- dovecot - dovecot.org

[Dovecot] Dovecot DNS queries its own host many times a second
by Dominic Malolepszy 25 Mar '13

25 Mar '13

Hi, We have observed that Dovecot appears to make a DNS lookup of its own hostname many times a second. Each Dovecot server in our cluster appears to be doing around 50 queries per second to find out its own hostname. Rsyslog was the first thing we assumed was the cause, however stopping it did not help. Also the fact that at the time Dovecot was doing around 50 logins a second, seemed to correlate with it making these queries. Is there any reason why Dovecot would need to do a lookup of its own hosts IP address every time? Seems like a strange thing to do and not cache its own hostname. Dominic

3 2

[Dovecot] Confirmation Please - Dovecot for Email Delivery
by craig.dovecot＠noboost.org 25 Mar '13

25 Mar '13

Hi All, Spec: Centos 6.3x64 Dovecot-2.0.9-5.el6.x86_64 Goal: 1) Inbound emails are delivered by Dovecot and the UID/GID is determined by a local /etc/dovecot/users file. 2) I'd like to have IMAPS clients authenticate with Dovecot via LDAP. Questions: 1) I've attempted to ensure that Dovecot will always use the local password file for mail delivery as no actual password is needed. Then the LDAP server for when the IMAPS email client connects. This appears to be working as I expect, can anyone confirm/deny the below settings are correct? 2) Is there a Dovecot architecture diagram/documentation anywhere? Settings: ------------------------------------------------------------------------- File: dovecot.conf protocols = imap lmtp listen = * File: 10-auth.conf disable_plaintext_auth = yes auth_username_format = %Ln auth_mechanisms = plain !include auth-passwdfile.conf.ext !include auth-ldap.conf.ext File: auth-passwdfile.conf.ext mail_location = maildir:/home/%n/Maildir #passdb { # driver = passwd-file # args = username_format=%n /etc/dovecot/users #} userdb { driver = passwd-file args = username_format=%n /etc/dovecot/users } File: dovecot-ldap.conf.ext hosts = sysvm-ipa.noboost.org tls = yes tls_ca_cert_dir = /etc/openldap/certs auth_bind = yes auth_bind_userdn = uid=%u,cn=users,cn=accounts,dc=noboost,dc=org base = cn=users,cn=accounts,dc=noboost,dc=org pass_attrs = uid=user pass_filter = (&(objectClass=posixAccount)(uid=%u)) File: /etc/dovecot/users craig:x:890:432:Craig:/home/craig:/bin/bash ------------------------------------------------------------------------- cya Craig

1 0

[Dovecot] Reduce logging auth-worker
by Nick Edwards 25 Mar '13

25 Mar '13

Hello Timo We would like to reduce the logging by increasing severity, we don't use syslog since we use log_path = /var/log/dovecot/pop3.log Is there a way auth-worker can be made to log warn|error instead of info? Constantly 1/5th of the log file is filled with auth-work info connecting to mysql socket, which we do not need to see unless, well, we need to see it either via debug, or if there is a problem, I know this can be done from syslog, but we prefer not to use syslog, and the wiki does not indicate it can be done? Niki

6 11

[Dovecot] SiS attachment file larger than expected
by Erik Persson 24 Mar '13

24 Mar '13

Hello! Name's Erik and I have been using Dovecot for a few months and I so far quite happy with the software. To this list I am quite new though. After a testing period I have now been running a ~300 user system running CentOS 6 and Dovecot 2.1.14 with Postfix and SiS enabled. For the large part the system is running flawlessly but I have caught a few error messages: imap(censored(a)censored.domain): Error: Attachment file /mail/attachments/70/d0/70d04b12123bfb145983f5a674ee2e65029a4018aff1c6db51993b75f10bf101-117a1a3b06f54251e96200004d877aa0 larger than expected (370113) The total number of files that I have found complaints about in the log are less than 10 accessed by 3 users in a attachment file system that by now is housing 100k + files. The only common denominator I have found so far is that all the attachments are PDF files. Most if not all of the logged files are the only referenced link of the corresponding hash. Any idea what might be causing this and how it can be prevented? I do like to be a bit paranoid when it comes to data integrity. As I am not completely familiar with the dovecot tools I also wonder if there is a way to find the offending message in the mailbox other than trying to access it via a mail client? Best regards and keep up the good work! /Erik

