- dovecot - dovecot.org

[Dovecot] test emails did not arrive at SMTP server : after dovecot installation
by sunhux G 16 Feb '11

16 Feb '11

Just set up postfix & it's running on my RHES 4.2 box. Immediately after postfix is up, I test sending emails from a permitted domain (ahhh, on this postfix server's domain firewall, we even have a firewall rule which permits Tcp25 from those few sending domains' SMTP servers) using an email client to sender_id@[IP_address_of_the_postfix_server] & the /var/log/maillog on the postfix server indicated the email arrives at the postfix server (with some errors though) : # grep recipient_id /var/log/maillog* maillog:Feb 15 11:41:52 hostname postfix/smtpd[6891]: NOQUEUE: reject: RCPT from gate1.mds.com.sg[203.126.130.157]: 554 5.7.1 <recipient_id(a)[202.6.163.31]>: Relay access denied; from=<prvs=020cae8c4=recipient_id(a)mds.com.sg> to=<recipient_id(a)[202.6.163.31]> proto=ESMTP helo=<gate1.mds.com.sg> maillog:Feb 15 13:43:20 hostname sendmail[7688]: NOQUEUE: SYSERR(recipient_id): can not chdir(/var/spool/mqueue/): Permission denied Then I installed dovecot rpm on my RHES box : uninstall it as it's an old version & reinstall with a newer version & start up dovecot as well. I did not test sending to sender_id@domain_name at that time because the domain I purchased from a domain provider/registrar has yet to be registered in our ISP's DNS. Subsequently I registered the following A, MX & NS records with our ISP : A: myportaltech.com. IN A 202.6.163.31 A: smtp.myportaltech.com. IN A 202.6.163.31 PTR: 31.163.6.202.in-addr.arpa. IN PTR smtp.myportaltech.com. MX: myportaltech.com. IN MX 10 smtp.myportaltech.com. NS: myportaltech.com. IN NS ns1.businessexprezz.com. NS: myportaltech.com. IN NS ns2.businessexprezz.com. The above myportaltech is just a fictitious name of my domain but I can provide the actual domain name if needed. After the above records have been propagated to all other DNSes, I test sending email from the same permitted domain, this time using domain name & the email never arrives & I did not receive a 'bounced mail' notification too. Then I test sending from the same domain to recipient_id(a)[202.6.163.31] & this time round, the test email never show up in /var/log/maillog* anymore. The network/security guys confirmed that the firewall logs did not show any denied SMTP records. So how do I go about troubleshooting this? Is this a DNS record entries issue, firewall/network issue, related to dovecot or something within my postfix server? Thanks Sun

2 1

[Dovecot] Dovecot can't start with error pop3-login & imap-login not supported protocol family
by sunhux G 16 Feb '11

16 Feb '11

I've done the installation (rpm downloaded from the RHES4 link given by Oli below) but dovecot won't start, it gave the error pop3-login & imap-login not supported by protocol. I'm sure with a much older version (in my previous post) of dovecot, I'm able to start up dovecot & it did not give this error. Thought dovecot is suppose to come with pop3 & imap? # rpm -Uvh --force mysqlclient14-4.1.22-1.el4s1.1.i386.rpm warning: mysqlclient14-4.1.22-1.el4s1.1.i386.rpm: V3 DSA signature: NOKEY, key ID 443e1821 Preparing... ########################################### [100%] 1:mysqlclient14 ########################################### [100%] /sbin/ldconfig: /usr/lib/libcpqlsptransport.so.0 is not a symbolic link [root@tmp]# rpm -qa | grep -i mysql mysql-4.1.12-3.RHEL4.1 perl-DBD-MySQL-2.9004-3.1 php-mysql-4.3.9-3.8 mysql-server-4.1.12-3.RHEL4.1 mysqlclient14-4.1.22-1.el4s1.1 <== it's there now [root@tmp]# rpm -i ./dovecot-2.0.9-1_125.el4.i386.rpm warning: only V3 signatures can be verified, skipping V4 signature warning: only V3 signatures can be verified, skipping V4 signature [root@tmp]# cd /etc [root@etc]# ls -ld rc*/*dove* lrwxrwxrwx 1 root root 17 Feb 16 11:37 rc0.d/K01dovecot -> ../init.d/dovecot lrwxrwxrwx 1 root root 17 Feb 16 11:37 rc1.d/K01dovecot -> ../init.d/dovecot lrwxrwxrwx 1 root root 17 Feb 16 11:37 rc2.d/K01dovecot -> ../init.d/dovecot lrwxrwxrwx 1 root root 17 Feb 16 11:37 rc3.d/K01dovecot -> ../init.d/dovecot lrwxrwxrwx 1 root root 17 Feb 16 11:37 rc4.d/K01dovecot -> ../init.d/dovecot lrwxrwxrwx 1 root root 17 Feb 16 11:37 rc5.d/K01dovecot -> ../init.d/dovecot lrwxrwxrwx 1 root root 17 Feb 16 11:37 rc6.d/K01dovecot -> ../init.d/dovecot [root@nspplss2 etc]# ls -ld rc*/S*dove* ls: rc*/S*dove*: No such file or directory [root@nspplss2 etc]# pwd /etc [root@etc]# ls rc*/*postf* rc0.d/K30postfix rc2.d/S80postfix rc4.d/S80postfix rc6.d/K30postfix rc1.d/K30postfix rc3.d/S99postfixstart rc5.d/S80postfix [root@etc]# ln -s /etc/init.d/dovecot /etc/rc3.d/S70dovecot [root@etc]# ln -s /etc/init.d/dovecot /etc/rc5.d/S70dovecot [root@]# init.d/dovecot start Starting Dovecot Imap: Error: socket() failed: Address family not supported by protocol Error: service(pop3-login): listen(::, 110) failed: Address family not supported by protocol Error: socket() failed: Address family not supported by protocol Error: service(pop3-login): listen(::, 995) failed: Address family not supported by protocol Error: socket() failed: Address family not supported by protocol Error: service(imap-login): listen(::, 143) failed: Address family not supported by protocol Error: socket() failed: Address family not supported by protocol Error: service(imap-login): listen(::, 993) failed: Address family not supported by protocol Fatal: Failed to start listeners [FAILED] [root@etc]# telnet localhost 110 Trying 127.0.0.1... telnet: connect to address 127.0.0.1: Connection refused telnet: Unable to connect to remote host: Connection refused [root@etc]# rpm -qa | grep dove dovecot-2.0.9-1_125.el4 [root@etc]# chkconfig --list | grep pop3 [root@etc]# chkconfig --list | grep imap On Tue, Feb 15, 2011 at 8:39 PM, Oli Schacher <dovecot(a)lists.wgwh.ch> wrote: > On Tue, 15 Feb 2011 18:00:53 +0800 > sunhux G <sunhux(a)gmail.com> wrote: > > > I'm on RHES 4.x > > > > I downloaded 2 dovecot RPM packages from > > http://packages.sw.be/dovecot/ > > > > dovecot-1.0.13-1.el4.rfx.i386.rpm 13-Nov-2010 22:15 1.8M > > RHEL4 and CentOS-4 x86 32bit > > and > > dovecot-0.99.13-1.2.el4.test.i386.rpm 21-Feb-2005 16:57 693K > > RHEL4 and CentOS-4 x86 32bit > > > > [...] > >Q1: > >Is the test version rpm of dovecot reliable? It's only half the size > >of the other rpm (that I was not able to install) > > 0.9 / 1.0 : These versions are way out of date and you will probably > have a hard time getting support. I suggest you try the current > versions from atrpms.net We have been using the 2.0 RHEL5 packages by > Axel Thimm for quite some time now and they work flawlessly. > > Link for RHEL4 packages: http://packages.atrpms.net/dist/el4/dovecot/ > > Maybe this fixes Q2 as well ;-) > > Q3: You'll find lots of examples / tutorials in the dovecot wiki : > http://wiki2.dovecot.org/#HOWTOs.2C_examples_and_tutorials > > HTH > > Oli >

2 2

[Dovecot] [Off Topic] - Any backup solutions ?
by Spyros Tsiolis 16 Feb '11

16 Feb '11

Hello kind people, OK, I know this is not for this list; However, reading all these mails on the topic of filesystems, I thought that it's a good place to ask about backup software on linux. Here's what I have. It's an HP 230 Ultrium LTO 1 SCSI backup mechanism (tape streamer to be exact). I'm supposed to hook it up today with an adaptec AHA-2940 controller to a gigabyte mainboard running Ubuntu Server 10.04. Does anyone have a config close to this one ? What kind of software would you chaps recommend ? dd ? Bacula ?? Other ?? This mechanism is supposed to grab backups from the same machine running it (the tape streamer), which is an ubuntu server version 10.04 with three SATA disks and maybe some stuff remotely (through the local network that is), from a couple of windows 7 / windows xp machines. Also 100Gb on every tape is not going to be enough and it looks like I will have to swap tapes during the process. Thank you all for your time and patience, Best Regards, spyros ---- "I merely function as a channel that filters music through the chaos of noise" - Vangelis

1 0

[Dovecot] help with dovecot installation dependencies
by sunhux G 15 Feb '11

15 Feb '11

I'm on RHES 4.x I downloaded 2 dovecot RPM packages from http://packages.sw.be/dovecot/ dovecot-1.0.13-1.el4.rfx.i386.rpm 13-Nov-2010 22:15 1.8M RHEL4 and CentOS-4 x86 32bit and dovecot-0.99.13-1.2.el4.test.i386.rpm 21-Feb-2005 16:57 693K RHEL4 and CentOS-4 x86 32bit The first rpm fails with error below : # rpm -i ./dovecot-1.0.13-1.el4.rfx.i386.rpm warning: ./dovecot-1.0.13-1.el4.rfx.i386.rpm: V3 DSA signature: NOKEY, key ID 6b8d79e6 error: Failed dependencies: libmysqlclient.so.14(libmysqlclient_14) is needed by dovecot-1.0.13-1.el4.rfx.i386 I have a hard time trying to locate an rpm that contains libmysqlclient.so.14 & have no luck : # rpm -i ./mysql-libs-5.1.42-4.el6.i686.rpm warning: ./mysql-libs-5.1.42-4.el6.i686.rpm: V3 RSA/MD5 signature: NOKEY, key ID f21541eb error: Failed dependencies: libcrypto.so.10 is needed by mysql-libs-5.1.42-4.el6.i686 libssl.so.10 is needed by mysql-libs-5.1.42-4.el6.i686 rpmlib(FileDigests) <= 4.6.0-1 is needed by mysql-libs-5.1.42-4.el6.i686 rtld(GNU_HASH) is needed by mysql-libs-5.1.42-4.el6.i686 rpmlib(PayloadIsXz) <= 5.2-1 is needed by mysql-libs-5.1.42-4.el6.i686 Then I installed the 2nd dovecot rpm successfully but its filename indicated it's a "test" version : # rpm -i ./dovecot-0.99.13-1.2.el4.test.i386.rpm warning: ./dovecot-0.99.13-1.2.el4.test.i386.rpm: V3 DSA signature: NOKEY, key ID 6b8d79e6 # /etc/init.d/dovecot start Starting IMAP daemon (dovecot): [ OK ] Q1: Is the test version rpm of dovecot reliable? It's only half the size of the other rpm (that I was not able to install) Q2: Kindly assist me to resolve the 1st rpm issue : let me know where I can download the dependencies etc Q3: Lastly, kindly point me to a simple doc that tells me how to do basic setup of dovecot & create simple mailbox accounts. I'm a complete newbie to dovecot & postfix. Have some Linux know-how

