March 2016 - dovecot - dovecot.org

mailbox prefix
by michael crane 29 Mar '16

29 Mar '16

dovecot version 2.2.13 hello, I try to make a new server just for me after having old one working for ages with Dovecot, Fetchmail, Squirrelmail, Procmail making new one with above plus Postfix using Maildir structure. I am having a bit of trouble understanding exactly what the namespace and prefix are. Is the "private/" prefix an internal thing with Dovecot ? Or is it supposed to be a real directory ? I'm not quite sure how to properly address the INBOX in Procmail, Squirrelmail, Postfix config. for example am I supposed to say inbox is ".private/.INBOX" cheers zemlik

2 1

Some mails seen only via POP3 but not via IMAP
by Nikolaos Milas 29 Mar '16

29 Mar '16

2 1

First dovecot install
by Jason Pruim 29 Mar '16

29 Mar '16

Hey Everyone, I am trying to get postfix and dovecot to talk to each other… postfix is up and running, dovecot allows me to telnet into it both locally and remotely, but when I try to do: “a login “username” “password” I get an authentication failed error… Here is my dovecot -n: [ec2-user@ip-172-31-24-2 dovecot]$ dovecot -n # 2.2.10: /etc/dovecot/dovecot.conf # OS: Linux 4.1.17-22.30.amzn1.x86_64 x86_64 auth_debug_passwords = yes auth_mechanisms = plain login first_valid_uid = 200 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes mail_debug = yes mail_gid = 12 mail_home = /mnt/vmail/%d/%n mail_location = maildir:~ mail_uid = 200 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mbox_write_locks = fcntl passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { autocreate = Trash autocreate2 = Sent autocreate3 = Junk autosubscribe = Trash autosubscribe2 = Sent autosubscribe3 = Junk sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_global_dir = /etc/dovecot/sieve/global/ sieve_global_path = /etc/dovecot/sieve/default.sieve sieve_max_script_size = 1M } protocols = imap lmtp sieve pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = ec2-user } unix_listener auth-userdb { group = mail mode = 0600 user = mailreader } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } } ssl = required ssl_cert = </etc/pki/tls/certs/server.pem ssl_key = </etc/pki/tls/private/server.pem userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocol lmtp { hostname = mail.primelashdiva.info mail_plugins = " autocreate sieve quota" postmaster_address = postmaster(a)primelashdiva.info } protocol lda { auth_socket_path = /var/run/dovecot/auth-master info_log_path = /var/log/dovecot-lda.log log_path = /var/log/dovecot-lda-errors.log mail_plugins = " sieve" } protocol sieve { info_log_path = /var/log/dovecot-sieve.log log_path = /var/log/dovecot-sieve-errors.log managesieve_implementation_string = dovecot managesieve_max_line_length = 65536 } I’m planning to use user accounts for it to connect to… I’m guessing I’m missing something simple, but I don’t know where to look… Any pointers? Thanks in advance! Jason Pruim pruimj(a)gmail.com

2 1

VS: Re: Migrating to dovecot from gmail apps
by Aki Tuomi 28 Mar '16

28 Mar '16

Primarily german ---Aki TuomiDovecot oy-------- Alkuperäinen viesti --------Lähettäjä: Phil Lello <phil(a)dunlop-lello.uk> Päivämäärä: 28.3.2016 19.34 (GMT+02:00) Saaja: Sven Hartge <sven(a)svenhartge.de> Kopio: dovecot(a)dovecot.org Aihe: Re: Migrating to dovecot from gmail apps Many thanks for the replies, I'm going to take a look at OX. Out of curiousity, does anyone know if Open-Xchange is primarily German or American? I'm trying to favour European projects/products as I've realised too much the tech I use is reliant on the US. Phil On Mon, Mar 28, 2016 at 5:14 PM, Sven Hartge <sven(a)svenhartge.de> wrote: > mick.crane <mick.crane(a)gmail.com> wrote: > > On Mon, March 28, 2016 4:13 pm, mj wrote: > > >>>> *Is there currently a good webmail interface to dovecot, > > > squirrelmail > > Squirrelmail is dead. > > S! > > -- > Sigmentation fault. Core dumped. >

