- dovecot - dovecot.org

[Dovecot] Proxy with MasterUser + Authentication issues
by Cassidy B. Larson 16 Feb '07

16 Feb '07

Per Timo's direction, I decided to give the MasterUser a try in connecting my proxy to my destination server. This might allow for the use of 'secure password' for my clients that like to check that box by default. A couple of problems I'm running into running RC15: #1: My Proxy's SQL password_query line: password_query = SELECT a.clearpasswd AS password, v.storeIP AS host, CONCAT(v.userID,'*someuser') AS destuser, 'Y' AS nologin, 'Y' AS nodelay, 'Y' AS proxy, 'somepass' AS pass FROM iwmailsystem.virtmailbox AS v NATURAL JOIN authenticate.users AS a WHERE v.userID = '%u' and v.imap_active = 1 I'm wanting to authenticate the user on the proxy before I send it off via the MasterUser to the destination server. However, I show this in the logs: Info: auth(default): client in: AUTH 1 PLAIN service=IMAP lip= x.y.z.a rip=a.b.c.d resp=AGJ1dGNoQGluZm93ZXN0LmNvbQBzZWNyZXQ= Info: auth-worker(default): sql(user(a)host.com,a.b.c.d): query: SELECT a.clearpass wd AS password, v.storeIP AS host, CONCAT(v.userID,'*someuser') AS destuser, 'Y' AS nologin, 'Y' AS nodelay, 'Y' AS p roxy, 'somepass' AS pass FROM iwmailsystem.virtmailbox AS v NATURAL JOIN authenticate.users AS a WHERE v.userID = 'user(a)host.com' and v.imap_active = 1 Error: auth(default): file auth-request.c: line 207 (auth_request_save_cache): assertion failed: (extra_fields == NULL || (strstr(extra_fields, "\tpass=") == NULL && strncmp(extra_fields, "pass=", 5) != 0)) Error: child 54122 (auth) killed with signal 6 The Wiki showed I should return a 'pass' column. However, that's choking the query up in auth-request.c. Could it be the "\tpass" from auth-request.c? If I change user(a)host.com's password to 'someass' and remove the 'pass' column from the password_query, it authenticates, and proxy's over just fine. Am I doing something wrong? I want to authenticate the user locally on the proxy and pass off the 'master password' to the proxy, but using 'pass' doesnt work. 'password' column does. Doesnt help me though for my situation :) Problem #2: I'm wanting to put the masteruser/pass in the database for quick retrieval and updating. So I setup dovecot.conf as: passdb sql { # Path for SQL configuration file, see doc/dovecot-sql.conf for example args = /usr/local/etc/dovecot-sql.conf master=yes #pass=yes } passdb passwd { } and dovecot-sql.conf with: password_query = SELECT '%u' AS user, 'master-password' AS password Trying to connect locally with a "telnet localhost 143" via: 1 login user(a)host.com*someuser "somepass" Give me this in the detail log file: Info: auth(default): client in: AUTH 1 PLAIN service=IMAP lip= a.b.c.d rip=w.x.y.z resp=AGJ1dGNoQGluZm93ZXN0LmNvbSphZG1pbkBpbmZvd2VzdC5jb20AbWFzdGVyLXBhc3N3b3Jk Error: auth-worker(default): BUG: PASSV had invalid passdb ID Warning: Killed with signal 15 I am able to successfully authenticate with the master user/pass if I store it in a passdb file. However, I'd prefer to have it in the database for obvious reasons. Any help to the above would be appreciated. thanks, Cassidy

2 6

[Dovecot] Can't login in IMAP server
by Mário Gamito 16 Feb '07

16 Feb '07

Hi, I can't login in the IMAP server. This is the log from a telnet session to port 143: Feb 16 15:38:32 mail2 dovecot: auth(default): client in: AUTH 1 PLAIN service=IMAP secured lip=192.168.84.128 rip=192.168.84.128 resp=<hidden> Feb 16 15:38:32 mail2 dovecot: auth(default): checkpassword(gamito(a)mail2.telbit.pt,192.168.84.128): Executed: /usr/local/bin/auth_imap /usr/local/libexec/dovecot/checkpassword-reply Feb 16 15:38:32 mail2 dovecot: auth(default): checkpassword(gamito(a)mail2.telbit.pt,192.168.84.128): Received no input Feb 16 15:38:32 mail2 dovecot: auth(default): checkpassword: Child 15764 died with signal 11 Feb 16 15:38:34 mail2 dovecot: auth(default): client out: FAIL 1 user=gamito(a)mail2.telbit.pt temp Feb 16 15:38:40 mail2 dovecot: imap-login: Aborted login: user=<gamito(a)mail2.telbit.pt>, method=PLAIN, rip=192.168.84.128, lip=192.168.84.128, secured What is happening here ? Any help would be appreciated. Warm Regards, Mário Gamito

2 2

[Dovecot] Dovecot proxy question (hostname instead of ip)
by Wouter de Jong 16 Feb '07