2 3

[Dovecot] Recover a deleted message in MDBOX format ?
by Frank Bonnet 15 Feb '11

15 Feb '11

Hello Every night a backup of all mailboxes is performed to a NFS mounted partition All our mailboxes are now in MDBOX format. I wonder how it would be possible to recover one email accidentally deleted by a user ? It was easy in MBOX format to extract and save it using mutt ( as root ) from the backuped mbox then re-copy it to the user's mbox. Of course I should access to the backup mailboxes space using thunderbird but doing this I need to know every users's passwords, that is unacceptable. for security and privacy reasons. Let users access to the backup space is not possible of course. Is there a tool ? Thanks

1 1

[Dovecot] FreeBSD tuning for a dovecot + postfix server ?
by Frank Bonnet 14 Feb '11

14 Feb '11

Hello I've googled around to tune a bit my mailhub ( AMD64 FreeBSD 8.1, 12 Gb RAM, 2 Tb raid5 disks , ~4000 mailboxes unix users ) but I am a bit confused, All my clients use thunderbird as MUA ( IMAP, IMAPS ) to connect to the mailhub no direct access to the machine. Any of you guys has some pointer to give ? thanks a lot

2 1

[Dovecot] NoSQL Storage Backend
by Marten Lehmann 14 Feb '11

14 Feb '11

Hello, I found a posting on the mailing list from 2008 "Adding new storage backend to Dovecot" while searching for POP3 and IMAP servers, that allow to use a NoSQL backend rather than a traditional file system. The problem with traditional filesystems is, that they are very limited. You cannot easily extend it, even with RAID 10 all messages may be lost due to a RAID controller failure and just-in-time backups of a heavy loaded system with consistently changing messages folders are virtually impossible. Modern object stores like Scality, CouchDB or MongoDB can be very handy, as they easily allow to keep an arbitrary amount of copies of each message on different servers, you can simply add a storage node and new storage is immediately available and mailboxes aren't bound to a certain server any longer, but messages are evenly distributed across all storage nodes, thus distributing load as well. Since the original posting was dated 2008 I was in good hope, that someone worked on that already, but at least in dovecot-2.0.9/src/lib-storage I couldn't find anything relating to NoSQL message stores. Isn't this option of big interest for every bigger mailbox provider? How hard would it be to develop? Would it be possible to get this developed on a paid basis by the dovecot core team? Kind regards Marten

10 11

[Dovecot] Dsync parallel conversion warning
by Frank Bonnet 14 Feb '11

14 Feb '11

Hello When I run multiple dsync processes in parallel I sometime get this warning message (xxxxxxxx): Warning: Transaction log file /user/xxxxxxxx/mail/.imap/INBOX/dovecot.index.log was locked for xxx seconds "xxx seconds" is variable Is it a problem or just a real warning ? Thanks

2 4

Re: [Dovecot] critical feature from version 1 not migrated to version 2 = authentication configuration database per IP
by DaLiV＠apollo.lv 14 Feb '11

14 Feb '11

Timo Sirainen wrote: >> - another way (possible that will be more easiest, and good enough for >> advanced configurations) = single variable that may be set in block >> of exact ip listener configuration , as for provided before example >> may set variable "auth_db_suffix" = string("dc=domain1,dc=tld") for >> definition "local mail.domain1.tld" and that variable are inserted in >> auth block via variable inserting mechanism ... >> > Again not possible, because config parsing is done much earlier. > think for realization can take idea from that patch : --------------------------------- --- src/auth/auth-request.c.orig 2010-12-30 11:42:54.000000000 +0200 --- src/auth/auth-request.c.orig 2010-12-30 11:42:54.000000000 +0200 @@ -1547,6 +1547,7 @@ auth_request_get_var_expand_table(const { '\0', NULL, "login_user" }, { '\0', NULL, "login_username" }, { '\0', NULL, "login_domain" }, + { 'x', NULL, NULL }, { '\0', NULL, NULL } }; struct var_expand_table *tab; @@ -1600,6 +1601,15 @@ auth_request_get_var_expand_table(const auth_request); } } + const char *lip2user[][2] = {{"127.0.0.3","dc=domain1,dc=tld1"},{"127.0.0.1","localhost"},{"127.0.0.2","dc=domain2,dc=tld2"}}; + int arrsize=sizeof( lip2user ) / sizeof( lip2user[0]); + tab[18].value = ""; // default expanded to - emty string + int i; + for(i=0;i<arrsize;i++) { + if (strcmp(net_ip2addr(&auth_request->local_ip),(lip2user[i][0]))==0) { + tab[18].value = lip2user[i][1]; + } + } return tab; } --------------------------------- and there need only possibility to define pairs in config file for lip2user array initialization - then macro/variable %x will be available for substitution in all modules - as for ldap , as for filename-based parameters. in exaple patch created static table to match lip to suffix 127.0.0.3 = "dc=domain1,dc=tld1" 127.0.0.1 = "localhost" 127.0.0.2 = "dc=domain2,dc=tld2" how to initialize arrays from config - i'm was not explored for currently used coding structures may create this array more complex = not as simple pair - but as for selective conversion: %x1 lip to text1, %x2 lip to text2, %x3 lip to text3 ... - then diffirent advanced configurations will be possible ...

1 0

[Dovecot] SIS generating 2 different hashes for the same mail and attachment
by Nick Rosier 14 Feb '11

14 Feb '11

Hi, I've been testing SIS over the weekend as it seems to be a nifty feature. I don't have that many users and mailboxes but still... I only added the following line to my configuration: mail_attachment_dir = /var/spool/vmail/attachments As a test I sent a mail from GMail to 2 mailboxes (1 To and 1 CC). The attachment got saved to the attachment directory (on ZFS): # find . ./04 ./04/78 ./04/78/0478b28c2a4c235370bb3cef4bc0482bb6000dae-b8819638a60e574d5b530100bde47b1f-2088e7301f9e3c4dc97e0000bde47b1f-244 ./04/78/0478b28c2a4c235370bb3cef4bc0482bb6000dae-007dcd01a70e574d5c530100bde47b1f-98d08416e4712b4d75310100bde47b1f-192 # ls -l total 519 -rw------- 1 vmail vmail 242866 Feb 12 23:50 0478b28c2a4c235370bb3cef4bc0482bb6000dae-007dcd01a70e574d5c530100bde47b1f-98d08416e4712b4d75310100bde47b1f-192 -rw------- 1 vmail vmail 242866 Feb 12 23:50 0478b28c2a4c235370bb3cef4bc0482bb6000dae-b8819638a60e574d5b530100bde47b1f-2088e7301f9e3c4dc97e0000bde47b1f-244 So these files are not hardlinks, they are 2 seperate files. Checksums are the same: # sum * 58522 238 0478b28c2a4c235370bb3cef4bc0482bb6000dae-007dcd01a70e574d5c530100bde47b1f-98d08416e4712b4d75310100bde47b1f-192 58522 238 0478b28c2a4c235370bb3cef4bc0482bb6000dae-b8819638a60e574d5b530100bde47b1f-2088e7301f9e3c4dc97e0000bde47b1f-244 # md5 * MD5 (0478b28c2a4c235370bb3cef4bc0482bb6000dae-007dcd01a70e574d5c530100bde47b1f-98d08416e4712b4d75310100bde47b1f-192) = 684863b31dad701857642caedcdbf20a MD5 (0478b28c2a4c235370bb3cef4bc0482bb6000dae-b8819638a60e574d5b530100bde47b1f-2088e7301f9e3c4dc97e0000bde47b1f-244) = 684863b31dad701857642caedcdbf20a Did I miss something? I would have expected the file once in the attachment_dir. Rgds, N.

1 0

[Dovecot] Question about mdbox_preallocate_space and ext4
by Javier de Miguel Rodríguez 14 Feb '11

14 Feb '11

Hello Can anyone explain about mdbox_preallocate_space and ext4? Regards Javier

2 1

[Dovecot] Can't connect to auth server
by Phill Edwards 13 Feb '11

13 Feb '11

I'm trying to phase out procmail and move to dovecot-sieve instead. It ain't proving easy. I'll describe my setup: - Centos 5.2 box with dovecot 1.1.4 and dovecot-sieve 1.1.6 from ATrpms. - A single user account is used to store all our email (the account is called maildb). - Getmail is being used to fetch the email from various ISP mailboxes. I want to deliver mail to different folders in maildb's Maildir/ depending on who the email is addressed to (the procmail recipes currently do that). - Getmail destination section looks like this: [destination] type = MDA_external path = /usr/libexec/dovecot/deliver arguments = ("-d", "maildb") allow_root_commands = true - When I run getmail I get this error in dovecot.log: deliver(maildb): May 04 22:15:26 Error: Can't connect to auth server at /var/run/dovecot/auth-master: No such file or directory It's true that I don't have a file called auth-master. I guess I should have but until I started this dovecot-sieve work it was never a problem. I have no idea what that file should look like. As I installed from binary RPMs I would have thought one would have come with the install. Can anyone help? Regards, Phill

4 6

[Dovecot] lmtp logging to separate file
by Nikita Koshikov 12 Feb '11

12 Feb '11

Hello list, Testing lmtp deliver I can't constrain it to log all activity to separate file, like dovecot-lda does. Here is config: protocol lmtp { info_log_path = /var/log/dovecot/dovecot-deliver.log log_path = /var/log/dovecot/dovecot-deliver.log mail_plugins = acl quota trash virtual zlib expire sieve } protocol lda { info_log_path = /var/log/dovecot/dovecot-deliver.log log_path = /var/log/dovecot/dovecot-deliver.log mail_plugins = acl quota trash virtual zlib expire sieve } When message is proceed via protocol lda - record appear in /var/log/dovecot/dovecot-deliver.log, but when message arrives by protocol lmtp - logs got to /var/log/dovecot.log file. Is this settings suppose to be overwritten ?

