November 2018 - dovecot

please reply
by lty＠cndns.com 14 Nov '18

14 Nov '18

Is the dovecot question on this mailing list?

2 1

Trying to do antispam with Sieve
by Adi Pircalabu 14 Nov '18

14 Nov '18

Hi, Using https://wiki.dovecot.org/HowTo/AntispamWithSieve I'm trying to execute scripts when moving to/from Spam folder, however nothing's happening. The actions are: 1. Move to Spam: redirect :copy "spamcop_spam(a)domain.local"; 2. Move from Spam: redirect :copy "spamcop_ham(a)domain.local"; Here's the configuration I'm working with: doveconf: Warning: service anvil { client_limit=1000 } is lower than required under max. load (1153) # Pigeonhole version 0.4.16 (fed8554) # OS: Linux 4.14.80-6.el7xen.x86_64 x86_64 CentOS Linux release 7.5.1804 (Core) ext4 auth_mechanisms = plain login digest-md5 cram-md5 apop auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890&.-_@' disable_plaintext_auth = no first_valid_uid = 30 imap_client_workarounds = delay-newmail imap_logout_format = rcvd=%i, sent=%o mail_attribute_dict = file:/var/qmail/mailnames/%Ld/dovecot-attributes mail_fsync = never mail_home = /var/qmail/mailnames/%Ld/%Ln mail_location = maildir:/var/qmail/mailnames/%Ld/%Ln/Maildir mail_log_prefix = "service=%s, user=%u, ip=[%r]. " mail_max_userip_connections = 100 mail_plugins = " quota" mailbox_list_index = yes maildir_very_dirty_syncs = yes managesieve_logout_format = rcvd=%i, sent=%o managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext imapflags notify imapsieve mmap_disable = yes namespace { hidden = no list = children location = maildir:/var/qmail/mailnames/%Ld/%%Ln/Maildir:INDEXPVT=/var/qmail/mailnames/%Ld/%Ln/user/%%u/Maildir prefix = Other Users.%%n. separator = . subscriptions = no type = shared } namespace { list = children location = maildir:/var/qmail/mailnames/%Ld/public/Maildir:INDEXPVT=/var/qmail/mailnames/%Ld/%Ln/public/Maildir prefix = Public. separator = . subscriptions = no type = public } namespace inbox { inbox = yes location = mailbox Archives { auto = subscribe special_use = \Archive } mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Spam { auto = subscribe autoexpunge = 90 days special_use = \Junk } mailbox Templates { auto = subscribe } mailbox Trash { auto = subscribe special_use = \Trash } prefix = INBOX. separator = . type = private } passdb { driver = plesk } plugin { acl = vfile acl_shared_dict = file:/var/qmail/mailnames/%Ld/shared-mailboxes imapsieve_mailbox1_before = file:/usr/lib64/dovecot/sieve/report-spam.sieve imapsieve_mailbox1_causes = COPY imapsieve_mailbox1_name = Spam imapsieve_mailbox2_before = file:/usr/lib64/dovecot/sieve/report-ham.sieve imapsieve_mailbox2_causes = COPY imapsieve_mailbox2_from = Spam imapsieve_mailbox2_name = * quota = maildir:User quota quota_grace = 0 quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=99%% quota-warning 99 %u sieve = ~/.dovecot.sieve sieve_after = /etc/dovecot/sieve/after sieve_dir = ~/sieve sieve_extensions = +notify +imapflags sieve_global_extensions = +vnd.dovecot.pipe +vnd.dovecot.environment sieve_pipe_bin_dir = /usr/lib64/dovecot/sieve sieve_plugins = sieve_imapsieve sieve_extprograms } pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_logout_format = rcvd=%i, sent=%o, top=%t/%p, retr=%r/%b, del=%d/%m, size=%s protocols = imap pop3 sieve service auth-worker { group = user = } service auth { group = unix_listener auth-userdb { group = popuser mode = 0600 user = popuser } user = } service imap-login { process_limit = 850 service_count = 1 } service imap { process_limit = 700 service_count = 1 } service pop3 { process_limit = 700 service_count = 1 } service quota-warning { executable = script /usr/local/bin/mail-quota-warning.sh group = popuser unix_listener quota-warning { group = popuser user = popuser } user = popuser } ssl_cert = </usr/local/psa/admin/conf/httpsd.pem ssl_cipher_list = HIGH:!aNULL:!MD5 ssl_key = # hidden, use -P to show it ssl_protocols = TLSv1 TLSv1.1 TLSv1.2 userdb { args = uid=popuser gid=popuser driver = static } protocol imap { imap_metadata = yes mail_plugins = " quota imap_quota acl imap_acl imap_sieve" } protocol pop3 { pop3_uidl_format = UID%u-%v } protocol lda { mail_fsync = optimized mail_plugins = " quota sieve" } protocol lmtp { mail_fsync = optimized } /usr/lib64/dovecot/sieve/report-spam.sieve contains: require ["vnd.dovecot.pipe", "copy", "imapsieve", "environment", "variables"]; redirect :copy "spamcop_spam(a)domain.local"; /usr/lib64/dovecot/sieve/report-ham.sieve contains: require ["vnd.dovecot.pipe", "copy", "imapsieve", "environment", "variables"]; redirect :copy "spamcop_ham(a)domain.local"; I must be missing something obvious. Thanks, -- Adi Pircalabu