16 Feb '07

Hello, We are planning to use the Proxy feature of Dovecot, but fail to implement it currently the way we would like to. Reason is that proxy insists to have an IP-address as host : Feb 15 15:43:24 proxy-test.widexs.nl dovecot: pop3-login: proxy(username): mspool01-test.widexs.nl is not a valid IP When I changed the query to force the IP-address of the above server, it works. Would it be possible to make this work, but more important ... Are there any reasons NOT to make this work ? :)) Kind regards, Wouter. -- WideXS http://www.widexs.nl Wouter de Jong System-Administrator Tel +31 (0)23 5698070 Fax +31 (0)23 5698099 Bijlmermeerstraat 62, 2131 HG HOOFDDORP, NL

3 3

[Dovecot] domain truncated
by Nemanja Miletic 16 Feb '07

16 Feb '07

Hi all, I have a problem with domain information being truncated from username during ldap search, so it can not be used in mail_location. This happens when user part of the username %n is used in pass_filter in passdb ldap search. When I use %u all username information remains and mailbox can be located. Here is my configuration. In dovecot.conf I have two locations one for system and one for virtual users: ... mail_location = maildir:/var/spool/mail/%n mail_location = maildir:/var/spool/mail/vdom/%d/%n ... Also two configurations for passdb: ... passdb ldap { args = /etc/dovecot-ldap.conf } passdb ldap { args = /etc/dovecot-ldap-virt.conf } ... Here info is searched in ldap: /etc/dovecot-ldap-virt.conf ... base = dc=%d,ou=Virtual Domains,dc=eunet,dc=yu pass_filter = (&(objectClass=posixAccount)(uid=%n)) ... And the line in log file stating that maildir can not be located: mkdir(/var/spool/mail/vdom//cone/cur) failed: Permission denied Is this a bug or I am doing something wrong. Thank You, Nemanja

3 4

[Dovecot] Where is auth_dovecot
by Mário Gamito 16 Feb '07

16 Feb '07

Hi, Shouldn't i have a file named auth_dovecot ? It's not in my system and i can't find anything about it in the docs. Any help would be appreciated. Warm Regards, Mário Gamito

1 0

Re: [Dovecot] severe performance problem (mail cache related?)
by Bill Boebel 16 Feb '07

16 Feb '07

On Fri, February 16, 2007 9:03 am, Timo Sirainen <tss(a)iki.fi> said: > Looks like my rc22 fix broke that then. It didn't loop forever, only > until client sent the whole message or until it disconnected, but it did > eat all the CPU while waiting. > > Fix here: > http://dovecot.org/list/dovecot-cvs/2007-February/007721.html > > I guess this is good enough reason for rc23. > Nice. Thanks for the quick fix. Bill

1 0

Re: [Dovecot] severe performance problem (mail cache related?)
by Bill Boebel 16 Feb '07

16 Feb '07

On Fri, February 16, 2007 6:39 am, Timo Sirainen <tss(a)iki.fi> said: > On Fri, 2007-02-16 at 03:29 -0800, Dan Price wrote: >> Well there you go, I'm a dope. I think I set mmap_disable=yes because I >> was seeing strange things happening where there would be thousands >> (millions?) of madvise(DONTNEED) calls-- seemingly forever in a loop. I >> have not yet tracked that problem down-- next time I see it, I will >> make sure to get to the bottom of it. > > Actually the only place where madvise(MADV_DONTNEED) is called is in the > file-cache code which is used only with mmap_disable=yes. I'm not sure if this is related or not, but we set mmap_disable=yes last week and since then have seen what appears to be an occasional infinite loops. I have been trying to track down some more details before posting to the list, but here is what I have so far. There is no error logged in the dovecot log when this occurs, and it only stops by "kill -9" on the process... # top -c PID USER PRI NI SIZE RSS SHARE STAT %CPU %MEM TIME CPU COMMAND 7832 virtual 25 0 580 496 376 R 71.5 0.0 70:59 0 imap [user(a)example.com 192.168.1.14] # lsof -p 7832 COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME imap 7832 virtual cwd DIR 147,0 600 2372995 /data1/mail/ex/example.com/us/user imap 7832 virtual rtd DIR 3,3 4096 2 / imap 7832 virtual txt REG 3,3 412996 789553 /usr/libexec/dovecot/imap imap 7832 virtual mem REG 3,3 33856 771355 /usr/lib/dovecot/lib10_quota_plugin.so imap 7832 virtual mem REG 3,3 7720 771364 /usr/lib/dovecot/imap/lib11_imap_quota_plugin.so imap 7832 virtual mem REG 3,3 106912 278626 /lib/ld-2.3.2.so imap 7832 virtual mem REG 3,3 14868 278653 /lib/libdl-2.3.2.so imap 7832 virtual mem REG 3,3 1571824 278633 /lib/tls/libc-2.3.2.so imap 7832 virtual 0u IPv4 -1140164370 TCP vip.mail17a.r4.iad.mlsrvr.com:imap->director2.r2.iad.emailsrvr.com:56195 (ESTABLISHED) imap 7832 virtual 1u IPv4 -1140164370 TCP vip.mail17a.r4.iad.mlsrvr.com:imap->director2.r2.iad.emailsrvr.com:56195 (ESTABLISHED) imap 7832 virtual 2w FIFO 0,5 3154802927 pipe imap 7832 virtual 3r CHR 1,9 599160 /dev/urandom imap 7832 virtual 4r FIFO 0,5 3154802928 pipe imap 7832 virtual 5w FIFO 0,5 3154802928 pipe imap 7832 virtual 6r FIFO 0,5 3154802929 pipe imap 7832 virtual 7w FIFO 0,5 3154802929 pipe imap 7832 virtual 8u REG 22,1 11112 6602923 /var/index/data1/mail/ex/example.com/us/user/.Elementos enviados/dovecot.index imap 7832 virtual 9u REG 22,1 50824 6602903 /var/index/data1/mail/ex/example.com/us/user/.Elementos enviados/dovecot.index.log imap 7832 virtual 10u REG 147,0 3074 6346008 /data1/mail/ex/example.com/us/user/maildirsize imap 7832 virtual 11w REG 147,0 905650 7062984 /data1/mail/ex/example.com/us/user/.Elementos enviados/tmp/1171483586.P7832Q0M770594.mail17a.r4.iad.mlsrvr.com # strace -p 7832 read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable)

