Re: [Dovecot] Dovecot + OCFS2

2007-10-03 Thread Tomi Hakala

Jon Blazquez wrote:
The system works fine but when there are mailing lists the load 
increases dramatically.



Any suggestions?


First thing that I would do is to reduce number of concurrent deliver 
processes. I have no clue how this is done with Sendmail but with 
Postfix one could adjust deliver process maxproc value in master.cf.


Tomi


Re: [Dovecot] In-site migration from /etc/passwd to LDAP

2007-10-03 Thread Joseba Torre
Maybe you need to setuid deliver?

Aagur.

El Wednesday 03 October 2007 06:18:47 Maykel Moya escribió:
 I'm doing in-site migration of accounts from /etc/passwd to an LDAP
 directory. The migration should be progressive (not all users at the
 same time).

 I'm already able to check mail for accounts in /etc/passwd and accounts
 in LDAP.

 The problem is with mail delivery. I'm using Postfix + Dovecot-LDA. This
 is the error I get with every delivery

 --
 dovecot: Oct 03 00:16:09 Info: auth(default): master in: USER   1
 moyaservice=deliver
 dovecot: Oct 03 00:16:09 Info: auth(default): ldap(moya): user search:
 base=ou=users,dc=sld,dc=cu scope=subtree
 filter=((objectClass=posixAccount)(uid=moya))
 fields=sldMailbox,uidNumber
 dovecot: Oct 03 00:16:09 Info: auth(default): master out: USER  1
 moyahome=/srv/vmail/m/moya/ uid=29174   gid=101
 deliver(moya): Oct 03 00:16:09 Fatal: setuid(29174) failed: Operation
 not permitted
 --

 29174 is the uid for moya, is the same in /etc/passwd or in LDAP via
 posixAccount class.

 Any advise please?

 Regards,
 maykel



-- 
Joseba Torre. CIDIR Bizkaia.


signature.asc
Description: This is a digitally signed message part.


Re: [Dovecot] In-site migration from /etc/passwd to LDAP

2007-10-03 Thread Patrick Ben Koetter
* Joseba Torre [EMAIL PROTECTED]:
 Maybe you need to setuid deliver?
 
 Aagur.
 
 El Wednesday 03 October 2007 06:18:47 Maykel Moya escribió:
  I'm doing in-site migration of accounts from /etc/passwd to an LDAP
  directory. The migration should be progressive (not all users at the
  same time).
 
  I'm already able to check mail for accounts in /etc/passwd and accounts
  in LDAP.
 
  The problem is with mail delivery. I'm using Postfix + Dovecot-LDA. This
  is the error I get with every delivery
 
  --
  dovecot: Oct 03 00:16:09 Info: auth(default): master in: USER   1
  moyaservice=deliver
  dovecot: Oct 03 00:16:09 Info: auth(default): ldap(moya): user search:
  base=ou=users,dc=sld,dc=cu scope=subtree
  filter=((objectClass=posixAccount)(uid=moya))
  fields=sldMailbox,uidNumber
  dovecot: Oct 03 00:16:09 Info: auth(default): master out: USER  1
  moyahome=/srv/vmail/m/moya/ uid=29174   gid=101
  deliver(moya): Oct 03 00:16:09 Fatal: setuid(29174) failed: Operation
  not permitted
  --
 
  29174 is the uid for moya, is the same in /etc/passwd or in LDAP via
  posixAccount class.
 
  Any advise please?

When you migrate an account also migrate the UID and GID to the user that runs
deliver.

[EMAIL PROTECTED]


-- 
state of mind
Agentur für Kommunikation, Design und Softwareentwicklung

Patrick KoetterTel: 089 45227227
Echinger Strasse 3 Fax: 089 45227226
85386 Eching   Web: http://www.state-of-mind.de

Amtsgericht MünchenPartnerschaftsregister PR 563


Re: [Dovecot] Dovecot + OCFS2

2007-10-03 Thread Jon Blazquez

Thank you for your response,
With sendmail we have achieved to limit the load :

define(`confMAX_DAEMON_CHILDREN', `15')
define(`confCONNECTION_RATE_THROTTLE', `2')dnl
define(`confQUEUE_LA', `5')dnl
define(`confREFUSE_LA', `4')dnl


With this configuration the LOAD only reaches 20 ;-) but it’s not the 
solution.
The cluster is formed by 3 nodes. The load balancer sends mails to a 
node, when it's full (LOAD 4-5) it denies receiving more mails so the 
load balancer sends them to the following node in the cluster and so on...
In the first node the load continues increasing until it reaches roughly 
20, then it falls down.


This is a temporary solution but we don’t know where exactly the problem 
is: dovecot’s deliver, ocfs2….

Any help would be appreciated,

Jon




Tomi Hakala escribió:

Jon Blazquez wrote:
The system works fine but when there are mailing lists the load 
increases dramatically.



Any suggestions?


First thing that I would do is to reduce number of concurrent deliver 
processes. I have no clue how this is done with Sendmail but with 
Postfix one could adjust deliver process maxproc value in master.cf.