2 5

Sync in the 'new' folder on the standby server
by lty＠cndns.com 14 Nov '18

14 Nov '18

DOVEADM SYNC -U USERNAME(a)EXAMPLE.COM TCP:10.10.1.125:1111 Online server mail is in the cur directory, but the backup server mail is in the new directory

1 0

dovecot lmtp thinks that "disk quota exceeded" is "internal error"
by Arkadiusz Miśkiewicz 14 Nov '18

14 Nov '18

2.2.36 (not migrated to 2.3 yet) reports such problem: > Nov 13 15:50:58 mbox dovecot: lmtp(xxx): session=<ACYRCtLk6ltiEQAALZVUYQ>, Error: open(/var/mail/xxx/mailboxes.lock1bf6ad16b7b8b703) failed: Disk quota exceeded > Nov 13 15:50:58 mbox dovecot: lmtp(xxx): session=<ACYRCtLk6ltiEQAALZVUYQ>, Error: Couldn't create mailbox list lock /var/mail/xxx/mailboxes.lock: file_create_locked(/var/mail/xxx/mailboxes.lock) failed: safe_mkstemp(/var > /mail/xxx/mailboxes.lock) failed: Disk quota exceeded > Nov 13 15:50:58 mbox dovecot: lmtp(awypior): session=<ACYRCtLk6ltiEQAALZVUYQ>, msgid=<db663455902e1b3faa53f344dc353870@xxx>: save failed to open mailbox INBOX.Spam: Internal error occurred. Refer to server log for more informat > ion. [2018-11-13 15:50:58] Looks a bug to me since disk exceeded is not a internal error. Shouldn't lmtp return over quota info instead of error? -- Arkadiusz Miśkiewicz, arekm / ( maven.pl | pld-linux.org )

3 5

execute sieve command - fails to notice script has exited
by Lionel Elie Mamane 13 Nov '18

