- dovecot - dovecot.org

[Dovecot] problem configuring deliver in LDAP environment.
by Andrea Borghi 12 Feb '11

12 Feb '11

hello I am using dovecot-1.2.15 in debian squeeze (packaged) and i have some difficulties migrating from an older installation tha is working perfectly. i have a transport defined in postfix to call deliver as follows: dovecotlda unix - n n - - pipe flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/deliver -s -e -f ${sender} -d ${recipient} with the auth-socket in dovecot.conf all ok and this in ldap-userdb.conf: user_attrs = vdHome=chroot,mailbox=mail=maildir:%$,quota=quota_rule=*:bytes=%$,otherPath=sieve you see, i have the base directory for the chroot for the entire mail system in ldap:vdHome as /home/vmail/domains and the actual location of the mailbox in maildir format in ldap:mailbox so i can have the actual complete path as /(vdHome)/(mailbox) This is running smoolthly, BUT the chroot environment with all the library dependencies is REALLY REALLY limiting because the huge number of files from the system i must put on the mail storeage (which is networked and used by more systems so i cannot put libraries and binaries there) What i am trying to do is leaving all the dovecot services running in chroot mode (as they do) but let deliver running in NORMAL (non-chroot mode) so i need to remove the chroot variable in userattr reply, and parametrize the mail location with the two ldap values. i am conscious that i can set up this as user_attrs = mailbox=mail=maildir:/home/vmail/domains/%$,quota=quota_rule=*:bytes=%$,otherPath=sieve but I WANT TO KEEP THE BASE DIR PARAMETRIZED to leave me the possibility to set the base dir in LDAP to goup the accounts on different mail storage system. So you know a method to substitute TWO ldap values in the mail parameter definition? Thank you Andrea

2 5

[Dovecot] Questions about dovecot-shared in 1.2 and inherit group membership from parent mailbox
by Lukas Haase 11 Feb '11

11 Feb '11

Hi, I read the Wiki about dovecot-shared a few times but it is not 100% clear to me (at least for 1.2). First, if I want shared keywords I *must* have a dovecot-shared. In this case, the permissions are not taken any longer from the parent folder (what is exactly this parent folder?) but from the dovecot-shared file. So in some sense dovecot-shared is always required (since everyone would like to share keywords). True? Second, is there only *one* dovecot-shared per namespace or per mailbox *under* a specific namespace? Or an arbitrary number (where the "last" is taken)? Where does dovecot-shared need to be placed? For example, if the location of the namespace points to /var/mail/shared and I have two mailboxes "group1" and "group2" inside. Does the dovecot-shared need to reside in /var/mail/shared or /var/mail/shared/group1 and /var/mail/shared/group2 (with LAYOUT=fs)? Is it possible? Third (and main) question: In /var/mail/shared I want to have a mailbox for each group. Each user is member of his respective groups (in terms of UNIX permissions *and* ACLs). The mailboxes are owned by their respective groups and if a user creates a subfolder inside it should surely have the same group assigned as the parent mailbox (not the namespace!). namespace public { separator = . prefix = Shared. location = maildir:/var/mail/shared:INDEX=~/Maildir/shared:LAYOUT=fs subscriptions = no } mail:~# ls -l -R /var/mail/shared/ /var/mail/shared/: total 12 drwxrwx--- 5 root group1 4096 Feb 9 11:53 Group1 drwxrwx--- 5 root group2 4096 Feb 9 12:27 Group2 -rw-r--r-- 1 root root 23 Feb 9 11:52 dovecot-acl -rw-rw-r-- 1 root root 0 Dec 15 2009 dovecot-shared /var/mail/shared/Group1: total 16 drwxrwx--- 2 root group1 4096 Feb 8 10:35 cur -rw-r--r-- 1 root group1 28 Feb 9 11:52 dovecot-acl -rw-rw-r-- 1 root group1 0 Dec 15 2009 dovecot-shared drwxrwx--- 2 root group1 4096 Dec 15 2009 new drwxrwx--- 2 root group1 4096 Feb 8 10:34 tmp /var/mail/shared/Group1/cur: total 0 /var/mail/shared/Group1/new: total 0 /var/mail/shared/Group1/tmp: total 0 /var/mail/shared/Group2: total 16 drwxrwx--- 2 root group2 4096 Feb 8 10:35 cur -rw-r--r-- 1 root group2 27 Feb 9 11:52 dovecot-acl -rw-rwS--- 1 root group2 0 Dec 15 2009 dovecot-shared drwxrwx--- 2 root group2 4096 Dec 15 2009 new drwxrwx--- 2 root group2 4096 Feb 8 10:34 tmp /var/mail/shared/Group2/cur: total 0 /var/mail/shared/Group2/new: total 0 /var/mail/shared/Group2/tmp: total 0 Again: *Inside* /var/mail/shared I want to create mailboxes for each group (Group1, Group2, ...). This is done only by the administrator. Therefore /var/mail/shared is owned by root. Each Group1, Group2, ... in turn is owned by group1, group2, ... I tried all combinations using dovecot-shared which came into my mind such that a subfolder of Group1 is owned by group1. However, either 1.) the subfolder is owned by the primary group of the creating user (group "users") or 2.) the group of /var/mail/shared/dovecot-shared or 3.) creation of the subfolder fails with dovecot: IMAP(user1): chown(/var/mail/shared/Group2/Test1, -1, 0(root)) failed: Operation not permitted (egid=100(users), group based on /var/mail/shared/dovecot-shared) dovecot: IMAP(user1): mkdir(/var/mail/shared/Group2/Test1/cur) failed: Operation not permitted Is this just not possible or do I get something wrong here? Regards, Luke

