- dovecot - dovecot.org

[Dovecot] EUID not changing when delivering to a mailbox
by rastik＠tereus.eu 04 Feb '11

04 Feb '11

Hello, I've set up virtual mailboxes and I'm using one uid/gid pair (mail/mail) to deliver almost all messages. Some accounts I'd like to have accessible by local Linux accounts as well, so postfix is delivering them using separate uids (gid stays the same). But I run into a problem when dovecot auth correctly fetches uid/gid from MySQL database, but still uses general mail uid to access the mailbox instead of user uid. This is what I have in dovecot log: dovecot: auth(default): client in: AUTH 1 PLAIN service=imap secured lip=myipaddr rip=myipaddr lport=143 rport=55513 dovecot: auth(default): client out: CONT 1 dovecot: auth(default): client in: CONT<hidden> dovecot: auth-worker(default): sql(joe(a)mydomain.com,myipaddr): query: SELECT CONCAT('/var/mail/', maildir) AS userdb_home, username as user, password, CONCAT('*:bytes=', quota) AS userdb_quota_rule, uid, gid FROM mailbox WHERE username = 'joe(a)mydomain.com' AND active = 1 dovecot: auth(default): client out: OK 1 user=joe(a)mydomain.com uid=1000 gid=12 dovecot: auth(default): master in: REQUEST 11 17252 1 dovecot: auth(default): prefetch(joe(a)mydomain.com,myipaddr): success dovecot: auth(default): master out: USER 11 joe(a)mydomain.com home=/var/mail/mydomain.com/joe/ quota_rule=*:bytes=-1 dovecot: imap-login: Login: user=<joe(a)mydomain.com>, method=PLAIN, rip=myipaddr, lip=myipaddr, TLS dovecot: IMAP(joe(a)mydomain.com): opendir(/var/mail/mydomain.com/joe/Maildir) failed: Permission denied (euid=8(mail) egid=12(mail) missing +r perm: /var/mail/mydomain.com/joe/Maildir) dovecot: IMAP(joe(a)mydomain.com): stat(/var/mail/mydomain.com/joe/indexes/.INBOX) failed: Permission denied (euid=8(mail) egid=12(mail) missing +x perm: /var/mail/mydomain.com/joe/indexes) dovecot: IMAP(joe(a)mydomain.com): file_dotlock_create(/var/mail/mydomain.com/joe/Maildir/dovecot-uidlist) failed: Permission denied (euid=8(mail) egid=12(mail) missing +w perm: /var/mail/mydomain.com/joe/Maildir) dovecot: IMAP(joe(a)mydomain.com): opendir(/var/mail/mydomain.com/joe/Maildir/new) failed: Permission denied (euid=8(mail) egid=12(mail) missing +r perm: /var/mail/mydomain.com/joe/Maildir/new) dovecot: IMAP(joe(a)mydomain.com): stat(/var/mail/mydomain.com/joe/indexes/.INBOX) failed: Permission denied (euid=8(mail) egid=12(mail) missing +x perm: /var/mail/mydomain.com/joe/indexes) dovecot: IMAP(joe(a)mydomain.com): file_dotlock_create(/var/mail/mydomain.com/joe/Maildir/dovecot-uidlist) failed: Permission denied (euid=8(mail) egid=12(mail) missing +w perm: /var/mail/mydomain.com/joe/Maildir) ricola dovecot: IMAP(joe(a)mydomain.com): opendir(/var/mail/mydomain.com/joe/Maildir/new) failed: Permission denied (euid=8(mail) egid=12(mail) missing +r perm: /var/mail/mydomain.com/joe/Maildir/new) dovecot: IMAP(joe(a)mydomain.com): Disconnected: Logged out bytes=171/775 My configuration is: # 1.2.16: /etc/dovecot/dovecot.conf # OS: Linux 2.6.36-hardened-r6 x86_64 Gentoo Base System release 2.0.1 ext4 listen: *, [::] ssl_cert_file: /etc/ssl/dovecot/server.pem ssl_key_file: /etc/ssl/dovecot/server.key login_dir: /var/run/dovecot/login login_executable: /usr/libexec/dovecot/imap-login first_valid_uid: 8 last_valid_uid: 1999 first_valid_gid: 12 last_valid_gid: 12 mail_privileged_group: mail mail_uid: 8 mail_gid: 12 mail_location: maildir:/var/mail/%d/%n/Maildir/:INDEX=/var/mail/%d/%n/indexes lda: postmaster_address: postmaster(a)mydomain.com mail_plugins: quota auth default: mechanisms: plain login user: nobody verbose: yes debug: yes passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: prefetch userdb: driver: sql args: /etc/dovecot/dovecot-sql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: mail group: mail I'm not sure if I got the concept correctly, but I was expecting that dovecot will use uid from the database. I was not able to find any relevant information in the archives. If it was explained already in the past, please send me some keywords that would help me find it. Thank you, Rastislav Wartiak