2 2

[Dovecot] Reporting on user info
by Alex 24 Mar '13

24 Mar '13

Hi all, I've just installed fc18 with dovecot-2.1.15 and have all the usual services set up and running properly. Of course now management is interested in who is using what service, for how long. Are there any existing reporting features available from within dovecot to provide stats on mail usage over time? Ideally, I'd like to provide a log file and find out who used each service, how long they were logged in, and from where they logged in. It would also be interesting to have a real-time view of who's connected. Does any such utility exist? Thanks, Alex

2 1

[Dovecot] Replicator updates
by Timo Sirainen 24 Mar '13

24 Mar '13

Some new features in hg: - replicator now correctly saves/restores state on exit/startup. it won't immediately start resyncing everyone now always. - if sync fails for user, retry in 5 minutes - doveadm replicator status: Give overview of replication status - doveadm replicator status <usermask>: Show users' replication status - doveadm replicator replicate [-p <priority>] <usermask>: Replicate users now. replication_full_sync_interval was also changed to 24h by default. I was thinking that with that and a nightly cronjob running "doveadm replicator replicate '*'" the full syncs could only be done during night times.

1 0

Re: [Dovecot] Migrating password scheme
by Joseph Tam 24 Mar '13

24 Mar '13

I tried the userdb prefetch / postlogin script method to do some password manipulation, but it doesn't appear to work for me. In particular, I don't think this method works with userdb { driver = passwd-file args = /path/to/passwd-file userdb_pw=%w } because it doesn't understand arbitrary var=value in the args configuration. Dvoecot seems to accept the entire string as the pathname for a password file. Is there a way to pass the plaintext password to a post-login script using passwd-file userdb? Before this, I managed password manipulation by process tracing dovecot's auth process read() syscalls and parsing out the user/password from the second buffer argument. Quite a hack but it worked. Joseph Tam <jtam.home(a)gmail.com>

3 2

[Dovecot] Migarting password scheme
by lst_hoe02＠kwsoft.de 24 Mar '13

24 Mar '13

Hello, by the move to Dovecot we try to alter the password encryption stored in the database from MD5 to CRYPT-SHA256 along the Guide at http://wiki2.dovecot.org/HowTo/ConvertPasswordSchemes. It's mostly working but i still have not found out how to pass the cleartext password to the re-encrypting script. According to the HowTo it should be enough to add "'%w' AS userdb_plain_pass" to the passdb query, to get a environment variable $PLAIN_PASS in the post-login script to pass along. This does not work eg. PLAIN_PASS is always empty. This is Dovecot 2.0.19 from Ubuntu 12.04 LTS. Thanks for any help Regards Andreas

3 9

[Dovecot] Disallow POP3 from deleting messages
by DormitionSkete＠hotmail.com 23 Mar '13

23 Mar '13

I'd like to use Dovecot as our IMAP server when our users are within our LAN, but I'd also like to give them the ability to access their emails via POP3 when they are outside the LAN. I know most POP3 clients will give their users the option of not deleting the messages from the server after they are downloaded, but is there any way to restrict them from being able to do so at the server level? In other words, I want to disallow the server from accepting the DELE command from POP3 clients. Is that possible? We have some accounts that multiple users need simultaneous access to. I don't want a user to decide to set up a POP3 account on his own on his iPad or something, and inadvertently blow the Inbox away for everybody else. We have a satellite connection, so our upload speeds are real slow. I think POP3 would give a lot better user experience than IMAP when they are outside the LAN. Any help or advice will be greatly appreciated. Peter, hieromonk ---- Dormition Skete Monastery Website: http://www.DormitionSkete.org Convent Website: http://www.HolyApostlesConvent.org ----

6 15

[Dovecot] discarding vacation response for message implicitly delivered
by dovecot＠noboost.org 22 Mar '13

22 Mar '13

Hi All, Spec: * Centos 6.3x64 * postfix-2.6.6-2.2.el6_1.x86_64 * dovecot-pigeonhole-2.0.9-5.el6.x86_64 * dovecot-2.0.9-5.el6.x86_64 Challenge: Does anyone have an explination regarding this message? ------------------------------------------------------------------- "Mar 22 12:15:22 chtvm dovecot: lmtp(7004, cht): C+EZBuObS1FcGwAAlnPEfg: sieve: msgid=<20130322011522.6D55D40389(a)chtvm.noboost.org>: discarding vacation response for message implicitly delivered to <cht(a)vacation.noboost.org>" ------------------------------------------------------------------- I'm getting it when passing traffic through to the Dovecot sieve vacation extension from a virtual domain. Regards, Craig

2 1