Debian Bug Tracking System
Wed, 04 Mar 2009 09:42:11 -0800
Your message dated Wed, 04 Mar 2009 17:17:09 +0000 with message-id <e1leuit-0003yo...@ries.debian.org> and subject line Bug#517808: fixed in dovecot 1:1.1.11-3 has caused the Debian Bug report #517808, regarding dovecot-common: please call ntp-wait before starting Dovecot to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 517808: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=517808 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: dovecot-common Version: 1:1.1.11-2 Severity: wishlist Tags: patch File: /etc/init.d/dovecot Hello. This report is about the same problem described in bugs #432723 and #511060, but with a suggestion which should reduce the chance of getting hit by it. In short, the problem is that Dovecot will kill itself if the system clock is moved backwards while Dovecot is running. This can happen if the hardware clock is severely out of sync at boot time, in which case ntpd will step system time (backwards in the problematic case). This was addressed in version 1:1.0.3-1 by making sure that Dovecot is started after ntpd at boot time. However, even though ntpd is started before Dovecot at boot time, it can happen and I think it's quite likely, that ntpd don't get the chance to synchronize with another NTP server before Dovecot is started. Thus, if the clock is too much ahead of time, Dovecot will terminate when ntpd finally synchronizes it. To reduce the chance for this to happen, the following wiki page, which is referred to by the error message Dovecot prints when it kills itself, suggests that ntp-wait is called before Dovecot is started. http://wiki.dovecot.org/TimeMovedBackwards The ntp-wait command simply will wait and do nothing until ntpd is synchronized with another NTP server or it times out. So, I have attached a simple patch against /etc/init.d/dovecot which will call ntp-wait before Dovecot is started. Specifically I've experienced this problem on a Xen guest running lenny and Dovecot version 1:1.0.15-2.3, as can be seen in the following excerpt from the syslog, but I think the problem can happen with the current version in unstable as well. (The best solution would of course be to not run ntpd on the guest and have the Xen host use NTP to synchronize the time, but I don't control the host, and even if I ask the admins to adjust the clock I can't be sure that the clock won't run out of sync and this happen again.) Feb 28 04:40:05 vps ntpd[1152]: ntpd 4.2....@1.1520-o Wed Jan 7 18:06:29 UTC 2009 (1) Feb 28 04:40:05 vps ntpd[1153]: precision = 1.000 usec Feb 28 04:40:05 vps ntpd[1153]: Listening on interface #0 wildcard, 0.0.0.0#123 Disabled Feb 28 04:40:05 vps ntpd[1153]: Listening on interface #1 wildcard, ::#123 Disabled Feb 28 04:40:05 vps ntpd[1153]: Listening on interface #2 lo, ::1#123 Enabled Feb 28 04:40:05 vps ntpd[1153]: Listening on interface #3 eth0, fe80::a800:5dff:feea:f501#123 Enabled Feb 28 04:40:05 vps ntpd[1153]: Listening on interface #4 lo, 127.0.0.1#123 Enabled Feb 28 04:40:05 vps ntpd[1153]: Listening on interface #5 eth0, 78.110.170.221#123 Enabled Feb 28 04:40:05 vps ntpd[1153]: kernel time sync status 0040 Feb 28 04:40:05 