Re: doveadm index: can't index a different namespace?

[Larry Rosenman]

I got solr  working.  I'll post more info later.

On Wed, Nov 2, 2016 at 3:37 PM, Larry Rosenman  wrote:

>
> On Wed, Nov 2, 2016 at 3:15 PM, Larry Rosenman  wrote:
>
>> ah.  Looking into Solr.  Is the wiki out of date with regard to
>> solr 6.2.0?  there doesn't seem to be a conf/schmea.xml file any more.
>
>
> I started the default solr from  FreeBSD ports, and there is no update
> URL.
>
> I'll continue investigating.
>
>
>
> --
> Larry Rosenman http://www.lerctr.org/~ler
> Phone: +1 214-642-9640 (c) E-Mail: larry...@gmail.com
> US Mail: 17716 Limpia Crk, Round Rock, TX 78664-7281
>



-- 
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 214-642-9640 (c) E-Mail: larry...@gmail.com
US Mail: 17716 Limpia Crk, Round Rock, TX 78664-7281

Re: doveadm index: can't index a different namespace?

[Timo Sirainen]

On 02 Nov 2016, at 22:02, Larry Rosenman  wrote:
> 
> why wouldn't it be able to use the ~/MAILARCHIVE/ filesystem space?
> 
> The other indexes etc seem to get built there.

It's not about adding an index there, but about trying to open "MAILARCHIVE" 
itself as a folder. fts-lucene attempts to use an existing folder's indexes for 
tracking some (rather useless) settings information. I guess that tracking 
could be removed entirely as well.

> 
> I'll see if the current  FreeBSD solr port is easier to set up than the last 
> time I tried. 
> 
> 
> On Wed, Nov 2, 2016 at 2:58 PM, Timo Sirainen  > wrote:
> I think it's simply not going to work with mbox. It's trying to open the 
> "#ARCHIVE" namespace prefix itself, which won't work and it's too much work 
> to try to fix it. You could try if this happens to make it work, but I'm not 
> sure: http://wiki2.dovecot.org/MboxChildFolders 
> 
> 
> Also instead of fts-lucene, you should switch to fts-solr. That would also 
> fix it and in general works better.
> 
> 
>> On 02 Nov 2016, at 21:40, Larry Rosenman > > wrote:
>> 
>> Is there anything else I can provide?
>> 
>> 
>> On Wed, Nov 2, 2016 at 1:30 PM, Larry Rosenman > > wrote:
>> nope -- No difference
>> 
>> thebighonker.lerctr.org  ~ $ ls -l 
>> ~/MAILARCHIVE/
>> total 176
>> drwx--   6 ler  ler   7 May 25  2014 2004
>> drwx--   8 ler  ler   8 Mar  3  2013 2005
>> drwx--  11 ler  ler  11 Mar  3  2013 2006
>> drwx--  11 ler  ler  11 May  3  2013 2007
>> drwx--  14 ler  ler  14 Mar  3  2013 2008
>> drwx--  14 ler  ler  14 Mar  3  2013 2009
>> drwx--  14 ler  ler  14 Mar  3  2013 2010
>> drwx--  15 ler  ler  15 Mar  3  2013 2011
>> drwx--  15 ler  ler  15 Mar  3  2013 2012
>> drwx--  14 ler  ler  14 Dec 31  2013 2013
>> drwxr-xr-x  14 ler  ler  14 Jan  1  2015 2014
>> drwxr-xr-x  14 ler  ler  14 Jan  1  2016 2015
>> drwxr-xr-x  12 ler  ler  12 Nov  1 00:05 2016
>> -rw-r--r--   1 ler  ler   0 Nov  2 13:26 inbox
>> thebighonker.lerctr.org  ~ $
>> 
>> doveadm(ler): Error: Mailbox #ARCHIVE/2013/04/Amplify_Mail: Status lookup 
>> failed: Internal error occurred. Refer to server log for more information. 
>> [2016-11-02 13:28:28]
>> doveadm(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't 
>> selectable
>> doveadm(ler): Error: Mailbox #ARCHIVE/2013/04/clamav-rules: Status lookup 
>> failed: Internal error occurred. Refer to server log for more information. 
>> [2016-11-02 13:28:28]
>> doveadm(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't 
>> selectable
>> doveadm(ler): Error: Mailbox #ARCHIVE/2013/04/SA/FN: Status lookup failed: 
>> Internal error occurred. Refer to server log for more information. 
>> [2016-11-02 13:28:28]
>> thebighonker.lerctr.org  ~ $
>> 
>> thebighonker.lerctr.org  ~ $ doveadm -D 
>> -v index \#ARCHIVE/\*
>> Debug: Loading modules from directory: /usr/local/lib/dovecot
>> Debug: Module loaded: /usr/local/lib/dovecot/lib15_notify_plugin.so
>> Debug: Module loaded: /usr/local/lib/dovecot/lib20_fts_plugin.so
>> Debug: Module loaded: /usr/local/lib/dovecot/lib21_fts_lucene_plugin.so
>> Debug: Module loaded: /usr/local/lib/dovecot/lib90_stats_plugin.so
>> Debug: Loading modules from directory: /usr/local/lib/dovecot/doveadm
>> Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: 
>> /usr/local/lib/dovecot/doveadm/lib10_doveadm_acl_plugin.so: Undefined symbol 
>> "acl_user_module" (this is usually intentional, so just ignore this message)
>> Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: 
>> /usr/local/lib/dovecot/doveadm/lib10_doveadm_expire_plugin.so: Undefined 
>> symbol "expire_set_lookup" (this is usually intentional, so just ignore this 
>> message)
>> Debug: Skipping module doveadm_quota_plugin, because dlopen() failed: 
>> /usr/local/lib/dovecot/doveadm/lib10_doveadm_quota_plugin.so: Undefined 
>> symbol "quota_user_module" (this is usually intentional, so just ignore this 
>> message)
>> Debug: Module loaded: 
>> /usr/local/lib/dovecot/doveadm/lib10_doveadm_sieve_plugin.so
>> Debug: Module loaded: 
>> /usr/local/lib/dovecot/doveadm/lib20_doveadm_fts_lucene_plugin.so
>> Debug: Module loaded: 
>> /usr/local/lib/dovecot/doveadm/lib20_doveadm_fts_plugin.so
>> doveadm(ler): Debug: Effective uid=1001, gid=1001, home=/home/ler
>> doveadm(ler): Debug: Namespace inbox: type=private, prefix=, sep=, 
>> inbox=yes, hidden=no, list=yes, subscriptions=yes 
>> location=mbox:~/mail:INBOX=~/mail/INBOX
>> doveadm(ler): Debug: fs: root=/home/ler/mail, index=, indexpvt=, control=, 
>> inbox=/home/ler/mail/INBOX, alt=
>> doveadm(ler): Debug: Namespace archive: type=private, 

Re: Outlook 2010 woes

[Peter Chiochetti]

Am 2016-11-02 um 13:16 schrieb Konstantin Khomoutov:

On Tue, 1 Nov 2016 18:20:14 -0500
Bryan Holloway  wrote:


The new (2.2) server had "auth_mechanisms" of "digest-md5" enabled
along with "plain". This is what was causing the four-second delay,
but only with Outlook clients.


It's pretty amazing how far removed the problem cause can be from that
problem's manifestation ;-)



Nah, this is not far at all; a system with virtual users only and PAM 
configured will take even longer to authenticate than four seconds


PS: I should have posted earlier ;)

--
peter

Re: doveadm index: can't index a different namespace?

[Larry Rosenman]

On Wed, Nov 2, 2016 at 3:15 PM, Larry Rosenman  wrote:

> ah.  Looking into Solr.  Is the wiki out of date with regard to
> solr 6.2.0?  there doesn't seem to be a conf/schmea.xml file any more.


I started the default solr from  FreeBSD ports, and there is no update URL.

I'll continue investigating.



-- 
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 214-642-9640 (c) E-Mail: larry...@gmail.com
US Mail: 17716 Limpia Crk, Round Rock, TX 78664-7281

Re: doveadm index: can't index a different namespace?

[Larry Rosenman]

On Wed, Nov 2, 2016 at 3:02 PM, Larry Rosenman  wrote:

> why wouldn't it be able to use the ~/MAILARCHIVE/ filesystem space?
>
> The other indexes etc seem to get built there.
>
> I'll see if the current  FreeBSD solr port is easier to set up than the
> last time I tried.
>




-- 
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 214-642-9640 (c) E-Mail: larry...@gmail.com
US Mail: 17716 Limpia Crk, Round Rock, TX 78664-7281

Re: doveadm index: can't index a different namespace?

[Larry Rosenman]

Is there anything else I can provide?


On Wed, Nov 2, 2016 at 1:30 PM, Larry Rosenman  wrote:

> nope -- No difference
>
> thebighonker.lerctr.org ~ $ ls -l ~/MAILARCHIVE/
> total 176
> drwx--   6 ler  ler   7 May 25  2014 2004
> drwx--   8 ler  ler   8 Mar  3  2013 2005
> drwx--  11 ler  ler  11 Mar  3  2013 2006
> drwx--  11 ler  ler  11 May  3  2013 2007
> drwx--  14 ler  ler  14 Mar  3  2013 2008
> drwx--  14 ler  ler  14 Mar  3  2013 2009
> drwx--  14 ler  ler  14 Mar  3  2013 2010
> drwx--  15 ler  ler  15 Mar  3  2013 2011
> drwx--  15 ler  ler  15 Mar  3  2013 2012
> drwx--  14 ler  ler  14 Dec 31  2013 2013
> drwxr-xr-x  14 ler  ler  14 Jan  1  2015 2014
> drwxr-xr-x  14 ler  ler  14 Jan  1  2016 2015
> drwxr-xr-x  12 ler  ler  12 Nov  1 00:05 2016
> -rw-r--r--   1 ler  ler   0 Nov  2 13:26 inbox
> thebighonker.lerctr.org ~ $
>
> doveadm(ler): Error: Mailbox #ARCHIVE/2013/04/Amplify_Mail: Status lookup
> failed: Internal error occurred. Refer to server log for more information.
> [2016-11-02 13:28:28]
> doveadm(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't
> selectable
> doveadm(ler): Error: Mailbox #ARCHIVE/2013/04/clamav-rules: Status lookup
> failed: Internal error occurred. Refer to server log for more information.
> [2016-11-02 13:28:28]
> doveadm(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't
> selectable
> doveadm(ler): Error: Mailbox #ARCHIVE/2013/04/SA/FN: Status lookup failed:
> Internal error occurred. Refer to server log for more information.
> [2016-11-02 13:28:28]
> thebighonker.lerctr.org ~ $
>
> thebighonker.lerctr.org ~ $ doveadm -D -v index \#ARCHIVE/\*
> Debug: Loading modules from directory: /usr/local/lib/dovecot
> Debug: Module loaded: /usr/local/lib/dovecot/lib15_notify_plugin.so
> Debug: Module loaded: /usr/local/lib/dovecot/lib20_fts_plugin.so
> Debug: Module loaded: /usr/local/lib/dovecot/lib21_fts_lucene_plugin.so
> Debug: Module loaded: /usr/local/lib/dovecot/lib90_stats_plugin.so
> Debug: Loading modules from directory: /usr/local/lib/dovecot/doveadm
> Debug: Skipping module doveadm_acl_plugin, because dlopen() failed:
> /usr/local/lib/dovecot/doveadm/lib10_doveadm_acl_plugin.so: Undefined
> symbol "acl_user_module" (this is usually intentional, so just ignore this
> message)
> Debug: Skipping module doveadm_expire_plugin, because dlopen() failed:
> /usr/local/lib/dovecot/doveadm/lib10_doveadm_expire_plugin.so: Undefined
> symbol "expire_set_lookup" (this is usually intentional, so just ignore
> this message)
> Debug: Skipping module doveadm_quota_plugin, because dlopen() failed:
> /usr/local/lib/dovecot/doveadm/lib10_doveadm_quota_plugin.so: Undefined
> symbol "quota_user_module" (this is usually intentional, so just ignore
> this message)
> Debug: Module loaded: /usr/local/lib/dovecot/doveadm/lib10_doveadm_sieve_
> plugin.so
> Debug: Module loaded: /usr/local/lib/dovecot/doveadm/lib20_doveadm_fts_
> lucene_plugin.so
> Debug: Module loaded: /usr/local/lib/dovecot/doveadm/lib20_doveadm_fts_
> plugin.so
> doveadm(ler): Debug: Effective uid=1001, gid=1001, home=/home/ler
> doveadm(ler): Debug: Namespace inbox: type=private, prefix=, sep=,
> inbox=yes, hidden=no, list=yes, subscriptions=yes
> location=mbox:~/mail:INBOX=~/mail/INBOX
> doveadm(ler): Debug: fs: root=/home/ler/mail, index=, indexpvt=, control=,
> inbox=/home/ler/mail/INBOX, alt=
> doveadm(ler): Debug: Namespace archive: type=private, prefix=#ARCHIVE/,
> sep=/, inbox=no, hidden=no, list=no, subscriptions=yes
> location=mbox:~/MAILARCHIVE
> doveadm(ler): Debug: mbox: INBOX defaulted to /home/ler/MAILARCHIVE/inbox
> doveadm(ler): Debug: fs: root=/home/ler/MAILARCHIVE, index=, indexpvt=,
> control=, inbox=/home/ler/MAILARCHIVE/inbox, alt=
> doveadm(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't
> selectable
> doveadm(ler): Error: Mailbox #ARCHIVE/2011/07/satelliteguys: Status
> lookup failed: Internal error occurred. Refer to server log for more
> information. [2016-11-02 13:27:19]
> doveadm(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't
> selectable
> doveadm(ler): Error: Mailbox #ARCHIVE/2011/07/SA/FN: Status lookup failed:
> Internal error occurred. Refer to server log for more information.
> [2016-11-02 13:27:19]
> doveadm(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't
> selectable
> doveadm(ler): Error: Mailbox #ARCHIVE/2011/07/SENT: Status lookup failed:
> Internal error occurred. Refer to server log for more information.
> [2016-11-02 13:27:19]
> doveadm(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't
> selectable
> doveadm(ler): Error: Mailbox #ARCHIVE/2011/07/INBOX: Status lookup failed:
> Internal error occurred. Refer to server log for more information.
> [2016-11-02 13:27:19]
> doveadm(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't
> selectable
> doveadm(ler): Error: Mailbox #ARCHIVE/2011/07/SPAM: Status lookup 

