- dovecot - dovecot.org

[Dovecot] Leaky dovecot-auth ?
by Christian Balzer 03 Jul '07

03 Jul '07

Hello, as mentioned before, we are migrating our mailboxes from a 0.99 cluster to a 1.0.0 one. With 0.99 dovecot-auth (with LDAP as backend) was leaking quite happily and the dovecot-auth processes frequently did hit their size limit and thus were killed and restarted. Which in 0.99 at least lead to authentication failures on a busy server, as the dovecot master process just killed off the auth process w/o disabling new connections to it first and letting any current authentications finish. The activity per cluster node on the 0.99 boxes was about 700k logins (mostly pop3) per day and 5 dovecot-auth processes with a 64MB limit each. The migrated users so far are of the less active kind and on one node of the 1.0.0 cluster we see about 70k logins/day and currently the dovecot-auth process there is hovering at 123/84MB (VIRT/RES in top). It was at 121/82MB when I checked 4 hours ago and no new users have been added to that node for 2 days. Authentication backend is still LDAP, no caching, 256MB process size limit. There are just 16k users on that node at this point in time, with only 1200 distinct users generating those 70k logins/day. We will start migrating the rest of the users tomorrow and now I'm wondering: 1. How and why would the memory footprint of dovecot-auth grow when there is no change in the amount of users in the DB? 2. What will happen when the single dovecot-auth process reaches 256MB in the end? Internal housekeeping attempts of that process? A whack to the head from the master process like in 0.99 and thus more erroneous authentication failures, potentially aggravated by the fact that there is just single dovecot-auth process? I guess at the current rate of leakage we shall know the answers to #2 soon one way or another. ;) Regards, Christan -- Christian Balzer Network/Systems Engineer NOC chibi(a)gol.com Global OnLine Japan/Fusion Network Services http://www.gol.com/

3 15

[Dovecot] Semi-static userdb...?
by John Robinson 03 Jul '07

03 Jul '07

I'm trying to add "virtual" mailboxes to a system. Real users with different uids own domains. Each domain has a passwd-file passdb. I don't want to use this passwd-file for the userdb, because I want to fix the home, mail and uid/gid settings. Can I use the static userdb in a less static manner, e.g. userdb static { args = uid=%{owner of /vmail/%d} gid=%{gid of /vmail/%d} home=/vmail/%d/users/%u mail=mbox:/vmail/%d/users/%u/mail:INBOX=/vmail/%d/users/%u/INBOX } Or is it just a bad idea to let relatively untrusted domain owners manage their own passwd-file at all...? Cheers, John.

2 4

[Dovecot] userdb nss
by Timo Sirainen 03 Jul '07

03 Jul '07

I remembered people complaining how glibc ignores NSS errors with getpwent(), so I thought I'd see how easy it is to use NSS directly. Unless I misunderstood something, this should work: http://hg.dovecot.org/dovecot/rev/c9b49ed99d28 Tested only with "files" backend. Also it won't work with Solaris, it seems to have completely different NSS modules. Don't know about BSDs. Can someone test how it handles LDAP/NIS failures (or if it even works with them)?

1 0

[Dovecot] Force rebuild v1.0.1
by Bruce Bodger 02 Jul '07

02 Jul '07

Haven't seen a thread discussing forcing rebuilding of indexes / cache, so the question is, if these files in a users home directory were deleted... -rw------- 1 bb admin 80 May 17 15:05 dovecot-keywords -rw------- 1 bb admin 85449 Jul 2 06:15 dovecot-uidlist -rw------- 1 bb admin 6832 Jul 2 06:15 dovecot.index -rw------- 1 bb admin 752640 Jul 2 06:19 dovecot.index.cache -rw------- 1 bb admin 95416 Jul 2 06:20 dovecot.index.log -rw------- 1 bb admin 131104 Jun 27 21:32 dovecot.index.log.2 ...would they be rebuilt by dovecot? Thank you, B. Bodger

3 4

[Dovecot] Debian packages
by Moritz Mertinkat 02 Jul '07

02 Jul '07

Hi there, anyone interested in Debian Dovecot 1.0.1 packages? I have created a package for etch/stable... Could do that for sarge/oldstable as well. Greets, Maurice.

2 2

[Dovecot] v1.1 max connections per user
by Timo Sirainen 02 Jul '07

02 Jul '07

v1.1 has now: # Maximum number of connections allowed for a user. The limits are enforced # separately for IMAP and POP3 connections, so you can move this setting # inside protocol {} to have separate settings for them. NOTE: The user names # are compared case-sensitively, so make sure your userdb returns usernames # always using the same casing so users can't bypass this limit! #mail_max_user_connections = 10 Is 10 a good default? Currently new connections just fail authentication with a "Maximum number of connections exceeded" error message. v2.0 hopefully will instead disconnect the oldest idling connection with IMAP.

