- dovecot - dovecot.org

sievec fails when run as non-root - bug?
by Genes Lists 30 Jun '25

30 Jun '25

1) With 2.4.1, when a non-root user runs sievec on their own sieve scripts it fails to run due to permission denied on the dovecot certificate key (which is only readable by root). Specifically: sievec active.sieve doveconf: Fatal: Error in configuration file /etc/dovecot/conf.d/10- ssl.conf line 10: cert_file: open(/etc/.../fullchain.pem) failed: Permission denied What is recommended way to deal with this? 2) Separate question: Might this explain why users sieve scripts are not running? I assume not as there are no 'sieve' items reported by lmtp in the logs. Config has: protocol lmtp { postmaster_address = postmaster@<domain>.com mail_plugins { sieve = yes } hostname = imap.<domain>.com } sieve_script before { driver = file path = /etc/dovecot/sieve/global active_path = remove_dup.sieve } sieve_script personal { driver = file path = ~/sieve active_path = ~/.dovecot.sieve } sieve_script after { driver = file path = /etc/dovecot/sieve active_path = default.sieve } thanks. -- Gene

2 5

Identifying spamd problems
by Francis Augusto Medeiros-Logeay 27 Jun '25

27 Jun '25

Hi, I have use Dovecot, Spamassassin and Roundcube. My spam assassin is configured to use SQL. I have noticed that when I move a message to the junk folder, it increases the number of spam on the database. But when I move it out of the junk folder, it doesn’t increase the ham nor decreases the spam count. When running sa-learn manually, it does everything right. Here’s now 90-sieve.conf is configured; ieve_plugins = sieve_imapsieve sieve_extprograms sieve_before = /var/mail/vmail/mail/sieve/global/spam-global.sieve sieve = file:/var/mail/vmail/mail/sieve/%d/%n/scripts;active=/var/mail/vmail/mail/sieve/%d/%n/active-script.sieve imapsieve_mailbox1_name = Spam imapsieve_mailbox1_causes = COPY imapsieve_mailbox1_before = file:/var/mail/vmail/mail/sieve/global/report-spam.sieve imapsieve_mailbox2_name = * imapsieve_mailbox2_from = Spam imapsieve_mailbox2_causes = COPY imapsieve_mailbox2_before = file:/var/mail/vmail/mail/sieve/global/report-ham.sieve imapsieve_mailbox2_name = Archive imapsieve_mailbox2_from = * imapsieve_mailbox2_causes = COPY imapsieve_mailbox2_before = file:/var/mail/vmail/mail/sieve/global/report-ham.sieve sieve_execute_bin_dir = /usr/bin sieve_pipe_bin_dir = /var/mail/vmail/mail/sieve/global/scripts sieve_global_extensions = +vnd.dovecot.pipe +vnd.dovecot.execute And here’s hoe my scripts are: /var/mail/vmail/mail/sieve/global/report-spam.sieve^C root@9c8c309ee769:/# cat /var/mail/vmail/mail/sieve/global/report-spam.sieve require ["vnd.dovecot.pipe", "copy", "imapsieve", "environment", "variables", "vnd.dovecot.execute" ]; if environment :matches "imap.user" "*" { set "username" "${1}"; } pipe :copy "sa-learn-spam.sh" [ "${username}" ]; /var/mail/vmail/mail/sieve/global/report-ham.sieve require ["vnd.dovecot.pipe", "copy", "imapsieve", "environment", "variables"]; if environment :matches "imap.mailbox" "*" { set "mailbox" "${1}"; } if string "${mailbox}" "Trash" { stop; } if environment :matches "imap.user" "*" { set "username" "${1}"; } pipe :copy "sa-learn-ham.sh" [ "${username}" ]; sa-learn-ham.sh: #!/bin/sh export PATH="/usr/sbin:/usr/bin:/usr/local/bin:/usr/local/sbin:$PATH" exec /usr/bin/spamc -u ${1} -L ham exit 0 sa-learn-spam.sh #!/bin/sh export PATH="/usr/sbin;/usr/bin;/usr/local/bin;/usr/local/sbin;" exec /usr/bin/spamc -u ${1} -L spam Should I change for example: exec /usr/bin/spamc -u ${1} -L ham to exec /usr/bin/sa-learn -u ${1} —ham ? Best, Francis Hi, I have use Dovecot, Spamassassin and Roundcube. My spam assassin is configured to use SQL. I have noticed that when I move a message to the junk folder, it increases the number of spam on the database. But when I move it out of the junk folder, it doesn’t increase the ham nor decreases the spam count. When running sa-learn manually, it does everything right. Here’s now 90-sieve.conf is configured; ieve_plugins = sieve_imapsieve sieve_extprograms sieve_before = /var/mail/vmail/mail/sieve/global/spam-global.sieve sieve = file:/var/mail/vmail/mail/sieve/%d/%n/scripts;active=/var/mail/ vmail/mail/sieve/%d/%n/active-script.sieve imapsieve_mailbox1_name = Spam imapsieve_mailbox1_causes = COPY imapsieve_mailbox1_before = file:/var/mail/vmail/mail/sieve/global/report- spam.sieve imapsieve_mailbox2_name = * imapsieve_mailbox2_from = Spam imapsieve_mailbox2_causes = COPY imapsieve_mailbox2_before = file:/var/mail/vmail/mail/sieve/global/report- ham.sieve imapsieve_mailbox2_name = Archive imapsieve_mailbox2_from = * imapsieve_mailbox2_causes = COPY imapsieve_mailbox2_before = file:/var/mail/vmail/mail/sieve/global/report- ham.sieve sieve_execute_bin_dir = /usr/bin sieve_pipe_bin_dir = /var/mail/vmail/mail/sieve/global/scripts sieve_global_extensions = +vnd.dovecot.pipe +vnd.dovecot.execute And here’s hoe my scripts are: /var/mail/vmail/mail/sieve/global/report-spam.sieve^C root@9c8c309ee769:/# cat /var/mail/vmail/mail/sieve/global/report-spam.sieve require ["vnd.dovecot.pipe", "copy", "imapsieve", "environment", "variables", "vnd.dovecot.execute" ]; if environment :matches "imap.user" "*" { set "username" "${1}"; } pipe :copy "sa-learn-spam.sh" [ "${username}" ]; /var/mail/vmail/mail/sieve/global/report-ham.sieve require ["vnd.dovecot.pipe", "copy", "imapsieve", "environment", "variables"]; if environment :matches "imap.mailbox" "*" { set "mailbox" "${1}"; } if string "${mailbox}" "Trash" { stop; } if environment :matches "imap.user" "*" { set "username" "${1}"; } pipe :copy "sa-learn-ham.sh" [ "${username}" ]; sa-learn-ham.sh: #!/bin/sh export PATH="/usr/sbin:/usr/bin:/usr/local/bin:/usr/local/sbin:$PATH" exec /usr/bin/spamc -u ${1} -L ham exit 0 sa-learn-spam.sh #!/bin/sh export PATH="/usr/sbin;/usr/bin;/usr/local/bin;/usr/local/sbin;" exec /usr/bin/spamc -u ${1} -L spam Should I change for example: exec /usr/bin/spamc -u ${1} -L ham to exec /usr/bin/sa-learn -u ${1} —ham ? Best, Francis