Tomi



--
_

Jon Blázquez Diez [EMAIL PROTECTED]
Servicios Informáticoshttps://www.unav.es/SI/
Universidad de Navarrahttps://www.unav.es 


_








[Dovecot] Disable imap proxy access

2007-10-03 Thread Dominique Feyer
I work on a dovecot cluster (15 servers) we need to add a new storage
array and move the data for a list of user from the old storage to the
new one. We use dovecot proxy to redirect imap and pop3 to the same
server everytime.

How to disable pop3 and imap access during the data migration process
(duration 5 minutes to 10 minutes). Can i send a custom error message to
our users ?

Thanks for your help

Dominique Feyer


[Dovecot] namespace prefix issue with avelsieve and dovecot v1.1beta2

2007-10-03 Thread Martin Konopka

Hi,

I have installed dovecot v1.1.beta2 with the sieve plugin v.1.1.2. I 
have configured the following namespace:


namespace:
  type: private
  separator: .
  prefix: INBOX.
  location:
  inbox: yes
  hidden: no
  list: yes


When I create a rule which should move messages into the subfolder 
Junk, Dovecot's deliver seems to ignore the namespace and creates a 
new folder .INBOX.Junk .


I think I read somewhere that in Dovecot v1.1+ deliver supports 
namespaces? Or have I misconfigured something?


Thank you!

Martin


dovecot -n output:

# 1.1.beta2: /usr/local/etc/dovecot.conf
log_timestamp: %Y-%m-%d %H:%M:%S
protocols: imap imaps pop3 pop3s
ssl_listen(default): *:993
ssl_listen(imap): *:993
ssl_listen(pop3): *:995
ssl_cert_file: /etc/ssl/certs/server.crt
ssl_key_file: /etc/ssl/certs/server.key
verbose_ssl: yes
login_dir: /usr/local/var/run/dovecot/login
login_executable(default): /usr/local/libexec/dovecot/imap-login
login_executable(imap): /usr/local/libexec/dovecot/imap-login
login_executable(pop3): /usr/local/libexec/dovecot/pop3-login
mail_extra_groups: mail
mail_location: maildir:~/Maildir
mail_executable(default): /usr/local/libexec/dovecot/imap
mail_executable(imap): /usr/local/libexec/dovecot/imap
mail_executable(pop3): /usr/local/libexec/dovecot/pop3
mail_plugins(default): quota imap_quota
mail_plugins(imap): quota imap_quota
mail_plugins(pop3):
mail_plugin_dir(default): /usr/local/lib/dovecot/imap
mail_plugin_dir(imap): /usr/local/lib/dovecot/imap
mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3
namespace:
  type: private
  separator: .
  prefix: INBOX.
  inbox: yes
  list: yes
auth default:
  passdb:
driver: pam
  userdb:
driver: passwd
plugin:
  quota: fs


Re: [Dovecot] Disable imap proxy access

2007-10-03 Thread Ed W



How to disable pop3 and imap access during the data migration process
(duration 5 minutes to 10 minutes). Can i send a custom error message to
our users ?
  



I don't recall the exact details, but I think both options are possible 
if you check the dovecot wiki.  There is a good study regarding the 
proxy stuff, and some notes on sending custom errors back (along with a 
note that it's not supported on many clients)


If you use SQL then you could simply change the query temporarily

Also when I do my migration I change the permissions on the home folders 
first (root:root say) - this way if I muck something up they don't get 
logged into the old mailbox.  Then I reset the permissions back on the 
new server and update the proxy settings.  This also gives a random 
error back to the client in the meantime if they try and log in.


I should think that the above could even be scripted and run per mailbox 
for a very subtle downtime period... I use rsync once while the mailbox 
is online, then change perms so that the user can't login, then do a 
final rsync to get any changes across.  I didn't check whether there is 
a problem with an existing connection still accessing the data after the 
perms were changed though...


Good luck

Ed W


[Dovecot] Namespace hidden option not working?

2007-10-03 Thread Ed W
I either misunderstand the namespace hidden option, or else perhaps it's 
not working correctly in 1.0.5?



dovecot.conf

# default namespace
namespace private {
 separator = /
 prefix =
 inbox = yes
 hidden = yes
}

# for backwards compatibility:
namespace private {
 separator = .
 prefix = INBOX.
 inbox = yes
}


Then login and test

s6jh LIST  *
SND:  len(939) Comp_len(118) Time:0.137985
* LIST (\HasNoChildren) / Diary
* LIST (\HasNoChildren) / Spam
* LIST (\HasNoChildren) / Sent
* LIST (\HasNoChildren) / Archive
* LIST (\HasNoChildren) / Sent Items
* LIST (\HasNoChildren) / Subdir
* LIST (\HasNoChildren) / Junk E-mail
* LIST (\HasNoChildren) / Trash
* LIST (\HasNoChildren) / Drafts
* LIST (\HasNoChildren) / Deleted Items
* LIST (\HasNoChildren) / INBOX
* LIST (\HasNoChildren) . INBOX.Diary
* LIST (\HasNoChildren) . INBOX.Spam
* LIST (\HasNoChildren) . INBOX.Sent
* LIST (\HasNoChildren) . INBOX.Archive
* LIST (\HasNoChildren) . INBOX.Sent Items
* LIST (\HasNoChildren) . INBOX.Subdir
* LIST (\HasNoChildren) . INBOX.Junk E-mail
* LIST (\HasNoChildren) . INBOX.Trash
* LIST (\HasNoChildren) . INBOX.Drafts
* LIST (\HasNoChildren) . INBOX.Deleted Items
* LIST (\HasChildren) . INBOX


