- dovecot - dovecot.org

[Dovecot] SSL Certificate Authentication
by Anthony Davies 18 Dec '08

18 Dec '08

Hi Guys, I am using the SSL Client Certificate authentication method for my Dovecot instance, however rather then just requiring the client certificate it also prompts me for my user password. My certificate was securely generated on a smart card and is passphrase protected so I would like to stop having to enter my certificate passphrase and my user password to collect my mail. Where abouts in the config file can I resolve this issue? Cheers, Tony Davies

4 5

Re: [Dovecot] Segfault on antispam plugin
by Allan Cassaro 18 Dec '08

18 Dec '08

On Thu, Dec 11, 2008 at 7:49 AM, Allan Cassaro <allan.cassaro(a)gmail.com> wrote: > On Thu, Dec 11, 2008 at 7:17 AM, Steffen Kaiser > <skdovecot(a)smail.inf.fh-brs.de> wrote: >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> On Thu, 11 Dec 2008, Allan Cassaro wrote: >> >> On Thu, 11 Dec 2008, Allan Cassaro wrote: >> >>> I don´t have SELinux, or any type or hardening... The ulimit (when >>> logged with dovecot user) is "unlimited"... >> >> Yes, but when Dovecot is spawned as service, the user dovecot does not log >> in (through PAM anyway to have pam_limits invoked), therefore I assume >> that limits.conf does not take effect. >> >>> Dovecot ran with a lot of proccess here, something about 800~900 imap >>> proccess and 5~10 login-proccess to 300~400 simultaneous users... >> >> Hmm, I do remember something similiar when the new students arrived and >> the number of simultaneous logins increased above some limit. >> I added the ulimit command to init.d. > > After our conversation, I made some tests: > 1) Adding this line to /etc/pam.d/common-session (Debian system) > > session required pam_limits.so > > # cat /etc/security/limits.conf > dovecot hard nofile 2048 > dovecot soft nofile 2048 > > The limits.conf is respected now. > # su -c 'ulimit -n' dovecot > 2048 (The value of limits.conf) > (no login) > > # /etc/init.d/dovecot restart > Warning: fd limit 1024 is lower than what Dovecot can use under full > load (more than 1456). Either grow the limit or change > login_max_processes_count and max_mail_processes settings > > (Problem persists) > > 2) Change the ulimit for root user (as you saw): > # ulimit -n 2048 > > # /etc/init.d/dovecot restart > (no errors) > > # cat /etc/security/limits.conf > dovecot hard nofile 2048 > dovecot soft nofile 2048 > root hard nofile 2048 > root soft nofile 2048 > > So, I think that dovecot uses the limit from the "root" user, not dovecot... > Now I will wait 20 minutes and see what happens :D > > Hooo.. another (ugly) think: > When imap crashes, the antispam plugin don't erase the > /tmp/antispam-plugin-XXXXX dir (obviously). So this is possibly to > "delay" or avoid creation of temp dirs? > Hi Steffen, after some others tests, I don't have problem with file descriptors any more, but the plugin make the imap proccess dies with segfault yet... How can I help more to find this issue? Regards.

2 3

[Dovecot] panic in mail-index-view.c
by Peter Risdon 17 Dec '08

17 Dec '08

With just one user, on a virtual hosting system with several hundred users spread across a couple of dozen domains, there is the following error, repeated a couple of times a second without variation, when the user tries to connect with Thunderbird to read his mail: dovecot: Panic: IMAP(*******(a)****.co.uk): file mail-index-view.c: line 265 (view_lookup_seq_range): assertion failed: (first_uid <= last_uid) Any help would be appreciated. TIA, Peter Risdon. # dovecot --version 1.1.7 # dovecot -n # 1.1.7: /usr/local/etc/dovecot.conf # OS: FreeBSD 6.2-RELEASE-p7 i386 nullfs protocols: imap imaps pop3 pop3s ssl_cert_file: /etc/ssl/certs/server.crt ssl_key_file: /etc/ssl/private/server.key ssl_key_password: ********** disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login verbose_proctitle: yes first_valid_uid: 125 first_valid_gid: 125 mail_access_groups: postfix mail_location: maildir:/var/virtualmail/%d/%u/ mmap_disable: yes lock_method: dotlock mbox_read_locks: dotlock mbox_write_locks: dotlock mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 imap_client_workarounds(default): delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh namespace: type: private separator: . prefix: INBOX. inbox: yes list: yes subscriptions: yes auth default: mechanisms: plain login verbose: yes debug: yes passdb: driver: sql args: /usr/local/etc/dovecot-mysql.conf userdb: driver: sql args: /usr/local/etc/dovecot-mysql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix

3 3

[Dovecot] Autocreate wrong version for dovecot's version installed on system.
by Romer Ventura 17 Dec '08