1 0

SASL authentication against LDAP w/ client certs, supposed to work?
by Bruno Hertz 26 Jun '25

26 Jun '25

Hi all I'm currently testing Dovecot 2.4, considering a migration from 2.3, and all works fine except authentication against LDAP (openldap slapd) with client certificates. Which I had no problem with on 2.3 for seven years or so. Versions: Linux Alpine 3.22 Dovecot 2.4.1-4 (7d8c0e5759) Alpine package, but patched with https://github.com/dovecot/core/commit/431e328b3b035ddb187526cd13bccf29833a… Now, first a Dovecot configuration that does work, unencrypted simple bind against Unix domain socket: ldap_version = 3 ldap_uris = ldapi:/// ldap_base = ou=users,dc=mydomain,dc=internal ldap_auth_dn = cn=dovecot,dc=mydomain,dc=internal ldap_auth_dn_password = secret passdb ldap { bind = no default_password_scheme = SSHA ldap_filter = (&(objectClass=posixAccount)(uid=%{user})) fields { user = %{ldap:uid} password = %{ldap:userPassword} } } Meaning I'm doing password lookups, IMAP users can authenticate against Dovecot, Postfix correctly delivers incoming emails, everything works flawlessly. Now the setup I'm talking about, which does not work: ldap_version = 3 ldap_uris = ldaps://localhost.mydomain.internal ldap_base = ou=users,dc=mydomain,dc=internal ldap_auth_sasl_mechanisms = external ssl_client_cert_file = /etc/ssl/ldap/dovecot.crt ssl_client_key_file = /etc/ssl/ldap/dovecot.key # this just as a precaution during testing, validation *does* work ssl_client_require_valid_cert = no ssl_client_ca_dir = /etc/ssl/certs passdb ldap { bind = no default_password_scheme = SSHA ldap_filter = (&(objectClass=posixAccount)(uid=%{user})) fields { user = %{ldap:uid} password = %{ldap:userPassword} } } What happens here, as far as I can see, is Dovecot connects to slapd, initiates a SASL session but then fails to send the client certificate. slapd realizes the cert isn't coming, asserts there's no other SASL "external" method to fall back to and disconnects Dovecot. Game over. Now, before somebody thinks 'maybe something wrong with the certs or so', the very same setup on the very same machine works perfectly with two other client types, namely - openldap standard utils - postfix (recipient lookup) With the utils I have this setup, with the same client cert URI ldaps://localhost.mydomain.internal BASE ou=users,dc=mydomain,dc=internal SASL_MECH external TLS_REQCERT demand TLS_CACERT /root/ssl/ca.crt TLS_CERT /etc/ssl/ldap/dovecot.crt TLS_KEY /etc/ssl/ldap/dovecot.key and ldapwhoami connects without problem, and with ldapsearch I can perform the very same searches Dovecot is supposed to do. Postfix, for recipient lookups, I have configured like this: version = 3 server_host = ldaps://localhost.mydomain.internal search_base = ou=users,dc=mydomain,dc=internal query_filter = (&(mail=%s)) result_attribute = uid bind = sasl sasl_mechs = external tls_require_cert = demand tls_ca_cert_dir = /etc/ssl/certs tls_cert = /etc/ssl/ldap/dovecot.crt tls_key = /etc/ssl/ldap/dovecot.key Again, no problem to authenticate agains LDAP with the very same client certificate. The CA is correctly installed into /etc/ssl/certs , by the way, with update-ca-certificates. So out of 3 client types with the very same setup only Dovecot fails to successfully negotiate the client cert SASL session, while, after a good look through the docs, I really don't see any other settings I could tweak. Thoughts? Greetings, Bruno

2 6

Dovecot quota and IMAP MOVE
by marekstefanka＠duck.com 26 Jun '25

26 Jun '25

Hello, I would like to kindly ask, if there is some recommendation for dovecot quota configuration, to prevent quota-warning triggering when IMAP MOVE command is executed close to some thresholds. Problem seems to be this: Jun 10 11:08:20 srv1 dovecot[39677]: imap(box1(a)domain.com)<48726><0aCoCTQ3TC8KHgcC>: Debug: quota: Executing warning: quota-warning box1(a)domain.com (because bytes=3713971 -> 7301217 over limit 4096000) Jun 10 11:08:20 srv1 dovecot[39677]: imap(box1(a)domain.com)<48726><0aCoCTQ3TC8KHgcC>: Debug: quota: Executing warning: quota-warning box1(a)domain.com (because bytes=7301217 -> 3713971 below limit 4096000) So during any IMAP MOVE, which is copy-then-delete process, quota goes over and then below limit, triggering closest threshold. Quota config: quota = count:User quota quota_vsizes = yes # default, we specific user limits via sql quota_rule = *:storage=0 quota_grace = 50M quota_warning = storage=100%% quota-warning %u quota_warning2 = -storage=100%% quota-warning %u quota_warning3 = storage=90%% quota-warning %u quota_warning4 = storage=80%% quota-warning %u Recommended fix does not seems to work (tried multiple namespaces): quota_rule = Folder:storage=+100M Dovecot version is 2.3.21.1 Thank you for any help with this.

