login >>> login_greeting: GID Ready >>> login_log_format_elements: user=<%u> service=%s authMethod=%m rIP=%r >>> lIP=%l encryption=%c >>> login_max_processes_count: 256 >>> verbose_proctitle: yes >>> first_valid_uid: 5000 >>> last_valid_uid: 10000 >>> first_valid_gid: 0 >>> mail_extra_groups: mail >>> mail_location: maildir:~/Maildir >>> dotlock_use_excl: yes >>> fsync_disable: yes >>> maildir_copy_with_hardlinks: yes >>> mail_executable(default): /usr/local/libexec/dovecot/imap >>> mail_executable(imap): /usr/local/libexec/dovecot/imap >>> mail_executable(pop3): /usr/local/libexec/dovecot/pop3 >>> mail_process_size: 1024 >>> mail_plugins(default): quota imap_quota >>> mail_plugins(imap): quota imap_quota >>> mail_plugins(pop3): >>> mail_plugin_dir(default): /usr/local/lib/dovecot/imap >>> mail_plugin_dir(imap): /usr/local/lib/dovecot/imap >>> mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 >>> imap_client_workarounds(default): delay-newmail outlook-idle >>> netscape-eoh tb-extra-mailbox-sep >>> imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh >>> tb-extra-mailbox-sep >>> imap_client_workarounds(pop3): outlook-idle >>> pop3_uidl_format(default): >>> pop3_uidl_format(imap): >>> pop3_uidl_format(pop3): %08Xu%08Xv >>> pop3_client_workarounds(default): >>> pop3_client_workarounds(imap): >>> pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh >>> pop3_logout_format(default): top=%t/%p, retr=%r/%b, del=%d/%m, size=%s >>> pop3_logout_format(imap): top=%t/%p, retr=%r/%b, del=%d/%m, size=%s >>> pop3_logout_format(pop3): top=%t/%T, retr=%r/%R, del=%d/%m, size=%s >>> auth default: >>> cache_size: 1024 >>> cache_ttl: 604800 >>> verbose: yes >>> passdb: >>> driver: pam >>> args: cache_key=%Lu >>> userdb: >>> driver: passwd >>> socket: >>> type: listen >>> master: >>> path: /var/run/dovecot/auth-master >>> mode: 384 >>> user: maildrop >>> plugin: >>> quota: maildir:storage=10000000:ignore=Trash >>> >>> >>> *** Postfix main.cf *** >>> >>> alias_database = hash:/etc/mail/postfix/aliases >>> alias_maps = hash:/etc/mail/postfix/aliases >>> biff = no >>> command_directory = /usr/local/sbin >>> daemon_directory = /usr/local/libexec/postfix >>> >>> debug_peer_level = 2 >>> debugger_command = >>> PATH=/bin:/usr/bin:/usr/local/bin; export PATH; (echo cont; >>> echo where) | gdb $daemon_directory/$process_name $process_id 2>&1 >>> > $config_directory/$process_name.$process_id.log & sleep 5 >>> >>> #### Dovecot LDA Service - http://wiki.dovecot.org/LDA/Postfix >>> dovecot_destination_recipient_limit = 1 >>> >>> home_mailbox = Maildir/ >>> html_directory = no >>> inet_interfaces = all >>> mail_owner = postfix >>> mail_spool_directory = /var/mail >>> mailq_path = /usr/local/bin/mailq >>> manpage_directory = /usr/local/man >>> message_size_limit = 12000000 >>> mydestination = $myhostname, localhost.$mydomain, localhost >>> mydomain = geekinternetdevelopment.com >>> myhostname = superman.geekinternetdevelopment.com >>> mynetworks = 72.18.193.0/24, 127.0.0.0/8 >>> newaliases_path = /usr/local/bin/newaliases >>> queue_directory = /var/spool/postfix >>> readme_directory = no >>> sample_directory = /usr/local/etc/postfix >>> sendmail_path = /usr/local/sbin/sendmail >>> setgid_group = maildrop >>> smtpd_banner = $myhostname NO WHAMMIES!!! >>> >>> virtual_gid_maps = static:5000 >>> virtual_mailbox_base = /var/mailboxes >>> virtual_mailbox_domains = hash:/etc/mail/postfix/vdomains >>> virtual_mailbox_maps = hash:/etc/mail/postfix/vmailboxes >>> virtual_minimum_uid = 1000 >>> virtual_transport = dovecot >>> virtual_uid_maps = static:5000 >>> unknown_local_recipient_reject_code = 550 >>> >>> *** Postfix master.cf *** >>> ...snip... >>> dovecot unix - n n - - pipe >>> flags=DRhu user=maildrop:maildrop >>> argv=/usr/local/libexec/dovecot/deliver -e -d ${recipient} > >