2 1

[Dovecot] INBOX in mbox format and IMAP folders in maildir format ?
by Frank Bonnet 04 Feb '11

04 Feb '11

Hello Would it be possible to setup such configuration ? INBOX in /var/mail/ using MBOX format IMAP folders in Maildir format Thanks a lot !

2 1

[Dovecot] Dovecot 2 multiple address/port binding
by Thomas Hummel 04 Feb '11

04 Feb '11

Hello, Sorry, I know the topic has been talked about already but I searched the archives and I'm still unsure of the proper way to have dovecot (imap-login) listen to several addresses and/or several ports. 1. how do I translate dovecot-1 protocol imap { listen = xx.xx.xx.xx:143 yy.yy.yy.yy:143 ssl_listen = xx.xx.xx.xx:993 yy.yy.yy.yy:939 } I started by service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } but I don't know if I should add multiple "address" lines, other inet_listener {} sections, or multiple address on the same "address" line. 2. besides I don't know if it's possible to listen on the same address to several ports for the same "subservice" : for instance could I have an inet_listener imap {} listen on zz:zz:zz:zz:port1 and zz:zz:zz:zz:port2 ? Thanks -- Thomas Hummel | Institut Pasteur <hummel(a)pasteur.fr> | Pôle informatique - systèmes et réseau

2 1

[Dovecot] Ldap and secondary PosixGroups
by Matthieu Ambrosy 04 Feb '11

04 Feb '11

Hello all, I'm using "Pam Ldap" for my users (Debian Lenny). getent passwd : *m.ambrosy:x:2000:100:m.ambrosy:/home/m.ambrosy:/bin/bash* getent group : *l_admin:*:2000:m.ambrosy l_personnel:*:2001:m.ambrosy l_mail:*:2003:m.ambrosy* As you can see, in LDAP, user "m.ambrosy" (PosixAccount) is defined with gidNumber = 100 (local group "users") and uidNumber = 2000. Furthermore this user belongs to 3 secondary Ldap PosixGroup (l_admin 2000, l_personnel 2001, l_mail 2003). If /var/mail belongs to the primary group (100), no problem. If /var/mail belongs to l_mail (2003) : *mkdir(/var/mail/m.ambrosy) failed: Permission denied (euid=2000(m.ambrosy) egid=100(users) missing +w perm: /var/mail, euid is not dir owner* In fact, Dovecot seems to not see secondary groups for my user. It just checks the primary group (gidNumber). If I modify my Ldap user like this, getent passwd : *m.ambrosy:x:2000:2003:m.ambrosy:/home/m.ambrosy:/bin/bash *It works fine but my "l_mail" group must be secondary (like an option for some users), not the primary gidNumber. Can I do it in the conf file?* * Am I making myself clear? Regards, Matthieu.

3 2

[Dovecot] Improving lmtp performance
by Joseba Torre 04 Feb '11

04 Feb '11

Hi, yesterday I migrated and old version with sendmail + courier to a virtual machine (vmware) with postfix and dovecot 2.0.9. Everything worked fine, but with a more or less default setup for both dovecot and postfix, lmtp performance was pretty bad: a message was written to an inbox every 2 or 3 seconds. With that rate and a 5000+ and growing mail queue mail delivery was really slow. After searching both the wiki and this list I didn't find anything related to this. I tried a couple of things, and finally added process_min_avail = 10 to service lmtp entry in 10-master.conf and local_destination_concurrency_limit = 10 in postfix's main.cf Now mail delivery is really fast, and my mail queue was delivered in a very sort time. Is this the right solution, or there's a better setup to improve mail delivery performance? Also, if this is a common problem, may be something should appear in http://wiki2.dovecot.org/LMTP Thanks. -- Joseba Torre. Vicegerencia de TICs, área de Explotación

2 3

[Dovecot] disabling outgoing mail ?
by Per Jessen 03 Feb '11

03 Feb '11

We're using roundcube as a method of access to a read-only email archive served via imap/dovecot. I was thinking of disabling outgoing mails by fiddling with the roundcube code, but thought it might be possible to disable the outgoing functionality from dovecot? /Per Jessen, Zürich

