- dovecot - dovecot.org

[Dovecot] Kerberos/GSSAPI auth via .k5login file
by Jörg Herzinger 04 Jan '13

04 Jan '13

Hi, we are currently moving our mailserver to a new server with Dovecot, virtual users in LDAP, Passwords in Kerberos Setup. Everything works fine except for GSSAPI which seems to be a bit buggy. The thing is, that when using a .k5login [1] file it seems that SASL does not get passed the home directory specified userdb. In other words, mails for user1 (see below) are stored in /home/domain.at/user1, while the home dir defined in LDAP is /afs/domain.at/home/user1 (virtual users, so only dovecot, not the system does know about this user and home dir). If I do create a .k5login file in /home/domain.at/user1 with the content "someotheruser(a)DOMAIN.AT", then someotheruser should be able to authenticate himself as user1 via GSSAPI. However, this .k5login file is completely ignored. So it seems to me that the home is not passed on to SASL. If I do add ldap to my nsswitch (for testing only) I additionally have real system users. Now if I create a .k5login in their home defined in LDAP which now also the system knows about everything works just fine. It is still the wrong home since its the one in LDAP and not the one defined by dovecot but at least it shows that our setup is working. See also debug log output below, a failed GSSAPI attempt produces no log output at all. Our System is Debian Wheezy on an amd64 (virtualized), dovecot Version 2.1.7, filesystem is ext4. Everything is tested with Firefox 17.0 on an Ubuntu Lucid client. Example LDAP user (not all of it...): ===================== dn: uid=user1,ou=people,dc=domain,dc=at structuralObjectClass: inetOrgPerson objectClass: inetOrgPerson objectClass: posixAccount objectClass: qmailUser uid: username uidNumber: 12345 gidNumber: 100 mail: username(a)domain.at homeDirectory: /afs/domain.at/home/user1 userPassword: {sasl}user1(a)DOMAIN.AT And our dovecot userdb/passdb looks like this: ============================ root@mail201212 /etc/dovecot (git)-[master] # cat conf.d/10-auth.conf auth_gssapi_hostname = "$ALL" auth_krb5_keytab = /etc/dovecot/imap_smtp_mail201212.keytab auth_mechanisms = plain gssapi !include auth-virtual.conf.ext root@mail201212 /etc/dovecot (git)-[master] # cat conf.d/auth-virtual.conf.ext mail_uid = mailowner mail_gid = mailowner userdb { driver = ldap args = /etc/dovecot/ldap-userdb-user_g2.conf.ext } passdb { driver = pam } root@mail201212 /etc/dovecot (git)-[master] # cat /etc/dovecot/ldap-userdb-user_g2.conf.ext #http://www.postfix.org/ldap_table.5.html hosts = ldap1 ldap2 base = ou=people,dc=domain,dc=at user_attrs = uid=home=/home/domain.at/%$ user_filter = (&(objectClass=inetOrgPerson)(|(mail=%u)(mailalternateaddress=%u)(uid=%u))) Debug log output with system users (testing only) and a working GSSAPI auth: ================================================ Dec 28 14:18:40 mail201212 dovecot: auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Dec 28 14:18:40 mail201212 dovecot: auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_mysql.so Dec 28 14:18:40 mail201212 dovecot: auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_pgsql.so Dec 28 14:18:40 mail201212 dovecot: auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_sqlite.so Dec 28 14:18:40 mail201212 dovecot: auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Dec 28 14:18:40 mail201212 dovecot: auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libmech_gssapi.so Dec 28 14:18:40 mail201212 dovecot: auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Dec 28 14:18:40 mail201212 dovecot: auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libauthdb_ldap.so Dec 28 14:18:40 mail201212 dovecot: auth: Debug: passwd-file /etc/dovecot/shared_users: Read 1 users in 0 secs Dec 28 14:18:40 mail201212 dovecot: auth: Debug: auth client connected (pid=11875) Dec 28 14:18:41 mail201212 dovecot: auth: Debug: client in: AUTH#0111#011GSSAPI#011service=imap#011secured#011session=1RaMgOnRZADAqCoq#011lip=192.168.43.100#011rip=192.168.42.42#011lport=993#011rport=55140 Dec 28 14:18:41 mail201212 dovecot: auth: Debug: gssapi(?,192.168.42.42,<1RaMgOnRZADAqCoq>): Using all keytab entries Dec 28 14:18:41 mail201212 dovecot: auth: Debug: client out: CONT#0111#011 Dec 28 14:18:41 mail201212 dovecot: auth: Debug: client in: CONT<hidden> Dec 28 14:18:41 mail201212 dovecot: auth: Debug: gssapi(user1(a)domain.at,192.168.42.42,<1RaMgOnRZADAqCoq>): security context state completed. Dec 28 14:18:41 mail201212 dovecot: auth: Debug: client out: CONT#0111#011YIGZBgkqhkiG9xIBAgICAG+BiTCBhqADAgEFoQMCAQ+iejB4oAMCARKicQRvMQu0Yxgom2SVOHW25FpxDbqalw/8nuMN1XH78FJUzJ/7CIv9dlQNUrKjFywqS9kNOxQY2sJR 7Ii0hw3i7BGV3VPmoeRJOsbYD5ahBh74NKqxdacN6rLj/cO5vWCee6Oel3rPgLV8kEcOVZOdAt6y Dec 28 14:18:41 mail201212 dovecot: auth: Debug: client in: CONT<hidden> Dec 28 14:18:41 mail201212 dovecot: auth: Debug: gssapi(user1(a)domain.at,192.168.42.42,<1RaMgOnRZADAqCoq>): Negotiated security layer Dec 28 14:18:41 mail201212 dovecot: auth: Debug: client out: CONT#0111#011BQQF/wAMAAAAAAAAC5QPNQH///+qs6lgevrvypjd1l4= Dec 28 14:18:41 mail201212 dovecot: auth: Debug: client in: CONT<hidden> Dec 28 14:18:41 mail201212 dovecot: auth: Debug: client out: OK#0111#011user=user1 Dec 28 14:18:41 mail201212 dovecot: auth: Debug: master in: REQUEST#0111935278081#01111875#0111#0118d08e90a585981154d7c045ca230b1f9 Dec 28 14:18:41 mail201212 dovecot: auth: Debug: ldap(user1,192.168.42.42,<1RaMgOnRZADAqCoq>): user search: base=ou=people,dc=domain,dc=at scope=subtree filter=(&(objectClass=inetOrgPerson)(|(mail=user1)(mailalternateaddress=user1)(uid=user1))) fields=uid Dec 28 14:18:41 mail201212 dovecot: auth: Debug: ldap(user1,192.168.42.42,<1RaMgOnRZADAqCoq>): result: uid=user1 Dec 28 14:18:41 mail201212 dovecot: auth: Debug: master out: USER#0111935278081#011user1#011home=/home/domain.at/user1 Dec 28 14:18:41 mail201212 dovecot: imap-login: Login: user=<user1>, method=GSSAPI, rip=192.168.42.42, lip=192.168.43.100, mpid=11878, TLS, session=<1RaMgOnRZADAqCoq> Dec 28 14:18:41 mail201212 dovecot: imap(user1): Debug: Effective uid=996, gid=997, home=/home/domain.at/user1 Dec 28 14:18:41 mail201212 dovecot: imap(user1): Debug: Namespace inbox: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~/maildir Dec 28 14:18:41 mail201212 dovecot: imap(user1): Debug: maildir++: root=/home/domain.at/user1/maildir, index=, control=, inbox=/home/domain.at/user1/maildir, alt= Dec 28 14:18:41 mail201212 dovecot: imap(user1): Debug: Namespace : type=public, prefix=PublicLists/, sep=/, inbox=no, hidden=no, list=yes, subscriptions=no location=maildir:/home/listcaptor/maildir/ Dec 28 14:18:41 mail201212 dovecot: imap(user1): Debug: maildir++: root=/home/listcaptor/maildir, index=, control=, inbox=, alt= [1] http://web.mit.edu/kerberos/krb5-current/doc/user/user_config/k5login.html -- Jörg Herzinger - EDV Team GLOBAL 2000 - Friends of the Earth Austria Neustiftgasse 36, A-1070 Wien tel +43-699-14200030 Dieses Mail wurde mit Oekostrom und Opensource Software erstellt.