2 4

[Dovecot] dsync parallel conversions ?
by Frank Bonnet 12 Feb '11

12 Feb '11

Hello Would it be possible to run multiple dsync command in parallel ? I have 4000 mailboxes to convert nad it takes a LOT of time to do so when running dsync one by one ... Thanks

2 2

[Dovecot] preserving \Recent when moving messages
by Mark Hedges 12 Feb '11

12 Feb '11

Is there any way to preserve \Recent, or am I out of luck? Some people have reported that my script which shuffles around expired or oversized mail also causes their clients to report it as already read. I guess those clients check \Recent instead of \Seen when they download. I wish I knew which clients. With Mail::IMAPClient I tried using move(), copy(), and migrate() but the result is the same-- once it looks at the source message, \Recent is gone. (I tried patching it where it greps out the \Recent flag before appending the messages, but that causes a silent error.) Directly appending to the destination folder does not help either, since I would lose any flags set by the user, and if I tried to preserve those, then I would lose the \Recent flag when I read through the destination folder to figure out which messages were which. RFC5301 says \Recent can never be set... but does its prohibition include the case of migrating mail, where the intent is to retain them intact? It would be nice if Dovecot offered a migration feature which would move a message from folder to folder without unsetting \Recent. Mark

2 1

[Dovecot] Connection refused. Mail Client Error: 800ccccd9. Please help :-))))
by michael＠lattari.eu 12 Feb '11

12 Feb '11

Hi! I cannot connect to the dovecot server :-( I get Windows Mail Client Error: 800ccccd9. Please help :-)))) # 2.0.beta6 (3156315704ef): /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-71.el6.x86_64 x86_64 Scientific Linux release 6.0 (Carbon) auth_debug = yes auth_debug_passwords = yes auth_verbose = yes auth_verbose_passwords = plain debug_log_path = /var/log/dovecot.log disable_plaintext_auth = no info_log_path = /var/log/dovecot.log listen = * log_path = /var/log/dovecot.log login_trusted_networks = 192.168.0./24 mail_debug = yes mbox_write_locks = fcntl passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocols = imap service imap-login { inet_listener imap { port = 143 } } ssl = no syslog_facility = local6 userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } verbose_proctitle = yes verbose_ssl = yes dovecot.log (very poor info on what happened - connections are not logged.... ): Feb 10 09:50:25 master: Info: Dovecot v2.0.beta6 (3156315704ef) starting up (core dumps disabled) Feb 10 10:07:07 master: Warning: Killed with signal 15 (by pid=7048 uid=0 code=kill) Feb 10 10:07:08 master: Info: Dovecot v2.0.beta6 (3156315704ef) starting up (core dumps disabled) Feb 10 10:08:04 doveadm: Debug: This is Dovecot's debug log (1297328884) Feb 10 10:08:04 doveadm: Info: This is Dovecot's info log (1297328884) Feb 10 10:08:04 doveadm: Warning: This is Dovecot's warning log (1297328884) Feb 10 10:08:04 doveadm: Error: This is Dovecot's error log (1297328884) Feb 10 10:08:04 doveadm: Fatal: This is Dovecot's fatal log (1297328884) Feb 10 10:47:24 master: Warning: Killed with signal 15 (by pid=7160 uid=0 code=kill) Feb 10 10:47:56 master: Info: Dovecot v2.0.beta6 (3156315704ef) starting up (core dumps disabled) Feb 10 10:47:57 master: Warning: Killed with signal 15 (by pid=7194 uid=0 code=kill) Feb 10 10:47:58 master: Info: Dovecot v2.0.beta6 (3156315704ef) starting up (core dumps disabled) Feb 10 10:50:45 master: Warning: Killed with signal 15 (by pid=7218 uid=0 code=kill) Feb 10 10:50:46 master: Info: Dovecot v2.0.beta6 (3156315704ef) starting up (core dumps disabled) Feb 10 10:56:38 master: Warning: Killed with signal 15 (by pid=7254 uid=0 code=kill) Feb 10 10:56:39 master: Info: Dovecot v2.0.beta6 (3156315704ef) starting up (core dumps disabled) [root@filemon conf.d]# ls -al /var/run/dovecot total 20 drwxr-xr-x 4 dovecot dovecot 4096 Feb 10 10:56 . drwxr-xr-x 15 root root 4096 Feb 10 10:02 .. srw------- 1 root root 0 Feb 10 10:56 anvil srw------- 1 root root 0 Feb 10 10:56 anvil-auth-penalty srw------- 1 root root 0 Feb 10 10:56 auth-client srw------- 1 dovecot root 0 Feb 10 10:56 auth-login srw------- 1 root root 0 Feb 10 10:56 auth-master srw------- 1 root root 0 Feb 10 10:56 auth-userdb srw------- 1 dovecot root 0 Feb 10 10:56 auth-worker srw------- 1 root root 0 Feb 10 10:56 config srw------- 1 root root 0 Feb 10 10:56 dict srw------- 1 root root 0 Feb 10 10:56 director-admin srw-rw-rw- 1 root root 0 Feb 10 10:56 dns-client lrwxrwxrwx 1 root root 25 Feb 10 10:56 dovecot.conf -> /etc/dovecot/dovecot.conf drwxr-xr-x 2 root root 4096 Nov 23 03:34 empty drwxr-x--- 2 root dovenull 4096 Feb 10 10:56 login -rw------- 1 root root 5 Feb 10 10:56 master.pid -rw------- 1 root root 0 Feb 9 23:57 rsyslog auth-sql.conf.ext: passdb { driver = sql args = /etc/dovecot/dovecot-sql.conf.ext } userdb { driver = sql args = /etc/dovecot/dovecot-sql.conf.ext } /dovecot/dovecot-sql.conf.ext: driver = mysql connect = host=localhost dbname=dovecot user=dovecot password=123test default_pass_scheme = MD5 password_query = \ SELECT username AS user, password, \ home AS userdb_home, uid AS userdb_uid, gid AS userdb_gid \ FROM users WHERE username = '%u' and domain='%n' Thanks for the HELP !!!

4 3

[Dovecot] problem configuring deliver in LDAP environment.
by Andrea Borghi 12 Feb '11

12 Feb '11

hello I am using dovecot-1.2.15 in debian squeeze (packaged) and i have some difficulties migrating from an older installation tha is working perfectly. i have a transport defined in postfix to call deliver as follows: dovecotlda unix - n n - - pipe flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/deliver -s -e -f ${sender} -d ${recipient} with the auth-socket in dovecot.conf all ok and this in ldap-userdb.conf: user_attrs = vdHome=chroot,mailbox=mail=maildir:%$,quota=quota_rule=*:bytes=%$,otherPath=sieve you see, i have the base directory for the chroot for the entire mail system in ldap:vdHome as /home/vmail/domains and the actual location of the mailbox in maildir format in ldap:mailbox so i can have the actual complete path as /(vdHome)/(mailbox) This is running smoolthly, BUT the chroot environment with all the library dependencies is REALLY REALLY limiting because the huge number of files from the system i must put on the mail storeage (which is networked and used by more systems so i cannot put libraries and binaries there) What i am trying to do is leaving all the dovecot services running in chroot mode (as they do) but let deliver running in NORMAL (non-chroot mode) so i need to remove the chroot variable in userattr reply, and parametrize the mail location with the two ldap values. i am conscious that i can set up this as user_attrs = mailbox=mail=maildir:/home/vmail/domains/%$,quota=quota_rule=*:bytes=%$,otherPath=sieve but I WANT TO KEEP THE BASE DIR PARAMETRIZED to leave me the possibility to set the base dir in LDAP to goup the accounts on different mail storage system. So you know a method to substitute TWO ldap values in the mail parameter definition? Thank you Andrea

2 5

[Dovecot] Questions about dovecot-shared in 1.2 and inherit group membership from parent mailbox
by Lukas Haase 12 Feb '11

12 Feb '11

Hi, I read the Wiki about dovecot-shared a few times but it is not 100% clear to me (at least for 1.2). First, if I want shared keywords I *must* have a dovecot-shared. In this case, the permissions are not taken any longer from the parent folder (what is exactly this parent folder?) but from the dovecot-shared file. So in some sense dovecot-shared is always required (since everyone would like to share keywords). True? Second, is there only *one* dovecot-shared per namespace or per mailbox *under* a specific namespace? Or an arbitrary number (where the "last" is taken)? Where does dovecot-shared need to be placed? For example, if the location of the namespace points to /var/mail/shared and I have two mailboxes "group1" and "group2" inside. Does the dovecot-shared need to reside in /var/mail/shared or /var/mail/shared/group1 and /var/mail/shared/group2 (with LAYOUT=fs)? Is it possible? Third (and main) question: In /var/mail/shared I want to have a mailbox for each group. Each user is member of his respective groups (in terms of UNIX permissions *and* ACLs). The mailboxes are owned by their respective groups and if a user creates a subfolder inside it should surely have the same group assigned as the parent mailbox (not the namespace!). namespace public { separator = . prefix = Shared. location = maildir:/var/mail/shared:INDEX=~/Maildir/shared:LAYOUT=fs subscriptions = no } mail:~# ls -l -R /var/mail/shared/ /var/mail/shared/: total 12 drwxrwx--- 5 root group1 4096 Feb 9 11:53 Group1 drwxrwx--- 5 root group2 4096 Feb 9 12:27 Group2 -rw-r--r-- 1 root root 23 Feb 9 11:52 dovecot-acl -rw-rw-r-- 1 root root 0 Dec 15 2009 dovecot-shared /var/mail/shared/Group1: total 16 drwxrwx--- 2 root group1 4096 Feb 8 10:35 cur -rw-r--r-- 1 root group1 28 Feb 9 11:52 dovecot-acl -rw-rw-r-- 1 root group1 0 Dec 15 2009 dovecot-shared drwxrwx--- 2 root group1 4096 Dec 15 2009 new drwxrwx--- 2 root group1 4096 Feb 8 10:34 tmp /var/mail/shared/Group1/cur: total 0 /var/mail/shared/Group1/new: total 0 /var/mail/shared/Group1/tmp: total 0 /var/mail/shared/Group2: total 16 drwxrwx--- 2 root group2 4096 Feb 8 10:35 cur -rw-r--r-- 1 root group2 27 Feb 9 11:52 dovecot-acl -rw-rwS--- 1 root group2 0 Dec 15 2009 dovecot-shared drwxrwx--- 2 root group2 4096 Dec 15 2009 new drwxrwx--- 2 root group2 4096 Feb 8 10:34 tmp /var/mail/shared/Group2/cur: total 0 /var/mail/shared/Group2/new: total 0 /var/mail/shared/Group2/tmp: total 0 Again: *Inside* /var/mail/shared I want to create mailboxes for each group (Group1, Group2, ...). This is done only by the administrator. Therefore /var/mail/shared is owned by root. Each Group1, Group2, ... in turn is owned by group1, group2, ... I tried all combinations using dovecot-shared which came into my mind such that a subfolder of Group1 is owned by group1. However, either 1.) the subfolder is owned by the primary group of the creating user (group "users") or 2.) the group of /var/mail/shared/dovecot-shared or 3.) creation of the subfolder fails with dovecot: IMAP(user1): chown(/var/mail/shared/Group2/Test1, -1, 0(root)) failed: Operation not permitted (egid=100(users), group based on /var/mail/shared/dovecot-shared) dovecot: IMAP(user1): mkdir(/var/mail/shared/Group2/Test1/cur) failed: Operation not permitted Is this just not possible or do I get something wrong here? Regards, Luke