2 2

[Dovecot] imap-login crash with RC19
by Nicolas STRANSKY 16 Feb '07

16 Feb '07

Hi Timo, Using RC19, I've have the following crash. If there was a core file, I've got no idea where it's gone... Jan 25 10:35:10 rouge dovecot: imap-login: file client.c: line 528 (client_unref): assertion failed: (client->refcount > 0) Jan 25 10:35:10 rouge dovecot: child 25498 (login) killed with signal 6 Best regards, -- Nico On réalise qu'une femme est de la dynamite quand on la laisse tomber. -+- Marcel Pagnol -+-

2 4

[Dovecot] Wiki to doc/ in tarball
by Timo Sirainen 16 Feb '07

16 Feb '07

So I finally started building a script that does it. Anyone interested in helping with it so that it produces readable output? First step is getting raw wiki pages. I'll do this directly by getting them from the filesystem. You can get them from here: http://dovecot.org/tmp/wikipages.tar.gz Next there's http://dovecot.org/tmp/wiki2txt.pl which is my horrible Perl script that kind of works now to produce almost readable text files. Its current output is in http://dovecot.org/tmp/wikitxt.tar.gz One thing I'm wondering about is how to make the directory layout work. For example there is "UserDatabase" and "UserDatabase/Static" pages. Currently I'm placing the latter into "_UserDatabase/Static" but I don't think that's the best solution. I was thinking about adding some "include" and "exclude" lists. If a page is in excluce list it's skipped. If it's in neither list it prints a warning but still includes it. So this makes it easy to find out the new pages and figure out if they should be included in the documentation.

3 2

[Dovecot] Index Prob
by Kevin Richter 16 Feb '07

16 Feb '07

Hi, i have a problem with rc19 (sorry, i have no time at the moment to uptime) and homedirs and maildirs mounted via NFS on Solaris10. At the beginning of the following log file everything is ok. At the end it cannot access the index... and just deleted the whole mailbox! It was empty... so it was no problem. Any ideas? Thanks. Bye, Kevin dovecot: Feb 15 21:17:52 Info: auth(default): client in: AUTH 1 PLAIN service=POP3 secured lip=147.x.x.x rip=89.x.x.x resp=<hidden> dovecot: Feb 15 21:17:52 Info: auth(default): client out: CONT 1 dovecot: Feb 15 21:17:52 Info: auth(default): client in: CONT<hidden> dovecot: Feb 15 21:17:52 Info: auth(default): client out: OK 1 user=ssal0041 dovecot: Feb 15 21:17:52 Info: auth(default): master in: REQUEST 111 2754 1 dovecot: Feb 15 21:17:52 Info: auth(default): master out: USER 111 ssal0041 system_user=ssal0041 uid=3092 gid=1100 home=/home/ssal0041 dovecot: Feb 15 21:17:52 Info: pop3-login: Login: user=<ssal0041>, method=PLAIN, rip=89.x.x.x, lip=147.x.x.x, TLS dovecot: Feb 15 21:17:52 Info: POP3(ssal0041): Effective uid=3092, gid=1100 dovecot: Feb 15 21:17:52 Info: POP3(ssal0041): mbox: data=/home/ssal0041/mail/:INBOX=/var/mail/ssal0041 dovecot: Feb 15 21:17:52 Info: POP3(ssal0041): mbox: root=/home/ssal0041/mail, index=/home/ssal0041/mail, inbox=/var/mail/ssal0041 dovecot: Feb 15 21:17:55 Error: POP3(ssal0041): Timeout while waiting for shared lock for index file /home/ssal0041/mail/.imap/INBOX/dovecot.index dovecot: Feb 15 21:19:52 Error: POP3(ssal0041): Timeout while waiting for shared lock for index file /home/ssal0041/mail/.imap/INBOX/dovecot.index dovecot: Feb 15 21:19:55 Error: POP3(ssal0041): Timeout while waiting for shared lock for index file /home/ssal0041/mail/.imap/INBOX/dovecot.index dovecot: Feb 15 21:19:55 Error: POP3(ssal0041): Couldn't open INBOX: Internal error occurred. Refer to server log for more information. [2007-02-15 21:15:55] dovecot: Feb 15 21:19:55 Info: POP3(ssal0041): No INBOX for user top=0/0, retr=0/0, del=0/0, size=0 dovecot: Feb 15 21:21:29 Info: POP3(ssal0041): Disconnected top=0/0, retr=0/0, del=0/0, size=0 dovecot: Feb 15 21:21:29 Info: POP3(ssal0041): Disconnected top=0/0, retr=0/0, del=0/0, size=0

