- dovecot - dovecot.org

[Dovecot] dovecot-auth restaring and caching
by Angel L. Mateo 03 Apr '12

03 Apr '12

Hello, I'm trying to configure dovecot (2.0.13) to cache user and pass dbs. This a mail server whose purpose is only to deliver messages through dovecot lda. My users are in a ldap server. So I have configure auth_cache_size (with 20MB) and auth_cache_ttl (with 1 day). I have checked that caching is being done, and it is. If a send a message to a user, dovecot looks for it in my ldap server. If then I send another, then it uses cache information. The problem I'm having is that if I have no activity in the server, dovecot stops its auth process and when another message is received, it restarted it, but with an empty cache. This is the auth log for the first message: Mar 22 10:29:41 lynx10 dovecot: auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Mar 22 10:29:41 lynx10 dovecot: auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libauthdb_ldap.so Mar 22 10:29:41 lynx10 dovecot: auth: Debug: master in: USER#0111#011amateo#011service=lda Mar 22 10:29:41 lynx10 dovecot: auth: Debug: prefetch(amateo): passdb didn't return userdb entries, trying the next userdb Mar 22 10:29:41 lynx10 dovecot: auth: Debug: userdb-cache(amateo): miss Mar 22 10:29:41 lynx10 dovecot: auth: Debug: ldap(amateo): user search: <search base and filter> fields=irisMailbox,homeDirectory,uidNumber,gidNumber Mar 22 10:29:41 lynx10 dovecot: auth: Debug: ldap(amateo): result: uidNumber(uid)=XXXXX gidNumber(gid)=XXX homeDirectory(home)=XXXXXXXXXX Mar 22 10:29:41 lynx10 dovecot: auth: Debug: master out: USER#0111#011amateo#011uid=XXXXXX#011gid=XXX#011home=XXXXXXXXXXXX And this is the second one, just after a few minutes: Mar 22 10:41:03 lynx10 dovecot: auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Mar 22 10:41:03 lynx10 dovecot: auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libauthdb_ldap.so Mar 22 10:41:03 lynx10 dovecot: auth: Debug: master in: USER#0111#011amateo#011service=lda Mar 22 10:41:03 lynx10 dovecot: auth: Debug: prefetch(amateo): passdb didn't return userdb entries, trying the next userdb Mar 22 10:41:03 lynx10 dovecot: auth: Debug: userdb-cache(amateo): miss Mar 22 10:41:03 lynx10 dovecot: auth: Debug: ldap(amateo): user search: <search base and filter> fields=irisMailbox,homeDirectory,uidNumber,gidNumber Mar 22 10:41:03 lynx10 dovecot: auth: Debug: ldap(amateo): result: uidNumber(uid)=XXXXX gidNumber(gid)=XXX homeDirectory(home)=XXXXXXXXXXX Mar 22 10:41:03 lynx10 dovecot: auth: Debug: master out: USER#0111#011amateo#011uid=XXXXX#011gid=XXX#011home=XXXXXXXXXX This is my configuration: root@lynx10:/etc/dovecot/conf.d# doveconf -n # 2.0.13: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-4-amd64 x86_64 Ubuntu 10.04.4 LTS auth_cache_size = 20 M auth_cache_ttl = 1 days auth_debug = yes auth_verbose = yes hostname = lynx10 passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_extensions = +imapflags sieve_max_redirects = 15 } postmaster_address = postmaster(a)um.es protocols = " imap lmtp pop3" service auth { unix_listener auth-userdb { mode = 0666 } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol lmtp { mail_plugins = " sieve" } protocol lda { mail_plugins = " sieve" } Any idea? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información _o) y las Comunicaciones Aplicadas (ATICA) / \\ http://www.um.es/atica _(___V Tfo: 868887590 Fax: 868888337