Re: No stats under FreeBSD 10.3

[Ruud Boon]

Thnx Larry,

Thats was it!

Ruud

> On 2 Nov 2016, at 18:52, Larry Rosenman  wrote:
> 
> I added the following to 90-plugin.conf:
> 
> service stats {
>   chroot = empty
>   client_limit = 0
>   drop_priv_before_exec = no
>   executable = stats
>   extra_groups =
>   fifo_listener stats-mail {
> group =
> mode = 0666
> user =
>   }
>   fifo_listener stats-user {
> group =
> mode = 0666
> user =
>   }
> 
> 
> and now:
> srw-rw-rw-  1 root wheel  0 Nov  2 12:47 stats
> prw-rw-rw-  1 root wheel  0 Nov  2 12:47 stats-mail
> prw-rw-rw-  1 root wheel  0 Nov  2 12:47 stats-user
> 
> and I get stats. 
> 
> 
> On Wed, Nov 2, 2016 at 12:18 PM, Larry Rosenman  > wrote:
> prw-rw-rw-  1 root wheel  0 Nov  1 13:09 stats-mail
> prw---  1 root wheel  0 Nov  1 13:09 stats-user
> drwxr-x---  2 root dovenull   4 Nov  1 13:09 token-login
> 
> If something other than root is trying to write to stats-user, we found the 
> issue. 
> 
> this is on 10.3-STABLE 
> 
> On Wed, Nov 2, 2016 at 12:13 PM, Timo Sirainen  > wrote:
> On 01 Nov 2016, at 22:31, Ruud Boon  > wrote:
> >
> > HI,
> >
> > I’m currently testing the stats module of Dovecot (2.2.26.0 (23d1de6))
> > Looks like there no statistics under FreeBSD.
> > Server isn’t busy yet but got at least a few connection open.
> 
> See if there are any errors in logs. I guess mail-stats fifo doesn't have 
> enough permissions so that imap/pop3/lmtp can connect to it.
> 
> 
> 
> -- 
> Larry Rosenman http://www.lerctr.org/~ler 
> 
> Phone: +1 214-642-9640  (c) E-Mail: 
> larry...@gmail.com 
> US Mail: 17716 Limpia Crk, Round Rock, TX 78664-7281
> 
> 
> 
> -- 
> Larry Rosenman http://www.lerctr.org/~ler 
> 
> Phone: +1 214-642-9640 (c) E-Mail: larry...@gmail.com 
> 
> US Mail: 17716 Limpia Crk, Round Rock, TX 78664-7281

Re: Dovecot 2 LDAP "unknown user"

[Peter Fraser]

I updated dovecot-ldap.conf.ext so that it now reads as below:

#Custom Settings
hosts = 192.168.153.143
dn = u...@domain.com
dnpass = password
auth_bind = yes
auth_bind_userdn = %u...@domain.com
ldap_version = 3
base = dc=rpservices,dc=com
#user_filter = (&(objectclass=person)(mail=%u))
user_filter = (&(objectclass=person)(uid=%u))
pass_filter = (&(objectclass=person)(uid=%u))
user_attrs = homeDirectory=/home/vmail/%u,uid=1002,gid=1002

When I tried to log in again using telnet 127.0.0.1 110, the error shows up
in maillog. I first tried logging in with just the username, then I tried
using usern...@domain.com. Using doveadm still works though.

 BSD-11 dovecot: auth: ldap(peter,127.0.0.1,): unknown
user
Nov  2 11:29:23 BSD-11 dovecot: auth: Error:
ldap(user,127.0.0.1,): user not found from userdb
Nov  2 11:29:23 BSD-11 dovecot: pop3: Error: Authenticated user not found
from userdb, auth lookup id=226492417 (client-pid=874 client-id=1)
Nov  2 11:29:23 BSD-11 dovecot: pop3-login: Internal login failure (pid=874
id=1) (internal failure, 1 successful auths): user=, method=PLAIN
Nov  2 11:30:42 BSD-11 dovecot: auth: ldap(u...@domain.com): invalid
credentials
Nov  2 14:08:17 BSD-11 dovecot: auth:
ldap(user,127.0.0.1,<4uLkKVZAvY9/AAAB>): invalid credentials
Nov  2 14:09:38 BSD-11 dovecot: auth:
ldap(u...@domain.com,127.0.0.1,<4uLkKVZAvY9/AAAB>):
invalid credentials
Nov  2 14:11:00 BSD-11 dovecot: pop3-login: Disconnected: Inactivity (auth
failed, 2 attempts in 163 secs): user=

On Wed, Nov 2, 2016 at 4:39 AM, Steffen Kaiser <
skdove...@smail.inf.fh-brs.de> wrote:

> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
> On Tue, 1 Nov 2016, Peter Fraser wrote:
>
> root@BSD-11:/usr/local/etc/dovecot # doveadm auth test username
>> Password:
>> passdb: user auth succeeded
>> extra fields:
>>  user=username
>> root@BSD-11:/usr/local/etc/dovecot #
>>
>> But when I run telnet 127.0.0.1 110 and try to log in it says unknown
>> user.
>> Error below in maillog.
>> BSD-11 dovecot: pop3: Error: Authenticated user not found from userdb,
>> auth
>> lookup id=2262958081 (client-pid=2273 client-id=1)
>> Nov  1 15:15:41 BSD-11 dovecot: pop3-login: Internal login failure
>> (pid=2273 id=1) (internal failure, 1 successful auths): user=
>>
>
> passdb {
>>  args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext
>>  driver = ldap
>> }
>>
>
> userdb {
>>  args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext
>>  driver = ldap
>> }
>>
>
> #Contents of dovecot-ldap.conf.ext
>> hosts = 192.168.153.143
>> dn = u...@domain.com
>> dnpass = password
>> auth_bind = yes
>> auth_bind_userdn = domain\%u
>> ldap_version = 3
>> base = dc=domain,dc=com
>> pass_filter = (&(objectclass=person)(uid=%u))
>> user_attrs = homeDirectory=/home/vmail/%u,uid=1002,gid=1002
>>
>
> duplicate pass_filter to user_filter.
>
> - -- Steffen Kaiser
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v1
>
> iQEVAwUBWBm0Onz1H7kL/d9rAQJWhQf+PRD5yd29UyL1drjlTOWD/s4qUffg8OBh
> inb8L3eCKDuSad8s9INUJSa6WxGEVdatL4PKjTcbL5IsPIob87W5jOduWFMtPlt0
> FXxWtfc1bAjRyNLzkGe1mUT1z0EDVO22UkQSd9J3bZQ9wR+FzgeGqdcyzl+WSyzB
> Eaiea23ieCjhZRAZF/pl1gDjkap+tPQ8gZLdt4p1QQrY5Jllifu5jYEyjqPkwUXf
> YMfEiCJSInyMQ8CCuL1Aj8iM/7qLLi8pyC9KSA6NntK4mpHAaInYln6SZY+ZGJCY
> KV60nGuwwv3qQFeKchhhr+GpGDQYXJ5eBq+Ji+cKgvbypFa13NNS8A==
> =l02F
> -END PGP SIGNATURE-
>

Re: Repeat e-mail syndrome shows up in 2.2.26+

[The Doctor]

On Wed, Nov 02, 2016 at 07:15:17PM +0200, Timo Sirainen wrote:
> On 01 Nov 2016, at 18:26, The Doctor  wrote:
> > 
> > Getting complaints from people about pop/imap
> > 
> > issues.
> > 
> > some people are getting repaeted e-mail.
> > 
> > Other are not able to delete their e-mails from an IMAP lcient.
> 
> Anything in error logs? POP3 duplicates sound like IMAP UIDs were changed (or 
> are still changing?)

Let me see,  I just started to rotate these logs just today.

-- 
Member - Liberal International This is doctor@@nl2k.ab.ca Ici doctor@@nl2k.ab.ca
God,Queen and country!Never Satan President Republic!Beware AntiChrist rising! 
http://www.fullyfollow.me/rootnl2k  Look at Psalms 14 and 53 on Atheism
Time for the USA to hold a referendum on its republic and vote to dissolve!! 

Re: doveadm index: can't index a different namespace?

[Larry Rosenman]

nope -- No difference

thebighonker.lerctr.org ~ $ ls -l ~/MAILARCHIVE/
total 176
drwx--   6 ler  ler   7 May 25  2014 2004
drwx--   8 ler  ler   8 Mar  3  2013 2005
drwx--  11 ler  ler  11 Mar  3  2013 2006
drwx--  11 ler  ler  11 May  3  2013 2007
drwx--  14 ler  ler  14 Mar  3  2013 2008
drwx--  14 ler  ler  14 Mar  3  2013 2009
drwx--  14 ler  ler  14 Mar  3  2013 2010
drwx--  15 ler  ler  15 Mar  3  2013 2011
drwx--  15 ler  ler  15 Mar  3  2013 2012
drwx--  14 ler  ler  14 Dec 31  2013 2013
drwxr-xr-x  14 ler  ler  14 Jan  1  2015 2014
drwxr-xr-x  14 ler  ler  14 Jan  1  2016 2015
drwxr-xr-x  12 ler  ler  12 Nov  1 00:05 2016
-rw-r--r--   1 ler  ler   0 Nov  2 13:26 inbox
thebighonker.lerctr.org ~ $

doveadm(ler): Error: Mailbox #ARCHIVE/2013/04/Amplify_Mail: Status lookup
failed: Internal error occurred. Refer to server log for more information.
[2016-11-02 13:28:28]
doveadm(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't
selectable
doveadm(ler): Error: Mailbox #ARCHIVE/2013/04/clamav-rules: Status lookup
failed: Internal error occurred. Refer to server log for more information.
[2016-11-02 13:28:28]
doveadm(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't
selectable
doveadm(ler): Error: Mailbox #ARCHIVE/2013/04/SA/FN: Status lookup failed:
Internal error occurred. Refer to server log for more information.
[2016-11-02 13:28:28]
thebighonker.lerctr.org ~ $