vps ntpd[1153]: frequency initialized -180.642 PPM from /var/lib/ntp/ntp.drift Feb 28 04:40:05 vps dovecot: Dovecot v1.0.15 starting up Feb 28 04:40:06 vps /usr/sbin/cron[1194]: (CRON) INFO (pidfile fd = 3) Feb 28 04:40:06 vps /usr/sbin/cron[1198]: (CRON) STARTUP (fork ok) Feb 28 04:40:06 vps /usr/sbin/cron[1198]: (CRON) INFO (Running @reboot jobs) Feb 28 04:13:05 vps ntpd[1153]: synchronized to 141.40.103.103, stratum 2 Feb 28 04:13:05 vps ntpd[1153]: time reset -1627.861225 s Feb 28 04:13:05 vps ntpd[1153]: kernel time sync status change 0001 Feb 28 04:13:05 vps dovecot: Time just moved backwards by 1627 seconds. This might cause a lot of problems, so I'll just kill myself now. http://wiki.dovecot.org/TimeMovedBackwards -- System Information: Debian Release: 5.0 APT prefers unstable APT policy: (990, 'unstable'), (500, 'testing'), (500, 'stable') Architecture: i386 (i686) Kernel: Linux 2.6.26-1-686 (SMP w/2 CPU cores) Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1) Shell: /bin/sh linked to /bin/bash Versions of packages dovecot-common depends on: ii adduser 3.110 add and remove users and groups ii libbz2-1.0 1.0.5-1 high-quality block-sorting file co ii libc6 2.7-18 GNU C Library: Shared libraries ii libcomerr2 1.41.3-1 common error description library ii libkrb53 1.6.dfsg.4~beta1-6 MIT Kerberos runtime libraries ii libldap-2.4-2 2.4.11-1 OpenLDAP libraries ii libmysqlclient15off 5.0.75-1 MySQL database client library ii libpam-runtime 1.0.1-5 Runtime support for the PAM librar ii libpam0g 1.0.1-5 Pluggable Authentication Modules l ii libpq5 8.3.6-1 PostgreSQL C client library ii libsqlite3-0 3.5.9-6 SQLite 3 shared library ii libssl0.9.8 0.9.8g-15 SSL shared libraries ii openssl 0.9.8g-15 Secure Socket Layer (SSL) binary a ii ucf 3.0016 Update Configuration File: preserv ii zlib1g 1:1.2.3.3.dfsg-12 compression library - runtime dovecot-common recommends no packages. Versions of packages dovecot-common suggests: ii ntp 1:4.2.4p4+dfsg-8 Network Time Protocol daemon and u ii ntpdate 1:4.2.4p4+dfsg-8 client for setting system time fro -- no debconf information--- a/debian/dovecot-common.init 2009-03-01 15:33:13.000000000 +0000 +++ b/debian/dovecot-common.init 2009-03-02 00:10:56.000000000 +0000 @@ -132,6 +132,14 @@ case "$1" in start) [ "$VERBOSE" != no ] && log_daemon_msg "Starting $DESC" "$NAME" + # Dovecot will kill itself if the system clock moves backwards + # while Dovecot is running, and this can happen if the hardware + # clock is severely out of sync at boot time, and then ntpd is + # used to synchronize the system clock. So, if the machine also + # runs ntpd, we call ntp-wait to make sure that ntpd has had a + # chance to synchronize the system clock before Dovecot is + # started. + test -x /usr/sbin/ntp-wait && ntp-wait -n 2 || true do_start case "$?" in 0|1) [ "$VERBOSE" != no ] && log_end_msg 0 ;;
--- End Message ---
