- dovecot - dovecot.org

[Dovecot] Dovecot 2.0 config bug with SSL certificate per protocol?
by Andy Smith 09 Apr '11

09 Apr '11

Hi, yesterday I upgraded Dovecot from 1.2 to 2.0.11. I'd seen that there was a config file converter to make the upgrade smooth so was expecting it to be pretty quick and easy. In the end I spent a long time trying to get it working as it just wouldn't listen on the ssl ports, imaps and pop3s. I am using per portocol SSL certificates, as I was in version 1.2. The part of my config is as follows (as generated by doveconf): protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep mail_plugins = fts fts_squat ssl = yes ssl_cert = </usr/local/etc/ssl.crt/imap.crt ssl_key = </usr/local/etc/ssl.key/imap.key } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv ssl = yes ssl_cert = </usr/local/etc/ssl.crt/pop3.crt ssl_key = </usr/local/etc/ssl.key/pop3.key } But when I started dovecot it was only listening on the non SSL ports for IMAP and POP3. I went through many things, adding in a service imap-login section with the SSL port set via inet_listener and spent ages googling for how to get it to work. In the end it turns out it was that the global ssl setting was set to "no", but I hadn't enabled this previously as this requires that there are global SSL certificates, which I don't have; I have specific certs for IMAP and for POP3. Also this isn't how dovecot 1.2 worked, there I specificed the protocols (pop3, pop3s, imap, imaps) and specificed the protocol certs and it worked. Anyway, I ended up just specifiing my pop3 certs as the global certs, this is then redefined in the pop3 protcol section etc. The config seems to work, but to me all this doesn't seem logical and doesn't work like in dovecot 1.2. Maybe this is something that can be cleaned up in the next version? thanks Andy.

3 5

[Dovecot] transferring imap folders
by Voytek Eymont 09 Apr '11

09 Apr '11

I have some old mail on courier-imap that I'd like to bring over some of the readme says I need to make Dovecot's inbox as "INBOX" not "Inbox" for courier-imap compatibility.. that seems to be already default, no ? also, my INBOX is mainly like 'sent/year/month' and some other 'work/this' subfolders is there a tool I need to use, or should just copy over dir tree from old server and suck'n'see ? dovecot --version 1.2.9 -- Voytek

2 1

[Dovecot] IO rate quotas?
by Kádár Tamás (KTamas) 09 Apr '11

09 Apr '11

Hi Okay so we've been having this issue since forever and I figured why the heck not ask it here since it's mostly related to dovecot. The thing is, we have a huge amount of public folders (at the moment, around 1100). Now, with dovecot indexing and caching we're mostly okay, also being careful with things like Thunderbird 3's default 'Download everything' option ("Keep messages for this account on this computer") and such. However once in a while, someone goes rogue, we install a new version of thunderbird, someone accidentally sets up an email account in thunderbird mistakingly leaving the download everything option on. This causes high IO on our server, and a single user can quickly more or less kill the whole server in mere minutes, load average quickly spiking to 30-40-50 and everything becomes sloooooow (obviously). Is there any way I can limit the amount of IO a certain user can use? Thanks and best regards, KT P.S. my dovecot -n is: # 2.0.9: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.26-2-xen-amd64 x86_64 Debian 5.0.8 auth_mechanisms = plain login disable_plaintext_auth = no listen = * mail_location = maildir:~/Maildir mail_plugins = acl maildir_very_dirty_syncs = yes namespace { inbox = yes location = prefix = separator = . type = private } namespace { location = maildir:/home/_shared/projects:INDEX=~/Maildir/_shared prefix = shared. separator = . subscriptions = no type = public } namespace { location = maildir:/home/_shared/sys:INDEX=~/Maildir/sys prefix = sys. separator = . subscriptions = no type = public } passdb { driver = pam } plugin { acl = vfile mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename flag_change append mail_log_fields = uid box msgid from subject size vsize flags mail_log_group_events = no } protocols = imap pop3 service imap { executable = imap } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } verbose_proctitle = yes protocol imap { mail_max_userip_connections = 40 mail_plugins = acl imap_acl }

