- dovecot - dovecot.org

[Dovecot] Dovecot 'suicide'
by Luigi Rosa 19 Mar '07

19 Mar '07

I have a Dovecot installation on a Fedora 4. With the last update from Dovecot RC10 to Dovecot RC27, the daemon kills itself every night with this error: Mar 17 05:23:11 mail dovecot: Time just moved backwards by 6 seconds. This might cause a lot of problems, so I'll just kill m yself now. The error appears just after the night maintenance script executes a ntpdate syncronization ntpdate is version 4.2.0a(a)1.1196-r Well, 6 seconds are little more than a blink in human perspective, even if it is a long time for a computer point of view. Couldn't be possible to add a configuration option to avoid the suicide? Any other option other than suicide is better, because there could be situations of really unattended servers. Ciao, luigi -- / +--[Luigi Rosa]-- \ She was a lovely girl. Our courtship was fast and furious. I was fast and she was furious. --Max Kauffmann

6 6

[Dovecot] Changed CONTROL= path causes POP3 to fail, whereas IMAP is working (rc25 & rc26)
by Steffen Kaiser 19 Mar '07

19 Mar '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, I'm testing some configurations, in the process I used a wrong user setting causing POP3 (get new messages) to fail, whereas IMAP was still working. An easy fix was to remove the entire /var/cache/dovecot/1012/ directory, both index and index/control were re-created and do work. So my guess is that the existance of the indexes causes some trouble when just the control information is missing. Here is what I had done: The mailbox of "dvtest" was fully working with the correct setting from the config file: mail=maildir:/home/dvtest/MailDir:INDEX=/var/cache/dovecot/1012/index:CONTROL=/var/cache/dovecot/1012/control (no "/index" in the CONTROL= part). Then I created a LDAP entry for the user dvtest wrongly: mail=maildir:/home/dvtestMAIL/MailDir:INDEX=/var/cache/dovecot/1012/index:CONTROL=/var/cache/dovecot/1012/index/control The CONTROL= ended in "/index/control" rather than just "/control". (Note: I also mv'ed /home/dvtest to /home/dvtestMAIL in order to see, whether the LDAP attribute is getting used.) Afterwards IMAP is working, but POP3 returns "Couldn't init INBOX: Unknown error"; Thunderbird displays the error: "The STAT command did not succeed. Error getting message number and sizes. Mail server ux-2s11-9 responded: Couldn't sync mailbox." When I correct the LDAP attribute, hence the CONTROL= path ends in "1012/control" again. The mailbox is working with POP3 again. The INBOX of the erroreous control path does not contain any dovecot-* files? The message I deleted and expunged (see logs) were from the INBOX. /var/cache/dovecot/1012/index/control# lr .: total 16 drwx------ 4 dvtest Debian-exim 4096 2007-03-07 09:36 ./ drwx------ 12 dvtest dvtest 4096 2007-03-07 09:34 ../ drwx------ 2 dvtest Debian-exim 4096 2007-03-07 09:36 .Addresses/ drwx------ 2 dvtest Debian-exim 4096 2007-03-07 09:35 .INBOX/ ./.Addresses: total 24 drwx------ 2 dvtest Debian-exim 4096 2007-03-07 09:36 ./ drwx------ 4 dvtest Debian-exim 4096 2007-03-07 09:36 ../ - -rw------- 1 dvtest Debian-exim 12756 2007-03-07 09:36 dovecot-uidlist ./.INBOX: total 8 drwx------ 2 dvtest Debian-exim 4096 2007-03-07 