2 2

[Dovecot] Son't have IMAPS
by Mário Gamito 16 Feb '07

16 Feb '07

Hi, I've installed dovecot and i'm pretty sure it has SSL support built in. But i don't have IMAPS. I get all sort of errors. Thunderbird tells: "The connection was refused". If i disable imaps, imap works just fine. If i enable it, none of them work. The certificates in /etc/ssl/certs and /etc/ssl/private are the same ? Any help would be appreciated. Warm Regards, Mário Gamito ## ## SSL settings ## # IP or host address where to listen in for SSL connections. Defaults # to above if not specified. ssl_listen = *:943 # Disable SSL/TLS support. #ssl_disable = no # PEM encoded X.509 SSL/TLS certificate and private key. They're opened before # dropping root privileges, so keep the key file unreadable by anyone but # root. Included doc/mkcert.sh can be used to easily generate self-signed # certificate, just make sure to update the domains in dovecot-openssl.cnf ssl_cert_file = /etc/ssl/certs/dovecot.pem ssl_key_file = /etc/ssl/private/dovecot.pem # If key file is password protected, give the password here. Alternatively # give it when starting dovecot with -p parameter. #ssl_key_password = theedge # File containing trusted SSL certificate authorities. Usually not needed. # The CAfile should contain the CA-certificate(s) followed by the matching # CRL(s). CRL checking is new in dovecot .rc1 #ssl_ca_file = # Request client to send a certificate. #ssl_verify_client_cert = no # How often to regenerate the SSL parameters file. Generation is quite CPU # intensive operation. The value is in hours, 0 disables regeneration # entirely. #ssl_parameters_regenerate = 168 # SSL ciphers to use #ssl_cipher_list = ALL:!LOW # Show protocol level SSL errors. #verbose_ssl = no ## ## Login processes ## # Directory where authentication process places authentication UNIX sockets # which login needs to be able to connect to. The sockets are created when # running as root, so you don't have to worry about permissions. Note that # everything in this directory is deleted when Dovecot is started. login_dir = /var/run/dovecot/login

2 3

[Dovecot] Dovecot forward problems
by Venilton Junior 16 Feb '07

16 Feb '07

Hi Folks, I setted up a mail server based on this how-to http://wanderingbarque.com/howtos/mailserver/mailserver.html All things are working thing as you can see in my server log. Off course, that I've suppressed some informations. postfix/smtpd[16483]: connect from unknown[myip] postfix/smtpd[16483]: 62C9034002: client=unknown[myip] postfix/cleanup[16777]: 62C9034002: message-id=<20070215182523.62C9034002@mysmtpserver> postfix/qmgr[16457]: 62C9034002: from=<me@domain>, size=360, nrcpt=1 (queue active) dovecot: auth(default_with_listener): master in: USER 1 user@domain service=deliver dovecot: auth(default_with_listener): ldap(user@domain): user search: base=dc=example,dc=com scope=subtree filter=(&(objectClass=VirtualMailAccount)(mail=user@domain)(accountActiv e=TRUE)(delete=FALSE)) fields=mail,homeDirectory dovecot: auth(default_with_listener): master out: USER 1 user@domain uid=202 gid=202 deliver(user@domain): msgid=<20070215182523.62C9034002@mysmtpserver>: saved mail to INBOX postfix/pipe[16785]: 62C9034002: to=<user@domain>, relay=dovecot, delay=12, status=sent (domain) postfix/qmgr[16457]: 62C9034002: removed This log is showing that a message was delivered to an user at my mailserver. But, at this time, I've tried to test forwarding features of postfix+dovecot+ldap. I've setted up this user entry (forwardActive=TRUE) in my ldap server. Here follows some entries that I put at my main.cf # Accounts accounts_server_host = $ldap_server_host accounts_search_base = $ldap_search_base accounts_query_filter = (&(&(objectClass=VirtualMailAccount)(mail=%s))(forwardActive=FALSE)(acco untActive=TRUE)(delete=FALSE)) accounts_result_attribute = mailbox accounts_cache = no virtual_transport = dovecot virtual_mailbox_base = /var/lib/imap/vmail/domains virtual_mailbox_maps = ldap:accounts virtual_mailbox_domains = ldap:domains virtual_minimum_uid = 202 virtual_uid_maps = static:202 virtual_gid_maps = static:202 virtual_alias_maps = ldap:aliases, ldap:virtualforward home_mailbox = Maildir/ # aliases aliases_server_host = $ldap_server_host aliases_search_base = $ldap_search_base aliases_query_filter = (&(&(objectClass=VirtualMailAlias)(mail=%s))(forwardActive=FALSE)(accoun tActive=TRUE)(delete=FALSE)) aliases_result_attribute = maildrop aliases_cache = no aliases_bind_dn = $ldap_bind_dn aliases_bind_pw = $ldap_bind_pw accountsmap_server_host = $ldap_server_host accountsmap_search_base = $ldap_search_base accountsmap_query_filter = (&(&(objectClass=VirtualMailAccount)(mail=%s))(forwardActive=FALSE)(acco untActive=TRUE)(delete=FALSE)) accountsmap_result_attribute = mail accountsmap_cache = no # Domains domains_server_host = $ldap_server_host domains_search_base = $ldap_search_base domains_query_filter = (&(objectClass=VirtualDomain)(vd=%s)(accountActive=TRUE)(delete=FALSE)) domains_result_attribute = vd domains_bind = no domains_scope = one # VirtualForward virtualforward_server_host = $ldap_server_host virtualforward_search_base = $ldap_search_base virtualforward_query_filter = (&(&(objectClass=VirtualMailAccount)(mail=%s))(forwardActive=TRUE)(accou ntActive=TRUE)(delete=FALSE)) virtualforward_result_attribute = maildrop virtualforward_cache = no virtualforward_bind_dn = $ldap_bind_dn virtualforward_bind_pw = $ldap_bind_pw Any guesses or misconfiguration? I don't have an idea of how can I debug to get the error. Looking forward to get some clues and helps :P Best Regards Venilton C. Junior

