- dovecot - dovecot.org

[Dovecot] dovecot with virtual and local users?
by Patrick Winnertz 23 Sep '07

23 Sep '07

Hello, I googled for a while in order to find a solution to make dovecot work with local and virtual users. My Mailserver setup looks like the following: virtual users are stored in a mysql database, and having their Mailbox here: /srv/mail/$domain/$uid/ Local users have a Maildir folder in their home directory. The only point i found in the web concerning this issue is this post here: http://www.dovecot.org/list/dovecot/2006-November/017478.html but I failed to understand the user_query. Can somebody who has such a setup running, or know how such a setup will work give me an advice, or a good point to read? Greetings Patrick ps: Please cc me, I'm not subscribed. -- .''`. Patrick Winnertz <patrick.winnertz(a)skolelinux.org> : :' : GNU/Linux Debian-Edu Developer `. `'` http://www.der-winnie.de http://d.skolelinux.org/~winnie `- Debian - when you have better things to do than fixing systems

2 1

[Dovecot] quota ignore trash
by JC 23 Sep '07

23 Sep '07

Hi everybody, I have a server works good but the quota calculation includes trash, what i have to do in order to ignore trash in quota calculation? My server imap is dovecot 1.0, my smtp server is postfix 2.3.8-2 and my webmail is horde 3.1.3 and imp 4.1.3. my dovecot.conf : base_dir: /var/run/dovecot/ log_path: /var/log/mail.log log_timestamp: %Y-%m-%d %H:%M:%S protocols: pop3 imap disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_process_size: 64 login_processes_count: 5 login_max_processes_count: 256 login_max_connections: 512 first_valid_uid: 5000 last_valid_uid: 5000 first_valid_gid: 5000 mail_extra_groups: vmail mail_location: maildir:/home/vmail/%d/%n maildir_copy_with_hardlinks: yes maildir_copy_preserve_filename: yes mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugins(default): quota trash imap_quota mail_plugins(imap): quota trash imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 imap_client_workarounds(default): outlook-idle delay-newmail imap_client_workarounds(imap): outlook-idle delay-newmail imap_client_workarounds(pop3): outlook-idle pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %08Xu%08Xv pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh namespace: type: private separator: . prefix: INBOX. inbox: yes auth default: mechanisms: plain login user: vmail passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: prefetch socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: vmail master: path: /var/run/dovecot/auth-master mode: 432 user: vmail group: vmail plugin: quota: maildir:storage=10240:messages=1000:ignore=Trash trash: /etc/dovecot/dovecot-trash.conf my dovecot-sql.conf : password_query = SELECT email AS user, password, '/home/vmail/%d/%n' AS userdb_home, 'maildir:/home/vmail/%d/%n' AS userdb_mail, 5000 AS userdb_uid, 5000 AS userdb_gid FROM users WHERE email = '%u' user_query = SELECT '/home/vmail/%d/%n' AS home, 'maildir:/home/vmail/%d/%n' AS mail, 5000 AS uid, 5000 AS gid, CONCAT('maildir:storage=', ROUND(quota/1000) ) AS quota FROM users WHERE email = '%u'

2 1

Re: [Dovecot] v1.1.beta1 released
by Jerry Yeager 23 Sep '07

23 Sep '07

On Sep 23, 2007, at 11:23 AM, dovecot-request(a)dovecot.org wrote: > Re: v1.1.beta1 released So far every thing is up and running well, (OS X 10.4 on a G5 machine). There are two things: From the logs: 1) dovecot: fd limit 256 is lower than what Dovecot can use under full load (more than 1152). Either grow the limit or change login_max_processes_count and max_mail_processes settings this is of course NOT a dovecot problem, it is just being nice and saying it can use more than the OS X defaults for open files. The next come from using the new Dovecot LDA: in trying to send mail, the following error occurs and I have not been able to find the setting to change this 2) postfix/qmgr[25767]: 2459A37F612: from=<from-email-address>, size=1226, nrcpt=1 (queue active) deliver(to-email-address): auth input: to-email-address deliver(to-email-address): auth input: uid=1000 deliver(to-email-address): auth input: gid=1000 deliver(to-email-address): auth input: home=path/to/ deliver(to-email-address): setgroups() failed: Operation not permitted postfix/pipe[6505]: 2459A37F612: to=<to-email-address>, relay=dovecot, delay=984, delays=984/0.03/0/0.06, dsn=4.3.0, status=deferred (temporary failure) The solution so far is to go back to using the Postfix Deliver option. Where is the setgroups option being set in the LDA? Thank for you hard work!! Jerry Yeager