2 4

[Dovecot] PAM auth and userdb
by Matthias Lohmann 11 Feb '11

11 Feb '11

Hi all, I've just setup dovecot 2.0.9 on Solaris 10 - everything works fine so far. I'm authentication my users with PAM (against /etc/passwd) -> works The users get the default quota setting from dovecots config. Now I like to override the quota settings for some users. So I created a userdb - but it seems, that its not used ... What might be wrong? # 2.0.9: /opt/dovecot2.0.9/etc/dovecot/dovecot.conf # OS: SunOS 5.10 sun4v auth_debug = yes auth_username_chars = abcdefghijklmnopqrstuvwxyz01234567890.- auth_verbose = yes default_login_user = nobody disable_plaintext_auth = no first_valid_gid = 215 first_valid_uid = 300 log_path = /var/log/dovecot.log login_access_sockets = tcpwrap mail_location = mbox:~/IMAP:INBOX=/var/mail/%u:INDEX=/var/dovecotindexes/%u mail_plugins = quota passdb { driver = pam } plugin { quota = dict:User quota::file:/var/dovecotindexes/%u/dovecot-quota quota_rule = *:storage=1G quota_rule2 = Trash:storage=+100M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u } [...] userdb { driver = passwd } userdb { args = username_format=%u /opt/dovecot/etc/users driver = passwd-file } My userdb contains lines like this user301::301:220::/usr/users/user301::userdb_quota_rule=*:storage=200M And here we have some debug output Feb 11 16:55:24 auth: Debug: passwd-file /opt/dovecot/etc/users: Read 1 users Feb 11 16:55:24 auth: Debug: pam(user301,2.1.1.2): lookup service=dovecot Feb 11 16:55:24 auth: Debug: pam(user301,2.1.1.2): #1/1 style=1 msg=Password: Feb 11 16:55:24 auth: Debug: client out: OK 1 user=user301 Feb 11 16:55:24 auth: Debug: master in: REQUEST 1627258881 20594 1 90f9d76fc9ac35bcb78212825868522a Feb 11 16:55:24 auth: Debug: passwd(user301,2.1.1.2): lookup Feb 11 16:55:24 auth: Debug: master out: USER 1627258881 user301 system_groups_user=user301 uid=301 gid=220 home=/usr/users/user301 Feb 11 16:55:24 pop3-login: Info: Login: user=<user301>, method=PLAIN, rip=2.1.1.2, lip=2.1.1.22, mpid=20607 Feb 11 16:55:25 pop3(user301): Info: Disconnected: Logged out top=0/0, retr=0/0, del=0/9, size=71445 Even doveadm gives the wrong quota root@> /opt/dovecot/bin/doveadm quota get -u user301 Quota name Type Value Limit % User quota STORAGE 72288 1048576 6 User quota MESSAGE 1258 - 0 Any hints for me? Thanks in advance. Kind regards Matt

2 1

[Dovecot] [Q] auth(default): plain(?, 11.111.206.99): Username contains disallowed character: 0x20
by JKL 11 Feb '11

11 Feb '11

Dear all, A new user with Microsoft Express is trying to use IMAP SSL port 993. However they cannot log in. Its only with them. The logs details the following: Feb 11 18:56:03 logout dovecot: auth(default): plain(?,11.111.206.99): Username contains disallowed character: 0x20 Feb 11 18:58:07 logout dovecot: imap-login: Disconnected (auth failed, 1 attempts): method=PLAIN, rip=11.111.206.99, lip=62.58.61.184, TLS: Disconnected I think that the 0x20 is a space. However the user states that they are using this format and that there is no space: user.name(a)test.com Does anyone know where I could start to look for this? Regards,S

2 2

[Dovecot] Domain blacklisting
by Thomas Hummel 11 Feb '11

11 Feb '11

Hello, I run dovecot-2/Maildir/LDAP user/passdb and would like to be able to deny acess to users who connect from certain domains/IP (google.com for instance since in that case they gave their credentials to a third party). My understanding is that I cannot use some negative form of "allow_nets". The only mechanism I can think of is tcp_wrappers. However, dovecot documentation mention it only in the dovecot-1 section. Does it work the same way with dovecot-2 ? Is it a bad idea (I'm thinking of the induced overhead) ? Can you see another way to blacklist (at dovecot application level) some sources ? Thanks -- Thomas Hummel | Institut Pasteur <hummel(a)pasteur.fr> | Pôle informatique - systèmes et réseau

3 6

[Dovecot] doveadm -A or -u
by Matt Rude 11 Feb '11

11 Feb '11

Did something change in doveadm? One of my scripts blew up last night saying that -A is not a valid flag. The -A and -u flags seem to not be working on trunk anymore. # dovecot --version 2.0.9 (723a26a7d328) # doveadm expunge -u matt mailbox Junk savedbefore 31d doveadm(matt): Fatal: Unknown argument MATT (matt of course is the user sending this message on this server) # doveadm -Dv expunge -A mailbox Junk savedbefore 31d doveadm(matt): Debug: Loading modules from directory: /usr/lib/dovecot doveadm(matt): Debug: Module loaded: /usr/lib/dovecot/lib10_quota_plugin.so doveadm(matt): Debug: Module loaded: /usr/lib/dovecot/lib20_expire_plugin.so doveadm(matt): Debug: Module loaded: /usr/lib/dovecot/lib20_zlib_plugin.so doveadm(matt): Debug: Loading modules from directory: /usr/lib/dovecot/doveadm doveadm(matt): Debug: Module loaded: /usr/lib/dovecot/doveadm/lib10_doveadm_expire_plugin.so doveadm(matt): Debug: Module loaded: /usr/lib/dovecot/doveadm/lib10_doveadm_quota_plugin.so doveadm(matt): Debug: Module loaded: /usr/lib/dovecot/doveadm/lib10_doveadm_zlib_plugin.so doveadm(matt): Fatal: Unknown argument -A Also with the quota plugin. # doveadm -f tab quota get -A doveadm(matt): Fatal: doveadm quota get: Unknown parameter: -A I can provide a doveconf -n and mySQL config files if needed. Thanks -Matt

2 1

[Dovecot] Separate access to different "folders" of the same mailbox?
by Alexander Chekalin 11 Feb '11

11 Feb '11

Hello Timo and everyone, I think on such an idea that may save me a bit of space and time: in my company we have a mailbox that holds a copy of every message that our SMTP processed. While it eats a lot of space, it saved us several times when, you may imaging, user "suddenly" deleted the most important message in his life and call our IT guys for help. The mailbox contains "folders" for each day (like 2011-02-10), which keeps mailings for that day only. Even with this, it is sometime hard to work with that "keep all" box (basically, it is slow as the size is huge). What I'd like to add is some kind of "virtual folders" (for each of our internal users) that list messages from and to his address. And I'd like to permit every user to see (that is, read only mode) only "his" such a virtual folder in our "keep all" box, so user can see his old messages on his own. Looks like 1) I need an ACL to limit user access to "their" folders and somehow hide other folders at all 2) Have such virtual folders work with huge ammount of mailings (kind of 300 Gb), separated in maybe 1000 folders (per days). I really afraid it will be slo-o-o-ow search, even with indexes (I mean, virtual folder that is defined as search over 1000 folders will be not that fast). The mailbox is maildir by nature. How can I archive these goals with smallest load possible, and if it is possible at all? Thank you, Alexander Chekalin

5 4

[Dovecot] xi.rename-it.nl/debian/ dovecot-2.0 sieve problem
by Martin Rozgonski 11 Feb '11

11 Feb '11

Hi, i used to use deb http://xi.rename-it.nl/debian/ stable-auto/dovecot-2.0 main to update dovecot 1.2 with debian lenny. I used the convert script to change my configuration file. Everything works fine but sieve does not work anymore. There is no error in the logs but dovecot simply ignores any filter. I checked the documentation/configuration twice and had still no success. Maybe, this is a known/unknown bug or any suggestions? Best regards Martin Rozgonski

3 6

[Dovecot] Error: managesieve-login: dump-capability failed: process got stuck
by Pascal Volk 11 Feb '11

11 Feb '11

Hi Stephan, after applying the latest changesets to dovecot (i guess 08e4280e5bfd), `make`, `make install` and restarting dovecot, I saw that error: doveconf: Error: managesieve-login: dump-capability failed: process 5467 got stuck Regards, Pascal -- The trapper recommends today: beeffeed.1104203(a)localdomain.org

2 1

[Dovecot] mdbox, sis, zlib
by Daniel L. Miller 11 Feb '11

11 Feb '11

I'm still having issues with the combination of mdbox, sis, and zlib. Is anyone else using these without seeing any errors in the logs? -- Daniel

1 0

[Dovecot] multiple domains
by Sergio Moscoso 10 Feb '11

10 Feb '11

Anybody can help me with this issue. It's the right place to submit thios question, please help me. Actually we have configured a server (postfix,dovecot,mysql) with multiple domains, but the problem resides in that we don't want to login via POP3 using "user@domain" just using "user", because we'll migrate our actual platform (Qmail) to dovecot. Our users are logging to their mail boxes, using only user name. We want to ask if that's posible to use a function like a "vipmap" in qmail, that allow to map an IP address to a domain. We're using the dovecot 1.0.7, the configuration shows as follows: login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login first_valid_uid: 100 mail_location: maildir:~/Maildir/ mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 imap_client_workarounds(default): delay-newmail outlook-idle netscape-eoh imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh imap_client_workarounds(pop3): outlook-idle pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: username_format: %Lu passdb: driver: sql args: /etc/dovecot-mysql.conf userdb: driver: static args: uid=101 gid=102 home=/home/vmail/%d/%n We'll apreciate your response, 'cause we coulnd't find information about this issuet and we didn't to find any clue that shows how can realize it. Thank you in advance. Sergio Moscoso

3 3

[Dovecot] postfix deliver to mdbox ?
by Frank Bonnet 10 Feb '11

10 Feb '11

Hello again I' now in trouble with incoming email's to users I have modified the main.cf config file of postfix according to the Dovecot LDA with Postfix page. mailbox_command = /usr/local/libexec/dovecot/dovecot-lda postfix reload But incoming emails does not seems to go in the mdbox INBOX I use postfix 2.8.0 with FreeBSD 8.1 Any clarification welcome ! Thanks again.