2 3

[Dovecot] File/folder permission issues in 2.1.3
by Christian Rößner 03 Apr '12

03 Apr '12

Hi, I figured out that Dovecot does not honer secondary groups with auth/auth-worker (??), if doing LDAP/TLS stuff. I had to use file system acls to add the user "vmail" to /etc/ssl/private and to the corresponding key file: doveconf -n # 2.1.3: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-40-generic-pae i686 Ubuntu 10.04.4 LTS auth_master_user_separator = * auth_mechanisms = plain login auth_verbose = yes hostname = mail.roessner-net.de lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes mail_access_groups = vmail mail_gid = vmail mail_location = mdbox:~/mdbox mail_plugins = autocreate quota acl fts fts_solr zlib mail_log notify mail_privileged_group = mail mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { list = children location = mdbox:%%h/mdbox prefix = shared/%%u/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes location = mailbox "Deleted Messages" { special_use = \Trash } mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } mailbox junkmail { special_use = \Junk } prefix = separator = / type = private } passdb { args = /etc/dovecot/master-users driver = passwd-file master = yes pass = yes } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile acl_shared_dict = file:/var/mail/virtual/shared-mailboxes.db autocreate = Trash autocreate2 = Sent autocreate3 = Drafts autocreate4 = junkmail autosubscribe = Trash autosubscribe2 = Sent autosubscribe3 = Drafts autosubscribe4 = junkmail fts = solr fts_solr = break-imap-search url=http://localhost:8080/solr/ mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size quota = dict:User quota::file:%h/mdbox/dovecot-quota quota_rule = *:storage=300M:messages=20000 quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = ~/.dovecot.sieve sieve_dir = ~/sieve zlib_save = gz zlib_save_level = 6 } protocols = imap pop3 lmtp sieve service auth-worker { unix_listener auth-worker { user = vmail } user = vmail } service auth { unix_listener auth-userdb { mode = 0600 user = vmail } user = vmail } service dict { unix_listener dict { mode = 0600 user = vmail } } service lmtp { inet_listener lmtp { address = ::1 port = 24 } } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { user = vmail } user = dovecot } ssl_ca = </ca/psw_net/SSL123_CA_Bundle.pem ssl_cert = </ca/psw_net/mail_roessner-net_de.crt ssl_key = </ca/psw_net/mail_roessner-net_de.key userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } verbose_proctitle = yes protocol lmtp { mail_plugins = autocreate quota acl fts fts_solr zlib mail_log notify sieve } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep tb-lsub-flags mail_max_userip_connections = 50 mail_plugins = autocreate quota acl fts fts_solr zlib mail_log notify imap_quota imap_acl imap_zlib } Normally, mail is placed under /var/mail/virtual as user vmail, group vmail. Is there something wrong with my config that prevents switching to secondary groups? /etc/dovecot/dovecot-ldap.conf.ext: uris = ldap://ldap0.roessner-net.de/ ldap://db.roessner-net.de/ sasl_bind = yes sasl_mech = EXTERNAL tls = yes tls_ca_cert_file = /etc/ssl/certs/ca-certificates.crt tls_cert_file = /etc/ssl/certs/mx0.roessner-net.de.pem tls_key_file = /etc/ssl/private/mx0.roessner-net.de.key.pem tls_require_cert = hard base = ou=people,ou=it,dc=roessner-net,dc=de user_attrs = rnsMSQuota=quota_rule=*:storage=%$,rnsMSMailboxHome=home user_filter = (&(objectClass=rnsMSDovecotAccount)(rnsMSRecipientAddress=%u)) pass_attrs = rnsMSDeliverToAddress=user,userPassword=password pass_filter = (&(objectClass=rnsMSDovecotAccount)(rnsMSRecipientAddress=%u)(rnsMSEnableDovecot=TRUE)) iterate_attrs = rnsMSDovecotUser=user iterate_filter = (objectClass=rnsMSDovecotAccount) default_pass_scheme = CRYPT Thanks in advance. -Christian --- Roessner-Network-Solutions Bachelor of Science Informatik Nahrungsberg 81, 35390 Gießen F: +49 641 5879091, M: +49 176 93118939 USt-IdNr.: DE225643613 http://www.roessner-network-solutions.com

2 1

Re: [Dovecot] Many messages clustered around the same date.saved value
by Joseph Tam 03 Apr '12

03 Apr '12

Timo Sirainen <tss(a)iki.fi> wrote: >>> Which mailbox format? With Maildir the date.saved is taken from >>> dovecot.index.cache file, and in some cases that might get dropped. If >>> it does, then it fallbacks to using the file's ctime. >> >> mbox. > > Ah, with mbox there isn't any usable fallback for date.saved. If it's > not in dovecot.index.cache, the current time is used. I'm a little confused as to why it needed a fallback. In other words, why wasn't date.saved put into the index as soon as the IMAP operation copied it into "Trash"? If this data isn't set at that time, when does it get instantiated? When I actually ask for it? Joseph Tam <jtam.home(a)gmail.com>