2 2

[Dovecot] Quota ignore issue
by Tim Traver 03 Feb '11

03 Feb '11

Hi Timo, ok, in my dovecot setup, I have a setting to ignore messages in the Spam folder (I will put my dovecot -n at the end of the message), and a strange thing appears to be happening. If I do a quota recalc on an account, It creates the maildirsize file correctly, without the contents of the Spam folder calculated into the total used. But, it looks like when a new spam email is delivered, before the sieve rules in the lda can move it into the spam folder, it is added to the maildirsize file. Then, once it is moved into the Spam folder, if it is directly expunged from the folder, it isn't subtracted from maildirsize file. I am using roundcube as a webmail solution, and it recognizes the Spam folder and lets users directly empty the Spam folder instead of moving it to the trash, and then removing it. If I do move the mail from the Spam folder to the Trash folder, and then empty the trash, it then puts the subtraction in the maildirsize folder. So, either it shouldn't add it in the first place, or even though it is deleted directly from the Spam folder, it should be subtracted from the maildirsize folder, right? Hmmm...maybe its the structure of the default sieve command that I have that is making it want to add it? here is the default sieve script that I use in the sieve_after field : require "fileinto"; # rule:[Spam and Virus Tag] if anyof (header :contains "Subject" "[VIRUS-TAG]", header :contains "Subject" "[SPAM-TAG]") { fileinto "Spam"; stop; } Essentially, what is happening is that users are getting their quota filled up for messages that were in their Spam folder... Thanks, Tim. and here is my dovecot -n output : # 2.0.7: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 8.1-STABLE i386 auth_username_format = %Lu auth_username_translation = %@ auth_verbose = yes disable_plaintext_auth = no dotlock_use_excl = yes first_valid_uid = 100 listen = * lock_method = dotlock log_path = /local/logs/dovecot.errors mail_fsync = always mail_gid = 100 mail_location = maildir:%h/Maildir mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = " quota" mail_uid = 100 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date imapflags notify mmap_disable = yes passdb { args = /bin/checkpassword_dovecot_auth driver = checkpassword } plugin { quota = maildir:User quota quota_rule = Trash:storage=+100M quota_rule2 = Spam:ignore sieve = ~/.dovecot.sieve sieve_after = /home/mailboxes/sieve/to_spam_folder.sieve sieve_dir = ~/Maildir/sieve sieve_extensions = +notify +imapflags } protocols = imap pop3 sieve service auth { unix_listener auth-userdb { group = sn mode = 0600 user = sn } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = prefetch } userdb { args = /bin/checkpassword_dovecot_deliver driver = checkpassword } verbose_proctitle = yes verbose_ssl = yes protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } protocol lda { info_log_path = /local/logs/dovecot-deliver.log log_path = /local/logs/dovecot-deliver-errors.log mail_plugins = " quota sieve" } protocol imap { mail_plugins = " quota imap_quota" } protocol sieve { managesieve_sieve_capability = comparator-i;ascii-numeric fileinto reject vacation imap4flags notify include envelope body relational regex subaddress copy }

2 2

[Dovecot] Reproducable hang caused by IMAP server
by Matthias Scheler 03 Feb '11

03 Feb '11

Hello, I have problems with Dovecot 2.0.9 (and 2.0.8) under NetBSD/amd64 5.1. "mutt" hangs when I try to quit it after accessing a folder via IMAP. I can reproduce the problem with these steps: 1.) I run "mutt -f =foo" to access folder "foo" via IMAP. The folder contains about 10 messages in my case. 2.) I tag two of the messages and then save them to a *non existent* folder. When "mutt" asks whether the folder should be created I confirm the action. 3.) Finally I exit "mutt" and confirm the question whether the messages marked as deleted (by the save in step 2) should be deleted. 4.) "mutt" now hangs indefinitely. I've attached a packet capture of the above steps to this e-mail. As far as I can tell from the packet capture and debugging "mutt" with "gdb" it waits for the IMAP server to confirm the logout which never happens. I've never seen this problem with Dovecot 1.2.16. Here is the requested debugging information: Output of "dovecot --version": 2.0.9 Output of "doveconf -n": # 2.0.9: /etc/pkg/dovecot/dovecot.conf # OS: NetBSD 5.1_STABLE amd64 auth_mechanisms = cram-md5 digest-md5 plain login listen = *, [::] mail_debug = yes mail_location = mbox:~/Mail:INBOX=/var/mail/%u passdb { args = /etc/pkg/dovecot/passwd driver = passwd-file } pop3_uidl_format = %08Xv%08Xu protocols = imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } ssl_cert = </etc/openssl/certs/dovecot.pem ssl_key = </etc/openssl/private/dovecot.pem userdb { driver = passwd } Kind regards -- Matthias Scheler http://zhadum.org.uk/