17 Dec '08

Hello, I downloaded the dovecot-autocreate-0.1-4.6.i586.rpm made by Time Sirainen from opensuse.org and I am getting the following messages in my logs: Module is for different version 1.0.15: /usr/lib/dovecot/modules/imap/lib90_autocreate_plugin.so Couldn't load required plugins They appear for every attempt to autocreate a folder. So my question is what can I do to make it work with: # dovecot -n # 1.1.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.16.60-0.21-xenpae i686 SUSE Linux Enterprise Server 10 (i586) login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login mail_uid: vmail mail_gid: vmail mail_location: maildir:~/Maildir/ mail_plugins: lazy_expunge autocreate imap_client_workarounds: delay-newmail outlook-idle netscape-eoh namespace: type: private separator: / inbox: yes list: yes subscriptions: yes namespace: type: private separator: / prefix: .EXPUNGED/ location: maildir:/home/vmail/%Ud/%Ln/Maildir/expunged list: yes subscriptions: yes namespace: type: private separator: / prefix: .DELETED/ location: maildir:/home/vmail/%Ud/%Ln/Maildir/deleted list: yes subscriptions: yes namespace: type: private separator: / prefix: .DELETED/.EXPUNGED/ location: maildir:/home/vmail/%Ud/%Ln/Maildir/deleted/expunged list: yes subscriptions: yes auth default: mechanisms: plain login passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf userdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail group: vmail plugin: lazy_expunge: .EXPUNGED/ .DELETED/ .DELETED/.EXPUNGED/ autocreate: Deleted Items autocreate1: Drafts autocreate2: Junk E-mail autocreate3: Outbox autocreate4: Sent Items autosubscribe: Deleted Items autosubscribe1: Drafts autosubscribe2: Junk E-mail autosubscribe3: Outbox autosubscribe4: Sent Items

1 0

[Dovecot] v1.1.6 released
by Timo Sirainen 17 Dec '08

17 Dec '08

http://dovecot.org/releases/1.1/dovecot-1.1.6.tar.gz http://dovecot.org/releases/1.1/dovecot-1.1.6.tar.gz.sig The invalid message address parsing bug is pretty important since it allows a remote user to send broken mail headers and prevent the recipient from accessing the mailbox afterwards, because the process will always just crash trying to parse the header. This is assuming that the IMAP client uses FETCH ENVELOPE command, not all do. Note that it doesn't affect versions older than v1.1.4. + dovecot -n and -a now prints some system information at the top. + More error/debug message logging improvements. - pop3-login: Fixed assert-crash if a client sent USER+PASS+USER+PASS commands in the same IP packet. - Parsing an invalid message address like "From: (" caused an assert-crash in v1.1.4 and v1.1.5. - Folding whitespace wasn't handled correctly inside quoted-strings, causing some messages to be parsed incorrectly. - mbox: Fixed saving messages that begin with a valid From_-line.

10 25

[Dovecot] v1.2Autocreate
by Robert Schetterer 17 Dec '08

17 Dec '08

Hi Timo, a setup like http://wiki.dovecot.org/Plugins/Autocreate seems not to work the module is loaded but no subfolder creation at login happens, sorry no log about failures with it simply Module loaded: /usr/lib/dovecot/modules/imap/lib20_autocreate_plugin.so should i try i.e autocreate = ".Trash/" or is there more info around -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

2 12

[Dovecot] v1.2.alpha5 released
by Timo Sirainen 17 Dec '08

17 Dec '08

http://dovecot.org/releases/1.2/alpha/dovecot-1.2.alpha5.tar.gz http://dovecot.org/releases/1.2/alpha/dovecot-1.2.alpha5.tar.gz.sig It's been a while since alpha4 so I thought I'd release a new one while waiting for Apple's patches.. - mbox fixes. - Lots of Solr fixes - Virtual mailboxes + Solr works now nicely instead of duplicating the indexed data. - Added alias_for setting for namespaces, also useful to avoid duplication of Solr indexed data if you have multiple namespaces that point to the same location (e.g. both "" prefix and "INBOX." prefix compatibility). - %variables now support long %{variable_names}: http://wiki.dovecot.org/Variables. I was planning on using these to redesign LDAP configuration (e.g. home=/var/mail/%{ldap:homeDirectory}) - imap/pop3 proxy: Support master user logins. - Improved some error messages

2 1

[Dovecot] Syncing several emails accounts with offlineimap and dovecot
by Joe Bloggs 17 Dec '08

17 Dec '08

Hi, I have just installed dovecot and offlineimap on my laptop for syncing with my gmail, and reading in gnus, as outlined in this article: http://sachachua.com/wp/2008/05/08/geek-how-to-use-offlineimap-and-the-dove… I am using Debian Etch, and I am the only user. The only change I made to the default dovecot.conf file was to set: mail_location = maildir:~/MailDir I read that gnus doesn't handle Maildir very well, so I need to connect directly to dovecot, and this is what I have specified in my offlinemap conf file: [Repository Local] type = IMAP remotehost = localhost port = 143 remoteuser = me remotepass = secret I want to sync my other online email accounts aswell. Can anyone tell me how to do this? Thanks.

