- dovecot - dovecot.org

Re: [Dovecot] Concurrent POP3 Sessions Issues
by Timo Sirainen 30 Jan '09

30 Jan '09

On Jan 29, 2009, at 1:17 PM, Mauricio López Riffo wrote: > I have problems with dovecot + ldap + nfs, we could't have more than > 20 concurrent sessions of pop3, when user 21 comes, the auth process > takes > more than 1 sec and is incresing (while most users arrives, more > delay in > autenticacion exists) and my customers complaint about the service. > We need > support about 200 concurrents pop3 users, here is my details Someone else was recently complaining about the same thing. Or was it you? Anyway, dovecot-auth doesn't know how many users are logged in so if the problem really is 21 *concurrent users* instead of n logins/ second, I find it highly unlikely that the problem is with authentication. My guess is that this has something to do with NFS. Perhaps start Dovecot with strace -tt -f dovecot and then when it's slowing down see what syscall it says is blocking.

2 1

Re: [Dovecot] cram-md5 problem
by Richard Stockton 30 Jan '09

30 Jan '09

Hi Timo, (just realized your reply was CCed to the list) At 04:28 PM 1/29/2009, you wrote: >On Jan 29, 2009, at 7:22 PM, Richard Stockton wrote: > >>I just updated to dovecot 1.1.10 from 1.1.2 and now anyone using >>cram-md5 can't get authenticated. I am using mysql for passwords >>(in plain text) and home directories. > >Set auth_debug_passwords=yes. What does it log when logging in with >CRAM-MD5? (And try with a temporary password that you can change >afterwards.) Here's an example I just pulled from the logs. dovecot: Jan 29 16:35:03 Info: auth-worker(default): sql(jennshinjo,xx.xx.xx.xx): SELECT home, uid, gid FROM users WHERE username = 'jennshinjo' AND domain = '' dovecot: Jan 29 16:35:03 Info: auth(default): prefetch(jennshinjo,xx.xx.xx.xx): success dovecot: Jan 29 16:35:03 Info: auth(default): master out: USER 1490 jennshinjo home=j/e/jennshinjo/Maildir/ uid=5000 gid=5000 home=j/e/jennshinjo/Maildir/ uid=5000 gid=5000 dovecot: Jan 29 16:35:03 Info: pop3-login: Internal login failure (auth failed, 1 attempts): user=<jennshinjo>, method=CRAM-MD5, rip=xx.xx.xx.xx, lip=10.255.0.11 >Also show your dovecot-sql.conf and dovecot -n output. :> more /usr/local/etc/dovecot-sql.conf driver = mysql connect = host=10.211.1.3 dbname=mail user=postfix password=p0stf1x9 default_pass_scheme = PLAIN password_query = SELECT password, home as userdb_home, 5000 as userdb_uid, 5000 as userdb_gid FROM mailbox where userid = '%n' :> dovecot -n # 1.1.10: /usr/local/etc/dovecot.conf # OS: Linux 2.6.18-128.el5 i686 Red Hat Enterprise Linux Server release 5.3 (Tikanga) ext3 base_dir: /var/run/dovecot/ log_path: /var/log/pop.log info_log_path: /var/log/dovecot-info.log protocols: imap imaps pop3 pop3s listen(default): *:143 listen(imap): *:143 listen(pop3): *:110 ssl_listen(default): *:993 ssl_listen(imap): *:993 ssl_listen(pop3): *:995 ssl_cert_file: /etc/ssl/certs/server.crt ssl_key_file: /etc/ssl/private/server.key ssl_cipher_list: ALL:!LOW:!SSLv2 disable_plaintext_auth: no verbose_ssl: yes login_dir: /var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login login_greeting: Dovecot on mail-pop01.xxxxx.com ready. verbose_proctitle: yes mail_location: maildir:/mail/%h:INDEX=MEMORY mmap_disable: yes mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_plugins(default): mail_log mail_plugins(imap): mail_log mail_plugins(pop3): mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 mail_log_max_lines_per_sec: 0 auth default: mechanisms: plain cram-md5 debug_passwords: yes process_size: 1024 passdb: driver: sql args: /usr/local/etc/dovecot-sql.conf userdb: driver: sql args: /usr/local/etc/dovecot-sql.conf userdb: driver: prefetch I appreciate your help. Thanks. - Richard