13 Nov '18

Hi, Running dovecot 2.2.27 (c0f36b0) on Debian GNU/Linux stable (version 9.6), I'm trying to use the execute command in a sieve script, with direct execution (not service socket). The script is executed, and returns (the process exits), but the dovecot-lda process seems to not notice, and thinks the script did not terminate. After sieve_execute_exec_timeout has passed, it sends a TERM, a bit later a KILL and then logs a failure. The "ps -Af f" looks like: S 0:00 \_ /usr/sbin/exim4 -Mc 1gMazS-0007IV-RB S 0:00 \_ /usr/lib/dovecot/dovecot-lda -f master(a)blitz.conuropsis.org Z 0:00 | \_ [foofilter] <defunct> S 0:00 \_ /usr/sbin/exim4 -Mc 1gMazS-0007IV-RB The dovecot debug log looks like: lda(user): Debug: Loading modules from directory: /usr/lib/dovecot/modules lda(user): Debug: Module loaded: /usr/lib/dovecot/modules/lib90_sieve_plugin.so lda(user): Debug: Effective uid=1000, gid=1000, home=/home/user lda(user): Debug: maildir++: root=/home/user/Maildir, index=, indexpvt=, control=, inbox=/home/user/Maildir, alt= lda(user): Debug: userdb lookup skipped, username taken from USER environment lda(user): Debug: none: root=, index=, indexpvt=, control=, inbox=, alt= lda(user): Debug: Destination address: user(a)blitz.conuropsis.org (source: user@hostname) lda(user): Debug: sieve: Pigeonhole version 0.4.16 (fed8554) initializing lda(user): Debug: sieve: include: sieve_global is not set; it is currently not possible to include `:global' scripts. lda(user): Debug: sieve: Sieve imapsieve plugin for Pigeonhole version 0.4.16 (fed8554) loaded lda(user): Debug: sieve: Sieve Extprograms plugin for Pigeonhole version 0.4.16 (fed8554) loaded lda(user): Debug: sieve: file storage: Using active Sieve script path: /data/home/user/.dovecot.sieve lda(user): Debug: sieve: file storage: Using script storage path: /home/user/sieve lda(user): Debug: sieve: file storage: Relative path to sieve storage in active link: sieve/ lda(user): Debug: sieve: file storage: Using Sieve script path: /data/home/user/.dovecot.sieve lda(user): Debug: sieve: file script: Opened script `test-foofilter' from `/data/home/user/.dovecot.sieve' lda(user): Debug: sieve: Using the following location for user's Sieve script: /data/home/user/.dovecot.sieve lda(user): Debug: Mailbox stdin: Opened mail UID=1 because: header Message-ID (Cache file is unusable) lda(user): Debug: sieve: Opening script 1 of 1 from `/data/home/user/.dovecot.sieve' lda(user): Debug: sieve: Loading script /data/home/user/.dovecot.sieve lda(user): Debug: sieve: Script binary /data/home/user/.dovecot.svbin successfully loaded lda(user): Debug: sieve: binary save: not saving binary /data/home/user/.dovecot.svbin, because it is already stored lda(user): Debug: sieve: Executing script from `/data/home/user/.dovecot.svbin' lda(user): Debug: sieve: action execute: running program: foofilter lda(user): Debug: Mailbox stdin: Opened mail UID=1 because: mail stream lda(user): Debug: waiting for program `/usr/local/lib/dovecot/sieve-execute/foofilter' to finish after 0 msecs lda(user): Debug: program `/usr/local/lib/dovecot/sieve-execute/foofilter'(24669) execution timed out after 2000 milliseconds: sending TERM signal lda(user): Debug: program `/usr/local/lib/dovecot/sieve-execute/foofilter' (24669) did not die after 5000 milliseconds: sending KILL signal and an strace on the dovecot-lda process shows it is in an "epoll_wait(9 ....". The script is very simple: #! /bin/sh cat > /dev/null exit 1 Anyone has a clue? Thanks in advance. Best Regards, Lionel

2 5

Proxy + 2x static passdb not working as expected
by Michael Goth 13 Nov '18

13 Nov '18

Hi all, I'm trying to setup a Dovecot proxy that authenticates the user against two backend servers. If login server1 fails, server2 should be tried. The problem: Only the first server seems to be tried, even if the login fails. Config snippet: protocol imap { passdb { driver = static args = proxy=y nopassword=y host=oldserver1.example.com port=993 ssl=y } passdb { driver = static args = proxy=y nopassword=y host=oldserver2.example.com port=993 ssl=y } } With this config, only accounts on oldserver1.example.com can login. If I reverse the two passdb entries, only accounts on oldserver2.example.com can login. I've done the same with SQL passdb first + static passdb second. That worked as expected. Not sure what I'm doing wrong here. Attached is the output of doveconf -n Thanks Michael Mit freundlichen Grüßen -- Michael Goth .webflow GmbH Geschäftsführer: Andreas Schrei Wasserburger Straße 4 D - 83352 Altenmarkt a. d. Alz Amtsgericht Traunstein HRB 18537 E-Mail: mg(a)webflow.de Tel: +49 (0) 8621 - 99989 - 26 Fax: +49 (0) 8621 - 99989 - 28 Web: www.webflow.de

