- dovecot - dovecot.org

[Dovecot] Migration from UW-IMAP
by Daniel Senie 14 Dec '10

14 Dec '10

I am attempting to test out dovecot on a server on a separate IP address from the live, functioning UW-IMAP. I am having mixed results with dovecot. An entirely new account that's never been used with UW-IMAP seems to work fine, but that's really not the point of the exercise. If I try changing over an existing account to use dovecot, I get a variety of issues. Testing with Apple Mail.app, if I synchronize the account, the INBOX stops displaying. So off to plan B, and debug via command line commands. I tried connecting to Dovecot. It was able to list the mailboxes for me. I asked for status on INBOX. Sometimes I get an error back in the IMAP stream, sometimes not. Either way, the log shows complaints about creating mail/.imap and below (we use mbox format, plus /var/mail/%u for inbox). I have active namespace compatibility recommended by the Wiki so that clients specifying "mail/" and clients not specifying an imap path both work. With the test account, I proved this functionality is working. At this point I clearly have some issues, and could use some help figuring out what to ask for help with, i.e. how to proceed to debug this without damaging the existing UW-IMAP setup in the process. The goal is to cut over to dovecot once I can be sure it really is working compatibly, but until then I have a large user base and can't blow everything up. And yes, I really, truly have RTFM (i.e. read the Wiki, the troubleshooting pages, the migration pages).

2 2

[Dovecot] Incorrect W value after filesystem corruption
by Bob 14 Dec '10

14 Dec '10

Dec 14 00:15:54 vm dovecot: IMAP(####@####): Maildir filename has wrong W value: /var/vmail/#####/####/cur/#########.M###########.??.????.??.??,S=4951,W=5057:2,RSa Dear Dovecot elite, This morning I woke up to find my mail server hard disk controller had gone crazy and decided to corrupt my file system. After over eight passes with the fsck and a new machine I have mostly recovered but this being a personal server the backups were a half-job. So for speed I recovered the mail directly off the bad file system. Most of the data was fine but a few files were corrupt and as a result I have found Dovecot to be a real pain when it comes to handling a wrong W value. I am having to separately look at the mail.log and just systematically remove the W value as a quick work-around. But it seems to me that it would be much easier to have this done by Dovecot when it realises it has this wrong value, especially as Dovecot seems to drop the connection of that user after encountering this problem. Can I suggest as an improvement this scenario is handled better? I saw one posting which said "this should never happen" but clearly it can and I think there could be better handing of it perhaps? Regards, Bob ============== I am configured as vmail with MySQL back-end, postfix, policyd-weight and mailscanner. # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.26-2-amd64 x86_64 Debian 5.0.7 ext3 base_dir: /var/run/dovecot/ log_timestamp: %Y-%m-%d %H:%M:%S protocols: imaps pop3s ssl_cert_file: xxx ssl_key_file: xxx login_dir: /var/run/dovecot//login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login mail_max_userip_connections(default): 30 mail_max_userip_connections(imap): 30 mail_max_userip_connections(pop3): 10 first_valid_uid: 150 last_valid_uid: 150 mail_privileged_group: mail mail_location: maildir:/var/vmail/%d/%u mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 lda: postmaster_address: postmaster(a)orbit.me.uk sendmail_path: /usr/lib/sendmail auth_socket_path: /var/run/dovecot/auth-master mail_plugins: sieve auth default: user: nobody passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: sql args: /etc/dovecot/dovecot-sql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 432 user: vmail group: mail plugin: trash: /etc/dovecot/dovecot-trash.conf sieve: /var/vmail/%d/%u/.sieve sieve_global_path: /var/vmail/globalsieverc

2 1

[Dovecot] Courier-mta with Dovecot LDA
by komodo 14 Dec '10

14 Dec '10

Hi all I have setup dovecot lda instead of maildrop on my courier server. Delivery is working, sieve plugin too, but i can't figure out why lda can't send emails via sendmail (vacation). I always get error Error: Sendmail process terminated abnormally, exit status 67 And i know why, but i don't know how to setup lda to make it work . Here is .courier file where is redirect to lda. | /usr/libexec/dovecot/deliver -a $RECIPIENT -f $SENDER But the deliver does not pass recipient address to sendmail. Here is some output of strace execve("/usr/libexec/dovecot/deliver", ["/usr/libexec/dovecot/deliver", "-a", "komodo@somedomain", "-f", "someuser@somedomain"], [/* 22 vars */]) = 0 So it's clear that deliver have those variables, but then i can see this execve("/usr/sbin/sendmail", ["/usr/sbin/sendmail", "-i", "-f", "<>", "--", "someuser@somedomain"], [/* 2 vars */] <unfinished ...> And there is empty -f , so here is the problem. How should i setup this to make it work correctly ? Here is my config [root(a)OVZ.mail ~]# dovecot -n # 2.0.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-194.8.1.el5.028stab070.5 x86_64 CentOS release 5.5 (Final) disable_plaintext_auth = no hostname = ovzmail listen = 10.0.10.34 mail_location = maildir:~/Maildir managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mbox_write_locks = fcntl namespace { inbox = yes location = prefix = INBOX. separator = . type = private } namespace { location = maildir:/home/shared/Maildir prefix = spam_learner. separator = . type = public } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap sieve ssl_cert = </etc/pki/dovecot/certs/server.pem ssl_key = </etc/pki/dovecot/private/server.pem userdb { driver = prefetch } protocol lda { mail_plugins = " sieve" } protocol imap { mail_max_userip_connections = 40 } Many thanks Martin

1 0

[Dovecot] WLM and dovecot
by Agim Cami 14 Dec '10

14 Dec '10

Windows Live Mail seems to be a nice IMAP client! Do you have good or bad experiences of WLM with dovecot as server? Thanks!

1 0

[Dovecot] FTS and compound searches
by Tony Pyro 13 Dec '10

13 Dec '10

Hello, New subscriber here. I noticed that the FTS index is not used in compound searches. Is this expected? Tested in 2.0.0 and 2.0.8: . search BODY "waldo" * SEARCH . OK Search completed (0.000 secs). . SEARCH CHARSET UTF-8 OR SUBJECT "waldo" FROM "waldo" * SEARCH . OK Search completed (1.768 secs). . SEARCH CHARSET UTF-8 OR SUBJECT "waldo" BODY "waldo" * OK Searched 0% of the mailbox, ETA 9605:25 * OK Searched 4% of the mailbox, ETA 6:39 * OK Searched 6% of the mailbox, ETA 6:58 * OK Searched 8% of the mailbox, ETA 6:54 It's a problem for us because the Afterlogic webmail client does not offer a body-only search. The two search options are From + To + Subject, or "entire messages", which puts together a large OR query: SRCH1069 SEARCH CHARSET UTF-8 OR (OR (OR FROM "waldo" TO "waldo") SUBJECT "waldo") BODY "waldo" I also checked to see whether the header fields are included in the FTS index but it didn't appear so. I got more results from the search "TO gmail.com" than from "BODY gmail.com" plugin { fts = squat } protocol imap { mail_plugins = " fts fts_squat" } Thanks!

