- dovecot - dovecot.org

[Dovecot] ACL plugin: Is CVE-2008-4578 going to be fixed in 1.0 branch?
by Michal Hlavinka 21 Oct '08

21 Oct '08

Hi! I would like to know if there is a plan to fix CVE-2008-4578 bug (ACL vs. "parent/child/child" mailboxes) in 1.0 branch? I've tried to backport patch from 1.1.4 but with no success. Thanks Michal

2 1

[Dovecot] quota-warning.sh mail from
by Proskurin Kirill 21 Oct '08

21 Oct '08

Hello all How Dovecot 1.1.3 quota script understand to who send a mail? In try to do this: In conf: quota_warning = storage=80%% /usr/local/bin/quota-warning.sh 80 %u@%d In logs: IQuota warning: bytes=168611020 (80%) messages=0 (0%) command=/usr/local/bin/quota-warning.sh 80 dump-capability@ *what is dump-capability@ ? OS related user?...* #cat quota-warning.sh #!/bin/sh PERCENT=$1 TO=$2 echo "Your mailbox is $PERCENT% full. If it overfill - you will can not get new email. Please clean up your mailbox. -- Mail Administator" | /usr/bin/mail -s "Email mailbox is $PERCENT% full" $TO -f postmaster(a)domain.off exit 0 --- Im thinking in wrong way? -- Best regards, Proskurin Kirill

3 8

[Dovecot] 1.2: Bug in listing of shared mailboxes with dot in user id
by Sascha Wilde 21 Oct '08

21 Oct '08

In dovecot 1.2 I can create a shared name space like this: namespace shared { separator = / prefix = users/%%u/ location = Maildir:/PATH/TO/spool/%%u/maildir:INDEX=/PATH/TO/spool/%u/maildir/shared_idx subscriptions = no } now, when I subscribe to a shared mailbox of another user with an dot in the users id, like: users/2(a)example.com/INBOX/foo and I list my subscribed mailboxes I get: l001 lsub "" "*" * LSUB () "/" "users/2@example/com/INBOX/foo" as you can see the dot in the user-id got normalized to the hierarchy seperator `/' -- which of cause is wrong. ;-) cheers sascha -- Sascha Wilde OpenPGP key: 4BB86568 http://www.intevation.de/~wilde/ http://www.intevation.de/ Intevation GmbH, Neuer Graben 17, 49074 Osnabrück; AG Osnabrück, HR B 18998 Geschäftsführer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner

3 3

[Dovecot] Reporting NFS quotas via IMAP
by Edgar Fuß 21 Oct '08

21 Oct '08

I'm confident that the question has been asked before, but I can't remember the answer. I have -- dovecot 1.1.2 -- Mail storage (maildir format) on NFS -- Quotas on that file system -- A working rquotad -- mail_plugins = quota imap_quota in the protocol imap section -- quota=fs in the plugin section I get (using Apple Mail as a client) -- Notification that the account supports quotas -- No information about the size of the quota nor the usage I probably do something stupidly wrong. The WIKI tells me that fs quota support RPC (i.e., rquotad), so I'd expect my client to report the quota to me. Using quota(1) on the mail server works as expected.

3 4

[Dovecot] Per user mail quota via LDAP
by Proskurin Kirill 21 Oct '08

21 Oct '08

Hello all. Ok im now trying to make per user quota via LDAP. In LDAP im have attr: mailQuotaSize=210 Default dovecot quota=201M I edit my static db to this(from wiki): userdb static { args = uid=1002 gid=1002 home=/var/spool/dovecot/domains/%d/%n mailQuotaSize=quota_rule=*:storage=%$M } But in logs I see this: Info: auth(default): master out: USER 5 sysadmin(a)domain.off uid=1002 gid=1002 home=/var/spool/dovecot/domains/domain.off/sysadmin mailQuotaSize=quota_rule=*:storage=M And personal quota not work. What I do wrong? -- Best regards, Proskurin Kirill

2 6

[Dovecot] Using allow_nets
by Guy 20 Oct '08

20 Oct '08

Hi, I'm wanting to implement allow_nets so that some users can be limited to only use webmail while others can use client or webmail access. Adding the sql to pull a list of IPs/ranges for webmail only users was easy enough. For the users that are allowed to access from anywhere, do I need to specify 0.0.0.0/0 or something or can I just let the sql query return a blank field? Thanks Guy -- Don't just do something...sit there!