1 0

[Dovecot] kmail + IMAPS
by Timothy Murphy 23 Sep '07

23 Sep '07

I have dovecot IMAPS + kmail working perfectly on two laptops - I'm using one now - but I just tried starting it on a third laptop, and cannot get it running; kmail on the third laptop just waits indefinitely, saying "Retrieving Folder Contents Please wait ...". All 3 laptops are running Fedora 7, with more or less the same packages, all updated. (1) I suspect the problem lies with authentication. But how can I test this? Running "telnet <server> 993" gets the same response on all 3 laptops: [tim@elizabeth ~]$ telnet www.*.com 993 Trying 86.*.*.228... Connected to www.*.com. Escape character is '^]'. with no further response until I press ^]. I looked at <http://wiki.dovecot.org/TestInstallation> but this seems only to apply to IMAP on port 143. (2) kmail has an option to "Check What the Server Supports" under the Security tag, but pressing this just returns without any message, leaving whatever settings as they are. (On the laptops where kmail is working as an IMAPS client, the settings are changed to "Use TLS ..." and "Clear text".) I realise this is probably a kmail question, but shouldn't clicking on this option return some warning if it does not work? (3) I guess I don't understand exactly how TLS authentication works. Does installing openssl set up the correct certificates on server and client? Is there any documentation on this? Any suggestions or enlightenment gratefully received.

2 1

[Dovecot] recipient delimiter results in sieve errors
by Gregory Mokhin 22 Sep '07

22 Sep '07

Hello, I'm using dovecot 1.0.3 and Dovecot Sieve plugin 1.0.2. Sieve script works fine with normal addresses, like user@domain.., and messages marked with "X-Spam-Flag: YES" are delivered directly to INBOX.Spam. To make deliver understand recipient_delimiter I tried two methods, the first one as per wiki (tweaking postfix master.cf), and the second one by tweaking dovecot-sql.conf (the main idea is to use concat(substring_index('%n',"+',1),'@','%d') for the username). Both methods work good. However when deliver processes sieve script for the addresses with a delimiter, user+ext(a)domain.tld, there is an error: deliver(test@k..): Info: cmusieve: Using sieve path: /home/vmail/.dovecot.sieve deliver(test@k..): Info: cmusieve: Executing script /home/vmail/.dovecot.sievec deliver(test@k..): Info: sieve runtime error: Keep: Generic Error deliver(test@k..): Error: sieve_execute_bytecode(/home/vmail/.dovecot.sievec) failed deliver(test@k..): Info: msgid=<..@mail...>: saved mail to INBOX In that case message is delivered to INBOX, not to INBOX.Spam Regards, Gregory

2 6

[Dovecot] Strange error message
by Rich Winkel 22 Sep '07

22 Sep '07

I apologise if this is a faq but I couldn't find it in the archives. FreeBSD math 4.11-RELEASE-p26 FreeBSD 4.11-RELEASE-p26 dovecot version 1.0.3 x86 cpu local disk (ufs) Trying to run "deliver" from user's .forward file. sendmail configured with smrsh, forward file says: | "deliver" Imap seems to work fine, but deliver says: deliver(rw): mbox read/write lock list settings are invalid. Lock ordering must be the same with both, and write locks must contain all read locks (and possibly more) #dovecot -n # 1.0.3: /usr/local/etc/dovecot.conf base_dir: /var/run/dovecot/ listen: localhost:996 ssl_disable: yes login_dir: /var/run/dovecot/login login_executable: /usr/local/libexec/dovecot/imap-login login_greeting_capability: yes first_valid_uid: 100 mail_extra_groups: mail mail_location: mbox:~/mail:INBOX=/var/mail/%u:INDEX=/var/spool/dovecot_indexes/%u lock_method: flock mbox_write_locks: flock auth default: passdb: driver: pam userdb: driver: passwd Any help would be much appreciated!! Rich