3 4

[Dovecot] postfix-dovecot-sasl help
by Ted To 13 Dec '10

13 Dec '10

I'm trying to set up SMTP authentication on my server and am getting an authentication failed error. My client is set up to automatically select authentication method and tries CRAM_MD5. The http://wiki.dovecot.org/HowTo/PostfixAndDovecotSASL suggests "passdb pam" and "userdb passwd" -- is it possible to configure sasl authentication using a dovecot.conf like http://pastebin.com/6JWE5jp1? Thanks in advance, Ted To

3 7

[Dovecot] Question about "slow" storage but fast cpus, plenty of ram and dovecot
by javierdemiguel＠us.es 13 Dec '10

13 Dec '10

Hello We are using dovecot 1.2.x. In our setup we will have 1200 concurrent imap users (maildirs) and we have 2xraid5 sas 15k diks mounted by iSCSI. The dovecot server (RHEL 5 x64) is a virtual machine in our vmware esx cluster. We want to minimize disk I/O, what config options should we use. We can "exchange" CPU & RAM to minimize disk i/o. Should we change to dovecot 2.0? Maybe mdbox can help us? Maybe ext4 instead of ext3? Any idea is welcome. Regards Javier

7 9

[Dovecot] Pigeonhole 0.2.2 - managesieve supports virtual namespaces?
by Tom Talpey 13 Dec '10

13 Dec '10

I got around to trying the 0.2.2 managesieve listener and it's not working for me. As soon as the client authenticates, the connection is closed and the following is logged on the server: > Dec 13 11:48:30 managesieve(xx(a)yy.com): Error: user xx(a)yy.com: Initialization failed: Namespace 'Mobile/': Unknown mail storage driver virtual > Dec 13 11:48:30 managesieve(xx(a)yy.com): Error: Invalid user settings. Refer to server log for more information. I do have such a virtual namespace defined in dovecot.conf, obviously, and it works fine with dovecot 2.0.8. Additionally, the sieve plugin is working fine for lda, dovecot's deliver is executing it perfectly. Do I need to add a setting or plugin to "protocol managesieve" for this? Combed the wiki to no avail.

2 2

[Dovecot] extra fields with "passwd" userdb
by Patrick McLean 13 Dec '10

13 Dec '10

Hi, I am planning a migration of ~600 accounts to mdbox (from maildir) and was hoping to do some initial testing of certain account. I am hoping to use extra fields to migrate certain accounts in advance for testing, and I can't find info on setting up extra fields with the "passwd" backend. Is this possible, or will I have to use another approach?

4 7

[Dovecot] Feature request
by Nikita Koshikov 13 Dec '10

13 Dec '10

Hello Timo, and all. Preface: From time to time we have problems with thunderbird. The problem is that mail client begin to sync users inbox (or other folder) and this process didn't stop. Last time we have this situation - our monitoring system shows unusual amount of imap traffic send to one of local hosts. This host was - terminal server and 20 users worked with their mailboxes that time. But normal 20 imap session can't fork that amount of traffic (5.2Gb). After measuring local thunderbird's cached mailboxes we find out that one user have local INBOX about 19Gb and size is rising. On server side - this mailbox was 89Mb. And after killing thunderbird in logs appear: Dec 10 17:35:53 IMAP(user@domain 192.168.2.92): Info: Disconnected: Logged out bytes=1133593/1175103 Dec 10 17:35:53 IMAP(user@domain 192.168.2.92): Info: Disconnected: Logged out bytes=15964/44364 Dec 10 17:35:53 IMAP(user@domain 192.168.2.92): Info: Disconnected: Logged out bytes=54758/944989 Dec 10 17:35:53 IMAP(user@domain 192.168.2.92): Info: Disconnected: Logged out bytes=6532/43930 Dec 10 17:35:53 IMAP(domain@domain 192.168.2.92): Info: Connection closed bytes=235408/4797272694 As you can see - 4.8Gb of data was send to this client - and who knows - what was that. So we have 5.2Gb send to host with 20 active sessions and 4.8Gb send to one user. Of course lifetime of this connection can be much more than last day, but problem disappeared after killing it. This is not single accident. But this one was hard to find out because of 20-25 users working at the same time from 1 server. So it will be great if dovecot has feature to limit the amount of data send per connection. For example: service imap { bytes_per_connection = 100Mb } And after limit reached - close connection and log warning. This will much simplify fights with sometimes become crazy imap clients. That do you think?

3 7

[Dovecot] limit login concurencly from different ip
by Giovanni Mancuso 13 Dec '10

13 Dec '10

Hi, can i configure dovecot to limit the max number of login concurencly? I read in documentation that there is "mail_max_userip_connections", but in this way i limit the login that come from same ip. If the same user tries to connect from different ip, he succeeds. Can i do it? Thanks

2 3

[Dovecot] Quota warning generated when crossing on both sides
by Harm van Tilborg 13 Dec '10

13 Dec '10

Hello everyone, I'm experimenting with the quota warning plugin. I have the following setting in Dovecot's general config: plugin { quota_warning = storage=75%% /var/www/contrib/doquotawarning.py 75 quota_warning2 = storage=90%% /var/www/contrib/doquotawarning.py 90 } The doquotawarning.py script is working okay -- meaning that the user gets a warning. My SQL backend uses the following query: user_query = \ SELECT m.maildir AS home, 1001 AS uid, 1001 AS gid, \ CONCAT('*:bytes=', m.quota, 'M') AS quota_rule, \ 'Trash:ignore' AS quota_rule2 \ FROM mailbox m \ INNER JOIN domain d \ ON d.id = m.domainid \ WHERE d.domain = '%d' \ AND m.user = '%n' Where m.quota is the user's personal quota (in MB). As you can see, we ignore the 'Trash' box, when considering the usage data. We are using the dict quota backend. Now this is what happens. Assume we have 'user(a)example.org', that has a quota of 10MB and he currently has 5MB in use. Now someone sends a 3MB email towards 'user(a)example.org'. Dovecot does indeed generate the warning message (75%), that arrives correctly 'together' with the 3MB email. Now the user moves the 3MB email to trash. This goes well, however: Dovecot generates the 75% warning message again. Which is not necessary: the user was cleaning his mailbox, i.e. usage is 5MB again. I have the feeling Dovecot is generating the warning event twice. When getting from e.g. 50% to 79% and when the usage is lowered from 87% to 70%. I have the feeling this is either not the correct behavior, or I'm misinformed. When looking at the source, this shouldn't be happening: if ((bytes_before < (uint64_t)warnings[i].rule.bytes_limit && bytes_current >= (uint64_t)warnings[i].rule.bytes_limit) || (count_before < (uint64_t)warnings[i].rule.count_limit && count_current >= (uint64_t)warnings[i].rule.count_limit)) { quota_warning_execute(root, warnings[i].command); break; } We're using Dovecot 1.2.9 (Ubuntu's 10.04 LTS version). -- Kind regards, Harm van Tilborg

2 1

[Dovecot] Crash in 2.0.8 dovecot/imap - information capture
by Tom Talpey 13 Dec '10

13 Dec '10

My dovecot logs revealed a crash in the dovecot/imap process a few days ago. It appears to have dereferenced 0x00000004 in the storage shared lib. Unfortunately, I didn't get a core and I'm not sure how to reproduce it. Dovecot 2.0.8 on linux32. Two questions: 1) How can I be sure I get a core next time? I think it's because I run dovecot/imap under a mail uid and didn't have write permission to the cwd. Any way to verify that was it, and be sure it works? 2) What other settings would provide more info if it happens again? Thanks! dovecot.log excerpt: Dec 10 08:43:53 master: Error: service(imap): child 30862 killed with signal 11 (core dumps disabled) Dec 10 08:43:53 imap-login: Info: Login: user=<xx(a)yy.com>, method=PLAIN, rip=169.254.100.10, lip=169.254.100.100, mpid=2243 kernel dmesg: imap[30862]: segfault at 4 ip b772ecd2 sp bfc90f90 error 4 in libdovecot-storage.so.0.0.0[b76e9000+b8000] [~] # dovecot -n # 2.0.8: /etc/dovecot/dovecot.conf # OS: Linux 2.6.33.2 i686 ext4 (not sure of exact config at time of crash, will capture next)

2 1

[Dovecot] Right auth scheme for MS clients?
by Agim Cami 13 Dec '10

13 Dec '10

What will be the right authentication scheme for a mail system with Microsoft Outlook as client and shadow passwords for Linux system users?