2 1

dsync / doveadm sync problem
by admin＠awib.it 13 Nov '18

13 Nov '18

Hi, I had an old dovecot server with a working backup script. Basic concept was: - to dsync to a temp folder - using tar to preserve datetime - piping this 7z to benefit from my 16 core cpu - piping this through openssl to encrypt Over time the size of all my mail grew from 3GB to about 70GB. I used to keep the last 14 backups, but this uses a lot of space. I now want to dsync my Maildir onto my NAS via NFS and use the backup tool provided by Synology to have incremental compressed backup. However I cannot get dsync to run. root@mail:/mnt/backup_mail# dsync -f -u USER@DOMAIN backup maildir:/mnt/backup_mail/MAILSERVER_FQDN/DOMAIN/USER/mail dsync(USER@DOMAIN): Error: User initialization failed: Namespace '': stat(/mnt/backup_mail/MAILSERVER_FQDN/DOMAIN/USER/mail) failed: Permission denied (euid=1001(vmail) egid=1001(vmail) missing +x perm: /mnt/backup_mail, UNIX perms appear ok (ACL/MAC wrong?)) root@mail:/mnt/backup_mail# dsync -u USER@DOMAIN backup maildir:/mnt/backup_mail/MAILSERVER_FQDN/DOMAIN/USER/mail dsync(USER@DOMAIN): Error: User initialization failed: Namespace '': stat(/mnt/backup_mail/MAILSERVER_FQDN/DOMAIN/USER/mail) failed: Permission denied (euid=1001(vmail) egid=1001(vmail) missing +x perm: /mnt/backup_mail, dir owner missing perms) ——— Error message changed after removing „-f“. I then applied the folder permissions (chmod +x backup_mail/) and I get a different error: root@mail:/mnt/backup_mail# dsync -f -u USER@DOMAIN backup maildir:/mnt/backup_mail/MAILSERVER_FQDN/DOMAIN/USER/mail dsync(USER@DOMAIN): Error: User initialization failed: namespace configuration error: All list=yes namespaces must use the same separator I found something about the namespace issue, but did not quite understand I guess. (separators seem to differ) From doveconf -n: [...] namespace { list = children location = maildir:/var/vmail/mailboxes/%%d/%%n/Maildir:INDEXPVT=~/Maildir/shared/%%u prefix = shared/%%u/ separator = / subscriptions = yes type = shared } namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Spam { auto = subscribe autoexpunge = 30 days special_use = \Junk } mailbox Trash { auto = subscribe autoexpunge = 183 days special_use = \Trash } prefix = } […] ——— However I only set up the namespace for inbox. root@mail:/mnt/backup_mail# doveconf namespace gives namespace { disabled = no hidden = no ignore_on_failure = no inbox = no list = children location = maildir:/var/vmail/mailboxes/%%d/%%n/Maildir:INDEXPVT=~/Maildir/shared/%%u order = 0 prefix = shared/%%u/ separator = / subscriptions = yes type = shared } namespace inbox { disabled = no hidden = no ignore_on_failure = no inbox = yes list = yes location = mailbox Drafts { auto = subscribe autoexpunge = 0 autoexpunge_max_mails = 0 comment = driver = special_use = \Drafts } mailbox Sent { auto = subscribe autoexpunge = 0 autoexpunge_max_mails = 0 comment = driver = special_use = \Sent } mailbox Spam { auto = subscribe autoexpunge = 60 days autoexpunge_max_mails = 0 comment = driver = special_use = \Junk } mailbox Trash { auto = subscribe autoexpunge = 60 days autoexpunge_max_mails = 0 comment = driver = special_use = \Trash } order = 0 prefix = separator = subscriptions = yes type = private } I guess here we see the config including defaults. Well… I think I only need the inbox namespace either way, so I tried: root@mail:/mnt/backup_mail# dsync -f -u USER@DOMAIN backup maildir:/mnt/backup_mail/MAILSERVER_FQDN/DOMAIN/USER/mail/ -n inbox dsync-local(USER@DOMAIN): Error: read(remote) failed: EOF (version not received) doveadm(USER@DOMAIN): Fatal: execvp(maildir:/mnt/backup_mail/MAILSERVER_FQDN/DOMAIN/USER/mail/) failed: No such file or directory dsync-local(USER@DOMAIN): Error: Remote command process isn't dying, killing it dsync-local(USER@DOMAIN): Error: kill(15306, SIGKILL) failed: Operation not permitted The folder (mnt/backup_mail/MAILSERVER_FQDN/DOMAIN/USER/mail) however does exist. Can anybody tell me if there is something I miss? Thanks in advance! -M