2 1

[Dovecot] Binary packagers: BSD license issues
by Timo Sirainen 22 Sep '07

22 Sep '07

Adding this SHA256 code made me read the BSD license once again. It says: * 2. Redistributions in binary form must reproduce the above copyright * notice, this list of conditions and the following disclaimer in the * documentation and/or other materials provided with the distribution. Then there are a few files from Cyrus as well which contain: * 4. Redistributions of any form whatsoever must retain the following * acknowledgment: * "This product includes software developed by Computing Services * at Carnegie Mellon University (http://www.cmu.edu/computing/)" And something similar in utc-mktime.c for Berkeley university as well. I think I'd really like to get rid of those base64.c and utc-mktime.c exceptions.. There's probably also an easier/faster way to implement utc_mktime(). Anyway.. Currently these copyrights or acknowledgments aren't listed anywhere else than in the source files. I don't know if binary packagers have added those, but somehow I doubt it. So I think I should add these to COPYING file somehow. Any suggestions? Perhaps appending something like this: src/lib/sha1.c, sha2.c : BSD license * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project. * All rights reserved. * Copyright (C) 2005, 2007 Olivier Gay <olivier.gay(a)a3.epfl.ch> * All rights reserved. * Redistribution and use in source and binary forms, with or without * modification, are permitted provided that the following conditions * are met: * 1. Redistributions of source code must retain the above copyright * notice, this list of conditions and the following disclaimer. * 2. Redistributions in binary form must reproduce the above copyright * notice, this list of conditions and the following disclaimer in the * documentation and/or other materials provided with the distribution. * 3. Neither the name of the project nor the names of its contributors * may be used to endorse or promote products derived from this software * without specific prior written permission. * * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF * SUCH DAMAGE. src/lib/base64.c, utc-mktime.c : * Copyright (c) 2000 Carnegie Mellon University. All rights reserved. * Redistribution and use in source and binary forms, with or without * modification, are permitted provided that the following conditions * are met: * * 1. Redistributions of source code must retain the above copyright * notice, this list of conditions and the following disclaimer. * * 2. Redistributions in binary form must reproduce the above copyright * notice, this list of conditions and the following disclaimer in * the documentation and/or other materials provided with the * distribution. * * 3. The name "Carnegie Mellon University" must not be used to * endorse or promote products derived from this software without * prior written permission. For permission or any other legal * details, please contact * Office of Technology Transfer * Carnegie Mellon University * 5000 Forbes Avenue * Pittsburgh, PA 15213-3890 * (412) 268-4387, fax: (412) 268-7395 * tech-transfer(a)andrew.cmu.edu * * 4. Redistributions of any form whatsoever must retain the following * acknowledgment: * "This product includes software developed by Computing Services * at Carnegie Mellon University (http://www.cmu.edu/computing/)" * * CARNEGIE MELLON UNIVERSITY DISCLAIMS ALL WARRANTIES WITH REGARD TO * THIS SOFTWARE, INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY * AND FITNESS, IN NO EVENT SHALL CARNEGIE MELLON UNIVERSITY BE LIABLE * FOR ANY SPECIAL, INDIRECT OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN * AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING * OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. * Copyright (c) 1987, 1989, 1993 * The Regents of the University of California. All rights reserved. * This code is derived from software contributed to Berkeley by * Arthur David Olson of the National Cancer Institute. * * Redistribution and use in source and binary forms, with or without * modification, are permitted provided that the following conditions * are met: * 1. Redistributions of source code must retain the above copyright * notice, this list of conditions and the following disclaimer. * 2. Redistributions in binary form must reproduce the above copyright * notice, this list of conditions and the following disclaimer in the * documentation and/or other materials provided with the distribution. * 3. All advertising materials mentioning features or use of this software * must display the following acknowledgement: * This product includes software developed by the University of * California, Berkeley and its contributors. * 4. Neither the name of the University nor the names of its contributors * may be used to endorse or promote products derived from this software * without specific prior written permission. * * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF * SUCH DAMAGE.