2 1

[Dovecot] Is it possible to migrating mail to dovecot using imapc?
by Dr Josef Karthauser 03 Apr '12

03 Apr '12

I'm excited to hear that dovecot now supports imap as a mailbox type. I've got a mailbox over on another imap server, which I want to migrate to dovecot. I was wondering whether I could use 'doveadm backup' to setup a two way synchronisation process between the old imap mailbox and the new dovecot mailbox. That way I can do the migration, and can coordinate the mail clients changing where they pick up their email from later. But, I can't find much documentation on imapc, other than it exists. Is this kind of move possible now? Would someone mind giving me some hints as to how to make it work please? Thanks :), Joe

2 9

[Dovecot] dovecot 2.1 breaks FTS + pre-auth?
by dm-list-email-dovecot＠scs.stanford.edu 03 Apr '12

03 Apr '12

Hi. I use dovecot in the simplest possible way, as an IMAP server in pre-auth mode over ssh or just locally over a unix-domain socket (e.g., with offlineimap, which runs much faster using dovecot for the local message store). Ideally I would like to avoid running any extra daemons or setting up anything as root. Until recently, this has worked fine by just setting the CONFIG_FILE environment variable to something in my home directory. Here is my configuration: $ export CONFIG_FILE=$HOME/etc/dovecot.conf $ dovecot -n # 2.1.3: /home/dm/etc/dovecot.conf # OS: Linux 3.2.13-1-ARCH x86_64 mail_location = maildir:~/Mail/inbox mail_plugins = " fts fts_squat" plugin { fts = squat fts_squat = partial=4 full=10 } doveconf: Error: ssl enabled, but ssl_cert not set doveconf: Fatal: Error in configuration file /home/dm/etc/dovecot.conf: ssl enabled, but ssl_cert not set Full text search used to work just fine with this configuration, and still does on a machine I have running dovecot 2.0.13. However, on the machine with 2.1, I get errors about /var/run/dovecot/index not existing. $ printf "a select INBOX\nb search text xyzzy\nc logout\n" \ | /usr/lib/dovecot/imap * PREAUTH [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE] Logged in as dm imap(dm): Error: net_connect_unix(/var/run/dovecot/indexer) failed: No such file or directory ... Needless to say, no dovecot.index.search or dovecot.index.search.uids file is created after this error. While I can't write /var/run/dovecot, this is not a permission issue. For example, adding base_dir=/home/dm (my home directory) to the configuration file yields the same error for /home/dm/indexer. I'm guessing something has changed where imap requires an indexer daemon and doesn't launch it in pre-auth mode any more, but I can't find anything about this in the documentation. In short, if anyone can tell me how to use FTS in conjunction with pre-auth mode or point me to a working example, I would appreciate it.

2 1

[Dovecot] 2.1.3: doveadm mailbox delete lost the -s option
by Micah Anderson 03 Apr '12

03 Apr '12

Looks like the recently added -s (for unsubscribing) option to doveadm mailbox delete went missing: root@vireo# /usr/bin/doveadm mailbox delete -u micahtest -s restored delete: invalid option -- 's' doveadm mailbox delete [-u <user>|-A] [-S <socket_path>] [-s] <mailbox> [...] although the option still is shown as valid :) micah --