The idea was to support an old client using Courier like access whilst 
still letting new clients access using the normal process


Ed W


Re: [Dovecot] Namespace Question

2007-10-03 Thread Ed W


Okay, I feel pretty stupid now.  It was not a problem with namespaces 
at all.  But, I think there is a problem somewhere.  I had the phone 
setup to display the last 30 days of messages.  When I would sync it 
up, it did not display any messages.  That is why I thought something 
was messed up with the namespaces.  So, I changed the setting to 
display All messages and then they appeared.  I currently have 20 
messages in my inbox, of which 17 of those are in the past 30 days.  
So, what would have changed between version 1.0.5 and 1.1beta2 to 
somehow make the phone think all of the messages are older than 30 days?


On a side note, none of my folders were displaying.  That is also why 
I thought the namespaces were messed up.  It turns out I needed to 
select Show All Folders.  Once I did that all of my folders appeared.


I apologize for wasting anybody's time on the namespace problem.  But, 
I do think there is a problem with the date being sent over the IMAP 
connection.



It still partly looks like a namespace issue.  You probably weren't 
seeing the folders because you would have been subscribed to a slightly 
differently named version of each folder, say with INBOX. prefixed on 
to it.  Been through the same when changing namespaces here on dumb clients


I bet there is a folder prefix option in your client.  There is in 
Outlook Express / Outlook for example.


Ed W


Re: [Dovecot] Namespace hidden option not working?

2007-10-03 Thread Benjamin R. Haskell

On Wed, 3 Oct 2007, Ed W wrote:

I either misunderstand the namespace hidden option, or else perhaps it's not 
working correctly in 1.0.5?



dovecot.conf

# default namespace
namespace private {
separator = /
prefix =
inbox = yes
hidden = yes
}

# for backwards compatibility:
namespace private {
separator = .
prefix = INBOX.
inbox = yes
}



You shouldn't have inbox = yes on more than one namespace. From the 
comments in my dovecot.conf:


   # There can be only one INBOX, and this setting defines which namespace
   # has it.
   #inbox = yes

I think you're also hiding the wrong namespace. You don't want to 
advertise the backwards-compatibility namespace to clients. If they're 
already using the old one, they can still use it, but you don't want new 
clients to start using it. Namespace-aware clients will adapt (in 
theory?).


Best,
Ben


Re: [Dovecot] Namespace hidden option not working?

2007-10-03 Thread Jeff Grossman
 On Wed, 3 Oct 2007, Ed W wrote:

 I either misunderstand the namespace hidden option, or else perhaps it's
 not
 working correctly in 1.0.5?


 dovecot.conf

 # default namespace
 namespace private {
 separator = /
 prefix =
 inbox = yes
 hidden = yes
 }

 # for backwards compatibility:
 namespace private {
 separator = .
 prefix = INBOX.
 inbox = yes
 }


 You shouldn't have inbox = yes on more than one namespace. From the
 comments in my dovecot.conf:

 # There can be only one INBOX, and this setting defines which
 namespace
 # has it.
 #inbox = yes

 I think you're also hiding the wrong namespace. You don't want to
 advertise the backwards-compatibility namespace to clients. If they're
 already using the old one, they can still use it, but you don't want new
 clients to start using it. Namespace-aware clients will adapt (in
 theory?).

 Best,
 Ben


Just to throw in one more comment.  In the dovecot.conf file it also
mentions that you should use the same separator between namespaces. 
Otherwise you might confuse the client.

Jeff



Re: [Dovecot] new antispam plugin

2007-10-03 Thread Johannes Berg
On Tue, 2007-10-02 at 20:26 +0200, Andreas Schneider wrote:

  If you're building against libdspam you can't define -DHAVE_CONFIG_H or 
  dspam
  will look for its own dpsam config.h.


Ok I looked into this and it's really crappy. dovecot really *requires*
its config.h because of compat.h; you added a bunch of things to the
CFLAGS line but it's totally different here so fails with this error:

/usr/include/stdint.h:111: error: conflicting types for ‘uint_fast32_t’
../dovecot-1.0.5/src/lib/compat.h:46: error: previous declaration of
‘uint_fast32_t’ was here
/usr/include/stdint.h:141: error: conflicting types for ‘uintmax_t’
../dovecot-1.0.5/src/lib/compat.h:38: error: previous declaration of
‘uintmax_t’ was here

In fact, I can't easily make it compile at all without config.h. Maybe
we can have dovecot install its config.h as dovecot-config.h and simply
include it first thing everywhere?