1 0

[Dovecot] dovecot cloning mails?
by Andreas Schneider 06 Oct '07

06 Oct '07

Hi, I have a strange issue here. I have a large message of a svn commit and the message is cloning itself more and more. I've deleted it several time completely but it doesn't go away. http://www.cynapses.org/tmp/dovecot.png How can I debug it? Thanks, -- andreas milliways:~ # dovecot -n # 1.0.5: /etc/dovecot/dovecot.conf base_dir: /var/run/dovecot/ log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps managesieve listen(default): * listen(imap): * listen(managesieve): *:2000 ssl_ca_file: /etc/ssl/certs/cacert.pem ssl_cert_file: /etc/ssl/certs/milliways.pem ssl_key_file: /etc/ssl/private/milliways.key login_dir(default): /var/run/dovecot//login login_dir(imap): /var/run/dovecot//login login_dir(managesieve): login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login first_valid_uid: 150 last_valid_uid: 150 mail_extra_groups: mail mail_location: maildir:/srv/mail/%u maildir_copy_with_hardlinks: yes mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugins(default): dspam mail_plugins(imap): dspam mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib64/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib64/dovecot/modules/imap mail_plugin_dir(managesieve): /usr/lib64/dovecot/modules/managesieve auth default: passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: sql args: /etc/dovecot/dovecot-sql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail group: mail plugin: dspam_spamfolder: Junk -- http://www.cynapses.org/ - cybernetic synapses

2 2

[Dovecot] Strange errors
by Ralf Hildebrandt 06 Oct '07

06 Oct '07

One of our users seems to have strange problems with his mailbox: Oct 2 00:36:42 postamt dovecot: IMAP(rbxxxx): Corrupted transaction log file /home/r/b/rbxxxx/Maildir/.listen.CCL/dovecot.index.log: Append with UID 1096, but next_uid = 1097 Oct 2 00:36:42 postamt dovecot: IMAP(rbxxxx): Corrupted transaction log file /home/r/b/rbxxxx/Maildir/.listen.CCL/dovecot.index.log: Append with UID 1096, but next_uid = 1097 Oct 2 00:36:42 postamt dovecot: IMAP(rbxxxx): Unexpected transaction log desync with index /home/r/b/rbxxxx/Maildir/.listen.CCL/dovecot.index Oct 2 00:36:42 postamt dovecot: IMAP(rbxxxx): Transaction log file /home/r/b/rbxxxx/Maildir/.listen.CCL/dovecot.index.log: marked corrupted Oct 2 02:40:54 postamt dovecot: IMAP(rbxxxx): Unlinked a duplicate: 1191278050.P11797Q0M631938.postamt.charite.de,S=3164:2, Oct 2 02:40:54 postamt dovecot: IMAP(rbxxxx): Maildir /home/r/b/rbxxxx/Maildir/.listen.CCL sync: UID inserted in the middle of mailbox (1097 > 1096, file = 1191278202.P12120Q0M512940.postamt.charite.de,S=5349:2,) Oct 2 13:46:12 postamt dovecot: IMAP(rbxxxx): Corrupted transaction log file /home/r/b/rbxxxx/Maildir/.listen.jmol/dovecot.index.log: Append with UID 570, but next_uid = 571 Oct 2 13:46:12 postamt dovecot: IMAP(rbxxxx): Transaction log file /home/r/b/rbxxxx/Maildir/.listen.jmol/dovecot.index.log: marked corrupted Oct 2 13:46:12 postamt dovecot: IMAP(rbxxxx): Unlinked a duplicate: 1191322757.P13572Q0M515987.postamt.charite.de,S=3982:2,a Oct 2 13:46:12 postamt dovecot: IMAP(rbxxxx): Maildir /home/r/b/rbxxxx/Maildir/.listen.jmol sync: UID inserted in the middle of mailbox (571 > 570, file = 1191325571.P17909Q0M852537.postamt.charite.de,S=5674:2,) This is dovecot 1.0.5. -- Ralf Hildebrandt (Ralf.Hildebrandt(a)charite.de) plonk(a)charite.de Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155 http://www.arschkrebs.de Never underestimate the bandwidth of a station wagon full of tapes. -- Dr. Warren Jackson, Director, UTCS

