- dovecot - dovecot.org

[Dovecot] dsync with imapc and hidden folders
by Angel L. Mateo 28 Feb '13

28 Feb '13

Hello, I'm trying to use dsync to copy mail from one server to a newer one, so I'm using imapc as source (when running dsync in the destination server). The command I'm using is like this: sudo dsync -vD -o imapc_user="<myuser>*master" -o imapc_password="<master pass>" -o imapc_host=<original server> -o imapc_features=rfc822.size -o mailbox_list_index=no backup -R -f -u "<myuser>" imapc: This command is working. The problem I have is that I'm using lazy_expunge in the original server, and namespace used in the original server has the config: namespace { hidden = yes list = no location = maildir:~/Maildir/expunged prefix = BORRADOS. separator = . } so, it is not being synchronized. I have tried to synchronized from the original server instead of destination with: sudo dsync -vD -o imapc_user="<myuser>*master" -o imapc_password="<master pass>" -o imapc_host=<dest server> -o imapc_features=rfc822.size -o mailbox_list_index=no -o mail_location=maildir:<myuserhome>/Maildir/expunged backup -f -u "amateo" imapc: with this, no message is copied and I have errors like: dsync(<myuser>): Error: Mailbox Archives.2003_kk changed its GUID (e7fc0b2d831e1c51984d000029c62294 -> 7d325fb944b953993df5d27ce2ee786c) Any idea to copy messages in this namespace without needing to make it plubic? Is there any hidden option for dysnc? Could I use doveadm backup? How? (it seems that documentation for dsync and doveadm backup is not updated) -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información y las Comunicaciones Aplicadas (ATICA) http://www.um.es/atica Tfo: 868889150 Fax: 868888337

1 0

[Dovecot] Logs when moving mails
by Christian Forjahn 28 Feb '13

28 Feb '13

Hi, I have a problem with an older mailserver. We have an account where 10 Users use one IMAP Account to manage their work. Sometimes some of the emails seem to disappear. I think they are moved somewhere but I can´t tell it for sure. Is there a way to make dovecot logging any movement of emails (I would prefer doing it only for one account). This account is not a local user. Thanks for your help, Chris mailserver:~ # dovecot --version 1.0.3 mailserver:~ # dovecot -n # 1.0.3: /etc/dovecot/dovecot.conf protocols: imap imaps pop3 pop3s ssl_cert_file: /etc/exim/mailserver.cert.pem ssl_key_file: /etc/exim/mailserver.key.pem ssl_verify_client_cert: yes disable_plaintext_auth: no shutdown_clients: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login verbose_proctitle: yes maildir_copy_with_hardlinks: yes maildir_copy_preserve_filename: yes mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugin_dir(default): /usr/lib64/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib64/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/modules/pop3 imap_client_workarounds(default): delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(pop3): outlook-idle pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %08Xu%08Xv pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: mechanisms: plain login username_translation: %@ master_user_separator: * passdb: driver: passwd-file args: /etc/dovecot/passwd.masterusers pass: yes master: yes passdb: driver: checkpassword args: /etc/dovecot/checkpassword userdb: driver: prefetch socket: type: listen client: path: /var/run/dovecot/auth-client mode: 432 group: mail mailserver:~ #

2 1

Re: [Dovecot] Public free (libre) mailbox hosting service for everybody!
by Simon Brereton 28 Feb '13

28 Feb '13

On 28 Feb 2013 08:26, "אנטולי קרסנר" <tombackton(a)gmail.com> wrote: > > I've written a response to someone else, explaining some issues you > mention here. > > A little note on UI: we don't need web UI. It's a good addition but > unnecessary for the beginning. There are many free-software desktop mail > clients. Some are big and complicated, but some are very simple and very > easy to use, just like Gmail is. So UI is not a critical issue right > now, we just need to be able to easily configure a mail client, e.g. > Evolution, to work with the server. > > And it's great to hear people like the idea and want to help! With hard > work and cooperation, everything is possible! > > - Anatoly Krasner > > On ד', 2013-02-27 at 18:39 -0500, Bennett Todd wrote: > > The operational cost is non-zero. Besides hardware, which must include > > backups, and enough physical diversity to offer availability, an email > > server is an attractive nuisance; spammers and other criminals > > constantly attempt sabotage and burglary, and it takes ongoing > > manpower to attempt to hold them temporarily at bay. > > > > And unless you put hard caps on message sizes, people will use their > > mailboxes as backup drives, or just email their vacation movies to > > family, and you'll be buying drives, and hence replacing them, often. > > > > I love the idea, I'm fond of running mailservers myself. But I've gone > > Google. > > > > As for software, I won't pitch my favorite components to this wide > > list, but I know how to find all the pieces I'd need except the > > webmail front-end for the utterly non-technical. > > > > If you limited the scope to IMAP and SMTP, both SSL authenticated, it > > wouldn't be too hard to spec out. > > > > Host on AWS EC3 or the like, then find an affordable solution to spam, > > and you can sell to anyone who doesn't expect their email to be > > private from governments. > > > > Anybody know of a well-engineered and maintained SSL library? > > cesmail.net anyone? Simon