1 0

compressed folders
by Arkadiusz Miśkiewicz 13 Nov '18

13 Nov '18

Hello. Is this still true? https://www.dovecot.org/list/dovecot/2013-March/089084.html Ability to have specific folders compressed only. -- Arkadiusz Miśkiewicz, arekm / ( maven.pl | pld-linux.org )

1 0

New install - getting error: "Failed to initialize SSL server context: Couldn't parse DH parameters"
by James Brown 13 Nov '18

13 Nov '18

I’m setting up Dovecot using Homebrew on a new server and am getting this when I try to login via IMAP: Nov 13 14:13:35 auth: Debug: auth client connected (pid=30719) Nov 13 14:13:35 imap-login: Info: Aborted login (no auth attempts in 0 secs): user=<>, rip=::1, lip=::1, secured, session=<gM0HNIN6HtoAAAAAAAAAAAAAAAAAAAAB> Nov 13 14:18:33 auth: Debug: Loading modules from directory: /usr/local/Cellar/dovecot/2.3.2.1/lib/dovecot/auth Nov 13 14:18:33 auth: Debug: Module loaded: /usr/local/Cellar/dovecot/2.3.2.1/lib/dovecot/auth/lib20_auth_var_expand_crypt.so Nov 13 14:18:33 auth: Debug: Read auth token secret from /usr/local/var/run/dovecot/auth-token-secret.dat Nov 13 14:18:33 auth: Debug: auth client connected (pid=30848) Nov 13 14:18:33 imap-login: Error: Failed to initialize SSL server context: Couldn't parse DH parameters: error:0906D06C:PEM routines:PEM_read_bio:no start line: Expecting: DH PARAMETERS: user=<>, rip=::1, lip=::1, secured, session=<q7TJRYN6RdoAAAAAAAAAAAAAAAAAAAAB> Nov 13 14:18:33 imap-login: Info: Disconnected: TLS initialization failed. (no auth attempts in 0 secs): user=<>, rip=::1, lip=::1, secured, session=<q7TJRYN6RdoAAAAAAAAAAAAAAAAAAAAB> I’ve used: Openssl gendh 2048 And put the output: -----BEGIN DH PARAMETERS----- MIIBCAKCAQEA0IF7kQX32IJFm/5HEVwYf7Be4G9iY86MvLiFLL3wHGqcPT3EMsIv YSe5XOT0Q7DGXPOZ+DLlJq8KDHxWKNI6j/0ZaRBrF38CWj8Jqxa8pqo9FVSWj45b JwSLqBSoBIEFWibqSE6L8wlV8xjMsB34xLHduJDNbaBzsooN749CopTkmkuGeXKH waOEbDzlOq+qHEa4bjx2/e/TnPj0kCrMnfeU4QILo1rJwuN4nY6k7fGwgEDVa2hE oOrVfJxxxxxxxxxyyyyyuuuixxxxblahblahblahhhkkkkkkkkkkkkXCGsxhlDQO QmzOhHqPovzbBByO9iR5fu3xbNm9YRxPowIBAg== -----END DH PARAMETERS—— Into a file dh.pem and then added ssl_dh=/usr/local/etc/dovecot/dh.pem To my dovecot.conf file. Reloaded Dovecot but still get the same error. Any suggestions? macOS 10.13.6, Dovecot 2.3.2.1 Any suggestions? Thanks, James.