3 3

[Dovecot] LDAPS fault tolerance not working with dovecot
by Nikita Koshikov 10 Feb '11

10 Feb '11

Hello list, In my dovecot-ldap.ext I have: uris = ldaps://host1 ldaps://host2 ldaps://host2 Today host1 hangs and new connections can't be established with mail server. Connected users worked fine (auth_cache_size = 5 k auth_cache_ttl = 15 mins). At this time - host2 and host3 are working fine, but switching to them was not happen. Why ? In logs I got: Feb 09 10:20:36 imap-login: Error: Timeout waiting for handshake from auth server. my pid=29932, input bytes=0 Feb 09 10:20:36 imap-login: Error: Timeout waiting for handshake from auth server. my pid=29867, input bytes=0 Feb 09 10:20:37 imap-login: Error: auth: connect(login) failed: Resource temporarily unavailable Feb 09 10:20:37 imap-login: Error: auth: connect(login) failed: Resource temporarily unavailable Feb 09 10:20:39 imap-login: Error: Timeout waiting for handshake from auth server. my pid=29943, input bytes=0 Feb 09 10:20:40 imap-login: Error: auth: connect(login) failed: Resource temporarily unavailable I also tried to set: hosts = host1:636 host2:636 host3:636 But with above config error log fulls with messages: Feb 09 10:44:57 auth: Error: LDAP: Connection lost to LDAP server, reconnecting And none of servers accepted ldaps connection. Is someone has a success make ldaps fault tolerance ?

2 2

[Dovecot] POP Log entries
by Ralf Hildebrandt 10 Feb '11

10 Feb '11

Disconnected: Logged out top=0/0, retr=0/0, del=0/3239, size=511881537 Disconnected: Logged out top=0/0, retr=2/316038, del=0/3238, size=511876309 What do the numbers mean? Especially since there are two numbers for each category... -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebrandt(a)charite.de | http://www.charite.de

2 1

[Dovecot] Error message with static userdb
by Carsten Laun-De Lellis 10 Feb '11

10 Feb '11

Hi all I am trying to migrate to dovecot 2.0.9 Dovecot starts without warnings but when I try to connect with a client I always got this error message in the log file: Feb 10 12:57:36 v37143 dovecot: master: Dovecot v2.0.9 starting up (core dumps disabled) Feb 10 12:57:56 v37143 dovecot: auth: Fatal: static userdb: Empty key (=) Feb 10 12:57:56 v37143 dovecot: master: Error: service(auth): command startup failed, throttling Feb 10 12:58:31 v37143 dovecot: imap-login: Error: Timeout waiting for handshake from auth server. my pid=17537, input bytes=0 Feb 10 12:58:56 v37143 dovecot: auth: Fatal: static userdb: Empty key (=) Feb 10 12:58:56 v37143 dovecot: master: Error: service(auth): command startup failed, throttling Feb 10 12:59:26 v37143 dovecot: imap-login: Error: Timeout waiting for handshake from auth server. my pid=17537, input bytes=0 Feb 10 12:59:26 v37143 dovecot: imap-login: Disconnected (no auth attempts): rip=217.91.177.10, lip=89.202.2.143 This is the output of dovecot n: # 2.0.9: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.18-028stab070.14 x86_64 Ubuntu 10.04.1 LTS reiserfs auth_mechanisms = plain login disable_plaintext_auth = no hostname = v37143.1blu.de mail_location = maildir:/vmail/%d/%n managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date namespace { inbox = yes location = maildir:/vmail/%d/%n prefix = separator = / type = private } passdb { args = /scripts/sql/dovecot/user_auth.sql driver = sql } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_global_dir = /var/lib/dovecot/sieve/global sieve_global_path = /var/lib/dovecot/sieve/default.sieve } postmaster_address = root(a)delellis.net protocols = imap service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { mode = 0660 user = vmail } } ssl_cert = </certs/mail/mailpublic.pem ssl_key = </certs/mail/mailkey.pem userdb { args = uid=vmail gid=vmail home=/var/vmail/%d/%n allow_all_users = yes driver = static } protocol lda { mail_plugins = " sieve" } Any ideas ? Mit freundlichem Gruß Carsten Laun-De Lellis Dipl.-Ing. Elektrotechnik Certified Information Systems Auditor (CISA) Hauptstrasse 13 D-67705 Trippstadt Phone: +49 (6306) 992140 Mobile: +49 (151) 27530865 email: <mailto:carsten.laun-delellis@delellis.net> carsten.laun-delellis(a)delellis.net

2 1

[Dovecot] IMAP subfolders and MDBOX
by Frank Bonnet 10 Feb '11

10 Feb '11

Hello We actually use MBOX format on our mailhub but this does not permit to create IMAP subfolders. Many users are asking me fot this feature and I agree with them of course. My problem is to choose the format that will permit imap subfolders creation. Maildir is not my favorite format and I wonder about MDBOX. Does it permit imap subfolders creation ? It is possible to convert from MBOX to MDBOX in one shot ? Is it stable / mature enoug for a production server ( 4000 users ) ? Thank you

3 5

[Dovecot] /var/mail/<user> and mail group privileges
by Michal Hlavinka 10 Feb '11

10 Feb '11

Hi Timo, I'm facing problem with mail group privileges (again), because I've heard a few complains. I was looking at old emails and list archives, but still does not know the answer. In default (fedora/rhel) setup mail group and 0660 privileges are used. This means that when mail_location = mbox:~/mail:INBOX=/var/mail/%u is used, dovecot fails with first (and only first) attempt to select inbox (imap) or login (pop3). Shouldn't mkdir and chown make together a transaction? When it fails just for first time, it confuses some admins (this is the reason why I'm getting complains (bug reports) just because missing/wrong configuration). I think it a) should work even for first connection (ignore chown failure) or b)it should not work for following connection, so the behavior should be more consistent. Also it seems unclear what configuration option is required for making this work in new dovecot versions where configuration is split to mail_privileged_group and mail_access_groups. I see that after reading documentation in 10-mail.conf, some admins expects mail_privileged_group to be enough while mail_access_group is required to prevent fchown failure. Would it be possible to explicitly mention in the config file what option is required? I can add patch with this to our rpm, but we always prefer to be as close to the upstream as possible. Thanks Michal

2 4

[Dovecot] LDAP quota groups
by ian+dovecot＠comtek.co.uk 10 Feb '11

10 Feb '11

Is there any way to have a per-LDAP-group quota? The OpenLDAP folk's suggestions are to hack the source for an overlay (ideal, but it looks somewhat involved) or to do it at the application (Dovecot). I've added an LDAP userattr 'quotaMegaBytes' which is great for allowing me to override the server's default quota on a per-user basis, but ideally I'd be able to override the quota only for people who are member of a certain LDAP group. Perhaps I could override it for IMAP sessions with a postlogin script, but I can't see any way to apply it to deliver. Thanks for any suggestions, Ian

1 0

[Dovecot] Access rights after dsync
by Joan Moreau 10 Feb '11

10 Feb '11

Hi, It looks like the access rights are not correctly preserved after a dsync I have rwXr-X-- from my original folder (which is right) I have rwXrwXrwX in the "mirrored" fodler (which is very wrong) Not sure what cause this, but it looks like a bug Best, jm

2 1

[Dovecot] Dovecot 2.0.7 doesn't disassociate STDERR when it daemonizes.
by Virgil Champlin 10 Feb '11

10 Feb '11

At least it appears that way on my FreeBSD 8.1 system. This is probably unnoticeable in regular use but I happen to use CFengine(v2) for system configuration & monitoring. If it notices dovecot not running it tries to start it and hangs. I believe cfengine (cfagent) has created a pipe to monitor the start commmand's stderr and is waiting for this pipe to close. This never happens because the pipe has been inherited by dovecot which, in version 2, doesn't release stderr as part of its daemonization. Although cfengine could be more defensive, I believe dovecot should be disassociating from the inherited stderr. Looking at master/main.c, I see stdin, stdout & stderr being set to /dev/null in main() if they are inherited unassigned: do { null_fd = open("/dev/null", O_WRONLY); if (null_fd == -1) i_fatal("Can't open /dev/null: %m"); fd_close_on_exec(null_fd, TRUE); } while (null_fd <= STDERR_FILENO); But stderr is missing when a later dup2() is used to release any inherited values not covered by the above: if (dup2(null_fd, STDIN_FILENO) < 0 || dup2(null_fd, STDOUT_FILENO) < 0) i_fatal("dup2(null_fd) failed: %m"); Adding a dup2 for stderr to the above statement works in my simple test case but I'm unsure if there are other issues which may require delaying it. Dovecot 1.2.16 approaches this a little differently & does slightly delay the stderr dup2. The appended diff (v2.0.7) works for me but a more informed opinion might have a better suggestion. Thank you very much for your time. I just started using Dovecot and really like it. -virgil --- main.c.orig 2010-11-04 11:58:48.000000000 -0700 +++ main.c 2011-01-05 18:11:45.000000000 -0800 @@ -717,7 +717,8 @@ } if (dup2(null_fd, STDIN_FILENO) < 0 || - dup2(null_fd, STDOUT_FILENO) < 0) + dup2(null_fd, STDOUT_FILENO) < 0 || + dup2(null_fd, STDERR_FILENO) < 0) i_fatal("dup2(null_fd) failed: %m"); pidfile_path = -=-=-=-=-=-=-=-=-=-=-

2 1

[Dovecot] login_trusted_networks (v2.0.8)
by Don Buchholz 10 Feb '11

10 Feb '11

I just spent a bit puzzling over "login_trusted_networks". My problem was using "10.1.2/24" instead of "10.1.2.0/24". Here are some things I looked for during troubleshooting that didn't pan out: (1) No messages printed to syslog. (2) Search for "login_trusted_networks" on the Wiki (wiki2) failed. (3) Comments in example config file didn't specify expected format. Anyway, it works now. <shrug> - Don =================== 'doveconf -n' (redacted): > *[root@postal ~]# **doveconf -n* > # 2.0.8: /etc/dovecot/dovecot.conf > # OS: Linux 2.6.9-67.0.1.ELsmp i686 Red Hat Enterprise Linux WS > release 4 (Nahant Update 6) ext3 > auth_username_format = %Lu > auth_verbose = yes > auth_verbose_passwords = sha1 > login_log_format_elements = user=<%u> service=%Us method=%m rip=%r > lip=%l mpid=%e %c > login_trusted_networks = xx.xx.x.0/24 xx.xx.xx.0/23 > mail_location = maildir:/Virtual_Users/%u/Mail > passdb { > driver = pam > } > passdb { > args = scheme=CRYPT username_format=%u /etc/dovecot/users > driver = passwd-file > } > ssl_ca = </etc/dovecot/ssl/iMove_2011_CAcert.pem > ssl_cert = </etc/dovecot/ssl/postal_cert.pem > ssl_key = </etc/dovecot/ssl/postal_key+req.pem > ssl_key_password = ******** > ssl_parameters_regenerate = 12 > userdb { > driver = passwd > } > userdb { > args = username_format=%u /etc/dovecot/users > driver = passwd-file > } > verbose_proctitle = yes > protocol imap { > ssl_cert = </etc/dovecot/ssl/imap_cert.pem > ssl_key = </etc/dovecot/ssl/imap_key+req.pem > ssl_key_password = </etc/dovecot/ssl/imap.pw > } > protocol pop3 { > ssl_cert = </etc/dovecot/ssl/pop3_cert.pem > ssl_key = </etc/dovecot/ssl/pop3_key+req.pem > ssl_key_password = </etc/dovecot/ssl/pop3.pw > } > *[root@postal ~]#*

