- dovecot - dovecot.org

Re: [Dovecot] compiling dovecot on aix gcc 3.3.2
by Ralf Becker 05 Apr '07

05 Apr '07

Hello funkypunky drunky, on AIX dovecot plugins (which are shared objects = .so) are a little bit problematic. It is not enough to activate run time linking by using -brtl and make the main program (dovecot) to be able to use shared objects. When a share object does function calls back into the main program, all these functions (=symbols) in dovecot have to be explicitly exported. Otherwise you see "signal 11" or so. Because this is very fiddly, there is a linker flag -bexpall to export all symbols of the main program (dovecot)... but this does seemingly not work with symbols defined in static libraries (.a). While dovecot build creates static libraries to keep the linker command line small, but does *not* generate export files (.exp) containing the libraries globals symbols, the compile time linker does not known anything about them. I think, if dovecot build would use libtool to create the libraries, libtool would export the libraries symbols to fix this. And this is, what my script does. It looks on the compiler command line for library file (.a) and exports all global symbols to an .exp file. The paths of these .exp files are appended to the original compiler command line and so -bexpall knows about the globale symbols defined in the libraries and is able to export them. I don't know if this information is useful for you, because you're using gcc. But if you are using AIX ld (instead of gnu ld) you have to deal with this problem, I think. Regards, Ralf funkypunky drunky schrieb: > Hi Ralf > I check your script. But i cannot udnerstand what you do. R u trying to > export the library of the dovecot? I cannot go deeper. Anyway would you > like to tell what did you do with XLC compiler. Maybe i can setup the > analogy of it when using gcc instead of XLC. > Best regards. > > > 2007/3/27, Ralf Becker <beckerr(a)fh-trier.de <mailto:beckerr@fh-trier.de>>: > > Hello! > > Have you tried to export all symbols defined in lib archives generated > while dovecot is build? I've had this problem on aix with xlC and > solved > it by writing an compiler script for doing that. > > See > http://www.dovecot.org/list/dovecot/2007-February/019226.html > and > http://wiki.dovecot.org/AixPluginsSupport > > Regards, Ralf > > Timo Sirainen schrieb am 26.03.2007 21:08: > > On Mon, 2007-03-26 at 09:24 +0300, funkypunky drunky wrote: > >> I pasted the output of gdb. I hope it is usefull. Thanx > >> > >> This GDB was configured as "powerpc-ibm-aix5.1.0.0"... > >> Core was generated by `imap'. > >> Program terminated with signal 11, Segmentation fault. > >> #0 0xd1a468cc in i_malloc () > >> from /usr/local/lib/dovecot/imap/lib10_quota_plugin.so > >> (gdb) bt full > >> #0 0xd1a468cc in i_malloc () > >> from /usr/local/lib/dovecot/imap/lib10_quota_plugin.so > >> No symbol table info available. > >> #1 0xd1a47cc8 in quota_init () at quota.c:32 > > > > So it crashes at the first Dovecot function it tries to call. Perhaps > > the imap binary isn't exporting the symbols, or something like that. > > I've no idea. Anyway it is most likely related to some linking or > > compiling flags (or the linker/compiler itself). > > > > -- > ______________________________________________________________________ > > Dipl.-Inform. (FH) Ralf Becker Rechenzentrum (r/ft) der FH Trier > (Network|Mail|Web|Firewall) University of applied sciences > Administrator Schneidershof, D-54293 Trier > > Mail: beckerr(a)fh-trier.de > <mailto:beckerr@fh-trier.de> Fon: +49 651 8103 499 > WWW: http://www.fh-trier.de/~beckerr Fax: +49 651 8103 214 > PGP: http://www.fh-trier.de/~beckerr/pgp ICQ: <available> > ______________________________________________________________________ > > Wenn Gott gewollt haette, dass E-Mail in HTML geschrieben wuerden, > endeten Gebete traditionell mit </amen>. (Tom Listen) > > -- ______________________________________________________________________ Dipl.-Inform. (FH) Ralf Becker Rechenzentrum (r/ft) der FH Trier (Network|Mail|Web|Firewall) University of applied sciences Administrator Schneidershof, D-54293 Trier Mail: beckerr(a)fh-trier.de Fon: +49 651 8103 499 WWW: http://www.fh-trier.de/~beckerr Fax: +49 651 8103 214 PGP: http://www.fh-trier.de/~beckerr/pgp ICQ: <available> ______________________________________________________________________ Wenn Gott gewollt haette, dass E-Mail in HTML geschrieben wuerden, endeten Gebete traditionell mit </amen>. (Tom Listen)

2 4

[Dovecot] 1.0.rc29 released
by Timo Sirainen 05 Apr '07

05 Apr '07

http://dovecot.org/releases/dovecot-1.0.rc29.tar.gz http://dovecot.org/releases/dovecot-1.0.rc29.tar.gz.sig Probably one more RC after this. * Security fix: If zlib plugin was loaded, it was possible to open gzipped mbox files outside the user's mail directory. + Added auth_gssapi_hostname setting. - IMAP: LIST "" "" didn't return anything if there didn't exist a namespace with empty prefix. This broke some clients. - If Dovecot is tried to be started when it's already running, don't delete existing auth sockets and break the running Dovecot - If deliver failed too early it still returned exit code 89 instead of EX_TEMPFAIL. - deliver: INBOX fallbacking with -n parameter wasn't working. - passdb passwd and shadow couldn't be used as master or deny databases - IDLE: inotify didn't notice changes in mbox file - If index file directory couldn't be created, disable indexes instead of failing to open the mailbox. - Several other minor fixes

