January 2013 - dovecot

[Dovecot] wrong authentication for local delivery
by Averlon 06 Jan '13

06 Jan '13

Hi all there, I have a postfix/dovecot environment running with ldap authentication. I am able to deliver e-Mails to the internet and also receive them via fetchmail. I have a pure local domain (av.loc). Just for internal purpuse. For all mails where destination is a local mailbox, as for all of the local domain, delivery does not work. Here I can show some logs of such a process: +++ Here the process starts (I have sent an e-Mail to myself). Jan 6 17:31:06 f42252se dovecot: auth: Debug: auth client connected (pid=13250) Jan 6 17:31:06 f42252se dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=smtp#011nologin#011lip=192.168.110.150#011rip=192.168.110.165#011secured#011resp=<hidden> Jan 6 17:31:06 f42252se dovecot: auth: Debug: ldap(avadmin,192.168.110.165): pass search: base=ou=user,dc=averlon,dc=loc scope=onelevel filter=(&(objectClass=posixAccount)(uid=avadmin)) fields=mail,userPassword *Jan 6 17:31:06 f42252se dovecot: auth: Debug: auth(avadmin,192.168.110.165): username changed avadmin -> avadmin(a)av.loc* Jan 6 17:31:06 f42252se dovecot: auth: Debug: ldap(avadmin(a)av.loc,192.168.110.165): result: userPassword(password)=<hidden> mail(user)=avadmin(a)av.loc Jan 6 17:31:06 f42252se dovecot: auth: Debug: client out: OK#0111#011user=avadmin(a)av.loc#011mail=/home/vmail/avadmin/Maildir/ Jan 6 17:31:06 f42252se postfix/smtpd[13250]: 69FDB30007C: client=f42252ud.averlon.loc[192.168.110.165], sasl_method=PLAIN, sasl_username=avadmin(a)av.loc Jan 6 17:31:06 f42252se postfix/cleanup[13251]: 69FDB30007C: message-id=<50E9A6C8.1090805(a)av.loc> Jan 6 17:31:06 f42252se postfix/qmgr[11960]: 69FDB30007C: from=<avadmin(a)av.loc>, size=1224, nrcpt=1 (queue active) Jan 6 17:31:06 f42252se postfix/smtpd[13250]: disconnect from f42252ud.averlon.loc[192.168.110.165] Jan 6 17:31:09 f42252se postfix/pickup[11959]: 19A2E30007F: uid=5002 from=<avadmin(a)av.loc> Jan 6 17:31:09 f42252se postfix/cleanup[13251]: 19A2E30007F: message-id=<50E9A6C8.1090805(a)av.loc> Jan 6 17:31:09 f42252se postfix/qmgr[11960]: 19A2E30007F: from=<avadmin(a)av.loc>, size=1531, nrcpt=1 (queue active) Jan 6 17:31:09 f42252se postfix/pipe[13252]: 69FDB30007C: to=<avadmin(a)av.loc>, relay=spamassassin, delay=2.7, delays=0.01/0/0/2.7, dsn=2.0.0, status=sent (delivered via spamassassin service) Jan 6 17:31:09 f42252se postfix/qmgr[11960]: 69FDB30007C: removed Jan 6 17:31:09 f42252se dovecot: auth: Debug: master in: USER#0111#011avadmin(a)av.loc#011service=lda *Jan 6 17:31:09 f42252se dovecot: auth: Debug: ldap(avadmin(a)av.loc): pass search: base=ou=user,dc=averlon,dc=loc scope=onelevel filter=(&(objectClass=posixAccount)(uid=avadmin(a)av.loc)) fields=mail,userPassword* Jan 6 17:31:09 f42252se dovecot: auth: ldap(avadmin(a)av.loc): unknown user Jan 6 17:31:09 f42252se dovecot: auth: Debug: master out: NOTFOUND#0111 +++ I have configured my thunderbird to have a username to authenticate against ldap. In the first steps above the authentication of the sender works. But then, when delivering to the receiver, dovecot uses the e-Mail address of the receiver to check the password. I do not know why dovecot chechs the password of the receiver before delivery. I do neither know where to switch that off or set some changes in the configuration to avoid that process. Probably it is correct? But anyhow, the setup ldap-procedure just checks the username and no e-Mail address. Dovecot konfig: +++ # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-35-generic x86_64 Ubuntu 12.04.1 LTS auth_debug = yes auth_mechanisms = plain login cram-md5 auth_username_format = %Lu auth_verbose = yes hostname = mail.av.loc mail_gid = vmail mail_location = maildir:~/Maildir mail_privileged_group = vmail mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocols = imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0660 user = vmail } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_cipher_list = ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM ssl_key = </etc/ssl/private/dovecot.pem syslog_facility = avdove userdb { args = uid=vmail gid=vmail home=/home/vmail/%n driver = static } protocol lda { sendmail_path = /usr/sbin/sendmail } +++ As always, I would appreciate some hints. Thanks in advance. -- Signatur Averlon info Mit freundlichen Grüßen / Kind Regards Karl-Heinz Fischbach Skype: khfischbach jabber: averlon(a)jabber.org Blog: averlon.posterous.com Signatur: Diese e-mail ist unter Umständen signiert. Die Signatur entspricht dem Deutschen Signaturgesetz und entsprechenden europäischen Regelungen. Important Note: This e-mail may contain trade secrets or privileged, undisclosed or otherwise confidential information. If you have received this e-mail in error, you are hereby notified that any review, copying or distribution of it is strictly prohibited. Please inform us immediately and destroy the original transmittal.