2 2

[Dovecot] Timeout leak
by Lars Stavholm 06 Oct '07

06 Oct '07

In my development environment I sometimes get: dovecot: IMAP(stava): Timeout leak: 0x4425d0 Does anyone know what it means or how I can use this information? Cheers /Lars

2 2

[Dovecot] Corrupt Message?
by Daniel Watts 06 Oct '07

06 Oct '07

Dear List, Am accessing dovecot imap through squirrelmail. Squirrelmail paginates the message list into pages. All works fine except for the page one particular email is in. When I try to open that page (or in fact click 'show all') the server returns: ERROR: Bad or malformed request. Query: FETCH 549,551,555:557,563,565,567:569 (FLAGS UID RFC822.SIZE INTERNALDATE BODY.PEEK[HEADER.FIELDS (Date To Cc From Subject X-Priority Importance Priority Content-Type)]) Server responded: No mailbox selected. Could you possibly let me know what I should do and also how I can find the guilty mail file from that error? Can I just delete the email? Or is there a nice script to repair a dovecot maildir? Many thanks for your advice, Daniel -- Squirrelmail Stable 1.4.8 PHP 5.x Hardened with Eaccelerator Apache 2.x Imapproxy over Dovecot/Maildir all running on Gentoo Linux for ~5,000 users.

2 2

[Dovecot] How to upgrade a running Dovecot?
by Mike Brudenell 06 Oct '07

06 Oct '07

Greetings - Could someone confirm how to perform various upgrades on a live system running Dovecot please? Scenario 1: Change to dovecot.conf =================================== If I make a change to dovecot.conf am I right in thinking I can simply send a HUP signal to the main dovecot process to get it to re- read the configuration file and act on its revised content? Scenario 2: Altered SSL Certificates ===================================== I need to replace our current certificates and have prepared new files containing the replacement certificate and private key. Am I right in thinking that I can simply modify dovecot.conf to point at the new files and send a HUP signal to dovecot? Specifically, will new connections use the revised certificates, and existing connections continue to work OK without interruption? Scenario 3: Software Upgrade ============================= I build a particular version of Dovecot into the tree /usr/local/ dovecot-A.B.C and then have a symlink called "dovecot" pointing at the this directory. To upgrade I can then build the new version into /usr/local/dovecot-X.Y.Z and test. To actually switch over the live service to the new X.Y.Z version do I need to: a) Totally shut down the old A.B.C version of Dovecot, thereby breaking all open connections for users? or b) Assuming I am using "shutdown_clients = no" can I just kill the master "dovecot" process and then start up the new version? Ideally I want existing connections to remain running, but new connections to start up using the new X.Y.Z version of Dovecot. The comment for "shutdown_clients" implies this, but also says: "This however means that after master process has died, the client processes can't write to log files anymore." So if I understand this correctly then with "shutdown_clients = no" in force then the sequence and behaviour is this? ... 1. Old version A.B.C of Dovecot running, clients can log through the master "dovecot" process to the logfiles. 2. Kill the old master "dovecot" process, start new X.Y.Z version up. 3. New connections get served by version X.Y.Z. Old connections DON'T get killed and can continue, BUT can no longer write anything to the logfiles? With many thanks, Mike B-) -- The Computing Service, University of York, Heslington, York Yo10 5DD, UK Tel:+44-1904-433811 FAX:+44-1904-433740 * Unsolicited commercial e-mail is NOT welcome at this e-mail address. *

2 1

[Dovecot] "Corrupted index cache file" error (Dovecot 1.0.3)
by Mike Brudenell 06 Oct '07

06 Oct '07

Greetings - Now that users are beginning to pile up more on our new Dovecot-based IMAP service I'm seeing a small number of entries like this in the logfiles: Corrupted index cache file /mailstore/index/o/ozw100/.INBOX/ dovecot.index.cache : invalid record size We are using Dovecot 1.0.3 with Maildir folders served over NFS from NetApp filers, but the index files are stored on local disk. By "a small number" I mean 4 or 5 on each of our two IMAP servers since midnight. * Should I be worried? * Is there anything I need to do fix the files? (I'm guessing not as no problem reports have come in, and the logs show the people affected continuing to work throughout the day.) * Would upgrading to 1.0.5 help? (I couldn't see anything in the Release Notes for either 1.0.4 or 1.0.5 about this) Cheers, Mike B-) -- The Computing Service, University of York, Heslington, York Yo10 5DD, UK Tel:+44-1904-433811 FAX:+44-1904-433740 * Unsolicited commercial e-mail is NOT welcome at this e-mail address. *