22 41

[Dovecot] IMAP Admin Software ?
by Azher Amin 05 Apr '07

05 Apr '07

Hi, I am looking for IMAP Admin Software that can help me managing the accounts and quota , aliases on the local server. My installation is: - Linux - Dovecot 1.0 rc28 I tried using the openwebmail but it is giving errors in the php scripts. Plz suggest. -Azher -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

1 0

[Dovecot] --with-vpopmail compile errors
by Oliver Schulze L. 05 Apr '07

05 Apr '07

Hi, I'm building dovecot.src.rpm with vpopmail support and I get this error: if gcc -DHAVE_CONFIG_H -I. -I. -I../.. -I../../src/lib -I../../src/lib-sql -I../../src/lib-settings -I../../src/lib-ntlm -DAUTH_MODULE_DIR=\""/usr/lib/dovecot/auth"\" -DPKG_LIBEXECDIR=\""/usr/libexec/dovecot"\" -I/home/vpopmail/include -std=gnu99 -O2 -g -march=i686 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -I/usr/kerberos/include -std=gnu99 -O2 -g -march=i686 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -I/usr/kerberos/include -MT userdb-vpopmail.o -MD -MP -MF ".deps/userdb-vpopmail.Tpo" -c -o userdb-vpopmail.o userdb-vpopmail.c; \ then mv -f ".deps/userdb-vpopmail.Tpo" ".deps/userdb-vpopmail.Po"; else rm -f ".deps/userdb-vpopmail.Tpo"; exit 1; fi userdb-vpopmail.c: In function `vpopmail_lookup_vqp': userdb-vpopmail.c:30: error: `auth_request' undeclared (first use in this function) userdb-vpopmail.c:30: error: (Each undeclared identifier is reported only once userdb-vpopmail.c:30: error: for each function it appears in.) make[3]: *** [userdb-vpopmail.o] Error 1 make[3]: Leaving directory `/usr/src/redhat/BUILD/dovecot-1.0.rc27/src/auth' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/usr/src/redhat/BUILD/dovecot-1.0.rc27/src' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory `/usr/src/redhat/BUILD/dovecot-1.0.rc27' make: *** [all] Error 2 error: Bad exit status from /var/tmp/rpm-tmp.73126 (%build) I'm using: - vpopmail from: http://www.qmailtoaster.com/download/stable/vpopmail-toaster-5.4.13-1.3.3.s… - centos 4.4 - dovecot rpm from: http://dl.atrpms.net/all/dovecot-1.0-3_50.rc27.at.src.rpm - rpmbuild command: rpmbuild --rebuild --without inotify --with pam_stack --with forcequota2 --with vpopmail --target=i686 dovecot-1.0-3_50.rc27.at.src.rpm Also, I don't if vpopmail support is official, in that case, this info should go to the devel version of dovecot HTH Oliver -- Oliver Schulze L. | Get my e-mail after a captcha in: Asuncion - Paraguay | http://tinymailto.com/oliver

2 3

[Dovecot] *****SPAM***** The folder 'Inbox' cannot contain items. Namespace problems
by Francisco Reyes 05 Apr '07

05 Apr '07

Several attempts to support both Mac and PCs keep failing. In my latest attempt I used the following settings: #courier-imap compatibility/Thunderbird namespace private { separator = . prefix = INBOX. inbox = yes } For MAC OS Mail.app namespace private { separator = / prefix = INBOX/ inbox = no hidden= yes } This last attempt was based on the suggestion of Timo Sirainen, on the Mac settings. The PC settings were the defaults I got from the sample config and have always worked for PC clients. The new setup with namespace private worked for Mac clients, but got the following error for a number of users in both Outlook and thunderbird. Unable to display the folder. The folder 'Inbox' cannot contain items. This is most likely a limitation of your IMAP server. In order to create a folder that can contain items, be sure to append / to its name as you create it. I see this is an old issue. http://groups.google.com/group/microsoft.public.outlook/browse_thread/thread /5f990142171fb792/62adb6c069946e40?lnk=st&q=%22cannot+contain+items%22+dovec ot&rnum=1#62adb6c069946e40 One interesting point we discovered was that if we set an IMAP account in Outlook the very first time we logged in, it worked. If we closed the client, all subsequent times the "folder Inbox cannont contain items" error would come up. doing a TCPdump showed us that the difference was that the first time that Outlook connects it issued a "Select" command, but all other times it did not. Someone suggested to take out prefix = INBOX. Would that help? I don't want to cause problems for the vast majority of our PC users while trying to fix the Mac clients. Even though Mac users are a minority of our users, it is extremely problematic for us not to be able to support them because many domains may have a handfull of such clients.. so we basically will not be able to host a large number of domains in dovecot machines, just because of a handfull of Mac clients. Currently using Dovecot r27, but have been having this same problem since r15.