2 2

[Dovecot] IDLE with inotify problem
by Michael Guntsche 22 Sep '07

22 Sep '07

Hi, I recently switched from courier imap to dovecot. With courier I had a working IDLE setup that informed me immediately when new mail arrived. With Dovecot it is different, sometimes i get an immediate result but most of the time it takes a rather long time for the notification to return to the client. For testing purposes I set mailbox_idle_check_interval = 1 and i now get the same behaviour as with couier (a new mail immediately causes a notification) but i am not sure that this is the right solution. Reading the comments in the config files I was under the impression that this is not needed if dovecot uses inotify. Setup: Kernel 2.6.22.1 with inotify dovecot 1.0.3 from debian unstable Build options: ioloop=epoll notify=inotify ipv6 openssl So my question is can I check that dovecot is actually using inotify? Kind regards, Michael

4 10

[Dovecot] Problems with quota dict in 1.1.alpha4
by arvids 22 Sep '07

22 Sep '07

Hello, there are problems with quota dict when multiple dovecot deliver processes are launched in parallel. It can be reproduced by sending a mail with multiple different recipients - the mail is delivered OK to all recipients, but the quota are not updated correctly in sql. I looked at the code and it seems that the problem is somewhere in dict cache. If I configure in Postfix max number of deliver processes to 1, dict quota is updated correctly. postconf -n output: # 1.1.alpha4: /usr/local/dovecot/etc/dovecot.conf base_dir: /var/run/dovecot/ syslog_facility: local0 protocols: pop3 ssl_disable: yes disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/local/dovecot/libexec/dovecot/pop3-login login_greeting: Server. login_process_per_connection: no login_process_size: 64 verbose_proctitle: yes first_valid_uid: 95 first_valid_gid: 95 mail_uid: 95 mail_gid: 95 mail_location: maildir:~/Maildir mail_debug: yes fsync_disable: yes mail_executable: /usr/local/dovecot/libexec/dovecot/pop3 mail_plugins: quota mail_plugin_dir: /usr/local/dovecot/lib/dovecot/pop3 pop3_enable_last: yes pop3_client_workarounds: outlook-no-nuls oe-ns-eoh auth default: mechanisms: plain login digest-md5 cram-md5 apop cache_size: 2048 cache_ttl: 28800 cache_negative_ttl: 60 user: doveauth verbose: yes debug: yes debug_passwords: yes passdb: driver: sql args: /usr/local/dovecot/etc/dovecot-sql.conf userdb: driver: prefetch userdb: driver: sql args: /usr/local/dovecot/etc/dovecot-sql.conf socket: type: listen master: path: /var/run/dovecot/auth-master mode: 384 user: vmail group: vmail plugin: quota: dict:::proxy:/var/run/dovecot/dict-server:quotadict dict: quotadict: mysql:/usr/local/dovecot/etc/dovecot-sql-dict-quota.conf Regards, Arvids

2 4

[Dovecot] Feature Request for Proxy
by Ed W 22 Sep '07

22 Sep '07

Hi, Quick feature request for the proxy function: I have a couple of machines which are all customer facing and customer mailbox lives on any one of them. Customer can login to any machine and the proxy feature then forwards them to the correct machine (often the machine they are already connected to). However, right now if the SQL query simply returns the IP of the correct machine, and this happens to be the same machine that the connection is already on, then we get the auth process stuck in an infinite loop (and generating a lot of log files...) The quick fix is to customise each installation and add some kind of WHERE clause to change the results IF result is already the same as the machine we are on. However, this is error prone when setting up new machines and it's easy to forget or make a typo adjusting the config files. In my case I am using vservers and it's quite neat to be able to simply copy the whole image and fire it up on a new IP to test an upgrade, etc, hence easy to mess up adjusting the conf files when creating a new image. Any suggestions on how this could be done more dynamically, or else could I raise a feature request that the auth process somehow realises when it's being forwarded to an IP address that it's actually listening on already already (ie it's a request which loops back to itself), thus simplifying the config files? I haven't cracked open the code, but it sounds somewhat possible to check the list of IP addresses we are currently listening on and check that the proxy dest isn't among them? Cheers Ed W

2 1