2 1

[Dovecot] Error: FETCH [1] for mailbox badbox UID 1 got too little data: 2 vs 4
by Chris Wilson 10 Feb '11

10 Feb '11

Hi all, I can send myself a test message that causes Dovecot to crash when I open it in Alpine, with the following error: Jan 12 14:52:52 one-mail dovecot: imap(chris): Error: FETCH [1] for mailbox badbox UID 1 got too little data: 2 vs 4 Jan 12 14:52:52 one-mail dovecot: imap(chris): Error: Corrupted index cache file /home/chris/mail/.imap/badbox/dovecot.index.cache: Broken MIME parts for mail UID 1 Jan 12 14:52:52 one-mail dovecot: imap(chris): Disconnected: FETCH failed bytes=485/1394 I can do this as follows: $ touch ~/mail/badbox $ echo test | /usr/libexec/dovecot/dovecot-lda -m badbox $ cat ~/mail/badbox >From MAILER-DAEMON Wed Jan 12 14:52:29 2011 test X-IMAPbase: 1294843949 0000000001 X-UID: 1 Status: X-Keywords: Content-Length: 1 And then when I try to open badbox in Alpine (over IMAP), and then open this email, I get the error above, and the connection is aborted. I expect that the "test" line is not a valid header, but dovecot should not crash when opening it. Cheers, Chris. -- Aptivate | http://www.aptivate.org | Phone: +44 1223 760887 The Humanitarian Centre, Fenner's, Gresham Road, Cambridge CB1 2ES Aptivate is a not-for-profit company registered in England and Wales with company number 04980791.

2 1

[Dovecot] Panic: file mailbox-list-maildir.c: line 133: unreached
by Holger Mauermann 10 Feb '11

10 Feb '11

I converted personal mailboxes from maildir to sdbox. Public mailboxes are still in maildir format, because I need per-user seen flags. However, if the user is subscribed to public mailboxes and the client sends 'LIST (SUBSCRIBED) "" *', dovecot crashes with: imap(holger(a)mauermann.org): Panic: file mailbox-list-maildir.c: line 133: unreached imap(holger(a)mauermann.org): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x3756a) [0x7f25f7b1456a] -> /usr/lib/dovecot/libdovecot.so.0(+0x375b6) [0x7f25f7b145b6] -> /usr/lib/dovecot/libdovecot.so.0(+0x118ca) [0x7f25f7aee8ca] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x35cce) [0x7f25f7d8acce] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_list_is_valid_pattern+0x26) [0x7f25f7d80146] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x33a31) [0x7f25f7d88a31] -> /usr/lib/dovecot/libdovecot-storage.so.0(fs_list_iter_next+0x2f) [0x7f25f7d885cf] -> /usr/lib/dovecot/modules/lib01_acl_plugin.so(+0xb658) [0x7f25f6f2c658] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_list_iter_next+0xa) [0x7f25f7d7faba] -> dovecot/imap(+0xc529) [0x7f25f824d529] -> dovecot/imap(cmd_list_full+0x43e) [0x7f25f824e48e] -> dovecot/imap(+0x10dad) [0x7f25f8251dad] -> dovecot/imap(+0x10e8d) [0x7f25f8251e8d] -> dovecot/imap(client_handle_input+0x135) [0x7f25f82520c5] -> dovecot/imap(client_in put+0x62) [0x7f25f8252a22] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x48) [0x7f25f7b1f898] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x9f) [0x7f25f7b2080f] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7f25f7b1f828] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f25f7b0dcf3] -> dovecot/imap(main+0x30f) [0x7f25f825b07f] -> /lib/libc.so.6(__libc_start_main+0xfe) [0x7f25f736cd8e] -> dovecot/imap(+0x9279) [0x7f25f824a279] master: Error: service(imap): child 32285 killed with signal 6 (core dumped) This does not happen with 'LSUB "" *' or with personal mailboxes in maildir format. Below is the gdb and doveconf -n output: (gdb) bt full #0 0x00007f25f7381ba5 in raise () from /lib/libc.so.6 No symbol table info available. #1 0x00007f25f73856b0 in abort () from /lib/libc.so.6 No symbol table info available. #2 0x00007f25f7b1457d in default_fatal_finish (type=<value optimized out>, status=0) at failures.c:187 backtrace = 0x7f25f980d468 "/usr/lib/dovecot/libdovecot.so.0(+0x3756a) [0x7f25f7b1456a] -> /usr/lib/dovecot/libdovecot.so.0(+0x375b6) [0x7f25f7b145b6] -> /usr/lib/dovecot/libdovecot.so.0(+0x118ca) [0x7f25f7aee8ca] -> /usr/lib/do"... #3 0x00007f25f7b145b6 in i_internal_fatal_handler (ctx=0x7fff36a6acc0, format=<value optimized out>, args=<value optimized out>) at failures.c:645 status = 0 #4 0x00007f25f7aee8ca in i_panic (format=0x7e1d <Address 0x7e1d out of bounds>) at failures.c:259 ctx = {type = LOG_TYPE_PANIC, exit_status = 0, timestamp = 0x0} args = {{gp_offset = 24, fp_offset = 48, overflow_arg_area = 0x7fff36a6ad90, reg_save_area = 0x7fff36a6acd0}} #5 0x00007f25f7d8acce in maildir_is_valid_pattern (list=<value optimized out>, pattern=<value optimized out>) at mailbox-list-maildir.c:133 No locals. #6 0x00007f25f7d80146 in mailbox_list_is_valid_pattern (list=0x7f25f98422d0, pattern=0x7f25f980d410 "public") at mailbox-list.c:651 _data_stack_cur_id = 0 ret = <value optimized out> #7 0x00007f25f7d88a31 in fs_list_subs (ctx=0x7f25f9818b70) at mailbox-list-fs-iter.c:683 node = <value optimized out> flags = MAILBOX_SUBSCRIBED ns = <value optimized out> path = <value optimized out> dir = <value optimized out> fname = <value optimized out> storage_name = 0x7f25f980d410 "public" len = 0 st = {st_dev = 139801076486872, st_ino = 19, st_nlink = 139801053739543, st_mode = 128, st_uid = 0, st_gid = 1, __pad0 = 0, st_rdev = 139801046211004, st_size = 206158430224, st_blksize = 140734110281536, st_blocks = 140734110281344, st_atim = {tv_sec = 579820584960, tv_nsec = 139801076651024}, st_mtim = {tv_sec = 139801076728920, tv_nsec = 139801076766928}, st_ctim = {tv_sec = 139801076486872, tv_nsec = 536871048}, __unused = {128, 139801076731466, 139801046189669}} #8 0x00007f25f7d885cf in fs_list_iter_next (_ctx=0x7f25f9818b70) at mailbox-list-fs-iter.c:356 _data_stack_cur_id = 0 info = <value optimized out> __FUNCTION__ = "fs_list_iter_next" #9 0x00007f25f6f2c658 in acl_mailbox_list_iter_next_info (_ctx=<value optimized out>) at acl-mailbox-list.c:205 alist = 0x7f25f9835410 #10 acl_mailbox_list_iter_next (_ctx=<value optimized out>) at acl-mailbox-list.c:372 ctx = 0x7f25f98163f0 info = 0x7f25f98518d0 ret = <value optimized out> #11 0x00007f25f7d7faba in mailbox_list_iter_next (ctx=0x7e1d) at mailbox-list.c:1029 info = <value optimized out> #12 0x00007f25f824d529 in list_namespace_mailboxes (cmd=<value optimized out>) at cmd-list.c:377 info = 0x80 flags = 536871048 str = 0x7f25f980d2d8 ret = 1 ns = 0x0 name = 0x7f25f98518d0 "Public/public" #13 cmd_list_continue (cmd=<value optimized out>) at cmd-list.c:792 _data_stack_cur_id = 4 ctx = 0x7f25f9848458 #14 0x00007f25f824e48e in cmd_list_full (cmd=0x7f25f9848350, lsub=false) at cmd-list.c:957 client = 0x7f25f9847be0 args = 0x7f25f984ac08 list_args = 0x7f25f984acd0 arg_count = <value optimized out> ctx = 0x7f25f9848458 patterns = {arr = {buffer = 0x7f25f98484a8, element_size = 8}, v = 0x7f25f98484a8, v_modifiable = 0x7f25f98484a8} pattern = 0x7f25f984adc8 "*" patterns_strarr = <value optimized out> #15 0x00007f25f8251dad in client_command_input (cmd=0x7f25f9848350) at imap-client.c:661 client = 0x7f25f9847be0 command = <value optimized out> __FUNCTION__ = "client_command_input" #16 0x00007f25f8251e8d in client_command_input (cmd=0x7f25f9848350) at imap-client.c:711 client = 0x7f25f9847be0 command = 0x0 __FUNCTION__ = "client_command_input" #17 0x00007f25f82520c5 in client_handle_next_command (client=0x7f25f9847be0) at imap-client.c:752 size = 26 #18 client_handle_input (client=0x7f25f9847be0) at imap-client.c:764 _data_stack_cur_id = 3 ret = false remove_io = <value optimized out> handled_commands = false __FUNCTION__ = "client_handle_input" #19 0x00007f25f8252a22 in client_input (client=0x7f25f9847be0) at imap-client.c:803 cmd = <value optimized out> output = 0x7f25f98481c8 bytes = <value optimized out> __FUNCTION__ = "client_input" #20 0x00007f25f7b1f898 in io_loop_call_io (io=0x7f25f9848260) at ioloop.c:383 ioloop = 0x7f25f98155e0 t_id = 2 #21 0x00007f25f7b2080f in io_loop_handler_run (ioloop=<value optimized out>) at ioloop-epoll.c:213 ctx = 0x7f25f9815810 event = 0x7f25f9815880 list = 0x7f25f98482b0 io = 0x7e1d tv = {tv_sec = 1782, tv_usec = 549357} msecs = <value optimized out> ret = <value optimized out> i = 0 call = false #22 0x00007f25f7b1f828 in io_loop_run (ioloop=0x7f25f98155e0) at ioloop.c:404 No locals. #23 0x00007f25f7b0dcf3 in master_service_run (service=0x7f25f98154b0, callback=0x7e1d) at master-service.c:484 No locals. #24 0x00007f25f825b07f in main (argc=1, argv=0x7f25f9815370) at main.c:375 set_roots = {0x7f25f8460da0, 0x0} service_flags = <value optimized out> storage_service_flags = <value optimized out> postlogin_socket_path = 0x0 username = 0x0 c = <value optimized out> # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.35-23-virtual x86_64 Ubuntu 10.10 auth_debug = yes auth_mechanisms = plain login digest-md5 cram-md5 apop disable_plaintext_auth = no lmtp_save_to_detail_mailbox = yes mail_debug = yes mail_location = sdbox:~/dbox:DIRNAME=.dbox-mails mail_plugins = " quota acl zlib lazy_expunge" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date namespace backup { hidden = yes list = no location = sdbox:~/expunged:DIRNAME=.dbox-mails prefix = .EXPUNGED/ separator = / type = private } namespace other { list = children location = sdbox:%%h/dbox:DIRNAME=.dbox-mails prefix = Shared/%%u/ separator = / subscriptions = no type = shared } namespace pub { list = children location = maildir:/var/spool/imap/public:INDEX=~/public prefix = Public/ separator = / subscriptions = no type = public } namespace user { inbox = yes location = prefix = separator = / type = private } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { acl = vfile acl_shared_dict = file:/var/spool/imap/shared-mailboxes.dict lazy_expunge = .EXPUNGED/ quota = dict:::file:%h/dbox/dovecot-quota quota_rule = *:storage=1G quota_rule2 = Trash:storage=+50M sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap pop3 sieve rejection_subject = Mail delivery failed: %s service auth { unix_listener auth-exim { user = Debian-exim } unix_listener auth-userdb { user = vmail } } service lmtp { inet_listener lmtp { port = 24 } } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lmtp { mail_plugins = " quota acl zlib lazy_expunge sieve" } protocol lda { mail_plugins = " quota acl zlib lazy_expunge sieve" } protocol imap { mail_plugins = " quota acl zlib lazy_expunge imap_quota imap_acl imap_zlib" } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh }

2 1

[Dovecot] courier-imap to dovecot-imap migration: missing TLS_TRUSTCERTS feature
by Uffe Jakobsen 10 Feb '11

10 Feb '11

Hi, I'm attempting an one-to-one migration from courier-imap to dovecot-imap. current state: Imap-server has a self signed certificate Every client/user has a self signed client certificate that is used for SSL/TLS client authentication. All certificates are self signed "standalone" cerfificates - no CA hierarchy/structure is made. With courier-imap we could just put every client certificate into a trusted cert file (or hashed directory for a larger number of clients) and courier-imap would check that through TLS_TRUSTCERTS. I would like to keep the current appproach and avoid the whole mini CA setup - that way I can also avoid reissuing new certs to all existing users. Question: can a similar setup be achieved with dovecot-imap ? I've already made numerous attempts with no luck. As far as I can see dovecot-imap does not seem to implement the concept of checking trusted (self signed standalone client) certs - even though it is based on openssl like courier-imap is - but I may be wrong here. I'm using dovecot-2.0.7 (from ports) on FreeBSD Thanks in advance. Kind regards Uffe Jakobsen

2 1

[Dovecot] dovecot not delivering emails in the right folder
by paulino＠calderonpale.com 10 Feb '11

10 Feb '11

Hello everyone, I'm having trouble getting postfix + dovecot to work correctly. It seems like Postfix is receiving and delivering the emails correctly but dovecot is placing/looking for them in the wrong folder therefore the clients aren't receiving any new emails. I switched from courier and followed a tutorial found here: http://library.linode.com/email/postfix/dovecot-mysql-debian-5-lenny Dovecot's log: deliver(adomain.com/test/@adomain.com): 2011-02-04 21:48:04 Info: Module loaded: /usr/lib/dovecot/modules/lda/lib90_cmusieve_plugin.so deliver(adomain.com/test/@adomain.com): 2011-02-04 21:48:04 Info: auth input: adomain.com/test/@adomain.com deliver(adomain.com/test/@adomain.com): 2011-02-04 21:48:04 Info: auth input: uid=5000 deliver(adomain.com/test/@adomain.com): 2011-02-04 21:48:04 Info: auth input: gid=5000 deliver(adomain.com/test/@adomain.com): 2011-02-04 21:48:04 Info: auth input: home=/home/vmail/adomain.com/adomain.com/test/ deliver(adomain.com/test/@adomain.com): 2011-02-04 21:48:04 Info: maildir: data=/home/vmail/adomain.com/adomain.com/test/ deliver(adomain.com/test/@adomain.com): 2011-02-04 21:48:04 Info: maildir: root=/home/vmail/adomain.com/adomain.com/test, index=/home/vmail/adomain.com/adomain.com/test, control=, inbox= deliver(adomain.com/test/@adomain.com): 2011-02-04 21:48:04 Info: cmusieve: Using sieve path: /home/vmail/globalsieverc deliver(adomain.com/test/@adomain.com): 2011-02-04 21:48:04 Info: cmusieve: Executing script /home/vmail/globalsievercc deliver(adomain.com/test/@adomain.com): 2011-02-04 21:48:04 Info: msgid=<AANLkTimZi7pD2eSFNipHtmS5HZVstk9UF6kjWEyqynz-(a)mail.gmail.com>: saved mail to INBOX It seems like is using a wrong folder value since it should be using /home/vmail/adomain.com/test. Another odd thing is that postfix is replacing the email address with /folder/user(a)adomain.com. Postfix after receiving an email: 3:48:04 domain postfix/smtpd[29365]: 8FDC1A339: client=mail-yx0-f169.google.com[209.85.213.169] Feb 5 03:48:04 domain postfix/cleanup[29369]: 8FDC1A339: message-id=<AANLkTimZi7pD2eSFNipHtmS5HZVstk9UF6kjWEyqynz-(a)mail.gmail.com> Feb 5 03:48:04 domain postfix/qmgr[27253]: 8FDC1A339: from=<xxx(a)gmail.com>, size=1815, nrcpt=1 (queue active) Feb 5 03:48:04 domain postfix/pipe[29370]: 8FDC1A339: to=<adomain.com/test/@adomain.com>, orig_to=<test(a)adomain.com>, relay=dovecot, delay=0.21, delays=0.2/0.01/0/0.01, dsn=2.0.0, status=sent (delivered via dovecot service) Feb 5 03:48:04 domain postfix/qmgr[27253]: 8FDC1A339: removed My config files: main.cf ============================== alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases append_dot_mydomain = no biff = no broken_sasl_auth_clients = yes config_directory = /etc/postfix inet_interfaces = all inet_protocols = all mailbox_size_limit = 0 message_size_limit = 30720000 mydestination = localhost, localhost.localdomain myhostname = adomain.com mynetworks = 127.0.0.0/8 myorigin = /etc/mailname proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $transport_maps $mynetworks $virtual_mailbox_limit_maps readme_directory = no recipient_delimiter = + relayhost = smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU) smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination smtpd_sasl_auth_enable = yes smtpd_sasl_authenticated_header = yes smtpd_tls_cert_file = /etc/postfix/cert.ca.crt smtpd_tls_key_file = /etc/postfix/cert.ca.key smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache smtpd_use_tls = yes virtual_alias_domains = virtual_alias_maps = proxy:mysql:/etc/postfix/mysql-virtual_forwardings.cf, mysql:/etc/postfix/mysql-virtual_email2email.cf virtual_gid_maps = static:5000 virtual_mailbox_base = /home/vmail virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql-virtual_domains.cf virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql-virtual_mailboxes.cf virtual_transport = dovecot virtual_uid_maps = static:5000 dovecot.conf: ====================== protocols = imap imaps log_timestamp = "%Y-%m-%d %H:%M:%S " mail_location = maildir:/home/vmail/%d/%n/Maildir mail_debug = yes disable_plaintext_auth = no ssl_cert_file = /etc/postfix/cert.crt ssl_key_file = /etc/postfix/cert.key namespace private { separator = . prefix = INBOX. inbox = yes } protocol lda { log_path = /home/vmail/dovecot-deliver.log auth_socket_path = /var/run/dovecot/auth-master postmaster_address = postmaster(a)adomain.com mail_plugins = cmusieve global_script_path = /home/vmail/globalsieverc } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } auth default { user = root mechanisms = plain login passdb sql { args = /etc/dovecot/dovecot-sql.conf } userdb static { args = uid=5000 gid=5000 home=/home/vmail/%d/%n allow_all_users=yes } socket listen { master { path = /var/run/dovecot/auth-master mode = 0600 user = vmail } client { path = /var/spool/postfix/private/auth mode = 0660 user = postfix group = postfix } } dovecot version: 1.0.15 # grep -v '^ *$#.*$\?$' dovecot-sql.conf driver = mysql connect = host=127.0.0.1 dbname=mail user=mail_admin password=xxx default_pass_scheme = CRYPT password_query = SELECT email as user, password FROM users WHERE email='%u'; Thanks, any help/pointers will be greatly appreciated.