thebighonker.lerctr.org ~ $ doveadm -D -v index \#ARCHIVE/\*
Debug: Loading modules from directory: /usr/local/lib/dovecot
Debug: Module loaded: /usr/local/lib/dovecot/lib15_notify_plugin.so
Debug: Module loaded: /usr/local/lib/dovecot/lib20_fts_plugin.so
Debug: Module loaded: /usr/local/lib/dovecot/lib21_fts_lucene_plugin.so
Debug: Module loaded: /usr/local/lib/dovecot/lib90_stats_plugin.so
Debug: Loading modules from directory: /usr/local/lib/dovecot/doveadm
Debug: Skipping module doveadm_acl_plugin, because dlopen() failed:
/usr/local/lib/dovecot/doveadm/lib10_doveadm_acl_plugin.so: Undefined
symbol "acl_user_module" (this is usually intentional, so just ignore this
message)
Debug: Skipping module doveadm_expire_plugin, because dlopen() failed:
/usr/local/lib/dovecot/doveadm/lib10_doveadm_expire_plugin.so: Undefined
symbol "expire_set_lookup" (this is usually intentional, so just ignore
this message)
Debug: Skipping module doveadm_quota_plugin, because dlopen() failed:
/usr/local/lib/dovecot/doveadm/lib10_doveadm_quota_plugin.so: Undefined
symbol "quota_user_module" (this is usually intentional, so just ignore
this message)
Debug: Module loaded:
/usr/local/lib/dovecot/doveadm/lib10_doveadm_sieve_plugin.so
Debug: Module loaded:
/usr/local/lib/dovecot/doveadm/lib20_doveadm_fts_lucene_plugin.so
Debug: Module loaded:
/usr/local/lib/dovecot/doveadm/lib20_doveadm_fts_plugin.so
doveadm(ler): Debug: Effective uid=1001, gid=1001, home=/home/ler
doveadm(ler): Debug: Namespace inbox: type=private, prefix=, sep=,
inbox=yes, hidden=no, list=yes, subscriptions=yes
location=mbox:~/mail:INBOX=~/mail/INBOX
doveadm(ler): Debug: fs: root=/home/ler/mail, index=, indexpvt=, control=,
inbox=/home/ler/mail/INBOX, alt=
doveadm(ler): Debug: Namespace archive: type=private, prefix=#ARCHIVE/,
sep=/, inbox=no, hidden=no, list=no, subscriptions=yes
location=mbox:~/MAILARCHIVE
doveadm(ler): Debug: mbox: INBOX defaulted to /home/ler/MAILARCHIVE/inbox
doveadm(ler): Debug: fs: root=/home/ler/MAILARCHIVE, index=, indexpvt=,
control=, inbox=/home/ler/MAILARCHIVE/inbox, alt=
doveadm(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't
selectable
doveadm(ler): Error: Mailbox #ARCHIVE/2011/07/satelliteguys: Status lookup
failed: Internal error occurred. Refer to server log for more information.
[2016-11-02 13:27:19]
doveadm(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't
selectable
doveadm(ler): Error: Mailbox #ARCHIVE/2011/07/SA/FN: Status lookup failed:
Internal error occurred. Refer to server log for more information.
[2016-11-02 13:27:19]
doveadm(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't
selectable
doveadm(ler): Error: Mailbox #ARCHIVE/2011/07/SENT: Status lookup failed:
Internal error occurred. Refer to server log for more information.
[2016-11-02 13:27:19]
doveadm(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't
selectable
doveadm(ler): Error: Mailbox #ARCHIVE/2011/07/INBOX: Status lookup failed:
Internal error occurred. Refer to server log for more information.
[2016-11-02 13:27:19]
doveadm(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't
selectable
doveadm(ler): Error: Mailbox #ARCHIVE/2011/07/SPAM: Status lookup failed:
Internal error occurred. Refer to server log for more information.
[2016-11-02 13:27:19]
doveadm(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't
selectable
doveadm(ler): Error: Mailbox #ARCHIVE/2011/07/root-mail: Status lookup
failed: Internal error occurred. Refer to server log 

Re: doveadm index: can't index a different namespace?

[Timo Sirainen]

It looks like fts-lucene wants to write some information into INBOX's index 
files. But your archive namespace doesn't have a working INBOX. Maybe it would 
work if you create "#ARCHIVE/inbox"?

> On 02 Nov 2016, at 20:13, Larry Rosenman  wrote:
> 
> one other thing, fts_autoindex does NOT appear to be working on the 
> #ARCHIVE/ NAMESPACE. 
> 
> I wonder if these are all interrelated?
> 
> On Wed, Nov 2, 2016 at 1:10 PM, Larry Rosenman  > wrote:
> FWIW it DOES work on my default NAMESPACE, just not the #ARCHIVE/ NAMESPACE.
> 
> 
> On Wed, Nov 2, 2016 at 12:32 PM, Larry Rosenman  > wrote:
> It's ALWAYS failed on the other NAMESPACE. 
> 
> Some of the logging looks weird as well for the 2nd namespace:
> 
> Nov  2 12:32:03 thebighonker dovecot: imap-login: Login: user=, 
> method=PLAIN, rip=207.231.91.36, lip=192.147.25.65, mpid=76712, TLS, 
> session=
> Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: Loading modules from 
> directory: /usr/local/lib/dovecot
> Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: Module loaded: 
> /usr/local/lib/dovecot/lib15_notify_plugin.so
> Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: Module loaded: 
> /usr/local/lib/dovecot/lib20_fts_plugin.so
> Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: Module loaded: 
> /usr/local/lib/dovecot/lib20_mail_log_plugin.so
> Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: Module loaded: 
> /usr/local/lib/dovecot/lib21_fts_lucene_plugin.so
> Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: Module loaded: 
> /usr/local/lib/dovecot/lib90_stats_plugin.so
> Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: Module loaded: 
> /usr/local/lib/dovecot/lib95_imap_stats_plugin.so
> Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: Effective uid=1004, 
> gid=1004, home=/home/mrm
> Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: Namespace inbox: 
> type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, 
> subscriptions=yes location=mbox:~/mail:INBOX=~/mail/INBOX
> Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: fs: 
> root=/home/mrm/mail, index=, indexpvt=, control=, inbox=/home/mrm/mail/INBOX, 
> alt=
> Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: Namespace archive: 
> type=private, prefix=#ARCHIVE/, sep=/, inbox=no, hidden=no, list=no, 
> subscriptions=yes location=mbox:~/MAILARCHIVE
> Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: mbox: INBOX defaulted 
> to /home/mrm/MAILARCHIVE/inbox
> Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: fs: 
> root=/home/mrm/MAILARCHIVE, index=, indexpvt=, control=, 
> inbox=/home/mrm/MAILARCHIVE/inbox, alt=
> 
> 
> 
> On Wed, Nov 2, 2016 at 12:30 PM, Timo Sirainen  > wrote:
> It's getting a bit strange. You were running 2.2.25 previously and it was 
> working then? Does the doveadm index always fail with the same errors?
> 
> Also I just noticed that it's saying INBOX isn't selectable: "lucene: Failed 
> to sync mailbox INBOX: Mailbox isn't selectable". Which I guess isn't true. 
> It seems to be failing somewhat randomly..
> 
>> On 02 Nov 2016, at 19:25, Larry Rosenman > > wrote:
>> 
>> thebighonker.lerctr.org  ~ $ doveadm 
>> mailbox status -u l...@lerctr.org  vsize 
>> \#ARCHIVE/2016/10/clamav-rules
>> #ARCHIVE/2016/10/clamav-rules vsize=3840752
>> thebighonker.lerctr.org  ~ $
>> 
>> 
>> 
>> On Wed, Nov 2, 2016 at 12:22 PM, Timo Sirainen > > wrote:
>> On 02 Nov 2016, at 19:19, Larry Rosenman > > wrote:
>> >
>> > clamav-rules is NOT a directory, nor are any of the others:
>> 
>> Can you access these mboxes at all with Dovecot? e.g.
>> 
>> doveadm mailbox status -u user@domain clamav-rules
>> 
>> > thebighonker.lerctr.org  ~/MAILARCHIVE $ 
>> > cd 2016/10
>> > thebighonker.lerctr.org  
>> > ~/MAILARCHIVE/2016/10 $ ls -l
>> > total 72106
>> > -rw-r--r--   1 ler  ler 440461 Nov  1 00:05 Amplify_Mail
>> > -rw-r--r--   1 ler  ler  104102478 Nov  1 14:53 INBOX
>> > drwxr-xr-x   3 ler  ler  4 Nov  1 00:05 SA
>> > -rw-r--r--   1 ler  ler   21083767 Nov  1 00:05 SENT
>> > -rw-r--r--   1 ler  ler1850677 Nov  1 00:05 SPAM
>> > -rw-r--r--   1 ler  ler  36483 Nov  1 00:05 UFCU_Mail
>> > -rw-r--r--   1 ler  ler 460073 Nov  1 00:05 bacula
>> > -rw-r--r--   1 ler  ler1107098 Nov  1 00:05 bayes-update
>> > -rw-r--r--   1 ler  ler3884041 Nov  1 00:05 clamav-rules
>> > -rw-r--r--   1 ler  ler 652132 Nov  1 00:05 firewall
>> > drwxr-xr-x  11 ler  ler 20 Nov  1 00:05 lists
>> > -rw-r--r--   1 ler  ler   25122465 Nov  1 00:05 

Re: doveadm index: can't index a different namespace?

[Larry Rosenman]

one other thing, fts_autoindex does NOT appear to be working on the
#ARCHIVE/ NAMESPACE.

I wonder if these are all interrelated?

On Wed, Nov 2, 2016 at 1:10 PM, Larry Rosenman  wrote:

> FWIW it DOES work on my default NAMESPACE, just not the #ARCHIVE/
> NAMESPACE.
>
>
> On Wed, Nov 2, 2016 at 12:32 PM, Larry Rosenman 
> wrote:
>
>> It's ALWAYS failed on the other NAMESPACE.
>>
>> Some of the logging looks weird as well for the 2nd namespace:
>>
>> Nov  2 12:32:03 thebighonker dovecot: imap-login: Login: user=,
>> method=PLAIN, rip=207.231.91.36, lip=192.147.25.65, mpid=76712, TLS,
>> session=
>> Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: Loading modules
>> from directory: /usr/local/lib/dovecot
>> Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: Module loaded:
>> /usr/local/lib/dovecot/lib15_notify_plugin.so
>> Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: Module loaded:
>> /usr/local/lib/dovecot/lib20_fts_plugin.so
>> Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: Module loaded:
>> /usr/local/lib/dovecot/lib20_mail_log_plugin.so
>> Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: Module loaded:
>> /usr/local/lib/dovecot/lib21_fts_lucene_plugin.so
>> Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: Module loaded:
>> /usr/local/lib/dovecot/lib90_stats_plugin.so
>> Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: Module loaded:
>> /usr/local/lib/dovecot/lib95_imap_stats_plugin.so
>> Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: Effective
>> uid=1004, gid=1004, home=/home/mrm
>> Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: Namespace inbox:
>> type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes,
>> subscriptions=yes location=mbox:~/mail:INBOX=~/mail/INBOX
>> Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: fs:
>> root=/home/mrm/mail, index=, indexpvt=, control=,
>> inbox=/home/mrm/mail/INBOX, alt=
>> Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: Namespace
>> archive: type=private, prefix=#ARCHIVE/, sep=/, inbox=no, hidden=no,
>> list=no, subscriptions=yes location=mbox:~/MAILARCHIVE
>> Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: mbox: INBOX
>> defaulted to /home/mrm/MAILARCHIVE/inbox
>> Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: fs:
>> root=/home/mrm/MAILARCHIVE, index=, indexpvt=, control=,
>> inbox=/home/mrm/MAILARCHIVE/inbox, alt=
>>
>>
>>
>> On Wed, Nov 2, 2016 at 12:30 PM, Timo Sirainen  wrote:
>>
>>> It's getting a bit strange. You were running 2.2.25 previously and it
>>> was working then? Does the doveadm index always fail with the same errors?
>>>
>>> Also I just noticed that it's saying INBOX isn't selectable: "lucene:
>>> Failed to sync mailbox INBOX: Mailbox isn't selectable". Which I guess
>>> isn't true. It seems to be failing somewhat randomly..
>>>
>>> On 02 Nov 2016, at 19:25, Larry Rosenman  wrote:
>>>
>>> thebighonker.lerctr.org ~ $ doveadm mailbox status -u l...@lerctr.org
>>> vsize \#ARCHIVE/2016/10/clamav-rules
>>> #ARCHIVE/2016/10/clamav-rules vsize=3840752
>>> thebighonker.lerctr.org ~ $
>>>
>>>
>>>
>>> On Wed, Nov 2, 2016 at 12:22 PM, Timo Sirainen  wrote:
>>>
 On 02 Nov 2016, at 19:19, Larry Rosenman  wrote:
 >
 > clamav-rules is NOT a directory, nor are any of the others:

 Can you access these mboxes at all with Dovecot? e.g.

 doveadm mailbox status -u user@domain clamav-rules

 > thebighonker.lerctr.org ~/MAILARCHIVE $ cd 2016/10
 > thebighonker.lerctr.org ~/MAILARCHIVE/2016/10 $ ls -l
 > total 72106
 > -rw-r--r--   1 ler  ler 440461 Nov  1 00:05 Amplify_Mail
 > -rw-r--r--   1 ler  ler  104102478 Nov  1 14:53 INBOX
 > drwxr-xr-x   3 ler  ler  4 Nov  1 00:05 SA
 > -rw-r--r--   1 ler  ler   21083767 Nov  1 00:05 SENT
 > -rw-r--r--   1 ler  ler1850677 Nov  1 00:05 SPAM
 > -rw-r--r--   1 ler  ler  36483 Nov  1 00:05 UFCU_Mail
 > -rw-r--r--   1 ler  ler 460073 Nov  1 00:05 bacula
 > -rw-r--r--   1 ler  ler1107098 Nov  1 00:05 bayes-update
 > -rw-r--r--   1 ler  ler3884041 Nov  1 00:05 clamav-rules
 > -rw-r--r--   1 ler  ler 652132 Nov  1 00:05 firewall
 > drwxr-xr-x  11 ler  ler 20 Nov  1 00:05 lists
 > -rw-r--r--   1 ler  ler   25122465 Nov  1 00:05 root-mail
 > -rw-r--r--   1 ler  ler  44553 Nov  1 00:05 satelliteguys
 > -rw-r--r--   1 ler  ler 625628 Nov  1 00:05 wview
 > thebighonker.lerctr.org ~/MAILARCHIVE/2016/10 $
 >
 > On Wed, Nov 2, 2016 at 12:17 PM, Timo Sirainen  wrote:
 >
 >> On 01 Nov 2016, at 20:30, Larry Rosenman  wrote:
 >>>
 >>> doveadm -D  -vv index  \#ARCHIVE/\* garners the below for ALL
 >> mailboxes
 >>> in the
 >>> namespace:
 >>> doveadm(ler): Error: Mailbox 

Re: doveadm index: can't index a different namespace?