2 4

[Dovecot] Login lockups
by Daniel L. Miller 04 Apr '07

04 Apr '07

When dovecot works - it works great, and I thank you. But it seems like every time I setup a new server, it's a challenge getting the IMAP logins to work reliably. The changelog's top comment is stamped 2007-01-05, 18:48 if that helps nail down the version (I'm using a Debian/Ubuntu package). Both non-SSL and SSL logins have the problem. This time around I'm using LDAP authentication - and once I figured out how it worked beautifully. The problem is from time to time - with no particular consistency - I lose the ability to log in. A "telnet localhost 143" on the server works with a Dovecot response, then followed with a "01 LOGIN <user> <password>" results in a long delay, then a timeout, with no log files affected. What can I provide to try to trace this? protocols = imap imaps disable_plaintext_auth = no login_process_per_connection = yes -- Daniel

2 2

[Dovecot] logfile consistency
by David Lee 04 Apr '07

04 Apr '07

We do some routine logfile (syslog) gathering and analysis. I've been looking at extending this to parse the syslog output of dovecot. Hmmm... Ignoring the leading 'date hostname' prefix, some sample lines are: dovecot: imap-login: Login: user=<uuuuuu>, method=PLAIN, rip=dd.dd.dd.dd, lip=dd.dd.dd.dd dovecot: IMAP(uuuuuu): Disconnected: Logged out dovecot: IMAP(uuuuuu): Disconnected in IDLE dovecot: imap-login: Aborted login: rip=dd.dd.dd.dd, lip=dd.dd.dd.dd dovecot: pop3-login: Login: user=<uuuuuu>, method=PLAIN, rip=dd.dd.dd.dd1, lip=dd.dd.dd.dd dovecot: POP3(uuuuuu): Disconnected: Logged out top=0/0, retr=0/0, del=0/8, size=194970 dovecot: pop3-login: Aborted login: rip=dd.dd.dd.dd, lip=dd.dd.dd.dd deliver(uuuuuu): msgid=<014089712.74355909944644(a)thhebat.net>: saved mail to INBOX I've obfuscated some of the local detail: uuuuuuu represents a username/identifier; dd.dd.dd.dd represents an IP address. Would it be possible, please, to consider improving the consistency of the logging information? For instance: 1. All lines, including the "deliver", to begin "dovecot:"; 2. The "IMAP(uuuu): Disconnected" to become "imap: disconnected user=<uuuu>"; Overall this would make it more consistently amenable to perl-like pattern processing, at least with a reasonably hierarchical structure to the messages. Perhaps something like: dovecot: subprogram: event, key1=value1, key2=value2 ... where: "subprogram" is "{imap,pop,deliver,...}"; "event" is "{login,disconnected, ...}; and one of the "key=value" will usually be "user=<uuuu>". That would really make post-processing of logging information (whether offline, or 'live' via piped syslog) considerably easier. Thanks. -- : David Lee I.T. Service : : Senior Systems Programmer Computer Centre : : UNIX Team Leader Durham University : : South Road : : http://www.dur.ac.uk/t.d.lee/ Durham DH1 3LE : : Phone: +44 191 334 2752 U.K. :

4 3

[Dovecot] How to integrate dspam and dovecot
by Manilal K M 03 Apr '07

03 Apr '07

Hello all, I am currently setting up a new mail server with Qmail, OpenLDAP and Dovecot in CentOS-4.4. Qmail version is 1.03, OpenLDAP is 2.3 and Dovecot version is dovecot-1.0-3_50.rc27(RPM). I have successfully installed and tested it. But I have two issues with the current setup: #1. I am using dovecot LDA and configured the OpenLDAP such that the mail be delivered to the virtual users through a script. This script is saved in /var/qmail/bin/deliver.sh and the contents is as follows: /usr/bin/dspam --stdout --mode=tum --deliver=innocent,spam --feature=chained,noise --user global |/var/qmail/bin/preline -f /usr/libexec/dovecot/deliver -d $RECIPIENT || exit 77 This script name is mentioned in each user's deliveryProgramPath in the LDAP. I am not sure whether this is the best approach of using dovecot as MDA. I tried to include the following contents in /var/qmail/control/defaultdelivery : |/var/qmail/bin/preline -f /usr/libexec/dovecot/deliver -d $RECIPIENT But it seems that this is not working as desired. Please comment, if I have gone wrong anywhere. #2: I wish to use dspam to filter out the spam messages, but I am unsure whether the dspam plugin mentioned in http://johannes.sipsolutions.net/Projects/dovecot-dspam-integration is already in the dspam version I am using. If it's available please give details to configure it. Kindly share ideas. regards Manilal. -- Better to light one candle than to curse the darkness. Blog: http://librewings.blogspot.com Blog: http://flossvalley.blogspot.com

4 9

[Dovecot] No CA names sent in TLS handshake
by Johnny Chadda 03 Apr '07

03 Apr '07

Hello, I'm setting up Dovecot with client certificates and everything is working fine as long as the client only has one certificate in his store. If he has more than one, the wrong one might be sent to the server. The root of the problem is that Dovecot does not send out a list of valid CA names in the TLS handshake. If I connect using openssl s_client I get: "No client certificate CA names sent" I am using Dovecot 1.0 RC15 from backports.org. Is there a solution to this problem? Regards, Johnny

2 4

[Dovecot] Init.d boot scripts??
by rodman＠thefrowerts.com 03 Apr '07

03 Apr '07

Hello, Trying to figure out how to get dovecot to startup at boot. I saw the Ubuntu script on the dovecot site, but that didn't work on my system (SuSe 10.2). Of course, copying the /usr/local/sbin/dovecot file into /etc/init.d doesn't work at all. Any one have working SuSe script?? Rodman

4 4

[Dovecot] *****SPAM***** Upgrading from rc27 to rc29?
by Francisco Reyes 03 Apr '07

03 Apr '07

After sending a messasge about a problem (The folder 'Inbox' cannot contain items. Namespace problems) I found what seems to be a fix in the release for rc29. Besides any potential configuration files, do I need to delete the old index files? Any of the dovecot files? Based on the release notes for rc29 it seems the following will fix the problem we are experiencing: IMAP: LIST "" "" didn't return anything if there didn't exist a namespace with empty prefix. This broke some clients.