3 2

[Dovecot] map_uid/GUID at IMAP level (IMAP extension?)
by Andrzej A. Filip 04 Jan '13

04 Jan '13

Is map_uid/guid going to be supported at IMAP protocol level? [via IMAP protocol extension] Specifically I would like to be able to: a) ask for mail_uid/GUID of specific message in mail store b) get list of folders containing copies of message with given mail_uid/GUID http://wiki2.dovecot.org/MailboxFormat/dbox#Multi-dbox Related: https://developers.google.com/google-apps/gmail/imap_extensions#access_to_t… [message to guid mapping] https://developers.google.com/google-apps/gmail/imap_extensions#access_to_g… [message to list of folders mapping]

2 1

[Dovecot] dovecot and avahi
by Robert Moskowitz 04 Jan '13

04 Jan '13

I am trying to figure out if I need avahi on my mail server. I see that POP3 and IMAP are services that Avahi can advertise/discover. Does Dovecot work with Avahi and how do you get POP3 and IMAP advertised? And perhaps more importantly, what clients look for mail services this way? I can't find any information on this in the Dovecot documentation ot googling. Perhaps my search fu is low this year. thank you

8 21

[Dovecot] corrupt mdbox, force-resync segfaults
by Metro Domain Admin 03 Jan '13

03 Jan '13

I could use some help with a corrupt mdbox. doveadm force-resync is crashing (see below), but I really need just to get this account functioning. What's my next step, as far as deleting index files? These were the earliest errors I could find: Nov 28 09:40:21 macy dovecot[6615]: imap(cory(a)metro-email.com): Error: Corrupted index cache file /opt/mail/metro-email.com/cory/mdbox/mailboxes/INBOX/dbox-Mails/dovecot.index.cache: field index too large (66 >= 30)Nov 28 09:40:21 macy dovecot[6615]: imap(cory(a)metro-email.com): Error: mdbox map /opt/mail/metro-email.com/cory/mdbox/storage/dovecot.map.index corrupted: Unexpectedly lost INBOX uid=1233 map_uid=1708 As for the segfaults, I am getting this regardless of which mailbox I specify: # /opt/dovecot/bin/doveadm -Dv force-resync -u cory INBOX doveadm(root): Debug: Loading modules from directory: /opt/dovecot/lib/dovecot doveadm(root): Debug: Module loaded: /opt/dovecot/lib/dovecot/lib15_notify_plugin.so doveadm(root): Debug: Module loaded: /opt/dovecot/lib/dovecot/lib20_fts_plugin.so doveadm(root): Debug: Module loaded: /opt/dovecot/lib/dovecot/lib20_mail_log_plugin.so doveadm(root): Debug: Module loaded: /opt/dovecot/lib/dovecot/lib21_fts_squat_plugin.so doveadm(root): Debug: Loading modules from directory: /opt/dovecot-2.1.10/lib/dovecot/doveadm doveadm(root): Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: dlopen(/opt/dovecot-2.1.10/lib/dovecot/doveadm/lib10_doveadm_acl_plugin.so, 10): Symbol not found: _acl_user_module Referenced from: /opt/dovecot-2.1.10/lib/dovecot/doveadm/lib10_doveadm_acl_plugin.so Expected in: flat namespace in /opt/dovecot-2.1.10/lib/dovecot/doveadm/lib10_doveadm_acl_plugin.so (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: dlopen(/opt/dovecot-2.1.10/lib/dovecot/doveadm/lib10_doveadm_expire_plugin.so, 10): Symbol not found: _expire_set_deinit Referenced from: /opt/dovecot-2.1.10/lib/dovecot/doveadm/lib10_doveadm_expire_plugin.so Expected in: flat namespace in /opt/dovecot-2.1.10/lib/dovecot/doveadm/lib10_doveadm_expire_plugin.so (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_quota_plugin, because dlopen() failed: dlopen(/opt/dovecot-2.1.10/lib/dovecot/doveadm/lib10_doveadm_quota_plugin.so, 10): Symbol not fo und: _quota_user_module Referenced from: /opt/dovecot-2.1.10/lib/dovecot/doveadm/lib10_doveadm_quota_plugin.so Expected in: flat namespace in /opt/dovecot-2.1.10/lib/dovecot/doveadm/lib10_doveadm_quota_plugin.so (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_zlib_plugin, because dlopen() failed: dlopen(/opt/dovecot-2.1.10/lib/dovecot/doveadm/lib10_doveadm_zlib_plugin.so, 10): Symbol not found: _i_stream_create_deflate Referenced from: /opt/dovecot-2.1.10/lib/dovecot/doveadm/lib10_doveadm_zlib_plugin.so Expected in: flat namespace in /opt/dovecot-2.1.10/lib/dovecot/doveadm/lib10_doveadm_zlib_plugin.so (this is usually intentional, so just ignore this message) doveadm(root): Debug: Module loaded: /opt/dovecot-2.1.10/lib/dovecot/doveadm/lib20_doveadm_fts_plugin.so doveadm(cory): Debug: auth input: cory(a)domain.com uid=302 gid=6 home=/opt/mail/domain.com/cory doveadm(cory): Debug: changed username to cory(a)domain.com doveadm(cory): Debug: Effective uid=302, gid=6, home=/opt/mail/domain.com/cory doveadm(cory): Debug: Namespace inbox: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=mdbox:/opt/mail/domain.com/cory/mdbox doveadm(cory): Debug: fs: root=/opt/mail/domain.com/cory/mdbox, index=, control=, inbox=, alt= doveadm(cory): Debug: Namespace : Using permissions from /opt/mail/domain.com/cory/mdbox: mode=0700 gid=-1 doveadm(cory): Warning: mdbox /opt/mail/domain.com/cory/mdbox/storage: rebuilding indexes doveadm(cory): Error: mdbox /opt/mail/domain.com/cory/mdbox/storage: Duplicate GUID c3bbb2234d93af505873010097ac0257 in m.1:428519 and m.1:441340 doveadm(cory): Error: mdbox /opt/mail/domain.com/cory/mdbox/storage: Duplicate GUID c3bbb2234d93af505873010097ac0257 in m.1:428519 and m.1:453628 [...] doveadm(cory): Error: mdbox /opt/mail/domain.com/cory/mdbox/storage: Duplicate GUID d45f7f111894af506273010097ac0257 in m.83:8565306 and m.83:8594879 Segmentation fault: 11 macy:postfix root# /opt/dovecot/bin/doveconf -n # 2.1.10: /opt/dovecot-2.1.10/etc/dovecot/dovecot.conf doveconf: Warning: service anvil { client_limit=1000 } is lower than required under max. load (1503) # OS: Darwin 11.4.2 x86_64 auth_cache_negative_ttl = 0 auth_cache_size = 1 M auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login auth_username_format = %n(a)domain.com auth_verbose = yes auth_verbose_passwords = plain default_internal_user = _dovecot default_login_user = _dovenull default_process_limit = 500 disable_plaintext_auth = no first_valid_uid = 300 instance_name = dovecot-2.1.10 listen = 192.168.20.123 mail_debug = yes mail_location = mdbox:%h/mdbox mail_plugin_dir = /opt/dovecot/lib/dovecot mail_plugins = fts fts_squat mail_log notify mail_privileged_group = mail maildir_very_dirty_syncs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mdbox_rotate_size = 10 M namespace inbox { inbox = yes location = prefix = separator = / } passdb { args = scheme=CRYPT username_format=%u /opt/dovecot/etc/dovecot/users driver = passwd-file } plugin { fts = squat mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size from subject } protocols = imap lmtp service aggregator { fifo_listener replication-notify-fifo { mode = 00 } } service auth { unix_listener /opt/local/var/spool/postfix/private/auth { group = _postfix mode = 0660 user = _postfix } unix_listener auth-userdb { group = mail mode = 0660 user = admin } } service director { fifo_listener login/proxy-notify { mode = 00 } } service imap { executable = imap postlogin } service lmtp { unix_listener /opt/local/var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } service postlogin { executable = script-login rawlog -t } service stats { fifo_listener stats-mail { mode = 00 } } ssl_cert = </apposite/etc/ssl/mail_domain_com/mail_domain_com.crt ssl_key = </apposite/etc/ssl/mail_domain_com/mail_domain_com.key userdb { args = username_format=%u /opt/dovecot/etc/dovecot/users driver = passwd-file } verbose_proctitle = yes protocol imap { mail_max_userip_connections = 16 }