[Larry Rosenman]

FWIW it DOES work on my default NAMESPACE, just not the #ARCHIVE/ NAMESPACE.


On Wed, Nov 2, 2016 at 12:32 PM, Larry Rosenman  wrote:

> It's ALWAYS failed on the other NAMESPACE.
>
> Some of the logging looks weird as well for the 2nd namespace:
>
> Nov  2 12:32:03 thebighonker dovecot: imap-login: Login: user=,
> method=PLAIN, rip=207.231.91.36, lip=192.147.25.65, mpid=76712, TLS,
> session=
> Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: Loading modules
> from directory: /usr/local/lib/dovecot
> Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: Module loaded:
> /usr/local/lib/dovecot/lib15_notify_plugin.so
> Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: Module loaded:
> /usr/local/lib/dovecot/lib20_fts_plugin.so
> Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: Module loaded:
> /usr/local/lib/dovecot/lib20_mail_log_plugin.so
> Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: Module loaded:
> /usr/local/lib/dovecot/lib21_fts_lucene_plugin.so
> Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: Module loaded:
> /usr/local/lib/dovecot/lib90_stats_plugin.so
> Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: Module loaded:
> /usr/local/lib/dovecot/lib95_imap_stats_plugin.so
> Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: Effective
> uid=1004, gid=1004, home=/home/mrm
> Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: Namespace inbox:
> type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes,
> subscriptions=yes location=mbox:~/mail:INBOX=~/mail/INBOX
> Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: fs:
> root=/home/mrm/mail, index=, indexpvt=, control=,
> inbox=/home/mrm/mail/INBOX, alt=
> Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: Namespace archive:
> type=private, prefix=#ARCHIVE/, sep=/, inbox=no, hidden=no, list=no,
> subscriptions=yes location=mbox:~/MAILARCHIVE
> Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: mbox: INBOX
> defaulted to /home/mrm/MAILARCHIVE/inbox
> Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: fs:
> root=/home/mrm/MAILARCHIVE, index=, indexpvt=, control=,
> inbox=/home/mrm/MAILARCHIVE/inbox, alt=
>
>
>
> On Wed, Nov 2, 2016 at 12:30 PM, Timo Sirainen  wrote:
>
>> It's getting a bit strange. You were running 2.2.25 previously and it was
>> working then? Does the doveadm index always fail with the same errors?
>>
>> Also I just noticed that it's saying INBOX isn't selectable: "lucene:
>> Failed to sync mailbox INBOX: Mailbox isn't selectable". Which I guess
>> isn't true. It seems to be failing somewhat randomly..
>>
>> On 02 Nov 2016, at 19:25, Larry Rosenman  wrote:
>>
>> thebighonker.lerctr.org ~ $ doveadm mailbox status -u l...@lerctr.org
>> vsize \#ARCHIVE/2016/10/clamav-rules
>> #ARCHIVE/2016/10/clamav-rules vsize=3840752
>> thebighonker.lerctr.org ~ $
>>
>>
>>
>> On Wed, Nov 2, 2016 at 12:22 PM, Timo Sirainen  wrote:
>>
>>> On 02 Nov 2016, at 19:19, Larry Rosenman  wrote:
>>> >
>>> > clamav-rules is NOT a directory, nor are any of the others:
>>>
>>> Can you access these mboxes at all with Dovecot? e.g.
>>>
>>> doveadm mailbox status -u user@domain clamav-rules
>>>
>>> > thebighonker.lerctr.org ~/MAILARCHIVE $ cd 2016/10
>>> > thebighonker.lerctr.org ~/MAILARCHIVE/2016/10 $ ls -l
>>> > total 72106
>>> > -rw-r--r--   1 ler  ler 440461 Nov  1 00:05 Amplify_Mail
>>> > -rw-r--r--   1 ler  ler  104102478 Nov  1 14:53 INBOX
>>> > drwxr-xr-x   3 ler  ler  4 Nov  1 00:05 SA
>>> > -rw-r--r--   1 ler  ler   21083767 Nov  1 00:05 SENT
>>> > -rw-r--r--   1 ler  ler1850677 Nov  1 00:05 SPAM
>>> > -rw-r--r--   1 ler  ler  36483 Nov  1 00:05 UFCU_Mail
>>> > -rw-r--r--   1 ler  ler 460073 Nov  1 00:05 bacula
>>> > -rw-r--r--   1 ler  ler1107098 Nov  1 00:05 bayes-update
>>> > -rw-r--r--   1 ler  ler3884041 Nov  1 00:05 clamav-rules
>>> > -rw-r--r--   1 ler  ler 652132 Nov  1 00:05 firewall
>>> > drwxr-xr-x  11 ler  ler 20 Nov  1 00:05 lists
>>> > -rw-r--r--   1 ler  ler   25122465 Nov  1 00:05 root-mail
>>> > -rw-r--r--   1 ler  ler  44553 Nov  1 00:05 satelliteguys
>>> > -rw-r--r--   1 ler  ler 625628 Nov  1 00:05 wview
>>> > thebighonker.lerctr.org ~/MAILARCHIVE/2016/10 $
>>> >
>>> > On Wed, Nov 2, 2016 at 12:17 PM, Timo Sirainen  wrote:
>>> >
>>> >> On 01 Nov 2016, at 20:30, Larry Rosenman  wrote:
>>> >>>
>>> >>> doveadm -D  -vv index  \#ARCHIVE/\* garners the below for ALL
>>> >> mailboxes
>>> >>> in the
>>> >>> namespace:
>>> >>> doveadm(ler): Error: Mailbox #ARCHIVE/2013/04/clamav-rules: Status
>>> lookup
>>> >>> failed: Internal error occurred. Refer to server log for more
>>> >> information.
>>> >>> [2016-11-01 13:25:21]
>>> >>> doveadm(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox
>>> isn't
>>> >>> selectable
>>> >>
>>> >> You're using mbox format and "clamav-rules" is a 

Re: v2.2.26.0 released

[Aki Tuomi]

On 02.11.2016 19:54, Stuart Henderson wrote:

On 2016-11-02, Aki Tuomi  wrote:

If the standard way works, I am happy to include the original patch I
sent, amended so that it checks for presence of LIBRESSL_VERSION_NUMBER.
If they keep this promise, then we should have no worries about things
breaking up.

Diff below is what I've added to OpenBSD ports.

The libressl API is not cast in stone, there's a possibility some
functions from newer OpenSSL might be added - in fact we already have
some like TLS_method. 0x2000L was specifically chosen to not
match up with anything OpenSSL had used because they aren't directly
comparable.

In general I think the best approach would be for feature checks, e.g.
in autoconf. (I wish there was some common m4 file shared between
projects that people could use for this..) In the absence of this,
it seems a better idea to check at the places where #ifdefs are done
rather than override OPENSSL_VERSION_NUMBER locally.

I don't think carrying patches like this separately is all that good an
idea - people may well compile things on their own and not know about
the problem. If the build fails that's not so bad, but the silent
miscompile we see here is pretty nasty.





Thank you for the patch.

My personal opinion is that it is also bit nasty to pretend to support 
some API/ABI but provide false version numbers.


https://wiki.openssl.org/index.php/1.1_API_Changes, this is what OpenSSL 
recommends to use for handling backwards compability with older 
versions. As you can see, it uses < test. Now you are claiming to be 
v2.0.0, which means that there is no reasonable way to use 
OPENSSL_VERSION to determine whether some particular feature is there or 
not.


Yes, we could test each function separately, but that would kinda beat 
the point of having a VERSION header in the first place, and also adds 
up for the ifdef hell by forcing us to check for each and every openssl 
function that has changed since 1.0.0 and use that particular ifdef.


It would've been, again in my opinion, to keep the VERSION in libressl 
to match with the API you are providing instead of choosing some 
abstract value that can will mess up with everyone's code. If you add 
features to your API from OpenSSL, you can update the version number to 
match with the API you provide.


Just my 0.02€.

Aki

Re: v2.2.26.0 released

[Stuart Henderson]

On 2016-11-02, Aki Tuomi  wrote:
> If the standard way works, I am happy to include the original patch I 
> sent, amended so that it checks for presence of LIBRESSL_VERSION_NUMBER. 
> If they keep this promise, then we should have no worries about things 
> breaking up.

Diff below is what I've added to OpenBSD ports.

The libressl API is not cast in stone, there's a possibility some
functions from newer OpenSSL might be added - in fact we already have
some like TLS_method. 0x2000L was specifically chosen to not
match up with anything OpenSSL had used because they aren't directly
comparable.

In general I think the best approach would be for feature checks, e.g.
in autoconf. (I wish there was some common m4 file shared between
projects that people could use for this..) In the absence of this,
it seems a better idea to check at the places where #ifdefs are done
rather than override OPENSSL_VERSION_NUMBER locally.

I don't think carrying patches like this separately is all that good an
idea - people may well compile things on their own and not know about
the problem. If the build fails that's not so bad, but the silent
miscompile we see here is pretty nasty.


--- src/lib-dcrypt/dcrypt-openssl.c.origWed Nov  2 12:11:31 2016
+++ src/lib-dcrypt/dcrypt-openssl.c Wed Nov  2 12:22:26 2016
@@ -67,7 +67,7 @@
   2key algo oid1symmetric algo namesalthash 
algoroundsE(RSA = i2d_PrivateKey, EC=Private Point)key id
 **/
 