2 1

[Dovecot] [PATCH] to fix 2 pam issues
by Phil Oleson 03 Apr '07

03 Apr '07

Timo, I finally made the time to backport a pam fix I created for proftpd over to dovecot, that allows FreeBSD's pam_group to work as expected. (the bug was escalated to me internally hehe.. ). I also noticed an issue while testing that will be confusing to users. If the docs stay as is, or the other half of this patch is applied, then when the dovecot.conf contains: passdb pam { args = * } the imap files within etc/pam.d right now have to be named 'IMAP' and 'POP3' rather than the expected 'imap' and 'pop3'. The attached patch fixes the code to match the docs. -Phil. --- src/auth/passdb-pam.c.orig Mon Mar 26 10:10:26 2007 +++ src/auth/passdb-pam.c Mon Apr 2 16:18:54 2007 @@ -275,6 +275,8 @@ (void)pam_set_item(pamh, PAM_RHOST, host); /* TTY is needed by eg. pam_access module */ (void)pam_set_item(pamh, PAM_TTY, "dovecot"); + /* FreeBSD's pam_group need this set as well */ + (void)pam_set_item(pamh, PAM_RUSER, request->user); status = pam_auth(request, pamh, &str); if ((status2 = pam_end(pamh, status)) == PAM_SUCCESS) { @@ -428,8 +430,15 @@ int fd[2]; pid_t pid; - service = module->service_name != NULL ? - module->service_name : request->service; + if (module->service_name != NULL) { + service = module->service_name; + } else { + if (!strncmp(request->service, "IMAP", strlen(request->service))) + service = "imap"; + else if (!strncmp(request->service, "POP3", strlen(request->service))) + service = "pop3"; + } + auth_request_log_debug(request, "pam", "lookup service=%s", service); if (worker) {

2 1

[Dovecot] vpopmail "last auth" question
by B. Cook 03 Apr '07

03 Apr '07

Hello, I run the domain for the school here with qmail and vpopmail on FreeBSD with dovecot from the ports. I'm running dovecot 1.0.r26 and everything is working great. I been noticing that dovecot isn't updating when the user last logged in.. and I can't seem to figure out why. I also can't seem to find anything in the archives about it.. so am I the only one? name: bcook passwd: $1$ clear passwd: comment/gecos: B. Cook uid: 0 gid: 0 flags: 0 gecos: B. Cook limits: No user limits set. dir: /usr/local/vpopmail/domains/poughkeepsieschools.org/bcook quota: 41943040S usage: 72% account created: Wed Oct 18 21:09:03 2006 last auth: Never logged in I'm wondering how I could get the 'last auth' to populate like it used to w/ courier. below is my config if it will help: protocols = imap imaps pop3 listen = * disable_plaintext_auth = no ssl_disable = no ssl_cert_file = /long/path/to/file.pem ssl_key_file = /long/path/to/file.pem verbose_ssl = yes login_user = dovecot login_process_size = 64 first_valid_uid = 89 last_valid_uid = 89 first_valid_gid = 89 protocol imap { mail_plugins = quota imap_quota imap_client_workarounds = delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep } protocol pop3 { pop3_uidl_format = %08Xu%08Xv pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } auth default { mechanisms = plain passdb vpopmail { args = } userdb vpopmail { } user = root } plugin { quota = maildir } Thanks in advance. -- B. Cook Network Analyst Poughkeepsie City School District Mobile: 845.264.5827 | Desk: 845.451.4791

4 4

[Dovecot] Suggestion: mod_auth_dovecot
by David Anderson 03 Apr '07

03 Apr '07

Hello, I have a suggestion which might be a small and very useful project for a C coder (I'm not one!). As Dovecot makes its authentication interface available to other programs, I think that an Apache module to use it would be very useful. Currently I share an passwd-db file between Dovecot and Apache. However with Apache that means I have to give Apache read access. That means that websites with PHP could read that password file if they liked. If Apache could talk to the Dovecot authentication process instead, that would be a lot better. I'm sure there are lots of situations in which this would be useful - Dovecot's authentication settings are so flexible that it would be very handy to be able to use them more widely. If anyone produces one, I pledge to produce an RPM package and submit it to Fedora as my contribution. I would do it myself if I knew C... David

4 6

[Dovecot] prefetch + static + deliver
by Tom Bombadil 02 Apr '07

02 Apr '07

Hi all... The prefetch entry in the wiki says: "If you're using Dovecot's local delivery agent, you'll still need a valid userdb which it can use to locate the users. You can do this by adding a normal sql/ldap userdb after userdb prefetch." (http://wiki.dovecot.org/UserDatabase/Prefetch) My question is: Does it need to be a SQL/LDAP userdb? How about static or passwd? Thanks in advance :)