2 1

[Dovecot] v1.1.5 release candidate
by Timo Sirainen 20 Oct '08

20 Oct '08

http://dovecot.org/tmp/dovecot-1.1.5-rc.tar.gz I thought about making v1.1.5 release today, but then thought maybe I'll make an RC instead since I did quite a lot of changes this weekend. So please try and see if there are any bugs left. I'll make the final release in a couple of days. The largest changes since v1.1.4: + Maildir/dbox: Try harder to assign unique UIDVALIDITY values to mailboxes to avoid potential problems when recreating or renaming mailboxes. The UIDVALIDITY is tracked using dovecot-uidvalidity* files in the mail root directory. + Many logging improvements - In some conditions Dovecot could have stopped using existing cache file and never used it again until it was deleted. - pop3 + Maildir: Make sure virtual sizes are always written to dovecot-uidlist. This way if the indexes are lost Dovecot will never do a huge amount of work to recalculate them. - mbox: Fixed listing mailboxes in namespaces with prefix beginning with '~' or '/' (i.e. UW-IMAP compatibility namespaces didn't work). - dict quota: Don't crash when recalculating quota (when quota warnings enabled). - Fixes to handling "out of disk space/quota" failures. - Fixed compiling with OpenBSD

2 3

[Dovecot] NFS quota: hard or soft
by Edgar Fuß 20 Oct '08

20 Oct '08

Yes. I could spend more time testing this myself or examining the code. It looks to me that, with fs quota, dovecot refuses to store a mail (e.g. when the client moves a mail from one IMAP folder to another) if the user is beyond his soft limit. Is this correct/intended? Knowing nothing about the IMAP Quota extension, I would have expected that being in grace was OK. At least, this is what would happen if dovecot wasn't quota aware and the file system would enforce the limits.

2 5

[Dovecot] Sendmail and deliver LDA exits with EX_TEMPFAIL on overquota
by Sotiris Tsimbonis 20 Oct '08

