[Dovecot] acls not copied when creating subfolder of private INBOX

[Andreas Helmcke]

Using brand new dovecot 2.1.5 I still have a problem with the inheritance of acls.

Setting:
- maildir with private INBOX and public folders.
- users maildir directory (/home/mail/user/ahelmcke) contains dovecot-acl file
- public folders root directory (/home/mail/Fax) contains dovecot-acl file

When creating a subfolder of the public folder the dovecot-acl files gets copied to the subfolders directory as expected.
When creating a subfolder of the users INBOX the dovecot-acl files does /not/ get copied to the subfolders directory.

Debug output:

doveadm -Dv mailbox create -u ahelmcke Fax/Buhhhh

doveadm(root): Debug: Loading modules from directory: /usr/local/lib/dovecot
doveadm(root): Debug: Module loaded: /usr/local/lib/dovecot/lib01_acl_plugin.so
doveadm(root): Debug: Module loaded: /usr/local/lib/dovecot/lib10_quota_plugin.so
doveadm(root): Debug: Loading modules from directory: /usr/local/lib/dovecot/doveadm
doveadm(root): Debug: Module loaded: /usr/local/lib/dovecot/doveadm/lib10_doveadm_acl_plugin.so
doveadm(root): Debug: Skipping module doveadm_expire_plugin, because dlopen() failed:
/usr/local/lib/dovecot/doveadm/lib10_doveadm_expire_plugin.so: undefined symbol: expire_set_lookup (this is usually
intentional, so just ignore this message)
doveadm(root): Debug: Module loaded: /usr/local/lib/dovecot/doveadm/lib10_doveadm_quota_plugin.so
doveadm(root): Debug: Skipping module doveadm_zlib_plugin, because dlopen() failed:
/usr/local/lib/dovecot/doveadm/lib10_doveadm_zlib_plugin.so: undefined symbol: i_stream_create_deflate (this is usually
intentional, so just ignore this message)
doveadm(root): Debug: Skipping module doveadm_fts_plugin, because dlopen() failed:
/usr/local/lib/dovecot/doveadm/lib20_doveadm_fts_plugin.so: undefined symbol: fts_list_backend (this is usually
intentional, so just ignore this message)
doveadm(ahelmcke): Debug: auth input: ahelmcke quota_rule=*:storage=2000M
doveadm(ahelmcke): Debug: Added userdb setting: plugin/quota_rule=*:storage=2000M
doveadm(ahelmcke): Debug: Effective uid=494, gid=491, home=/home/mail/user/ahelmcke
doveadm(ahelmcke): Debug: Quota root: name=User quota backend=maildir args=
doveadm(ahelmcke): Debug: Quota rule: root=User quota mailbox=* bytes=2097152000 messages=0
doveadm(ahelmcke): Debug: Namespace inbox: type=private, prefix=INBOX/, sep=/, inbox=yes, hidden=no, list=yes,
subscriptions=yes location=maildir:/home/mail/user/ahelmcke
doveadm(ahelmcke): Debug: maildir++: root=/home/mail/user/ahelmcke, index=, control=, inbox=/home/mail/user/ahelmcke, alt=
doveadm(ahelmcke): Debug: acl: initializing backend with data: vfile
doveadm(ahelmcke): Debug: acl: acl username = ahelmcke
doveadm(ahelmcke): Debug: acl: owner = 1
doveadm(ahelmcke): Debug: acl vfile: Global ACL directory: (none)
doveadm(ahelmcke): Debug: Namespace dummy: type=private, prefix=, sep=/, inbox=no, hidden=yes, list=no,
subscriptions=yes location=maildir:/home/mail/user/ahelmcke/public/
doveadm(ahelmcke): Debug: maildir++: root=/home/mail/user/ahelmcke/public, index=, control=, inbox=, alt=
doveadm(ahelmcke): Debug: acl: initializing backend with data: vfile
doveadm(ahelmcke): Debug: acl: acl username = ahelmcke
doveadm(ahelmcke): Debug: acl: owner = 1
doveadm(ahelmcke): Debug: acl vfile: Global ACL directory: (none)
doveadm(ahelmcke): Debug: Namespace fax: type=public, prefix=Fax/, sep=/, inbox=no, hidden=no, list=yes,
subscriptions=no location=maildir:/home/mail/Fax:INDEX=/home/mail/user/ahelmcke/SEEN.Fax
doveadm(ahelmcke): Debug: maildir++: root=/home/mail/Fax, index=/home/mail/user/ahelmcke/SEEN.Fax, control=, inbox=, alt=
doveadm(ahelmcke): Debug: acl: initializing backend with data: vfile
doveadm(ahelmcke): Debug: acl: acl username = ahelmcke
doveadm(ahelmcke): Debug: acl: owner = 0
doveadm(ahelmcke): Debug: acl vfile: Global ACL directory: (none)
doveadm(ahelmcke): Debug: acl vfile: reading file /home/mail/Fax/dovecot-acl
doveadm(ahelmcke): Debug: Namespace Fax/: Using permissions from /home/mail/Fax: mode=0700 gid=-1
doveadm(ahelmcke): Debug: Namespace INBOX/: Using permissions from /home/mail/user/ahelmcke: mode=0700 gid=-1
doveadm(ahelmcke): Debug: acl vfile: reading file /home/mail/user/ahelmcke/dovecot-acl
doveadm(ahelmcke): Debug: acl vfile: reading file /home/mail/user/ahelmcke/dovecot-acl
doveadm(ahelmcke): Debug: acl vfile: reading file /home/mail/user/ahelmcke/dovecot-acl
doveadm(ahelmcke): Debug: Namespace Fax/: /home/mail/Fax/.Buhhhh doesn't exist yet, using default permissions
doveadm(ahelmcke): Debug: Namespace Fax/: Using permissions from /home/mail/Fax: mode=0700 gid=-1
doveadm(ahelmcke): Debug: acl vfile: reading file /home/mail/Fax/dovecot-acl
doveadm(ahelmcke): Debug: acl vfile: file /home/mail/Fax/.Buhhhh/dovecot-acl not found
doveadm(ahelmcke): Debug: acl vfile: reading file /home/mail/Fax/.Buhhhh/dovecot-acl
doveadm(ahelmcke): Debug: acl vfile: reading file /home/mail/user/ahelmcke/dovecot-acl
doveadm(ahelmcke): Debug: acl vfile: reading file /home/mail/Fax/.Buhhhh/dovecot-acl
doveadm(ahelmcke): Debug: acl vfile: reading file /home/mail/Fax/.Buhhhh/dovecot-acl
doveadm(ahelmcke): Debug: acl vfile: reading file /home/mail/user/ahelmcke/dovecot-acl
doveadm(ahelmcke): Debug: acl vfile: reading file /home/mail/Fax/.Buhhhh/dovecot-acl
doveadm(ahelmcke): Debug: acl vfile: reading file /home/mail/Fax/.Buhhhh/dovecot-acl
doveadm(ahelmcke): Debug: acl vfile: reading file /home/mail/user/ahelmcke/dovecot-acl


