- dovecot - dovecot.org

[Dovecot] Problem with PAM, vpopmail and Roundcube
by ede＠ede.com.ec 12 Oct '13

12 Oct '13

Hello, I have a problem to which I have not been able to find a solution by myself or online. I have Dovecot running together with Qmail on a CentOS server. I need to be able to control which users are allowed IMAP access and at the same time allow IMAP access for all users when the requests are coming from a specific IP. My problem has two parts, detailed below. ----------------------------------------------------------- 1. PAM not working to allow access only for specified users ----------------------------------------------------------- Right now I am controlling IMAP access with [vmoduser -i] in Qmail which is not what I want. I need the IMAP access to be closed for everyone and then specify which users are allowed to access. I tried using [pam.d] for this as per http://wiki.dovecot.org/Authentication/RestrictAccess but although I am not getting any errors, all users are still allowed access unless I block them with [vmoduser -i]. In [dovecot.conf] I have: passdb pam { args = * } In [/etc/pam.d/imap] I have: auth required pam_listfile.so item=user sense=allow file=/etc/imapusers onerr=fail And in [/etc/imapusers] I have specified the only users that should have access. Any ideas why this isn't working? ------------------------------------------------------- 2. Allow access for all users coming from a specific IP ------------------------------------------------------- I have a Roundcube installation running on an external server and I need *all* my users to be able to use the Webmail regardless if they have IMAP or only POP access from their computer or mobile devices. Using PAM I tried in [/etc/pam.d/imap]: auth required pam_listfile.so item=user sense=allow file=/etc/imapusers onerr=fail allow_nets=127.0.0.0/8,192.168.0.0/16,1.2.3.4 ...where the webmail installation would be installed at IP [1.2.3.4]. But no luck! ------------------------------------------------------- Please - if there are anyone with ideas I could really use them. I have been going around in circles for the last couple of weeks and I don't know what to do! Sincerely, Daniel

2 2

[Dovecot] Problem with Dovecot after upgrade to Debian 7.0 (stable)
by Milan Milošević 12 Oct '13

12 Oct '13

Dear all, few days ago I updated Debian to the latest stable and since then Dovecot is not working. I use Dovecot as LDA for Postfix and also for IMAP access. Also I used SASL and everything was ok before update. After I updated to Dovecot 2.1.7 (it used to be 1.x before) it looks like that e-mail delever is working but I can not configure IMAP access to work. All users/passwords are stored as local users in /etc/passwd When I tried to connect to imap log file shows: Oct 12 22:16:16 seenet-mtp dovecot: auth-worker(24788): Debug: pam(user(a)mydomain.com,178.x.y.z): lookup service=dovecot Oct 12 22:17:16 seenet-mtp dovecot: auth: Error: auth worker: Aborted request: Lookup timed out Also tested access opensasl clent and after I tried to log in I have received: * OK Waiting for authentication process to respond.. tar NO [UNAVAILABLE] Temporary authentication failure. [seenet-mtp:2013-10-12 20:20:27] # doveconf -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-686-pae i686 Debian 7.2 auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login auth_verbose = yes auth_verbose_passwords = plain login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c mail_location = maildir:/%h/mail namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } protocols = " imap" service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem syslog_facility = local0 userdb { driver = passwd } Please help, Milan ps. Sorry for my English.

3 4

[Dovecot] Transparent Migration from cyrus to dovecot
by Jogi Hofmüller 12 Oct '13

12 Oct '13

Hi dovecot people, We are in the process of preparing the migration from a cyrus 2.1 installation to dovecot. Dovecot will be installed on new hardware, so we have separated servers that can/will exist in parallel for a while. Our goal is to do the migration without interrupting the service for our users too much. Currently we tend to using dsync. So I am asking for best practice suggestions, tips and hints from people who have done such a thing before. Curiously awaiting your replies ;) Cheers! PS: I am subscribed to the list. So no need to include my address in replies. Thanks! -- j.hofmüller Optimism doesn't alter the laws of physics. - Subcommander T'Pol

7 9

[Dovecot] Dovecot 2.2.6 comression library build error
by Dimitri 11 Oct '13

11 Oct '13

Hi, I'm trying to build Dovecot 2.2.6 under Mageia Linux, and there are two issues. 1. I get the following errors during build, please see http://pastebin.com/RmSRZPip - the compression library requires dlopen/dlsym/etc functions, but the library providing them is not mentioned in the linking command. I've managed to workaround this by adding -ldl to the corresponding src/lib-compression/Makefile.in line. 2. The lib90_sieve_extprograms_plugin.so library gets installed into <libdir>/dovecot/sieve (and it's the only file to reside there), while all other modules are installed into <libdir>/dovecot/modules. Has this been done on purpose? For Mageia package, I've decided to move this file to the standard location. Thanks, Dimitri Mageia Linux packager