09:35 ./ drwx------ 4 dvtest Debian-exim 4096 2007-03-07 09:36 ../ The attached file contains the full log of a session POP3 (get new messages), IMAP, expunge in INBOX, POP3 again. I also selected the mailbox Adresses once, to see if it is working. === # dovecot --version 1.0.rc26 # dovecot -n # /usr/local/dovecot.rc26/etc/dovecot.conf log_path: /var/log/dovecot/dovecot.log protocols: imap imaps pop3 pop3s ssl_ca_file: /etc/ssl/certs/ca.crt ssl_cert_file(default): /etc/ssl/certs/imap.pem ssl_cert_file(imap): /etc/ssl/certs/imap.pem ssl_cert_file(pop3): /etc/ssl/certs/pop3.pem ssl_key_file(default): /etc/ssl/private/imap.key ssl_key_file(imap): /etc/ssl/private/imap.key ssl_key_file(pop3): /etc/ssl/private/pop3.key disable_plaintext_auth: no verbose_ssl: yes login_dir: /usr/local/dovecot.rc26/var/run/dovecot/login login_executable(default): /usr/local/dovecot.rc26/libexec/dovecot/imap-login login_executable(imap): /usr/local/dovecot.rc26/libexec/dovecot/imap-login login_executable(pop3): /usr/local/dovecot.rc26/libexec/dovecot/pop3-login login_log_format_elements: %p: user=<%u> method=%m rip=%r lip=%l %c verbose_proctitle: yes first_valid_uid: 1000 mail_location: maildir:%h/MailDir:CONTROL=/var/cache/dovecot/%i/control:INDEX=/var/cache/dovecot/%i/index mail_debug: yes dotlock_use_excl: yes maildir_copy_with_hardlinks: yes maildir_copy_preserve_filename: yes mail_drop_priv_before_exec: yes mail_executable(default): /usr/local/dovecot.rc26/libexec/dovecot/imap mail_executable(imap): /usr/local/dovecot.rc26/libexec/dovecot/imap mail_executable(pop3): /usr/local/dovecot.rc26/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota mail_log zlib mail_plugins(imap): quota imap_quota mail_log zlib mail_plugins(pop3): quota mail_log mail_plugin_dir(default): /usr/local/dovecot.rc26/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/dovecot.rc26/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/dovecot.rc26/lib/dovecot/pop3 mail_log_prefix: %Us(%u) [%p]: mail_log_max_lines_per_sec: 30 pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %u pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): oe-ns-eoh namespace: type: private separator: . inbox: yes hidden: yes auth default: mechanisms: plain login cache_size: 10 username_chars: abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890 verbose: yes debug: yes debug_passwords: yes passdb: driver: ldap args: /usr/local/dovecot.rc25/etc/dovecot-ldap.conf passdb: driver: pam args: cache_key=%u session=yes dovecot userdb: driver: prefetch userdb: driver: ldap args: /usr/local/dovecot.rc25/etc/dovecot-ldap.conf userdb: driver: passwd socket: type: listen client: path: /var/run/dovecot/auth-client mode: 432 master: path: /var/run/dovecot/auth-master mode: 432 group: mail plugin: quota: fs Bye, - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iQEVAwUBRe6BIS9SORjhbDpvAQJY0wf/YCDC/Np8RRcOOgm36NZDT0PpS28u17QK TDHsbrZqgeA6iPV0IXpIrAV3fficnCQLJ25saIpl5BQyD18Lsbw15SJiFSs9Igko LCuiQwX4JzybXfga4m9rf6pMR9be/yREsbBsAu8KagMYVUxzN1H01cJfNb86XKNw 7GeKahpYVIVR3y9PZf13x8gW16REeRt0andWHa9Dmqt//ygv+sSqngfN9tzp6keo CW13FLIZufnP6TeFwcBQF4KNh6HeZn3B7AYL4BRAqrMIVRgIIkgDD3TzfNIUHCwq GwqvTE/dquW2HEwtG00S/ZnG6WAf6WKzl9p32F1mihRMpYjsQj2uyg== =8cA5 -----END PGP SIGNATURE-----

