- dovecot - dovecot.org

[Dovecot] Unable To Move IMAP Folder (Dovecot)
by Carlos Williams 02 Oct '08

02 Oct '08

I have a user who has a folder in his Maildir/ called "test" /home/user/Maildir/.test This folder shows up as a sub folder to his Inbox on his Thunderbird client and I tried using the "cp" command to move this over to my Maildir/ directory on the same server and when I launch Thunderbird, that folder is not visible for me. I made sure permissions are correct and even reloaded Dovecot. mail:/home/user/Maildir# cp -R .test/ /home/me/Maildir/ mail:/home/user/Maildir# chown -R me:users .test/ The permissions and ownership seem to be identical to all the folders I created as subfolders myself but for some reason, I can NOT see "test/". Does anyone know what I am doing wrong?

4 4

[Dovecot] Why my Evolution cannot delete emails in dovecot IMAP folder?
by Igor Chudov 02 Oct '08

02 Oct '08

I use Ubuntu Hardy, get mails locally and run dovecot listening on localhost. I run Evolution and have it connect to dovecot, so that I can access my mail in IMAP and be able to use mutt from remote. So far so good. It works. However, my problem is that Evolution cannot delete any messages. That is, when I click DELETE in Evolution, Evolution no longer sees the message , but the message is still there. That's not what I want, when deleting messages I want them to go away from Inbox. How can I do it? thanks i

3 2

[Dovecot] segfault in dovecot imap 1.1.1 to 1.1.3
by Rene Luria 02 Oct '08

02 Oct '08

Dovecot dies with signal 11 (segfault) when doing some commands with a specific message you'll find relevant information stored here: http://www.luria.ch/9e93676668e453b739ee3e085434e086/ the email: msg.anon.txt input rawlog: 20081001-120137-24371.in dovecot -n: dovecot-n.txt the gdb backtrace: bt.txt test system is running debian sarge, but same thing happens with debian etch (both x86) using xfs always reproductible Can you help me with this ? (the problematic email is anonimized, tell-me if you need the originalone) -- Rene Luria

3 5

Re: [Dovecot] Step-by-set Postfix/Dovecot/LDA?
by Roderick A. Anderson 02 Oct '08

02 Oct '08

Fred Newtz wrote: > www.howtoforge.com has some great how-tos on there. > Thanks Fred. Some look interesting. Too bad so many are using a web/GUI interface to get it running. My favorite system admin tool is vi. :-) I did find a pretty good one (http://neranjara.org/tutorials/?tid=56) but he does some pretty good skips that leave me with questions. I think I have it up a working but need to do some testing. Rod -- > Fred > > > On Wed, 2008-10-01 at 13:04 -0700, Roderick A. Anderson wrote: >> Anyone know of a /complete/ step-by-step HOWTO for setting up a system >> using Postfix, Dovecot, and Deliver? I'm looking to put a new mail >> server together that will host three domains with pretty low volumes of >> email. Later adding three or four more for some non-profits that I host. >> >> I'm finding my self skipping all around the Postfix and Dovecot sites >> trying to come up with this setup. >> >> I have set up Postfix in several different configurations: inbound >> spool, outbound SMTP, regular mail server, etc. And with Dovecot I was >> lucky as it ran for me pretty much out of the box. Of course that was >> on a single domain mail server. (Not to mention it is a really old >> version.) >> >> Since it went up I've added a couple of domains to my personal >> collection and rather than add a new mail server for each I thought I'd >> go the virtual route. >> >> Anyone have a complete set of example .conf files they could share? >> >> main.cf, master.cf >> dovecot.conf >> >> Isn't it about time for a Dovecot book? >> >> >> TIA, >> Rod >

1 0

[Dovecot] ACL plugin
by Matvey Soloviev 01 Oct '08

01 Oct '08

Hello, I am working on implementing support for the RFC4314 ACL management commands and responses in the ACL plugin included with dovecot 1.1.2. (I verified the error persists with 1.1.3 though.) While the described objective is still in the works, I have stumbled upon what I believe to be a critical issue with the handling of negative rights in the present ACL plugin - to be precise, the cache component of it handles them in the exact same way as it does positive rights, thus granting rather than retracting the individual privileges. To fix this, go to src/plugins/acl/acl-cache.c:391. The line and the one following it should read p[j] |= obj_cache->my_neg_rights[i]->mask[j]; Replace that to read p[j] &= ~obj_cache->my_neg_rights[i]->mask[j]; I hope this information is useful. Regards, M. Soloviev

4 7

[Dovecot] "dovecot: Maximum number of mail processes exceeded"
by Ralf Hildebrandt 01 Oct '08