2 4

[Dovecot] PAM auth and userdb
by Matthias Lohmann 11 Feb '11

11 Feb '11

Hi all, I've just setup dovecot 2.0.9 on Solaris 10 - everything works fine so far. I'm authentication my users with PAM (against /etc/passwd) -> works The users get the default quota setting from dovecots config. Now I like to override the quota settings for some users. So I created a userdb - but it seems, that its not used ... What might be wrong? # 2.0.9: /opt/dovecot2.0.9/etc/dovecot/dovecot.conf # OS: SunOS 5.10 sun4v auth_debug = yes auth_username_chars = abcdefghijklmnopqrstuvwxyz01234567890.- auth_verbose = yes default_login_user = nobody disable_plaintext_auth = no first_valid_gid = 215 first_valid_uid = 300 log_path = /var/log/dovecot.log login_access_sockets = tcpwrap mail_location = mbox:~/IMAP:INBOX=/var/mail/%u:INDEX=/var/dovecotindexes/%u mail_plugins = quota passdb { driver = pam } plugin { quota = dict:User quota::file:/var/dovecotindexes/%u/dovecot-quota quota_rule = *:storage=1G quota_rule2 = Trash:storage=+100M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u } [...] userdb { driver = passwd } userdb { args = username_format=%u /opt/dovecot/etc/users driver = passwd-file } My userdb contains lines like this user301::301:220::/usr/users/user301::userdb_quota_rule=*:storage=200M And here we have some debug output Feb 11 16:55:24 auth: Debug: passwd-file /opt/dovecot/etc/users: Read 1 users Feb 11 16:55:24 auth: Debug: pam(user301,2.1.1.2): lookup service=dovecot Feb 11 16:55:24 auth: Debug: pam(user301,2.1.1.2): #1/1 style=1 msg=Password: Feb 11 16:55:24 auth: Debug: client out: OK 1 user=user301 Feb 11 16:55:24 auth: Debug: master in: REQUEST 1627258881 20594 1 90f9d76fc9ac35bcb78212825868522a Feb 11 16:55:24 auth: Debug: passwd(user301,2.1.1.2): lookup Feb 11 16:55:24 auth: Debug: master out: USER 1627258881 user301 system_groups_user=user301 uid=301 gid=220 home=/usr/users/user301 Feb 11 16:55:24 pop3-login: Info: Login: user=<user301>, method=PLAIN, rip=2.1.1.2, lip=2.1.1.22, mpid=20607 Feb 11 16:55:25 pop3(user301): Info: Disconnected: Logged out top=0/0, retr=0/0, del=0/9, size=71445 Even doveadm gives the wrong quota root@> /opt/dovecot/bin/doveadm quota get -u user301 Quota name Type Value Limit % User quota STORAGE 72288 1048576 6 User quota MESSAGE 1258 - 0 Any hints for me? Thanks in advance. Kind regards Matt

2 1

[Dovecot] [Q] auth(default): plain(?, 11.111.206.99): Username contains disallowed character: 0x20
by JKL 11 Feb '11

11 Feb '11

Dear all, A new user with Microsoft Express is trying to use IMAP SSL port 993. However they cannot log in. Its only with them. The logs details the following: Feb 11 18:56:03 logout dovecot: auth(default): plain(?,11.111.206.99): Username contains disallowed character: 0x20 Feb 11 18:58:07 logout dovecot: imap-login: Disconnected (auth failed, 1 attempts): method=PLAIN, rip=11.111.206.99, lip=62.58.61.184, TLS: Disconnected I think that the 0x20 is a space. However the user states that they are using this format and that there is no space: user.name(a)test.com Does anyone know where I could start to look for this? Regards,S

