- dovecot - dovecot.org

[Dovecot] SiS attachment file larger than expected
by Erik Persson 25 Mar '13

25 Mar '13

Hello! Name's Erik and I have been using Dovecot for a few months and I so far quite happy with the software. To this list I am quite new though. After a testing period I have now been running a ~300 user system running CentOS 6 and Dovecot 2.1.14 with Postfix and SiS enabled. For the large part the system is running flawlessly but I have caught a few error messages: imap(censored(a)censored.domain): Error: Attachment file /mail/attachments/70/d0/70d04b12123bfb145983f5a674ee2e65029a4018aff1c6db51993b75f10bf101-117a1a3b06f54251e96200004d877aa0 larger than expected (370113) The total number of files that I have found complaints about in the log are less than 10 accessed by 3 users in a attachment file system that by now is housing 100k + files. The only common denominator I have found so far is that all the attachments are PDF files. Most if not all of the logged files are the only referenced link of the corresponding hash. Any idea what might be causing this and how it can be prevented? I do like to be a bit paranoid when it comes to data integrity. As I am not completely familiar with the dovecot tools I also wonder if there is a way to find the offending message in the mailbox other than trying to access it via a mail client? Best regards and keep up the good work! /Erik

2 2

[Dovecot] Reporting on user info
by Alex 25 Mar '13

25 Mar '13

Hi all, I've just installed fc18 with dovecot-2.1.15 and have all the usual services set up and running properly. Of course now management is interested in who is using what service, for how long. Are there any existing reporting features available from within dovecot to provide stats on mail usage over time? Ideally, I'd like to provide a log file and find out who used each service, how long they were logged in, and from where they logged in. It would also be interesting to have a real-time view of who's connected. Does any such utility exist? Thanks, Alex

2 1

[Dovecot] Replicator updates
by Timo Sirainen 25 Mar '13

25 Mar '13

Some new features in hg: - replicator now correctly saves/restores state on exit/startup. it won't immediately start resyncing everyone now always. - if sync fails for user, retry in 5 minutes - doveadm replicator status: Give overview of replication status - doveadm replicator status <usermask>: Show users' replication status - doveadm replicator replicate [-p <priority>] <usermask>: Replicate users now. replication_full_sync_interval was also changed to 24h by default. I was thinking that with that and a nightly cronjob running "doveadm replicator replicate '*'" the full syncs could only be done during night times.

1 0

Re: [Dovecot] Migrating password scheme
by Joseph Tam 25 Mar '13

25 Mar '13

I tried the userdb prefetch / postlogin script method to do some password manipulation, but it doesn't appear to work for me. In particular, I don't think this method works with userdb { driver = passwd-file args = /path/to/passwd-file userdb_pw=%w } because it doesn't understand arbitrary var=value in the args configuration. Dvoecot seems to accept the entire string as the pathname for a password file. Is there a way to pass the plaintext password to a post-login script using passwd-file userdb? Before this, I managed password manipulation by process tracing dovecot's auth process read() syscalls and parsing out the user/password from the second buffer argument. Quite a hack but it worked. Joseph Tam <jtam.home(a)gmail.com>

3 2

[Dovecot] Migarting password scheme
by lst_hoe02＠kwsoft.de 25 Mar '13

25 Mar '13

Hello, by the move to Dovecot we try to alter the password encryption stored in the database from MD5 to CRYPT-SHA256 along the Guide at http://wiki2.dovecot.org/HowTo/ConvertPasswordSchemes. It's mostly working but i still have not found out how to pass the cleartext password to the re-encrypting script. According to the HowTo it should be enough to add "'%w' AS userdb_plain_pass" to the passdb query, to get a environment variable $PLAIN_PASS in the post-login script to pass along. This does not work eg. PLAIN_PASS is always empty. This is Dovecot 2.0.19 from Ubuntu 12.04 LTS. Thanks for any help Regards Andreas

3 9

[Dovecot] Disallow POP3 from deleting messages
by DormitionSkete＠hotmail.com 24 Mar '13

24 Mar '13

I'd like to use Dovecot as our IMAP server when our users are within our LAN, but I'd also like to give them the ability to access their emails via POP3 when they are outside the LAN. I know most POP3 clients will give their users the option of not deleting the messages from the server after they are downloaded, but is there any way to restrict them from being able to do so at the server level? In other words, I want to disallow the server from accepting the DELE command from POP3 clients. Is that possible? We have some accounts that multiple users need simultaneous access to. I don't want a user to decide to set up a POP3 account on his own on his iPad or something, and inadvertently blow the Inbox away for everybody else. We have a satellite connection, so our upload speeds are real slow. I think POP3 would give a lot better user experience than IMAP when they are outside the LAN. Any help or advice will be greatly appreciated. Peter, hieromonk ---- Dormition Skete Monastery Website: http://www.DormitionSkete.org Convent Website: http://www.HolyApostlesConvent.org ----