2 1

Re: no longer able to delete emails
by Michael Slusarz 25 Jun '25

25 Jun '25

"Jun 23 07:30:58 email-001 dovecot: imap (steven)<120035><W910Ii44SNgAAAAAAAAAAAAAAAAAAAAB>: Error: Mailbox Trash: ftruncate() failed with mbox: Structure needs cleaning" There's corruption in your filesystem. Dovecot can't do anything about this - it is the system call that's failing when trying to access the data. michael

1 0

doveconf terminated with signal SIGSEGV, Segmentation fault on ppc64le
by Peter Varkoly 24 Jun '25

24 Jun '25

doveconf -d # 2.4.1-4 (7d8c0e5759): /etc/dovecot/dovecot.conf # Pigeonhole version 2.4.1-4 (0a86619f) Segmentation fault (core dumped) The same source works fine on other architectures. The trace of gdb: Core was generated by `/usr/bin/doveconf -c /etc/dovecot/dovecot.conf -C -F /usr/sbin/dovecot -F'. Program terminated with signal SIGSEGV, Segmentation fault. #0 str_hash (p=0xf <error: Cannot access memory at address 0xf>) at ../lib/hash.c:529 --Type <RET> for more, q to quit, c to continue without paging-- 529 while (*s != '\0') { Function(s) ^std::(move|forward|as_const|(__)?addressof) will be skipped when stepping. Function(s) ^std::(shared|unique)_ptr<.*>::(get|operator) will be skipped when stepping. Function(s) ^std::(basic_string|vector|array|deque|(forward_)?list|(unordered_|flat_)?(multi)?(map|set)|span)<.*>::(c?r?(begin|end)|front|back|data|size|empty) will be skipped when stepping. Function(s) ^std::(basic_string|vector|array|deque|span)<.*>::operator.] will be skipped when stepping. (gdb) bt full #0 str_hash (p=0xf <error: Cannot access memory at address 0xf>) at ../lib/hash.c:529 s = 0xf <error: Cannot access memory at address 0xf> g = <optimized out> h = 0 #1 0x00007fff9ffa427c in hash_table_lookup_full (table=0x156052d80, lookup_key=<optimized out>, orig_key=<optimized out>, orig_key@entry=0x7fffc158a690, value=<optimized out>, value@entry=0x7fffc158a670) at ../lib/hash.c:204 node = <optimized out> #2 0x000000012b7145ec in config_parser_add_info (info_idx=3, ctx=0x7fffc158a6b0) at config-parser.c:2812 def = 0x12b73c148 <auth_lua_default_settings_keyvalue+40> i = 2 info = 0x12b73e168 <auth_oauth2_post_setting_parser_info> config_key = <optimized out> old_config_key = 0x0 name = 0x7fff9faa2790 <dlsym_doit> "\032" info = <optimized out> config_key = <optimized out> old_config_key = <optimized out> name = <optimized out> __func__ = <optimized out> i = <optimized out> def = <optimized out> valuep = <optimized out> old_info = <optimized out> old_def = <optimized out> #3 config_parse_file (path=0x156049550 "/etc/dovecot/dovecot.conf", flags=<optimized out>, dump_filter=0x0, config_r=0x12b741e18 <config>, error_r=0x7fffc158a9b8) at config-parser.c:2917 root = {prev = 0x7fffc158a6a0, input = 0x7fffa0180a08 <_rtld_local+2568>, path = 0x0, linenum = 1443176896} internal = {prev = 0x1560542b7, input = 0x156054280, path = 0x156054280 "undefined symbol: pigeonhole_settings_service_settings", linenum = 2685949488} ctx = {pool = 0x7fff9eaa0030, path = 0x156049550 "/etc/dovecot/dovecot.conf", all_keys = {_table = 0x156052d80, _key = 0x156052d80 "0", _keyp = 0x156052d80, _const_key = 0x156052d80 "0", _value = 0x156052d80, _valuep = 0x156052d80}, all_filter_parsers = {arr = {buffer = 0x0, element_size = 0}, v = 0x0, v_modifiable = 0x0}, all_filter_parsers_hash = {_table = 0x0, _key = 0x0, _keyp = 0x0, _const_key = 0x0, _value = 0x0, _valuep = 0x0}, root_module_parsers = 0x7fff9eaa0068, cur_section = 0x0, cur_input = 0x0, change_counter = 1 '\001', create_order_counter = 0, value = 0x0, error = 0x0, dovecot_config_version = 0x0, filter_name_prefixes = 0x0, filter_name_prefixes_count = 0, old = 0x0, seen_settings = {_table = 0x0, _key = 0x0, _keyp = 0x0, _const_key = 0x0, _value = 0x0, _valuep = 0x0}, filter = 0x0, dump_defaults = false, expand_values = false, hide_errors = false, delay_errors = false, hide_obsolete_warnings = false, ignore_unknown = false} i = 3 count = 143 full_line = 0x64656e696665646e line = <optimized out> fd = 7 ret = 0 dump_defaults = <optimized out> service_info_idx = 4294967295 root_filter = {parent = 0x1560691d0, protocol = 0x1 <error: Cannot access memory at address 0x1>, local_name = 0x156054200 "T`\025", local_host = 0x7fffc158a8a0 "", remote_host = 0x0, local_net = {family = 0, u = {ip6 = {__in6_u = {__u6_addr8 = '\000' <repeats 15 times>, __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, ip4 = {s_addr = 0}}, scope_id = 0}, remote_net = {family = 10384, u = {ip6 = {__in6_u = {__u6_addr8 = "\001\000\000\000ШX\301\377\177\000\000\360\031r+", __u6_addr16 = {1, 0, 43216, 49496, 32767, 0, 6640, 11122}, __u6_addr32 = {1, 3243813072, 32767, 728898032}}}, ip4 = {s_addr = 1}}, scope_id = 1}, local_bits = 0, remote_bits = 0, filter_name = 0x0, filter_name_array = false, default_settings = false} root_filter_parser = <optimized out> root_default_filter = {parent = 0x7fffc158a7f8, protocol = 0x156052430 "", local_name = 0x0, local_host = 0x12b7404c0 <config_all_services> "\340(\005V\001", remote_host = 0x19 <error: Cannot access memory at address 0x19>, local_net = {family = 42896, u = {ip6 = {__in6_u = { __u6_addr8 = "\377\177\000\000\000\000\000\000\000\000\000\000\300\004t+", __u6_addr16 = {32767, 0, 0, 0, 0, 0, 1216, 11124}, __u6_addr32 = {32767, 0, 0, 729023680}}}, ip4 = {s_addr = 32767}}, scope_id = 1}, remote_net = {family = 30208, u = {ip6 = {__in6_u = {__u6_addr8 = "\377\177\000\000@\251X\301\377\177\000\000p\211\004V", __u6_addr16 = {32767, 0, 43328, 49496, 32767, 0, 35184, 22020}, __u6_addr32 = {32767, 3243813184, 32767, 1443137904}}}, ip4 = {s_addr = 32767}}, scope_id = 1}, local_bits = 728816924, remote_bits = 1, filter_name = 0x12b747f00 "", filter_name_array = 128, default_settings = 168} prevfile = <optimized out> __func__ = "config_parse_file" #4 0x000000012b6f9690 in main (argc=<optimized out>, argv=<optimized out>) at doveconf.c:1238 _data_stack_cur_id = 2 master_service_flags = (MASTER_SERVICE_FLAG_STANDALONE | MASTER_SERVICE_FLAG_NO_INIT_DATASTACK_FRAME | MASTER_SERVICE_FLAG_DONT_SEND_STATS) scope = CONFIG_DUMP_SCOPE_ALL_WITHOUT_HIDDEN orig_config_path = <optimized out> config_path = 0x156049550 "/etc/dovecot/dovecot.conf" import_environment = 0x2 <error: Cannot access memory at address 0x2> error = 0x0 exec_args = <optimized out> setting_name_filters = <optimized out> i = <optimized out> c = <optimized out> ret = <optimized out> ret2 = <optimized out> dump_filter_parent = {parent = 0x0, protocol = 0x0, local_name = 0x0, local_host = 0x0, remote_host = 0x0, local_net = {family = 0, u = {ip6 = {__in6_u = { __u6_addr8 = '\000' <repeats 15 times>, __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, ip4 = {s_addr = 0}}, scope_id = 0}, remote_net = { --Type <RET> for more, q to quit, c to continue without paging-- family = 0, u = {ip6 = {__in6_u = {__u6_addr8 = '\000' <repeats 15 times>, __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, ip4 = {s_addr = 0}}, scope_id = 0}, local_bits = 0, remote_bits = 0, filter_name = 0x0, filter_name_array = false, default_settings = false} dump_filter = {parent = 0x7fffc158aa50, protocol = 0x0, local_name = 0x0, local_host = 0x0, remote_host = 0x0, local_net = {family = 0, u = {ip6 = {__in6_u = { __u6_addr8 = '\000' <repeats 15 times>, __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, ip4 = {s_addr = 0}}, scope_id = 0}, remote_net = { family = 0, u = {ip6 = {__in6_u = {__u6_addr8 = '\000' <repeats 15 times>, __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, ip4 = {s_addr = 0}}, scope_id = 0}, local_bits = 0, remote_bits = 0, filter_name = 0x0, filter_name_array = false, default_settings = false} config_path_specified = false hide_key = <optimized out> have_dump_filter = <optimized out> simple_output = <optimized out> check_full_config = <optimized out> dump_defaults = <optimized out> host_verify = <optimized out> dump_full = <optimized out> print_banners = <optimized out> hide_passwords = <optimized out> flags = (CONFIG_PARSE_FLAG_EXPAND_VALUES | CONFIG_PARSE_FLAG_RETURN_BROKEN_CONFIG) dump_config_import = <optimized out> -- Peter Varkoly SW Engineering(Systems) SUSE Software Solutions Germany GmbH Frankenstraße 146 D-90461 Nürnberg T +49-(0)911-740 53 0 E <varkoly(a)suse.com> https://www.suse.com/ (HRB 36809, AG Nürnberg) Geschäftsführer: Felix Imendörffer doveconf -d # 2.4.1-4 (7d8c0e5759): /etc/dovecot/dovecot.conf # Pigeonhole version 2.4.1-4 (0a86619f) Segmentation fault (core dumped) The same source works fine on other architectures. The trace of gdb: Core was generated by `/usr/bin/doveconf -c /etc/dovecot/dovecot.conf -C -F / usr/sbin/dovecot -F'. Program terminated with signal SIGSEGV, Segmentation fault. #0 str_hash (p=0xf <error: Cannot access memory at address 0xf>) at ../lib/ hash.c:529 --Type <RET> for more, q to quit, c to continue without paging-- 529 while (*s != '\0') { Function(s) ^std::(move|forward|as_const|(__)?addressof) will be skipped when stepping. Function(s) ^std::(shared|unique)_ptr<.*>::(get|operator) will be skipped when stepping. Function(s) ^std::(basic_string|vector|array|deque|(forward_)?list| (unordered_|flat_)?(multi)?(map|set)|span)<.*>::(c?r? (begin|end)|front|back|data|size|empty) will be skipped when stepping. Function(s) ^std::(basic_string|vector|array|deque|span)<.*>::operator.] will be skipped when stepping. (gdb) bt full #0 str_hash (p=0xf <error: Cannot access memory at address 0xf>) at ../lib/ hash.c:529 s = 0xf <error: Cannot access memory at address 0xf> g = <optimized out> h = 0 #1 0x00007fff9ffa427c in hash_table_lookup_full (table=0x156052d80, lookup_key=<optimized out>, orig_key=<optimized out>, orig_key@entry=0x7fffc158a690, value=<optimized out>, value@entry=0x7fffc158a670) at ../lib/hash.c:204 node = <optimized out> #2 0x000000012b7145ec in config_parser_add_info (info_idx=3, ctx=0x7fffc158a6b0) at config-parser.c:2812 def = 0x12b73c148 <auth_lua_default_settings_keyvalue+40> i = 2 info = 0x12b73e168 <auth_oauth2_post_setting_parser_info> config_key = <optimized out> old_config_key = 0x0 name = 0x7fff9faa2790 <dlsym_doit> "\032" info = <optimized out> config_key = <optimized out> old_config_key = <optimized out> name = <optimized out> __func__ = <optimized out> i = <optimized out> def = <optimized out> valuep = <optimized out> old_info = <optimized out> old_def = <optimized out> #3 config_parse_file (path=0x156049550 "/etc/dovecot/dovecot.conf", flags=<optimized out>, dump_filter=0x0, config_r=0x12b741e18 <config>, error_r=0x7fffc158a9b8) at config-parser.c:2917 root = {prev = 0x7fffc158a6a0, input = 0x7fffa0180a08 <_rtld_local+2568>, path = 0x0, linenum = 1443176896} internal = {prev = 0x1560542b7, input = 0x156054280, path = 0x156054280 "undefined symbol: pigeonhole_settings_service_settings", linenum = 2685949488} ctx = {pool = 0x7fff9eaa0030, path = 0x156049550 "/etc/dovecot/ dovecot.conf", all_keys = {_table = 0x156052d80, _key = 0x156052d80 "0", _keyp = 0x156052d80, _const_key = 0x156052d80 "0", _value = 0x156052d80, _valuep = 0x156052d80}, all_filter_parsers = {arr = {buffer = 0x0, element_size = 0}, v = 0x0, v_modifiable = 0x0}, all_filter_parsers_hash = {_table = 0x0, _key = 0x0, _keyp = 0x0, _const_key = 0x0, _value = 0x0, _valuep = 0x0}, root_module_parsers = 0x7fff9eaa0068, cur_section = 0x0, cur_input = 0x0, change_counter = 1 '\001', create_order_counter = 0, value = 0x0, error = 0x0, dovecot_config_version = 0x0, filter_name_prefixes = 0x0, filter_name_prefixes_count = 0, old = 0x0, seen_settings = {_table = 0x0, _key = 0x0, _keyp = 0x0, _const_key = 0x0, _value = 0x0, _valuep = 0x0}, filter = 0x0, dump_defaults = false, expand_values = false, hide_errors = false, delay_errors = false, hide_obsolete_warnings = false, ignore_unknown = false} i = 3 count = 143 full_line = 0x64656e696665646e line = <optimized out> fd = 7 ret = 0 dump_defaults = <optimized out> service_info_idx = 4294967295 root_filter = {parent = 0x1560691d0, protocol = 0x1 <error: Cannot access memory at address 0x1>, local_name = 0x156054200 "T`\025", local_host = 0x7fffc158a8a0 "", remote_host = 0x0, local_net = {family = 0, u = {ip6 = {__in6_u = {__u6_addr8 = '\000' <repeats 15 times>, __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, ip4 = {s_addr = 0}}, scope_id = 0}, remote_net = {family = 10384, u = {ip6 = {__in6_u = {__u6_addr8 = "\001\000\000\000ШX\301\377\177\000\000\360\031r+", __u6_addr16 = {1, 0, 43216, 49496, 32767, 0, 6640, 11122}, __u6_addr32 = {1, 3243813072, 32767, 728898032}}}, ip4 = {s_addr = 1}}, scope_id = 1}, local_bits = 0, remote_bits = 0, filter_name = 0x0, filter_name_array = false, default_settings = false} root_filter_parser = <optimized out> root_default_filter = {parent = 0x7fffc158a7f8, protocol = 0x156052430 "", local_name = 0x0, local_host = 0x12b7404c0 <config_all_services> "\340 (\005V\001", remote_host = 0x19 <error: Cannot access memory at address 0x19>, local_net = {family = 42896, u = {ip6 = {__in6_u = { __u6_addr8 = "\377\177\000\000\000\000\000\000\000\000\000\000\300\004t+", __u6_addr16 = {32767, 0, 0, 0, 0, 0, 1216, 11124}, __u6_addr32 = {32767, 0, 0, 729023680}}}, ip4 = {s_addr = 32767}}, scope_id = 1}, remote_net = {family = 30208, u = {ip6 = {__in6_u = {__u6_addr8 = "\377\177\000\000@\251X\301\377\177\000\000p\211\004V", __u6_addr16 = {32767, 0, 43328, 49496, 32767, 0, 35184, 22020}, __u6_addr32 = {32767, 3243813184, 32767, 1443137904}}}, ip4 = {s_addr = 32767}}, scope_id = 1}, local_bits = 728816924, remote_bits = 1, filter_name = 0x12b747f00 "", filter_name_array = 128, default_settings = 168} prevfile = <optimized out> __func__ = "config_parse_file" #4 0x000000012b6f9690 in main (argc=<optimized out>, argv=<optimized out>) at doveconf.c:1238 _data_stack_cur_id = 2 master_service_flags = (MASTER_SERVICE_FLAG_STANDALONE | MASTER_SERVICE_FLAG_NO_INIT_DATASTACK_FRAME | MASTER_SERVICE_FLAG_DONT_SEND_STATS) scope = CONFIG_DUMP_SCOPE_ALL_WITHOUT_HIDDEN orig_config_path = <optimized out> config_path = 0x156049550 "/etc/dovecot/dovecot.conf" import_environment = 0x2 <error: Cannot access memory at address 0x2> error = 0x0 exec_args = <optimized out> setting_name_filters = <optimized out> i = <optimized out> c = <optimized out> ret = <optimized out> ret2 = <optimized out> dump_filter_parent = {parent = 0x0, protocol = 0x0, local_name = 0x0, local_host = 0x0, remote_host = 0x0, local_net = {family = 0, u = {ip6 = {__in6_u = { __u6_addr8 = '\000' <repeats 15 times>, __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, ip4 = {s_addr = 0}}, scope_id = 0}, remote_net = { --Type <RET> for more, q to quit, c to continue without paging-- family = 0, u = {ip6 = {__in6_u = {__u6_addr8 = '\000' <repeats 15 times>, __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, ip4 = {s_addr = 0}}, scope_id = 0}, local_bits = 0, remote_bits = 0, filter_name = 0x0, filter_name_array = false, default_settings = false} dump_filter = {parent = 0x7fffc158aa50, protocol = 0x0, local_name = 0x0, local_host = 0x0, remote_host = 0x0, local_net = {family = 0, u = {ip6 = {__in6_u = { __u6_addr8 = '\000' <repeats 15 times>, __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, ip4 = {s_addr = 0}}, scope_id = 0}, remote_net = { family = 0, u = {ip6 = {__in6_u = {__u6_addr8 = '\000' <repeats 15 times>, __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, ip4 = {s_addr = 0}}, scope_id = 0}, local_bits = 0, remote_bits = 0, filter_name = 0x0, filter_name_array = false, default_settings = false} config_path_specified = false hide_key = <optimized out> have_dump_filter = <optimized out> simple_output = <optimized out> check_full_config = <optimized out> dump_defaults = <optimized out> host_verify = <optimized out> dump_full = <optimized out> print_banners = <optimized out> hide_passwords = <optimized out> flags = (CONFIG_PARSE_FLAG_EXPAND_VALUES | CONFIG_PARSE_FLAG_RETURN_BROKEN_CONFIG) dump_config_import = <optimized out> -- Peter Varkoly SW Engineering(Systems) SUSE Software Solutions Germany GmbH Frankenstraße 146 D-90461 Nürnberg T +49-(0)911-740 53 0 E <varkoly(a)suse.com> https://www.suse.com/ (HRB 36809, AG Nürnberg) Geschäftsführer: Felix Imendörffer