1 0

[Dovecot] dovecot as layer between postfix and thunderbird
by martin svensson 05 Jan '13

05 Jan '13

Hello, im all new to this but feel i want to have a dedicated server to handle my mails from Gmail and Hotmail Basically, i installed SMS, superb Mini Server (based on slackware), and with that default install i got: dovecot, postfix, fetchmail and sendmail. The postfix part seems to work according to a "telnet localhost 25", now i want to procede with dovecot, as i understand it, its the middle layer between (in my case) postfix and thunderbird. What i expect in the very end is a dedicated server who regulary checks and fetches mails, and lets me have all contacts info in the (already up and running) LDAP server. When i start thunderbird, i want it to go grab those mails from my local machine I am, ofcourse all over manpages, HOWTOs, guides and google, but would certainly appriciate further help and points in the right direction My apologises for any weird beginner mistakes in this post

5 4

[Dovecot] Disable auth-worker log message?
by Martin Rabl 05 Jan '13

05 Jan '13

Hi, is it possible to disable the line auth-worker(17128): mysql(127.0.0.1): Connected to database mailserver in dovecot 2.1.12? Logging is in "standard" mode. Thank you, Martin

2 1

[Dovecot] permission denied message
by Averlon 05 Jan '13

05 Jan '13

Hi all, I have run successfully a postfix/dovecot installation some time ago. Now, setting up a new server, I am lost with some error messages. I would appreciate some help. +++ f42252se dovecot: pop3-login: Error: auth: connect(login) in directory / failed: Permission denied (euid=113(<getpwu id() error>) egid=65534(<getgrgid() error>) missing +x perm: /, dir owned by 5000:5000 mode=0750) +++ This is the error message I get. "directory /" is a little bit courious to me. Here my dovecot config: +++ # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-35-generic x86_64 Ubuntu 12.04.1 LTS auth_debug = yes auth_mechanisms = plain login digest-md5 cram-md5 auth_verbose = yes hostname = mail.av.loc mail_debug = yes mail_gid = vmail mail_location = maildir:~/Maildir mail_privileged_group = vmail mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocols = imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0600 user = postfix } unix_listener auth-userdb { group = vmail mode = 0660 user = vmail } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_cipher_list = ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM ssl_key = </etc/ssl/private/dovecot.pem syslog_facility = dovecot userdb { args = uid=vmail gid=vmail home=/home/vmail/%d/%n driver = static } +++ You probably see it immediatly what I fail to see. Thanks in advance -- Signatur Averlon info Mit freundlichen Grüßen / Kind Regards Karl-Heinz Fischbach Guiding Principle Tel.: +49 (8121) 7922532 Skype: khfischbach jabber: averlon(a)jabber.org Blog: averlon.posterous.com Signatur: Diese e-mail ist unter Umständen signiert. Die Signatur entspricht dem Deutschen Signaturgesetz und entsprechenden europäischen Regelungen. Important Note: This e-mail may contain trade secrets or privileged, undisclosed or otherwise confidential information. If you have received this e-mail in error, you are hereby notified that any review, copying or distribution of it is strictly prohibited. Please inform us immediately and destroy the original transmittal.

