- dovecot - dovecot.org

Re: [Dovecot] auth-master permission error
by greno＠verizon.net 30 Dec '07

30 Dec '07

Ok, this turned out to be SELinux. If I turn off SELinux then I can start Dovecot using init.d. So now I tried to send a test mail using telnet: # telnet localhost smtp Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. 220 grp-01-50-90.localdomain ESMTP Postfix ehlo example.com 250-grp-01-50-90.localdomain 250-PIPELINING 250-SIZE 10240000 250-VRFY 250-ETRN 250-ENHANCEDSTATUSCODES 250-8BITMIME 250 DSN mail from:<steve(a)example.com> 250 2.1.0 Ok rcpt to:<john(a)example.com> 250 2.1.5 Ok data 354 End data with <CR><LF>.<CR><LF> Hi John, just wanted to drop you a note. . 250 2.0.0 Ok: queued as 4F1D2D8055A quit 221 2.0.0 Bye Connection closed by foreign host. And the log: # tail -50 /var/log/maillog Dec 30 10:45:31 grp-01-50-90 dovecot: Dovecot v1.0.7 starting up Dec 30 10:45:31 grp-01-50-90 dovecot: auth-worker(default): mysql: Connected to 127.0.0.1 (mailserver) Dec 30 11:03:02 grp-01-50-90 postfix/smtpd[6942]: connect from localdomain.localhost[127.0.0.1] Dec 30 11:04:21 grp-01-50-90 postfix/smtpd[6942]: 4F1D2D8055A: client=localdomain.localhost[127.0.0.1] Dec 30 11:05:06 grp-01-50-90 postfix/cleanup[6967]: 4F1D2D8055A: message-id=<20071230160421.4F1D2D8055A(a)grp-01-50-90.localdomain> Dec 30 11:05:06 grp-01-50-90 postfix/qmgr[2123]: 4F1D2D8055A: from=<steve(a)example.com>, size=408, nrcpt=2 (queue active) Dec 30 11:05:06 grp-01-50-90 pipe[6982]: fatal: pipe_command: execvp /usr/lib/dovecot/deliver: No such file or directory Dec 30 11:05:06 grp-01-50-90 postfix/pipe[6980]: 4F1D2D8055A: to=<john(a)example.com>, relay=dovecot, delay=67, delays=67/0.19/0/0.1, dsn=4.3.0, status=deferred (temporary failure. Command output: pipe: fatal: pipe_command: execvp /usr/lib/dovecot/deliver: No such file or directory ) Dec 30 11:05:11 grp-01-50-90 postfix/smtp[6981]: 4F1D2D8055A: to=<jmiller(a)gmail.com>, orig_to=<john(a)example.com>, relay=gmail-smtp-in.l.google.com[72.14.203.27]:25, delay=71, delays=67/0.14/0.53/3.7, dsn=2.0.0, status=sent (250 2.0.0 OK 1199030710 o33si13384597rog.14) Dec 30 11:05:20 grp-01-50-90 postfix/smtpd[6942]: disconnect from localdomain.localhost[127.0.0.1] So I checked and 'deliver' is not in /usr/lib/dovecot. It is in /usr/libexec/dovecot. So how do I fix this? Here is what is in postfix master.cf: dovecot unix - n n - - pipe flags=DRhu user=vmail:vmail argv=/usr/libexec/dovecot/deliver -d ${recipient} So why is it referencing /usr/lib/dovecot/deliver ???? Thanks, Gerry