2 2

[Dovecot] dovecot >1.1.3 + antispam plugin issues
by Marcin Rzepecki 16 Dec '08

16 Dec '08

Hello, i have following problems using dovecot-antispam plugin (Dovecot >1.1.3, FreeBSD 8.0-Current, dovecot-antispam 1.0/1.1) dovecot-antispam compiled using dspam-exec/mailtrain, with/wo debugging (i've tried all possibilities) When i try to move message to SPAM folder (using dspam-exec backend) i'm getting IMAP error: antispam signature not found and in dovecot logs: Nov 23 23:44:24 freebsd dovecot: IMAP(mr): Next message unexpectedly lost from 2708619 Using mail backend gives this error too(only IMAP error changes: failed to read mail beggining). Commenting out following code in mbox_read_from_line function (in src/lib-storage/index/mbox/istream-raw-mbox.c) helped and plugin was working correctly, but only with Dovecot <=1.1.3. if (stream->istream.v_offset - rstream->hdr_offset + new_pos > rstream->mail_size) { /* istream_raw_mbox_set_next_offset() used invalid cached next_offset? */ i_error("Next message unexpectedly lost from %"PRIuUOFF_T, rstream->hdr_offset + rstream->mail_size); rstream->eof = TRUE; rstream->corrupted = TRUE; rstream->istream.istream.stream_errno = EINVAL; stream->pos = 0; return -1; } Now, with versions >1.1.3 this won't helps and plugin fails. Anyone knows how to get it working? I would like to upgrade to newest dovecot release Best regards, mr

6 9

[Dovecot] cmusieve, vacation and error at file_dotlock_create
by Mike Constabel 15 Dec '08

15 Dec '08

Hello again, managesieve is working. Now I tried a vacation script with the result that the vacation response is sent but I got he following error: deliver(test1(a)xxxxxx.de): 2008-12-15 14:34:28 Error: file_dotlock_create(/home/vmail/%d/%n/Maildir/.dovecot.lda-dupes) failed: No such file or directory /home/vmail/xxxxxx.de/test1/Maildir/ is the correct dir, there are the other files like dovecot.index And mails are stored there correctly. Are %d/%n not expanded? Possible another error in my config? /etc/imap.passwd: test1@xxxxxx.de:{plain}yyyyyy:vmail:vmail::/home/vmail/%d/%n/Maildir::userdb_mail=maildir:/home/vmail/%d/%n/Maildir # 1.1.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.26-1-686 i686 Debian lenny/sid log_path: /var/log/dovecot/dovecot.log info_log_path: /var/log/dovecot/dovecot-info.log log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps pop3s managesieve listen(default): 127.0.0.1:143 listen(imap): 127.0.0.1:143 listen(pop3): 2xx.xx.xx.xx:110 listen(managesieve): localhost:2000 ssl_listen(default): 2xx.xx.xx.xx:993 ssl_listen(imap): 2xx.xx.xx.xx:993 ssl_listen(pop3): 2xx.xx.xx.xx:995 ssl_listen(managesieve): ssl_ca_file: /etc/postfix/ssl/ssl.xxxxxxxxx.de.ca-bundle ssl_cert_file: /etc/postfix/ssl/ssl.xxxxxxxxx.de.cert ssl_key_file: /etc/postfix/ssl/ssl.xxxxxxxxx.de.key ssl_verify_client_cert: yes login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login login_processes_count: 2 login_max_processes_count: 32 mail_privileged_group: mail mail_location(default): maildir:~/Maildir mail_location(imap): maildir:~/Maildir mail_location(pop3): maildir:~/Maildir mail_location(managesieve): /home/vmail/%d/%n/Maildir mail_debug(default): no mail_debug(imap): no mail_debug(pop3): no mail_debug(managesieve): yes mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugins(default): quota imap_quota expire trash autocreate mail_plugins(imap): quota imap_quota expire trash autocreate mail_plugins(pop3): quota expire trash mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve sieve_storage(default): sieve_storage(imap): sieve_storage(pop3): sieve_storage(managesieve): /home/vmail/sieve-scripts/%d/%n sieve(default): sieve(imap): sieve(pop3): sieve(managesieve): /home/vmail/%d/%n/.dovecot.sieve namespace: type: private inbox: yes list: yes subscriptions: yes auth default: username_format: %Lu verbose: yes process_size: 64 passdb: driver: passwd-file args: /etc/imap.passwd userdb: driver: passwd-file args: /etc/imap.passwd socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail plugin: quota: maildir:User quota quota_rule: *:storage=250M quota_rule2: Trash:storage=50M quota_rule3: Spam:storage=50M trash: /etc/dovecot/dovecot-trash.conf expire: Trash 1 Trash/* 7 Spam 30 foobar 1 expire_dict: proxy::expire autocreate: Trash autocreate2: Junk autocreate3: Sent autocreate4: Drafts autosubscribe: Trash autosubscribe2: Junk autosubscribe3: Sent autosubscribe4: Drafts sieve: /home/vmail/sieve-scripts/%d/%n.sieve dict: expire: sqlite:/etc/dovecot/dovecot-expire-sql.conf

2 2