3 3

[Dovecot] testing LDAP connections
by Hugo Monteiro 02 Apr '07

02 Apr '07

Hello all, I haven't looked into the source code, but i suspect that LDAP connections, once established, are not tested properly. My scenario is the followind: Dovecot server <--------> firewall <---------> LDAP backend What happens is that the firewall has a security feature which basically make de firewall box "forget" about connections that are idle for more than X period of time. That particular setting is 30 minutes right now. When that happens, neither the LDAP backend or the Dovecot server get any type of notification, and for all they care the connection is alive and well. This is a very common implementation in firewalls nowadays. So my question is, is there any way to make dovecot re-open a new connection if there is a timeout while trying to use a connection already opened? I believe that this could be of great benefit for those who don't have their servers on the same physical network. Thanks in advance, Hugo Monteiro. -- ci.fct.unl.pt:~# cat .signature Hugo Monteiro Email : hugo.monteiro(a)fct.unl.pt Telefone : +351 212948300 Ext.15307 Centro de Informática Faculdade de Ciências e Tecnologia da Universidade Nova de Lisboa Quinta da Torre 2829-516 Caparica Portugal Telefone: +351 212948596 Fax: +351 212948548 www.ci.fct.unl.pt apoio(a)fct.unl.pt ci.fct.unl.pt:~# _

2 1

[Dovecot] Authenticaton in Active Directory(again)
by Claudio Roberto Prateat 02 Apr '07

02 Apr '07

Is possible authenticate in active directory 2003r2 with ldap (dovecot-ldap), but not using pam_ldap ? I have problem, faileds. I need example of the dovecot-ldap.conf for this authentication. Help, please. Best Regards !

2 1

[Dovecot] Using Dovecot LDA with Sendmail
by Scott Peron 02 Apr '07

02 Apr '07

Hi all, After looking at the LDA/Sendmail page in the dovecot wiki, I wanted to contribute another method to easily configure Sendmail to use deliver. Instead of adding a new mailer definition, as already suggested, one can simply use the following line in their sendmail.mc file instead: FEATURE(`local_procmail', `/usr/libexec/dovecot/deliver', `deliver -d $u', `SPhnu9')dnl And further on, still use: MAILER(procmail)dnl The location of deliver will of course vary for each OS and distro, etc, but this redefines the "procmail" mailer in the resulting sendmail.cf to use deliver instead, with the correct flags. For most setups, I believe this is the simplest configuration path. Scott -- Scott Peron, Webmaster, Infolytica Corp. webmaster(a)infolytica.com Tel: (514) 849-8752 x269 Fax: (514) 849-4239 http://www.infolytica.com Place du Parc, 300 Leo-Pariseau, Suite 2222, Montreal, QC, Canada, H2X 4B3

4 3

[Dovecot] SOLVED: Re: dovecot/LDAP: Multiple password replies
by Antonis Faragitakis 02 Apr '07

02 Apr '07

On 02/04/07, Timo Sirainen <tss(a)iki.fi> wrote: > On Mon, 2007-04-02 at 12:17 +0300, Antonis Faragitakis wrote: > > > Apr 2 11:47:50 srv-ath dovecot: auth(default): > > ldap(a.faragitakis,127.0.0.1): > > Multiple password replies > > I changed this error message now to: "pass_filter matched multiple > objects, aborting". > > So with the given pass_filter and username it found multiple objects > from the LDAP. Maybe there are some duplicate objects? > Yes, my mistake duplicate objects on the subtree. Found this out after 3 days :(((( Thank You Antonis

1 0

[Dovecot] dovecot/LDAP: Multiple password replies
by Antonis Faragitakis 02 Apr '07

02 Apr '07

Hello list, I'm trying to connect to pop3 using dovecot which authenticates through ldap, but i get the following Multiple password replies when i try to connect to server Apr 2 11:47:50 srv-ath dovecot: auth(default): ldap(a.faragitakis,127.0.0.1): base=ou=email,ou=services,dc=company,dc=com scope=subtree filter=(&(objectClass=qmailUser)(objectClass=uidObject)(uid=a.faragitakis)(accountStatus=active)) fields=uid,userPassword Apr 2 11:47:50 srv-ath dovecot: auth(default): ldap(a.faragitakis,127.0.0.1): uid(user)=a.faragitakis userPassword(password)=******* Apr 2 11:47:50 srv-ath dovecot: auth(default): ldap(a.faragitakis,127.0.0.1): Multiple password replies Apr 2 11:47:51 srv-ath dovecot: auth(default): client out: FAIL 2 user=a.faragitakis temp my dovecot-ldap.conf is as follows: hosts = localhost #uris = dn = cn=Manager,dc=company,dc=com dnpass = ******** #auth_bind = no #auth_bind_userdn = ldap_version = 3 base = ou=email,ou=services,dc=company,dc=com deref = never scope = subtree user_attrs = uid,mailMessageStore,,,, user_filter = (&(objectClass=qmailUser)(objectClass=uidObject)(uid=%u)(accountStatus=active)) pass_attrs = uid,userPassword pass_filter = (&(objectClass=qmailUser)(objectClass=uidObject)(uid=%u)(accountStatus=active)) default_pass_scheme = PLAIN user_global_uid = 2000 user_global_gid = 2000 my ldap objects/attributes is as follows: | objectClass: inetOrgPerson, qmailUser, uidObject | attributes: cn,mail,sn,uid,accountStatus,mailMessageStore,userPassword | example: |->cn=Antonis Faragitakis | |-> mail=a.faragitakis(a)company.com | |-> sn=Faragitakis | |-> uid=a.faragitakis | |-> accountStatus=active | |-> mailMessageStore=/home/vmail/a.faragitakis/ | |-> userPassword=secret thanks in advanced Antonis