2 1

[Dovecot] Convert UW folders to Dovecot folders ?
by Frank Bonnet 19 Mar '07

19 Mar '07

Hello IMAP users here have a *lot* of folders living in their mailhub home directory Converting the INBOX doesn't seems to be a problem I've found scripts that do the job :-) But How to convert IMAP folders from UW format ( one file / folder ) to dovecot format which seems much more sophisticated. Does anyone has written such ( nice) utility ? Thanks a lot Frank

2 2

[Dovecot] Dovecot - with LDAP auth backend
by Shahmat Dahlan 19 Mar '07

19 Mar '07

I have the following installed (1) CentOS 2.6.9-42.ELsmp (2) dovecot-1.0-3_50.rc27.el4.at, (3) openldap-2.2.13-6.4E (A) I have added the following schema into /etc/openldap/schema attributetype ( 1.3.6.1.4.1.14237.1.1.1.1 NAME 'mailquota' DESC 'The size of space the user can have until further messages get bounced.' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) objectclass ( 1.3.6.1.4.1.14237.1.1.2.1 NAME 'DovecotUser' DESC 'Dovecot-LDAP User' SUP top AUXILIARY MUST ( cn $ uid $ mail $ mailquota $ userPassword ) MAY ( sn ) ) (B) and added this into my /etc/openldap/slapd.conf include /etc/openldap/schema/dovecot.schema (C) And in my /etc/dovecot.conf, this is what I have protocol imap { mail_plugins = quota imap_quota mail_plugin_dir = /usr/lib/dovecot/imap } (D) also in my /etc/dovecot.conf plugin { quota = maildir:storage=10240 } (E) in my /etc/dovecot-ldap.conf user_attrs = homeDirectory=home,uidNumber=uid,gidNumber=gid,mailquota=quota user_filter = (&(objectClass=DovecotUser)(uid=%u)) pass_attrs = uid=user,userPassword=password Scenario 1 I have (D) set to quota = maildir:storage=10240, did a telnet localhost 143, and logged in, this is what I get Trying 127.0.0.1... Connected to localhost.localdomain (127.0.0.1). Escape character is '^]'. * OK Mail ready a1 login ldapuser password a1 OK Logged in. a2 getquota "" * QUOTA "" (STORAGE 0 10240) a2 OK Getquota completed. if I were to change (D) to quota = maildir And added in an attribute called "mailquota" in the entry uid=ldapuser,dc=mydomain,dc=com, give it a value 10240000 (is this correct? should it by in bytes or in kilobytes?), then reinitialize the mailbox by deleting the ~/Maildir directory (or in this case /home/ldapuser/Maildir) Did the telnet localhost 143, this is what I get instead Trying 127.0.0.1... Connected to localhost.localdomain (127.0.0.1). Escape character is '^]'. * OK Mail ready a1 login ldapuser password a1 OK Logged in. a2 getquota "" * QUOTA "" () a2 OK Getquota completed. Even after I've added the attribute mailquota in the ldap for the entry uid=ldapuser it still does not look like its taking any effect at all. Regards and thanks in advance.

2 1

[Dovecot] using sieve plugin
by Kendall Shaw 19 Mar '07

19 Mar '07

Hi, I have installed dovecot on ubuntu edgy linux by retrieving the source debian package, building and installing the package and then building and installing the sieve plugin. However, I get no log messages indicating errors and as far as I can tell, my .dovecot.sieve script is not being used. I have introduced a syntax error in the script and see no error message. In dovecot.conf I have: log_path = /var/log/dovecot.log invo_log_path = /var/log/dovecot.log protocol lda { module_dir = /usr/lib/dovecot/modules/lda mail_plugins = cmusieve log_path = /var/log/dovecot-deliver.log info_log_path = /var/log/dovecot-deliver.log } I am using exim with dovecot. I've tried using a .forward file (I'm the one user on the computer). Alternately, I've tried creating the dovecot_deliver "transport" in exim and changing the localuser router to use it. Still, I get no messages from deliver and no error messages from dovecot or exim. The file dovecot-deliver.log is not created. Do you have any suggestions that can help me get it working or to see why it is not working? Kendall

2 1

[Dovecot] One user having reproducible IMAP issues
by Alex Boster 19 Mar '07

19 Mar '07

Dovecot version upgraded to 1.0r26 (did not fix problem). The server is a CentOS 4 x86 box. Using ext3 filesystem. Previous attempts to fix the issue have included simply moving aside the user's INBOX to recreating a new account from scratch. Sometimes the email behaves for a while, but within a day is not working again. In Mail.app (the user's usual mail client) the INBOX folder simply appears empty. mutt (run locally on the server) shows the messages there correctly. The problem is easily reproducible. Move /var/spool/mail/[username] to a backup file and remove all .imap directories for that user. Mail may work for a while, but will stop within 24 hours. The SquirrelMail message is: ERROR: The server couldn't find the message you requested. Most probably your message list was out of date and the message has been moved away or deleted (perhaps by another program accessing the same mailbox). Click here to return to INBOX dovecot -n : # /etc/dovecot.conf log_path: /var/log/dovecot.log info_log_path: /var/log/dovecot.debug.log login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login mail_location: mbox:~/mail:INBOX=/var/spool/mail/%u mail_full_filesystem_access: yes mail_executable(default): /usr/libexec/dovecot/rawlog /usr/libexec/ dovecot/imap mail_executable(imap): /usr/libexec/dovecot/rawlog /usr/libexec/ dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 auth default: mechanisms: plain login passdb: driver: pam args: dovecot userdb: driver: passwd Thanks! Alex