3 3

Re: New install - getting error: "Failed to initialize SSL server context: Couldn't parse DH parameters"
by Tuomi, Aki 13 Nov '18

13 Nov '18

Actually you need to use ssl_dh=</usr/local/etc/dovecot/dh.pemNote the <Aki -------- Original message --------From: "Michael A. Peters" <mpeters(a)domblogger.net> Date: 13/11/2018 05:44 (GMT+02:00) To: dovecot(a)dovecot.org Subject: Re: New install - getting error: "Failed to initialize SSL server context: Couldn't parse DH parameters" tryopenssl dhparam -out /usr/local/etc/dovecot/dh.pem 2048On 11/12/2018 07:28 PM, James Brown wrote:> I’m setting up Dovecot using Homebrew on a new server and am getting > this when I try to login via IMAP:> > Nov 13 14:13:35 auth: Debug: auth client connected (pid=30719)> Nov 13 14:13:35 imap-login: Info: Aborted login (no auth attempts in 0 > secs): user=<>, rip=::1, lip=::1, secured, > session=<gM0HNIN6HtoAAAAAAAAAAAAAAAAAAAAB>> Nov 13 14:18:33 auth: Debug: Loading modules from directory: > /usr/local/Cellar/dovecot/2.3.2.1/lib/dovecot/auth> Nov 13 14:18:33 auth: Debug: Module loaded: > /usr/local/Cellar/dovecot/2.3.2.1/lib/dovecot/auth/lib20_auth_var_expand_crypt.so> Nov 13 14:18:33 auth: Debug: Read auth token secret from > /usr/local/var/run/dovecot/auth-token-secret.dat> Nov 13 14:18:33 auth: Debug: auth client connected (pid=30848)> Nov 13 14:18:33 imap-login: Error: Failed to initialize SSL server > context: Couldn't parse DH parameters: error:0906D06C:PEM > routines:PEM_read_bio:no start line: Expecting: DH PARAMETERS: user=<>, > rip=::1, lip=::1, secured, session=<q7TJRYN6RdoAAAAAAAAAAAAAAAAAAAAB>> Nov 13 14:18:33 imap-login: Info: Disconnected: TLS initialization > failed. (no auth attempts in 0 secs): user=<>, rip=::1, lip=::1, > secured, session=<q7TJRYN6RdoAAAAAAAAAAAAAAAAAAAAB>> > I’ve used:> > Openssl gendh 2048> > And put the output:> > -----BEGIN DH PARAMETERS-----> MIIBCAKCAQEA0IF7kQX32IJFm/5HEVwYf7Be4G9iY86MvLiFLL3wHGqcPT3EMsIv> YSe5XOT0Q7DGXPOZ+DLlJq8KDHxWKNI6j/0ZaRBrF38CWj8Jqxa8pqo9FVSWj45b> JwSLqBSoBIEFWibqSE6L8wlV8xjMsB34xLHduJDNbaBzsooN749CopTkmkuGeXKH> waOEbDzlOq+qHEa4bjx2/e/TnPj0kCrMnfeU4QILo1rJwuN4nY6k7fGwgEDVa2hE> oOrVfJxxxxxxxxxyyyyyuuuixxxxblahblahblahhhkkkkkkkkkkkkXCGsxhlDQO> QmzOhHqPovzbBByO9iR5fu3xbNm9YRxPowIBAg==> -----END DH PARAMETERS——> > Into a file dh.pem and then added> > ssl_dh=/usr/local/etc/dovecot/dh.pem> > To my dovecot.conf file.> > Reloaded Dovecot but still get the same error.> > Any suggestions?> > macOS 10.13.6, Dovecot 2.3.2.1> > Any suggestions?> > Thanks,> > James.

2 1