2 1

no longer able to delete emails
by Thing 24 Jun '25

24 Jun '25

Hi, I am getting this error in Dovecot, Server Error: UID MOVE: (0.012 + 0.000 + 0.011 secs) and seem unable to send to trash *I think) In the logs i am seeing, 8><---- <W910Ii44SNgAAAAAAAAAAAAAAAAAAAAB>: Error: Mailbox Trash: read() failed with mbox: Input/output error Jun 23 07:30:58 email-001 dovecot: imap(steven)<120035><W910Ii44SNgAAAAAAAAAAAAAAAAAAAAB>: Error: Mailbox Trash: ftruncate() failed with mbox: Structure needs cleaning Jun 23 07:30:58 email-001 dovecot: imap(steven)<120035><W910Ii44SNgAAAAAAAAAAAAAAAAAAAAB>: Logged out in=165 out=1189 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0 Jun 23 07:30:58 email-001 dovecot: imap-login: Login: user=<steven>, method=PLAIN, rip=::1, lip=::1, mpid=120067, secured, session=<WNR1Ii44TNgAAAAAAAAAAAAAAAAAAAAB> Jun 23 07:30:58 email-001 dovecot: imap(steven)<120067> 8><---- I doubt it is Dovecot but I have no idea as Google isnt helping much, any ideas please? I suspect it was a power loss issue as a CB failed on me. regards Steven Hi, I am getting this error in Dovecot, Server Error: UID MOVE: (0.012 + 0.000 + 0.011 secs) and seem unable to send to trash *I think) In the logs i am seeing, 8><---- <W910Ii44SNgAAAAAAAAAAAAAAAAAAAAB>: Error: Mailbox Trash: read() failed with mbox: Input/output error Jun 23 07:30:58 email-001 dovecot: imap (steven)<120035><W910Ii44SNgAAAAAAAAAAAAAAAAAAAAB>: Error: Mailbox Trash: ftruncate() failed with mbox: Structure needs cleaning Jun 23 07:30:58 email-001 dovecot: imap (steven)<120035><W910Ii44SNgAAAAAAAAAAAAAAAAAAAAB>: Logged out in=165 out=1189 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0 Jun 23 07:30:58 email-001 dovecot: imap-login: Login: user=<steven>, method=PLAIN, rip=::1, lip=::1, mpid=120067, secured, session=<WNR1Ii44TNgAAAAAAAAAAAAAAAAAAAAB> Jun 23 07:30:58 email-001 dovecot: imap(steven)<120067> 8><---- I doubt it is Dovecot but I have no idea as Google isnt helping much, any ideas please? I suspect it was a power loss issue as a CB failed on me. regards Steven