6 15

[Dovecot] discarding vacation response for message implicitly delivered
by dovecot＠noboost.org 23 Mar '13

23 Mar '13

Hi All, Spec: * Centos 6.3x64 * postfix-2.6.6-2.2.el6_1.x86_64 * dovecot-pigeonhole-2.0.9-5.el6.x86_64 * dovecot-2.0.9-5.el6.x86_64 Challenge: Does anyone have an explination regarding this message? ------------------------------------------------------------------- "Mar 22 12:15:22 chtvm dovecot: lmtp(7004, cht): C+EZBuObS1FcGwAAlnPEfg: sieve: msgid=<20130322011522.6D55D40389(a)chtvm.noboost.org>: discarding vacation response for message implicitly delivered to <cht(a)vacation.noboost.org>" ------------------------------------------------------------------- I'm getting it when passing traffic through to the Dovecot sieve vacation extension from a virtual domain. Regards, Craig

2 1

[Dovecot] Dovecot 2.2, Thunderbird And Client Certificates -> Login fails
by Christian Felsing 23 Mar '13

23 Mar '13

Hello, I stucked in Thunderbird authentication with X.509 client certs. This is my config (dovecot -n): $ /opt/dovecot/sbin/dovecot -n # 2.2.rc3: /opt/dovecot-2.2.rc3/etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.0 auth_debug = yes auth_ssl_require_client_cert = yes auth_ssl_username_from_cert = yes auth_verbose = yes base_dir = /home/dovecot/ hostname = mail.ip6.li instance_name = dovecot-01 lda_mailbox_autocreate = yes mail_gid = dovecot mail_uid = dovecot managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { list = children location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u prefix = shared/%%u/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / type = private } passdb { args = scheme=CRYPT username_format=%u /opt/dovecot/etc/dovecot/mailusers.993 driver = passwd-file } plugin { acl = vfile:/etc/dovecot/global-acls:cache_secs=300 acl_shared_dict = file:/home/dovecot/shared-mailboxes sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = postmaster(a)ip6.li protocols = imap pop3 lmtp sieve quota_full_tempfail = yes sendmail_path = /usr/lib/sendmail service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } ssl_ca = </opt/dovecot/etc/dovecot/ip6li-user-ca.pem ssl_cert = </opt/dovecot/etc/dovecot/mail.taunusstein.net.crt ssl_cert_username_field = emailAddress ssl_key = </opt/dovecot/etc/dovecot/mail.taunusstein.net.key ssl_require_crl = no ssl_verify_client_cert = yes userdb { args = username_format=%u /opt/dovecot/etc/dovecot/mailusers.993 driver = passwd-file } verbose_ssl = yes protocol lda { auth_socket_path = /var/run/dovecot/auth-master mail_plugin_dir = /opt/dovecot/lib/dovecot/lda mail_plugins = } protocol imap { mail_plugins = } protocol lmtp { mail_plugins = } protocol sieve { managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes ( in=%i : out=%o ) } protocol pop3 { mail_plugins = pop3_uidl_format = %08Xu%08Xv } Logfile shows this after Thunderbirds tries to get access: Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x10, ret=1: before/accept initialization [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: before/accept initialization [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client hello A [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server hello A [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write certificate A [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: auth: Debug: Loading modules from directory: /opt/dovecot-2.2.rc3/lib/dovecot/auth Mar 22 19:22:32 dovecot dovecot: auth: Debug: Read auth token secret from /home/dovecot//auth-token-secret.dat Mar 22 19:22:32 dovecot dovecot: auth: Debug: passwd-file /opt/dovecot/etc/dovecot/mailusers.993: Read 1 users in 0 secs Mar 22 19:22:32 dovecot dovecot: auth: Debug: auth client connected (pid=20082) Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write key exchange A [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write certificate request A [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 flush data [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client certificate A [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client certificate A [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client certificate A [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client certificate A [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Valid certificate: /CN=IP6LI Root Certification Authority Mar 22 19:22:32 dovecot dovecot: imap-login: Valid certificate: /CN=Intermediate CA for ip6.li users/OU=ip6.li Certificates/O=ip6.li/C=DE Mar 22 19:22:32 dovecot dovecot: imap-login: Valid certificate: /emailAddress=christian(a)felsing.lan/CN=Christian Felsing/OU=ip6.li Certificates/O=ip6.li/C=DE Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client certificate A [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client key exchange A [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read certificate verify A [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read finished A [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write change cipher spec A [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write finished A [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 flush data [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x20, ret=1: SSL negotiation finished successfully [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2002, ret=1: SSL negotiation finished successfully [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Warning: SSL alert: where=0x4004, ret=256: warning close notify [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Warning: SSL alert: where=0x4008, ret=256: warning close notify [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=192.168.200.6, lip=192.168.200.22, TLS, session=<EfvjiYfYrgCwxigG> seems client cert is ok, but Dovecot does not like Thunderbirds method to handle TLS-Cert login w/o username and password. Hint http://dovecot.org/list/dovecot/2012-December/069771.html does not seem to be valid for Dovecot 2.2 On the other hand I think it is not a suitable method to include CRLs into CA file. Certificate should include a link to CRL or - better - an URL to OCSP. Does Dovecot support OCSP? best regards Christian