2 1

[Dovecot] Unexpected behaviour when deleteing a big mailbox
by Steffen Kaiser 02 Apr '07

02 Apr '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, my last tests left me with a mailbox with > 80'000 messages in Maildir. Dovecot served them fine. No problem. I usually use IMAP's "Mark messages a deleted" function and expunge later. Because the "Move to Trash" is default in many MUAs, I decided to try it on this mailbox. I do think that it is hard to detect and prevent such problem, but could it be implemented that when the client connection times out, the COPY process is terminated and rolled back? I mean, as long as the messages are copied/linked to */tmp nothing is done, yet, hence, a simple cleanup of */tmp would result in a rollback. Due to the timeout, the EXPUNGE wasn't issued so far and the source mailbox is unchanged. Or, is it possible to prevent two COPYs of an overlapping message range into the same destination folder simultaneously? Or, can I prevent to COPY such a huge range of messages at once? I know 80'000 messages are much, but I have users with an INBOX of at least 40'000, eventually moving all files into an archive mailbox. I'm also surprised to find that I didn't get two full copies of the source mailbox. ============== Start situation: 4.8G .box1 (I didn't recorded the individual subdirs, unfortunately.) # find .box1 -type f | wc -l 84273 Newly created .Trash. === I started Thunderbird, let sync the mailbox, selected them all, and pressed "Delete". Some time later: Connection timed out. I, wondered, and hit "Delete" a second time. Again, connection timed out. === I was surprised, however, to see that the Dovecot log with still active telling me that mails are copied to Trash. I ended up with two processes copying all messages to .Trash/tmp on the server. The process I traced a bit later linked any file after the other. What I wondered right from the beginning was, that du -hs .??* displayed about 3.5GB in .Trash, but still 4.8GB in .box1. So, why are there 3.5GB additional files in .Trash, when I configured Dovecot to use hardlinks? The end situation is that .box1 contains all messages still, but any Unseen messages are moved to .box1/cur, and .Trash contains: 7.4G .Trash/cur 791M .Trash/new 76K .Trash/tmp # find .Trash/ -type f | wc -l 121713 The size nearly doubled. # du -hs .box1 ; du -sh .Trash/ 4.8G .box1 8.2G .Trash/ ==== Last lines in Dovecot log: dovecot: Mar 21 11:46:15 Info: IMAP(dvtest) [11535]: copy -> Trash: uid=83964, msgid=<xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx(a)xx-xxxx-xxxxx-xxxx.xx>, box=box1 dovecot: Mar 21 11:46:15 Info: IMAP(dvtest) [11535]: copy -> Trash: uid=83965, msgid=<xxxxxxxx.xxxxxxx(a)xx-xxxx-xxxxx-xxxx.xx>, box=box1 dovecot: Mar 21 11:46:29 Info: IMAP(dvtest) [11535]: Disconnected: Mailbox is in inconsistent state, please relogin. Last lines of strace: fstat64(13, {st_mode=S_IFREG|0600, st_size=1341104, ...}) = 0 stat64("/var/cache/dovecot/31045/index/.box1/dovecot.index", {st_mode=S_IFREG|0600, st_size=1341104, ...}) = 0 alarm(120) = 0 fcntl64(13, F_SETLKW64, {type=F_RDLCK, whence=SEEK_SET, start=0, len=0}, 0xbfe562d4) = 0 alarm(0) = 120 fstat64(13, {st_mode=S_IFREG|0600, st_size=1341104, ...}) = 0 mmap2(NULL, 1341104, PROT_READ|PROT_WRITE, MAP_SHARED, 13, 0) = 0xb3ffc000 munmap(0xb4285000, 1341104) = 0 write(1, "* 7998 FETCH (FLAGS ($Label2 $La"..., 2067) = 2067 write(1, "* 8091 FETCH (FLAGS (\\Answered \\"..., 2056) = -1 EPIPE (Broken pipe) - --- SIGPIPE (Broken pipe) @ 0 (0) --- munmap(0xb7cbc000, 1341104) = 0 fcntl64(13, F_SETLK64, {type=F_UNLCK, whence=SEEK_SET, start=0, len=0}, 0xbfe56394) = 0 write(2, "\1IDisconnected: Mailbox is in in"..., 66) = 66 # /usr/local/dovecot.rc27/sbin/dovecot -n # /usr/local/dovecot.rc27/etc/dovecot.conf base_dir: /var/run/dovecot/ log_path: /var/log/dovecot/dovecot.log protocols: imap imaps pop3 pop3s ssl_ca_file: /etc/ssl/certs/ca.crt ssl_cert_file(default): /etc/ssl/certs/imap.pem ssl_cert_file(imap): /etc/ssl/certs/imap.pem ssl_cert_file(pop3): /etc/ssl/certs/pop3.pem ssl_key_file(default): /etc/ssl/private/imap.key ssl_key_file(imap): /etc/ssl/private/imap.key ssl_key_file(pop3): /etc/ssl/private/pop3.key disable_plaintext_auth: no verbose_ssl: yes login_dir: /var/run/dovecot//login login_executable(default): /usr/local/dovecot.rc27/libexec/dovecot/imap-login login_executable(imap): /usr/local/dovecot.rc27/libexec/dovecot/imap-login login_executable(pop3): /usr/local/dovecot.rc27/libexec/dovecot/pop3-login login_log_format_elements: %p: user=<%u> method=%m rip=%r lip=%l %c verbose_proctitle: yes first_valid_uid: 1000 mail_location: maildir:%h/MailDir:CONTROL=/var/cache/dovecot/%i/control:INDEX=/var/cache/dovecot/%i/index mail_debug: yes dotlock_use_excl: yes maildir_copy_with_hardlinks: yes maildir_copy_preserve_filename: yes mail_drop_priv_before_exec: yes mail_executable(default): /usr/local/dovecot.rc27/libexec/dovecot/imap mail_executable(imap): /usr/local/dovecot.rc27/libexec/dovecot/imap mail_executable(pop3): /usr/local/dovecot.rc27/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota mail_log zlib mail_plugins(imap): quota imap_quota mail_log zlib mail_plugins(pop3): quota mail_log mail_plugin_dir(default): /usr/local/dovecot.rc27/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/dovecot.rc27/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/dovecot.rc27/lib/dovecot/pop3 mail_log_prefix: %Us(%u) [%p]: mail_log_max_lines_per_sec: 30 pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %u pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): oe-ns-eoh namespace: type: private separator: . inbox: yes hidden: yes auth default: mechanisms: plain login cache_size: 10 username_chars: abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890 verbose: yes debug: yes passdb: driver: ldap args: /usr/local/dovecot.rc26/etc/dovecot-ldap.conf passdb: driver: shadow userdb: driver: prefetch userdb: driver: ldap args: /usr/local/dovecot.rc26/etc/dovecot-ldap.conf userdb: driver: passwd-file args: /etc/passwd socket: type: listen client: path: /var/run/dovecot/auth-client mode: 432 master: path: /var/run/dovecot/auth-master mode: 432 group: mail plugin: quota: fs Bye, - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iQEVAwUBRgFBGy9SORjhbDpvAQLBcQf+OAqiufFlyPqJTyM3Ylkmiae2afXPe2wl bNWg6AyDrdvFw+rtdc5vnYukQUSk2a8zQBggt3Rfb1zZQb0pszrzLdR+fOwnW2uE kDyHRhyy88aVpM848oQKYnlWdNHFrdwbyp2myU4JxJhu0bXsAhyMgf9txshwe5cd 23O1x+gkWUp+1wuz84uTep3Kcs1wVXWANEN5RT4YMI3MOqMrcyB+P0lj0luy0HTH HE9T6mLqzGt0Cw6yfm+1W8bU3Wnt3C5je15gT++OPd5YmDvpQs+fOjavDIITsuOf jBck4N+KjwOM+FzP8Ea1WNWCvObJKdeiISkoFWFO9bafw5Yue9hFNA== =yyP5 -----END PGP SIGNATURE-----