2 1

[Dovecot] director errors
by Cor Bosman 13 Dec '10

13 Dec '10

Hi Timo, im getting some director errors. Dec 13 10:11:25 imapdirector1 dovecot: director: Error: User hash 3608614717 is being redirected to two hosts: 194.109.26.171 and 194.109.26.141 Dec 13 10:11:25 imapdirector1 dovecot: director: Error: User hash 755231546 is being redirected to two hosts: 194.109.26.132 and 194.109.26.154 Dec 13 10:11:25 imapdirector1 dovecot: director: Error: User hash 2468924024 is being redirected to two hosts: 194.109.26.135 and 194.109.26.159 Dec 13 10:11:25 imapdirector1 dovecot: director: Error: User hash 3275820100 is being redirected to two hosts: 194.109.26.134 and 194.109.26.160 Dec 13 10:11:25 imapdirector1 dovecot: director: Error: User hash 1674197395 is being redirected to two hosts: 194.109.26.137 and 194.109.26.159 Dec 13 10:11:25 imapdirector1 dovecot: director: Error: User hash 1753370669 is being redirected to two hosts: 194.109.26.134 and 194.109.26.171 Dec 13 10:11:25 imapdirector1 dovecot: director: Error: User hash 3760447994 is being redirected to two hosts: 194.109.26.131 and 194.109.26.141 Dec 13 10:11:25 imapdirector1 dovecot: director: Error: User hash 3687955574 is being redirected to two hosts: 194.109.26.171 and 194.109.26.158 Dec 13 10:11:26 imapdirector1 dovecot: director: Error: director(194.109.26.174:444/right): Handshaking timed out Dec 13 10:11:26 imapdirector1 dovecot: director: Error: Director 194.109.26.174:444/right disconnected Ive got 37 director_mail_servers and 2 director_servers. Cor

1 0

[Dovecot] Новое сообщение
by Vovan 13 Dec '10

13 Dec '10

http://samec.org.ua/

1 0

[Dovecot] director_user_expire
by Cor Bosman 11 Dec '10

11 Dec '10

Would it be ok to set director_user_expire to a very high value? Say 1 day? This would pretty much lock a user into a specific server right? What if I set it to 1 year? :) What happens when the server a user is locked into disappears (i remove it from the pool). Then a day later, I add the server again. Is the user now locked to the new server, or will he revert back to the old server? Cor

1 0

[Dovecot] imap_logout_format don't understand %r variable
by Nikita Koshikov 10 Dec '10

10 Dec '10

Hello list, Dovecot version 1.2.16. In protocol imap section I have imap_logout_format = ip=%r bytes=%i/%o But when user disconnecting, to log file dovecot write: IMAP(user@domain): Info: Disconnected: Logged out ip= bytes=954/8644 Is this suppose to work ?

2 2

[Dovecot] Delay email!
by Henrique Fernandes 10 Dec '10

10 Dec '10

I am using postfix + dovecot 2.0.6 + mailman And others 2 serves with only postfix and dovecot writing at same storage with OCFS2. We are having problens with IOwait, and still trying to figure out why that is happen! But, problem becomes much worse when some emails are used in mailman, when it happens all 3 serves became really slow. iowait goes to 80. Does anyone have an idea how to slow down the dovecot lda ? I want it to nit to iwrite so much email, at least take a small break between each mail!! Any ideias? Thanks! []'sf.rique

2 4

Re: [Dovecot] IMAP aggregation and MUPDATE protocolo
by Timo Sirainen 10 Dec '10

10 Dec '10

(Second time already within a few days when I accidentally hit reply rather than reply-to-all and then wonder why the message isn't showing up.) On 24.11.2010, at 14.16, Ernesto Revilla Derksen wrote: > We're trying to find a solutions for aggregating data from several > backends which are: > * normal mail IMAP > * repositories like Alfresco which offer an IMAP view for repository documents I'm planning on implementing "IMAP client" backend for lib-storage, which means you could create namespaces that are proxied to remote IMAP server. Or even make Dovecot act as a caching IMAP proxy for your real IMAP server. > * issue trackers (issue + attachmentes + timeline) I guess it could be possible to implement lib-storage backend for these too. :) Or maybe create some new simpler protocol that you can easily implement for them, and then create a lib-storage backend for that.

4 6

[Dovecot] Execute Script on LMTP Deliver?
by Edward Carraro 10 Dec '10

10 Dec '10

Is it possible to have dovecot 2.0.8 using LMTP run a shell script each time it delivers a message to a users mailbox? I see there's an "execute = script /path/to/script" but when i added it to lmtp service in 10-master.conf, it didnt do anything and stopped delivering mail altogether service lmtp { executable = script /usr/local/bin/test.sh u% unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix user = postfix } inet_listener lmtp { port = 24 } } $ ls -lh | grep test -rwxrwxrwx 1 root staff 270 2010-12-09 18:05 test.sh $ cat test.sh #!/bin/sh USER=$1 echo $USER > /tmp/newfile basically when a message arrives, it will execute a shellscript which will notify another service that mail has arrived in their inbox

2 2

[Dovecot] Phantom INBOX in 1.2. Is there a stable .deb of 2.0?
by ian+dovecot＠comtek.co.uk 10 Dec '10

10 Dec '10

Hi, We've been running 1.2 Dovecot for a while and are happy with it. In trying to migrate from symlinks to shared folders I see a similar problem to that shown at http://www.mail-archive.com/dovecot@dovecot.org/msg32083.html . For example: . lsub "" "*" * LSUB () "." "Users..INBOX" The advice given in the thread is to upgrade to 2.0. We currently use Debian's 1.2 package and I'm reluctant to move since I can't find a stable 2.0 .deb (http://wiki2.dovecot.org/PrebuiltBinaries only has repository heads of 2.0). Building from source is an option but I'd really prefer to be using a package. Can anybody advise on an appropriate way to go? Like the original poster I am seeing INBOX under the shared namespace when I try to share. I'm also getting an empty /var/mail/virtual/users/Maildir created (maildir:/var/mail/virtual/users/%n/Maildir/). We formerly had an INBOX prefix namespace from a Courier migration too, but it has been deleted (to no avail). Shared folders do work, though. It just requires 'anyone l' in /etc/dovecot/dovecot-acls/.DEFAULT (though I'd really rather not do this!). Thanks for any help, Ian ######## mail_location = maildir:/var/mail/virtual/users/%n/Maildir/ namespace private { separator = . prefix = inbox = yes } namespace shared { separator = . prefix = Users.%%n. location = maildir:/var/mail/virtual/users/%%n/Maildir/:INDEX=~/shared/%%u subscriptions = no list = children } namespace public { separator = . prefix = Shared. location = maildir:/var/mail/virtual/public:INDEX=~/public subscriptions = no } auth default { mechanisms = plain passdb ldap { args = /etc/dovecot/dovecot-ldap.conf } passdb ldap { args = /etc/dovecot/dovecot-ldap-master.conf master=yes } userdb passwd { } userdb ldap { args = /etc/dovecot/dovecot-ldap-userdb.conf } userdb ldap { args = /etc/dovecot/dovecot-shared-ldap.conf } } plugin { acl = vfile:/etc/dovecot/dovecot-acls:cache_secs=3 acl_shared_dict = file:/var/mail/virtual/shared-mailboxes.db }

1 0

[Dovecot] Released Pigeonhole v0.2.2 for Dovecot v2.0.8
by Stephan Bosch 10 Dec '10

10 Dec '10

Hello Dovecot users, The new Dovecot v2.0.8 release has a few changes that prompted changes in Pigeonhole as well. This means that a new release of Pigeonhole is also necessary, because otherwise things will not compile anymore. Apart from a few rather minor bugfixes, some of which originate in Dovecot, one TODO item has finally been resolved: the reject action uses the LDA mail reject API, meaning that the associated LDA settings now also work for Pigeonhole, as would be expected. Changelog v0.2.2: * LDA Sieve plugin: started using Dovecot LDA reject API for the reject extension. This means that the LDA reject_reason and reject_subject settings now also work for Pigeonhole's LDA Sieve plugin. * Did some work on the new sieve-filter tool. It is mostly functional, but it is not finished yet. * Dovecot change: services' default vsz_limits weren't being enforced correctly in earlier v2.0 releases. Now that they are enforced, you might notice that the default limits are too low and you need to increase them. This problem will show up in logs as "out of memory" errors. See default_vsz_limit and service { vsz_limit } settings. - Imap4flags: fixed segfault bug occurring in multiscript context. - Added version checking to the ManageSieve settings plugin. This plugin was forgotten when the LDA plugin was updated with this change in the previous release. - LDA Sieve plugin: fixed memory leak at deinitialization. The release is available as follows: http://www.rename-it.nl/dovecot/2.0/dovecot-2.0-pigeonhole-0.2.2.tar.gz http://www.rename-it.nl/dovecot/2.0/dovecot-2.0-pigeonhole-0.2.2.tar.gz.sig Refer to http://pigeonhole.dovecot.org and the Dovecot v2.0 wiki for more information. Have fun testing this new release and don't hesitate to notify me when there are any problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