Right now it looks as though we'll have to compile the different files
with different CFLAGS because otherwise I can't guarantee that the other
files can compile.

johannes


signature.asc
Description: This is a digitally signed message part


Re: [Dovecot] In-site migration from /etc/passwd to LDAP

2007-10-03 Thread Maykel Moya

El mié, 03-10-2007 a las 12:07 +0200, Patrick Ben Koetter escribió:

 When you migrate an account also migrate the UID and GID to the user that runs
 deliver.

AFAIK deliver runs under dovecot user. Documentation say that dovecot
user should not be used for owning mailboxes.

Besides, I wouldn't like to change UIDs so I can go back with minimal
effort in case of a problem with the new setup. When the system probes
itself stable enough I will migrate them to a pure virtual mail setup.

Regards,
maykel




Re: [Dovecot] Namespace hidden option not working?

2007-10-03 Thread Ed W



Just to throw in one more comment.  In the dovecot.conf file it also
mentions that you should use the same separator between namespaces. 
Otherwise you might confuse the client.
  


I can confirm that Outlook Express and Thunderbird on windows seem 
largely unaffected even using *both* at the same time.  I have been 
alternating back and forwards with no ill effects other than some folder 
subscription winges.  You appear to need to close down and re-open each 
program sometimes to make it switch over


Ed W


Re: [Dovecot] Namespace hidden option not working?

2007-10-03 Thread Ed W

Hi

You shouldn't have inbox = yes on more than one namespace. From the 
comments in my dovecot.conf:


   # There can be only one INBOX, and this setting defines which 
namespace

   # has it.
   #inbox = yes


Sure.  However, if only one has the INBOX, then doesn't this rather 
break the whole point of having the backwards compatible access to the 
INBOX?  Am I missing the point?


I think you're also hiding the wrong namespace. You don't want to 
advertise the backwards-compatibility namespace to clients. If they're 
already using the old one, they can still use it, but you don't want 
new clients to start using it. Namespace-aware clients will adapt (in 
theory?).


Possibly.

Actually I decided that personally I prefer to have everything under 
INBOX., because all the clients I commonly use then nest the folders 
under INBOX (which I quite like).  However, OE and Outlook are too dumb 
to figure this out and it's pointless telling all our customers to set 
the folder prefix when we could just support it working without needing 
to change anything...



Anyway, the original question still stands!  How come all my folders 
from both namespaces are being listed??


Ed W



Re: [Dovecot] Disable imap proxy access

2007-10-03 Thread Bazy
Ed W wrote:
 
 How to disable pop3 and imap access during the data migration process
 (duration 5 minutes to 10 minutes). Can i send a custom error message to
 our users ?
   
 
 
 I don't recall the exact details, but I think both options are possible
 if you check the dovecot wiki.  There is a good study regarding the
 proxy stuff, and some notes on sending custom errors back (along with a
 note that it's not supported on many clients)
 
 If you use SQL then you could simply change the query temporarily
 
 Also when I do my migration I change the permissions on the home folders
 first (root:root say) - this way if I muck something up they don't get
 logged into the old mailbox.  Then I reset the permissions back on the
 new server and update the proxy settings.  This also gives a random
 error back to the client in the meantime if they try and log in.
 
 I should think that the above could even be scripted and run per mailbox
 for a very subtle downtime period... I use rsync once while the mailbox
 is online, then change perms so that the user can't login, then do a
 final rsync to get any changes across.  I didn't check whether there is
 a problem with an existing connection still accessing the data after the
 perms were changed though...
 
 Good luck
 
 Ed W

I'm not an perl expert, but... you could create a script that listens on
port 143, and one for 110, that acts as a server. So right after .login
username password the perl script will print an error, telling the
client that the server is down for maintenance or something like that.

Like when you get the 550 error in smtp and it says die spammer :).

I think you can use IO::Socket::Telnet.
Take a look over these scripts:
http://www-user.tu-chemnitz.de/~uro/perlgoodies/server/

It's just an idea...


Re: [Dovecot] Disable imap proxy access

2007-10-03 Thread Scott Silva

on 10/3/2007 3:25 PM Bazy spake the following:

Ed W wrote:

How to disable pop3 and imap access during the data migration process
(duration 5 minutes to 10 minutes). Can i send a custom error message to
our users ?
  


I don't recall the exact details, but I think both options are possible
if you check the dovecot wiki.  There is a good study regarding the
proxy stuff, and some notes on sending custom errors back (along with a
note that it's not supported on many clients)

If you use SQL then you could simply change the query temporarily

Also when I do my migration I change the permissions on the home folders
first (root:root say) - this way if I muck something up they don't get
logged into the old mailbox.  Then I reset the permissions back on the
new server and update the proxy settings.  This also gives a random
error back to the client in the meantime if they try and log in.