2 1

[Dovecot] About the Dovecot Missing mail.
by Vilson Lai 05 Jan '13

05 Jan '13

Dear Sir and/or Madam, I'm the newbie for using Linux, and now our company find the freelancer to change the mbox to maildir. we found that we have mail loss with error massage(ERROR: Connection dropped by IMAP server. Query: EXPUNGE), after that our freelancer do something to let this massage disappear. But now will still found we have mail loss. What can I do? I found a similar case in this page, but I can't found the solution, anyone can help me? URL: http://www.dovecot.org/list/dovecot/2011-December/062632.html Best Regards, Vilson Lai

3 4

[Dovecot] permission denied message
by Averlon 05 Jan '13

05 Jan '13

Hi all there - sorry I have to repeat the mail since I got the message it was not delivered correctly. Hi all, I have run successfully a postfix/dovecot installation some time ago. Now, setting up a new server, I am lost with some error messages. I would appreciate some help. +++ f42252se dovecot: pop3-login: Error: auth: connect(login) in directory / failed: Permission denied (euid=113(<getpwu id() error>) egid=65534(<getgrgid() error>) missing +x perm: /, dir owned by 5000:5000 mode=0750) +++ This is the error message I get. "directory /" is a little bit courious to me. Here my dovecot config: +++ # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-35-generic x86_64 Ubuntu 12.04.1 LTS auth_debug = yes auth_mechanisms = plain login digest-md5 cram-md5 auth_verbose = yes hostname = mail.av.loc mail_debug = yes mail_gid = vmail mail_location = maildir:~/Maildir mail_privileged_group = vmail mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocols = imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0600 user = postfix } unix_listener auth-userdb { group = vmail mode = 0660 user = vmail } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_cipher_list = ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM ssl_key = </etc/ssl/private/dovecot.pem syslog_facility = dovecot userdb { args = uid=vmail gid=vmail home=/home/vmail/%d/%n driver = static } +++ You probably see it immediatly what I fail to see. Thanks in advance -- Signatur Averlon info Mit freundlichen Grüßen / Kind Regards Karl-Heinz Fischbach Skype: khfischbach jabber: averlon(a)jabber.org Blog: averlon.posterous.com Signatur: Diese e-mail ist unter Umständen signiert. Die Signatur entspricht dem Deutschen Signaturgesetz und entsprechenden europäischen Regelungen. Important Note: This e-mail may contain trade secrets or privileged, undisclosed or otherwise confidential information. If you have received this e-mail in error, you are hereby notified that any review, copying or distribution of it is strictly prohibited. Please inform us immediately and destroy the original transmittal.

1 1

[Dovecot] doveadm backup issue with ACL plugin enabled
by Thomas Leuxner 05 Jan '13

05 Jan '13

Hi, when trying to backup mailboxes I noticed some hiccups when the ACL plugin is enabled. It works fine with ACL disabled: $ doveadm -o plugin/quota= backup -u tlx(a)leuxner.net mdbox:/home/backups/tlx/mdbox However, enabled (and w/ a mailbox actually using ACLs) the following error occurs: $ doveadm -o plugin/quota= backup -u tlx(a)leuxner.net mdbox:/home/backups/tlx/mdbox dsync(tlx(a)leuxner.net): Error: Couldn't update mailbox <name> metadata: Permission denied I tried to override the ACL plugin via '-o' to no avail, but I may be using the wrong syntax there. Regards Thomas -- # 2.2.alpha1 (cd093d05037e): /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-0.bpo.4-amd64 x86_64 Debian 6.0.6 auth_cache_size = 16 k auth_verbose = yes mail_location = mdbox:~/mdbox mail_plugins = acl quota stats mailbox_list_index = yes namespace { list = yes location = mdbox:/var/vmail/public prefix = Public/ separator = / subscriptions = no type = public } namespace inbox { hidden = no inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / type = private } passdb { args = username_format=%u /var/vmail/auth.d/%d/passwd driver = passwd-file } plugin { acl = vfile:/var/vmail/conf.d/%d/acls:cache_secs=300 mail_log_events = expunge mailbox_delete quota = dict:user::file:%h/mdbox/dovecot-quota quota_rule = *:storage=1GB quota_rule2 = Trash:storage=+10%% sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_global_dir = /var/vmail/conf.d/%d/sieve stats_refresh = 30s stats_track_cmds = yes } protocols = " imap lmtp" quota_full_tempfail = yes service auth-worker { unix_listener auth-worker { user = doveauth } user = doveauth } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = doveauth } service imap-login { inet_listener imap { address = 1.2.3.4 port = 143 } inet_listener imaps { port = 0 } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } service stats { fifo_listener stats-mail { mode = 0600 user = vmail } } ssl_ca = </etc/ssl/certs/SSL123_CA_Bundle.pem ssl_cert = </etc/ssl/certs/host_domain_tld.crt ssl_key = </etc/ssl/private/host_domain_tld.key syslog_facility = local1 userdb { args = username_format=%u /var/vmail/auth.d/%d/passwd driver = passwd-file } verbose_proctitle = yes protocol lmtp { mail_plugins = acl quota stats sieve } protocol imap { mail_max_userip_connections = 20 mail_plugins = acl quota stats mail_log notify imap_acl imap_quota imap_stats }