1 0

[Dovecot] auth-master permission error
by greno＠verizon.net 29 Dec '07

29 Dec '07

On F7, I get to where I have Postfix and Dovecot installed and configured, postfix check runs fine, but when I try to start Dovecot I'm getting a permission error. Here is the log entry: Dec 29 21:54:06 grp-01-50-90 dovecot: Dovecot v1.0.7 starting up Dec 29 21:54:06 grp-01-50-90 dovecot: Generating Diffie-Hellman parameters for the first time. This may take a while.. Dec 29 21:54:06 grp-01-50-90 dovecot: auth(default): bind(/var/run/dovecot/auth-master) failed: Permission denied Dec 29 21:54:06 grp-01-50-90 dovecot: auth(default): net_listen_unix(/var/run/dovecot/auth-master) failed: Permission denied Here are the permissions on the filesystem: # ls -ld /var/run/dovecot drwxr-xr-x 3 root dovecot 4096 2007-12-29 22:07 /var/run/dovecot And in the conf file there is this in the lda protocol: socket listen { master { path = /var/run/dovecot/auth-master mode = 0600 user = vmail } client { path = /var/spool/postfix/private/auth mode = 0660 user = postfix group = postfix } } What should I change to straighten out these permissions? I forgot to mention that when I try to start Dovecot that I get this message: dovecot dead but subsys locked I'm thinking it is just a side effect of the permissions issue. Anyway I tried setting perms to 777 on /var/run/dovecot but this didn't help. So still needing some hints. A clue. I can start Dovecot as 'root': # dovecot # ps -ef root 14164 1 0 00:07 ? 00:00:00 dovecot root 14165 14164 0 00:07 ? 00:00:00 dovecot-auth root 14166 14164 0 00:07 ? 00:00:00 dovecot-auth -w dovecot 14168 14164 0 00:07 ? 00:00:00 pop3-login dovecot 14169 14164 0 00:07 ? 00:00:00 pop3-login dovecot 14170 14164 0 00:07 ? 00:00:00 pop3-login dovecot 14171 14164 0 00:07 ? 00:00:00 imap-login dovecot 14172 14164 0 00:07 ? 00:00:00 imap-login dovecot 14173 14164 0 00:07 ? 00:00:00 imap-login maillog: Dec 30 00:07:40 grp-01-50-90 dovecot: Dovecot v1.0.7 starting up Dec 30 00:07:41 grp-01-50-90 dovecot: auth-worker(default): mysql: Connected to 127.0.0.1 (mailserver) But if I try to start it using init.d: # service dovecot start dovecot dead but subsys locked maillog: Dec 30 00:12:49 grp-01-50-90 dovecot: Auth process died too early - shutting down Dec 30 00:12:49 grp-01-50-90 dovecot: auth(default): bind(/var/run/dovecot/auth-master) failed: Permission denied Dec 30 00:12:49 grp-01-50-90 dovecot: auth(default): net_listen_unix(/var/run/dovecot/auth-master) failed: Permission denied Dec 30 00:12:49 grp-01-50-90 dovecot: child 14301 (auth) returned error 89 ???? Gerry

1 0

[Dovecot] building dovecot-sieve against installed dovecot
by Geert Hendrickx 29 Dec '07

29 Dec '07

Hi Timo, may I request once more to consider the attached patch for dovecot 1.1, it enables the sieve plugin (incl. sievec and sieved, needed for pysieved) to be built against an installed dovecot package, if --enable-header-install additionally installs the liblib.a library in the same directory as dovecot-config. I have included this patch in the pkgsrc dovecot 1.1 package a while ago. Geert

1 0

[Dovecot] global and per-users sieve filters
by Nikolay Shopik 29 Dec '07

29 Dec '07

Hi Timo, I'm curious about such thing, currently if user have their own filter global filter no more take a place. Is this behavior changed in 1.1 or maybe in future? I'm unsure if this is 100 sieve related or more like Dovecot handling so fixing can be easily can done.

2 1

[Dovecot] v1.0.10 released
by Timo Sirainen 29 Dec '07

29 Dec '07

http://dovecot.org/releases/1.0/dovecot-1.0.10.tar.gz http://dovecot.org/releases/1.0/dovecot-1.0.10.tar.gz.sig v1.0.8 and v1.0.9 were a bit bad releases. Hopefully one day I've managed to have written a proper test suite which can be run before doing any releases.. * Security hole with LDAP+auth cache: If base setting contained %variables they weren't included in auth cache key, which broke caching. This could have caused different users with same passwords to log in as each other. - LDAP: Fixed potential infinite looping when connection to LDAP server was lost and there were queued requests. - mbox: More changes to fix problems caused by v1.0.8 and v1.0.9. - Maildir: Fixed a UIDLIST_IS_LOCKED() assert-crash in some conditions (caused by changes in v1.0.9) - If protocols=none, don't require imap executables to exist