-#if OPENSSL_VERSION_NUMBER < 0x1010L
+#if OPENSSL_VERSION_NUMBER < 0x1010L || defined(LIBRESSL_VERSION_NUMBER)
 #define EVP_PKEY_get0_EC_KEY(x) x->pkey.ec
 #define EVP_PKEY_get0_RSA(x) x->pkey.rsa
 #define OBJ_length(o) ((o)->length)
@@ -90,7 +90,7 @@ struct dcrypt_context_symmetric {
 struct dcrypt_context_hmac {
pool_t pool;
const EVP_MD *md;
-#if OPENSSL_VERSION_NUMBER >= 0x1010L
+#if OPENSSL_VERSION_NUMBER >= 0x1010L && !defined(LIBRESSL_VERSION_NUMBER)
HMAC_CTX *ctx;
 #else
HMAC_CTX ctx;
@@ -427,7 +427,7 @@ static
 void dcrypt_openssl_ctx_hmac_destroy(struct dcrypt_context_hmac **ctx)
 {
pool_t pool = (*ctx)->pool;
-#if OPENSSL_VERSION_NUMBER >= 0x1010L
+#if OPENSSL_VERSION_NUMBER >= 0x1010L && !defined(LIBRESSL_VERSION_NUMBER)
if ((*ctx)->ctx) HMAC_CTX_free((*ctx)->ctx);
 #else
HMAC_cleanup(&((*ctx)->ctx));
@@ -470,7 +470,7 @@ bool dcrypt_openssl_ctx_hmac_init(struct dcrypt_contex
 {
int ec;
i_assert(ctx->md != NULL);
-#if OPENSSL_VERSION_NUMBER >= 0x1010L
+#if OPENSSL_VERSION_NUMBER >= 0x1010L && !defined(LIBRESSL_VERSION_NUMBER)
ctx->ctx = HMAC_CTX_new();
if (ctx->ctx == NULL) return dcrypt_openssl_error(error_r);
ec = HMAC_Init_ex(ctx->ctx, ctx->key, ctx->klen, ctx->md, NULL);
@@ -484,7 +484,7 @@ static
 bool dcrypt_openssl_ctx_hmac_update(struct dcrypt_context_hmac *ctx, const 
unsigned char *data, size_t data_len, const char **error_r)
 {
int ec;
-#if OPENSSL_VERSION_NUMBER >= 0x1010L
+#if OPENSSL_VERSION_NUMBER >= 0x1010L && !defined(LIBRESSL_VERSION_NUMBER)
ec = HMAC_Update(ctx->ctx, data, data_len);
 #else
ec = HMAC_Update(&(ctx->ctx), data, data_len);
@@ -498,7 +498,7 @@ bool dcrypt_openssl_ctx_hmac_final(struct dcrypt_conte
int ec;
unsigned char buf[HMAC_MAX_MD_CBLOCK];
unsigned int outl;
-#if OPENSSL_VERSION_NUMBER >= 0x1010L
+#if OPENSSL_VERSION_NUMBER >= 0x1010L && !defined(LIBRESSL_VERSION_NUMBER)
ec = HMAC_Final(ctx->ctx, buf, );
HMAC_CTX_free(ctx->ctx);
ctx->ctx = NULL;
@@ -2133,7 +2133,7 @@ bool dcrypt_openssl_public_key_id_evp(EVP_PKEY *key, c
long len = BIO_get_mem_data(b, );
unsigned int hlen = sizeof(buf);
/* then hash it */
-#if OPENSSL_VERSION_NUMBER >= 0x1010L
+#if OPENSSL_VERSION_NUMBER >= 0x1010L && !defined(LIBRESSL_VERSION_NUMBER)
EVP_MD_CTX *ctx = EVP_MD_CTX_new();
 #else
EVP_MD_CTX *ctx = EVP_MD_CTX_create();
@@ -2147,7 +2147,7 @@ bool dcrypt_openssl_public_key_id_evp(EVP_PKEY *key, c
buffer_append(result, buf, hlen);
res = TRUE;
}
-#if OPENSSL_VERSION_NUMBER >= 0x1010L
+#if OPENSSL_VERSION_NUMBER >= 0x1010L && !defined(LIBRESSL_VERSION_NUMBER)
EVP_MD_CTX_free(ctx);
 #else
EVP_MD_CTX_destroy(ctx);
--- src/lib-ssl-iostream/dovecot-openssl-common.c.orig  Wed Nov  2 12:11:31 2016
+++ src/lib-ssl-iostream/dovecot-openssl-common.c   Wed Nov  2 12:21:04 2016
@@ -10,7 +10,7 @@
 static int openssl_init_refcount = 0;
 static ENGINE *dovecot_openssl_engine;
 
-#if OPENSSL_VERSION_NUMBER >= 0x1010L
+#if OPENSSL_VERSION_NUMBER >= 0x1010L && !defined(LIBRESSL_VERSION_NUMBER)
 static void *dovecot_openssl_malloc(size_t size, const char *u0 ATTR_UNUSED, 
int u1 ATTR_UNUSED)
 #else
 static void *dovecot_openssl_malloc(size_t size)
@@ -26,7 +26,7 @@ static void *dovecot_openssl_malloc(size_t size)

Re: No stats under FreeBSD 10.3

[Larry Rosenman]

I added the following to 90-plugin.conf:

service stats {
  chroot = empty
  client_limit = 0
  drop_priv_before_exec = no
  executable = stats
  extra_groups =
  fifo_listener stats-mail {
group =
mode = 0666
user =
  }
  fifo_listener stats-user {
group =
mode = 0666
user =
  }


and now:
srw-rw-rw-  1 root wheel  0 Nov  2 12:47 stats
prw-rw-rw-  1 root wheel  0 Nov  2 12:47 stats-mail
prw-rw-rw-  1 root wheel  0 Nov  2 12:47 stats-user

and I get stats.


On Wed, Nov 2, 2016 at 12:18 PM, Larry Rosenman  wrote:

> prw-rw-rw-  1 root wheel  0 Nov  1 13:09 stats-mail
> prw---  1 root wheel  0 Nov  1 13:09 stats-user
> drwxr-x---  2 root dovenull   4 Nov  1 13:09 token-login
>
> If something other than root is trying to write to stats-user, we found
> the issue.
>
> this is on 10.3-STABLE
>
> On Wed, Nov 2, 2016 at 12:13 PM, Timo Sirainen  wrote:
>
>> On 01 Nov 2016, at 22:31, Ruud Boon  wrote:
>> >
>> > HI,
>> >
>> > I’m currently testing the stats module of Dovecot (2.2.26.0 (23d1de6))
>> > Looks like there no statistics under FreeBSD.
>> > Server isn’t busy yet but got at least a few connection open.
>>
>> See if there are any errors in logs. I guess mail-stats fifo doesn't have
>> enough permissions so that imap/pop3/lmtp can connect to it.
>>
>
>
>
> --
> Larry Rosenman http://www.lerctr.org/~ler
> Phone: +1 214-642-9640 (c) E-Mail: larry...@gmail.com
> US Mail: 17716 Limpia Crk, Round Rock, TX 78664-7281
>



-- 
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 214-642-9640 (c) E-Mail: larry...@gmail.com
US Mail: 17716 Limpia Crk, Round Rock, TX 78664-7281

Re: doveadm index: can't index a different namespace?

[Larry Rosenman]

It's ALWAYS failed on the other NAMESPACE.

Some of the logging looks weird as well for the 2nd namespace:

Nov  2 12:32:03 thebighonker dovecot: imap-login: Login: user=,
method=PLAIN, rip=207.231.91.36, lip=192.147.25.65, mpid=76712, TLS,
session=
Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: Loading modules
from directory: /usr/local/lib/dovecot
Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: Module loaded:
/usr/local/lib/dovecot/lib15_notify_plugin.so
Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: Module loaded:
/usr/local/lib/dovecot/lib20_fts_plugin.so
Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: Module loaded:
/usr/local/lib/dovecot/lib20_mail_log_plugin.so
Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: Module loaded:
/usr/local/lib/dovecot/lib21_fts_lucene_plugin.so
Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: Module loaded:
/usr/local/lib/dovecot/lib90_stats_plugin.so
Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: Module loaded:
/usr/local/lib/dovecot/lib95_imap_stats_plugin.so
Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: Effective uid=1004,
gid=1004, home=/home/mrm
Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: Namespace inbox:
type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes,
subscriptions=yes location=mbox:~/mail:INBOX=~/mail/INBOX
Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: fs:
root=/home/mrm/mail, index=, indexpvt=, control=,
inbox=/home/mrm/mail/INBOX, alt=
Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: Namespace archive:
type=private, prefix=#ARCHIVE/, sep=/, inbox=no, hidden=no, list=no,
subscriptions=yes location=mbox:~/MAILARCHIVE
Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: mbox: INBOX
defaulted to /home/mrm/MAILARCHIVE/inbox
Nov  2 12:32:03 thebighonker dovecot: imap(mrm): Debug: fs:
root=/home/mrm/MAILARCHIVE, index=, indexpvt=, control=,
inbox=/home/mrm/MAILARCHIVE/inbox, alt=



On Wed, Nov 2, 2016 at 12:30 PM, Timo Sirainen  wrote:

> It's getting a bit strange. You were running 2.2.25 previously and it was
> working then? Does the doveadm index always fail with the same errors?
>
> Also I just noticed that it's saying INBOX isn't selectable: "lucene:
> Failed to sync mailbox INBOX: Mailbox isn't selectable". Which I guess
> isn't true. It seems to be failing somewhat randomly..
>
> On 02 Nov 2016, at 19:25, Larry Rosenman  wrote:
>
> thebighonker.lerctr.org ~ $ doveadm mailbox status -u l...@lerctr.org
> vsize \#ARCHIVE/2016/10/clamav-rules
> #ARCHIVE/2016/10/clamav-rules vsize=3840752
> thebighonker.lerctr.org ~ $
>
>
>
> On Wed, Nov 2, 2016 at 12:22 PM, Timo Sirainen  wrote:
>
>> On 02 Nov 2016, at 19:19, Larry Rosenman  wrote:
>> >
>> > clamav-rules is NOT a directory, nor are any of the others:
>>
>> Can you access these mboxes at all with Dovecot? e.g.
>>
>> doveadm mailbox status -u user@domain clamav-rules
>>
>> > thebighonker.lerctr.org ~/MAILARCHIVE $ cd 2016/10
>> > thebighonker.lerctr.org ~/MAILARCHIVE/2016/10 $ ls -l
>> > total 72106
>> > -rw-r--r--   1 ler  ler 440461 Nov  1 00:05 Amplify_Mail
>> > -rw-r--r--   1 ler  ler  104102478 Nov  1 14:53 INBOX
>> > drwxr-xr-x   3 ler  ler  4 Nov  1 00:05 SA
>> > -rw-r--r--   1 ler  ler   21083767 Nov  1 00:05 SENT
>> > -rw-r--r--   1 ler  ler1850677 Nov  1 00:05 SPAM
>> > -rw-r--r--   1 ler  ler  36483 Nov  1 00:05 UFCU_Mail
>> > -rw-r--r--   1 ler  ler 460073 Nov  1 00:05 bacula
>> > -rw-r--r--   1 ler  ler1107098 Nov  1 00:05 bayes-update
>> > -rw-r--r--   1 ler  ler3884041 Nov  1 00:05 clamav-rules
>> > -rw-r--r--   1 ler  ler 652132 Nov  1 00:05 firewall
>> > drwxr-xr-x  11 ler  ler 20 Nov  1 00:05 lists
>> > -rw-r--r--   1 ler  ler   25122465 Nov  1 00:05 root-mail
>> > -rw-r--r--   1 ler  ler  44553 Nov  1 00:05 satelliteguys
>> > -rw-r--r--   1 ler  ler 625628 Nov  1 00:05 wview
>> > thebighonker.lerctr.org ~/MAILARCHIVE/2016/10 $
>> >
>> > On Wed, Nov 2, 2016 at 12:17 PM, Timo Sirainen  wrote:
>> >
>> >> On 01 Nov 2016, at 20:30, Larry Rosenman  wrote:
>> >>>
>> >>> doveadm -D  -vv index  \#ARCHIVE/\* garners the below for ALL
>> >> mailboxes
>> >>> in the
>> >>> namespace:
>> >>> doveadm(ler): Error: Mailbox #ARCHIVE/2013/04/clamav-rules: Status
>> lookup
>> >>> failed: Internal error occurred. Refer to server log for more
>> >> information.
>> >>> [2016-11-01 13:25:21]
>> >>> doveadm(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox
>> isn't
>> >>> selectable
>> >>
>> >> You're using mbox format and "clamav-rules" is a directory. I guess
>> >> doveadm should be ignoring non-selectable mailboxes.
>> >>
>> >>
>> >
>> >
>> > --
>> > Larry Rosenman http://www.lerctr.org/~ler
>> > Phone: +1 214-642-9640 (c) E-Mail: larry...@gmail.com
>> > US Mail: 17716 Limpia Crk, Round Rock, TX 78664-7281

Re: doveadm index: can't index a different namespace?

[Timo Sirainen]

It's getting a bit strange. You were running 2.2.25 previously and it was 
working then? Does the doveadm index always fail with the same errors?

Also I just noticed that it's saying INBOX isn't selectable: "lucene: Failed to 
sync mailbox INBOX: Mailbox isn't selectable". Which I guess isn't true. It 
seems to be failing somewhat randomly..