7 12

[Dovecot] coredump in dovecot 2.0.11
by k b 09 Apr '11

09 Apr '11

Hi. I use dovecot-2.0.11-1.fc14.i686 on linux,redhat fedora 14. Using alpine 2.02 and Kmail 1.13.5 i have one IMAP connection to the dovecot server and one IMAP connection to a MS exchange server. After i moved a few messages from the exchange server i cannot open the folders where i placed the moved mails. instead dovecot crashes, all other directories and emails work fine. here is what i see in /var/log/messages: Apr 9 08:23:10 server00 abrt[28509]: saved core dump of pid 28508 (/usr/libexec/dovecot/imap) to /var/spool/abrt/ccpp-1302330190-28508.new/coredump (626688 bytes) Apr 9 08:23:10 server00 abrtd: Directory 'ccpp-1302330190-28508' creation detected Apr 9 08:23:10 server00 abrtd: Crash is in database already (dup of /var/spool/abrt/ccpp-1302111878-7921) Apr 9 08:23:10 server00 abrtd: Deleting crash ccpp-1302330190-28508 (dup of ccpp-1302111878-7921), sending dbus signal I can post the coredump but i will have to clean it first as i can see it contains a few emails. would it help to post the coredump or shuould i skip that?

2 1

[Dovecot] mysql lookup on another host performance q?
by Voytek Eymont 09 Apr '11

09 Apr '11

Hi, new to dovecot I'm setting a small postfix/dovecot server for virtual domain/users in mysql dovecot is on one host, mysql on another seems to be working, but I'm concerned over performance overhead of this setup; dumb Q, is there any 'proxy mysql' or cacheing option I can use ? any suggestions appreciated also, my mail users as set as 5000/5000 virtual_gid_maps = static:5000 virtual_uid_maps = static:5000 so, I should use uid/gid 5000/5000 in query below, yes ? thanks -- Voytek --------------------------------------------------------- # dovecot --version 1.2.9 Linux 2.6.32-21-generic-pae #32-Ubuntu SMP Fri Apr 16 09:39:35 UTC 2010 i686 GNU/Linux # grep -v '^ *$#.*$\?$' dovecot-sql.conf driver = mysql connect = host=host.tld dbname=ddd user=ccc password=xxx user_query = SELECT concat('/var/mail/vhosts/', maildir) as home, concat('maildir:/var/mail/vhosts/', maildir) as mail, 5000 AS uid, 5000 AS gid, concat('maildir:storage=', quota) AS quota FROM mailbox WHERE username = '%u' AND active = '1' default_pass_scheme = MD5 user_query = SELECT '/var/mail/vhosts/%d/%n@%d' as home, 'maildir:/var/mail/vhosts/%d/%n@%d' as mail, 5000 AS uid, 5000 AS gid, concat('dirsize:storage=', quota) AS quota FROM mailbox WHERE username = '%u' AND active = '1' password_query = SELECT username as user, password, '/var/mail/vhosts/%d/%n@%d' as userdb_home, 'maildir:/var/mail/vhosts/%d/%n@%d' as userdb_mail, 5000 as userdb_uid, 5000 as userdb_gid FROM mailbox WHERE username = '%u' AND active = '1'

3 3

[Dovecot] 143 STARTTLS/ 993 SSL/TLS query
by Voytek Eymont 09 Apr '11

09 Apr '11

I'm testing my new dovecot server with Thundirbird I can have it working on port 143 with STARTTLS, or on port 993 with SSL/TLS my uderstanding is that on 993 I get encrypted 'password and mail transfer' (yes ?) so what happens if I use 143 with STARTTLS, is that equivalent to port 993 if STARTTLS is used ? thanks for any insights.. -- Voytek

2 3

Re: [Dovecot] Permission Denied - cannot create inbox
by Joseph Tam 09 Apr '11

09 Apr '11

Timo Sirainen <tss(a)iki.fi> writes: > This is anyway mbox-specific problem, so I added it now to mbox page: > > http://wiki2.dovecot.org/MailLocation/mbox ... >> imap(tss): Error: >> fchown(/home/tss/mail/.imap/INBOX/dovecot.index.log.newlock, >> group=8(mail)) failed: Operation not permitted (egid=1000(tss), group >> based on /var/mail/tss - see http://wiki2.dovecot.org/Errors/NoPerm) >> > Changed the wiki link: http://wiki2.dovecot.org/Errors/ChgrpNoPerm Thanks, Timo. This will be opaque to the user, but I don't think it will happen often so it's no bother to find the problem in the logs. Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] Imap segfault on login with version 2.0.8 & 2.0.11
by Nicholas VonHollen 09 Apr '11

