January 2011 - dovecot

[Dovecot] X-SAVEDATE & dync & doveadm expunge
by e-frog 04 Jan '11

04 Jan '11

Hello List, After moving the mail store via dsync backup to a different location the following command doveadm expunge -u user mailbox "Trash" savedbefore 10d deleted ALL mails in Trash instead of messages older than 10 days. It looks like X-SAVEDATE is somehow wrong... A fetch 1:* (internaldate x-savedate) * 1 FETCH (INTERNALDATE "28-Dec-2007 14:49:58 +0100" X-SAVEDATE "01-Jan-1970 01:00:00 +0100") A OK Fetch completed. ...while the ctime for this mail is as below: $ ls -lac -rw------- 1 vmail vmail 40851 2010-12-30 19:26 1198963359.P1256Q0M253583.ubuntu-test.localdomain,S=40851:2,S I was assuming that for the maildirs X-SAVEDATE is derived from the message ctime? "01-Jan-1970 01:00:00 +0100" seem to be definitely wrong. Thanks, e-frog $ doveconf -n # 2.0.8 (89936539e3b8): /etc/dovecot/dovecot.conf # OS: Linux 2.6.35-24-generic-pae i686 Ubuntu 10.10 deliver_log_format = msgid=%m: from=%f: %$ dict { dictionary = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes mail_gid = vmail mail_home = /home/vmail/%Ld/%Ln mail_location = maildir:~/maildir:INDEX=~/index:CONTROL=~/control mail_plugins = quota virtual mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date namespace { hidden = no inbox = yes list = yes location = prefix = separator = / subscriptions = yes type = private } namespace { location = virtual:/etc/dovecot/virtual:INDEX=~/control/virtual prefix = virtual/ separator = / subscriptions = no type = private } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { antispam_backend = spool2dir antispam_spam = Junk antispam_spool2dir_notspam = /home/vmail/learn-ham/%%020lu-%u-%%05luh antispam_spool2dir_spam = /home/vmail/learn-spam/%%020lu-%u-%%05lus antispam_trash = Trash fts = squat fts_squat = partial=4 full=10 quota = dict:user::proxy::dictionary sieve = ~/dovecot.sieve sieve_before = /etc/dovecot/sieve-global/ sieve_dir = ~/sieve } postmaster_address = postmaster(a)ubuntu-test.localdomain protocols = imap lmtp sieve quota_full_tempfail = yes service auth { unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { mode = 0600 user = vmail } } service dict { unix_listener dict { mode = 0600 user = vmail } } service imap-login { inet_listener imaps { port = 0 } process_min_avail = 2 service_count = 0 } service imap { executable = imap postlogin } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } user = vmail } service postlogin { executable = script-login /opt/bin/dovecot-postlogin.sh } ssl = required ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } verbose_proctitle = yes protocol lmtp { mail_plugins = quota virtual sieve } protocol imap { mail_plugins = quota virtual fts fts_squat imap_quota antispam }

2 2

[Dovecot] Automatic Debian Dovecot repository now also includes amd64 binary packages.
by Stephan Bosch 04 Jan '11

04 Jan '11

Hi, I've recently significantly improved the automated Dovecot Debian package builder. At the beginning it only produced i386 binaries for Debian testing. A few weeks back I added a slave builder that builds packages for Debian stable. Today I have extended the slave builder with support for multiple architectures and I've added amd64 binaries to the repository. The master builder still builds packages for testing/i386 every hour. The slaves check for new source packages about 20 minutes later. Read the following wiki page for more information and read it carefully when you are considering to use these packages: http://wiki.dovecot.org/PrebuiltBinaries#Automatically_Built_Packages Also, every day at four 'o clock in the morning, the latest source packages are uploaded to the openSUSE build service, which builds i386/amd64 binaries for several Ubuntu versions (experimental): http://download.opensuse.org/repositories/home:/sbosch:/ Regards, Stephan.