01 Oct '08

At noon, I often get "dovecot: Maximum number of mail processes exceeded" I'm at my wits end, which parameter needs to be increased further? # 1.1.3: /usr/local/etc/dovecot.conf protocols: imap imaps pop3s ssl_cert_file: /etc/ssl/certs/postamt.pem ssl_key_file: /etc/ssl/private/postamt.key disable_plaintext_auth: no version_ignore: yes login_dir: /usr/local/var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login login_process_per_connection: no login_greeting_capability(default): yes login_greeting_capability(imap): yes login_greeting_capability(pop3): no login_processes_count: 32 login_max_processes_count: 2048 login_max_connections: 512 max_mail_processes: 1024 mail_max_userip_connections: 2048 verbose_proctitle: yes mail_location: maildir:~/Maildir fsync_disable: yes maildir_copy_preserve_filename: yes mail_drop_priv_before_exec: yes mail_executable(default): /usr/local/sbin/imap_login_script mail_executable(imap): /usr/local/sbin/imap_login_script mail_executable(pop3): /usr/local/sbin/pop_login_script mail_plugins(default): quota imap_quota trash mail_log fts fts_squat mail_plugins(imap): quota imap_quota trash mail_log fts fts_squat mail_plugins(pop3): quota mail_log mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 mail_log_max_lines_per_sec: 0 imap_client_workarounds(default): outlook-idle netscape-eoh imap_client_workarounds(imap): outlook-idle netscape-eoh imap_client_workarounds(pop3): pop3_lock_session(default): no pop3_lock_session(imap): no pop3_lock_session(pop3): yes pop3_uidl_format(default): %08Xu%08Xv pop3_uidl_format(imap): %08Xu%08Xv pop3_uidl_format(pop3): %v-%u pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh namespace: type: private separator: . prefix: INBOX. inbox: yes list: yes subscriptions: yes auth default: mechanisms: plain login cache_size: 64 master_user_separator: * verbose: yes passdb: driver: passwd-file args: /usr/local/etc/dovecot.masterusers pass: yes master: yes passdb: driver: shadow passdb: driver: pam args: cache_key=%u dovecot userdb: driver: passwd socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix plugin: fts: squat quota: maildir quota_rule: Trash:storage=100M quota_warning: storage=90%% /usr/local/scripts/quota-warning 90 quota_warning2: storage=95%% /usr/local/scripts/quota-warning 95 quota_warning3: storage=99%% /usr/local/scripts/quota-warning 99 trash: /usr/local/etc/dovecot-trash.conf -- Ralf Hildebrandt (Ralf.Hildebrandt(a)charite.de) snickebo(a)charite.de Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155 http://www.arschkrebs.de I'm looking for a job Vampireware /n/, a project, capable of sucking the lifeblood out of anyone unfortunate enough to be assigned to it, which never actually sees the light of day, but nonetheless refuses to die.

2 2

[Dovecot] disbale to responded to an unrequested SSL Certificate
by Andre Hübner 01 Oct '08

01 Oct '08

Hi dovecot-list, just a easy question today ;) Customer did on Server a PCI-Test to test security to fit worldpay requirements. They found a critical risk at pop3s. (and some other things) This is the Textmesage: ############ Family: Remote Shell Access Critical 993/tcp 11875 Description: The remote host responded to an unrequested SSL Certificate. The remote SSL server should have sent back an Error message. This may indicate that the server is vulnerable to a remote flaw in the way that it handles unrequested certificates. You should manually inspect the SSL Server's configuration ############ Background is that we use a wildcard-cert which is installed on ervery machine and fits to servername. So you have to use the accredited Hostname/Servername to make clean ssl connection pop3s/imaps without warnings etc. Problem should be that server sends no error when requested with other hostname. This is significant part from dovecot.conf protocols = imap imaps pop3 pop3s ssl_disable = no ssl_cert_file = "/path/to/*.myhost.com.crt" ssl_key_file = "/path/to/*.myhost.com.key" ssl_ca_file = "/path/to/*.myhost.com.bundle.crt" Is there a Config-Option to send error when ssl-connect ist not established to in cert accredited Hostname/Servername ? Did not found something like this or did not really understand function of the options. I do not know backgrounds to this issue. Cant decide if it would be a security risk or disproportionated wishes of securityexperts but i want to satisfy this costumer. How to handle thos? Thank you Andre

2 1

[Dovecot] quota warnings clarification
by Ian B 01 Oct '08

01 Oct '08

I spent a long while trying to get quota warnings working with v1.1.3 on Centos5 before almost giving up. I configured everything as per the instructions on the Quota wiki page however no warning emails were being generated when I tested & no debug messages in the log to give any clues as to what I was doing wrong. It turns out I wasn't doing anything wrong, but just misunderstanding at what point the warnings are generated. The warning email appears to only be generated when a message is moved from one folder to another. I was expecting the warning to be generated when the INBOX was simply opened & viewed! Is this how it is supposed to work? If so, perhaps a note of clarification could be added to the wiki page? Make the switch to the world's best email. Get Yahoo!7 Mail! http://au.yahoo.com/y7mail

2 2

[Dovecot] Managesieve Quota
by Seth Mattinen 01 Oct '08

01 Oct '08

Has anyone (is anyone) working on adding quota support to dovecot's managesieve server? I was thinking about giving it a shot myself and I'd hate to duplicate work. It would be something very basic like a max bytes setting and the total sieve storage per user isn't allowed to exceed it. ~Seth

4 7

[Dovecot] PKI Compliance Dovecot Server
by Amit Thakkar 30 Sep '08

30 Sep '08

Hello, I work for an organization that uses a Secure Dovecot server for messaging, and recently we've had to undergo some security screenings for PKI compliance (credit card industry standards). However, the screening returned to us a failure due to the following reason (attributed to our Dovecot server, which runs on port 993 and is the only "open" port on our firewall): Synopsis : The remote service encrypts traffic using a protocol with known weaknesses. Description : The remote service accepts connections encrypted using SSL 2.0, which reportedly suffers fromseveral cryptographic flaws and has been deprecated for several years. An attacker may be able to exploit these issues to conduct man-in-the-middle attacks or decrypt communications between the affected service and clients. See also : http://www.schneier.com/paper-ssl.pdf Solution: Consult the application's documentation to disable SSL 2.0 and use SSL 3.0 or TLS 1.0 instead. See http://support.microsoft.com/kb/216482 for instructions on IIS. See http://httpd.apache.org/docs/2.0/mod/mod _ssl.html for Apache. Risk Factor: Medium / CVSS Base Score : 2 (AV:R/AC:L/Au:NR/C:P/A:N/I:N/B:N) [More] Is there a way that we can disable SSL 2.0 in Dovecot, or force it to use only TLS 1.0 ? Thank You

4 3