> On 02 Nov 2016, at 19:25, Larry Rosenman  wrote:
> 
> thebighonker.lerctr.org  ~ $ doveadm mailbox 
> status -u l...@lerctr.org  vsize 
> \#ARCHIVE/2016/10/clamav-rules
> #ARCHIVE/2016/10/clamav-rules vsize=3840752
> thebighonker.lerctr.org  ~ $
> 
> 
> 
> On Wed, Nov 2, 2016 at 12:22 PM, Timo Sirainen  > wrote:
> On 02 Nov 2016, at 19:19, Larry Rosenman  > wrote:
> >
> > clamav-rules is NOT a directory, nor are any of the others:
> 
> Can you access these mboxes at all with Dovecot? e.g.
> 
> doveadm mailbox status -u user@domain clamav-rules
> 
> > thebighonker.lerctr.org  ~/MAILARCHIVE $ 
> > cd 2016/10
> > thebighonker.lerctr.org  
> > ~/MAILARCHIVE/2016/10 $ ls -l
> > total 72106
> > -rw-r--r--   1 ler  ler 440461 Nov  1 00:05 Amplify_Mail
> > -rw-r--r--   1 ler  ler  104102478 Nov  1 14:53 INBOX
> > drwxr-xr-x   3 ler  ler  4 Nov  1 00:05 SA
> > -rw-r--r--   1 ler  ler   21083767 Nov  1 00:05 SENT
> > -rw-r--r--   1 ler  ler1850677 Nov  1 00:05 SPAM
> > -rw-r--r--   1 ler  ler  36483 Nov  1 00:05 UFCU_Mail
> > -rw-r--r--   1 ler  ler 460073 Nov  1 00:05 bacula
> > -rw-r--r--   1 ler  ler1107098 Nov  1 00:05 bayes-update
> > -rw-r--r--   1 ler  ler3884041 Nov  1 00:05 clamav-rules
> > -rw-r--r--   1 ler  ler 652132 Nov  1 00:05 firewall
> > drwxr-xr-x  11 ler  ler 20 Nov  1 00:05 lists
> > -rw-r--r--   1 ler  ler   25122465 Nov  1 00:05 root-mail
> > -rw-r--r--   1 ler  ler  44553 Nov  1 00:05 satelliteguys
> > -rw-r--r--   1 ler  ler 625628 Nov  1 00:05 wview
> > thebighonker.lerctr.org  
> > ~/MAILARCHIVE/2016/10 $
> >
> > On Wed, Nov 2, 2016 at 12:17 PM, Timo Sirainen  > > wrote:
> >
> >> On 01 Nov 2016, at 20:30, Larry Rosenman  >> > wrote:
> >>>
> >>> doveadm -D  -vv index  \#ARCHIVE/\* garners the below for ALL
> >> mailboxes
> >>> in the
> >>> namespace:
> >>> doveadm(ler): Error: Mailbox #ARCHIVE/2013/04/clamav-rules: Status lookup
> >>> failed: Internal error occurred. Refer to server log for more
> >> information.
> >>> [2016-11-01 13:25:21]
> >>> doveadm(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't
> >>> selectable
> >>
> >> You're using mbox format and "clamav-rules" is a directory. I guess
> >> doveadm should be ignoring non-selectable mailboxes.
> >>
> >>
> >
> >
> > --
> > Larry Rosenman http://www.lerctr.org/~ler 
> > 
> > Phone: +1 214-642-9640  (c) E-Mail: 
> > larry...@gmail.com 
> > US Mail: 17716 Limpia Crk, Round Rock, TX 78664-7281
> 
> 
> 
> 
> -- 
> Larry Rosenman http://www.lerctr.org/~ler 
> 
> Phone: +1 214-642-9640 (c) E-Mail: larry...@gmail.com 
> 
> US Mail: 17716 Limpia Crk, Round Rock, TX 78664-7281

Re: sieve sending vacation message from vm...@ns1.domain.tld

[Matthew Broadhead]

is there something more i need to be doing my end?

On 25/10/2016 09:11, Matthew Broadhead wrote:
are there any instructions or tests i can make to check the sieve 
configuration?  or does the magic all happen internally and there are 
no settings to change?


On 21/10/2016 10:22, Matthew Broadhead wrote:
the server is using CentOS 7 and that is the package that comes 
through yum.  everything is up to date. i am hesitant to install a 
new package manually as that could cause other compatibility issues?  
is there another way to test the configuration on the server?


On 21/10/2016 01:07, Stephan Bosch wrote:

Op 10/20/2016 om 7:38 PM schreef Matthew Broadhead:

do i need to provide more information?


It still doesn't make sense to me. I do notice that the version you're
using is ancient (dated 26-09-2013), which may well the problem.

Do have the ability to upgrade?

Regards,

Stephan.


On 19/10/2016 14:49, Matthew Broadhead wrote:

/var/log/maillog showed this
Oct 19 13:25:41 ns1 postfix/smtpd[1298]: 7599A2C19C6:
client=unknown[127.0.0.1]
Oct 19 13:25:41 ns1 postfix/cleanup[1085]: 7599A2C19C6:
message-id=
Oct 19 13:25:41 ns1 postfix/qmgr[1059]: 7599A2C19C6:
from=, size=3190, nrcpt=1 (queue 
active)

Oct 19 13:25:41 ns1 amavis[32367]: (32367-17) Passed CLEAN
{RelayedInternal}, ORIGINATING LOCAL [80.30.255.180]:54566
[80.30.255.180]  ->
, Queue-ID: BFFA62C1965, Message-ID:
, mail_id:
TlJQ9xQhWjQk, Hits: -2.9, size: 2235, queued_as: 7599A2C19C6,
dkim_new=foo:nbmlaw.co.uk, 531 ms
Oct 19 13:25:41 ns1 postfix/smtp[1135]: BFFA62C1965:
to=, relay=127.0.0.1[127.0.0.1]:10026,
delay=0.76, delays=0.22/0/0/0.53, dsn=2.0.0, status=sent (250 2.0.0
from MTA(smtp:[127.0.0.1]:10027): 250 2.0.0 Ok: queued as 
7599A2C19C6)

Oct 19 13:25:41 ns1 postfix/qmgr[1059]: BFFA62C1965: removed
Oct 19 13:25:41 ns1 postfix/smtpd[1114]: connect from
ns1.nbmlaw.co.uk[217.174.253.19]
Oct 19 13:25:41 ns1 postfix/smtpd[1114]: NOQUEUE: filter: RCPT from
ns1.nbmlaw.co.uk[217.174.253.19]: : Sender
address triggers FILTER smtp-amavis:[127.0.0.1]:10026;
from= to=
proto=SMTP helo=
Oct 19 13:25:41 ns1 postfix/smtpd[1114]: 8A03F2C1965:
client=ns1.nbmlaw.co.uk[217.174.253.19]
Oct 19 13:25:41 ns1 postfix/cleanup[1085]: 8A03F2C1965:
message-id=
Oct 19 13:25:41 ns1 opendmarc[2430]: implicit authentication service:
ns1.nbmlaw.co.uk
Oct 19 13:25:41 ns1 opendmarc[2430]: 8A03F2C1965: ns1.nbmlaw.co.uk 
fail

Oct 19 13:25:41 ns1 postfix/qmgr[1059]: 8A03F2C1965:
from=, size=1077, nrcpt=1 (queue active)
Oct 19 13:25:41 ns1 postfix/smtpd[1114]: disconnect from
ns1.nbmlaw.co.uk[217.174.253.19]
Oct 19 13:25:41 ns1 sSMTP[1895]: Sent mail for vm...@ns1.nbmlaw.co.uk
(221 2.0.0 Bye) uid=996 username=vmail outbytes=971
Oct 19 13:25:41 ns1 postfix/smtpd[1898]: connect from 
unknown[127.0.0.1]

Oct 19 13:25:41 ns1 postfix/pipe[1162]: 7599A2C19C6:
to=, relay=dovecot, delay=0.46,
delays=0/0/0/0.45, dsn=2.0.0, status=sent (delivered via dovecot
service)
Oct 19 13:25:41 ns1 postfix/qmgr[1059]: 7599A2C19C6: removed
Oct 19 13:25:41 ns1 postfix/smtpd[1898]: E53472C19C6:
client=unknown[127.0.0.1]
Oct 19 13:25:41 ns1 postfix/cleanup[1085]: E53472C19C6:
message-id=
Oct 19 13:25:41 ns1 postfix/qmgr[1059]: E53472C19C6:
from=, size=1619, nrcpt=1 (queue active)
Oct 19 13:25:41 ns1 amavis[1885]: (01885-01) Passed CLEAN
{RelayedInternal}, ORIGINATING LOCAL [217.174.253.19]:40960
[217.174.253.19]  ->
, Queue-ID: 8A03F2C1965, Message-ID:
, mail_id:
mOMO97yjVqjM, Hits: -2.211, size: 1301, queued_as: E53472C19C6, 
296 ms

Oct 19 13:25:41 ns1 postfix/smtp[1217]: 8A03F2C1965:
to=,
relay=127.0.0.1[127.0.0.1]:10026, delay=0.38, delays=0.08/0/0/0.29,
dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10027):
250 2.0.0 Ok: queued as E53472C19C6)
Oct 19 13:25:41 ns1 postfix/qmgr[1059]: 8A03F2C1965: removed
Oct 19 13:25:42 ns1 postfix/pipe[1303]: E53472C19C6:
to=, relay=dovecot, delay=0.14,
delays=0/0/0/0.14, dsn=2.0.0, status=sent (delivered via dovecot
service)
Oct 19 13:25:42 ns1 postfix/qmgr[1059]: E53472C19C6: removed

On 19/10/2016 13:54, Stephan Bosch wrote:


Op 19-10-2016 om 13:47 schreef Matthew Broadhead:

i am not 100% sure how to give you the information you require.

my current setup in /etc/postfix/master.cf is
flags=DRhu user=vmail:mail argv=/usr/libexec/dovecot/deliver -d
${recipient}
so recipient would presumably be 

Re: doveadm index: can't index a different namespace?

[Larry Rosenman]

thebighonker.lerctr.org ~ $ doveadm mailbox status -u l...@lerctr.org vsize
\#ARCHIVE/2016/10/clamav-rules
#ARCHIVE/2016/10/clamav-rules vsize=3840752
thebighonker.lerctr.org ~ $



On Wed, Nov 2, 2016 at 12:22 PM, Timo Sirainen  wrote:

> On 02 Nov 2016, at 19:19, Larry Rosenman  wrote:
> >
> > clamav-rules is NOT a directory, nor are any of the others:
>
> Can you access these mboxes at all with Dovecot? e.g.
>
> doveadm mailbox status -u user@domain clamav-rules
>
> > thebighonker.lerctr.org ~/MAILARCHIVE $ cd 2016/10
> > thebighonker.lerctr.org ~/MAILARCHIVE/2016/10 $ ls -l
> > total 72106
> > -rw-r--r--   1 ler  ler 440461 Nov  1 00:05 Amplify_Mail
> > -rw-r--r--   1 ler  ler  104102478 Nov  1 14:53 INBOX
> > drwxr-xr-x   3 ler  ler  4 Nov  1 00:05 SA
> > -rw-r--r--   1 ler  ler   21083767 Nov  1 00:05 SENT
> > -rw-r--r--   1 ler  ler1850677 Nov  1 00:05 SPAM
> > -rw-r--r--   1 ler  ler  36483 Nov  1 00:05 UFCU_Mail
> > -rw-r--r--   1 ler  ler 460073 Nov  1 00:05 bacula
> > -rw-r--r--   1 ler  ler1107098 Nov  1 00:05 bayes-update
> > -rw-r--r--   1 ler  ler3884041 Nov  1 00:05 clamav-rules
> > -rw-r--r--   1 ler  ler 652132 Nov  1 00:05 firewall
> > drwxr-xr-x  11 ler  ler 20 Nov  1 00:05 lists
> > -rw-r--r--   1 ler  ler   25122465 Nov  1 00:05 root-mail
> > -rw-r--r--   1 ler  ler  44553 Nov  1 00:05 satelliteguys
> > -rw-r--r--   1 ler  ler 625628 Nov  1 00:05 wview
> > thebighonker.lerctr.org ~/MAILARCHIVE/2016/10 $
> >
> > On Wed, Nov 2, 2016 at 12:17 PM, Timo Sirainen  wrote:
> >
> >> On 01 Nov 2016, at 20:30, Larry Rosenman  wrote:
> >>>
> >>> doveadm -D  -vv index  \#ARCHIVE/\* garners the below for ALL
> >> mailboxes
> >>> in the
> >>> namespace:
> >>> doveadm(ler): Error: Mailbox #ARCHIVE/2013/04/clamav-rules: Status
> lookup
> >>> failed: Internal error occurred. Refer to server log for more
> >> information.
> >>> [2016-11-01 13:25:21]
> >>> doveadm(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox
> isn't
> >>> selectable
> >>
> >> You're using mbox format and "clamav-rules" is a directory. I guess
> >> doveadm should be ignoring non-selectable mailboxes.
> >>
> >>
> >
> >
> > --
> > Larry Rosenman http://www.lerctr.org/~ler
> > Phone: +1 214-642-9640 (c) E-Mail: larry...@gmail.com
> > US Mail: 17716 Limpia Crk, Round Rock, TX 78664-7281
>
>


-- 
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 214-642-9640 (c) E-Mail: larry...@gmail.com
US Mail: 17716 Limpia Crk, Round Rock, TX 78664-7281

Re: doveadm index: can't index a different namespace?