2 3

Re: Problem email client iPhone ios18.2
by Michael Slusarz 17 Jun '25

17 Jun '25

Timo confirmed this type of message (see below) breaks iOS mail clients regardless of the IMAP server used. So it is almost certainly a client issue. We are in contact with the Apple Mail developers and have provided this debug information to them. michael > On 02/10/2025 7:19 AM MST Timo Sirainen via dovecot <dovecot(a)dovecot.org> wrote: > > > On 10. Feb 2025, at 15.24, Florian Effenberger via dovecot <dovecot(a)dovecot.org> wrote: > > > > Hello, > > > > frido--- via dovecot wrote on 10.02.25 at 14:07: > >> The problem as described at the start of this thread is not solved in iOS 18.3. A bit more testing shows that it only appears to happen with attachments around 1MB and bigger. > > > > there seem to be two kind of problems, at least on my devices. > > I'm also wondering if there are multiple issues. I have one way of easily reproducing, but it has nothing to do with IMAP IDLE. Here's a test email which causes the hang - snipped it a bit in the middle which you can fill out yourself with: > > dd if=/dev/urandom bs=1024 count=3432 | base64 -w76 > > If you want to test multiple times, change Message-Id for every delivery. This mail can be simply saved to INBOX, e.g. with doveadm save: > > To: <user(a)example.com> > Subject: testing > Content-Type: multipart/mixed; boundary="foo" > Date: Tue, 17 Dec 2024 06:46:17 +0000 > From: <user(a)example.com> > Message-Id: <fooab(a)example.com> > > > > --foo > Content-Type: multipart/alternative; boundary="bar" > > --bar > Content-Transfer-Encoding: quoted-printable > Content-Type: text/html; charset=UTF-8 > > asdf > --bar-- > > --foo > Content-Description: test.pdf > Content-Disposition: attachment; filename="test.pdf" > Content-Transfer-Encoding: base64 > Content-Type: application/octet-stream; name="test.pdf" > > > lBjZO0luFuyUiOqQ8KPTTpMyPoNhlSTPPJauDuCVSwbZgaNyhnObul5qrdyPKo0NGiQKA3Kha34A > <61642 lines of random> > 4cNyk39T2wMsnQavfl8LXwG1vNQylpgmSN4p6fOpmGqQ > > --foo-- > > _______________________________________________ > dovecot mailing list -- dovecot(a)dovecot.org > To unsubscribe send an email to dovecot-leave(a)dovecot.org

3 3

Re: (solved) Dovecot 2.4.1 last-login configuration pattern: Unknown setting: pattern (dict_map_key_field_pattern or dict_map_key_field_service_pattern not found either.)
by Michael Borgelt 16 Jun '25