6 17

[Dovecot] imaptest10 and stalled messages
by Mike Brudenell 01 Apr '07

01 Apr '07

Greetings - I've now got as far as playing with the imaptest10 test utility to see if I can stress-test our development server. imaptest10 is built against dovecot-1.0rc28 It may just be that I'm excessively heavy handed, but when I let imaptest10 rip with the command... ./imaptest10 user=test%03d host=testserver.imap.york.ac.uk clients=50 mbox=./dovecot.mbox msgs=1000 secs=30 logout=10 ...after 15 seconds or so I started getting output along the lines of: Logi List Stat Sele Fetc Fet2 Stor Dele Expu Appe Logo 100% 50% 50% 100% 100% 100% 50% 100% 100% 100% 10% 30% 5% 2 0 1 1 1 0 0 0 0 0 0 50/ 50 2 0 0 1 1 0 0 0 0 0 0 50/ 50 0 0 2 2 0 1 1 1 1 1 0 50/ 50 2 0 2 2 0 1 1 1 1 1 2 50/ 50 0 0 1 1 0 0 0 0 0 0 0 50/ 50 - 16. stalled for 16 secs in LOGIN - 17. stalled for 16 secs in LOGIN - 18. stalled for 16 secs in LOGIN 2 1 1 2 1 0 0 0 0 0 0 50/ 50 - 17. stalled for 17 secs in LOGIN - 18. stalled for 17 secs in LOGIN - 22. stalled for 16 secs in LOGIN - 23. stalled for 16 secs in LOGIN - 24. stalled for 16 secs in LOGIN 1 0 1 1 0 0 0 0 0 0 0 50/ 50 - 17. stalled for 18 secs in LOGIN - 18. stalled for 18 secs in LOGIN - 22. stalled for 17 secs in LOGIN - 23. stalled for 17 secs in LOGIN - 24. stalled for 17 secs in LOGIN - 28. stalled for 16 secs in LOGIN - 29. stalled for 16 secs in LOGIN - 30. stalled for 16 secs in LOGIN - 31. stalled for 16 secs in LOGIN - 32. stalled for 16 secs in LOGIN The "stalled" log lines continue until the test completes. I'm assuming it's just that I'm pushing our hardware beyond its reasonable limits: it is only an oldish development box... Sun v120 with 1 650MHz SPARC processor and 1Gbyte RAM Dovecot is using shadow password file authentication. The mail folders are in Maildirs, NFS-mounted from a NetApp filer, and each account's INBOX has around 1000 messages in it. Control and Index files are on local disk. By the end of the 30 second test run load average has climbed to around 11 I don't know how "active" the imaptest10 utility is when it's running, but do you think I should be concerned by the "stalled" messages? That is, do you think I have something configured amiss? Or is it likely just to be I'm expecting too much of our hardware? (The real system will have beefier Suns with Opteron-based CPUs, more memory, etc) With thanks, Mike B-) PS. I forgot to say: despite all this activity there's not a single error logged by Dovecot in the (admittedly short at this stage) test runs. -- The Computing Service, University of York, Heslington, York Yo10 5DD, UK Tel:+44-1904-433811 FAX:+44-1904-433740 * Unsolicited commercial e-mail is NOT welcome at this e-mail address. *