2 2

[Dovecot] Dovecot as IMAP proxy to Exchange
by Hugo Monteiro 09 Dec '10

09 Dec '10

Hello list, I'm looking into the possibility to setup dovecot to act as an IMAP proxy to an Exchange server. Things i know beforehand: - I will not be able to use the ldap (Active Directory) user DN for auth binds (but i discovered that i could could use the user userPrincipalName attribute as bind DN. I tested it using ldapsearch and it worked fine.) - I will not be able to perform any unbinded searches. - The Exchange server is unique, so i can setup a static proxy route to the server. Given the above, i'd like to post some questions: 1 - Will i be able to use auth_bind = yes given the restrictions? My first guess is that this might work if i use something like "auth_bind_userdn = %u(a)example.org" 2 - Will i be able to specify a static route to the exchange server, not having to rely on that information from the AD itself? Another thing i'd like to know is if NTLM auth can be used while dovecot acts only as proxy. Thanks in advance, Hugo Monteiro. -- fct.unl.pt:~# cat .signature Hugo Monteiro Email : hugo.monteiro(a)fct.unl.pt Telefone : +351 212948300 Ext.15307 Web : http://hmonteiro.net Divisão de Informática Faculdade de Ciências e Tecnologia da Universidade Nova de Lisboa Quinta da Torre 2829-516 Caparica Portugal Telefone: +351 212948596 Fax: +351 212948548 www.fct.unl.pt apoio(a)fct.unl.pt fct.unl.pt:~# _

2 1

[Dovecot] Dovecot 1.2/2.0 coexistence guide?
by Tom Talpey 09 Dec '10

09 Dec '10

I am running Dovecot 1.2.16 and considering moving up to 2.0.8. I have found <http://wiki2.dovecot.org/Upgrading/2.0> but there's not a lot about deploying a 2.0 server alongside an existing 1.2. Any hints on a seamless approach to this, especially one that might allow me to upgrade individual users in place, without moving their maildirs into a new tree and still avoid issues with 1.2/2.0 sharing access?

4 11

[Dovecot] sieve plugin does not autocreate folder
by JM 09 Dec '10

09 Dec '10

Sieve plugin does not autocreate folder, defined in sieve filter /etc/dovecot/sieve/default.sieve require ["fileinto"]; # rule:[off] if anyof (header :contains "To" "off(a)***.com", header :contains "Cc" "off(a)****.com") { fileinto "INBOX.off"; stop; } >sievec /etc/dovecot/sieve/default.sieve sievec(root): Debug: Loading modules from directory: /usr/lib64/dovecot sievec(root): Debug: Module loaded: /usr/lib64/dovecot/lib15_notify_plugin.so sievec(root): Debug: Module loaded: /usr/lib64/dovecot/lib20_expire_plugin.so sievec(root): Debug: Effective uid=1030, gid=1030, home=/root sievec(root): Debug: maildir++: root=/root, index=, control=, inbox=/root > mail -f test(a)test.org to off(a)****.com > cat /var/log/dovecot.log : script binary /etc/dovecot/sieve/default.svbin successfully loaded : binary save: not saving binary /etc/dovecot/sieve/default.svbin, because it is already stored : executing script from /etc/dovecot/sieve/default.svbin Namepace : Permission lookup failed from /var/spool/mail/virtual/****.com/****(a)*****.com/.INBOX.off Namepace : Using permissions from /var/spool/mail/virtual/****.com/*****@*****: mode=0700 gid=-1 Namepace : Permission lookup failed from /var/spool/mail/virtual/*****.com/*****(a)****.com/.INBOX.off Namepace : Using permissions from /var/spool/mail/virtual/****.com/****(a)****.com: mode=0700 gid=-1 : msgid=<56918ca75c35458412116ec36d8e7c46(a)*****.com>: failed to store into mailbox 'INBOX.off': Mailbox doesn't exist: INBOX.off Error: sieve: execution of script /etc/dovecot/sieve/default.sieve failed, but implicit keep was successful Info: sieve: msgid=<56918ca75c35458412116ec36d8e7c46(a)*****.com>: stored mail into mailbox 'INBOX' OS - Linux gentoo 2.6.36 x64 dovecot version 2.0.8 dovecot.conf base_dir = /var/run/dovecot/ default_vsz_limit = 1 G mail_debug = yes mail_gid = vmail mail_location = maildir:%h mail_privileged_group = vmail mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation plugin { sieve = ~/.dovecot.sieve sieve_before = /etc/dovecot/sieve/default.sieve sieve_dir = ~/sieve } protocols = imap pop3 sieve service auth { unix_listener auth-master { mode = 0600 user = vmail } } service managesieve-login { vsz_limit = 1 M } protocol lda { auth_socket_path = /var/run/dovecot/auth-master log_path = /var/log/dovecot.log mail_plugins = sieve quota }

3 4

[Dovecot] mutt freezes
by Manoel Prazeres 09 Dec '10

09 Dec '10

Hi Sometimes mutt freezes saying "Closing connection to imap.impa.br...". Any clue? Thanks Manoel === My configuration: User-Agent: Mutt/1.5.21 (2010-09-15) # dovecot -n # 2.0.8: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-194.26.1.el5xen x86_64 CentOS release 5.5 (Final) default_client_limit = 1027 default_process_limit = 512 first_valid_gid = 1000 first_valid_uid = 1001 log_path = /var/log/imapd/imapd.log log_timestamp = "%b %e %H:%M:%S markov " login_log_format_elements = user=<%u> method=%m pid=%p rip=%r lip=%l %c mail_location = mbox:%h/mail:INBOX=%h/mbox:INDEX=/var/local/imapd.indexes/%u mail_log_prefix = "%Us(%u): pid=%p, rip=%r, lip=%l, " mbox_write_locks = fcntl passdb { args = /etc/dovecot/deny-users deny = yes driver = passwd-file } passdb { driver = pam } protocols = imap service imap-login { process_min_avail = 32 } service imap { process_limit = 512 } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } protocol imap { mail_max_userip_connections = 5 }

2 2

[Dovecot] dovecot-lda segfault
by Micha Krause 09 Dec '10

09 Dec '10

Hello, dovecot-lda crashes with a segfault, if I run it as a user who has no mailbox, and no permission to create one. stat("/var/mail/mailboxes/users", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0 getuid() = 21189 geteuid() = 21189 access("/var/mail/mailboxes/users", X_OK) = 0 getuid() = 21189 geteuid() = 21189 access("/var/mail/mailboxes/users", W_OK) = -1 EACCES (Permission denied) geteuid() = 21189 getegid() = 21189 --- SIGSEGV (Segmentation fault) @ 0 (0) --- +++ killed by SIGSEGV +++ dovecot --version 2.0.8 (f9d34d929c3f) Micha Krause