2 1

[Dovecot] pop3 index virtual question
by Robert Schetterer 10 Feb '11

10 Feb '11

Hi @ll, Timo, on 2.0.9 i have a user reporting pop3 leaving mails on the server does not work as desired i have namespace default { # type = private separator = / prefix = "" list = yes # hidden = no subscriptions = yes } namespace virtual { # type = private prefix = "virtual/" separator = / location = virtual:/etc/dovecot/virtual:LAYOUT=maildir++ #location = virtual:/etc/dovecot/virtual hidden = yes list = no subscriptions= no } namespace real { # type = private prefix = "RealMails/" separator = / list = no hidden = yes } and pop3_uidl_format = %08Xu%08Xv before it was pop3_uidl_format = %g ( not sure what best ) # Permanently save UIDLs sent to POP3 clients, so pop3_uidl_format changes # won't change those UIDLs. Currently this works only with Maildir. #pop3_save_uidl = no my guess is that location = virtual:/etc/dovecot/virtual:LAYOUT=maildir++ isnt enough should be location = virtual:/etc/dovecot/virtual:LAYOUT=maildir++:INDEX=~/ to store/use indexes in the local maildir which is physical under /usr/local/virtual/domain/user@domain any meanings to this -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

2 6

[Dovecot] Using -s in "doveadm mailbox create"
by Christoph Pleger 10 Feb '11

10 Feb '11

Hello, it seems that "doveadm mailbox create" does not handle the mailbox parameters correctly if used with the "-s"-Parameter. I am using the following command in a script for adding new users: doveadm mailbox create -u "${ACCOUNT}" -s INBOX Drafts Sent Trash Spam Templates This creates mailboxes Drafts, Sent, Trash, Spam and Templates, but not INBOX. Likewise, when I omit INBOX in the command, only Sent, Trash, Spam and Templates are created, but not Drafts. With only one mailbox parameter, I get an error message about incorrect usage. When I enter the command without the "-s"-Parameter, all given mailboxes are created. As a workaround, I have to use the command without "-s" first and then call "doveadm mailbox subscribe". Regards Christoph

2 1

[Dovecot] Force STARTTLS on port 143 for !internalnetwork
by Ralf Hildebrandt 09 Feb '11

09 Feb '11

Hi! How can I force users which are connecting from OUTSIDE our newtworks to user STARTTLS on Port 143? Right now we resort to IMAPS on port 993, but an additional STARTTLS enabled login on the default port would make things easier! -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebrandt(a)charite.de | http://www.charite.de

3 5

[Dovecot] Dovecot + Solr does not index without break-imap-search?
by Jose Álvaro Domínguez Díaz 09 Feb '11

09 Feb '11

Hi folks, We are working with Dovecot 2.0.9 with Solr support and there is a thing, a little strange for us. Let me explain. We have this conf for Solr: plugin { ... fts = solr fts_solr = url=http:// solr.domain:8983/solr/ break-imap-search quota = maildir ... } With 'break-imap-search', Dovecot connects with solr, solr indexes all, searchs are fast and all works fine. BUT if we don't add 'break-imap-search', solr doesn't index anything. Logs don't report errors with debug/verbose options enabled. Somebody has any idea about this?. Thank you very much for all. Regards. -- Jose Álvaro Domínguez adominguez(a)yaco.es Yaco Sistemas S.L. http://www.yaco.es/ C/ Rioja 5, 41001 Sevilla Teléfono +34 954 50 00 57 Fax +34 954 50 09 29

2 1

[Dovecot] dsync problem
by Frank Bonnet 09 Feb '11

09 Feb '11

hello I try to convert from mbox to mdbox using dsync i get the followin error using the following command dsync mirror -u toto mbox:/user/toto:INBOX=/var/mail/toto I get this error message : mail3# dsync mirror -u toto mbox:/user/toto:INBOX=/var/mail/toto dsync(root): Fatal: execvp(-u) failed: No such file or directory dsync-local(root): Error: read() from worker server failed: EOF any infos welcome thanks

3 4

[Dovecot] Permissions in shared folders
by Lukas Haase 09 Feb '11

09 Feb '11

Hi, On my mail server I want to implement shared folders for each workgroup where there are many workgroups. One way would be to create a separate namespace for each workgroup. However, this does not scale well so I decided to use a single Shared mailbox and use ACLs: namespace public { separator = . prefix = Shared. location = maildir:/var/mail/shared:CONTROL=~/Maildir/shared } Each workgroup should get a subfolder in "Shared". Until now, this works, I create .Group1, .Group2 and assign correct group permissions and ACL files. However, now a user from group1 wants to create a subfolder in his IMAP folder. Since the permissions for /var/mail/shared/.Group1 are correct (writeable to group1 and the user is member of group1 and 'k' ACL permissions are active) I would expect it to work. However, for obvious reasons, the *sub*folder is created as /var/mail/shared/.Group1.Subfolder so it is actually not a subfolder in sense of the filesystem but rather a folder inside /var/mail/shared However, the user does (and should) not have write permissions to /var/mail/shared (only to /var/mail/shared/.Group1). Is there a way to overcome this problem? Why can't dovecot just use /var/mail/shared/.Group1/.Subfolder? Is there an option to do so? It would make everything a lot easier. The one option is to make /var/mail/shared world-writeable - which is not really a good option. A second option might be to use ACLs and give each group write permissions to /var/mail/shared. However, not even this seems very "clean" to me. What is the best way to handle this? Best regards, Luke

3 9

[Dovecot] ldap: LDAP attribute used multiple times. This is currently unsupported
by Lukas Haase 09 Feb '11

09 Feb '11

Hi, I have a problem when migrating from dovecot 1.0 to dovecot 1.2 (Debian lenny to Debian squeeze). In my dovecot-ldap.conf I have: user_attrs = homeDirectory=home,uidNumber=uid,gidNumber=gid,uid=system_groups_user I use the last parameter for the groups which I need for shared folders. If I only use this, everything works. However, I also use LDAP as passdb with prefetch: pass_attrs = uid=user,userPassword=password,homeDirectory=userdb_home,uidNumber=userdb_uid,gidNumber=userdb_gid,uid=userdb_system_groups_user In this configuration I get the error in the subject line that uid is used multiple times. I know, but the message is somehow "weird" since it says it is *currently* unsupported. However, it seems to me that it is not supported any more. Is this true? Is there a reason for this? How can I fix this problem? Until now my shared folders do not works anymore because the group memberships are not assigned any more because of the missing system_groups_user parameter. Best regards, Luke

2 4

[Dovecot] critical feature from version 1 not migrated to version 2 = authentication configuration database per IP
by DaLiV＠apollo.lv 09 Feb '11

09 Feb '11

not possible make operation with dovecot version 2.x as was possible in version 1.x: requisites description: connect to dovecot service on IP1 - dovecot must serve users that related to domain1 located in database1 connect to dovecot service on IP2 - dovecot must serve users that related to domain2 located in database2 login must be with username that form not as "user@domain" but simple "user" databases may contain identical username, but they have different passwords existing version 1 config file, that allow such configuration: -------- /etc/dovecot.conf BEGIN ---------------- server mail.domain1.tld { protocols = imaps pop3s pop3 ssl_cert_file = /etc/pki/cert1.pem ssl_key_file = /etc/pki/cert1.key listen = 123.123.123.1 ssl_listen = 123.123.123.1 default_mail_env = mbox:/tmp:INBOX=/var/mail/domain1.tld/%n:INDEX=MEMORY pop3_uidl_format = %08Xu%08Xv auth default { mechanisms = plain passdb ldap { args= /etc/dovecot-ldap.conf.domain1.tld1 } userdb ldap { args= /etc/dovecot-ldap.conf.domain1.tld1 } } login_process_per_connection = yes login_max_processes_count = 4 login_processes_count = 1 } server mail.domain2.tld { protocols = imaps pop3s pop3 ssl_cert_file = /etc/pki/cert2.pem ssl_key_file = /etc/pki/cert2.key listen = 123.123.123.2 ssl_listen = 123.123.123.2 default_mail_env = mbox:/tmp:INBOX=/var/mail/domain2.tld/%n:INDEX=MEMORY pop3_uidl_format = %08Xu%08Xv auth default { mechanisms = plain passdb ldap { args= /etc/dovecot-ldap.conf.domain2.tld2 } userdb ldap { args= /etc/dovecot-ldap.conf.domain2.tld2 } } login_process_per_connection = yes login_max_processes_count = 4 login_processes_count = 1 } -------- /etc/dovecot.conf END ---------------- /etc/dovecot-ldap.conf.domain1.tld and /etc/dovecot-ldap.conf.domain2.tld refers to different ldap databases

2 2

[Dovecot] Great time savings backing a mdbox versus Maildir
by Javier Miguel Rodríguez 09 Feb '11

09 Feb '11

Hello I am writing to this mailing list to thanks Timo for dovecot 2 & mdbox. We have almost 30.000 active users and our life was sad with Maildir & backup: 24 hours for a full backup with bacula (zlib enabled maildirs, 1.4 TB). After switching to mdbox, the backup time is under 12 hours ! Instead of backing 17 millions files, with mdbox our backup is only of 1 million files, and that speeds up a lot the backup operation. Timo, here you have detailed info about the bacula backup jobs, you can use them in the wiki if you desire. If you need aditional info (hardware specs, dovecot config, etc) I can share it. *Maildir:* |//Job: Backup_Linux_buzon_us.2011-01-21_19.03.26_38 Backup Level: Full Client: "buzon_us" 2.0.3 (06Mar07) x86_64-redhat-linux-gnu,redhat,Enterprise release FileSet: "Full Buzon" 2011-01-21 19:03:26 Pool: "Pool_Linux_Buzones_US" (From Job resource) Catalog: "MyCatalog" (From Client resource) Storage: "File" (From command line) Scheduled time: 21-ene-2011 19:03:20 Start time: 21-ene-2011 19:03:29 End time: 22-ene-2011 19:46:45 Elapsed time:*1 day 43 mins 16 secs* Priority: 10 FD Files Written: 16,903,801 SD Files Written:*16,903,801* FD Bytes Written: 1,445,943,227,706 (1.445 TB) SD Bytes Written: 1,448,983,971,450 (1.448 TB) Rate:*16247.3 KB/s* Software Compression: None VSS: no Encryption: no Accurate: no Volume name(s): Buzones_US_2 Volume Session Id: 26 Volume Session Time: 1295511704 Last Volume Bytes: 1,450,628,892,676 (*1.450 TB*) Non-fatal FD errors: 0 SD Errors: 0 FD termination status: OK SD termination status: OK Termination: Backup OK//| *mdbox with mdbox_rotate_size=10m:* |Build OS: x86_64-redhat-linux-gnu redhat Enterprise release JobId: 3587 Job: Backup_Linux_buzon_us.2011-02-07_08.13.52_53 Backup Level: Full (upgraded from Incremental) Client: "buzon_us" 2.0.3 (06Mar07) x86_64-redhat-linux-gnu,redhat,Enterprise release FileSet: "Full Buzon" 2011-01-21 19:03:26 Pool: "Pool_Linux_Buzones_US" (From Job resource) Catalog: "MyCatalog" (From Client resource) Storage: "File" (From command line) Scheduled time: 07-feb-2011 08:13:44 Start time: 07-feb-2011 08:13:54 End time: 07-feb-2011 19:43:50 Elapsed time:*11 hours 29 mins 56 secs* Priority: 10 FD Files Written:*1,148,780* SD Files Written: 1,148,780 FD Bytes Written:*1,537,062,152,773 (1.537 TB)* SD Bytes Written: 1,537,218,147,402 (1.537 TB) Rate:*37130.7 KB/s* Software Compression: None VSS: no Encryption: no Accurate: yes Volume name(s): Buzones_US_4|Buzones_US_5 Volume Session Id: 101 Volume Session Time: 1296724657 Last Volume Bytes: 438,873,898,586 (438.8 GB) Non-fatal FD errors: 0 SD Errors: 0 FD termination status: OK SD termination status: OK Termination: Backup OK| Regards Javier de Miguel University of Seville

4 8