2 5

[Dovecot] imap dumps core when connecting with mutt
by Arthur Titeica 05 Jan '13

05 Jan '13

Hello, I'm trying to investigate a problem with dovecot/imap dumping core when connecting connecting mith mutt (everything else works). imap(user@domain): Fatal: master: service(imap): child 31752 killed with signal 11 (core dumped) I managed to create a core file and passed that to gdb. The log is here [1]. I hope this helps - please tell me what else would be needed if not. Thanks. [1] http://paste.kde.org/622574/ -- Arthur Titeica

2 5

[Dovecot] assertion failed: (uidmap[src].real_uid == uid)
by Chris Vanden Berghe 04 Jan '13

04 Jan '13

Hi all, Does anyone have an idea what could cause the below error? Dec 31 17:03:46 bobodioulasso dovecot: imap(bla(a)bla.org): Panic: file virtual-sync.c: line 542 (virtual_sync_mailbox_box_remove): assertion failed: (uidmap[src].real_uid == uid) Dec 31 17:03:46 bobodioulasso dovecot: imap(bla(a)bla.org): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x3c14a) [0x7fe492d1314a] -> /usr/lib/dovecot/libdovecot.so.0(+0x3c18e) [0x7fe492d1318e] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7fe492cea81a] -> /usr/lib/dovecot/modules/lib20_virtual_plugin.so(+0x9271) [0x7fe49169c271] -> /usr/lib/dovecot/modules/lib20_virtual_plugin.so(virtual_storage_sync_init+0x160d) [0x7fe49169dbcd] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_sync_init+0x33) [0x7fe492fccd43] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_sync+0x27) [0x7fe492fcce67] -> dovecot/imap(cmd_close+0x71) [0x7fe493484951] -> dovecot/imap(command_exec+0x3c) [0x7fe49348c29c] -> dovecot/imap(+0x112ee) [0x7fe49348b2ee] -> dovecot/imap(+0x1139a) [0x7fe49348b39a] -> dovecot/imap(client_handle_input+0x11d) [0x7fe49348b5fd] -> dovecot/imap(client_input+0x65) [0x7fe49348bef5] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7fe492d20006] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xa7) [0x7fe492d20cb7] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7fe492d1fa18] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7fe492d0c463] -> dovecot/imap(main+0x297) [0x7fe4934838c7] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xed) [0x7fe49293976d] -> dovecot/imap(+0x9a41) [0x7fe493483a41] Dec 31 17:03:46 bobodioulasso dovecot: imap(bla(a)bla.org): Fatal: master: service(imap): child 32250 killed with signal 6 (core dumps disabled) The error only occurs for a single user on the system. This user uses Apple Mail client. I'm not subscribed to the Dovecot mailing list, so please cc: me on replies. Regards, Chris. --- # dovecot -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-32-generic x86_64 Ubuntu 12.10 ext3 auth_verbose = yes log_timestamp = "%Y-%m-%d %H:%M:%S " mail_location = maildir:/var/vmail/%u mail_privileged_group = mail maildir_stat_dirs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date namespace { inbox = yes location = maildir:/var/vmail/%u prefix = separator = . } namespace { location = virtual:/var/vmail/virtual prefix = virtual. separator = . } passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { fts = squat fts_squat = partial=4 full=10 } protocols = imap service auth { unix_listener /var/spool/postfix/private/auth-client { group = postfix mode = 0660 user = postfix } unix_listener auth-master { group = vmail mode = 0600 user = vmail } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } } service imap-login { inet_listener imap { address = localhost port = 143 } inet_listener imaps { address = * port = 993 } } ssl_cert = </etc/ssl/certs/bobo.crt ssl_key = </etc/ssl/private/bobo.key userdb { args = uid=5000 gid=5000 home=/var/vmail/%u driver = static } protocol imap { imap_idle_notify_interval = 870 secs mail_max_userip_connections = 50 mail_plugins = fts fts_squat virtual } protocol lda { mail_plugins = sieve virtual postmaster_address = postmaster(a)bla.org }

2 1

[Dovecot] Non-standard fields?
by Attila Nagy 04 Jan '13

04 Jan '13

Hi, Non-standard fields are mentioned here: http://wiki2.dovecot.org/MailboxFormat/Maildir and they are stated as currently not used. Questions: - am I right that if they will be used, they will be key=value pairs, like fields in the base filename? Like: 1035478339.27041_118.foo.org,S=1000,W=1030:2,S,X=12,A=something - or are they supposed to be flags, like: 1035478339.27041_118.foo.org,S=1000,W=1030:2,S,ABCD - are there any plans to utilize these? Thanks,

2 2