1 0

[Dovecot] re-sorting emails in chrono order
by voytek＠sbt.net.au 11 Oct '13

11 Oct '13

dovecot 2.1.1 I access my IMAP folders through SquirrelMail as a result of 'part copying' (probably through web client ? not sure), that is copying/moving some emails, later, the rest, I have a sub folder where I have maybe 30 emails from 2012 appear at the very end like so 2013/2012/2010/.../2006/2005/2012 how can I re-sort ? thanks Voytek

1 0

[Dovecot] Doveadm with a 2nd Instance
by Chris Lasater 11 Oct '13

11 Oct '13

Hi Guys, I am trying to use 2 instances of Dovecot on the same server so I can have a Director managing my connections, everything appears to be working, but I can not use doveadm to control my 2nd instance, but doveconf seems to work fine. [user@server logs]$ doveconf -i Director | grep logs debug_log_path = /home/user/apps/logs/director/director_debug.log info_log_path = /home/user/apps/logs/director/director_info.log log_path = /home/user/apps/logs/director/director.log info_log_path = /home/user/apps/logs/director/director_lmtp.log [user@server logs]$ doveadm -i Director log find Debug: /home/user/apps/logs/dovecot_debug.log Info: /home/user/apps/logs/dovecot_info.log Warning: /home/user/apps/logs/dovecot.log Error: /home/user/apps/logs/dovecot.log Fatal: /home/user/apps/logs/dovecot.log I have stopped and started both my instances so the config running is what is in the config file, but when I use -i Director with doveadm it uses the other instances config. [user@server logs]$ doveadm instance list path name last used running /home/user/apps/dovecot/var/run/dovecot Dovecot 2013-09-26 00:39:14 yes /home/user/apps/dovecot/var/run/director Director 2013-09-26 00:32:31 yes Any ideas, or does anyone have any experience with the Dovecot instance feature? Chris

4 6

[Dovecot] Solr issue with Zlib
by Ricardo Branco 11 Oct '13

11 Oct '13

I have found that if you the fts_solr plugin is listed after Zlib it will cause an indexing problem where any message that was compressed with Zlib is submitted to solr without being uncompressed. The order of the plugins is important. Not sure if this can be fixed but im trying to add a wiki note. -- The information contained in or attached to this email is intended only for the use of the individual or entity to which it is addressed. If you are not the intended recipient, you are not authorised to and must not disclose, copy, distribute, or retain any message or any part of it. If you have received an email in error, please contact the sender and delete the material from any computer. The contents of this email are not for publication unless specifically stated. Furthermore, the information contained in this message, and any attachment(s) thereto, is for information purposes only and may contain the personal views and opinions of the author, which are not necessarily the views and opinions of WENN or its subsidiaries and associated companies. We make every effort to keep our network free from viruses. However, you do need to check this e-mail and any attachments to it for viruses as we can take no responsibility for any computer virus which may be transferred by way! of this e-mail. WENN Ltd: Registered Office: 35 Tileyard Studios, Tileyard Road, London, N7 9AH, England. Registered No: 4375163. Place of Registration: United Kingdom. USA Entertainment News Inc (d/b/a WENN): Registered Office: 352 7th Avenue, Suite 1105, New York, NY 10001-5657, USA The WENN name, design and related marks are trademarks of the WENN group of companies. (c) 2013 All Rights Reserved.

1 0

[Dovecot] ./configure not checking solr deps
by Ricardo Branco 11 Oct '13

11 Oct '13

It seems that when you run ./configure with --with-solr it does not check for deps libcurl and libexpat. When we compiled it silently went though and still compiled without a problem then missed installing solr. Maybe im missing something? -- The information contained in or attached to this email is intended only for the use of the individual or entity to which it is addressed. If you are not the intended recipient, you are not authorised to and must not disclose, copy, distribute, or retain any message or any part of it. If you have received an email in error, please contact the sender and delete the material from any computer. The contents of this email are not for publication unless specifically stated. Furthermore, the information contained in this message, and any attachment(s) thereto, is for information purposes only and may contain the personal views and opinions of the author, which are not necessarily the views and opinions of WENN or its subsidiaries and associated companies. We make every effort to keep our network free from viruses. However, you do need to check this e-mail and any attachments to it for viruses as we can take no responsibility for any computer virus which may be transferred by way! of this e-mail. WENN Ltd: Registered Office: 35 Tileyard Studios, Tileyard Road, London, N7 9AH, England. Registered No: 4375163. Place of Registration: United Kingdom. USA Entertainment News Inc (d/b/a WENN): Registered Office: 352 7th Avenue, Suite 1105, New York, NY 10001-5657, USA The WENN name, design and related marks are trademarks of the WENN group of companies. (c) 2013 All Rights Reserved.