1 0

[Dovecot] selinux rules for dovecot
by Robert Moskowitz 28 Feb '13

28 Feb '13

I am running selinux in permissive mode on my new mail server, in part because of dovecot. I would really like to use selinux, but I suspect it may be a challenge. My setup is on Centos 6.3 with dovecot using mysql for virutal domains and users. I am looking for a set of definitive selinux instructions, not a pointer to selinux tutorial. Here are examples of what I am seeing: Feb 27 16:46:08 klovia kernel: type=1400 audit(1362001568.770:33468): avc: denied { search } for pid=2994 comm="dict" name="mysql" dev=dm-0 ino=1705864 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:mysqld_db_t:s0 tclass=dir Feb 27 16:46:08 klovia kernel: type=1400 audit(1362001568.770:33469): avc: denied { write } for pid=2994 comm="dict" name="mysql.sock" dev=dm-0 ino=1706116 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:mysqld_var_run_t:s0 tclass=sock_file Feb 27 16:46:08 klovia kernel: type=1400 audit(1362001568.770:33470): avc: denied { connectto } for pid=2994 comm="dict" path="/var/lib/mysql/mysql.sock" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:system_r:mysqld_t:s0 tclass=unix_stream_socket Feb 27 16:46:08 klovia kernel: type=1400 audit(1362001568.771:33471): avc: denied { getattr } for pid=2994 comm="dict" path="/usr/share/mysql/charsets/Index.xml" dev=dm-0 ino=395155 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=file Feb 27 16:46:08 klovia kernel: type=1400 audit(1362001568.771:33472): avc: denied { read } for pid=2994 comm="dict" name="Index.xml" dev=dm-0 ino=395155 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=file

1 0

[Dovecot] v2.2.beta2 released
by Timo Sirainen 27 Feb '13

27 Feb '13

http://dovecot.org/releases/2.2/beta/dovecot-2.2.beta2.tar.gz http://dovecot.org/releases/2.2/beta/dovecot-2.2.beta2.tar.gz.sig A ton of fixes since beta1. Especially the new dsync and the replication server related to that should really work now. It also works correctly now for shared mailboxes with private \Seen flags. And the replication server uses incremental syncing after the initial full sync, so it should be pretty efficient also. I've only two things left to do before v2.2.rc1: 1. Implement dsync to work via TCP and TCP+SSL sockets. This is pretty easy to do actually, since it can use the existing doveadm-server to start up. 2. Read up all the pending mails from Dovecot mailing list and fix up the reported issues. Actually I guess most of those are for v2.1, but still I should get around to it. :) There shouldn't be any major bugs left, so I'm expecting v2.2.rc1 out in maybe a week or so, hopefully followed by the final v2.2.0 soon afterwards. Please test and report any bugs found!

6 16

[Dovecot] Help with vpopmail authentication
by Fran Márquez 27 Feb '13

27 Feb '13

Hello, Currently I have a qmail server with vpopmail+courierImap. I want setup a new server in DMZ for proxy IMAP connections and I have a doubt with authentication method. I've read that dovecot can use a vpopmail driver for authentication. As my user database/password is stored by vpopmail, I think that this would be the best method for check the auth logins against dovecot. But I've read the docs and many examples availables on WWW and I haven't found any reference to validate against an *external* vpopmail server. The examples configuration doesn't contain any host/port, so I suppose that driver try to use a local vopomaild. In my case, I only want dovecot for proxying IMAP connections to my current mail server, without store mails or user/password info in dovecot server, because all that info is already stored in real mailserver. The ideal scenario would be this: user ---IMAPs----> dovecot ----- IMAP ---> mailserver Any advice will be wellcome. Regards and thank you very much in advance

1 0

[Dovecot] > 2.2.rc2: doveadm who -> Bad file descriptor
by Lutz Preßler 27 Feb '13

27 Feb '13

Hello, 2.2.rc2 is reproducibly fine, but (all from xi.rename-it.nl) dovecot_2.2.0~rc2-0~auto+11 (15988:2020ed15efb9) and dovecot_2.2.0~rc2-0~auto+7 (15980:d84c7c11d7b7) have "doveadm who" not working: # doveadm who doveadm(root): Fatal: fcntl(-1, F_GETFL) failed: Bad file descriptor strace doveadm who ends with: socket(PF_FILE, SOCK_STREAM, 0) = 8 fcntl(8, F_GETFL) = 0x2 (flags O_RDWR) fcntl(8, F_SETFL, O_RDWR|O_NONBLOCK) = 0 connect(8, {sa_family=AF_FILE, path="/var/run/dovecot/anvil"}, 110) = 0 fcntl(-1, F_GETFL) = -1 EBADF (Bad file descriptor) write(2, "doveadm(root): Fatal: fcntl(-1, "..., 69doveadm(root): Fatal: fcntl(-1, F_GETFL) failed: Bad file descriptor ) = 69 exit_group(75) = ? same with 2.2.rc2 includes: socket(PF_FILE, SOCK_STREAM, 0) = 8 fcntl(8, F_GETFL) = 0x2 (flags O_RDWR) fcntl(8, F_SETFL, O_RDWR|O_NONBLOCK) = 0 connect(8, {sa_family=AF_FILE, path="/var/run/dovecot/anvil"}, 110) = 0 fcntl(8, F_GETFL) = 0x802 (flags O_RDWR|O_NONBLOCK) fcntl(8, F_SETFL, O_RDWR) = 0 fstat(8, {st_mode=S_IFSOCK|0777, st_size=0, ...}) = 0 write(8, "VERSION\tanvil\t1\t0\nCONNECT-DUMP\n", 31) = 31 Lutz -- Lutz Preßler <Lutz.Pressler(a)SerNet.DE> http://www.SerNet.DE/ SerNet Service Network GmbH, Bahnhofsallee 1b, D-37081 Göttingen Tel.: +49-551-370000-2, FAX: +49-551-370000-9 AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen

2 2

Re: [Dovecot] Sieve filters on folders, different from INBOX
by Valery V. Sedletski 27 Feb '13

27 Feb '13

>> >> So, if sieve is invoked by lda, then, probably, I could invoke dovecot-lda from wrapper script on each mail >> after it is fetched? > >with getmail > >[destination] >type = MDA_external >path = /usr/lib/dovecot/deliver > >But then it will be copied to INBOX... -- Is it possible to specify the >other folder to deliver to, >> to the deliver program? > >the sieve filter invoked bx deliver does it, i.e rule > >if header :contains ... fileinto :create "folder" > >or whatever > Ah, yes. Really, I looked to mpop options, it can call various LDA's. And, dovecot-lda has "-m" parameter, which allows to specify the mailbox name. So, I can deliver the mail arrived by fetcher, via dovecot-lda, and Sieve filters will work. Also, as a bonus, delivering mail via LDA will correctly update user quotas -- the problem which resolved by itself :) Great :) >> >>> >>>> outgoing mail to folders, specific >>> >>> outgoing mail is smtp, with i.e imap copy to sent folder etc >>> if you want other folders your imap client should do it >>> >> >> So, I can invoke Sieve interpreter from SMTP server, or process it via dovecot-lda, like in fetcher case? > >in general ,i dont think so , there may be some workaround with server >bcc_copy and i.e plus adressing with sieve then for "sent" mail > Yes, this is a variant. But what if I modify the Dovecot post-login script (a wrapper for IMAP process), or add the sieve plugin to protocol "imap {mail_plugins = ...}" ? Will it be invoked on each operation with mailboxes? >> >>> >>> try i.e >>> >>> https://addons.mozilla.org/de/thunderbird/addon/send-filter/?src=search >>> >>> >>>> to their recipients. WBR, valery

2 1

[Dovecot] Protocol logging - TLS vs SSL
by Charles Marcus 27 Feb '13

27 Feb '13

Hi all, Ok, I have: login_log_format_elements = user=<%u> method=%m rip=%r lport=%{lport} mpid=%e %c session=<%{session}> We only allow inbound IMAP, and only SSL on port 993. Looking at the logs, %c is obviously the encryption type, but... Why does it say 'TLS', when it technically (there is a difference after all) should say 'SSL'? Not a big deal, but it is just something I've been meaning to ask. -- Best regards, */Charles/*

6 26

[Dovecot] Can't access to shared mailbox
by Angel L. Mateo 27 Feb '13

27 Feb '13

Hello, I have a user sharing a folder to me (and other users). This has worked for me for a time. And it is still working for some users, but not for me. I'm using thunderbird (17.0.3, ubuntu 12.04 package). My server is dovecot 2.1.9 (it's the same since it works). The user sharing its mailbox is: $ sudo doveadm user t userdb: t home : /home/generica/02/001002 uid : 1002 he is sharing its mailbox "cron". This is its dovecot-acl: root@myotis31:/home/generica/02/001002/Maildir# cat dovecot-acl user=<other user> kxeilprwts user=<my user> kxeilprwts user=<other user> kxeilprwts user=<other user> kxeilprwts user=<other user> kxeilprwts user=<other user> kxeilprwts user=<other user> kxeilprwts I can subscribe to this folder: # sudo doveadm mailbox subscribe -u <myuser> shared.t.cron # sudo doveadm mailbox list -u <myuser> -s INBOX ... ... shared.t.cron but when I try to access to this folder through thunderbird (what I really do in TB is subscribe/unsubscribe to it, because it is not actually listed in the folder list), I get: Feb 26 13:35:03 myotis32 dovecot: imap(<myuser>): Error: Couldn't create namespace 'shared.' for user shared: userdb didn't return a home directory, but plugin setting quota used it (%h): dict:User quota::file:%h/Maildir/dovecot.quota With doveadm commands I can access to the shared folder from my user (not the user sharing): $ sudo doveadm search -u <myuser> mailbox shared.t.cron | wc -l 652 Other users can use this shared folder without any (apparent) problem. I have attached my doveconf -n. Any idea? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información y las Comunicaciones Aplicadas (ATICA) http://www.um.es/atica Tfo: 868889150 Fax: 868888337

2 2