1 0

[Dovecot] cram-md5 problem
by Richard Stockton 30 Jan '09

30 Jan '09

I just updated to dovecot 1.1.10 from 1.1.2 and now anyone using cram-md5 can't get authenticated. I am using mysql for passwords (in plain text) and home directories. Per some googling I tried to set (in /usr/local/etc/dovecot.conf): # SQL database userdb sql { # Path for SQL configuration file, see doc/dovecot-sql.conf for example args = /usr/local/etc/dovecot-sql.conf } but that didn't help. And in any case people NOT using cram-md5 can authenticate just fine, both before and after I made that change. This worked "out of the box" under 1.1.2, but is broken now. Any ideas appreciated. Thanks. - Richard

2 1

[Dovecot] Problem with dovecot config
by Thomas M Goerger 30 Jan '09

30 Jan '09

Hi, Doing a first install of dovecot, trying to copy over some of the config settings from 1.1.6. I'm getting an error, I think from the ACL plugin module. This is the error I'm getting on the console: Error: imap dump-capability process returned 89 Fatal: Invalid configuration in /etc/opt/dovecot1.8/dovecot.conf And this is what is appearing in syslog: Jan 23 12:46:57 mars.tc.umn.edu imap(dump-capability): : [ID 315030 mail.info] Loading modules from directory: /opt/dovecot1.8/lib/dovecot/imap Jan 23 12:46:57 mars.tc.umn.edu imap(dump-capability): : [ID 817342 mail.error] dlopen(/opt/dovecot1.8/lib/dovecot/imap/lib01_acl_plugin.so) failed: ld.so.1: imap: fatal: relocation error: file /opt/dovecot1.8/lib/dovecot/imap/lib01_acl_plugin.so: symbol i_strcmp_p: referenced symbol not found Other pertinent info: # /opt/dovecot1.8/sbin/dovecot --version 1.1.8 # /opt/dovecot1.8/sbin/dovecot -n # 1.1.8: /etc/opt/dovecot1.8/dovecot.conf Warning: fd limit 256 is lower than what Dovecot can use under full load (more than 8448). Either grow the limit or change login_max_processes_count and max_mail_processes settings # OS: SunOS 5.10 sun4u syslog_facility: local6 protocols: imap imaps pop3 pop3s ssl_cert_file: /etc/opt/openssl/certs/dovecot.pem ssl_key_file: /etc/opt/openssl/private/dovecot.pem shutdown_clients: no login_dir: /var/opt/dovecot1.8/run/dovecot/login login_executable(default): /opt/dovecot1.8/libexec/dovecot/imap-login login_executable(imap): /opt/dovecot1.8/libexec/dovecot/imap-login login_executable(pop3): /opt/dovecot1.8/libexec/dovecot/pop3-login login_log_format_elements: user=<%u> pid=<%p> method=%m rip=%r lip=%l %c max_mail_processes: 8192 first_valid_uid: 99 mail_location: mbox:~:INBOX=/var/mail/%u:INDEX=/var/mail/.dovecot-index/%1u/%u/ mail_debug: yes mbox_lazy_writes: no mail_executable(default): /opt/dovecot/libexec/dovecot/imap-helper mail_executable(imap): /opt/dovecot/libexec/dovecot/imap-helper mail_executable(pop3): /opt/dovecot1.8/libexec/dovecot/pop3 mail_plugins(default): acl mail_plugins(imap): acl mail_plugins(pop3): mail_plugin_dir(default): /opt/dovecot1.8/lib/dovecot/imap mail_plugin_dir(imap): /opt/dovecot1.8/lib/dovecot/imap mail_plugin_dir(pop3): /opt/dovecot1.8/lib/dovecot/pop3 mail_log_prefix: [%p] %Us(%u): imap_client_workarounds(default): delay-newmail outlook-idle tb-extra-mailbox-sep imap_client_workarounds(imap): delay-newmail outlook-idle tb-extra-mailbox-sep imap_client_workarounds(pop3): namespace: type: private separator: / location: mbox:~:INBOX=/var/mail/%u:INDEX=/var/mail/.dovecot-index/%1u/%u/ inbox: yes list: yes subscriptions: yes namespace: type: private separator: / prefix: mail/ location: mbox:~/mail/:INDEX=/var/mail/.dovecot-index/%1u/%u/ hidden: yes list: yes subscriptions: yes namespace: type: private separator: / prefix: ~/mail/ location: mbox:~/mail/:INDEX=/var/mail/.dovecot-index/%1u/%u/ hidden: yes list: yes subscriptions: yes namespace: type: private separator: / prefix: ~%u/mail/ location: mbox:~/mail/:INDEX=/var/mail/.dovecot-index/%1u/%u/ hidden: yes list: yes subscriptions: yes namespace: type: private separator: / prefix: Shared/ location: maildir:~/Maildir/Shared:INDEX=/var/mail/.dovecot-index/%1u/%u/shared:CONTROL=/var/mail/.dovecot-index/%1u/%u/shared-control hidden: yes list: yes subscriptions: yes namespace: type: private separator: / prefix: mail/Shared/ location: maildir:~/Maildir/Shared:INDEX=/var/mail/.dovecot-index/%1u/%u/shared:CONTROL=/var/mail/.dovecot-index/%1u/%u/shared-control hidden: yes list: yes subscriptions: yes namespace: type: private separator: / prefix: ~/mail/Shared/ location: maildir:~/Maildir/Shared:INDEX=/var/mail/.dovecot-index/%1u/%u/shared:CONTROL=/var/mail/.dovecot-index/%1u/%u/shared-control hidden: yes list: yes subscriptions: yes namespace: type: private separator: / prefix: AutoFiled/ location: mbox:/archive/home/%1u/%u/mail/AutoFiled:INDEX=/var/mail/.dovecot-index/%1u/%u/ hidden: yes list: yes subscriptions: yes namespace: type: private separator: / prefix: mail/AutoFiled/ location: mbox:/archive/home/%1u/%u/mail/AutoFiled:INDEX=/var/mail/.dovecot-index/%1u/%u/ hidden: yes list: yes subscriptions: yes namespace: type: private separator: / prefix: ~/mail/AutoFiled/ location: mbox:/archive/home/%1u/%u/mail/AutoFiled:INDEX=/var/mail/.dovecot-index/%1u/%u/ hidden: yes list: yes subscriptions: yes namespace: type: private separator: / prefix: Prefs/ location: mbox:~:INDEX=MEMORY hidden: yes list: yes subscriptions: yes auth default: username_format: %Lu passdb: driver: pam args: session=yes * userdb: driver: passwd plugin: acl: vfile: Any help would be great. Thanks! ************************************************************************* * Tom Goerger - Email/Unix System Administrator * * * * University of Minnesota Email: tmg(a)umn.edu * * Operations, Infrastructure and Architecture Phone: 4-5804 * * Internet Services Office: 626J WBOB * * * *************************************************************************