2 2

[Dovecot] Migration Problem UW-IMAP to Dovecot Maildir
by Michael Sloan 03 Jan '13

03 Jan '13

I've just replaced our ancient (10-year old) mail server running Sendmail/UW-IMAP on Solaris with Postfix/Dovecot 2.1.10 running on Linux on new hardware. I opted to go with virtual users and I didn't want to create system accounts and I might end up hosting another department's mail as well. We have a mix of POP3 and IMAP users, roughly 90 total. The POP3 user mailboxes migrated without a hitch, and the IMAP user mailboxes (in what looks like mbox format) migrated well for the INBOX (found in /var/mail/<username> ) but for those few who managed to create local folders and had mail files in their home directories, those mail files were ignored. Is there any clean way to manage to migrate those folders to the new server now? There were no .mailboxlist or .subscription files anywhere on the old mail server. When I was planning the migration, I tried a variety of the methods listed on the UW-IMAP and generic migration pages including dsync, uw2dovecot.pl, and several others. What appeared to work well at the time was this, although I still have the mail in users' home directories to recover/migrate: /usr/local/bin/doveadm -o imapc_user=$1 -o pop3c_user=$1 -o imapc_password=$2 -o pop3c_password=$2 backup -R -u $1(a)caps.fsu.edu imapc: with this dovecot.conf: # 2.1.10: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 3.0.13-0.27-pae i686 SUSE Linux Enterprise Server 11 (i586) ext3 auth_mechanisms = plain login disable_plaintext_auth = no imapc_features = rfc822.size imapc_host = p1.caps.fsu.edu imapc_list_prefix = INBOX listen = * mail_location = maildir:/var/vmail/%d/%n/Maildir namespace { hidden = yes list = no location = pop3c: prefix = POP3-MIGRATION-NS/ } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = . } passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { pop3_migration_mailbox = POP3-MIGRATION-NS/INBOX } pop3_uidl_format = %08Xv%08Xu pop3c_host = p1.caps.fsu.edu service auth { unix_listener /var/run/dovecot/auth-master { mode = 0600 user = vmail } unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = uid=vmail gid=vmail home=/var/vmail/%d/%n allow_all_users=yes driver = static } protocol lda { auth_socket_path = /var/run/dovecot/auth-master log_path = mail_plugins = postmaster_address = postmaster(a)caps.fsu.edu } protocol doveadm { mail_plugins = " pop3_migration" } -- Michael Sloan Systems Administrator FSU Center for Advanced Power Systems sloan(a)caps.fsu.edu

