Question about noreplicate flag

[Bernardo Reino]

On Mon, 17 Feb 2020, Bernardo Reino wrote:

> On Mon, 17 Feb 2020, Aki Tuomi wrote:
>
>> On 17.2.2020 12.48, Bernardo Reino wrote:
>>> Dear all,
>>> 
>>> I've just setup replication between two servers. The e-mail accounts
>>> on both servers intersect but are not the same.
>>> 
>>> In dovecot.conf (both are identical except one user /var/mail and the
>>> other uses /srv/vmail) I have:
>>> 
>>> --<<--
>>> userdb {
>>>   driver = passwd-file
>>>   args = username_format=%Lu /etc/dovecot/virtual_passwd
>>>   default_fields = uid=vmail gid=vmail home=/var/mail/%d/%n
>>> }
>>> 
>>> passdb {
>>>   driver = passwd-file
>>>   args = scheme=SHA512-CRYPT username_format=%Lu
>>> /etc/dovecot/virtual_passwd
>>> }
>>> -->>--
>>> 
>>> i.e. I use a passwd-like database.
>>> 
>>> For the non-overlapping accounts in both servers I want to prevent
>>> replication, as it will otherwise fail with "Error: sync: Unknown user
>>> in remote".
>>> 
>>> I have added "userdb_noreplicate" (also tried "userdb_noreplicate=y")
>>> for those users, but I still see the above error message in the logs.
>>> 
>>> Like:
>>> reinob at bbmk.org:{SHA512-CRYPT}$6$e10...4c::::::userdb_noreplicate=y
>>> 
>>> If I run "doveadm user -u reinob at bbmk.org" I get the following:
>>> 
>>> userdb: reinob at bbmk.org
>>>   user      : reinob at bbmk.org
>>>   uid       : 5000
>>>   gid       : 5000
>>>   home      : /var/mail/bbmk.org/reinob
>>>   noreplicate: y
>>> 
>>> Note that I use "userdb_noreplicate" instead of "noreplicate" (which I
>>> also tried just in case), as from what I understood the "userdb_"
>>> prefix is required when adding the flag to the passwd file.
>>> 
>>> As far as I can tell I'm doing everything right, but for some reason
>>> the replication is ignoring that flag.
>>> 
>>> Thanks in advance for any help with this.
>>> 
>>> (Let me know if you need to see the $(doveconf -n), but I believe the
>>> only relevant parts are the userdb and passdb.
>> 
>> 
>> Hi!
>> 
>> What version of dovecot are you using? The noreplicate field seems to be
>> correctly there. Can you turn on 'mail_debug=yes', and see if the
>> replicator logs anything useful.
>
> It's 2.3.9.3 from repo.dovecot.org (debian buster) on both servers.
>
> I'll try to enable mail_debug and see what it tells me!
>
> Thanks a lot.

Here's a log. I copied a message from one folder to another, which 
triggered the server (the one having reinob at bbmk.org with the noreplicate 
flag) to (attempt to) replicate to the other server not having this 
account.

--<<--
Feb 17 11:56:52 imap(reinob at bbmk.org)<29984><9XU5aMOeLLhXsqcx>: Debug: replication: Replication requested by 'UID copy 21618 "INBOX"', priority=1
Feb 17 11:56:53 doveadm(reinob at bbmk.org): Debug: auth-master: passdb lookup(reinob at bbmk.org): Started passdb lookup
Feb 17 11:56:53 doveadm(reinob at bbmk.org): Debug: auth-master: conn unix:/var/run/dovecot/auth-userdb: Connecting
Feb 17 11:56:53 doveadm(reinob at bbmk.org): Debug: auth-master: conn unix:/var/run/dovecot/auth-userdb (pid=29930,uid=0): Client connected (fd=9)
Feb 17 11:56:53 doveadm(reinob at bbmk.org): Debug: auth-master: passdb lookup(reinob at bbmk.org): auth PASS input: user=reinob at bbmk.org
Feb 17 11:56:53 doveadm(reinob at bbmk.org): Debug: auth-master: passdb lookup(reinob at bbmk.org): Finished passdb lookup (user=reinob at bbmk.org )
Feb 17 11:56:53 doveadm(reinob at bbmk.org)<29989><>: Debug: auth-master: userdb lookup(reinob at bbmk.org): Started userdb lookup
Feb 17 11:56:53 doveadm(reinob at bbmk.org)<29989><>: Debug: auth-master: userdb lookup(reinob at bbmk.org): auth USER input: reinob at bbmk.org uid=5000 gid=5000 home=/var/mail/bbmk.org/reinob noreplicate=y
Feb 17 11:56:53 doveadm(reinob at bbmk.org)<29989><>: Debug: auth-master: userdb lookup(reinob at bbmk.org): Finished userdb lookup 
(username=reinob at bbmk.org uid=5000 gid=5000 home=/var/mail/bbmk.org/reinob noreplicate=y)
Feb 17 11:56:53 doveadm(reinob at bbmk.org)<29989><>: Debug: Added userdb setting: plugin/noreplicate=y