I should think that the above could even be scripted and run per mailbox
for a very subtle downtime period... I use rsync once while the mailbox
is online, then change perms so that the user can't login, then do a
final rsync to get any changes across.  I didn't check whether there is
a problem with an existing connection still accessing the data after the
perms were changed though...

Good luck

Ed W


I'm not an perl expert, but... you could create a script that listens on
port 143, and one for 110, that acts as a server. So right after .login
username password the perl script will print an error, telling the
client that the server is down for maintenance or something like that.

Like when you get the 550 error in smtp and it says die spammer :).

I think you can use IO::Socket::Telnet.
Take a look over these scripts:
http://www-user.tu-chemnitz.de/~uro/perlgoodies/server/

It's just an idea...


Or just stop the dovecot running on the proxy and the connections will just die.

--
MailScanner is like deodorant...
You hope everybody uses it, and
you notice quickly if they don't



[Dovecot] Postfix with Deliver (LDA) - user unknown

2007-10-03 Thread Karin Gregorec
Good Day All!  I am attempting to configure deliver as our LDA.  I am
also configuring the server to use Postfix instead of Sendmail.  I
have followed the all the documentation and examples I could find.

Below are my Dovecot and Postfix configs.  Can someone please smack me
upside the head and tell me why I am getting user unknown errors?
If i don't use deliver as the LDA, all works perfectly.  Help...

TIA,
glenn

==


*** Dovecot Config ***

dovecot -n
# 1.0.5: /usr/local/etc/dovecot.conf
base_dir: /var/run/dovecot/
log_path: /var/log/maillogs/dovecot.log
protocols: imap imaps pop3 pop3s
ssl_cipher_list: ALL:!LOW
disable_plaintext_auth: no
verbose_ssl: yes
login_dir: /var/run/dovecot/login
login_executable(default): /usr/local/libexec/dovecot/imap-login
login_executable(imap): /usr/local/libexec/dovecot/imap-login
login_executable(pop3): /usr/local/libexec/dovecot/pop3-login
login_greeting: GID Ready
login_log_format_elements: user=%u service=%s authMethod=%m rIP=%r
lIP=%l encryption=%c
login_max_processes_count: 256
verbose_proctitle: yes
first_valid_uid: 5000
last_valid_uid: 1
first_valid_gid: 0
mail_extra_groups: mail
mail_location: maildir:~/Maildir
dotlock_use_excl: yes
fsync_disable: yes
maildir_copy_with_hardlinks: yes
mail_executable(default): /usr/local/libexec/dovecot/imap
mail_executable(imap): /usr/local/libexec/dovecot/imap
mail_executable(pop3): /usr/local/libexec/dovecot/pop3
mail_process_size: 1024
mail_plugins(default): quota imap_quota
mail_plugins(imap): quota imap_quota
mail_plugins(pop3):
mail_plugin_dir(default): /usr/local/lib/dovecot/imap
mail_plugin_dir(imap): /usr/local/lib/dovecot/imap
mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3
imap_client_workarounds(default): delay-newmail outlook-idle
netscape-eoh tb-extra-mailbox-sep
imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh
tb-extra-mailbox-sep
imap_client_workarounds(pop3): outlook-idle
pop3_uidl_format(default):
pop3_uidl_format(imap):
pop3_uidl_format(pop3): %08Xu%08Xv
pop3_client_workarounds(default):
pop3_client_workarounds(imap):
pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh
pop3_logout_format(default): top=%t/%p, retr=%r/%b, del=%d/%m, size=%s
pop3_logout_format(imap): top=%t/%p, retr=%r/%b, del=%d/%m, size=%s
pop3_logout_format(pop3): top=%t/%T, retr=%r/%R, del=%d/%m, size=%s
auth default:
  cache_size: 1024
  cache_ttl: 604800
  verbose: yes
  passdb:
driver: pam
args: cache_key=%Lu
  userdb:
driver: passwd
  socket:
type: listen
master:
  path: /var/run/dovecot/auth-master
  mode: 384
  user: maildrop
plugin:
  quota: maildir:storage=1000:ignore=Trash


*** Postfix main.cf ***

alias_database = hash:/etc/mail/postfix/aliases
alias_maps = hash:/etc/mail/postfix/aliases
biff = no
command_directory = /usr/local/sbin
daemon_directory = /usr/local/libexec/postfix

debug_peer_level = 2
debugger_command =
PATH=/bin:/usr/bin:/usr/local/bin; export PATH; (echo cont;
echo where) | gdb $daemon_directory/$process_name $process_id 21
$config_directory/$process_name.$process_id.log  sleep 5

Dovecot LDA Service - http://wiki.dovecot.org/LDA/Postfix
dovecot_destination_recipient_limit = 1

home_mailbox = Maildir/
html_directory = no
inet_interfaces = all
mail_owner = postfix
mail_spool_directory = /var/mail
mailq_path = /usr/local/bin/mailq
manpage_directory = /usr/local/man
message_size_limit = 1200
mydestination = $myhostname, localhost.$mydomain, localhost
mydomain = geekinternetdevelopment.com
myhostname = superman.geekinternetdevelopment.com
mynetworks = 72.18.193.0/24, 127.0.0.0/8
newaliases_path = /usr/local/bin/newaliases
queue_directory = /var/spool/postfix
readme_directory = no
sample_directory = /usr/local/etc/postfix
sendmail_path = /usr/local/sbin/sendmail
setgid_group = maildrop
smtpd_banner = $myhostname NO WHAMMIES!!!