1 0

[Dovecot] Vacation Notice Not Working
by Ch Chai 03 Jan '13

03 Jan '13

To Dovecot, When I try to active Vacation Notice using Egroupware, I can see (xxxx.sieve) generated in mail server. but not working. OS : Fedora 14 Installed Packages: - Postfix - Dovecot (2.0.15) note : come with Fedora 14 - Dovecot-pigeonhole (2.0.15) note: come with Fedora 14 - ispconfig 2 - Egroupware (Email Client) my setting in /etc/dovecot/dovecot.conf protocols = sieve imap pop3 plugin { plugin = sieve sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } service managesieve-login { inet_listener managesieve-login { address = * port = 2000 } } protocol lda { #hostname = example.com mail_plugins = sieve quota postmaster_address = postmaster(a)example.com auth_socket_path = /var/run/dovecot/auth-master log_path = /var/log/dovecot-deliver.log } protocol sieve { managesieve_implementation_string = Cyrus timsieved v2.2.13 managesieve_logout_format = bytes ( in=%i : out=%o ) managesieve_max_line_length = 65536 }

4 10

[Dovecot] How To Remove?
by Christian Guastella 03 Jan '13

03 Jan '13

hi, i was looking to setup imap on an old PPC G5 mac i have running as webserver and gateway/firewall machine.. found a dovecot-2.1.7-0.pkg online, and it looked like the typical easy install thing.. someplace called rudix made the package.. not much there in way of instructions, but after i finally figured out where the executable had been stuck i tried it, just to see what kinda config errors would be thrown-up.. got the line below.. /usr/local/sbin/dovecot: Bad CPU type in executable so i'm guessing this means dovecot is intel-cpu only? i don't have the time or patience to read all the unix junk, and get a compiler, do all the make files etc.. been years since i did any of that, and don't want to do it again.. the pkg installer did not come with an uninstaller, and since the install is pretty much useless, is there some list of what it installed so i can get rid of it all? thanks, christian

4 4

[Dovecot] Help with LDA
by Joy 01 Jan '13

01 Jan '13

Hi, Can anyone tell me how to specify correctly the following line:- |/var/qmail/bin/preline -f /usr/local/dovecot/libexec/dovecot/dovecot-lda -d $USER@$DOMAIN i want dovecot lda to look for mail address instead of uid which is without domain in my case. Thanks

1 0

Re: [Dovecot] Dovecot Virtual Users with Sendmail
by DormitionSkete＠hotmail.com 01 Jan '13