2 3

[Dovecot] Resource temporarily unavailable
by Len7hir 03 Feb '11

03 Feb '11

On very high traffic in POP3 I have flood of messages in my log: Feb 2 16:32:17 pp4 dovecot: pop3: Error: net_connect_unix(/var/run/dovecot/auth-master) failed: Resource temporarily unavailable What a Terrible Failure (WTF)? Can You help me resolve this problem? I've not found any info about auth-master problem :/ My settings: default_process_limit = 2000 default_client_limit = 4096 service pop3-login { service_count = 0 vsz_limit = 128M process_min_avail = 8 } FD limit in system = 32000 8 cpu, 28GB RAM about 50 login per second Different Error messages I've when set service_count = 1. Feb 2 10:21:29 pp4 dovecot: pop3-login: (5052) Disconnected: Connection queue full (no auth attempts) -- Len7hir

2 1

[Dovecot] STARTTLS problem
by Lucas -LandM- 03 Feb '11

03 Feb '11

Hi, We try to configure dovecot as usual (all our servers have dovecot+vpopmail+qmail or postfix). We set up dovecot with the next outcome: - imap ok - imaps ok - imap STARTTLS NOT OK Debug: root@s13:/home/lucas# gnutls-cli --starttls -p 143 ip Resolving 'ip'... Connecting to 'ip'... - Simple Client Mode: * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=CRAM-MD5] Dovecot ready. *** Starting TLS handshake *** Non fatal error: Resource temporarily unavailable, try again. *** Fatal error: A TLS packet with unexpected length was received. *** Handshake has failed Same result with thunderbird and openssl. Log: Feb 2 20:26:58 s13 dovecot: imap-login: Warning: SSL: where=0x10, ret=1: before/accept initialization [83.61.13.57] Feb 2 20:26:58 s13 dovecot: imap-login: Warning: SSL: where=0x2001, ret=1: before/accept initialization [83.61.13.57] Feb 2 20:26:58 s13 dovecot: imap-login: Warning: SSL: where=0x2002, ret=-1: SSLv2/v3 read client hello A [83.61.13.57] Feb 2 20:26:58 s13 dovecot: imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 read client hello A [83.61.13.57] Feb 2 20:26:58 s13 dovecot: imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write server hello A [83.61.13.57] Feb 2 20:26:58 s13 dovecot: imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write certificate A [83.61.13.57] Feb 2 20:26:58 s13 dovecot: imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write server done A [83.61.13.57] Feb 2 20:26:58 s13 dovecot: imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 flush data [83.61.13.57] Feb 2 20:26:58 s13 dovecot: imap-login: Warning: SSL: where=0x2002, ret=-1: SSLv3 read client certificate A [83.61.13.57] Feb 2 20:26:58 s13 dovecot: imap-login: Warning: SSL: where=0x2002, ret=-1: SSLv3 read client certificate A [83.61.13.57] Feb 2 20:27:34 s13 dovecot: imap-login: Warning: SSL failed: where=0x2002: SSLv3 read client certificate A [83.61.13.57] Feb 2 20:27:34 s13 dovecot: imap-login: Disconnected (no auth attempts): rip=83.61.13.57, lip=109.200.5.221, TLS handshaking: Disconnected My config: # 2.0.9: /opt/dovecot/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-27-server x86_64 Ubuntu 8.04 auth_mechanisms = plain login cram-md5 default_login_user = vpopmail disable_plaintext_auth = no first_valid_gid = 89 first_valid_uid = 89 last_valid_gid = 89 last_valid_uid = 89 listen = ip mail_debug = yes mail_gid = 89 mail_uid = 89 passdb { driver = vpopmail } plugin { quota = maildir:User quota quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u setting_name = quota, trash } protocols = imap pop3 service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service imap { process_limit = 1024 } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service pop3 { process_limit = 1024 } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = vpopmail } verbose_ssl = yes protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep } protocol pop3 { mail_max_userip_connections = 3 pop3_client_workarounds = outlook-no-nuls ,oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } Any clue? Thank you in advanced, Lucas

2 5