2 2

[Dovecot] Domain blacklisting
by Thomas Hummel 11 Feb '11

11 Feb '11

Hello, I run dovecot-2/Maildir/LDAP user/passdb and would like to be able to deny acess to users who connect from certain domains/IP (google.com for instance since in that case they gave their credentials to a third party). My understanding is that I cannot use some negative form of "allow_nets". The only mechanism I can think of is tcp_wrappers. However, dovecot documentation mention it only in the dovecot-1 section. Does it work the same way with dovecot-2 ? Is it a bad idea (I'm thinking of the induced overhead) ? Can you see another way to blacklist (at dovecot application level) some sources ? Thanks -- Thomas Hummel | Institut Pasteur <hummel(a)pasteur.fr> | Pôle informatique - systèmes et réseau

3 6

[Dovecot] doveadm -A or -u
by Matt Rude 11 Feb '11

11 Feb '11

Did something change in doveadm? One of my scripts blew up last night saying that -A is not a valid flag. The -A and -u flags seem to not be working on trunk anymore. # dovecot --version 2.0.9 (723a26a7d328) # doveadm expunge -u matt mailbox Junk savedbefore 31d doveadm(matt): Fatal: Unknown argument MATT (matt of course is the user sending this message on this server) # doveadm -Dv expunge -A mailbox Junk savedbefore 31d doveadm(matt): Debug: Loading modules from directory: /usr/lib/dovecot doveadm(matt): Debug: Module loaded: /usr/lib/dovecot/lib10_quota_plugin.so doveadm(matt): Debug: Module loaded: /usr/lib/dovecot/lib20_expire_plugin.so doveadm(matt): Debug: Module loaded: /usr/lib/dovecot/lib20_zlib_plugin.so doveadm(matt): Debug: Loading modules from directory: /usr/lib/dovecot/doveadm doveadm(matt): Debug: Module loaded: /usr/lib/dovecot/doveadm/lib10_doveadm_expire_plugin.so doveadm(matt): Debug: Module loaded: /usr/lib/dovecot/doveadm/lib10_doveadm_quota_plugin.so doveadm(matt): Debug: Module loaded: /usr/lib/dovecot/doveadm/lib10_doveadm_zlib_plugin.so doveadm(matt): Fatal: Unknown argument -A Also with the quota plugin. # doveadm -f tab quota get -A doveadm(matt): Fatal: doveadm quota get: Unknown parameter: -A I can provide a doveconf -n and mySQL config files if needed. Thanks -Matt

2 1

[Dovecot] Separate access to different "folders" of the same mailbox?
by Alexander Chekalin 11 Feb '11

11 Feb '11

Hello Timo and everyone, I think on such an idea that may save me a bit of space and time: in my company we have a mailbox that holds a copy of every message that our SMTP processed. While it eats a lot of space, it saved us several times when, you may imaging, user "suddenly" deleted the most important message in his life and call our IT guys for help. The mailbox contains "folders" for each day (like 2011-02-10), which keeps mailings for that day only. Even with this, it is sometime hard to work with that "keep all" box (basically, it is slow as the size is huge). What I'd like to add is some kind of "virtual folders" (for each of our internal users) that list messages from and to his address. And I'd like to permit every user to see (that is, read only mode) only "his" such a virtual folder in our "keep all" box, so user can see his old messages on his own. Looks like 1) I need an ACL to limit user access to "their" folders and somehow hide other folders at all 2) Have such virtual folders work with huge ammount of mailings (kind of 300 Gb), separated in maybe 1000 folders (per days). I really afraid it will be slo-o-o-ow search, even with indexes (I mean, virtual folder that is defined as search over 1000 folders will be not that fast). The mailbox is maildir by nature. How can I archive these goals with smallest load possible, and if it is possible at all? Thank you, Alexander Chekalin

5 4

[Dovecot] xi.rename-it.nl/debian/ dovecot-2.0 sieve problem
by Martin Rozgonski 11 Feb '11

11 Feb '11

Hi, i used to use deb http://xi.rename-it.nl/debian/ stable-auto/dovecot-2.0 main to update dovecot 1.2 with debian lenny. I used the convert script to change my configuration file. Everything works fine but sieve does not work anymore. There is no error in the logs but dovecot simply ignores any filter. I checked the documentation/configuration twice and had still no success. Maybe, this is a known/unknown bug or any suggestions? Best regards Martin Rozgonski

3 6

[Dovecot] Error: managesieve-login: dump-capability failed: process got stuck
by Pascal Volk 11 Feb '11

11 Feb '11

Hi Stephan, after applying the latest changesets to dovecot (i guess 08e4280e5bfd), `make`, `make install` and restarting dovecot, I saw that error: doveconf: Error: managesieve-login: dump-capability failed: process 5467 got stuck Regards, Pascal -- The trapper recommends today: beeffeed.1104203(a)localdomain.org

2 1

[Dovecot] mdbox, sis, zlib
by Daniel L. Miller 11 Feb '11

11 Feb '11

I'm still having issues with the combination of mdbox, sis, and zlib. Is anyone else using these without seeing any errors in the logs? -- Daniel

1 0