virtual_gid_maps = static:5000
virtual_mailbox_base = /var/mailboxes
virtual_mailbox_domains = hash:/etc/mail/postfix/vdomains
virtual_mailbox_maps = hash:/etc/mail/postfix/vmailboxes
virtual_minimum_uid = 1000
virtual_transport = dovecot
virtual_uid_maps = static:5000
unknown_local_recipient_reject_code = 550

*** Postfix master.cf ***
...snip...
dovecot   unix  -   n   n   -   -   pipe
  flags=DRhu user=maildrop:maildrop
argv=/usr/local/libexec/dovecot/deliver -e -d ${recipient}


[Dovecot] graceful failure when some folders are not available...

2007-10-03 Thread bhayden
Hi folks. Quick question in the hopes that someone knows the answer, before 
I dig in the code some more.


In testing a new setup with some long-term archival mbox-format mailboxes 
stored on an NFS mount, we've found the following: if the mount is 
unavailable for any reason, the user cannot log into their email at all. 
Dovecot says: stat() failed with mbox foo and dies. This is coming from 
the mbox sync checks. (It's possible the same happens with a maildir 
folder--I'm just specifying mbox because that's what we've tested with so 
far).


Is there a way to reconfigure this behavior? I could maybe see a fatal 
abort if the inbox is unavailable, but for other folders it seems rather... 
presumptuous. I have to think there's already a way to handle this more 
gracefully in the config and I'm just not seeing it.


Also, does anyone know offhand if this behavior is the same for folders 
that aren't in the default/inbox namespace? That would seem *really* wrong.


Any thoughts? Thanks much,

-Brian


Re: [Dovecot] Postfix with Deliver (LDA) - user unknown

2007-10-03 Thread Lars Stavholm
System log could help.
/L

Karin Gregorec wrote:
 Good Day All!  I am attempting to configure deliver as our LDA.  I am
 also configuring the server to use Postfix instead of Sendmail.  I
 have followed the all the documentation and examples I could find.
 
 Below are my Dovecot and Postfix configs.  Can someone please smack me
 upside the head and tell me why I am getting user unknown errors?
 If i don't use deliver as the LDA, all works perfectly.  Help...
 
 TIA,
 glenn
 
 ==
 
 
 *** Dovecot Config ***
 
 dovecot -n
 # 1.0.5: /usr/local/etc/dovecot.conf
 base_dir: /var/run/dovecot/
 log_path: /var/log/maillogs/dovecot.log
 protocols: imap imaps pop3 pop3s
 ssl_cipher_list: ALL:!LOW
 disable_plaintext_auth: no
 verbose_ssl: yes
 login_dir: /var/run/dovecot/login
 login_executable(default): /usr/local/libexec/dovecot/imap-login
 login_executable(imap): /usr/local/libexec/dovecot/imap-login
 login_executable(pop3): /usr/local/libexec/dovecot/pop3-login
 login_greeting: GID Ready
 login_log_format_elements: user=%u service=%s authMethod=%m rIP=%r
 lIP=%l encryption=%c
 login_max_processes_count: 256
 verbose_proctitle: yes
 first_valid_uid: 5000
 last_valid_uid: 1
 first_valid_gid: 0
 mail_extra_groups: mail
 mail_location: maildir:~/Maildir
 dotlock_use_excl: yes
 fsync_disable: yes
 maildir_copy_with_hardlinks: yes
 mail_executable(default): /usr/local/libexec/dovecot/imap
 mail_executable(imap): /usr/local/libexec/dovecot/imap
 mail_executable(pop3): /usr/local/libexec/dovecot/pop3
 mail_process_size: 1024
 mail_plugins(default): quota imap_quota
 mail_plugins(imap): quota imap_quota
 mail_plugins(pop3):
 mail_plugin_dir(default): /usr/local/lib/dovecot/imap
 mail_plugin_dir(imap): /usr/local/lib/dovecot/imap
 mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3
 imap_client_workarounds(default): delay-newmail outlook-idle
 netscape-eoh tb-extra-mailbox-sep
 imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh
 tb-extra-mailbox-sep
 imap_client_workarounds(pop3): outlook-idle
 pop3_uidl_format(default):
 pop3_uidl_format(imap):
 pop3_uidl_format(pop3): %08Xu%08Xv
 pop3_client_workarounds(default):
 pop3_client_workarounds(imap):
 pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh
 pop3_logout_format(default): top=%t/%p, retr=%r/%b, del=%d/%m, size=%s
 pop3_logout_format(imap): top=%t/%p, retr=%r/%b, del=%d/%m, size=%s
 pop3_logout_format(pop3): top=%t/%T, retr=%r/%R, del=%d/%m, size=%s
 auth default:
   cache_size: 1024
   cache_ttl: 604800
   verbose: yes
   passdb:
 driver: pam
 args: cache_key=%Lu
   userdb:
 driver: passwd
   socket:
 type: listen
 master:
   path: /var/run/dovecot/auth-master
   mode: 384
   user: maildrop
 plugin:
   quota: maildir:storage=1000:ignore=Trash
 