2 1

[Dovecot] I keep getting password mismatches
by Mark 16 Feb '07

16 Feb '07

Hey, This is the debug information: auth(default): client in: AUTH 1 PLAIN service=IMAP secured lip=127.0.0.1 rip=127.0.0.1 resp=AG1hcmsAbWFyaw==auth(default): passwd(mark,127.0.0.1): password mismatchauth(default): client out: FAIL 1 user=markimap-login: Disconnected: user=<mark>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured The strange thing is that i can login with ssh using my username and password but i can`t do anything related to dovecot.. i`m using a default .conf file with auth method set as plain and the supported protocols are set to pop and imap.. anyone that could help me with this? Thanx in favor. _________________________________________________________________ Probeer Live.com: je eigen persoonlijke opstartpagina met alleen de dingen die jij belangrijk vindt op één plek. http://www.live.com/getstarted

3 2

[Dovecot] Is it 1.0 yet?
by Marc Perkel 15 Feb '07

15 Feb '07

OK - my last main bug was fixed a few releases ago. I know that there's no end to getting things right but there comes a point when you need to call it done. No one trusts a 1.0 to be perfect but Dovecot is already better that most 2.0 versions of other software. I vote (as if my vote counted) to call it done, declare victory, and move on to 1.01, 1.02 etc. No one is going to trus it till it gets to 1.02 so I say lets bless it and move on.

15 22

[Dovecot] 1.0.rc22 released
by Timo Sirainen 15 Feb '07

15 Feb '07

http://dovecot.org/releases/dovecot-1.0.rc22.tar.gz http://dovecot.org/releases/dovecot-1.0.rc22.tar.gz.sig Found another bad bug in rc19 changes. Wonder why my imaptest catched the bug only in CVS HEAD but not in branch_1_0 even though both had it. Anyway, now the imaptest runs nicely for both, and I'm again optimistic that the bug count is low enough for v1.0 to be released soon :) BTW. My previous benchmarks which showed how mmap_disable=yes and fsync_disable=yes give huge performance benefits are pretty XFS-specific. I did some quick tests with ext3 and the differences were quite small with it. I'll probably do another proper run of tests later. + pop3: Commit the transaction even if client didn't QUIT so cached data gets saved. - Fixed another indexing bug in rc19 and later which caused transactions to be skipped in some situations, causing all kinds of problems. - mail_log_max_lines_per_sec was a bit broken and caused crashes with dovecot -a - BSD filesystem quota was counted wrong. Patch by Manuel Bouyer - LIST: If namespace has a prefix and inbox=no, don't list prefix.inbox if it happens to exist when listing for %.

8 22

[Dovecot] Sieve Vacation virtual support?
by Charles Marcus 15 Feb '07

15 Feb '07

Hello, I'm wanting to enable vacation messages for my users on a new dovecot server that I'm playing with, but want to know if the Dovecot LDA+Sieve vacation message function http://wiki.dovecot.org/LDA/Sieve will work with virtual users? For security reasons, I only want to use virtual domains/users. Thanks... -- Best regards, Charles