09 Apr '11

Hi everyone, I'm trying to upgrade/test our configuration files from Dovecot 1.2 to 2.0.11. I used the Dovecot config convert command, created a RHEL 5 x86_64 rpm, and tested it. I can connect, but once I login, the IMAP service segfaults. I've also reproduced this on version 2.0.8. I installed the debug RPM (for the stripped symbols), took a look at the core dump in gdb, and just got the _start method in ld_preload and a broken pointer in the backtrace. I tried to strace everything but the segfault doesn't happen then :-). I'm not sure what to do to get better information. I attached my client session, dovecot -n output, gdb trace, maillog, and the core dump. I published the RPMs I made at: http://c3205012.r12.cf0.rackcdn.com/dovecot-2.0.11-1_125.x86_64.rpm http://c3205012.r12.cf0.rackcdn.com/dovecot-debuginfo-2.0.11-1_125.x86_64.r… My platform is RHEL 5 with kernel 2.6.18 on x86_64. Is there anything else I can provide for more info? Thanks, Nick Nick VonHollen Rackspace Software Developer Desk: 540-443-2003 (internal 505-2003) Personal Cell: 757-710-7038

4 7

[Dovecot] restarting director
by Cor Bosman 08 Apr '11

08 Apr '11

Hi all, anyone having any problems with restarting the director? Every time I bring down 1 of the director servers, reboot it, or just restart it for whatever reason, im seeing all kinds of problems. Dovecot generally always gives me this error: Jan 20 22:49:55 imapdirector3 dovecot: director: Error: Director 194.109.26.173:444/right disconnected before handshake finished It seems the directors cant agree on forming a ring anymore, and this may be leading to problems with clients. I mostly have to resort to bringing down all directors, and restarting them all at once. Not really a workable solution. As an example, last night for a few hours we were getting complaints from customers about being disconnected, and the only obvious error in the log was the one above, after one of my colleagues had to restart a director because of some changes in the syslog daemon. After I restarted all directors withing a few seconds of each other, all complaints disappeared. Timo, i know ive asked similar questions before, but the answer just eludes me. If I have 3 director servers, and need to take one down and restart it, what is the proper method to reconnect the ring? In practice, I cant seem to work it out and I mostly end up with the above error until I just restart them all. Not fun with 20.000 clients connected. Cor

3 4

[Dovecot] Thunderbird 3.1 unable to delete subfolder of Trash under mdbox
by William Blunn 08 Apr '11

08 Apr '11

Thunderbird 3.1.9 over Windows 7. Dovecot 2.0.11 (2:2.0.11-0~auto+41 from http://xi.rename-it.nl/debian/ source on 8 Apr 2011) over Ubuntu 10.04 LTS. Trying to set up a Dovecot system with mdbox. But I also wanted to keep some Maildir. So I ended up with both mdbox and Maildir side-by-side and noticed an issue. On this system, Dovecot's global mail location is configured with maildir:~/Maildir I have a two users configured in a password-file passdb/userdb: One using the Dovecot global mail location (maildir:~/Maildir) the other with an override mail location (userdb_mail) of mdbox:~/mdbox (The only other configurations different to the default were to turn off the default system password passdb and userdb, and enable my local password-file-format passdb and userdb.) I have configured two IMAP accounts in Thunderbird 3.1.9, one to access each of the two users above. The test procedure is: In Thunderbird, create a folder at the top level (i.e. alongside Inbox), say "foo". In Thunderbird, delete the folder just created. This results in Thunderbird "moving" the folder to "Trash", resulting in a folder "Trash/foo". Up to this point, both the Maildir and mdbox users behave OK. Then in Thunderbird, delete the trashed folder "Trash/foo". At this point, things start to happen differently. With the Maildir user, the folder "Trash/foo" deletes successfully. But with the mdbox user, Thunderbird pops up an error: The current command did not succeed. The mail server for account <accountname> responded: Invalid mailbox name: Trash/foo/. The folder does disappear from the Thunderbird folder pane, but if Thunderbird is "prodded" to refresh what folders it thinks are there, then the folder reappears. If we check the user's mdbox directory, we can see that indeed the mailbox has not been deleted. Whatever I then do, I am unable to delete this folder in the mdbox user through Thunderbird. The only way I have found to safely delete the folder is to use "doveadm mailbox delete", but this requires root privilege on the server, which is not really a practical solution. It maybe a Thunderbird problem, but the question then arises: Why does it work under Maildir but doesn't work under mdbox? Any ideas? Bill

2 4