3 3

[Dovecot] mail.err
by Paul Cartwright 08 Dec '10

08 Dec '10

I keep getting this error, and I have no clue where it comes from. I have no localhost in my fetchmailrc file, all I have in main.cf is: mydestination = paulandcilla.homelinux.org, localhost here is some of the entries in /var/log/mail.err: Dec 7 16:00:38 paulandcilla fetchmail[16761]: connection to localhost:smtp [::1/25] failed: Connection refused. Dec 7 16:00:40 paulandcilla fetchmail[16761]: connection to localhost:smtp [::1/25] failed: Connection refused. Dec 7 16:00:43 paulandcilla fetchmail[16761]: connection to localhost:smtp [::1/25] failed: Connection refused. Dec 7 16:10:50 paulandcilla fetchmail[16761]: connection to localhost:smtp [::1/25] failed: Connection refused. Dec 7 16:10:56 paulandcilla fetchmail[16761]: connection to localhost:smtp [::1/25] failed: Connection refused. Dec 7 16:21:05 paulandcilla fetchmail[16761]: connection to localhost:smtp [::1/25] failed: Connection refused. Dec 7 16:21:07 paulandcilla fetchmail[16761]: connection to localhost:smtp [::1/25] failed: Connection refused. Dec 7 16:21:08 paulandcilla fetchmail[16761]: connection to localhost:smtp [::1/25] failed: Connection refused. Dec 7 16:31:18 paulandcilla fetchmail[16761]: connection to localhost:smtp [::1/25] failed: Connection refused. Dec 7 16:31:19 paulandcilla fetchmail[16761]: connection to localhost:smtp [::1/25] failed: Connection refused. Dec 7 16:41:25 paulandcilla fetchmail[16761]: connection to localhost:smtp [::1/25] failed: Connection refused. Dec 7 16:41:26 paulandcilla fetchmail[16761]: connection to localhost:smtp [::1/25] failed: Connection refused. Dec 7 16:41:27 paulandcilla fetchmail[16761]: connection to localhost:smtp [::1/25] failed: Connection refused. all of the mail SENDING on this box comes out of either kmail or thunderbird via my domain host, secure login. -- Paul Cartwright Registered Linux user # 367800

4 19

[Dovecot] passdb pam and userdb passwd "Authentication failure" errors
by Mark Alan 08 Dec '10

08 Dec '10

While using Ubuntu 10.10 + Dovecot 1.2.12 + Postfix 2.7.1-1: To enable virtual accounts, I am using the following /etc/dovecot/auth.d/virtualsomename.auth file: passdb passwd-file { args = /etc/dovecot/passwd } userdb static { args = uid=vmail gid=vmail home=/home/vmail/%u } EOT cat /etc/dovecot/passwd looks like this: test:{PLAIN}pass bill:{PLAIN}secret timo@example.com:{PLAIN}hello123 dave@example.com:{PLAIN}world234 Issuing a 'sudo dovecot -n' shows: .../... auth default: verbose: yes debug: yes debug_passwords: yes passdb: driver: pam passdb: driver: passwd-file args: /etc/dovecot/passwd userdb: driver: passwd userdb: driver: static args: uid=vmail gid=vmail home=/home/vmail/%u .../... and while trying to connect to Dovecot as dave(a)example.com the log shows: 2010-12-04 18:15:58 auth(default): Info: new auth connection: pid=15334 2010-12-04 18:15:58 auth(default): Info: client in: AUTH 1 PLAIN service=smtp nologin lip=127.0.1.1 rip=127.0.1.1 resp=AGRhdmVAZXhhbXBsZS5jb20Ad29ybGQyMzQ= 2010-12-04 18:15:58 auth-worker(default): Info: pam(dave(a)example.com,127.0.1.1): lookup service=dovecot 2010-12-04 18:15:58 auth-worker(default): Info: pam(dave(a)example.com,127.0.1.1): #1/1 style=1 msg=Password: 2010-12-04 18:16:00 auth-worker(default): Info: pam(dave(a)example.com,127.0.1.1): pam_authenticate() failed: Authentication failure (password mismatch?) (given password: world234) 2010-12-04 18:16:00 auth(default): Info: passwd-file(dave(a)example.com,127.0.1.1): lookup: user=dave(a)example.com file=/etc/dovecot/passwd 2010-12-04 18:16:00 auth(default): Info: client out: OK 1 user=dave(a)example.com I have 2 questions: QUESTION 1: To avoid those Authentication failure errors should I also comment out the passdb pam {...} and userdb passwd {...} blocks in the main /etc/dovecot/dovecot.conf? I was thinking in something like: sudo sed -i '/passdb pam {/,/}/s/^/#/' /etc/dovecot/dovecot.conf sudo sed -i '/userdb passwd {/,/}/s/^/#/' /etc/dovecot/dovecot.conf QUESTION 2: the final email arrives with an email header that includes: Received: from desk.example.com (unknown [127.0.1.1]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by mail.example.com (Postfix) with ESMTPSA id F24707FE6D for <example(a)example.com>; Sat, 4 Dec 2010 18:16:00 +0000 (WET) Does this mean that I have SSL/TLS properly configured? The "No client certificate requested" is supposed to be there? Thank you. M.

3 4

[Dovecot] How to handle "Waiting for authentication process..."
by A.L.E.C 08 Dec '10

08 Dec '10

Sometimes, when dovecot authentication processes are busy, dovecot write reply "Waiting for authentication process to respond.." to client. Roundcube webmail do not understand it and invalidate user session. My question is what is a good practise to handle this situation by client software? One Roundcube user proposes to detect such response then wait a moment and try again. Is there any standard for this? How long should we wait? More info here: http://trac.roundcube.net/ticket/1487450 -- Aleksander 'A.L.E.C' Machniak LAN Management System Developer [http://lms.org.pl] Roundcube Webmail Developer [http://roundcube.net] --------------------------------------------------- PGP: 19359DC1 @@ GG: 2275252 @@ WWW: http://alec.pl

2 2

[Dovecot] local seen flags with shared mailboxes
by Tim Mauerbach 08 Dec '10

08 Dec '10

Hello all, after recent upgrade from 2.0.5 to 2.0.8 it seems that local seen flags for mails reside in shared mailboxes doesn´t work anymore. Before the upgrade I had read mails with account #1. Account #2 (who has access via acl) saw the mails still as unread. Now, no matter who read the mails, the other account see the same flags, immediately. I read the related wiki pages again and tried to find any configuration error, unfortunately without much success. I´ve attached output from "doveconf -n" and a debug logfile. Thanks a lot! Tim

2 2

Re: [Dovecot] mail.err
by Karsten Bräckelmann 08 Dec '10

08 Dec '10

Please *do* keep the thread on the list, by replying to the list only. On Tue, 2010-12-07 at 18:07 -0500, Paul Cartwright wrote: > On 12/07/2010 05:25 PM, Karsten Bräckelmann wrote: > > Even though this *really* is not related to dovecot at all, while we're > > here, I might as well try to help nonetheless -- failing with an IPv6 > > address does look familiar. I don't recall the log messages, since I > > mostly debugged with fetchmail directly. > > I don't think I am using IPv6, actually I KNOW I'm not using it, I'm > pretty sure I turned off that functionality.. I don't think my router > supports it.. > I KNOW I didn't try to add that functionality to either fetchmail, > Postfix or Divecot! As I mentioned in another post, your log message clearly shows the IPv6 address is being used. And yes, your host obviously is capable of that. You don't need to specifically enable it with fetchmail. It will under certain circumstances default to IPv6, which in your case happened. As also mentioned, your postfix seems to not bind to the IPv6 address by default, though, or it has deliberately been disabled. Moreover, your router is not even in the picture here -- just like dovecot, FWIW. Fetchmail fetches the mail from a remote server, and tries to deliver it locally. That local delivery step is generating the log messages. A mail, sent from and to your box. Long after the data stream passed your router... [ long snip, including your fetchmailrc general settings ] > I will add what you have there, and see what happens, thanks! -- char *t="\10pse\0r\0dtu\0.@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4"; main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1: (c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}