1 0

[Dovecot] Sieve and Namespace in dovecot 2.0.X
by Mauricio Tavares 11 Oct '13

11 Oct '13

Based on what I read in http://wiki2.dovecot.org/Pigeonhole/Sieve/Usage, if I have a namespace defined as tail conf.d/10-mail.conf namespace inbox { inbox = yes location = prefix = INBOX. separator =. type = private } A global script like cat /etc/dovecot/sieve/global-spam.sieve require ["fileinto", "regex"]; # Must use regex here as 'contains' may not be valid, it erroneously # moved: # X-Spam-Status: No, score=-4.0 required=8.0 tests=ALL_TRUSTED,BAYES_00, # DCC_CHECK_NEGATIVE,HTML_MESSAGE,T_TM2_M_HEADER_IN_MSG,UNTRUSTED_Relay, # XM_SPF_Neutral autolearn=disabled version=3.2.5, No # # Due to the 'YES' in BAYES, let's just make sure YES is at the # _beginning_ of X-Spam-Status, while ignoring anything past it. #if header :regex "X-Spam-Status" "^[Yy][Ee][Ss].*" { if header :matches "X-Spam-Status" "Yes*" { fileinto "INBOX.Spam"; stop; } should put spam in bob/.Spam. But, I am getting an error message stating that INBOX.Spam does not exist: Oct 11 09:57:33 mail dovecot: lda(bob(a)domain.com): Error: sieve: msgid=<0.0.0.71C.1CEC689A21CFF08.7068B7(a)ip.aidolip.us>: failed to store into mailbox 'INBOX.Spam': Mailbox doesn't exist: INBOX.Spam How come?

2 5

[Dovecot] Optimisation opportunity for IMAP searches
by Rick van Rein (OpenFortress) 11 Oct '13

11 Oct '13

Hello, I love Dovecot, but when developing a small IMAP tool, I ran into searching behaviour can easily be optimised. Please forgive a rather detailed suggestion. This was on Dovecot 1.2.15 on Debian Squeeze. My tool? It's called "midget" and retrieves documents from an IMAP box based on their mid: or cid: identifier, as per RFC 2392. I thought this would be useful to retrieve email attachments into a remote shell environment. When using Kerberos, the credentials and a strong hint of one's mail address are already present anyway, DNS SRV does the rest. If you want to see the early code, I'll be happy to share it here. The three formats of the URIs in RFC 2392 are: * mid:messageid * cid:contentid * mid:messageid/contentid Searching for a mid: with only a Message-ID part is quick and probably indexed, (HEADER Message-ID <messageid>) Searching for a cid: meant ploughing through body text to get to the attachments, so it was a slow and costly and needed checking of the outcome: (TEXT <contentid>) The quicker URI form to get to a Content-Id should be to mention it at the end of a mid: URI, and search for (HEADER Message-ID <messageid>)(TEXT <conentid>) Much to my surprise, this took about as long as the cid: query -- ploughing through lots of body text while it only needed to look through a one message bodies! As a human, I can see a straightforward improvement. However, it is more difficult to find a general solution -- but that is what I'm describing below, in the hope that it will help to improve Dovecot's search performance. 0. In general, searches are Boolean expressions composed with implied AND and explicit (NOT …) and (OR ….) constructs. 1. Using the theorems of The Morgan, push all (NOT …) constructs inside as far as possible, until they surround elementary statements. Some may have a trivial solution, such as (NOT (ALL)). Others will retain the NOT but that might be handled with a different use of the indexes. In general, this phase turns all AND and OR constructs into positive logic, without duplicating search terms. 2. Estimate the effort involved in every part of the calculation. (HEADER) is lighter than (TEXT) and headers may be further split into with / without index. Larger sets could be more work to search than smaller ones. In general, an estimate of the number of comparisons could be a good metric for work to be done. 3. For AND compositions, start with the simplest one in the AND compostition, and continue with increasingly heavier ones. Apply later conditions only on the output of the previous conditions, either after collecting all of it or everytime something is found. Whatever is optimal -- bulk operations are more efficient, but may collect large sets to handle. 4. For OR compositions, either start a thread for each part, or switch focus and collect sorted streams into one collectively sorted stream. I've been doing this stuff all through my PhD thesis work, so it come easy to me :-) But this optimisation does not appear to be implemented yet, so I thought I'd suggest it. I hope this is useful to Dovecot! Best wishes, Rick van Rein

2 2