--- Begin Message ---Source: dovecot Source-Version: 1:1.1.11-3 We believe that the bug you reported is fixed in the latest version of dovecot, which is due to be installed in the Debian FTP archive: dovecot-common_1.1.11-3_amd64.deb to pool/main/d/dovecot/dovecot-common_1.1.11-3_amd64.deb dovecot-dev_1.1.11-3_amd64.deb to pool/main/d/dovecot/dovecot-dev_1.1.11-3_amd64.deb dovecot-imapd_1.1.11-3_amd64.deb to pool/main/d/dovecot/dovecot-imapd_1.1.11-3_amd64.deb dovecot-pop3d_1.1.11-3_amd64.deb to pool/main/d/dovecot/dovecot-pop3d_1.1.11-3_amd64.deb dovecot_1.1.11-3.diff.gz to pool/main/d/dovecot/dovecot_1.1.11-3.diff.gz dovecot_1.1.11-3.dsc to pool/main/d/dovecot/dovecot_1.1.11-3.dsc A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 517...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Fabio Tranchitella <kob...@debian.org> (supplier of updated dovecot package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Wed, 04 Mar 2009 17:38:59 +0100 Source: dovecot Binary: dovecot-common dovecot-dev dovecot-imapd dovecot-pop3d Architecture: source amd64 Version: 1:1.1.11-3 Distribution: unstable Urgency: low Maintainer: Dovecot Maintainers <jaldhar-dove...@debian.org> Changed-By: Fabio Tranchitella <kob...@debian.org> Description: dovecot-common - secure mail server that supports mbox and maildir mailboxes dovecot-dev - header files for the dovecot mail server dovecot-imapd - secure IMAP server that supports mbox and maildir mailboxes dovecot-pop3d - secure POP3 server that supports mbox and maildir mailboxes Closes: 517808 Changes: dovecot (1:1.1.11-3) unstable; urgency=low . * debian/dovecot-common.init: applied patch from Håkon Stordahl to call ntp-wait if available. (Closes: #517808) Checksums-Sha1: e062d89bc9bc7513933ed6caccb8ce012f47ced8 1624 dovecot_1.1.11-3.dsc afa160110a934449a66e0f3c1fec7ebc3f01b59c 924869 dovecot_1.1.11-3.diff.gz 43e1530026a06c269d00208615e6a165d63ac4af 3578154 dovecot-common_1.1.11-3_amd64.deb 796e7f509ca75b382a6fc61b5fd0f8bac345581f 562952 dovecot-dev_1.1.11-3_amd64.deb ebd8523b78b9409a48d2622e684970107634ab62 942622 dovecot-imapd_1.1.11-3_amd64.deb 336a858b1e53f7f5d061ca190f3b7381310309cc 898370 dovecot-pop3d_1.1.11-3_amd64.deb Checksums-Sha256: bbe57ee40602ed329e0e0ac278834100a07b3343d07efd2ad9a6bf7eef21395d 1624 dovecot_1.1.11-3.dsc baaef24d6a07c83988bb22f2f6374735fd78f38231ce57f94f3e56dfc5f215b9 924869 dovecot_1.1.11-3.diff.gz 5580d3d356a1e901046de2c5d9f129b04447f68a428f18ad3481a4f95c8ae8d0 3578154 dovecot-common_1.1.11-3_amd64.deb 9b15d63c8bf1ae38ab1012cde7f9ea25af2505ded2d88e665865e58ca75c9f12 562952 dovecot-dev_1.1.11-3_amd64.deb c4b5a1ca53f471c8d8cc3eb29d7f46394f9087c094f9993e49d0462cb1618833 942622 dovecot-imapd_1.1.11-3_amd64.deb 5d7291e6d16b05dac64845969bbc6c0962b859e71971d944cbd83bc51f46f56b 898370 dovecot-pop3d_1.1.11-3_amd64.deb Files: 3f9b8a45c4395d8b4787f27eabe68d3d 1624 mail optional dovecot_1.1.11-3.dsc 0196ccd136f2380469df047e8f747116 924869 mail optional dovecot_1.1.11-3.diff.gz bb2ee09f19e094f2989bb65202d85b3f 3578154 mail optional dovecot-common_1.1.11-3_amd64.deb 5da2e37756a2d58bcc04fd506a1a1e92 562952 mail optional dovecot-dev_1.1.11-3_amd64.deb c14039121eaa05a60d7f62b425117da1 942622 mail optional dovecot-imapd_1.1.11-3_amd64.deb 7474449a22e3436f2b260cb81349b6ab 898370 mail optional dovecot-pop3d_1.1.11-3_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iEYEARECAAYFAkmutKUACgkQK/juK3+WFWSC6gCfTP4uppCsZhNo7hqWmoygBHa8 HXcAnjLP/zx51BvRdIvmQuWTcc80yjRQ =QXhS -----END PGP SIGNATURE-----
--- End Message ---