doveadm -Dv mailbox create -u ahelmcke INBOX/Buhhhh

doveadm(root): Debug: Loading modules from directory: /usr/local/lib/dovecot
doveadm(root): Debug: Module loaded: /usr/local/lib/dovecot/lib01_acl_plugin.so
doveadm(root): Debug: Module loaded: /usr/local/lib/dovecot/lib10_quota_plugin.so
doveadm(root): Debug: Loading modules from directory: /usr/local/lib/dovecot/doveadm
doveadm(root): Debug: Module loaded: /usr/local/lib/dovecot/doveadm/lib10_doveadm_acl_plugin.so
doveadm(root): Debug: Skipping module doveadm_expire_plugin, because dlopen() failed:
/usr/local/lib/dovecot/doveadm/lib10_doveadm_expire_plugin.so: undefined symbol: expire_set_lookup (this is usually
intentional, so just ignore this message)
doveadm(root): Debug: Module loaded: /usr/local/lib/dovecot/doveadm/lib10_doveadm_quota_plugin.so
doveadm(root): Debug: Skipping module doveadm_zlib_plugin, because dlopen() failed:
/usr/local/lib/dovecot/doveadm/lib10_doveadm_zlib_plugin.so: undefined symbol: i_stream_create_deflate (this is usually
intentional, so just ignore this message)
doveadm(root): Debug: Skipping module doveadm_fts_plugin, because dlopen() failed:
/usr/local/lib/dovecot/doveadm/lib20_doveadm_fts_plugin.so: undefined symbol: fts_list_backend (this is usually
intentional, so just ignore this message)
doveadm(ahelmcke): Debug: auth input: ahelmcke quota_rule=*:storage=2000M
doveadm(ahelmcke): Debug: Added userdb setting: plugin/quota_rule=*:storage=2000M
doveadm(ahelmcke): Debug: Effective uid=494, gid=491, home=/home/mail/user/ahelmcke
doveadm(ahelmcke): Debug: Quota root: name=User quota backend=maildir args=
doveadm(ahelmcke): Debug: Quota rule: root=User quota mailbox=* bytes=2097152000 messages=0
doveadm(ahelmcke): Debug: Namespace inbox: type=private, prefix=INBOX/, sep=/, inbox=yes, hidden=no, list=yes,
subscriptions=yes location=maildir:/home/mail/user/ahelmcke
doveadm(ahelmcke): Debug: maildir++: root=/home/mail/user/ahelmcke, index=, control=, inbox=/home/mail/user/ahelmcke, alt=
doveadm(ahelmcke): Debug: acl: initializing backend with data: vfile
doveadm(ahelmcke): Debug: acl: acl username = ahelmcke
doveadm(ahelmcke): Debug: acl: owner = 1
doveadm(ahelmcke): Debug: acl vfile: Global ACL directory: (none)
doveadm(ahelmcke): Debug: Namespace dummy: type=private, prefix=, sep=/, inbox=no, hidden=yes, list=no,
subscriptions=yes location=maildir:/home/mail/user/ahelmcke/public/
doveadm(ahelmcke): Debug: maildir++: root=/home/mail/user/ahelmcke/public, index=, control=, inbox=, alt=
doveadm(ahelmcke): Debug: acl: initializing backend with data: vfile
doveadm(ahelmcke): Debug: acl: acl username = ahelmcke
doveadm(ahelmcke): Debug: acl: owner = 1
doveadm(ahelmcke): Debug: acl vfile: Global ACL directory: (none)
doveadm(ahelmcke): Debug: Namespace fax: type=public, prefix=Fax/, sep=/, inbox=no, hidden=no, list=yes,
subscriptions=no location=maildir:/home/mail/Fax:INDEX=/home/mail/user/ahelmcke/SEEN.Fax
doveadm(ahelmcke): Debug: maildir++: root=/home/mail/Fax, index=/home/mail/user/ahelmcke/SEEN.Fax, control=, inbox=, alt=
doveadm(ahelmcke): Debug: acl: initializing backend with data: vfile
doveadm(ahelmcke): Debug: acl: acl username = ahelmcke
doveadm(ahelmcke): Debug: acl: owner = 0
doveadm(ahelmcke): Debug: acl vfile: Global ACL directory: (none)
doveadm(ahelmcke): Debug: Namespace INBOX/: /home/mail/user/ahelmcke/.Buhhhh doesn't exist yet, using default permissions
doveadm(ahelmcke): Debug: Namespace INBOX/: Using permissions from /home/mail/user/ahelmcke: mode=0700 gid=-1