01 Jan '13

Well our situation is kind of like this: We've been using UW-Imap for 12-15 years, and have loved it. It has a beauty and simplicity to it that is simply wonderful. We're located in a remote part of the Rocky Mountains, and the only internet connection we can get that's faster than a dial-up is a satellite. Lousy upload speeds. Can't host our own sites here. We've been hosting our sites on one of our parishioner's servers for years; but through the years, that's become more and more problematic, and we'd like to do more with it than we currently can. We'd like to set up our own server at our guest house in town. I wanted to use OpenIndiana (Solaris) to take advantage of some of the really amazing features it has. So, I set up UW-Imap on it. Works great. Glory be to our holy God. The problem is, after I got all that working, I went to set up the users for it, and discovered the GUI for creating the users won't allow me to add any users with usernames longer than eight characters. I'm not real dependent on GUI's, and a quick search on the net told me that I can easily add the users with the long user names from the command line. So, I asked on the UW-Imap and on the OpenIndiana list for people's experience about this. Two people said they'd been using long user names on Solaris and BSD for years without any problems, while two others recommended changing to an IMAP server that supports virtual users. One of those recommended Dovecot. So I started looking at Dovecot. I'm not real keen on Sendmail, but to make matters worse, we host our own email on our server here in the mountains. Since we can't get reverse DNS set up for our satellite connection, we have to relay our emails through our parishioner's server, which does have reverse DNS, or else most people's email servers reject them as spam. We also need to be able to send and receive emails from multiple domains. So, I have to be able to figure out how to do both parts of the relay -- our part where we tell our MTA to relay it through the other host, and what will become the server at our guest house to accept those emails and relay them on to the recipients. And the multiple domain issue. I can do all this with UW-Imap and Sendmail, because we've already done all the fighting necessary to get it to work. We've been doing it for years. It just leaves us with the question of whether it's better to go with using UW-Imap on a system that's not designed to support long user names, and possibly getting bit by that, or whether it's better to fight it out trying to learn all this other stuff with a different IMAP server and MTA? Fun! I could probably get Cyrus IMAP to work with Sendmail, because I tried it briefly years ago and already have gone through the grief of figuring that out. But I didn't particularly care for it. One of the things I like most about UW-Imap -- and Dovecot shares this -- is that it's easy to backup, restore inadvertently deleted directories, and to move emails from one server to another. From what I remember, Cyrus wasn't so friendly about that. And it was more difficult to administer than UW-Imap and Dovecot. After reading the 13-page article Ken posted this afternoon, I started looking at Postfix. My impression is, that maybe this might be a good route to try. Dovecot - PostFix - and if I'm going to go through all that, I might as well go with Sieve, instead of Procmail, like we've been using for years. I used Sieve briefly with Cyrus. I've never been thrilled with Procmail. So, with all that background, if anyone would like to share any suggestions or advice, I would certainly appreciate it. Cordially, Peter, hieromonk On Dec 31, 2012, at 8:34 PM, Noel Butler wrote: > On Mon, 2012-12-31 at 16:52 -0700, DormitionSkete(a)hotmail.com wrote: >> >> Thank you very much for the article. It was quite interesting. All thirteen pages! >> >> Unless somebody else posts that they've managed to get Sendmail to work with Dovecot virtual users, then I think your suggestion to look at a different MTA might just be the best route to take. >> >> Thank you again. I do appreciate it. >> >> I hope you have a happy new year! -- All year long!! >> >> fp >> >> > Hi, > Years (well decade) ago we used Sendmail, then we started having more domains, it was getting very messy, the choice was move to Cyrus or change our MTA,Cyrus was a maze of bdb hell it was very picky, so it never made it off the dev box, moved to qmail with vpopmail , but then qmail was useless as a ..... on a bull, so we used sendmail up front redirecting to qmail, in 2008 we re structured and moved to postfix and dovecot and never looked back since. > > If you don't have a central portal, there is code out there to allow you and your domain managers and their users to manage their mail, postfixadmin (I never really liked) or vmail manager GRS from grsoft, wrote by Peter Gutwein which is what I use personally. > > I was a long time fan of sendmail, but I tried to get mysql options included to make virtual users easy, but it was decided that would not happen, and as I predicted, sendmails popularity would suffer because of it, since postfix w/mysql is a breeze. > > So learn from everyone else's lessons, and give very serious consideration to changing your setup now, before you get too big an the change will become a nightmare <face-smile.png> > >