3 2

[Dovecot] Custom password encryption scheme, how to do it?
by Madison Kelly 06 Oct '07

06 Oct '07

Hi all, I'm a fairly recent convert to Dovecot/Postfix from Sendmail, so please be gentle (and assume I know nothing). :) I've got a Postfix/Dovecot/PostgreSQL setup with a custom DB schema for my email. This database is also used for a bigger program I use for all my hosting needs (domains, etc.). Currently, I've set it up to use plain-text authentication while I was developing it and getting things running. Now though it's up and running fine, so I want to increase the strength of my passwords that Postfix/Dovecot use. I currently have two fields in a table called 'users'; 'usr_password' which is plain-text and what Postfix/Dovecot currently use and 'usr_strong_password', which stores a stronger hash and is used by the main program. My question is, can I have Postfix/Dovecot use a custom password hashing system? The way I store my strong password (as used by the web-interface) is; - Take the password provided from the user - Read a stored 'salt' value from the database (unique per user and changed on password [re]sets). - Generate an initial SHA256 hash out of the password+salt. - Re-hash the initial SHA256 hash many thousands of times. - Compare the final hash with the hash stored in 'usr_strong_password'. If I can tell Dovecot how to do this, where would I do it? Is there a document/howto/etc someone could point me to? Is there a file I should look at? Thanks all!! Madi

3 3

[Dovecot] saslauth for digest or cram-md5?
by Knute Johnson 06 Oct '07

06 Oct '07

Is it possible to use saslauth for digest-md5 or cram-md5 authentication? If so how would one go about configuring dovecot? Thanks, -- Knute Johnson Molon Labe...

2 1

[Dovecot] imap sort assertion failure
by Andrew Garner 06 Oct '07

06 Oct '07

The following error occurred after a "SORT (TO) US-ASCII ALL" command. This only seems to happen with "to", all our other tests work as expected. Oct 1 20:32:49 dovecot: IMAP(example(a)example.com): pool_data_stack_realloc(): stack frame changed Oct 1 20:32:49 dovecot: IMAP(example(a)example.com): Raw backtrace: imap [0x80c5ed1] -> imap [0x80c5dec] -> imap [0x80cde63] -> imap [0x80c43c0] -> imap(buffer_write+0x85) [0x80c46f5] -> imap(buffer_append+0x26) [0x80c4766] -> imap [0x80be2f5] -> imap(message_header_decode+0x75) [0x80be3d5] -> imap(message_header_decode_utf8+0x56) [0x80be5f6] -> imap [0x80903c4] -> imap(index_mail_get_first_header+0x3e) [0x809125e] -> imap(mail_get_first_header_utf8+0x26) [0x80b4726] -> imap [0x809386b] -> imap [0x8093900] -> imap [0x809414e] -> imap(index_sort_list_finish+0x33) [0x80949d3] -> imap(index_storage_search_next_nonblock+0x3b6) [0x80924a6] -> imap(mailbox_search_next+0x30) [0x80b5b70] -> imap(imap_sort+0xdd) [0x806407d] -> imap(cmd_sort+0x2a4) [0x805d454] -> imap [0x805e7b9] -> imap [0x805e862] -> imap(client_input+0x65) [0x805ee85] -> imap(io_loop_handler_run+0x162) [0x80cc2a2] -> imap(io_loop_run+0x28) [0x80cb628] -> imap(main+0x4ab) [0x806643b] -> /lib/tls/i686/cmov/libc.so.6(__libc_start_main+0xc Oct 1 20:32:49 dovecot: child 31161 (imap) killed with signal 6 # dovecot -n # 1.1.beta2: /etc/dovecot/dovecot.conf protocols: imap pop3 listen: 127.0.0.1 disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login first_valid_uid: 89 mail_location: maildir:~/Maildir mail_debug: yes mmap_disable: yes mail_nfs_storage: yes mail_nfs_index: yes lock_method: dotlock mail_executable(default): /usr/lib/dovecot/rawlog /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/rawlog /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugins(default): mail_plugins(imap): mail_plugins(pop3): mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 auth default: mechanisms: plain cram-md5 verbose: yes debug: yes debug_passwords: yes passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: sql args: /etc/dovecot/dovecot-sql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail group: vmail