3 4

[Dovecot] How to logoff a session with dovecot?
by Robin Atwood 29 Dec '07

29 Dec '07

I use dovecot to push email to my SE P1i and it works very well. :) However, I have two email accounts set up on the phone, one using my domain for GPRS and public WiFi and one using my WLAN address for use at home, the idea being I don't want to pay for GPRS data at home. The trouble is the GPRS account remains logged on and I get the mail in both inboxes. There is no option in the email client on the phone to disconnect, so is there any trick to forcing a disconnect from the mail server? TIA -Robin -- ---------------------------------------------------------------------- Robin Atwood. "Ship me somewheres east of Suez, where the best is like the worst, Where there ain't no Ten Commandments an' a man can raise a thirst" from "Mandalay" by Rudyard Kipling ----------------------------------------------------------------------

2 2

Re: [Dovecot] namespace problem / 1.1beta11
by ja nein 29 Dec '07

29 Dec '07

Hi Timo, great, that fix it! Thx. The only thing I noticed is that I've commented out the "list=yes" in namespace section of dovecot.conf, so it was automatically set to yes (according to dovecot -n): namespace private { separator = / prefix = INBOX/ inbox = yes # hidden = yes # list=yes } Regards, Sebastian ----- Ursprüngliche Mail ---- Von: Timo Sirainen <tss(a)iki.fi> An: ja nein <reg9009(a)yahoo.de> CC: Dovecot Mailing List <dovecot(a)dovecot.org> Gesendet: Samstag, den 29. Dezember 2007, 06:19:15 Uhr Betreff: Re: [Dovecot] namespace problem / 1.1beta11 On Fri, 2007-12-28 at 22:31 +0000, ja nein wrote: > > * NAMESPACE (("INBOX/" ".")) NIL NIL I don't know why I can't reproduce it, but I think this fixes it: http://hg.dovecot.org/dovecot/rev/0a0ff276bc38 __________________________________ Ihr erstes Fernweh? Wo gibt es den schönsten Strand? www.yahoo.de/clever

1 0

[Dovecot] Group inboxes
by Денис Квист 28 Dec '07

28 Dec '07

Please help, i want made "Group Inboxes" like in MDaemon "Group Inboxes: Customer service organizations often use group inboxes to receive email requests. Everyone in the customer service group has read and write access to the collective incoming mailbox. In this manner, anyone in the group can respond to each incoming email." Is it possible? Public folder is not work like i want namespace private { prefix = separator = / index = yes } namespace public { prefix = office/ separator = / location = maildir:/var/spool/mail/vhosts/testdomain.ru/Maildir/info hidden = no } dovecot --version 1.0.rc15 (Debian Etch)