2 3

[Dovecot] Killing Dovect, an unpleasant surprise
by Stewart Dean 30 Jan '09

30 Jan '09

When it came time to upgrade DC or replace the certificate, I would find the root instance of dovecot and do a kill -7 of it. Within 20-30 seconds, all the hundreds of DC related processes would go away, I would swap the executable or certificate/key and restart DC. Very clean and quick. Surprise. After switching from 1.0.15 to 1.1.8 and doing the kill, I found that all the imap-login instances had been inherited by the root (1) process and did not go away. Yikes! An Unpleasant Surprise. So instead of being down for a minute, I was out for a much more noticeable 5-7 minutes, while I QUICK did an awk of the ps list to give me the pids and then xarg killed them. My boss asked me if this was a pink slip notice. :( Is this The Way Things Will Be? Is there a new way to kill everything DC related quickly and cleanly? -- ==== Stewart Dean, Unix System Admin, Henderson Computer Resources Center of Bard College, Annandale-on-Hudson, New York 12504 sdean(a)bard.edu voice: 845-758-7475, fax: 845-758-7035 "Resolve then, that on this very ground, with small flags waving and tinny blasts on tiny trumpets, we shall meet the enemy, and not only may he be ours, he may be us." === From the introduction to the original Pogo Papers

2 1

[Dovecot] Trash for lda
by Alaa Ibrahim 30 Jan '09

30 Jan '09

Hi, I was wondering if there is a solution to the case when the user can't recieve emails because of being over quota, something like http://wiki.dovecot.org/Plugins/Trash, but for the lda, not the imap? Thanks, ------------------------- You can never find the chance to be the first to know about the newest movies showing in Arab theatres until you visit Maktoob Movies! http://www.maktoob.com/movies

3 2

[Dovecot] discrete passdb lookups for dovecot-auth
by benjamin thielsen 30 Jan '09