1 0

Migrating to dovecot from gmail apps
by Phil Lello 28 Mar '16

28 Mar '16

Hi, I'm considering migrating away from gmail for my (one-man) company, and I'm trying to decide if dovecot is the right option (I'm committed to self-hosting). I'm a developer, so happy to do my own tooling if needed. *Is there currently a good webmail interface to dovecot, or work-in progress?* If not, would a web interface be out-of-scope for dovecot? I want to use SAML for authentication, so a solution that relies on POP/IMAP doesn't meet my needs - unless I add Kerberos into the mix, which is an additional learning curve, and possibly not widely supported. *Is there currently a good web admin interface to dovecot, or work-in-progress?* If not, would a web interface be out-of-scope? Since I prefer using password-protected SSH keys for shell access, and don't want to tie myself to a laptop (and would hate to use vim on a 3G/4G tablet), I'd like to be able to add/remove aliases and play with SIEVE and ACLs through any available browser. *How's the work on sharing messages between folders progressing?* Finally, and I hope you don't mind me asking, are you aware of a good JAVA based alternative to dovecot? I quite like the idea of using lucene indexing on mailboxes, so reducing the number of dependencies has a certain appeal. Best wishes, Phil Lello

7 7

Email hosting provider
by Andre Rodier 28 Mar '16

28 Mar '16

Hello, Sorry if I am off topic a little. I am looking for an email host provider that supports dovecot, sieve and manage sieve. Ideally with the roundcube webmail and managesieve plugin Better if it is in Europe or switzerland. I don't mind paying a little. Thanks, André.

6 7

Enabling tcpwrappers
by kepa 28 Mar '16

28 Mar '16

Hi all, I would like use Dovecot with tcpwrappers enabled to control remote access using hosts.deny and hosts.allow. A google search gave this response from the listserve, but it is several years ago: http://www.dovecot.org/list/dovecot/2013-April/089455.html Are these instructions for configuring the conf files still valid? Mainly: /etc/dovecot/dovecot.conf login_access_sockets = tcpwrap conf.d/10-master.conf: service tcpwrap { unix_listener login/tcpwrap { group = $default_login_user mode = 0600 user = $default_login_user } } Also: Which version of Dovecot at least is needed to enable tcpwrappers? Does the tcpwrap option need to be enabled during configure and build or is it already (and enabled in any distro binary repositories)? And is it dovecot, imap, or imaps in the hosts.allow/deny file as the service name? Thanks! Kepa