2 1

[Dovecot] Dovecot stones
by Timo Sirainen 03 Apr '12

03 Apr '12

For the last few days I've been thinking about my company and what it really should do, and as much as the current plan seems reasonable, I think in good conscience I really can't help but to bring up an alternative plan: The support for Dovecot is quite good already, but wouldn't it be better if it was GUARANTEED that your email server was ALWAYS working with zero downtime or other problems? After some thinking, planning and consulting with my spiritual guides I realized I really should just go ahead and do it: From now on you can buy blessed Dovecot stones (http://www.dovecot.org/tmp/stone1.jpg) which are guaranteed to keep your email server running. I don't think there's really any further reason for me to provide commercial support. Probably the whole Dovecot mailing list will be pretty much useless after this as well, so I might as well stop posting there. If you have any problems, you'll just buy a Dovecot stone and the problem will go away. If for any reason that doesn't work, it means that your problem is more difficult than most and you need to buy a few more stones. Please remember that each shipment may take up to 3 weeks to reach you, so get your stones early and in sufficient quantities. A small email server will be happy enough with a single small Dovecot stone, but the more users you have the more stones you'll likely need. This is because most people are rather unhappy with their lives, and they project their negative energies towards their surroundings, including their email servers. To overcome this negative energy you need to have a counterbalancing positive energy, which the Dovecot stones will provide you. The Dovecot stones are hand painted from the finest materials available to the sister of the author of Dovecot that she could find in the local shops. Each stone contains such love and dedication towards the well being of Dovecot that you will shed tears when you lay your eyes upon their physical being. The images provided here unfortunately don't do justice to them. http://www.dovecot.org/tmp/stone2.jpg - This is how i keep my home desktop running all day every day. I have NEVER broken a single hard drive in my life. I don't even bother to keep backups, because I KNOW it is useless for me. A small Dovecot stone can be bought for 10 euros, a medium sized stone for 100 euros and a large stone for 500 euros. Each large stone can usually handle around 1000-2000 users before you need to buy more. If you have millions of users we'll need to find you a larger rock from my parents' backyard. There are only a limited number of such rocks available (we disposed of most of them to our neighbors' yards years ago), so their prices need to be negotiated in advance.

12 12

[Dovecot] Mail migration troubles
by Spyros Tsiolis 03 Apr '12

03 Apr '12

Hello all, OK, I would really appreciate your help on this. I managed to do a pretty straight-forward and flawless migration on dovecot from one domain to another. However, I have this nagging problem with most of the thunderbird MTAs. When I try to delete some "test" messages I sent to make sure that everything works, it comes back with the following message on the bottom of the Thunderbird window : "The current operation on InBox did not succeed. The mail server for account "Account(a)bloomingdomain.gr" responded [TRYCREATE] mailbox doesn't exist : Trash" Now, I know it has to do something with automatically creating a trash folder. But don't know anything more. Could someone shed some light on this ? Dovecot v1.2.15 AFAIK CentOS 5.5 x86 (32-bit) other stuff On Clients : Thunderbird v11.0.1 (XP Pro / 32-bit) s. ---- "I merely function as a channel that filters music through the chaos of noise" - Vangelis

3 4

[Dovecot] imapdir still a configuration option?
by Kurt Mosiejczuk 03 Apr '12

03 Apr '12

I've been looking at moving an old IMAPdir-based solution to dovecot. I came across references that dovecot (to my pleasant surprise) added imapdir support in 1.1. However, in trying 2.0.13 (from an OpenBSD package) things start okay, but I see in the logs: "Initialization failed: Initializing mail storage from mail_location setting failed: Unknown mail storage driver imapdir" Poking around in the sources, I still see lots of references to imapdir, but see very little in the documentation. Is IMAPdir still supported in 2.0.x (or even 2.1.x)? I'd prefer not to have to migrate users via renaming, especially since they like the IMAPdir layout for their own searching. --Kurt

2 2

[Dovecot] Connection queue full on dovecot 2.0.13
by Giovanni Mancuso 03 Apr '12

03 Apr '12

Hi, i have a problem with dovecot 2.0.13. I have one dovecot in Front-end that has only: passdb { driver = static args = proxy=y host=10.0.0.6 nopassword=y } In Back-end i have one dovecot that does auth and exports imap/pop3 ports. In dovecot's log of Front-end i see: /Apr 02 14:33:34 imap-login: Info: proxy(//user(a)example.com/ <mailto:amministrazionevendite@pec.gmatica.it>/): started proxying to 10.0.0.6:143: user=<//user(a)example.com/ <mailto:amministrazionevendite@pec.gmatica.it>/>, method=PLAIN, rip=//xx.xx.xx.xx//, lip=xx.xx.xx.xx, TLS Apr 02 14:34:36 imap-login: Info: Disconnected: *Connection queue full *(auth failed, 1 attempts): user=<//user(a)example.com/ <mailto:amministrazionevendite@pec.gmatica.it>/>, method=PLAIN, rip=//xx.xx.xx.xx//, lip=//xx.xx.xx.xx//, TLS/ I see this wiki page: http://wiki2.dovecot.org/LoginProcess but i read: It works by using a number of long running login processes, each handling a number of connections. This loses much of the security benefits of the login process design, because in case of a security hole (in Dovecot or SSL library) the attacker is now able to see other users logging in and steal their passwords, read their mails, etc. Is there another way? Thanks

2 1