30 Jan '09

hi- i'm using ldap for user authentication, and would like to use different ldap lookups for authentication happening via postfix (smtp auth) vs. authentication happening through dovecot (imap logins). how can this be done, without running multiple instances? thanks! -bt

2 3

[Dovecot] Concurrent POP3 Sessions Issues
by Mauricio López Riffo 29 Jan '09

29 Jan '09

Hi, I have problems with dovecot + ldap + nfs, we could't have more than 20 concurrent sessions of pop3, when user 21 comes, the auth process takes more than 1 sec and is incresing (while most users arrives, more delay in autenticacion exists) and my customers complaint about the service. We need support about 200 concurrents pop3 users, here is my details Front Internet 1 Load Balancer configured with 2 servers reals App Servers 2 Servers Xeon 3.0Ghz, 4G Ram, rhel4 update 7 Dovecot 1.1.8 (i386 rpm complied by source rpm from fedora core 10) Ldap Server 2 Server Xeon QuadCore 2.5Ghz, 8G Ram, rhel5 update 2 Openldap 2.0.X (x86_64 rpms compiled by source rpm from rhel3) Nfs Server 1 Server Xeon 3.0Ghz, 4G Ram, rhel3 update 4 My conf: # 1.1.8: dovecot.conf # OS: Linux 2.6.9-78.0.13.ELsmp i686 Red Hat Enterprise Linux ES release 4 (Nahant Update 7) protocols: imap pop3 listen(default): app-server:143 listen(imap): app-server:143 listen(pop3): app-server:110 ssl_disable: yes login_dir: /var/run/dovecot/login-mail login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_greeting: Welcome POP3/IMAP Server New on app1. login_process_per_connection: no login_process_size: 256 login_processes_count: 50 mail_max_userip_connections(default): 50 mail_max_userip_connections(imap): 50 mail_max_userip_connections(pop3): 10 verbose_proctitle: yes first_valid_uid: 8 mail_uid: 8 mail_gid: 12 mail_location: maildir:%h/Maildir:INDEX=/var/cache/dovecot/indexes/%2d/%1u/%2u/%u mail_debug: yes mail_full_filesystem_access: yes mmap_disable: yes mail_nfs_storage: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_log mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 pop3_uidl_format(default): %08Xu%08Xv pop3_uidl_format(imap): %08Xu%08Xv pop3_uidl_format(pop3): UID%u-%v pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls auth default: realms: domain.cl default_realm: domain.cl verbose: yes debug: yes debug_passwords: yes count: 32 worker_max_count: 16 passdb: driver: ldap args: /etc/dovecot/dovecot-ldap-new.conf userdb: driver: ldap args: /etc/dovecot/dovecot-ldap-new.conf plugin: quota: maildir mail_log_events: delete undelete expunge copy mailbox_delete mail_log_fields: uid box msgid size # dovecot-ldap-new.conf hosts = 10.1.2.3 10.1.2.4 dn = cn=Usr,o=USERS,c=CL dnpass = pass sasl_bind = no tls = no auth_bind = yes ldap_version = 3 base = dc=%d,o=MAIL,o=USERS,c=CL scope = subtree user_attrs = mailMessageStore=mail:INDEX=/var/cache/dovecot/indexes/%2d/%1u/%2u/%u,homeDi rectory=home,,,uidNumber=uid,gidNumber=gid,mailQuota=quota:storage user_filter = (&(objectClass=posixAccount)(uid=%n)) pass_attrs = mail=user,userPassword=password pass_filter = (&(objectClass=posixAccount)(uid=%n)) default_pass_scheme = CRYPT Regards ---- Mauricio López Riffo Red Hat Certified Engineer 804006455319519 Netline Telecomunicaciones Chile Los Conquistadores 2430, Providencia, Santiago. Codigo Postal: 7530041 Fono: +562 6560600 Móvil: +569 90992366