1 0

[Dovecot] dovecot crashing?
by Eric 30 Dec '12

30 Dec '12

Happy holidays! I am experiencing an issue when trying to check my mail using IMAP. with Dovecot I have tried checking my mail using a full GUI client (Thunderbird) and telnet. Both times I get disconnected before all of my messages can be downloaded and I see an error in my mail log. Here are the details: [root@cust19-1-prod-domain userqa]# dovecot --version 2.0.9 [root@cust19-1-prod-domain userqa]# dovecot -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-164.11.1.el5 x86_64 CentOS release 5.4 (Final) disable_plaintext_auth = no login_trusted_networks = 172.19.136.0 mail_location = maildir:~/Maildir mail_max_userip_connections = 100 mbox_write_locks = fcntl mmap_disable = yes passdb { args = scheme=plain username_format=%n /etc/dovecot/users driver = passwd-file } protocols = imap ssl = no userdb { args = username_format=%n /etc/dovecot/users driver = passwd-file } [root@cust19-1-prod-domain userqa]# i try to check my mail: username@ops1-1-domain:~$ telnet cust19-1-prod-domain imap Trying 172.19.136.223... Connected to cust19-1-prod-domain.domain.net (172.19.136.223). Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN] Dovecot ready. 1 LOGIN userqa mypassword 1 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS] Logged in 3 EXAMINE INBOX * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) * OK [PERMANENTFLAGS ()] Read-only mailbox. * 1 EXISTS * 0 RECENT * OK [UNSEEN 1] First unseen. * OK [UIDVALIDITY 1356130761] UIDs valid * OK [UIDNEXT 5] Predicted next UID * OK [HIGHESTMODSEQ 1] Highest 3 OK [READ-ONLY] Select completed. 4 FETCH 1 BODY[] I get some binary output and some mail headers, but then it crashes.. Not sure if you guys want to see all of the extremely verbose output, so I put it at the end of this message. The last messages that it processes is a message with an Excel spreadsheet attached to it (a .xlsx file) i enabled core dumps: echo 'DAEMON_COREFILE_LIMIT="unlimited"' >> /etc/sysconfig/dovecot Now I see this in /var/log/maillog: 2012-12-25T17:53:47-08:00 cust19-1-prod-domain dovecot: master: Error: service(imap): child 11265 killed with signal 11 (core dumped) core dumps are being written here, but they're empty: [root@cust19-1-prod-domain userqa]# pwd /mnt/mail/userqa [root@cust19-1-prod-domain userqa]# ls -lh total 20K -rw------- 1 userqa userqa 0 Dec 25 17:52 core.11111 -rw------- 1 userqa userqa 0 Dec 25 17:53 core.11265 -rw------- 1 userqa userqa 0 Dec 25 17:58 core.11812 drwx------ 7 userqa userqa 4.0K Dec 25 17:58 Maildir [root@cust19-1-prod-domain userqa]# What should I try now? Is it possible that Dovecot is having difficulty processing the attachment file? If I delete this user's mailbox file and send basic text e-mail to the user I can read/retrieve them just fine.. there only seems to be an issue when this message with its attachment arrives. The attachment seems small in size: Content-Disposition: attachment; filename="report_amex.xlsx"; size=20527; That means the attachment is 20527 bytes, correct? Thank you for any suggestions/help you can offer! Here's the message that it seems to be having issues with: Return-Path: <user(a)company.com> Received: from mxout.mailprovider.com (slb1-prod-domain.domain.net[172.19.136.4]) by cust19-1-prod-domain.domain.net (8.13.8/8.13.8) with ESMTP id qBOM8oIE029715 for <userqa_2938(a)integration.company.com>; Mon, 24 Dec 2012 14:08:50 -0800 Received: from mxout.mailprovider.com (localhost [127.0.0.1]) by mxout.mailprovider.com (Postfix) with ESMTP id 017E455325B for <userqa_2938(a)integration.company.com>; Mon, 24 Dec 2012 17:08:51 -0500 (EST) X-Virus-Scanned: by SpamTitan at mail.lan Received: from HUB025.mail.lan (unknown [10.110.2.1]) by mxout.mailprovider.com (Postfix) with ESMTP id 63DA0553132 for <userqa_2938(a)integration.company.com>; Mon, 24 Dec 2012 17:08:50 -0500 (EST) Received: from MAILR001.mail.lan ([10.110.18.28]) by HUB025.mail.lan ([10.110.17.25]) with mapi; Mon, 24 Dec 2012 17:08:48 -0500 From: User Name <user(a)company.com> To: "userqa_2938(a)integration.company.com" <userqa_2938(a)integration.company.com> Date: Mon, 24 Dec 2012 17:08:47 -0500 Subject: Thread-Index: Ac3fx0lCAoza6rTzQTSh8g52mx84GwAC2GGwAAH1lkAAkiyekA== Message-ID: <0370E60157CA7E4097D81B9E09728A941CB269A29D(a)MAILR001.mail.lan> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: multipart/mixed; boundary="_004_0370E60157CA7E4097D81B9E09728A941CB269A29DMAILR001maill_" MIME-Version: 1.0 --_004_0370E60157CA7E4097D81B9E09728A941CB269A29DMAILR001maill_ Content-Type: multipart/alternative; boundary="_000_0370E60157CA7E4097D81B9E09728A941CB269A29DMAILR001maill_" --_000_0370E60157CA7E4097D81B9E09728A941CB269A29DMAILR001maill_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable From: User Name Sent: Friday, December 21, 2012 6:23 PM To: 'userqa_2938(a)integration.company.com' Subject: FW: With Best Regards, User Name From: User Name Sent: Friday, December 21, 2012 5:27 PM To: 'userqa_2938(a)integration.company.com' Subject: FW: With Best Regards, User Name From: User Name Sent: Friday, December 21, 2012 4:05 PM To: 'userqa_2938(a)integration.company.com' Subject: With Best Regards, User Name --_000_0370E60157CA7E4097D81B9E09728A941CB269A29DMAILR001maill_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr= osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:= //www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV=3D"Content-Type" CONTENT= =3D"text/html; charset=3Dus-ascii"><meta name=3DGenerator content=3D"Micros= oft Word 12 (filtered medium)"><style></style></head><body lang=3DEN-US link=3Dblue vli= nk=3Dpurple><div class=3DWordSection1><o:p> </o:p><o:p> </o:p><div><s= pan style=3D'color:#1F497D'>With Best Regards,<o:p></o:p>User Name<o:p></o:p></= p>______________________= _<o:p></o:p>s= kype: user<o:p></o:p>cell phone: +1 224 600 0072<o:p></o:p></div><o:p> </o:p><div= ><div style=3D'border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in= 0in 0in'>From: User Name Sent: Friday, Dec= ember 21, 2012 6:23 PM To: 'userqa_2938(a)integration.aggregateknow= ledge.com' Subject: FW: <o:p></o:p></div></div><o:p> </o:p><o:p> </o:p><div>With Best Regards,<o:p></o:p>User Name<o:p></o:p>_______________________<o:p></= o:p>skype: eg= irik<o:p></o:p>cell phone: +1 224 600 0072<o:p></o:p></div><o:p> </o:p><div><div styl= e=3D'border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>= From: User Name Sent: Friday, December 21, = 2012 5:27 PM To: 'userqa_2938(a)integration.company.com'= Subject: FW: <o:p></o:p></div></div><o:p> </o:p><o:p> </o:p><div>With Best Regards,<o:p></o:p><spa= n style=3D'color:#1F497D'>User Name<o:p></o:p>_______________________<o:p></o:p></span= >skype: user<o:p><= /o:p>cell pho= ne: +1 224 600 0072<o:p></o:p></div><o:p> </o:p><div><div style=3D'borde= r:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>From: User Name Sent: Friday, December 21, 2012 4:0= 5 PM To: 'userqa_2938(a)integration.company.com' S= ubject: <o:p></o:p></div></div><o:p>&nb= sp;</o:p><o:p> </o:p><o:p> </o:p>With Best Regards,<o:p></o:p></p= >User Name<o:p></o:p>______= _________________<o:p></o:p>skype: user<o:p></o:= p>cell phone: +1 224 600 0072<o:p></o:p><o:p> </o:p></div></body></html>= --_000_0370E60157CA7E4097D81B9E09728A941CB269A29DMAILR001maill_-- --_004_0370E60157CA7E4097D81B9E09728A941CB269A29DMAILR001maill_ Content-Type: application/vnd.openxmlformats-officedocument.spreadsheetml.sheet; name="report_company.xlsx" Content-Description: report_company.xlsx Content-Disposition: attachment; filename="report_company.xlsx"; size=20527; creation-date="Thu, 11 Oct 2012 22:38:14 GMT"; modification-date="Mon, 24 Dec 2012 22:08:22 GMT" Content-Transfer-Encoding: base64 UEsDBBQABgAIAAAAIQDretKTYgEAAJAEAAATANwBW0NvbnRlbnRfVHlwZXNdLnhtbCCi2AEooAAC AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAArFTLTsMwELwj8Q+RryhxywEh1LQHHkeoBHyAsTeNVce2vNvS/j2bhFaASqSq vSSKop2ZnRl7Mts0LltDQht8KcbFSGTgdTDWL0rx/vaU34oMSXmjXPBQii2gmE0vLyZv2wiY8bTH UtRE8U5K1DU0CosQwfOfKqRGEX+mhYxKL9UC5PVodCN18ASecmoxxHTywgKSNZDNVaJn1TCP3DhJ jAb9c1wwnsju+8GWuxQqRme1IlYu1978Yc1DVVkNJuhVw1xFB3bVosh/CZG2DvBkKowJlMEagBpX 9KA75geo1MpR9rhhB3rTEzg8brVvMwue7NbH2kYcYBj2btiTz5CWHyEsz+1K607RKOt3ug+VgNOb pxBRctYnC4DWcgMmjwwJiSzsPTvEzQVsd+9iRNm9Tm/h72rs8Yc8YB1YqwTmlRKfyrPX8yf2kI59 FjokOD6MXWfb6QMJyO4+mX4BAAD//wMAUEsDBBQABgAIAAAAIQC1VTAj9QAAAEwCAAALAM4BX3Jl bHMvLnJlbHMgosoBKKAAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADlDAAAeGwv c3R5bGVzLnhtbFBLAQItABQABgAIAAAAIQDppiW4ggYAAFMbAAATAAAAAAAAAAAAAAAAALIUAAB4 bC90aGVtZS90aGVtZTEueG1sUEsBAi0AFAAGAAgAAAAhAOhJXyi8LAAAyx8BABgAAAAAAAAAAAAA AAAAZRsAAHhsL3dvcmtzaGVldHMvc2hlZXQxLnhtbFBLAQItABQABgAIAAAAIQAU45/9UAEAAGMC AAARAAAAAAAAAAAAAAAAAFdIAABkb2NQcm9wcy9jb3JlLnhtbFBLAQItABQABgAIAAAAIQBxujxc hQEAAAMDAAAQAAAAAAAAAAAAAAAAAN5KAABkb2NQcm9wcy9hcHAueG1sUEsFBgAAAAAKAAoAgAIA AJlNAAAAAA== --_004_0370E60157CA7E4097D81B9E09728A941CB269A29DMAILR001maill_-- Connection closed by foreign host.

3 5