16 Jun '25

Zitat von Michael Borgelt via dovecot <dovecot(a)dovecot.org>: > Hello, > I am trying to configure last-login plugin for dovecot 2.4.1 and > getting the following error. > > doveconf -n > # 2.4.1-4 (7d8c0e5759): /etc/dovecot/dovecot.conf > # Pigeonhole version 2.4.1-4 (0a86619f) > doveconf: Fatal: Error in configuration file > /etc/dovecot/conf.d/30-lastlogin.conf line 24: pattern: Unknown > setting: pattern (dict_map_key_field_pattern or > dict_map_key_field_service_pattern not found either.) > > I am using the example config from the dovecot 2.4 documentation. > https://doc.dovecot.org/2.4.0/core/plugins/last_login.html#mysql-example > > Is this a bug in the config parser or in the example config? > > doveconf -n output with pattern lines in 30-lastlogin.conf commented: > > # 2.4.1-4 (7d8c0e5759): /etc/dovecot/dovecot.conf > # Pigeonhole version 2.4.1-4 (0a86619f) > # OS: Linux 6.12.27-amd64 x86_64 Debian 13.0 > # Hostname: debian.dg4yfa.org > # 4 default setting changes since version 2.4.0 > dovecot_config_version = 2.4.0 > auth_mechanisms = plain login > auth_username_format = %{user|username|lower} > dovecot_storage_version = 2.4.0 > first_valid_uid = 1000 > fts_autoindex = yes > fts_autoindex_max_recent_msgs = 999 > fts_search_add_missing = yes > imapsieve_url = sieve://127.0.0.1:4190 > language_filters = normalizer-icu snowball stopwords > language_tokenizers = generic email-address > last_valid_uid = 65530 > lda_mailbox_autocreate = yes > mail_driver = maildir > mail_inbox_path = ~/Maildir/.INBOX > mail_path = ~/Maildir > mail_plugins { > virtual = yes > fts = yes > fts_flatcurve = yes > quota = yes > } > mail_privileged_group = mail > protocols { > imap = yes > lmtp = yes > sieve = yes > pop3 = yes > } > quota_storage_size = 1G > sieve_execute_bin_dir = /usr/share/dovecot-pigeonhole/sieve > sieve_global_extensions { > vnd.dovecot.pipe = yes > vnd.dovecot.execute = yes > } > sieve_pipe_bin_dir = /usr/share/dovecot-pigeonhole/sieve > sieve_plugins = sieve_imapsieve sieve_extprograms > passdb pam { > } > userdb passwd { > result_failure = return-fail > result_success = continue > } > userdb passwd-file { > auth_username_format = %{user | username} > passwd_file_path = /etc/dovecot/users > driver = passwd-file > result_failure = return-ok > result_internalfail = continue > } > namespace inbox { > inbox = yes > mailbox Drafts { > special_use = "\\Drafts" > } > mailbox Entw&APw-rfe { > special_use = "\\Drafts" > } > mailbox Junk { > special_use = "\\Junk" > } > mailbox Spam { > special_use = "\\Junk" > } > mailbox Trash { > special_use = "\\Trash" > quota_storage_extra = 100M > } > mailbox Sent { > special_use = "\\Sent" > } > mailbox "Sent Messages" { > special_use = "\\Sent" > } > } > service imap-login { > inet_listener imap { > } > inet_listener imaps { > } > } > service pop3-login { > inet_listener pop3 { > } > inet_listener pop3s { > } > } > service submission-login { > inet_listener submission { > } > inet_listener submissions { > } > } > service lmtp { > unix_listener lmtp { > } > } > service imap { > } > service pop3 { > } > service submission { > } > service auth { > unix_listener auth-userdb { > } > } > service auth-worker { > } > service dict { > unix_listener dict { > } > } > ssl_server { > cert_file = /etc/dovecot/private/dovecot.pem > key_file = /etc/dovecot/private/dovecot.key > } > protocol lda { > mail_plugins { > sieve = yes > } > } > namespace virtual { > mail_driver = virtual > mail_path = ~/Maildir/virtual > prefix = virtual. > separator = . > } > protocol imap { > mail_plugins { > imap_sieve = yes > virtual = yes > imap_quota = yes > last_login = yes > } > } > protocol lmtp { > auth_username_format = %{user | username | lower} > mail_plugins { > sieve = yes > } > } > service managesieve-login { > inet_listener sieve { > port = 4190 > } > inet_listener sieve_deprecated { > port = 2000 > } > } > service managesieve { > } > last_login { > key = # hidden, use -P to show it > precision = ms > dict proxy { > name = sql > } > } > dict_server { > dict sql { > sql_driver = mysql > mysql localhost { > dbname = vmail > password = # hidden, use -P to show it > user = vmail > } > dict_map "shared/last-login/$service/$user/$remote_ip" { > sql_table = last_login > dict_map_value_field last_access { > type = uint > } > dict_map_key_field service { > } > dict_map_key_field userid { > } > dict_map_key_field last_ip { > } > } > } > } > language de { > filters = lowercase snowball > } > language en { > default = yes > filters = lowercase snowball english-possessive stopwords > } > fts flatcurve { > substring_search = yes > } > quota "User quota" { > driver = count > quota_warning warn-95 { > quota_storage_percentage = 95 > execute quota-warning { > args = 95 %{user} > } > } > quota_warning warn-80 { > quota_storage_percentage = 80 > execute quota-warning { > args = 80 %{user} > } > } > } > service quota-warning { > executable = script /usr/local/bin/quota-warning.sh > user = dovecot > unix_listener quota-warning { > user = Debian-exim > } > } > sieve_script personal { > active_path = ~/.dovecot.sieve > driver = file > path = ~/sieve > } > sieve_script default { > driver = file > name = default > path = /etc/dovecot/sieve/default/ > type = default > } > mailbox Spam { > sieve_script report-spam { > cause = copy > path = /usr/lib/dovecot/sieve/report-spam.sieve > type = before > } > } > imapsieve_from Spam { > sieve_script report-ham { > cause = copy > path = /usr/lib/dovecot/sieve/report-ham.sieve > type = before > } > } > > Thank you, > Michael > > > -- > Michael Borgelt > Email: mborgelt(a)borgelt.org > > _______________________________________________ > dovecot mailing list -- dovecot(a)dovecot.org > To unsubscribe send an email to dovecot-leave(a)dovecot.org Hello. I was able to solve the problem by replacing 'pattern' in 'dict_map' configuration with 'value'. With the following config the last_login table in mysql is getting filled as expected: last_login { dict proxy { name = sql } key = last-login/%{service}/%{user}/%{remote_ip} precision = ms } dict_server { dict sql { sql_driver = mysql mysql sql.example.com { dbname = mails user = dovecot password = pass } dict_map shared/last-login/$service/$user/$remote_ip { sql_table = last_login value_field last_access { type = uint } key_field userid { value = $user } key_field service { value = $service } key_field last_ip { value = $remote_ip } } } } The example in the dovecot documentation should be updated accordingly. Regards Michael. -- Michael Borgelt Email: michael(a)borgelt.org -- Michael Borgelt Email: mborgelt(a)borgelt.org

1 0

How do I enable the CDB backend in Dovecot 2.4.1? → “auth: Fatal: Unknown passdb driver ‘cdb’”
by Brent Clark 16 Jun '25

16 Jun '25

Good day everyone, I’m trying to authenticate against a constant database (CDB) file. After reading the /cdb_path/ description in the 2.4.1 manual (⟨https://doc.dovecot.org/2.4.1/core/summaries/settings.html#cdb_path⟩ <https://doc.dovecot.org/2.4.1/core/summaries/settings.html#cdb_path%E2%9F%A9>) I added the following to the conf file.: |passdb cdb { cdb_path = /srv/mail/passwd.cdb } userdb cdb { cdb_path = /srv/mail/passwd.cdb } | But dovecot says |auth: Fatal: Unknownpassdb driver 'cdb'| dovecot --version 2.4.1-4+debian11 (7d8c0e5759) I cant see anything in the changelogs. Is the “cdb” driver still available in 2.4.1, or was it renamed/removed? Any pointers (or a minimal working example) would be greatly appreciated. Kind Regards Brent Clark Good day everyone, I’m trying to authenticate against a constant database (CDB) file. After reading the cdb_path description in the 2.4.1 manual (⟨https:// doc.dovecot.org/2.4.1/core/summaries/settings.html#cdb_path⟩) I added the following to the conf file.: passdb cdb { cdb_path = /srv/mail/passwd.cdb } userdb cdb { cdb_path = /srv/mail/passwd.cdb } But dovecot says auth: Fatal: Unknown passdb driver 'cdb' dovecot --version 2.4.1-4+debian11 (7d8c0e5759) I cant see anything in the changelogs. Is the “cdb” driver still available in 2.4.1, or was it renamed/removed? Any pointers (or a minimal working example) would be greatly appreciated. Kind Regards Brent Clark

3 3