2 1

[Dovecot] Fishing attempt locking up dovecot
by Patrick Milvich 28 Dec '07

28 Dec '07

I've mentioned this before but only heard from one other person who has experienced this, but it's becoming a pretty serious issue. The situation: A spammer sets a bot on a fishing attempt to gain email addresses, causing numerous login processes to spawn and suck up all available resources. The problem: Obviously this can act like a dos attack, but the real issue is after the spammer stops (by virtue of being added to our firewall blacklist, being caught and shut down by their isp, or otherwise), dovecot doesn't seem to relinquish the resources, causing "too many files open" errors for normal usage. The master process usually hangs around 40-50 files open at any given time, with about 10,000 logins a day (I use: lsof -p `cat /var/run/ dovecot/master.pid ` | wc -l), after the attempt is over I always see the files open shoot up to near 3,000 without it able to go down until a dovecot restart. This usually happens about once a month, though we can get unlucky and have it happen a few days apart. I have some log excerpts below. Wondering if this is happening through my own fault or at least within my ability to alleviate the issue. Is there a way to limit the number of connections from an ip address? Has anyone used login_executable to first hit their own solution to keep track of, and implement connection restrictions similar to what I'm aiming for? Thanks for any insight Patrick dovecot -n # 1.0.8: /usr/local/mail/dovecot/etc/dovecot.conf base_dir: /var/run/dovecot/ log_path: /var/log/dovecot protocols: imap imaps pop3 pop3s ssl_cert_file: /usr/local/mail/ssl/certs/dovecot.pem ssl_key_file: /usr/local/mail/ssl/private/dovecot.pem ssl_cipher_list: ALL:!LOW disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/local/mail/dovecot/libexec/dovecot/ imap-login login_executable(imap): /usr/local/mail/dovecot/libexec/dovecot/imap- login login_executable(pop3): /usr/local/mail/dovecot/libexec/dovecot/pop3- login first_valid_uid: 500 mail_location: maildir:/Volumes/data/mail/%Ld/%Ln mail_executable(default): /usr/local/mail/dovecot/libexec/dovecot/imap- before mail_executable(imap): /usr/local/mail/dovecot/libexec/dovecot/imap- before mail_executable(pop3): /usr/local/mail/dovecot/libexec/dovecot/pop3- before mail_plugin_dir(default): /usr/local/mail/dovecot/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/mail/dovecot/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/mail/dovecot/lib/dovecot/pop3 pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %08Xu%08Xv auth default: mechanisms: plain digest-md5 login passdb: driver: sql args: /usr/local/mail/dovecot/etc/dovecot-sql.conf userdb: driver: static args: uid=exim gid=exim plugin: quota: maildir From the logs, first entries showing the problem: dovecot: Dec 10 16:17:02 Info: pop3-login: Disconnected: rip=207.245.39.90, lip=<lip> dovecot: Dec 10 16:17:02 Info: pop3-login: Disconnected: rip=207.245.39.90, lip=<lip> dovecot: Dec 10 16:17:03 Info: pop3-login: Disconnected: rip=207.245.39.90, lip=<lip> dovecot: Dec 10 16:17:03 Info: pop3-login: Disconnected: rip=207.245.39.90, lip=<lip> dovecot: Dec 10 16:17:03 Info: pop3-login: Disconnected: rip=207.245.39.90, lip=<lip> A little later on: dovecot: Dec 10 16:17:12 Info: pop3-login: Aborted login: user=<pwitest>, method=PLAIN, rip=207.245.39.90, lip=<lip> dovecot: Dec 10 16:17:12 Info: pop3-login: Aborted login: user=<tsinternetuser>, method=PLAIN, rip=207.245.39.90, lip=<lip> dovecot: Dec 10 16:17:12 Info: pop3-login: Aborted login: user=<bill>, method=PLAIN, rip=207.245.39.90, lip=<lip> dovecot: Dec 10 16:17:12 Info: pop3-login: Aborted login: user=<web>, method=PLAIN, rip=207.245.39.90, lip=<lip> dovecot: Dec 10 16:17:12 Info: pop3-login: Aborted login: user=<barbara>, method=PLAIN, rip=207.245.39.90, lip=<lip> dovecot: Dec 10 16:17:12 Info: pop3-login: Aborted login: user=<www>, method=PLAIN, rip=207.245.39.90, lip=<lip> dovecot: Dec 10 16:17:12 Info: pop3-login: Aborted login: user=<user>, method=PLAIN, rip=207.245.39.90, lip=<lip> dovecot: Dec 10 16:17:12 Info: pop3-login: Aborted login: user=<nathan>, method=PLAIN, rip=207.245.39.90, lip=<lip> dovecot: Dec 10 16:17:12 Info: pop3-login: Aborted login: user=<webmaster>, method=PLAIN, rip=207.245.39.90, lip=<lip> etc. etc.

3 2

[Dovecot] v1.1.beta11 released
by Timo Sirainen 28 Dec '07

28 Dec '07

http://dovecot.org/releases/1.1/beta/dovecot-1.1.beta11.tar.gz http://dovecot.org/releases/1.1/beta/dovecot-1.1.beta11.tar.gz.sig This one should be the last beta release before the first v1.1 release candidate. I'll try to stay away from this list and Dovecot in general for the next 1,5 weeks. I've several exams coming up and I should have started studying for them days ago already.. :) The main things left in my TODO are: - Squat indexes should handle expunges - Lucene indexes are broken - See if \recent flag handling could be fixed for maildir/mbox (it works for dbox though) - Some other minor things which I'll do if I have time, but won't block v1.1.0 release. Changes since beta10: - One major performance issue found and fixed. This was the main reason why we weren't yet in release candidate stage. - configure --with-package now gives an error if it can't find the necessary libs/headers for the package. Use --with-package=auto for the old behavior. - Memory leak fixes - Convert plugin fixes. Conversion is now done to namespace with INBOX. - Changes to handling group adding/removing to processes. Hopefully didn't break anything. - Message flag/keyword searches are now faster - Fixes/optimizations to handling SORT. After building initial indexes, my 260k mail mailbox sorts in about 0.01 seconds. :) - Fixes to searching mails with unknown charsets/invalid data - deliver_log_format setting

3 8