20 Oct '08

Hi all, I have setup dovecot 1.1.4 and sendmail 8.14.3 with dovecot LDA on linux (RHEL5 on x86_64). I have deliberately set a very low quota (4MB) on a test account, while the actual disk usage is 5MB at the moment, in order to test overquota behaviour.. When I send an email to this account, sendmail accepts the email and tries to deliver it. Deliver fails to save in INBOX and returns an error, but the email stays in sendmail's queue.. Any suggestions on how to avoid this and produce a 5xx error for overquota users before accepting the email would be greatly appreciated.. TIA, Sotiris. ==> /var/log/maillog <== Oct 17 14:25:19 mx-mstr-07 sendmail[17289]: m9HBPJ99017288: to=<stsimb(a)t157.forthnet.gr>, ctladdr=<root(a)mx-mstr-07.forthnet.prv> (0/0), delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30603, dsn=4.0.0, stat=Deferred: local mailer (/usr/libexec/dovecot/deliver) exited with EX_TEMPFAIL ==> /var/log/dovecot.log <== deliver(stsimb.t157.forthnet.gr): Oct 17 14:25:19 Info: Loading modules from directory: /usr/lib64/dovecot/lda deliver(stsimb.t157.forthnet.gr): Oct 17 14:25:19 Info: Module loaded: /usr/lib64/dovecot/lda/lib10_quota_plugin.so dovecot: Oct 17 14:25:19 Info: auth(default): master in: USER 1 stsimb.t157.forthnet.gr service=deliver dovecot: Oct 17 14:25:19 Info: auth(default): master out: USER 1 stsimb.t157.forthnet.gr uid=2082264764 home=/home/mailusers/stsimb.t157.forthnet.gr gid=126 quota_rule=*:storage=4M deliver(stsimb.t157.forthnet.gr): Oct 17 14:25:19 Info: auth input: stsimb.t157.forthnet.gr deliver(stsimb.t157.forthnet.gr): Oct 17 14:25:19 Info: auth input: uid=2082264764 deliver(stsimb.t157.forthnet.gr): Oct 17 14:25:19 Info: auth input: home=/home/mailusers/stsimb.t157.forthnet.gr deliver(stsimb.t157.forthnet.gr): Oct 17 14:25:19 Info: auth input: gid=126 deliver(stsimb.t157.forthnet.gr): Oct 17 14:25:19 Info: auth input: quota_rule=*:storage=4M deliver(stsimb.t157.forthnet.gr): Oct 17 14:25:19 Info: Quota root: name= backend=maildir args= deliver(stsimb.t157.forthnet.gr): Oct 17 14:25:19 Info: Quota rule: root= mailbox=* bytes=4194304 (0%) messages=0 (0%) deliver(stsimb.t157.forthnet.gr): Oct 17 14:25:19 Info: Quota warning: bytes=3774873 (90%) messages=0 (0%) command=/local/dovecot/sbin/quota-warning.sh 90 deliver(stsimb.t157.forthnet.gr): Oct 17 14:25:19 Info: Quota warning: bytes=2516582 (60%) messages=0 (0%) command=/local/dovecot/sbin/quota-warning.sh 60 deliver(stsimb.t157.forthnet.gr): Oct 17 14:25:19 Info: maildir: data=/var/mail/stsimb.t157.forthnet.gr/Maildir deliver(stsimb.t157.forthnet.gr): Oct 17 14:25:19 Info: maildir++: root=/var/mail/stsimb.t157.forthnet.gr/Maildir, index=, control=, inbox=/var/mail/stsimb.t157.forthnet.gr/Maildir deliver(stsimb.t157.forthnet.gr): Oct 17 14:25:19 Info: msgid=<200810171125.m9HBPJFT017287(a)mx-mstr-07.forthnet.prv>: save failed to INBOX: Quota exceeded (mailbox for user is full) ==> sendmail.cf dovecot mailer <== Mlocal, P=/usr/libexec/dovecot/deliver, F=lsDFMAw5:/|@qSPhn9, S=EnvFromL/HdrFromL, R=EnvToL/HdrToL, T=DNS/RFC822/X-Unix, A=deliver -d $u [root@mx-mstr-07 ~]# dovecot -n # 1.1.4: /etc/dovecot.conf log_path: /var/log/dovecot.log protocols: imap pop3 ssl_disable: yes login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_greeting: Dovecot ready mx-mstr-07 login_process_per_connection: no login_process_size: 1024 max_mail_processes: 2048 verbose_proctitle: yes mail_location: maildir:/var/mail/%u/Maildir mail_cache_min_mail_count: 100 mail_debug: yes mmap_disable: yes mail_nfs_storage: yes mail_nfs_index: yes maildir_copy_preserve_filename: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 pop3_no_flag_updates(default): no pop3_no_flag_updates(imap): no pop3_no_flag_updates(pop3): yes pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: cache_size: 131072 cache_ttl: 315 cache_negative_ttl: 285 verbose: yes debug: yes passdb: driver: ldap args: /etc/dovecot-ldap.conf userdb: driver: ldap args: /etc/dovecot-ldap.conf userdb: driver: prefetch socket: type: listen master: path: /var/run/dovecot/auth-master mode: 384 plugin: quota: maildir quota_warning: storage=90%% /local/dovecot/sbin/quota-warning.sh 90 quota_warning2: storage=60%% /local/dovecot/sbin/quota-warning.sh 60

6 15

[Dovecot] workaround for shared maildirs
by Giuliano Gavazzi 19 Oct '08

19 Oct '08

Hello, this is my first post to the list. I have several mailservers running courier-imap, but am planning to convert one (and maybe more) to dovecot 1.1.4. In the process I am also looking to finally implement shared maildirs. As it is well known some clients (notable Apple's Mail) have problems in showing shared folders if the correct private namespace (INBOX) is set in the client, as only folders beneath the INBOX root are displayed. I have seen some solutions proposed, but none satisfactory. As the problem stems in the invisibility of secondary namespaces from Mail.app, I though that tricking the namespace prefix to push the shared mailboxes inside the private INBOX namespace could be a solution and tried the following: namespace public { separator = . prefix = INBOX.Public. inbox = no location = maildir:/SharedMaildirs/Public:CONTROL=~/Maildir/ control/Public:INDEX=~/Maildir/index/Public hidden = yes list = yes subscriptions = yes } note the bogus INBOX.Public prefix. Note also that CONTROL might be better not set as this is a Maildir (see Keyword sharing in http://wiki.dovecot.org/SharedMailboxes) Initially I had defined an additional public namespace with the same maildir and a normal prefix, but this seems not necessary. Well, after some tests from Thunderbird, Mail and cone (yes, the courier UA) I can say it works . Still have to check Outlook and Opera, but this is encouraging. As the public namespace Public is actually contained inside the private (INBOX), as if it was a private mailbox (with no messages) called Public, it is actually possible to create such a mailbox inside INBOX and end up with a private mailbox called Public containing private messages AND public mailboxes... Any mailbox that a user creats inside Public instead, will end up being a public mailbox as expected. Thanks or any comments. Giuliano

2 2