2 1

[Dovecot] Folder renaming oddities.
by Tan Shao Yi 06 Oct '07

06 Oct '07

Hi Timo, We are observing some weird behaviour when we try to rename an inferior folder, followed by the superior folder. These folders have an asterisk in the name. * LIST (\HasChildren) "." "*Own Family" * LIST (\HasChildren) "." "*Own Family.Tour" * LIST (\HasNoChildren) "." "*Own Family.Maid" * LIST (\HasNoChildren) "." "*Own Family.Tour.NZ" a OK List completed. a rename "*Own Family.Tour.NZ" "Own Family.Tour.NZ" a OK Rename completed. a LIST "" * * LIST (\HasChildren) "." "*Own Family" * LIST (\HasNoChildren) "." "*Own Family.Tour" * LIST (\HasNoChildren) "." "*Own Family.Maid" * LIST (\HasNoChildren) "." "Own Family.Tour.NZ" a OK List completed. a rename "*Own Family.Tour" "Own Family.Tour" a rename "*Own Family.Tour" "Own Family.Tour"a NO Internal error occurred. Refer to server log for more information. [2007-10-02 11:02:59] a LIST "" * * LIST (\HasChildren) "." "*Own Family" * LIST (\HasNoChildren) "." "*Own Family.Maid" * LIST (\HasChildren) "." "Own Family.Tour" * LIST (\HasNoChildren) "." "Own Family.Tour.NZ" dovecot: Oct 02 11:02:59 Error: IMAP(XXX): rename(/XXX/Maildir/.*Own Family.TourNZ, /XXX/Maildir/.Own Family.TourNZ) failed: No such file or directory It seems that the renaming of the folder succeeds, though the "a NO Internal error occurred" is reported. However, when the folders do not have an asterisk in the name. * LIST (\HasChildren) "." "Own Family" * LIST (\HasNoChildren) "." "Own Family.Maid" * LIST (\HasChildren) "." "Own Family.Tour" * LIST (\HasNoChildren) "." "Own Family.Tour.NZ" a rename "Own Family.Tour.NZ" "*Own Family.Tour.NZ" a OK Rename completed. a rename "Own Family.Tour" "*Own Family.Tour" a OK Rename completed. a LIST "" * * LIST (\HasChildren) "." "Own Family" * LIST (\HasNoChildren) "." "Own Family.Maid" * LIST (\HasChildren) "." "*Own Family.Tour" * LIST (\HasNoChildren) "." "*Own Family.Tour.NZ" The rename operation completes successfully with no error. Is there something that I am doing wrong? P.S., Will it be possible to also request the mail-log plugin to log rename operations too? :) Thanking in advance. Cheers, Tan Shao Yi

2 2

[Dovecot] Dovecot + OCFS2
by Jon Blazquez 06 Oct '07

06 Oct '07

Hello, We are running Red Hat Enterprise Linux AS release 4 (Nahant Update 4) with OCFS2 for our mail servers. There are three nodes in the cluster with shared storage and OCFS2 filesystem on it. The filesystem is used for mail storage(using Maildir layout) and is accessed by smtpd, pop3 and imap processes(DOVECOT). The system works fine but when there are mailing lists the load increases dramatically. It only occurs when there are mailing lists. We have tested it in lab with good results and now in production we are having some load problems caused by dovecot´s deliver process. In lab we had sent lots of mails but always to a few accounts. It was OK. Now there are sent less mails but there are more accounts. The load increases until it reaches about 100 and only restart fixes the problem. The umounting of the OCFS2 filesystem is not possible even when all process accessing it are killed. Any suggestions? TIA Info: Three nodes. OS: Red Hat Enterprise Linux AS release 4 (Nahant Update 4) Mailbox format: Maildir SMTP daemon: Dovecot deliver + Sendmail OCFS2 version: 1.2.5-6 Kernel Version: 2.6.9-42.0.10.ELsmp Pop3 and imap daemon: Dovecot 1.0.3 -- _________________________________________________ Jon Blázquez Diez jblazquez(a)unav.es Servicios Informáticos https://www.unav.es/SI/ Universidad de Navarra https://www.unav.es _________________________________________________