2 7

[Dovecot] locking question
by Stewart Dean 01 Apr '07

01 Apr '07

There are three applications that have their mitts on files on my mail server, which is running AIXV5.3 and UWIMAP and mbox format. The mail folders and INBOXES are native to that machine, but also are NFS exported to a login server and a mailing list server. All three machines are running the lockd daemon. Everybody wants to lock differently 1) procmail (delivering for sendmail), which seems to want to use dotlocking, fcntl and lockf locking; for whatever reasons, the compile time tests seem to disallow flock. 2) UWIMAP which according to wiki.dovecot.org/Migration/UW uses: mbox_read_locks = flock mbox_write_locks = dotlock flock 3) I want to run dovecot in the same environment as I switch over, for which the locking strategy is supposed to be (according to http://wiki.dovecot.org/MboxLocking) mbox_read_locks = fcntl mbox_write_locks = dotlock fcntl Since that same page in the wiki says. "*It's important that all software that's reading or writing to mboxes use the same locking settings.",* I had recompiled procmail so it only usedotlocking and fcntl (thus removing lockf in addition to the disallowed flock)...but now I bumped into the Migration/UW page and there looks to be a conflict. I want to be able to run dovecot (for testing) and UWIMAP (for all users/production) at the same time (but never at the same time with the same mailbox), but UWIMAP is doc'ed to use flock and Dovecot doesn't It's conceivable that the different locking strategies of UWIMAP and Dovecot don't matter because they would never be going after the same mail files (right?) but there is procmail, which has to interact with both. It appears to not use flock OK, even though the docs say it should since UWIMAP expects it, and I've disabled lockf as well. But will there be a conflict with procmail and dovecot's use of fcntl, which UWIMAP doesn't use? Help. * * ** -- ==== Stewart Dean, Unix System Admin, Henderson Computer Resources Center of Bard College, Annandale-on-Hudson, New York 12504 sdean(a)bard.edu voice: 845-758-7475, fax: 845-758-7035

2 1

[Dovecot] who owns dovecot files and dirs?
by Stewart Dean 01 Apr '07

01 Apr '07

...and what permissions should they have. I am thinking of /var/run/dovecot and the index directory. What ownership, group and permissions should they be? Are there any other files/dirs created for dovecot alone (not the mail folders and INBOXes); if so, how should they be owned and permed? I had thought they were to be owned by dovecot, but it turns out that they should not -- ==== Stewart Dean, Unix System Admin, Henderson Computer Resources Center of Bard College, Annandale-on-Hudson, New York 12504 sdean(a)bard.edu voice: 845-758-7475, fax: 845-758-7035

2 1

[Dovecot] 1.0rc29: Corrupted index cache file
by Jeff Rice 01 Apr '07

01 Apr '07

Hi, I have recently migrated from Courier to Dovecot, and I noticed a problem in one of my spam scripts. Here's the setup: Spam that needs to be retrained by the filter is placed in a maildir from the IMAP client. A cron job scans that maildir and if it finds a message, feeds it to the spam filter and removes it from the training maildir. Depending on whether or not the message was a spam or ham, it is either deleted or delivered to Inbox. It appears I am getting an error when the script deletes a mail message. I haven't checked if this message only occurs when a client is connected -- it's possible. Log excerpt: Mar 31 18:34:57 finity dovecot: IMAP(XXXXXXX(a)finity.org): Maildir /home/vmail/XXXXXXX(a)finity.org/.Spam.Unsure sync: UID inserted in the middle of mailbox (8 > 3, file = msg.FHoB:2,) Mar 31 18:34:57 finity dovecot: IMAP(XXXXXXX(a)finity.org): Disconnected: Mailbox is in inconsistent state, please relogin. Mar 31 18:35:36 finity dovecot: IMAP(XXXXXXX(a)finity.org): Corrupted index cache file /home/vmail/XXXXXXX(a)finity.org/.Spam.Unsure/dovecot.index.cache: indexid changed Jeff

2 1