1 0

[Dovecot] Altmove doesn't working after a dsync.
by Breno Moreira 23 Mar '13

23 Mar '13

Hi guys, I'm having a problem with the altmove command after a mailbox migration using dsync. What I'm trying to do is move some users from a datacenter to another and, for that, I'm using the dsync feature. First thing I do is run the dsync mirror command, and this is working properly, but all mails are moved to the main path, ignoring the ALT statement in the mail location. So, what I tried to do was run the doveadm altmove to move the old mails to the new alternate storage, but it simply doesn't work or sometimes moves only few messages. After the user receives new messages, these new files are correctly moved. It can be problem with my search parameter in the altmove command? Or this is a normal result? Best Regards, Breno Moreira -- --------------------------------------------------------------------- Breno Moreira

3 7

[Dovecot] How do I enable dsync sieve script replication?
by Oli Schacher 22 Mar '13

22 Mar '13

Hi all, Thank you Timo for adding sieve script replication to dsync, much appreciated! Should this run out of the box with 2.2.rc3 and latest pigeonhole+patch or does this have to be enabled in the configuration somehow? I upgraded my dsync replication test setup, but it doesn't sync sieve so far, so I'm not sure if this is a config issue or if I maybe made a mistake while upgrading/patching. btw: not sure if you saw this bugreport, dsync over tcp still produces "no command given" errors randomly (http://www.dovecot.org/list/dovecot/2013-March/088751.html) Thanks Oli #dovecot -n: # 2.2.rc3: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.22.1.el6.x86_64 x86_64 CentOS release 6.3 (Final) auth_master_user_separator = * auth_mechanisms = plain login dict { acl = mysql:/etc/dovecot/dovecot-dict-shares.conf quotadict = mysql:/etc/dovecot/dovecot-dict-quota.conf } disable_plaintext_auth = no doveadm_password = <munged> listen = * login_greeting = Dovecot ready. mail_max_userip_connections = 50 mail_plugins = " quota notify replication" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date namespace { list = children location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u prefix = shared/%%u/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / type = private } passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { acl = vfile:/etc/dovecot/acls acl_shared_dict = proxy::acl mail_replica = tcp:<munged>:1337 quota = dict:::proxy::quotadict quota_rule = *:storage=10M:messages=1000 quota_rule2 = Spam:ignore quota_rule3 = Trash:storage=+100M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=75%% quota-warning 75 %u sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = pop3 imap lmtp sieve service aggregator { fifo_listener replication-notify-fifo { user = fumail } unix_listener replication-notify { user = fumail } } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-master { group = fumail mode = 0660 user = fumail } user = root } service dict { unix_listener dict { mode = 0600 user = fumail } } service doveadm { inet_listener { port = 1337 } } service imap { vsz_limit = 2 G } service lmtp { inet_listener lmtp { address = 127.0.0.1 port = 24 } process_min_avail = 5 unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } service managesieve { vsz_limit = 2 G } service pop3 { vsz_limit = 2 G } service quota-warning { executable = script /usr/local/bin/quotawarning.py unix_listener quota-warning { mode = 0666 user = fumail } user = fumail } service replicator { process_min_avail = 1 } ssl_cert = </etc/ssl/<munged>.crt ssl_key = </etc/ssl/<munged>.key userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocol imap { imap_client_workarounds = mail_plugins = " quota notify replication acl imap_acl quota imap_quota" } protocol pop3 { mail_plugins = " quota notify replication quota" pop3_uidl_format = %08Xu%08Xv } protocol sieve { managesieve_logout_format = bytes ( in=%i : out=%o ) } protocol lmtp { deliver_log_format = from=<%f> msgid=%m action=<%$> subject=%s mail_plugins = " quota notify replication sieve quota" postmaster_address = postmaster@<munged> quota_full_tempfail = yes } -- message transmitted on 100% recycled electrons

1 0