1 0

[Dovecot] IMAP Timeout Leak
by qmail＠top-consulting.net 08 Dec '10

08 Dec '10

My Dovecot config is as follows: # 1.2.14: /usr/local/etc/dovecot.conf # OS: FreeBSD 6.3-RELEASE i386 protocols: imap pop3 imaps pop3s listen(default): *:143 listen(imap): *:143 listen(pop3): *:110 ssl_listen(default): *:993 ssl_listen(imap): *:993 ssl_listen(pop3): *:995 ssl_ca_file: /usr/local/certs/gd_bundle.crt ssl_cert_file: /usr/local/certs/imap.crt ssl_key_file: /usr/local/certs/rsa.imap.key disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login login_greeting: MAIL ready. login_processes_count: 50 login_max_processes_count: 500 max_mail_processes: 798 mail_max_userip_connections(default): 100 mail_max_userip_connections(imap): 100 mail_max_userip_connections(pop3): 10 verbose_proctitle: yes first_valid_uid: 89 first_valid_gid: 89 mail_privileged_group: mail mail_uid: 89 mail_gid: 89 mail_location: maildir:~/Maildir mmap_disable: yes mail_nfs_storage: yes mail_nfs_index: yes lock_method: dotlock mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota fts fts_solr antispam virtual acl imap_acl mail_plugins(imap): quota imap_quota fts fts_solr antispam virtual acl imap_acl mail_plugins(pop3): virtual mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 imap_client_workarounds(default): delay-newmail netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(imap): delay-newmail netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh namespace: type: private separator: . inbox: yes list: yes subscriptions: yes namespace: type: private separator: . prefix: INBOX. hidden: yes list: no subscriptions: yes namespace: type: private separator: . prefix: Labels. location: virtual:~/Maildir/Labels:INDEX=MEMORY list: yes subscriptions: yes namespace: type: shared separator: . prefix: shared.%%n. location: maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u list: children lda: sendmail_path: /usr/sbin/sendmail auth default: mechanisms: plain login digest-md5 cram-md5 username_format: %Lu verbose: yes passdb: driver: vpopmail args: webmail=192.168.1.4 userdb: driver: vpopmail args: quota_template=quota_rule=*:backend=%q socket: type: listen master: path: /var/run/dovecot/auth-master mode: 384 user: vpopmail plugin: fts: solr fts_solr: break-imap-search url=http://192.168.1.4:8983/solr/ quota: maildir quota_rule: ?:storage=0 antispam_signature: X-DSPAM-Signature antispam_trash: trash;Trash;Deleted Items antispam_spam: Spam antispam_dspam_binary: /usr/local/bin/dspam antispam_dspam_args: --client;--user;vpopmail acl: vfile acl_shared_dict: proxy::acl dict: acl: mysql:/usr/local/etc/dovecot-dict-sql.conf and I see the following error in the logs: Timeout leak: 0x80ff950 Running it through gdb, I get this: (gdb) x 0x80ff950 0x80ff950 <client_dict_timeout>: 0x53e58955 Is it a problem with the ACL plugin ?

2 1

[Dovecot] imap/pop proxy and filter
by Mike Korizek 07 Dec '10

07 Dec '10

Hi I use dovecot as imap/pop proxy. Is it possible to filter the messages before they get delivered to the client? Thanks for any hint how to achieve this. Mike

2 3

[Dovecot] proxy and gpg processing
by Mike 07 Dec '10

07 Dec '10

Hi I have dovecot running as pure proxy for accessing imap and pop mailboxes on other servers. How can I do the following scenario: When a client user reads a gpg signed or gpg encrypted email through the proxy, can I verify/decrypt the email before it gets delivered to the client user? Ideally I would like to write a perl program which processes the email within the proxy before it gets delivered to the user. With Sieve I can not do this, is there another way to achieve this? Thanks for any hint. Mike

1 0

Re: [Dovecot] imap/pop proxy and filter
by Mike Korizek 07 Dec '10

07 Dec '10

On 12/07/2010 12:18 AM, Paul Cartwright wrote: > On 12/06/2010 06:04 PM, Mike Korizek wrote: >> I use dovecot as imap/pop proxy. >> Is it possible to filter the messages before they get delivered to the >> client? >> > > http://wiki.dovecot.org/LDA/Sieve My understanding was, that Sieve requires LDA but I do not have local mailboxes as I only use the imap/pop proxy functionality. Can I use Sieve for mail filtering despite I do not have local mailboxes? Thanks, Mike

1 0

[Dovecot] imap limits please ?
by Spyros Tsiolis 06 Dec '10

06 Dec '10

Hello, Finally managed to sync an outlook client to dovecot. Looks like it's working. Questions though ; : What are the limits? Number of Folders ? Number of mails per folder ? E.g. for a client of mine, I know that she uses about 5Gb of data at the moment (and counting). Now, this same outlook client consists of the following : 1. about thirty (30) folders ranging from 1000 messages per folder to 100 messages per folder 2. A "Sent Items" folder with about 4,000 messages (and counting) 3. A "Deleted Items" folder with about 5,500 messages (and counting) System, now, is a CentOS 5.5 32-bit on an hp/compaq dl360 (G3) with RAID1 76,3Gb Disks UW320 and four (4Gb) of RAM Output of "dovecot -n" : ------------------------------------------------------------ # 1.2.16: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-194.17.4.el5 i686 CentOS release 5.5 (Final) ext3 base_dir: /var/run/dovecot/ log_path: /var/log/dovecot/dovecot.log info_log_path: /var/log/dovecot/dovecot-info.log ssl_parameters_regenerate: 48 verbose_ssl: yes login_dir: /var/run/dovecot//login login_executable: /usr/local/dovecot/libexec/dovecot/imap-login login_greeting: * Dovecot ready * login_max_processes_count: 32 mail_location: maildir:/var/MailRoot/domains/%d/%n/Maildir mail_plugins: zlib auth default: verbose: yes debug: yes debug_passwords: yes passdb: driver: passwd-file args: /etc/dovecot/passwd passdb: driver: pam userdb: driver: static args: uid=vmail gid=vmail home=/home/vmail/%u userdb: driver: passwd ------------------------------------------------------------ Any answer would be greatly appreciated since I am trying to know the systems' limits. Thank you kindly all, spyros ---- "I merely function as a channel that filters music through the chaos of noise" - Vangelis

2 1

[Dovecot] CentOS 5 + selinux
by Marcelo Roccasalva 06 Dec '10

06 Dec '10

I've just installed CentOS 5.5 and dovecot 2.0.7. Out of the box, it worked ok with local user accounts. Then I enable selinux and I could no loger login to imap server. I can deal with that via a local policy. But I found dovecot tried to open /etc/shadow: type=AVC msg=audit(1291490764.101:670): avc: denied { read } for pid=16130 comm="auth" name="shadow" dev=md2 ino=96335 scontext=user_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file type=AVC msg=audit(1291500097.318:818): avc: denied { getattr } for pid=17350 comm="auth" path="/etc/shadow" dev=md2 ino=95396 scontext=user_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file even it is configured for pam passdb: # dovecot -n # 2.0.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-194.26.1.el5 x86_64 CentOS release 5.5 (Final) mbox_write_locks = fcntl passdb { driver = pam } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } I straced the process and it efectively tries to open /etc/shadow. I don't want to disable selinux but I'm not happy letting dovecot read my /etc/shadow. Is there a guide to selinux and dovecot? -- Marcelo "¿No será acaso que ésta vida moderna está teniendo más de moderna que de vida?" (Mafalda)

2 1

[Dovecot] 1.2.15 - segfault if host field attribute not present in ldap. (proxy)
by Mohit Chawla 06 Dec '10

06 Dec '10

In case this is relevant: kernel: [17549.714369] imap-login[11704]: segfault at 0 ip b75c3d23 sp bf888178 error 4 in libc-2.11.2.so[b7551000+140000] If no host field attribute is present in ldap (like mailHost for qmail-ldap), and we are trying to use proxy, then dovecot segfaults. If more information's needed, let me know. Also, somewhat unrelated, but maybe the wiki needs to be edited since using a template as =proxy_maybe=y works, while in wiki its kinda opposite. I don't know of specifics, but should I try using a recent release ?