[Timo Sirainen]

On 02 Nov 2016, at 19:19, Larry Rosenman  wrote:
> 
> clamav-rules is NOT a directory, nor are any of the others:

Can you access these mboxes at all with Dovecot? e.g.

doveadm mailbox status -u user@domain clamav-rules

> thebighonker.lerctr.org ~/MAILARCHIVE $ cd 2016/10
> thebighonker.lerctr.org ~/MAILARCHIVE/2016/10 $ ls -l
> total 72106
> -rw-r--r--   1 ler  ler 440461 Nov  1 00:05 Amplify_Mail
> -rw-r--r--   1 ler  ler  104102478 Nov  1 14:53 INBOX
> drwxr-xr-x   3 ler  ler  4 Nov  1 00:05 SA
> -rw-r--r--   1 ler  ler   21083767 Nov  1 00:05 SENT
> -rw-r--r--   1 ler  ler1850677 Nov  1 00:05 SPAM
> -rw-r--r--   1 ler  ler  36483 Nov  1 00:05 UFCU_Mail
> -rw-r--r--   1 ler  ler 460073 Nov  1 00:05 bacula
> -rw-r--r--   1 ler  ler1107098 Nov  1 00:05 bayes-update
> -rw-r--r--   1 ler  ler3884041 Nov  1 00:05 clamav-rules
> -rw-r--r--   1 ler  ler 652132 Nov  1 00:05 firewall
> drwxr-xr-x  11 ler  ler 20 Nov  1 00:05 lists
> -rw-r--r--   1 ler  ler   25122465 Nov  1 00:05 root-mail
> -rw-r--r--   1 ler  ler  44553 Nov  1 00:05 satelliteguys
> -rw-r--r--   1 ler  ler 625628 Nov  1 00:05 wview
> thebighonker.lerctr.org ~/MAILARCHIVE/2016/10 $
> 
> On Wed, Nov 2, 2016 at 12:17 PM, Timo Sirainen  wrote:
> 
>> On 01 Nov 2016, at 20:30, Larry Rosenman  wrote:
>>> 
>>> doveadm -D  -vv index  \#ARCHIVE/\* garners the below for ALL
>> mailboxes
>>> in the
>>> namespace:
>>> doveadm(ler): Error: Mailbox #ARCHIVE/2013/04/clamav-rules: Status lookup
>>> failed: Internal error occurred. Refer to server log for more
>> information.
>>> [2016-11-01 13:25:21]
>>> doveadm(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't
>>> selectable
>> 
>> You're using mbox format and "clamav-rules" is a directory. I guess
>> doveadm should be ignoring non-selectable mailboxes.
>> 
>> 
> 
> 
> -- 
> Larry Rosenman http://www.lerctr.org/~ler
> Phone: +1 214-642-9640 (c) E-Mail: larry...@gmail.com
> US Mail: 17716 Limpia Crk, Round Rock, TX 78664-7281

Re: doveadm index: can't index a different namespace?

[Larry Rosenman]

clamav-rules is NOT a directory, nor are any of the others:

thebighonker.lerctr.org ~/MAILARCHIVE $ cd 2016/10
thebighonker.lerctr.org ~/MAILARCHIVE/2016/10 $ ls -l
total 72106
-rw-r--r--   1 ler  ler 440461 Nov  1 00:05 Amplify_Mail
-rw-r--r--   1 ler  ler  104102478 Nov  1 14:53 INBOX
drwxr-xr-x   3 ler  ler  4 Nov  1 00:05 SA
-rw-r--r--   1 ler  ler   21083767 Nov  1 00:05 SENT
-rw-r--r--   1 ler  ler1850677 Nov  1 00:05 SPAM
-rw-r--r--   1 ler  ler  36483 Nov  1 00:05 UFCU_Mail
-rw-r--r--   1 ler  ler 460073 Nov  1 00:05 bacula
-rw-r--r--   1 ler  ler1107098 Nov  1 00:05 bayes-update
-rw-r--r--   1 ler  ler3884041 Nov  1 00:05 clamav-rules
-rw-r--r--   1 ler  ler 652132 Nov  1 00:05 firewall
drwxr-xr-x  11 ler  ler 20 Nov  1 00:05 lists
-rw-r--r--   1 ler  ler   25122465 Nov  1 00:05 root-mail
-rw-r--r--   1 ler  ler  44553 Nov  1 00:05 satelliteguys
-rw-r--r--   1 ler  ler 625628 Nov  1 00:05 wview
thebighonker.lerctr.org ~/MAILARCHIVE/2016/10 $

On Wed, Nov 2, 2016 at 12:17 PM, Timo Sirainen  wrote:

> On 01 Nov 2016, at 20:30, Larry Rosenman  wrote:
> >
> > doveadm -D  -vv index  \#ARCHIVE/\* garners the below for ALL
> mailboxes
> > in the
> > namespace:
> > doveadm(ler): Error: Mailbox #ARCHIVE/2013/04/clamav-rules: Status lookup
> > failed: Internal error occurred. Refer to server log for more
> information.
> > [2016-11-01 13:25:21]
> > doveadm(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't
> > selectable
>
> You're using mbox format and "clamav-rules" is a directory. I guess
> doveadm should be ignoring non-selectable mailboxes.
>
>


-- 
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 214-642-9640 (c) E-Mail: larry...@gmail.com
US Mail: 17716 Limpia Crk, Round Rock, TX 78664-7281

Re: No stats under FreeBSD 10.3

[Larry Rosenman]

prw-rw-rw-  1 root wheel  0 Nov  1 13:09 stats-mail
prw---  1 root wheel  0 Nov  1 13:09 stats-user
drwxr-x---  2 root dovenull   4 Nov  1 13:09 token-login

If something other than root is trying to write to stats-user, we found the
issue.

this is on 10.3-STABLE

On Wed, Nov 2, 2016 at 12:13 PM, Timo Sirainen  wrote:

> On 01 Nov 2016, at 22:31, Ruud Boon  wrote:
> >
> > HI,
> >
> > I’m currently testing the stats module of Dovecot (2.2.26.0 (23d1de6))
> > Looks like there no statistics under FreeBSD.
> > Server isn’t busy yet but got at least a few connection open.
>
> See if there are any errors in logs. I guess mail-stats fifo doesn't have
> enough permissions so that imap/pop3/lmtp can connect to it.
>



-- 
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 214-642-9640 (c) E-Mail: larry...@gmail.com
US Mail: 17716 Limpia Crk, Round Rock, TX 78664-7281

Re: doveadm index: can't index a different namespace?

[Timo Sirainen]

On 01 Nov 2016, at 20:30, Larry Rosenman  wrote:
> 
> doveadm -D  -vv index  \#ARCHIVE/\* garners the below for ALL mailboxes
> in the
> namespace:
> doveadm(ler): Error: Mailbox #ARCHIVE/2013/04/clamav-rules: Status lookup
> failed: Internal error occurred. Refer to server log for more information.
> [2016-11-01 13:25:21]
> doveadm(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't
> selectable

You're using mbox format and "clamav-rules" is a directory. I guess doveadm 
should be ignoring non-selectable mailboxes.

Re: Repeat e-mail syndrome shows up in 2.2.26+

[Timo Sirainen]

On 01 Nov 2016, at 18:26, The Doctor  wrote:
> 
> Getting complaints from people about pop/imap
> 
> issues.
> 
> some people are getting repaeted e-mail.
> 
> Other are not able to delete their e-mails from an IMAP lcient.

Anything in error logs? POP3 duplicates sound like IMAP UIDs were changed (or 
are still changing?)

Re: No stats under FreeBSD 10.3

[Timo Sirainen]

On 01 Nov 2016, at 22:31, Ruud Boon  wrote:
> 
> HI,
> 
> I’m currently testing the stats module of Dovecot (2.2.26.0 (23d1de6))
> Looks like there no statistics under FreeBSD.
> Server isn’t busy yet but got at least a few connection open.

See if there are any errors in logs. I guess mail-stats fifo doesn't have 
enough permissions so that imap/pop3/lmtp can connect to it.

Dovecot Issues on FreeBSD 10.3 and FreebSD 11.0

[The Doctor]

Hello everyone.

I see we are having issues with dovecot 2.226.0 in the FreeBSD world.

I did run dovecot-2.2.26.rc1 myself and did not see repeat problem 
in POP3 or IMAP issue customers were reporting.

I see this repeat issue in dovecot 2.26.0 either port or compiled similarly.

So the question begs way so many problem in BSD after the initial release and 
not in rc1 ?

-- 
Member - Liberal International This is doctor@@nl2k.ab.ca Ici doctor@@nl2k.ab.ca
God,Queen and country!Never Satan President Republic!Beware AntiChrist rising! 
http://www.fullyfollow.me/rootnl2k  Look at Psalms 14 and 53 on Atheism
Time for the USA to hold a referendum on its republic and vote to dissolve!! 

Re: doveadm index: can't index a different namespace?

[larryrtx]

Anything else I can provide ? 