4 4

[Dovecot] Subscribe to root of Maildir namespace?
by Adam Tilghman 06 Oct '07

06 Oct '07

Our users currently make use of a single namespace, mbox format: namespace private { separator = / prefix = hidden = no inbox = yes location = mbox:~/:INBOX=/var/spool/mail/%u:INDEX=/var/spool/poptemp/dovecot/%u } I'd like to give them access to additional Maildir-format storage area, so to the above I've added: namespace private { separator = / prefix = archive/ hidden = no location = maildir:/newmail/%-3.3i/%u/:INDEX=/var/spool/poptemp/dovecot/%u.a-thumper-mail } I can set up subfolders of archive/, and they work as expected. I can also designate the "root" of archive/ as INBOX and that works properly. But "SUBSCRIBE archive" fails. Is it possible to subscribe to the "root" of this new Maildir heirarchy as if it were just another folder? If not, would this be a useful feature to add? Thanks, -- Adam Tilghman | Systems Support / Academic Computing | +1 858 822 0711 agt(a)ucsd.edu | University of California, San Diego | fax +1 858 534 7018

2 1

[Dovecot] problematic ACL with shared folders and maildir
by Dominik L. Borkowski 05 Oct '07

05 Oct '07

Hello, Recently we have been asked to deploy some shared imap folders within our instance of dovecot. However, we ran into a problem with how ACLs are implemented, and consequences regarding maildir++ mailboxes. Long story short: * IMAP clients sees the hierarchy as a tree: sample/1, where 1 is a child of sample * on the filesystem, sample/1 is represented as .sample and .sample.1, both on the same level This presents a problem: dovecot-acl file meant for sample mailbox does not apply to mailbox 1. In fact, a user with permissions to create mailboxes under sample, will not be able to access those mailboxes, once created. Wonder if anybody has been in a similar predicament, and found a solution. Any hints would be greatly appreciated. PS) I'm also documenting this process, maybe others will find it useful: https://collaboration.vbi.vt.edu/display/~dom/dovecot+-+shared+imap+folders -- Dominik L. Borkowski - Senior Systems Administrator Virginia Bioinformatics Institute - www.vbi.vt.edu

1 0

Re: [Dovecot] How to upgrade a running Dovecot?
by Jerry Yeager 05 Oct '07

05 Oct '07

On Oct 5, 2007, at 12:41 PM, dovecot-request(a)dovecot.org wrote: > > ---------------------------------------------------------------------- > > Message: 1 > Date: Fri, 5 Oct 2007 10:25:49 +0100 > From: Mike Brudenell <pmb1(a)york.ac.uk> > Subject: Re: [Dovecot] How to upgrade a running Dovecot? > To: Dovecot Mailing List <dovecot(a)dovecot.org> > Message-ID: <B9A4EC9A-82C0-4250-BC98-606695775041(a)york.ac.uk> > Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed > > Hi, Jerry/et al - > Hello Mike, (stuff chomped out) > >>> Scenario 2: Altered SSL Certificates >>> ===================================== >>> I need to replace our current certificates and have prepared new >>> files containing the replacement certificate and private key. Am I >>> right in thinking that I can simply modify dovecot.conf to point at >>> the new files and send a HUP signal to dovecot? Specifically, will >>> new connections use the revised certificates, and existing >>> connections continue to work OK without interruption? >> >> Ehh not really, the auth child processes can be killed and new ones >> started. See your next scenario question. > > ...So here you're saying that although the "dovecot" master process > re-reads the configuration file, it doing so has no effect on the > existing authenticator child processes? And is it these processes > that are dealing with the SSL connection? ... I'd have thought it was > either the "imap-login" or "imap" processes? > Just to be clear about this for myself, (instead of relying on the 'ol saying 'that is how it used to work' -- because I am switching over to 1.1 from 1.0.n your question takes on new relevance for me as well) I tested this and yes it works as before, the new files seem to be used for the new connections (all of the dovecot auth processes are killed on the HUP signal -- dovecot itself just rereads the conf file and new auth listeners are started -- assuming that you use Dovecot for the auth mechanism to Postfix) and existing connections seem to handle things okay. I did find something new (or I have not noticed it before) If you kill (not just restart) the Dovecot process itself and restart it with existing connections (someone was connected to IMAPS when you killed Dovecot) Dovecot will not restart, complaining that port 993 is taken already. This happens regardless of the shutdown_clients = yes/no setting. This may be particular to the new version 1.1, I do not know. > Jerry

1 0