2 4

[Dovecot] strange LDA error
by Farkas Levente 15 Feb '07

15 Feb '07

hi, i try to use dovecot lda with postfix virtual delivery, but i've got error. the maildirs are created ie: new/, tmp/, curr/, dovecot.index, dovecot.index.log, .dovecot.lda-dupes. but the mail is not placed into it and got and error: "save failed to INBOX". what can be the reason? thank you for your help in advance. yours. --------------------------------- # ls -ald /var/vmail/ drwxrwx--- 3 vmail mail 4096 Feb 15 14:08 /var/vmail/ --------------------------------- this's the relevant part my dovecot.conf: --------------------------------- mail_location = maildir:/var/vmail/%d/%u mail_extra_groups = mail mail_debug = yes mmap_disable = yes first_valid_uid = 101 last_valid_uid = 101 maildir_copy_with_hardlinks = yes protocol lda { mail_plugins = quota log_path = /var/log/dovecot-deliver.log info_log_path = /var/log/dovecot-deliver.log } auth_verbose = yes auth_debug = yes auth_debug_passwords = yes auth default { mechanisms = plain passdb sql { args = /etc/dovecot/sql.conf } userdb sql { args = /etc/dovecot/sql.conf } userdb prefetch { } user = nobody socket listen { master { path = /var/run/dovecot/auth-master mode = 0660 user = vmail group = mail } client { path = /var/spool/postfix/private/auth mode = 0660 user = postfix group = mail } } } --------------------------------- this is the log in maillog: --------------------------------- Feb 15 14:08:03 alpha postfix/pickup[15447]: 14C61F4D34: uid=0 from=<root> Feb 15 14:08:03 alpha postfix/cleanup[15614]: 14C61F4D34: message-id=<20070215130803.14C61F4D34(a)alpha.lenux.hu> Feb 15 14:08:03 alpha postfix/qmgr[15448]: 14C61F4D34: from=<root(a)alpha.lenux.hu>, size=295, nrcpt=1 (queue active) Feb 15 14:08:03 alpha dovecot: auth(default): master in: USER 1 attaba(a)balazsiek.hu service=deliver Feb 15 14:08:03 alpha dovecot: auth-worker(default): mysql: Connected to localhost (postfix) Feb 15 14:08:03 alpha dovecot: auth-worker(default): sql(attaba(a)balazsiek.hu): SELECT concat('/var/vmail/', maildir) as home, concat('maildir:/var/vmail/', maildir) as mail, 101 A S uid, 12 AS gid, concat('dirsize:storage=', quota) AS quota FROM mailbox WHERE username = 'attaba(a)balazsiek.hu' AND active = '1' Feb 15 14:08:03 alpha dovecot: auth(default): master out: USER 1 attaba(a)balazsiek.hu home=/var/vmail/balazsiek.hu/attaba/ mail=maildir:/var/vmail/balazsiek.hu/attaba / uid=101 gid=12 quota=dirsize:storage=0 Feb 15 14:08:03 alpha postfix/sendmail[15620]: running: PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin? xxgdb /usr/libexec/postfix/sendmail 15620 & sleep 5 Feb 15 14:08:08 alpha postfix/pickup[15447]: 51183F4D36: uid=101 from=<> Feb 15 14:08:08 alpha postfix/cleanup[15614]: 51183F4D36: message-id=<dovecot-1171544883-208651-0(a)alpha.lenux.hu> Feb 15 14:08:08 alpha postfix/pipe[15617]: 14C61F4D34: to=<attaba(a)balazsiek.hu>, relay=dovecot, delay=5.3, delays=0.17/0.01/0/5.1, dsn=2.0.0, status=sent (delivered via dovecot se rvice) Feb 15 14:08:08 alpha postfix/qmgr[15448]: 14C61F4D34: removed Feb 15 14:08:08 alpha postfix/qmgr[15448]: 51183F4D36: from=<>, size=1558, nrcpt=1 (queue active) Feb 15 14:08:08 alpha postfix/cleanup[15614]: 64127F4D33: message-id=<dovecot-1171544883-208651-0(a)alpha.lenux.hu> Feb 15 14:08:08 alpha postfix/qmgr[15448]: 64127F4D33: from=<>, size=1687, nrcpt=1 (queue active) Feb 15 14:08:08 alpha postfix/local[15627]: 51183F4D36: to=<root(a)alpha.lenux.hu>, relay=local, delay=0.21, delays=0.13/0.01/0/0.07, dsn=2.0.0, status=sent (forwarded as 64127F4D33 ) Feb 15 14:08:08 alpha postfix/qmgr[15448]: 51183F4D36: removed Feb 15 14:08:08 alpha postfix/smtp[15628]: 64127F4D33: to=<lfarkas(a)bppiac.hu>, orig_to=<root(a)alpha.lenux.hu>, relay=mx3.mail-server.hu[212.24.171.194]:25, delay=0.13, delays=0.07/ 0.04/0/0.01, dsn=2.0.0, status=sent (250 Ok: queued as 80C4937650E) Feb 15 14:08:08 alpha postfix/qmgr[15448]: 64127F4D33: removed --------------------------------- this's in dovecot-deliver.log: --------------------------------- deliver(attaba(a)balazsiek.hu): Feb 15 14:08:03 Info: auth input: attaba(a)balazsiek.hu deliver(attaba(a)balazsiek.hu): Feb 15 14:08:03 Info: auth input: home=/var/vmail/balazsiek.hu/attaba/ deliver(attaba(a)balazsiek.hu): Feb 15 14:08:03 Info: auth input: mail=maildir:/var/vmail/balazsiek.hu/attaba/ deliver(attaba(a)balazsiek.hu): Feb 15 14:08:03 Info: auth input: uid=101 deliver(attaba(a)balazsiek.hu): Feb 15 14:08:03 Info: auth input: gid=12 deliver(attaba(a)balazsiek.hu): Feb 15 14:08:03 Info: auth input: quota=dirsize:storage=0 deliver(attaba(a)balazsiek.hu): Feb 15 14:08:03 Info: Home dir not found: /var/vmail/balazsiek.hu/attaba/ deliver(attaba(a)balazsiek.hu): Feb 15 14:08:03 Info: Loading modules from directory: /usr/lib64/dovecot/lda deliver(attaba(a)balazsiek.hu): Feb 15 14:08:03 Info: Module loaded: /usr/lib64/dovecot/lda/lib10_quota_plugin.so deliver(attaba(a)balazsiek.hu): Feb 15 14:08:03 Info: maildir: data=/var/vmail/balazsiek.hu/attaba/ deliver(attaba(a)balazsiek.hu): Feb 15 14:08:03 Info: maildir: root=/var/vmail/balazsiek.hu/attaba, index=/var/vmail/balazsiek.hu/attaba, control=, inbox= deliver(attaba(a)balazsiek.hu): Feb 15 14:08:03 Info: dirsize quota limit = 0kB deliver(attaba(a)balazsiek.hu): Feb 15 14:08:03 Info: msgid=<20070215130803.14C61F4D34(a)alpha.lenux.hu>: save failed to INBOX --------------------------------- -- Levente "Si vis pacem para bellum!"