Feb 17 11:56:53 doveadm(reinob at bbmk.org): Debug: remote(vps.kemeny.email:12345): auth-master: passdb lookup(reinob at bbmk.org): Started passdb lookup
Feb 17 11:56:53 doveadm(reinob at bbmk.org): Debug: remote(vps.kemeny.email:12345): auth-master: conn unix:/var/run/dovecot/auth-userdb: Connecting
Feb 17 11:56:53 doveadm(reinob at bbmk.org): Debug: remote(vps.kemeny.email:12345): auth-master: conn unix:/var/run/dovecot/auth-userdb (pid=19084,uid=0): Client connected (fd=9)
Feb 17 11:56:53 doveadm(reinob at bbmk.org): Debug: remote(vps.kemeny.email:12345): auth-master: passdb lookup(reinob at bbmk.org): auth PASS input:
Feb 17 11:56:53 doveadm(reinob at bbmk.org): Debug: remote(vps.kemeny.email:12345): auth-master: passdb lookup(reinob at bbmk.org): Passdb lookup failed
Feb 17 11:56:53 doveadm(reinob at bbmk.org): Debug: remote(vps.kemeny.email:12345): auth-master: userdb lookup(reinob at bbmk.org): Started userdb lookup
Feb 17 11:56:53 doveadm(reinob at bbmk.org): Debug: remote(vps.kemeny.email:12345): auth-master: userdb lookup(reinob at bbmk.org): auth USER input:
Feb 17 11:56:53 doveadm(reinob at bbmk.org): Debug: remote(vps.kemeny.email:12345): auth-master: userdb lookup(reinob at bbmk.org): Userdb lookup failed
Feb 17 11:56:53 doveadm(reinob at bbmk.org): Debug: remote(vps.kemeny.email:12345): auth-master: conn unix:/var/run/dovecot/auth-userdb (pid=19084,uid=0): Disconnected: Connection closed (fd=9)

Feb 17 11:56:53 doveadm(reinob at bbmk.org): Debug: auth-master: conn unix:/var/run/dovecot/auth-userdb (pid=29930,uid=0): Disconnected: Connection closed (fd=9)

Feb 17 11:56:53 imap(reinob at bbmk.org)<29963><kLtIZ8OerKFXsqcx>: Debug: Namespace : Using permissions from /var/mail/bbmk.org/reinob: mode=0700 gid=default
Feb 17 11:56:53 imap(reinob at bbmk.org)<29963><kLtIZ8OerKFXsqcx>: Debug: Mailbox INBOX: UID 26621: Opened mail because: header streamFeb 17 11:56:53 imap(reinob at bbmk.org)<29963><kLtIZ8OerKFXsqcx>: Debug: Mailbox INBOX: UID 26621: Opened mail because: mail body
Feb 17 11:56:53 imap(reinob at bbmk.org)<29963><kLtIZ8OerKFXsqcx>: Debug: Mailbox INBOX: UID 26621: Opened mail because: header stream
-->>--

(The above is also attached as a plain text file, in case alpine does mess 
up the line wrapping..)

Note that the log even says "Added userdb setting: plugin/noreplicate=y",
yet the very next line is the remote having been contacted! :)

Any ideas?

Thanks a lot in advance,
Bernardo.
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: noreplicate_log.txt
URL: <https://dovecot.org/pipermail/dovecot/attachments/20200217/e46a3c7e/attachment.txt>