doveconf -n
# 2.1.5: /etc/dovecot/dovecot.conf
# OS: Linux 2.6.32-220.7.1.el6.x86_64 x86_64 CentOS release 6.2 (Final) ext4
auth_master_user_separator = *
auth_verbose = yes
first_valid_uid = 400
mail_debug = yes
mail_gid = vmail
mail_home = /home/mail/user/%u
mail_location = maildir:/home/mail/user/%u
mail_plugins = " quota acl"
mail_uid = vmail
managesieve_notify_capability = mailto
managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric
relational regex imap4flags copy include variables body enotify environment mailbox date ihave
mbox_write_locks = fcntl
namespace dummy {
  alias_for = INBOX/
  hidden = yes
  list = no
  location = maildir:/home/mail/user/%u/public/
  prefix =
  separator = /
  type = private
}
namespace fax {
  location = maildir:/home/mail/Fax:INDEX=/home/mail/user/%u/SEEN.Fax
  prefix = Fax/
  separator = /
  subscriptions = no
  type = public
}
namespace inbox {
  inbox = yes
  location =
  prefix = INBOX/
  separator = /
  type = private
}
passdb {
  args = /etc/dovecot/passwd.masterusers
  driver = passwd-file
  master = yes
  pass = yes
}
passdb {
  args = /etc/dovecot/dovecot-ldap.conf
  driver = ldap
}
plugin {
  acl = vfile
  acl_shared_dict = file:/home/mail/shared-mailboxes
  quota = maildir:User quota
  quota_rule = *:storage=3G
  sieve = /home/mail/user/%u/sieve.active
  sieve_dir = /home/mail/user/%u/sieve.scripts
}
protocols = imap lmtp sieve
service auth {
  unix_listener /var/spool/postfix/private/auth {
    mode = 0666
  }
  unix_listener auth-userdb {
    mode = 0600
    user = vmail
  }
}
service imap-login {
  inet_listener imap {
    address = *
  }
  inet_listener imaps {
    address = *
  }
}
service managesieve-login {
  inet_listener sieve {
    address = *
    port = 4190
  }
}
ssl = required
ssl_cert = </etc/pki/dovecot/certs/mail.ela-soft.com.crt
ssl_key = </etc/pki/dovecot/private/mail.ela-soft.com.2048bit.nopp.key
userdb {
  args = /etc/dovecot/dovecot-ldap.conf
  driver = ldap
}
protocol lda {
  mail_plugins = " quota acl sieve"
}
protocol imap {
  mail_plugins = " quota acl imap_quota imap_acl"
}
protocol lmtp {
  mail_plugins = " quota acl sieve"
}