5 7

[Dovecot] Mbox vs maildir
by Simon Gao 02 Jul '07

02 Jul '07

> The upcoming dbox and cydir formats of course beat everything in > performance :) Is dbox in Dovecot 1.1 tree now? Is it the redesigned dbox? How close is dbox ready for general use? I am interested in testing it out. Where can I find instruction on how to configure dovecot to use dbox? Simon

2 1

[Dovecot] auto Cc: with dovecot+mysql
by albinootje 02 Jul '07

02 Jul '07

hi, i'm migrating 1 mail-server from LDAP+postfix+courier to mysql+postfixadmin+dovecot, on a debian etch machine i have followed this howto : http://wiki.dovecot.org/HowTo/DovecotLDAPostfixAdminMySQL (changed uid and gid for usage in debian, the SVN-postfixadmin didn't work for me, so i used the stable version, and haven't tested the SASL-part yet) this works great, except the LDAP+postfix setup has for some users an automatic Cc: say, for example, 1 user, with email-address jeremy(a)mydomain.org, will also have all the emails going to jeremy(a)gmail.com so far i have failed to find out whether this can be done with postfix in that setup, following above mentioned howto (postfixadmin can do aliases, but not "auto Cc: for virtual domains afaik) can this be done by dovecot LDA maybe ? or ... can i have a dovecot.conf where certain users use LDAP instead of mysql for lookups and those kind of preferences ? grtz, albi

2 1

[Dovecot] Differences in deliver and IMAP
by Andy Shellam 01 Jul '07

01 Jul '07

Hi I've now got Dovecot 1.0.1 authenticating with PostgreSQL for the IMAP service, but deliver doesn't seem to work the same. I'm using the "prefetch" passdb, but deliver doesn't seem to recognise it. Here's the log for a deliver attempt: dovecot: Jul 01 16:51:35 Info: auth(default): master in: USER 1 andy.shellam(a)mailnetwork.co.uk service=deliver dovecot: Jul 01 16:51:35 Error: auth(default): prefetch(andy.shellam(a)mailnetwork.co.uk): passdb didn't return userdb entries dovecot: Jul 01 16:51:35 Info: auth(default): master out: NOTFOUND 1 And here's the log for an IMAP login attempt straight after: dovecot: Jul 01 16:51:46 Info: auth(default): client in: AUTH 1 PLAIN service=IMAP lip=84.45.66.158 rip=82.165.38.62 resp=AGFuZHkuc2hlbGxhbUBtYWlsbmV0d29yay5jby51awBhYzI5Y2U4NHN5ZA== dovecot: Jul 01 16:51:46 Info: auth(default): sql(andy.shellam(a)mailnetwork.co.uk,82.165.38.62): query: SELECT <user_field> as user, <password_field> as password, <home_directory> AS userdb_home, <mail_directory> AS userdb_mail, <chroot_directory> AS userdb_chroot, <uid_field> AS userdb_uid, <gid_field> AS userdb_gid FROM <user_table> WHERE <user_field> = 'andy.shellam(a)mailnetwork.co.uk' dovecot: Jul 01 16:51:46 Info: auth(default): client out: OK 1 user=andy.shellam(a)mailnetwork.co.uk dovecot: Jul 01 16:51:46 Info: auth(default): master in: REQUEST 1 24949 1 dovecot: Jul 01 16:51:46 Info: auth(default): prefetch(andy.shellam(a)mailnetwork.co.uk,82.165.38.62): success dovecot: Jul 01 16:51:46 Info: auth(default): master out: USER 1 andy.shellam(a)mailnetwork.co.uk home=<home_directory> mail=maildir:<mail_directory> chroot=<chroot_directory> uid=<uid> gid=<gid> dovecot: Jul 01 16:51:46 Info: imap-login: Login: user=<andy.shellam(a)mailnetwork.co.uk>, method=PLAIN, rip=82.165.38.62, lip=84.45.66.158 This works if I use separate userdb and passdb queries. Does deliver not support the prefetch authentication method? Thanks, Andy.

2 1

Re: [Dovecot] v1.1 max connections per user
by Bill Boebel 01 Jul '07

01 Jul '07

On Sat, June 30, 2007 7:50 pm, Charles Marcus said: > Timo Sirainen, on 6/30/2007 7:25 PM, said the following: >> On Sat, 2007-06-30 at 19:11 -0400, Charles Marcus wrote: >>> Timo Sirainen, on 6/30/2007 6:43 PM, said the following: >>>> v1.1 has now: >>>> >>>> # Maximum number of connections allowed for a user. The limits are enforced >>>> # separately for IMAP and POP3 connections, so you can move this setting >>>> # inside protocol {} to have separate settings for them. NOTE: The user names >>>> # are compared case-sensitively, so make sure your userdb returns usernames >>>> # always using the same casing so users can't bypass this limit! >>>> #mail_max_user_connections = 10 >>>> >>>> Is 10 a good default? >>> I'm assuming this is per IP? >> >> No. I'm not sure if it should. Perhaps. It's mostly intended to prevent >> unintentional abuse by stupid clients, so having 3+ thunderbirds open in >> different locations with each having 5 connections should probably be >> allowed. > > Ok - you said 10 was the default - but then said that 15 (3 TBirds x 5) > connections should be allowed, which is more than 10... so... you just > meant that one could accommodate that by upping this limit to 15? I like 15. That way it is high and isn't as likely to affect existing installations unless they manually set it to something lower. Or if you want to have a separate default for POP vs IMAP, I'd use 5 for POP and 15 for IMAP.

3 2