2 2

[Dovecot] dovecot: auth: Fatal: sql_driver_register(mysql): Already registered
by kjhkg kjkjhgkhg 04 Jan '11

04 Jan '11

Hi, i've been using dovecot2 on our server for handling virtual mailboxes and postfix is also using it to examine if a mail has to be delivered locally or not. Recently i upgraded to 2.0.7 (freebsd ports), but it stopped working, says the error in the subject line. Details: [root@postfixjail /usr/local/etc/dovecot]# dovecot --version 2.0.7 [root@postfixjail /usr/local/etc/dovecot]# grep -hv '^ *$#.*$\?$' dovecot.conf conf.d/* protocols = imap pop3 lmtp sieve listen = * dict { quota = mysql:/usr/local/etc/dovecot/dovecot-dict-sql.conf.ext quota_rule2 = Trash:bytes=+100M } mail_location = maildir:~/Maildir passdb { driver = sql args = /usr/local/etc/dovecot/dovecot-sql.conf.ext } userdb { driver = prefetch } userdb { driver = sql args = /usr/local/etc/dovecot/dovecot-sql.conf.ext } ssl = yes ssl_cert = </etc/ssl/dovecot/dovecot.pem ssl_key = </etc/ssl/dovecot/dovecot.pem default_login_user = nobody auth_cache_size = 0 auth_cache_ttl = 0 auth_cache_negative_ttl = 0 mail_plugins = $mail_plugins quota plugin { quota = dict:User quota::proxy::quota } protocol imap { mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota } log_path = syslog plugin { } service imap-login { service_count = 1 process_min_avail = 3 inet_listener imap { } inet_listener imaps { } } service pop3-login { service_count = 1 process_min_avail = 3 inet_listener pop3 { } inet_listener pop3s { } } service lmtp { unix_listener lmtp { } } service imap { } service pop3 { } service auth { unix_listener auth-userdb { mode = 0600 user = vmail group = vmail } unix_listener /var/spool/postfix/private/auth { mode = 0660 user = postfix group = postfix } } service auth-worker { } service dict { unix_listener dict { mode = 0600 user = vmail } } protocol lda { mail_plugins = $mail_plugins quota sieve } protocol lmtp { mail_plugins = $mail_plugins quota sieve } service managesieve-login { inet_listener sieve { port = 4190 } service_count = 1 process_min_avail = 2 } service managesieve { process_limit = 1024 process_min_avail = 2 } protocol sieve { managesieve_max_line_length = 65536 } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } [root@postfixjail /usr/local/etc/dovecot]# grep -hv '^ *$#.*$\?$' dovecot-dict-sql.conf.ext connect = host=127.0.0.3 dbname=mailsql user=mailsql password=somepassword map { pattern = priv/quota/storage table = quota2 username_field = username value_field = bytes } map { pattern = priv/quota/messages table = quota2 username_field = username value_field = messages } [root@postfixjail /usr/local/etc/dovecot]# grep -hv '^ *$#.*$\?$' dovecot-sql.conf.ext driver = mysql connect = host=127.0.0.3 dbname=mailsql user=mailsql password=somepassword default_pass_scheme = PLAIN-MD5 user_query = \ SELECT maildir AS home, 'vmail' AS uid, 'vmail' AS gid, \ CONCAT('*:bytes=', quota) AS quota_rule \ FROM mailbox WHERE username = '%u' AND active = 1 password_query = \ SELECT username AS user, password, \ maildir AS userdb_home, \ 'vmail' AS userdb_uid, 'vmail' AS userdb_gid, \ CONCAT('*:bytes=', quota) AS userdb_quota_rule \ FROM mailbox WHERE username = '%u' AND active = 1 iterate_query = SELECT username AS user FROM mailbox [root@postfixjail /usr/local/etc/dovecot]# uname -a FreeBSD postfixjail.mymachine.com 8.2-PRERELEASE FreeBSD 8.2-PRERELEASE #4: Sat Jan 1 23:33:01 CET 2011 root@new.mymachine.com:/usr/obj/usr/src/sys/MYKERNEL amd64 The filesystem is ZFS (is that really needed?) Any help on that? I'm helpless, went to the irc channel, but people told that my configs are right. Cheers, Laszlo

2 3

[Dovecot] Problem with requiring client certificates for external connections
by Frank Crawford 04 Jan '11