2 8

[Dovecot] Problem with ACLs
by Micha Krause 06 Dec '10

06 Dec '10

Hi, i want to use unix groups in my ACLs. http://wiki2.dovecot.org/ACL says, I can do that with a post-login script (http://wiki2.dovecot.org/PostLoginScripting) I have verified, that the script is running, and that ACL_GROUPS is correct. But I still can't access the Mailbox. Logfile says: Dec 3 11:19:35 mailint1 dovecot: imap(micha): Debug: acl vfile: reading file /var/mail/mailboxes/shared/mails/server-root/dovecot-acl Dec 3 11:19:35 mailint1 dovecot: imap(micha): Debug: acl vfile: reading file /var/mail/mailboxes/shared/mails/dovecot-acl Im using: dovecot 2.0.7 (5e82c5b1b4a9) Micha Krause

2 2

[Dovecot] Internal Error form delivery from LDAP lookup.
by Jorgen Lundman 06 Dec '10

06 Dec '10

Solaris-x86-10u8 Dovecot-1.2.7 Large mail setup, with quite a few MX servers working well. Generally everything is super. But every now and then, we get "bouts of bad weather" - which only lasts a short time, and curiously nearly always occur when mail is sent to customer mailing lists. I suspect mostly because of that 1 message has multiple recipients within the same domain. Perhaps. Delivery setup as: main.cf: virtual_transport = dovecot dovecot_destination_recipient_limit = 1 dovecot_destination_concurrency_limit=300 master.cf: dovecot unix - n n - 70 pipe flags=DRhu user=dovecot:dovecot argv=/usr/local/libexec/dovecot/deliver -f ${sender} -d ${recipient} Errors look something like: example.com Dec 06 08:46:25 deliver(rbc-005(a)example.com): Info: msgid=<A22A602A940A45A49EA2C4CC53D27655(a)UQC.local>: saved mail to INBOX Dec 06 08:46:25 deliver(rbc-002(a)example.com): Info: msgid=<A22A602A940A45A49EA2C4CC53D27655(a)UQC.local>: saved mail to INBOX Dec 06 08:46:28 deliver(rbc-004(a)example.com): Error: userdb lookup(rbc-004(a)example.com) failed: Internal failure Dec 06 08:46:28 deliver(rbc-011(a)example.com): Error: userdb lookup(rbc-011(a)example.com) failed: Internal failure Dec 06 08:46:28 deliver(rbc-013(a)example.com): Error: userdb lookup(rbc-013(a)example.com) failed: Internal failure Dec 06 08:46:28 deliver(rbc-006(a)example.com): Error: userdb lookup(rbc-006(a)example.com) failed: Internal failure Later on, when it retries, everything goes according to plan and delivery is achieved. Now this is actually due to slapd saying: Dec 6 08:46:25 vmx15.unix slapd[3958]: [ID 763815 local4.debug] connection_input: conn=72057 deferring operation: too many executing And since it happens most frequently with mailing-lists, or mails with many recipients, I would guess it is due to a large number of lookups happening in a very short time. Since dovecot_destination_recipient_limit=1, I believe 'deliver' is only ever called with just one recipient for "-d", and 'deliver' probably-does-not (?) query LDAP for any of the other "To:" addresses in the message body. Is that the case? Secondary, the dovecot-ldap.conf for dovecot-auth has: hosts = 127.0.0.1 172.20.12.33 172.20.12.23 172.20.12.113 So even though localhost's slapd was busy at the time, the other three hosts were definitely not. Is LDAP fail-over ... failing... in this case? How many concurrent queries does dovecot-auth perform? Any way to tweak this value? Admittedly, postfix/dovecot does handle this situation correctly, as 'temporary failure' and mail delivery is merely delayed. But at the same time, it *could* be something with an easy fix as well. Thoughts? Lund -- Jorgen Lundman | <lundman(a)lundman.net> Unix Administrator | +81 (0)3 -5456-2687 ext 1017 (work) Shibuya-ku, Tokyo | +81 (0)90-5578-8500 (cell) Japan | +81 (0)3 -3375-1767 (home)

2 6

Re: [Dovecot] Doveadm import emails
by Timo Sirainen 06 Dec '10

06 Dec '10

On 5.12.2010, at 14.47, Alex Baule wrote: > I have a maildir with 6800 emails and i try to import this to 1000 users. > The import begins well, but in the user 150 the script stop because doveadm > say the directory have wrong file permissions, but the script dont change > notthing and the permissions its ok. What exactly is the error message? Is it always the same specific user, or if you reorder users is it always the 150th?

1 0

[Dovecot] Dovecot v2.1 plans
by Timo Sirainen 06 Dec '10

06 Dec '10

Now that v2.0 seems to be getting stable, I finally started v2.1 branch: http://hg.dovecot.org/dovecot-2.1/ So far there are just some API changes to fix some annoyances and to make it simpler. They'll probably keep coming for a while more to make future work easier. As for larger upcoming features, I'm hoping for: - simplify index files and make it write only via lib-fs (but keep backwards compatibility & make v2.0 forwards compatible) - make lib-storage API support asynchronous and support parallel lookups - use async disk io as much as possible & get rid of all lock waits inside lib-storage -> it'll be ok to have lots of imap/pop3 connections per process, at least for some storage backends - write imap-client lib-storage backend (make it fast using above async stuff - using configurable number of IMAP connections) - this could maybe also be used to access other users' shared mailboxes when it can't be done directly - design a mailbox format (maybe based on dbox) for key-value databases, implement it via lib-fs and implement a lib-fs backend for one such database - merge Apple's CATENATE and URLAUTH patch But if some company desperately wants me to work on other stuff, that list can change. BTW. I'm moving back to Finland in two weeks. Maybe I'll also get some studying done towards my Master's degree. :)

1 0

[Dovecot] Centos 5.5 upgrade to dovecot 1.2
by Agim Cami 06 Dec '10

06 Dec '10

Hello, I am trying to upgrade dovecot from 1.0.7 (the dovecot verison in base repo) to 1.2. The installation of .rpm got from atrpms.net aborted with a dependency error : error: Failed dependencies: libpq.so.5()(64bit) is needed by dovecot-1.2.16-1_114.el5.x86_64 This is strange because the libraries are there : yum list libpq* Installed Packages libpqxx.x86_64 2.6.9-3.el5.rf installed libpqxx-devel.x86_64 2.6.9-3.el5.rf installed Any advice on this ? Thanks! Hello, I am trying to upgrade dovecot from 1.0.7 (the dovecot verison in base repo) to 1.2. The installation of .rpm got from atrpms.net aborted with a dependency error : error: Failed dependencies: libpq.so.5()(64bit) is needed by dovecot-1.2.16-1_114.el5.x86_64 This is strange because the libraries are there : yum list libpq* Installed Packages libpqxx.x86_64 2.6.9-3.el5.rf installed libpqxx-devel.x86_64 2.6.9-3.el5.rf installed Any advice on this ? Thanks! Hello, I am trying to upgrade dovecot from 1.0.7 (the dovecot verison in base repo) to 1.2. The installation of .rpm got from atrpms.net aborted with a dependency error : error: Failed dependencies: libpq.so.5()(64bit) is needed by dovecot-1.2.16-1_114.el5.x86_64 This is strange because the libraries are there : yum list libpq* Installed Packages libpqxx.x86_64 2.6.9-3.el5.rf installed libpqxx-devel.x86_64 2.6.9-3.el5.rf installed Any advice on this ? Thanks! Hello, I am trying to upgrade dovecot from 1.0.7 (the dovecot verison in base repo) to 1.2. The installation of .rpm got from atrpms.net aborted with a dependency error : error: Failed dependencies: libpq.so.5()(64bit) is needed by dovecot-1.2.16-1_114.el5.x86_64 This is strange because the libraries are there : yum list libpq* Installed Packages libpqxx.x86_64 2.6.9-3.el5.rf installed libpqxx-devel.x86_64 2.6.9-3.el5.rf installed Any advice on this ? Thanks! Hello, I am trying to upgrade dovecot from 1.0.7 (the dovecot verison in base repo) to 1.2. The installation of .rpm got from atrpms.net aborted with a dependency error : error: Failed dependencies: libpq.so.5()(64bit) is needed by dovecot-1.2.16-1_114.el5.x86_64 This is strange because the libraries are there : yum list libpq* Installed Packages libpqxx.x86_64 2.6.9-3.el5.rf installed libpqxx-devel.x86_64 2.6.9-3.el5.rf installed Any advice on this ? Thanks! Hello, I am trying to upgrade dovecot from 1.0.7 (the dovecot verison in base repo) to 1.2. The installation of .rpm got from atrpms.net aborted with a dependency error : error: Failed dependencies: libpq.so.5()(64bit) is needed by dovecot-1.2.16-1_114.el5.x86_64 This is strange because the libraries are there : yum list libpq* Installed Packages libpqxx.x86_64 2.6.9-3.el5.rf installed libpqxx-devel.x86_64 2.6.9-3.el5.rf installed Any advice on this ? Thanks! Hello, On a Centos 5.5 installation, I am trying to upgrade dovecot from 1.0.7 (the dovecot verison in base repo) to 1.2. The installation of .rpm got from atrpms.net aborted with a dependency error : error: Failed dependencies: libpq.so.5()(64bit) is needed by dovecot-1.2.16-1_114.el5.x86_64 This is strange because the libraries are there : yum list libpq* Installed Packages libpqxx.x86_64 2.6.9-3.el5.rf installed libpqxx-devel.x86_64 2.6.9-3.el5.rf installed Any advice on this ? Thanks!