1 0

Re: [Dovecot] Problem with dovecot config
by Thomas M Goerger 29 Jan '09

29 Jan '09

Hi, I'd like to do option A, but I'm not certain as to what steps to take to do so. Could you let me know where the code for this function is located, and what might need to be done to link it? I'm not terribly familiar with the linker, so I'm having a bit of trouble figuring out what exactly needs to be done for the rebuild. Thanks, ************************************************************************* * Tom Goerger - Email/Unix System Administrator * * * * University of Minnesota Email: tmg(a)umn.edu * * Operations, Infrastructure and Architecture Phone: 4-5804 * * Internet Services Office: 626J WBOB * * * ************************************************************************* On Sun, 25 Jan 2009, Timo Sirainen wrote: > On Fri, 2009-01-23 at 12:48 -0600, Thomas M Goerger wrote: > > Jan 23 12:46:57 mars.tc.umn.edu imap(dump-capability): : [ID 817342 > > mail.error] dlopen(/opt/dovecot1.8/lib/dovecot/imap/lib01_acl_plugin.so) > > failed: ld.so.1: imap: fatal: relocation error: file > > /opt/dovecot1.8/lib/dovecot/imap/lib01_acl_plugin.so: symbol i_strcmp_p: > > referenced symbol not found > > Your linker was trying to be smart and didn't include i_strcmp_p() > function in imap binary, because it wasn't used anywhere in the imap > binary itself. ACL plugin needs it, but since linker dropped it it's no > longer there. The possibilities for how to fix this would be: > > a) Modify linker flags so that it doesn't drop all these unused > functions. > > b) Move the i_strcmp_p() code to ACL plugin. > > c) Use i_strcmp_p() somewhere in IMAP code. > > d) Make liblib.a a shared library instead so that the linker won't try > to drop useful stuff. > > I think for now you should go with a), b) or c). The long term solution > will be d), but I wasn't really planning on doing it soon.. Hmm. Maybe > for v1.3. >

1 0

[Dovecot] Dovecot and smartsieve
by Claudio Prono 29 Jan '09

29 Jan '09

Hi all, I am testing smartsieve with the patch found into the dovecot wiki (http://nopaste.biz/63514) but, i have some problems. All works fine, but incredibly slow..and i don't know why. The only error i get is into the error log of apache: [Fri Jan 30 17:18:57 2009] [error] [client xxx.xxx.xxx.xxx] PHP Notice: Undefined variable: line in /srv/www/htdocs/smartsieve/lib/Managesieve.php on line 237, referer: http://192.168.87.243/smartsieve/rule.php My configuration is: # 1.1.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.25.20-0.1-pae i686 openSUSE 11.0 (i586) ext3 log_path: /var/log/dovecot-err.log info_log_path: /var/log/dovecot-inf.log protocols: imap imaps pop3 pop3s managesieve listen: 127.0.0.1 disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login first_valid_uid: 51 last_valid_uid: 51 first_valid_gid: 51 last_valid_gid: 51 mail_location: maildir:/var/mail/virtual/%d/%u mail_debug: yes mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve imap_client_workarounds(default): outlook-idle imap_client_workarounds(imap): outlook-idle imap_client_workarounds(pop3): imap_client_workarounds(managesieve): pop3_uidl_format(default): %08Xu%08Xv pop3_uidl_format(imap): %08Xu%08Xv pop3_uidl_format(pop3): %Mf pop3_uidl_format(managesieve): %08Xu%08Xv sieve_storage(default): sieve_storage(imap): sieve_storage(pop3): sieve_storage(managesieve): /var/mail/virtual/%d/%u/sieve sieve(default): sieve(imap): sieve(pop3): sieve(managesieve): /var/mail/virtual/%d/%u/.dovecot.sieve auth default: passdb: driver: sql args: /etc/dovecot/dovecot-mysql.conf userdb: driver: passwd userdb: driver: sql args: /etc/dovecot/dovecot-mysql.conf socket: type: listen master: path: /var/run/dovecot/auth-master mode: 384 plugin: quota: maildir quota: maildir:user quota quota_warning: storage=80%% /usr/bin/quota_warning.sh 80 quota_warning2: storage=90%% /usr/bin/quota_warning.sh 90 quota_warning3: storage=99%% /usr/bin/quota_warning.sh 90 sieve: /var/mail/virtual/%d/%u/.dovecot.sieve I use smartsieve 1.0-RC2, with the patch for dovecot. Any idea of what is wrong? Thank you, Claudio Prono. -- ------------ Claudio Prono Systems Development @ PSS Srl, Divisione Implementazione Sistemi Via San Bernardino, 17 - 10137 Torino (TO) - IT Tel +39-011.32.72.100 Fax +39-011.32.46.497 PGP Fingerprint: 75C2 4049 E23D 2FBF A65F 40DB EA5C 11AC C2B0 3647 Disclaimer: http://atpss.net/disclaimer ------------

1 0