 
 *** Postfix main.cf ***
 
 alias_database = hash:/etc/mail/postfix/aliases
 alias_maps = hash:/etc/mail/postfix/aliases
 biff = no
 command_directory = /usr/local/sbin
 daemon_directory = /usr/local/libexec/postfix
 
 debug_peer_level = 2
 debugger_command =
 PATH=/bin:/usr/bin:/usr/local/bin; export PATH; (echo cont;
 echo where) | gdb $daemon_directory/$process_name $process_id 21
 $config_directory/$process_name.$process_id.log  sleep 5
 
 Dovecot LDA Service - http://wiki.dovecot.org/LDA/Postfix
 dovecot_destination_recipient_limit = 1
 
 home_mailbox = Maildir/
 html_directory = no
 inet_interfaces = all
 mail_owner = postfix
 mail_spool_directory = /var/mail
 mailq_path = /usr/local/bin/mailq
 manpage_directory = /usr/local/man
 message_size_limit = 1200
 mydestination = $myhostname, localhost.$mydomain, localhost
 mydomain = geekinternetdevelopment.com
 myhostname = superman.geekinternetdevelopment.com
 mynetworks = 72.18.193.0/24, 127.0.0.0/8
 newaliases_path = /usr/local/bin/newaliases
 queue_directory = /var/spool/postfix
 readme_directory = no
 sample_directory = /usr/local/etc/postfix
 sendmail_path = /usr/local/sbin/sendmail
 setgid_group = maildrop
 smtpd_banner = $myhostname NO WHAMMIES!!!
 
 virtual_gid_maps = static:5000
 virtual_mailbox_base = /var/mailboxes
 virtual_mailbox_domains = hash:/etc/mail/postfix/vdomains
 virtual_mailbox_maps = hash:/etc/mail/postfix/vmailboxes
 virtual_minimum_uid = 1000
 virtual_transport = dovecot
 virtual_uid_maps = static:5000
 unknown_local_recipient_reject_code = 550
 
 *** Postfix master.cf ***
 ...snip...
 dovecot   unix  -   n   n   -   -   pipe
   flags=DRhu user=maildrop:maildrop
 argv=/usr/local/libexec/dovecot/deliver -e -d ${recipient}
 




Re: [Dovecot] In-site migration from /etc/passwd to LDAP

2007-10-03 Thread Patrick Ben Koetter
* Maykel Moya [EMAIL PROTECTED]:
 
 El mié, 03-10-2007 a las 12:07 +0200, Patrick Ben Koetter escribió:
 
  When you migrate an account also migrate the UID and GID to the user that 
  runs
  deliver.
 
 AFAIK deliver runs under dovecot user. Documentation say that dovecot
 user should not be used for owning mailboxes.

the user that runs deliver and not the user who owns the deliver binary!
You've added some user and group in Postfix master.cf to run deliver. This
user must be able to access (rwx) the mailbox.

 Besides, I wouldn't like to change UIDs so I can go back with minimal
 effort in case of a problem with the new setup. When the system probes
 itself stable enough I will migrate them to a pure virtual mail setup.

Your decision.

[EMAIL PROTECTED]

-- 
state of mind
Agentur für Kommunikation, Design und Softwareentwicklung

Patrick KoetterTel: 089 45227227
Echinger Strasse 3 Fax: 089 45227226
85386 Eching   Web: http://www.state-of-mind.de

Amtsgericht MünchenPartnerschaftsregister PR 563


Re: [Dovecot] Postfix with Deliver (LDA) - user unknown

2007-10-03 Thread Patrick Ben Koetter
* Karin Gregorec [EMAIL PROTECTED]:
 Good Day All!  I am attempting to configure deliver as our LDA.  I am
 also configuring the server to use Postfix instead of Sendmail.  I
 have followed the all the documentation and examples I could find.
 
 Below are my Dovecot and Postfix configs.  Can someone please smack me
 upside the head and tell me why I am getting user unknown errors?
 If i don't use deliver as the LDA, all works perfectly.  Help...

Do maildrop:maildrop exist?
Also you should change the smtpd_banner or better leave it as it's default. If
you don't let it promote ESMTP, clients won't know your server can do it.