4 8

[Dovecot] authenticating with LDAP and SSL
by Nathan Fiedler 19 Mar '07

19 Mar '07

I managed to configure Dovecot to use a local OpenLDAP server to authenticate clients, without using SSL. However, I would rather that LDAP is accessed using SSL, but I cannot get Dovecot to connect. All that I did was change "uris" to "ldaps://localhost", and this appears in the maillog: Mar 18 12:53:00 server dovecot: Dovecot v1.0.rc15 starting up Mar 18 12:53:01 server dovecot: auth(default): ldap_bind((null)) failed: Can't contact LDAP server Is there additional configuration that is needed for SSL? Note that I altered the slapd.conf file from not requiring SSL to requiring SSL when I changed the "uris" parameter. And, of course, accessing the directory using ldapsearch works just fine. It seems that there's only a problem when using SSL, but I don't know how to debug it. Thanks n

4 3

[Dovecot] Kerberos
by forum 18 Mar '07

18 Mar '07

Hey all new to this crack Ok so i have setup kerosene on my server i run mutt and it goes off and gets kerberos key from server I have added teh gssapi to config file but when the key seams to want to authenticate off dovecot it fail anyone help me? Mutt is returning No authentication available Dovecot logs are returning: Mar 18 01:34:31 bandicoot dovecot: auth(default): gssapi(?,MYIPADDRESS): While acquiring service credentials: Miscellaneous failure Mar 18 01:34:31 bandicoot dovecot: auth(default): gssapi(?,MYIPADDRESS): While acquiring service credentials: No principal in keytab matches desired name Mar 18 01:34:34 bandicoot dovecot: imap-login: Aborted login: method=GSSAPI, rip=MYIPADDRESS, lip=MYIPADDRESS, TLS Thanks

3 5

[Dovecot] 1.0.rc27 released
by Timo Sirainen 18 Mar '07

18 Mar '07

http://dovecot.org/releases/dovecot-1.0.rc27.tar.gz http://dovecot.org/releases/dovecot-1.0.rc27.tar.gz.sig A few new small features and lots of index/mbox fixes. I've been heavily stress testing this release, so I think it should be about perfect. :) I think the only thing still missing from v1.0 is documentation. There are some unwritten pages in the wiki, and I still haven't bothered to write the wiki -> doc/*.txt conversion script. The script will probably be pretty easy, but writing the docs can take a while. + mbox and index file code handles silently out of quota/disk space errors (maildir still has problems). They will give the user a "Not enough disk space" error instead of flooding the log file. + Added fsync_disable setting. + mail-log plugin: Log the mailbox name, except if it's INBOX + dovecot-auth: Added a lot more debug logging to passdbs and userdbs + dovecot-auth: Added %c variable which expands to "secured" with SSL/TLS/localhost. + dovecot-auth: Added %m variable which expands to auth mechanism name - maildir++ quota: With ignore=box setting the quota was still updated for the mailbox even though it was allowed to go over quota (but quota recalculation ignored the box). - Index file handling fixes - mbox syncing fixes - Wrong endianess index files still weren't silently rebuilt - IMAP quota plugin: GETQUOTAROOT returned the mailbox name wrong the namespace had a prefix or if its separator was non-default - IMAP: If client was appending multiple messages with MULTIAPPEND and LITERAL+ extensions and one of the appends failed, Dovecot treated the rest of the mail data as IMAP commands. - If mail was sent to client with sendfile() call, we could have hanged the connection. This could happen only if mails were saved with CR+LF linefeeds.

5 7

Re: [Dovecot] Login processes and a new performance/security compromise [was: Re: pre-1.0.rc27: Index and mbox fixes]
by Bill Boebel 18 Mar '07

18 Mar '07

On Sat, March 17, 2007 10:51 pm, Timo Sirainen <tss(a)iki.fi> said: > Oh, and as for when the rewrite is in CVS, I'm not really sure. I'm > still wondering if I should put it there soon and make the release after > v1.0 be v2.0, or if I should first stabilize the current new CVS HEAD > features (which shouldn't take too long), do a v1.2 release and only > then put this code to CVS and make it v2.0.. I vote for first stabilizing the current new CVS HEAD, do a v1.1 release, and then put the ssl rewrite into CVS and plan to make that either v1.2 or v2.0. That way people will start banging on the new features in current CVS HEAD sooner. Bill

2 1