2 1

[Dovecot] selective logging
by T. Horsnell 15 Feb '07

15 Feb '07

>From the wiki: log_path = Use this logfile instead of syslog(). /dev/stderr can be used if you want to use stderr for logging (ONLY /dev/stderr - otherwise it is closed). (I dont understand the above references to the use of stderr) info_log_path = For informational messages, use this logfile instead of the default (What exactly is an informational message, and what is the default?) Can I selectively suppress logging like: Feb 5 11:52:15 ls1 imap(iamelel): File isn't in mbox format: /gfg0/iamelel//claudia/ligplot/NQ10/ligplot.bonds Or do I have to turn off logging entirely? Thanks, Terry.

2 1

[Dovecot] maildir and the separator for subfolder
by David Bonnafous 15 Feb '07

15 Feb '07

hi, I use dovecot 1.0rc15 with one maildir namespace. I'd like to be able to use '.' in folders and subfolders name. So, I setup the default namespace with separator =':' But, when I create some folders and then subfolders with thunderbird the filename one the server are named with some '.' no ':'... It seems that dovecot always interprets '.' as a separator for folders. Is-it a bug ? yours, -- David Bonnafous Institut de Mathématiques Université Paul Sabatier Toulouse - France

4 5

[Dovecot] [Fwd: Compiler warnings]
by Stephen Lee 15 Feb '07

15 Feb '07

Hi, I'm resubmitting the message below hoping it gets a response this time. Thanks, Stephen -------- Forwarded Message -------- > From: Stephen Lee <splee(a)plexio.com> > To: dovecot(a)dovecot.org > Subject: [Dovecot] Compiler warnings > Date: Thu, 08 Feb 2007 08:27:48 -0800 > > Hi, > > I'm trying to install Dovecot 1.0RC22 on an old Trustix 1.5 box and am > getting the compiler warnings: > > quota-storage.c:275: warning: pointer of type `void *' used in > arithmetic > > convert-storage.c:50: warning: pointer of type `void *' used in > arithmetic > > acl-backend-vfile.c:212: warning: pointer of type `void *' used in > arithmetic > > There are many more of these pointer warnings in the various modules > when compiling. Is this a problem? > > Thanks, > Stephen >

3 3

[Dovecot] deliver LDA permission problem
by Dick Middleton 15 Feb '07

15 Feb '07

Hello, I'm trying to get deliver LDA working with postfix in a virtual domain configuration. I'm using dovecot v1.0.rc10. My setup is pretty much exactly as in the wiki (only the path to deliver and auth-master socket are different). I'm having a little problem with permissions and this occurred which I think is undesirable: syslog: Feb 8 13:09:35 deliver(<email-addr>): setgid(5002) failed: Operation not permitted Feb 8 13:09:36 deliver(<email-addr>): setgid(5001) failed: Operation not permitted mail.log: Feb 8 13:09:36 Devil postfix/pipe[9622]: 5AD5C103C: to=<<email-addr>>, orig_to=<<email-addr>>, relay=dovecot, delay=0.05, delays=0.01/0/0/0.04, dsn=5.3.0, status=bounced (Command died with status 89: \"/usr/libexec/dovecot/deliver\") When deliver fails because it can't connect to auth-master socket it returns an undeliverable status which causes postfix to defer delivery. I think it should do the same here. The real question is how I give deliver the permission to do the setgid? Is it enough to just add user vmail to each of the virtual user groups in /etc/group. Does deliver setuid to virtual user as well? Dick

3 4

[Dovecot] dict quota not being updated for all users when receiving a multi-recipient message
by Justin McAleer 15 Feb '07

15 Feb '07

I've set up a mysql quota dictionary using the proxy setup as described in the wiki (using Dovecot lda). When I send a single message to multiple users, only the first recipient is getting their usage updated. This behavior occurs if I manually send to more than one user via the To: line, or via aliases set up in postfix. I do have dovecot_destination_recipient_limit set to 1. I don't even have a guess as to what might be going on here, since each instance of the lda is a separate process. But, let me know if anybody has any ideas or requests for more info.