3 2

Re: [Dovecot] Dovecot 1.2.16 compiling error
by Timo Sirainen 05 Dec '10

05 Dec '10

On 3.12.2010, at 8.36, Mart Pirita wrote: > RedHat 9 based distro, 2.6.24.2 kernel, OpenSSL 1.0.0a 1 Jun 2010 Hmm. v1.0.0a, really?.. > /usr/src/redhat/BUILD/dovecot-1.2.16/src/login-common/ssl-proxy-openssl.c:950: undefined reference to `OpenSSL_add_all_algorithms' I just hate OpenSSL. You can comment out that line from the code until I figure out what to do about this. That function was supposed to have existed since forever in OpenSSL. Or did the compiling log any warnings?

4 25

[Dovecot] 2.0.8 & enable-header-install
by Tamsy 05 Dec '10

05 Dec '10

Dear List, up to Dovecot 2.07 I used "--enable-header-install" for the Sieve Plugin when configuring Dovecot before compiling. With 2.0.8 I get the following message when running the configure script: "configure: WARNING: unrecognized options: --enable-header-install" Is this intentionally? Is there a substitute directive for Sieve when compiling Dovecot 2.08? Rgds Tamsy

2 2

[Dovecot] Strange config behaviour while using /etc/dovecot/auth.d/somename.auth
by Mark Alan 04 Dec '10

04 Dec '10

While using Ubuntu 10.10 + Dovecot 1.2.12 + Postfix 2.7.1-1: To export the authentication interface to Postfix, besides the usual smtpd_sasl_* lines at postfix, I am using: the following /etc/dovecot/auth.d/somename.auth file: socket listen { client { path = /var/spool/postfix/private/auth-client mode = 0660 user = postfix group = postfix } } But after restarting dovecot and doing a 'sudo dovecot -n' I get: ... socket: type: listen client: path: /var/spool/postfix/private/auth-client mode: 432 user: postfix group: postfix As 660<>432, is this Dovecot 1.2.12's expected behaviour? Thank you. M.

2 2

[Dovecot] Passwords not returned without auth_bind ?
by Mohit Chawla 04 Dec '10

04 Dec '10

Hi, Maybe I am missing something simple, but I can't get users authenticated using password lookups, as opposed to auth_bind. This is how the log looks like when using password lookup: dovecot: auth(default): new auth connection: pid=2449 dovecot: auth(default): client in: AUTH#0111#011PLAIN#011service=imap#011secured#011lip=127.0.0.1#011rip=127.0.0.1#011lport=143#011rport=43458#011resp=<hidden> dovecot: auth(default): ldap(foo,127.0.0.1): pass search: base=uid=foo,ou=people,dc=djb,dc=hell,dc=qua scope=base filter=(accountStatus=noaccess) fields=(none) slapd[1834]: conn=1083 op=1 SRCH base="uid=foo,ou=people,dc=djb,dc=hell,dc=qua" scope=0 deref=0 filter="(accountStatus=noaccess)" slapd[1834]: conn=1083 op=1 SRCH attr=(none) slapd[1834]: conn=1083 op=1 SEARCH RESULT tag=101 err=0 nentries=0 text= dovecot: auth(default): ldap(foo,127.0.0.1): unknown user dovecot: auth(default): ldap(foo,127.0.0.1): pass search: base=ou=people,dc=djb,dc=hell,dc=qua scope=subtree filter=(accountStatus=active) fields=uid,userPassword,homeDirectory,uidNumber,gidNumber,mailQuotaSize slapd[1834]: conn=1084 op=1 SRCH base="ou=people,dc=djb,dc=hell,dc=qua" scope=2 deref=0 filter="(accountStatus=active)" slapd[1834]: conn=1084 op=1 SRCH attr=uid userPassword homeDirectory uidNumber gidNumber mailQuotaSize dovecot: auth(default): ldap(foo,127.0.0.1): result: uid(user)=foo uidNumber(userdb_uid)=1008 gidNumber(userdb_gid)=1008 homeDirectory(userdb_home)=/home/foo mailQuotaSize(userdb_quota_rule=*:bytes=%$)=*:bytes=10000000 dovecot: auth(default): ldap(foo,127.0.0.1): No password returned (and no nopassword) slapd[1834]: conn=1084 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text= dovecot: auth(default): client out: FAIL#0111#011user=foo *dovecot-ldap.pass* uris = ldap://10.5.3.101 dn = uid=dove,ou=people,dc=djb,dc=hell,dc=qua dnpass = debian auth_bind = no ldap_version = 3 base = ou=people,dc=djb,dc=hell,dc=qua scope = subtree pass_filter = (accountStatus=active) pass_attrs = uid=user,userPassword=password,\ homeDirectory=userdb_home,uidNumber=userdb_uid,gidNumber=userdb_gid,mailQuotaSize=userdb_quota_rule=*:bytes=%$ *dovecot-ldap.deny* uris = ldap://10.5.3.101 ldap_version = 3 base = uid=%u,ou=people,dc=djb,dc=hell,dc=qua scope = base auth_bind = no pass_filter = (accountStatus=noaccess) pass_attrs = (none) *dovecot.conf* # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-3-686 i686 Debian squeeze/sid log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap managesieve listen(default): * listen(imap): * listen(managesieve): *:2000 ssl: no disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login mail_privileged_group: mail mail_location: maildir:~/Maildir mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugins(default): quota mail_plugins(imap): quota mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve managesieve_logout_format(default): bytes=%i/%o managesieve_logout_format(imap): bytes=%i/%o managesieve_logout_format(managesieve): bytes=%i%o lda: postmaster_address: bar(a)djb.hell.qua mail_plugins: quota sieve deliver_log_format: msgid=%m: %$ sendmail_path: /usr/lib/sendmail log_path: /var/log/ldaone info_log_path: /var/log/ldatwo debug: yes auth default: debug: yes passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.deny deny: yes passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.pass userdb: driver: prefetch userdb: driver: ldap args: /etc/dovecot/dovecot-ldap.user socket: type: listen master: path: /var/run/dovecot/auth-master mode: 438 plugin: quota: maildir sieve: ~/.dovecot.sieve sieve_dir: ~/sieve

2 5

[Dovecot] SIS errors - was Error from mobile client (Palm Pre)
by Daniel L. Miller 04 Dec '10

04 Dec '10

Continuing to see errors on this with some new messages. Is it possible this has anything to do with zlib plugin, or possibly having a mix of zlib compressed & uncompressed messages with mdbox? I recently added zlib to deliver plugin list. -- Daniel L. Miller, VP - Engineering, SET AM Fire & Electronic Services, Inc. [AMFES] dmiller(a)amfes.com 702-312-5276

2 15