04 Jan '11

Folks, I'm trying to configure my dovecot installation to require client certificates for external/Internet connections, while still allowing my local network to not need certificates. This configuration is for Dovecot 2 (2.0.8 in Fedora 14), and I've tried to use the "remote" block to give different definitions for my local network vs the defaults. While most options seem to be set fine, if I set "auth_ssl_require_client_cert" to yes as the default, and reset it to no for my local network, dovecot still requests a client certificate and fails as one is not supplied. Am I correct that it can be reset in a "remote" block, or is it treated differently to other options? In fact do I have the configuration correct, as there doesn't really seem to be anything documenting "remote" or "remote_ip" or related items for Dovecot 2. Related to this, much of the documentation states that the variable is "ssl_require_client_cert", seems to be accepted by ignored, vs "auth_ssl_require_client_cert" which does have some effects. Also, in the configuration dump, it duplicates the netmask. The configuration is below, as generated with "dovecot -n". Regards Frank # 2.0.8: /etc/dovecot/dovecot.conf # OS: Linux 2.6.36.1 x86_64 Fedora release 14 (Laughlin) ext4 auth_ssl_require_client_cert = yes mail_location = maildir:/var/spool/maildir/%u managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mbox_write_locks = fcntl passdb { driver = pam } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = postmaster(a)crawford.emu.id.au ssl = required ssl_ca = </etc/pki/CA/cacert.pem ssl_cert = </etc/pki/tls/certs/dovecot.crt ssl_key = </etc/pki/tls/private/dovecot.key ssl_verify_client_cert = yes userdb { driver = passwd } protocol pop3 { pop3_uidl_format = %v.%u } remote 203.16.204.0/24/24 { auth_ssl_require_client_cert = no disable_plaintext_auth = no ssl = no ssl_verify_client_cert = no } remote fdd2:7aad:d478:1::/64/64 { auth_ssl_require_client_cert = no disable_plaintext_auth = no ssl = no ssl_verify_client_cert = no } remote 2001:44b8:62:140::/64/64 { auth_ssl_require_client_cert = no disable_plaintext_auth = no ssl = no ssl_verify_client_cert = no }

3 5

[Dovecot] Courier-mta with Dovecot LDA again
by komodo 04 Jan '11

04 Jan '11

Hi all Sorry for repost, but i don't believe that there is noone who know where the problem can be. At least developers should know :-) I have sent this post once, but without answer. I have setup dovecot lda instead of maildrop on my courier server. Delivery is working, sieve plugin too, but i can't figure out why lda can't send emails via sendmail (vacation). I always get error Error: Sendmail process terminated abnormally, exit status 67 And i know why, but i don't know how to setup lda to make it work . Here is .courier file where is redirect to lda. | /usr/libexec/dovecot/deliver -a $RECIPIENT -f $SENDER But the deliver does not pass recipient address to sendmail. Here is some output of strace execve("/usr/libexec/dovecot/deliver", ["/usr/libexec/dovecot/deliver", "-a", "komodo@somedomain", "-f", "someuser@somedomain"], [/* 22 vars */]) = 0 So it's clear that deliver have those variables, but then i can see this execve("/usr/sbin/sendmail", ["/usr/sbin/sendmail", "-i", "-f", "<>", "--", "someuser@somedomain"], [/* 2 vars */] <unfinished ...> And there is empty -f , so here is the problem. How should i setup this to make it work correctly ? Here is my config [root(a)OVZ.mail ~]# dovecot -n # 2.0.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-194.8.1.el5.028stab070.5 x86_64 CentOS release 5.5 (Final) disable_plaintext_auth = no hostname = ovzmail listen = 10.0.10.34 mail_location = maildir:~/Maildir managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mbox_write_locks = fcntl namespace { inbox = yes location = prefix = INBOX. separator = . type = private } namespace { location = maildir:/home/shared/Maildir prefix = spam_learner. separator = . type = public } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap sieve ssl_cert = </etc/pki/dovecot/certs/server.pem ssl_key = </etc/pki/dovecot/private/server.pem userdb { driver = prefetch } protocol lda { mail_plugins = " sieve" } protocol imap { mail_max_userip_connections = 40 } Many thanks Martin