2 1

Fw: VS: Re: Need help solving issue
by MARIA jamieson 27 Mar '16

27 Mar '16

On Saturday, March 26, 2016 1:04 PM, MARIA jamieson <jamieson.maria(a)yahoo.com> wrote: Yes, I am trying it over ssl. Everything works as in I can connect to my mail server and establish an ssl connection. There's no error with SSL. It's just auth mechanism having a environment corruption error. I am not the only one. You can google around and find many run into this situation and no one could help. Most just delete the dovecot and postfix and start over again. However, I cannot afford that because it took me at least 3 months to setup dovecot correctly with postfix to use virtual users. I don't have the time to spend another 3 months to set it up. The problem lies with auth and I think this is the only issue and it has to be that something is missing either in the configs or a file was deleted or link to it was broken. I am sure after fixing this issue. I will have a working mail system again. On Saturday, March 26, 2016 2:40 AM, Aki Tuomi <aki.tuomi(a)dovecot.fi> wrote: You should reply to list and not just me. Did you try over SSL? ---Aki TuomiDovecot oy-------- Alkuperäinen viesti --------Lähettäjä: MARIA jamieson <jamieson.maria(a)yahoo.com> Päivämäärä: 26.3.2016 6.28 (GMT+02:00) Saaja: aki.tuomi(a)dovecot.fi Aihe: Re: Need help solving issue doveconf -n output: doveconf -n # 2.2.18: /local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.8 (0c4ae064f307+) # OS: FreeBSD 10.2-RELEASE amd64 ufs auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login auth_verbose = yes default_login_user = dovecot dict { quota = mysql:/local/etc/dovecot-dict-quota.conf } disable_plaintext_auth = no first_valid_gid = 125 first_valid_uid = 125 info_log_path = /var/log/dovecot.log log_path = /var/log/dovecot.log mail_debug = yes mail_location = maildir:/local/virt/%d/%n/ mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate passdb { args = /local/etc/dovecot/dovecot-sql.conf driver = sql name = sql } protocols = imap service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-master { group = mode = 0600 user = } } service imap-login { inet_listener imaps { port = 993 ssl = yes } } ssl = required ssl_cert = </etc/postfix/sslmain.cert ssl_cipher_list = ALL:!LOW:!SSLv2:!SSLV3 ssl_key = </etc/postfix/sslmain.key ssl_protocols = !SSLv3 !SSLv2 userdb { args = /local/etc/dovecot/dovecot-sql.conf driver = sql name = sql } verbose_proctitle = yes verbose_ssl = yes protocol lda { postmaster_address = postmaster(a)mydomain.com sendmail_path = /usr/sbin/sendmail } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep mail_plugins = quota imap_quota } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } local [ipaddress3] { protocol imap { ssl_cert = </etc/postfix/ssl42.cert ssl_key = </etc/postfix/ssl42.key } } local [ipaddress4] { protocol imap { ssl_cert = </etc/postfix/ssl43.crt ssl_key = </etc/postfix/ssl43.pem } }Below is output of postconf -npostconf -n broken_sasl_auth_clients = yes command_directory = /local/sbin config_directory = /local/etc/postfix daemon_directory = /local/libexec/postfix data_directory = /var/db/postfix debug_peer_list = mydomain.com debugger_command = PATH=/bin:/usr/bin:/local/bin:/usr/X11R6/bin ddd $daemon_directory/$process_name $process_id & sleep 5 disable_vrfy_command = yes html_directory = /local/share/doc/postfix inet_interfaces = [all my ip addresses here],localhost,127.0.0.1 inet_protocols = all local_recipient_maps = $virtual_mailbox_maps mail_owner = postfix mailq_path = /local/bin/mailq manpage_directory = /local/man mydestination = $myhostname, localhost.$mydomain, localhost, mail.$mydomain, mail2.$mydomain mydomain = localhost myhostname = $mydomain mynetworks = [my own ip addresses here], localhost, 127.0.0.1, localhost.localhost mynetworks_style = host newaliases_path = /local/bin/newaliases proxy_read_maps = $smtpd_sender_login_maps $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $transport_maps $mynetworks $virtual_mailbox_limit_maps queue_directory = /var/spool/postfix readme_directory = /local/share/doc/postfix sample_directory = /local/etc/postfix sendmail_path = /local/sbin/sendmail setgid_group = maildrop smtp_sasl_auth_enable = yes smtp_sasl_password_maps = proxy:mysql:/local/etc/postfix/mysql_virtual_mailbox_maps.cf smtp_tls_mandatory_protocols = !SSLv2,!SSLv3 smtp_tls_note_starttls_offer = yes smtp_tls_protocols = !SSLv2,!SSLv3 smtp_use_tls = yes smtpd_recipient_restrictions = permit_mynetworks permit_sasl_authenticated reject_non_fqdn_hostname reject_non_fqdn_sender reject_non_fqdn_recipient reject_unauth_pipelining reject_invalid_hostname reject_rbl_client list.dsbl.org reject_rbl_client bl.spamcop.net reject_rbl_client sbl-xbl.spamhaus.org reject_unknown_reverse_client_hostname reject_unknown_client reject_unauth_destination smtpd_relay_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination smtpd_sasl_auth_enable = yes smtpd_sasl_authenticated_header = yes smtpd_sasl_local_domain = $myhostname smtpd_sasl_path = private/auth smtpd_sasl_type = dovecot smtpd_sender_login_maps = proxy:mysql:/local/etc/postfix/mysql_virtual_mailbox_maps.cf smtpd_sender_restrictions = permit_sasl_authenticated, permit_mynetworks smtpd_timeout = 300s smtpd_tls_auth_only = yes smtpd_tls_cert_file = /etc/ssl/postfix/mail.mydomain.crt smtpd_tls_key_file = /etc/ssl/postfix/mail.mydomain.pem smtpd_tls_loglevel = 1 smtpd_tls_mandatory_protocols = !SSLv2,!SSLv3,TLSv1,TLSv1.1,TLSv1.2 smtpd_tls_protocols = !SSLv2,TLSv1,TLSv1.1,!SSLv3,TLSv1.2 smtpd_tls_received_header = yes smtpd_tls_security_level = encrypt smtpd_tls_session_cache_timeout = 3600s soft_bounce = no tls_random_source = dev:/dev/urandom unknown_local_recipient_reject_code = 550 virtual_alias_maps = proxy:mysql:/local/etc/postfix/mysql_virtual_alias_maps.cf virtual_gid_maps = static:125 virtual_mailbox_base = /local/virtual/ virtual_mailbox_domains = proxy:mysql:/local/etc/postfix/mysql_virtual_domains_maps.cf virtual_mailbox_limit = 51200000 virtual_mailbox_limit_maps = proxy:mysql:/local/etc/postfix/mysql_virtual_mailbox_limit_maps.cf virtual_mailbox_maps = proxy:mysql:/local/etc/postfix/mysql_virtual_mailbox_maps.cf virtual_minimum_uid = 125 virtual_transport = virtual virtual_uid_maps = static:125 postconf: warning: /local/etc/postfix/main.cf: unused parameter: smtpd_sasl_password_maps=proxy:mysql:/local/etc/postfix/mysql_virtual_mailbox_maps.cf postconf: warning: /local/etc/postfix/main.cf: unused parameter: anonymousbroken_sasl_auth_clients=yes postconf: warning: /local/etc/postfix/main.cf: unused parameter: virtual_maildir_limit_message="Sorry, this user has overdrawn their diskspace quota. Please try again later." postconf: warning: /local/etc/postfix/main.cf: unused parameter: virtual_mailbox_limit_override=yes postconf: warning: /local/etc/postfix/main.cf: unused parameter: virtual_overquota_bounce=yes postconf: warning: /local/etc/postfix/main.cf: unused parameter: virtual_create_maildirsize=yes postconf: warning: /local/etc/postfix/main.cf: unused parameter: virtual_mailbox_extended=yes On Friday, March 25, 2016 2:41 PM, "aki.tuomi(a)dovecot.fi" <aki.tuomi(a)dovecot.fi> wrote: > On March 25, 2016 at 6:48 PM MARIA jamieson <jamieson.maria(a)yahoo.com> wrote: > > > Hi, I am using Dovecot 2.2.18 and have migrated from a 1.x versions. After > this migration I had several errors and obsolete errors in logs. I fixed them > and after all that I finally was able to run postfix and dovecot again. > The problem I have facing right now is that in the mail logs and in the > dovecot logs. I am getting auth errors. > In mail log the postfix is spitting out: " fatal: no SASL authentication > mechanisms" > Dovecot is spitting this out "imap-login : Auth process broken (disconnected > before auth was ready, waited 0 secs): ,user<>, the shows client ip, my server > ip and then the 0 seconds connection etc. > Error: auth: environment corrupt; missing value for DOVECOT_" > > That is what it spits out. I asked for help and many threads.I am using > freebsd 10.2. I do use mysql for database. I need someone to explain what the > error means and how I can fix it? > Thank you for your time! Hi! Can you provide your postconf -n and doveconf -n output? This sounds like configuration error. Aki Tuomi Dovecot Oy