2 2

[Dovecot] sieve plugin
by pod 15 Feb '07

15 Feb '07

I'm currently looking at dovecot for a large-scale deployment. The requirements will almost certainly mean we would use the dovecot lda with the sieve plugin. The current method of distribution causes (binary distro) packaging to be slightly awkward IMHO. The dovecot-sieve code needs to be told where an in-tree build of dovecot lives. The fact that it _must_ be an in-tree build I was considering as a bug; the dovecot-sieve build wants to access both '.a' and '.h' files from the dovecot build but in an out-of-tree build these are in different places. My first thoughts were to simply move the dovecot-sieve code into the dovecot tree (I imagine under src/plugins/cmusieve or similar) and rework the autoconf setup as appropriate. This sidesteps the problem for this case but does not help other 'third party' dovecot plugins. If however a simple plugin build environment were to exist as part of a dovecot install then plugins could be distributed and built as independent packages. I quite understand that this additionally burdens dovecot development with 'stable API' concerns which may not be considered worth the effort. Timo: have you thought about any of the above and if so which direction have your thoughts taken you? I can justify spending a small amount of time to develop this into real code but it would be a waste to fight against or duplicate existing effort that has gone into this area. All comments welcome.

2 1

[Dovecot] leaking file descriptors? imap-login: inotify_init() failed
by Dale Bewley 15 Feb '07

15 Feb '07

Even though the system is configured to allow a large number of open files, and tools such as lsof tell me dovecot is within that limit; I am seeing errors like this pretty frequently. dovecot: imap-login: inotify_init() failed: Too many open files I'm running Fedora Core 5 (2.6.18-1.2257.fc5 SMP x86_64) with dovecot-1.0-1.rc15 built from the FC6 SRPM, but I was seeing the same thing with 1.0-0.beta8.3.fc5 (one of the reasons for the jump to the FC6 ver). # system default limit is very high, and we aren't approaching it [root@mail 2496]# cat /proc/sys/fs/file-max 738223 [root@mail fs]# cat file-nr 8704 0 738223 # the limit per user is 1024 [root@mail 2496]# su -c 'ulimit -n' dlbewley 1024 # But dovecot doesn't appear to be above that. # it looks like the master process is well below that [root@mail 2496]# lsof -p `cat /var/run/dovecot/master.pid` | wc -l 280 # but overall, this user has way more than that [root@mail fs]# lsof -nu dovecot |wc -l 3145 So, I raised the limit for dovecot to 5000 soft and 10000 hard to see if it would make a difference. Even after a reboot, the next day the errors returned. Today login_process_per_connection is set to 'no' rather than the default to see if it makes a difference. So far today, no errors. Config looks like this: protocols = imap imaps pop3 pop3s ssl_cert_file = /usr/share/ssl/certs/mail.cert ssl_key_file = /usr/share/ssl/private/mail.key disable_plaintext_auth = no login_process_per_connection = no max_mail_processes = 2048 protocol imap { } protocol pop3 { } auth_username_chars = auth_master_user_separator = * auth default { mechanisms = plain passdb passwd-file { args = /etc/dovecot/dovecot.masterusers master = yes pass = no } passdb pam { } userdb passwd { } user = root } plugin { } -- Dale Bewley - Unix Administrator - Shields Library - UC Davis GPG: 0xB098A0F3 0D5A 9AEB 43F4 F84C 7EFD 1753 064D 2583 B098 A0F3

2 1

[Dovecot] POP3-Proxy error
by Christian Froemmel 15 Feb '07

15 Feb '07

Hi, as mentioned in another thread I discovered a crash in the pop3-proxy. It occurs when the remote-pop3-server just drops the connection (in my case courier was hitting the MAXPERIP-Limit). I don't have a corefile yet, but will try to get one. Here the message from the dovecot.log: dovecot: Feb 02 09:30:00 Error: pop3-login: file pop3-proxy.c: line 20 (proxy_input): assertion failed: (!client->destroyed) dovecot: Feb 02 09:30:00 Error: pop3-login: Raw backtrace: pop3-login [0x8052fe0] -> pop3-login [0x8052ab4] -> pop3-login(vfprintf+0x2324) [0x804c6fc] -> pop3-login(vfprintf+0x2c9a) [0x804d072] -> pop3-login(vfprintf+0x1086) [0x804b45e] -> pop3-login(vfprintf+0x29d0) [0x804cda8] -> pop3-login [0x8056346] -> pop3-login [0x8055849] -> pop3-login(vfprintf+0x39d6) [0x804ddae] -> /lib/i686/libc.so.6(__libc_start_main+0xc7) [0x4015bd17] -> pop3-login(SSL_write+0x49) [0x804a931] dovecot: Feb 02 09:30:00 Error: child 5985 (login) killed with signal 6 It seems that the unexpected shutdown of the connection confuses dovecot. When I increased the MAXPERIP-limit in courier the crashes went away. regards, Christian -- SYSTEM CONCEPT GmbH

2 1