3 7

[Dovecot] Quota ignore subfolders
by Héctor Moreno Blanco 04 Jan '11

04 Jan '11

Hello, We have dovecot 2.0.8 in our servers with Scientific Linux SL release 5.2 (Boron). We want to ignore a mailbox and its child mailboxes. A few weeks ago Timo told me to do this in dovecot.conf, create a new namespace which will be the quotaless namespace and edit the quota: namespace { inbox = yes location = prefix = INBOX. separator = . type = private } namespace { location = maildir:%h/Maildir/carpeta1 prefix = carpeta1. separator = . type = private } plugin { quota = maildir:carpeta1:ns=INBOX. quota_warning = storage=75%% /usr/local/dovecot/bin/quota-warning.sh 75 quota_warning2 = storage=90%% /usr/local/dovecot/bin/quota-warning.sh 90 } We also have passdb and userdb with ldap, with dovecot-ldap.conf: pass_filter = (&(objectClass=qmailUser)(uid=%u)(accountActive=TRUE)) pass_attrs = uid=user,userPassword=password, mailQuotaSize=quota_rule=*:bytes=%$ user_attrs = mailMessageStore=home, mailQuotaSize=quota_rule=*:bytes=%$ user_filter = (&(objectClass=qmailUser)(|(mailAlternateAddress=%u)(mail=%u)(uid=%u))(accountActive=TRUE)) We also tried the easy solution which was to indicate a quota rule in order to ignore the mailbox but with no success. It still get every mailbox to calculate the quota. We set mail_debug=yes to see if there was any error, but everything seemed to be ok. Any suggestions? Thank you very much in advanced. Héctor Moreno Blanco. ______________________ This message including any attachments may contain confidential information, according to our Information Security Management System, and intended solely for a specific individual to whom they are addressed. Any unauthorised copy, disclosure or distribution of this message is strictly forbidden. If you have received this transmission in error, please notify the sender immediately and delete it. ______________________ Este mensaje, y en su caso, cualquier fichero anexo al mismo, puede contener informacion clasificada por su emisor como confidencial en el marco de su Sistema de Gestion de Seguridad de la Informacion siendo para uso exclusivo del destinatario, quedando prohibida su divulgacion copia o distribucion a terceros sin la autorizacion expresa del remitente. Si Vd. ha recibido este mensaje erroneamente, se ruega lo notifique al remitente y proceda a su borrado. Gracias por su colaboracion. ______________________

2 1

[Dovecot] Renaming IMAP folders does not affect children
by Johannes Simon 04 Jan '11

04 Jan '11

Hi, we're using dovecot2.0 since August and very happy with it. Just recently Thunderbird users reported problems when renaming folders, and it seems that RFC 2060 (sec. 6.3.5) requires children of a renamed folder to be renamed, too. This however does not happen: Talking IMAP I get: * LIST (\HasChildren) "." "INBOX.NNN1" * LIST (\HasNoChildren) "." "INBOX.NNN1.NNN1a" . rename "INBOX.NNN1" "INBOX.NNN2" * LIST (\HasNoChildren) "." "INBOX.NNN1.NNN1a" * LIST (\HasNoChildren) "." "INBOX.NNN2" There seems to be no problem the filesystem rights, since this works: . rename "INBOX.NNN1.NNN1a" "INBOX.NNN2.NNN1a" * LIST (\HasChildren) "." "INBOX.NNN2" * LIST (\HasNoChildren) "." "INBOX.NNN2.NNN1a" Am I misunderstanding RFC 2060, or is my config wrong (doveconf -n below), or could it be a bug? Cheers, Johannes # 2.0.8 (e030df616faf): /etc/dovecot/dovecot.conf # OS: Linux 2.6.26-2-openvz-amd64 x86_64 Debian 5.0.7 default_client_limit = 2500 default_process_limit = 600 dotlock_use_excl = yes log_timestamp = "%Y-%m-%d %H:%M:%S " login_greeting = Dovecot 2 ready. mail_fsync = always mail_location = maildir:~/Maildir mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = autocreate acl managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mmap_disable = yes namespace { inbox = yes location = prefix = INBOX. separator = . type = private } namespace { list = yes location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u prefix = INBOX.shared.%%u. separator = . subscriptions = no type = shared } passdb { args = session=yes dovecot driver = pam } plugin { acl = vfile acl_shared_dict = file:/etc/dovecot/dict/shared-mailboxes autocreate = INBOX.Trash autocreate2 = INBOX.Junk autocreate3 = INBOX.Sent autocreate4 = INBOX.Junk_old autocreate5 = INBOX.Drafts autosubscribe = INBOX.Trash autosubscribe2 = INBOX.Junk autosubscribe3 = INBOX.Sent autosubscribe4 = INBOX.Drafts sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap pop3 service auth { unix_listener auth-userdb { mode = 0666 } } service dict { user = dovecot } service imap-postlogin { executable = script-login rawlog /etc/dovecot/postlogin.sh user = root } service imap { executable = imap imap-postlogin } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = blocking=yes driver = passwd } protocol imap { mail_max_userip_connections = 50 mail_plugins = autocreate acl imap_acl } protocol pop3 { mail_max_userip_connections = 3 }