[EMAIL PROTECTED]



 
 TIA,
 glenn
 
 ==
 
 
 *** Dovecot Config ***
 
 dovecot -n
 # 1.0.5: /usr/local/etc/dovecot.conf
 base_dir: /var/run/dovecot/
 log_path: /var/log/maillogs/dovecot.log
 protocols: imap imaps pop3 pop3s
 ssl_cipher_list: ALL:!LOW
 disable_plaintext_auth: no
 verbose_ssl: yes
 login_dir: /var/run/dovecot/login
 login_executable(default): /usr/local/libexec/dovecot/imap-login
 login_executable(imap): /usr/local/libexec/dovecot/imap-login
 login_executable(pop3): /usr/local/libexec/dovecot/pop3-login
 login_greeting: GID Ready
 login_log_format_elements: user=%u service=%s authMethod=%m rIP=%r
 lIP=%l encryption=%c
 login_max_processes_count: 256
 verbose_proctitle: yes
 first_valid_uid: 5000
 last_valid_uid: 1
 first_valid_gid: 0
 mail_extra_groups: mail
 mail_location: maildir:~/Maildir
 dotlock_use_excl: yes
 fsync_disable: yes
 maildir_copy_with_hardlinks: yes
 mail_executable(default): /usr/local/libexec/dovecot/imap
 mail_executable(imap): /usr/local/libexec/dovecot/imap
 mail_executable(pop3): /usr/local/libexec/dovecot/pop3
 mail_process_size: 1024
 mail_plugins(default): quota imap_quota
 mail_plugins(imap): quota imap_quota
 mail_plugins(pop3):
 mail_plugin_dir(default): /usr/local/lib/dovecot/imap
 mail_plugin_dir(imap): /usr/local/lib/dovecot/imap
 mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3
 imap_client_workarounds(default): delay-newmail outlook-idle
 netscape-eoh tb-extra-mailbox-sep
 imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh
 tb-extra-mailbox-sep
 imap_client_workarounds(pop3): outlook-idle
 pop3_uidl_format(default):
 pop3_uidl_format(imap):
 pop3_uidl_format(pop3): %08Xu%08Xv
 pop3_client_workarounds(default):
 pop3_client_workarounds(imap):
 pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh
 pop3_logout_format(default): top=%t/%p, retr=%r/%b, del=%d/%m, size=%s
 pop3_logout_format(imap): top=%t/%p, retr=%r/%b, del=%d/%m, size=%s
 pop3_logout_format(pop3): top=%t/%T, retr=%r/%R, del=%d/%m, size=%s
 auth default:
   cache_size: 1024
   cache_ttl: 604800
   verbose: yes
   passdb:
 driver: pam
 args: cache_key=%Lu
   userdb:
 driver: passwd
   socket:
 type: listen
 master:
   path: /var/run/dovecot/auth-master
   mode: 384
   user: maildrop
 plugin:
   quota: maildir:storage=1000:ignore=Trash
 
 
 *** Postfix main.cf ***
 
 alias_database = hash:/etc/mail/postfix/aliases
 alias_maps = hash:/etc/mail/postfix/aliases
 biff = no
 command_directory = /usr/local/sbin
 daemon_directory = /usr/local/libexec/postfix
 
 debug_peer_level = 2
 debugger_command =
 PATH=/bin:/usr/bin:/usr/local/bin; export PATH; (echo cont;
 echo where) | gdb $daemon_directory/$process_name $process_id 21
 $config_directory/$process_name.$process_id.log  sleep 5
 
 Dovecot LDA Service - http://wiki.dovecot.org/LDA/Postfix
 dovecot_destination_recipient_limit = 1
 
 home_mailbox = Maildir/
 html_directory = no
 inet_interfaces = all
 mail_owner = postfix
 mail_spool_directory = /var/mail
 mailq_path = /usr/local/bin/mailq
 manpage_directory = /usr/local/man
 message_size_limit = 1200
 mydestination = $myhostname, localhost.$mydomain, localhost
 mydomain = geekinternetdevelopment.com
 myhostname = superman.geekinternetdevelopment.com
 mynetworks = 72.18.193.0/24, 127.0.0.0/8
 newaliases_path = /usr/local/bin/newaliases
 queue_directory = /var/spool/postfix
 readme_directory = no
 sample_directory = /usr/local/etc/postfix
 sendmail_path = /usr/local/sbin/sendmail
 setgid_group = maildrop
 smtpd_banner = $myhostname NO WHAMMIES!!!
 
 virtual_gid_maps = static:5000
 virtual_mailbox_base = /var/mailboxes
 virtual_mailbox_domains = hash:/etc/mail/postfix/vdomains
 virtual_mailbox_maps = hash:/etc/mail/postfix/vmailboxes
 virtual_minimum_uid = 1000
 virtual_transport = dovecot
 virtual_uid_maps = static:5000
 unknown_local_recipient_reject_code = 550
 
 *** Postfix master.cf ***
 ...snip...
 dovecot   unix  -   n   n   -   -   pipe
   flags=DRhu user=maildrop:maildrop
 argv=/usr/local/libexec/dovecot/deliver -e -d ${recipient}

-- 
state of mind
Agentur für Kommunikation, Design und Softwareentwicklung

Patrick KoetterTel: 089 45227227
Echinger Strasse 3 Fax: 089 45227226
85386 Eching   Web: http://www.state-of-mind.de