2 2

Dovecot on FreeBSD 10.1
by Larry Rosenman 27 Mar '16

27 Mar '16

I'll take a look when I get home > Hi Larry, I’m getting this error: cat /var/log/maillog Mar 25 19:39:56 beastie dovecot: auth: Error: auth: environment corrupt; missing value for DOVECOT_ Mar 25 19:39:56 beastie dovecot: auth: Fatal: unsetenv(RESTRICT_SETUID) failed: Bad address Mar 25 19:39:56 beastie dovecot: master: Error: service(auth): command startup failed, throttling for 2 secs cat /var/log/dovecot-info.log Mar 25 19:39:41 auth: Debug: Loading modules from directory: /usr/local/lib/dovecot/auth Mar 25 19:39:41 auth: Debug: Read auth token secret from /var/run/dovecot/auth-token-secret.dat Mar 25 19:39:41 imap-login: Info: Disconnected: Auth process broken (disconnected before auth was ready, waited 0 secs): user=<>, rip=::1, lip=::1, secured, session= Mar 25 19:39:49 master: Info: Dovecot v2.2.22 (fe789d2) starting up for imap, lmtp Mar 25 19:39:56 auth: Debug: Loading modules from directory: /usr/local/lib/dovecot/auth Mar 25 19:39:56 auth: Debug: Wrote new auth token secret to /var/run/dovecot/auth-token-secret.dat Mar 25 19:39:56 imap-login: Info: Disconnected: Auth process broken (disconnected before auth was ready, waited 0 secs): user=<>, rip=::1, lip=::1, secured, session= I’m running mariadb100-server-10.0.23, and I tried to recompile every dependencies for dovecot, postfix, mariadb-server without any luck. /Søren

2 4

Re: IMAP Idle
by Joseph Tam 26 Mar '16

26 Mar '16

>> The IDLE disconnection timeout is hardwired in the Dovecot code >> >> http://wiki.dovecot.org/Timeouts >> >> It's set to the RFC minimum of 30min. > > I am ok if connection is closed automatically after 30 min if client is not > responding but connection is not being closed even after 2 days. Hmm. I can't think of why dovecot wouldn't time out. I think maybe the problem is with your webmail system -- it's not detecting when a client connection goes away and releasing all the resources associated with that user. This is not a typical problem though -- most webmail software do not keep persistent IMAP connections open during a session unless they use some IMAP proxy. Are your IMAP connections connected to the webmail server or an IMAP proxy, and is that connection active (despite webmail user disappearing)? Joseph Tam <jtam.home(a)gmail.com>

1 0