2 1

[Dovecot] Doveadm search in public namespaces
by Thomas Leuxner 04 Jan '11

04 Jan '11

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Say I want to create a script to perform some 'doveadm' tasks. Is there any particular reason why "mailbox-guids" would not work for public namespaces? Let's search something to play with: $ doveadm search sentbefore 01-jan-2011 mailbox "Public/Mailing-Lists/Dovecot" adeffe1c8b7ba64bb3770000a998a2df 1021 […] Trying to fetch headers using mailbox-guids *fails*: $ doveadm fetch hdr mailbox-guid adeffe1c8b7ba64bb3770000a998a2df uid 1021 …while it works using mailbox name: $ doveadm fetch hdr mailbox Public/Mailing-Lists/Dovecot uid 1021 Seems odd. Regards Thomas -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.16 (Darwin) iEYEARECAAYFAk0XSf8ACgkQ+meF/S97aXjqggCbBAL+FFTmHRXwuxLX46vYFclr 42UAn0dSEwvUzZUy8QU/Pvux+UzVdRlB =vWk6 -----END PGP SIGNATURE-----

2 7

[Dovecot] user xxx@mydomain.com doesn't exist
by G.Nau 04 Jan '11

04 Jan '11

new setup of Dovecot 2.0.8 with postfix local users are simply defined as Linux users named xxx, yyy et cetera; IMAP access is fine with that users. Postfix is delivering mails with two domains (to xxx(a)mydomain.com or xxx(a)mydomain.org) and these are rejected by dovecot with 550: user doesn't exist. I've tested the possible usernames with "doveadm user" xxx: okay xxx(a)mydoman.com: "userdb lookup: user xxx(a)mydomain.com doesn't exist" xxx(a)mydoman.org: "userdb lookup: user xxx(a)mydomain.org doesn't exist" Dovecot2 wiki says "Dovecot doesn't care much about domains in usernames" Okay, how to I get dovecot to ignore the domain part (or accept the two defined domains) when mails are delivered from postfix? Or do I have to configure Postfix to strip the domain part before delivering to dovecot? Regards Birte Nauer

2 1

[Dovecot] Unable to solve over quota issue
by Joy 04 Jan '11

04 Jan '11

Dear All, I am using dovecot-lda to deliver the mail but unable to restrict users to recieve mails when quota becomes full. while i am using quota_full_tempfail = no in 15-lda.conf file. following is the output of doveconf -n Note: per user quota is working from ldap and as well global quota defined in 90-quota.conf file .. # 2.0.8: /usr/local/dovecot/etc/dovecot/dovecot.conf # OS: Linux 2.6.26-2-amd64 x86_64 Debian 5.0.7 base_dir = /usr/local/dovecot/var/run/dovecot/ hostname = mx1.example.in log_path = /var/log/imap login_greeting = IMAP and POP Server welcomes you. mail_location = maildir:~/Maildir mail_plugins = quota acl managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date namespace { inbox = yes location = prefix = separator = . type = private } namespace { list = children location = maildir:/home/silvereye.in/public prefix = Public. separator = . subscriptions = yes type = public } passdb { args = /usr/local/dovecot/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile:/usr/local/dovecot/dovecot-acl/acl autocreate = Sent Items autocreate2 = Drafts autocreate3 = Spam autocreate4 = Deleted Items autocreate5 = Archive autosubscribe = Sent Items autosubscribe2 = Drafts autosubscribe3 = Spam autosubscribe4 = Deleted Items autosubscribe5 = Archive quota = maildir:User quota quota_rule = *:storage=500M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = ~/.dovecot.sieve sieve_after = /usr/local/dovecot/sieve/spf.sieve sieve_before = /usr/local/dovecot/sieve/default.sieve sieve_dir = ~/sieve sieve_global_dir = /usr/local/dovecot/sieve/global/ sieve_global_path = /usr/local/dovecot/sieve/default.sieve } protocols = imap pop3 sieve service imap-login { inet_listener imap { port = 143 } } service imap-postlogin { executable = script-login /usr/local/dovecot/bin/postlogin.sh user = root } service imap { executable = /usr/local/dovecot/libexec/dovecot/imap imap-postlogin } service managesieve-login { inet_listener sieve-obsolete { port = 2000 } } service quota-warning { executable = script /usr/local/dovecot/bin/quota-warning.sh unix_listener quota-warning { user = vmail } user = dovecot } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = /usr/local/dovecot/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol sieve { managesieve_logout_format = bytes ( in=%i : out=%o ) } protocol lda { mail_plugins = quota acl sieve quota } protocol imap { mail_plugins = quota acl imap_acl autocreate imap_quota } Please let me know what is wrong with the configuration .. Thanks

3 2