Sent from my Sprint Samsung Galaxy S7.
 Original message From: Larry Rosenman  
Date: 11/1/16  1:37 PM  (GMT-06:00) To: Aki Tuomi  Cc: 
Dovecot Mailing List  Subject: Re: doveadm index: can't 
index a different namespace? 
Nothing in them from what I can see.
Nov  1 13:25:14 thebighonker dovecot: indexer-worker(mrm): Debug: fs: 
root=/home/mrm/mail, index=, indexpvt=, control=, inbox=/home/mrm/mail/INBOX, 
alt=Nov  1 13:25:14 thebighonker dovecot: indexer-worker(mrm): Debug: Namespace 
archive: type=private, prefix=#ARCHIVE/, sep=/, inbox=no, hidden=no, list=no, 
subscriptions=yes location=mbox:~/MAILARCHIVENov  1 13:25:14 thebighonker 
dovecot: indexer-worker(mrm): Debug: mbox: INBOX defaulted to 
/home/mrm/MAILARCHIVE/inboxNov  1 13:25:14 thebighonker dovecot: 
indexer-worker(mrm): Debug: fs: root=/home/mrm/MAILARCHIVE, index=, indexpvt=, 
control=, inbox=/home/mrm/MAILARCHIVE/inbox, alt=Nov  1 13:25:14 thebighonker 
exim[6544]: 1c1dkI-0001gw-B7 => mrm  R=localuser 
T=dovecot_lmtp S=11532 C="250 2.0.0  pfbVHwreGFhQFgAAu+mOrA 
Saved" QT=0s DT=0sNov  1 13:25:14 thebighonker exim[6544]: 1c1dkI-0001gw-B7 
Completed QT=0sNov  1 13:25:15 thebighonker dovecot: indexer-worker(mrm): 
Debug: Mailbox INBOX: Opened mail UID=447860 because: fts indexingNov  1 
13:25:15 thebighonker dovecot: indexer-worker(mrm): Indexed 1 messages in 
INBOXNov  1 13:25:19 thebighonker exim[6519]: H=(ylmf-pc) [69.64.78.83]:57747 
I=[192.147.25.65]:25 rejected EHLO or HELO ylmf-pc: CHECK_HELO: ylmf-pcNov  1 
13:25:27 thebighonker dovecot: imap-login: Login: user=, method=PLAIN, 
rip=2001:470:1f0f:3ad:223:7dff:fe9e:6e8a, 
lip=2001:470:1f0f:3ad:223:7dff:fe9e:6e8a, mpid=6583, TLS, 
session=Nov  1 13:25:27 thebighonker dovecot: 
imap(ler): Debug: Loading modules from directory: /usr/local/lib/dovecotNov  1 
13:25:27 thebighonker dovecot: imap(ler): Debug: Module loaded: 
/usr/local/lib/dovecot/lib15_notify_plugin.soNov  1 13:25:27 thebighonker 
dovecot: imap(ler): Debug: Module loaded: 
/usr/local/lib/dovecot/lib20_fts_plugin.soNov  1 13:25:27 thebighonker dovecot: 
imap(ler): Debug: Module loaded: 
/usr/local/lib/dovecot/lib20_mail_log_plugin.soNov  1 13:25:27 thebighonker 
dovecot: imap(ler): Debug: Module loaded: 
/usr/local/lib/dovecot/lib21_fts_lucene_plugin.soNov  1 13:25:27 thebighonker 
dovecot: imap(ler): Debug: Module loaded: 
/usr/local/lib/dovecot/lib90_stats_plugin.soNov  1 13:25:27 thebighonker 
dovecot: imap(ler): Debug: Module loaded: 
/usr/local/lib/dovecot/lib95_imap_stats_plugin.soNov  1 13:25:27 thebighonker 
dovecot: imap(ler): Debug: Effective uid=1001, gid=1001, home=/home/lerNov  1 
13:25:27 thebighonker dovecot: imap(ler): Debug: Namespace inbox: type=private, 
prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes 
location=mbox:~/mail:INBOX=~/mail/INBOXNov  1 13:25:27 thebighonker dovecot: 
imap(ler): Debug: fs: root=/home/ler/mail, index=, indexpvt=, control=, 
inbox=/home/ler/mail/INBOX, alt=Nov  1 13:25:27 thebighonker dovecot: 
imap(ler): Debug: Namespace archive: type=private, prefix=#ARCHIVE/, sep=/, 
inbox=no, hidden=no, list=no, subscriptions=yes location=mbox:~/MAILARCHIVENov  
1 13:25:27 thebighonker dovecot: imap(ler): Debug: mbox: INBOX defaulted to 
/home/ler/MAILARCHIVE/inboxNov  1 13:25:27 thebighonker dovecot: imap(ler): 
Debug: fs: root=/home/ler/MAILARCHIVE, index=, indexpvt=, control=, 
inbox=/home/ler/MAILARCHIVE/inbox, alt=Nov  1 13:25:27 thebighonker dovecot: 
imap(ler): Logged out in=6049 out=63372 fhc=50 fhb=22424 fbc=0 fbb=0 del=0 
exp=0 trash=0Nov  1 13:25:29 thebighonker exim[6561]: H=(ylmf-pc) 
[69.64.78.83]:63376 I=[192.147.25.65]:25 rejected EHLO or HELO ylmf-pc: 
CHECK_HELO: ylmf-pcNov  1 13:25:39 thebighonker exim[6585]: H=(ylmf-pc) 
[69.64.78.83]:60216 I=[192.147.25.65]:25 rejected EHLO or HELO ylmf-pc: 
CHECK_HELO: ylmf-pcNov  1 13:25:46 thebighonker exim[6588]: no host name found 
for IP address 125.123.158.215Nov  1 13:25:47 thebighonker exim[6588]: H=(qrhx) 
[125.123.158.215]:60710 I=[192.147.25.65]:25 F= rejected RCPT 
<3371453...@qq.com>: RBL: found in zen.spamhaus.org (127.0.0.11) 
(https://www.spamhaus.org/query/ip/125.123.158.215)Nov  1 13:25:48 thebighonker 
exim[6588]: unexpected disconnection while reading SMTP command from (qrhx) 
[125.123.158.215]:60710 I=[192.147.25.65]:25Nov  1 13:25:49 thebighonker 
exim[6590]: H=(ylmf-pc) [69.64.78.83]:60073 I=[192.147.25.65]:25 rejected EHLO 
or HELO ylmf-pc: CHECK_HELO: ylmf-pcNov  1 13:25:59 thebighonker exim[6608]: 
H=(ylmf-pc) [69.64.78.83]:60168 I=[192.147.25.65]:25 rejected EHLO or HELO 
ylmf-pc: CHECK_HELO: ylmf-pcNov  1 13:26:09 thebighonker exim[6613]: 
H=(ylmf-pc) [69.64.78.83]:55031 I=[192.147.25.65]:25 rejected EHLO or HELO 
ylmf-pc: CHECK_HELO: ylmf-pcNov  1 13:26:15 thebighonker dovecot: imap-login: 
Login: user=, method=PLAIN, 

Re: v2.2.26.0 released

[Ruga]

Thank you.

Sent from ProtonMail Mobile


On Wed, Nov 2, 2016 at 12:22 PM, Michael A. Peters <'mpet...@domblogger.net'> 
wrote:
Standard way to fix it (on the LibreSSL page) is to check for
LIBRESSL_VERSION_NUMBER - e.g. the patch attached which I think catches
them all where needed. Note the word think.

It certainly appears to be working anyway with it.

On 11/02/2016 04:07 AM, Aki Tuomi wrote:
> After doing some testing by myself, I noticed that libressl, for some
> unknown reason, defines
>
> #define OPENSSL_VERSION_NUMBER 0x2000L
>
> No idea why they decided to advertise that they are OpenSSL v2.0.0. A
> local fix, if you need one, is to use
>
> #if OPENSSL_VERSION_NUMBER == 0x2000L
> #define OPENSSL_VERSION_NUMBER 0x1000100L
> #endif
>
> in dcrypt-openssl.c after includes.
>
> Aki
>
>
> On 02.11.2016 12:39, Aki Tuomi wrote:
>> Hi!
>>
>> Those are used if
>>
>> #if OPENSSL_VERSION_NUMBER >= 0x1010L
>>
>> So (your) libressl is providing this define. We compile our code using
>> GCC and CLANG regularly, with OpenSSL v1.0.x which is the currently
>> officially supported one.
>>
>> Aki
>>
>>
>> On 02.11.2016 12:34, Ruga wrote:
>>> dovecot 2.2.26.0 uses the following functions, which are not
>>> available on libressl 2.4.3:
>>>
>>> HMAC_CTX_new
>>> HMAC_CTX_free
>>> EVP_PKEY_get0_EC_KEY
>>> EVP_PKEY_get0_RSA
>>> OBJ_length
>>> EVP_MD_CTX_new
>>> EVP_MD_CTX_free
>>>
>>> The result of calling a non-existent function is a runtime error,
>>> and we do not want that on production servers.
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>> There are additional problems. I recommend compiling with clang-llvm
>>> 3.9.0
>>> to see them all.
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>  Original Message 
>>> Subject: Re: v2.2.26.0 released
>>> Local Time: 1 November 2016 7:30 PM
>>> UTC Time: 1 November 2016 18:30
>>> From: aki.tu...@dovecot.fi
>>> To: Dovecot Mailing List , Ruga
>>> 
>>>
>>> OpenSSL v1.0.1 is enough.
>>>
>>> Aki
>>>
 On November 1, 2016 at 7:46 PM Ruga  wrote:


 Hello,

 We cannot upgrade from 2.2.24, because we use libressl and the newer
 dovecot versions demand openssl v1.1.

 Please add the new library requirement to the INSTALL file.

 All the best.









  Original Message 
 Subject: v2.2.26.0 released
 Local Time: 28 October 2016 6:51 PM
 UTC Time: 28 October 2016 16:51
 From: t...@iki.fi
 To: dovecot-n...@dovecot.org, Dovecot Mailing List
 

 http://dovecot.org/releases/2.2/dovecot-2.2.26.0.tar.gz
 http://dovecot.org/releases/2.2/dovecot-2.2.26.0.tar.gz.sig

 v2.2.26 had a couple of nasty bugs left in it, so here's a fixup
 release. The version number is also a little bit weird, but had to
 be done this way (although 2.2.26.0.1 could have been another
 possibility).

 - Fixed some compiling issues.
 - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
 multiple passdbs.
 - auth: Fixed crash when exporting to auth-worker passdb extra fields
 that had empty values.
 - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit

Re: v2.2.26.0 released

[Aki Tuomi]

If the standard way works, I am happy to include the original patch I 
sent, amended so that it checks for presence of LIBRESSL_VERSION_NUMBER. 
If they keep this promise, then we should have no worries about things 
breaking up.


Aki

On 02.11.2016 14:24, Michael A. Peters wrote:

Indeed, which is why I use it.

But it also is in the minority which is why I find it acceptable for 
FLOSS projects like dovecot to elect to only un-officially support 
LibreSSL via a community maintained patch.


One of the reasons why OpenSSL was forked is because they were trying 
to support so many platforms that it made the code a real mess. Don't 
want the same to happen to another project because of it.


Especially with places like github that make it easy for members of 
the community to create and maintain such a patch, it may be the best 
option if the project itself doesn't have someone who can officially 
maintain LibreSSL support.


On 11/02/2016 05:08 AM, Ruga wrote:

libressl is a leaner and safer openssl

Sent from ProtonMail Mobile


On Wed, Nov 2, 2016 at 12:39 PM, Michael A. Peters 
<'mpet...@domblogger.net'> wrote:

IMHO it would be acceptable to have a LibreSSL patch that is maintained
by the people who want it.

It's free software, and that kind of is the point of Open Source.

On 11/02/2016 04:36 AM, Michael A. Peters wrote:
They have stated they are going to remain API compatible with 1.0.1h 
(or

g, forget which they forked) - their new stuff is outside of libcrypto.

On 11/02/2016 04:25 AM, Aki Tuomi wrote:
It does work today, I am just bit worried that it will keep on 
breaking
with libressl as they evolve their API. I would personally like to 
avoid

more ifdef hell if possible...

Aki


On 02.11.2016 13:22, Michael A. Peters wrote:

Standard way to fix it (on the LibreSSL page) is to check for
LIBRESSL_VERSION_NUMBER - e.g. the patch attached which I think
catches them all where needed. Note the word think.

It certainly appears to be working anyway with it.

On 11/02/2016 04:07 AM, Aki Tuomi wrote:
After doing some testing by myself, I noticed that libressl, for 
some

unknown reason, defines

#define OPENSSL_VERSION_NUMBER 0x2000L

No idea why they decided to advertise that they are OpenSSL 
v2.0.0. A

local fix, if you need one, is to use

#if OPENSSL_VERSION_NUMBER == 0x2000L
#define OPENSSL_VERSION_NUMBER 0x1000100L
#endif

in dcrypt-openssl.c after includes.

Aki


On 02.11.2016 12:39, Aki Tuomi wrote:

Hi!

Those are used if

#if OPENSSL_VERSION_NUMBER >= 0x1010L

So (your) libressl is providing this define. We compile our code 
using

GCC and CLANG regularly, with OpenSSL v1.0.x which is the currently
officially supported one.

Aki


On 02.11.2016 12:34, Ruga wrote:

dovecot 2.2.26.0 uses the following functions, which are not
available on libressl 2.4.3:

HMAC_CTX_new
HMAC_CTX_free
EVP_PKEY_get0_EC_KEY
EVP_PKEY_get0_RSA
OBJ_length
EVP_MD_CTX_new
EVP_MD_CTX_free

The result of calling a non-existent function is a runtime error,
and we do not want that on production servers.







There are additional problems. I recommend compiling with 
clang-llvm

3.9.0
to see them all.







 Original Message 
Subject: Re: v2.2.26.0 released
Local Time: 1 November 2016 7:30 PM
UTC Time: 1 November 2016 18:30
From: aki.tu...@dovecot.fi
To: Dovecot Mailing List , Ruga


OpenSSL v1.0.1 is enough.

Aki


On November 1, 2016 at 7:46 PM Ruga  wrote:


Hello,

We cannot upgrade from 2.2.24, because we use libressl and the 
newer

dovecot versions demand openssl v1.1.

Please add the new library requirement to the INSTALL file.

All the best.









 Original Message 
Subject: v2.2.26.0 released
Local Time: 28 October 2016 6:51 PM
UTC Time: 28 October 2016 16:51
From: t...@iki.fi
To: dovecot-n...@dovecot.org, Dovecot Mailing List


http://dovecot.org/releases/2.2/dovecot-2.2.26.0.tar.gz
http://dovecot.org/releases/2.2/dovecot-2.2.26.0.tar.gz.sig

v2.2.26 had a couple of nasty bugs left in it, so here's a fixup
release. The version number is also a little bit weird, but 
had to

be done this way (although 2.2.26.0.1 could have been another
possibility).

- Fixed some compiling issues.
- auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
multiple passdbs.
- auth: Fixed crash when exporting to auth-worker passdb extra
fields
that had empty values.
- dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit

>

Re: v2.2.26.0 released

[Michael A. Peters]

Indeed, which is why I use it.

But it also is in the minority which is why I find it acceptable for 
FLOSS projects like dovecot to elect to only un-officially support 
LibreSSL via a community maintained patch.


One of the reasons why OpenSSL was forked is because they were trying to 
support so many platforms that it made the code a real mess. Don't want 
the same to happen to another project because of it.


Especially with places like github that make it easy for members of the 
community to create and maintain such a patch, it may be the best option 
if the project itself doesn't have someone who can officially maintain 
LibreSSL support.


On 11/02/2016 05:08 AM, Ruga wrote:

libressl is a leaner and safer openssl

Sent from ProtonMail Mobile


On Wed, Nov 2, 2016 at 12:39 PM, Michael A. Peters <'mpet...@domblogger.net'> 
wrote:
IMHO it would be acceptable to have a LibreSSL patch that is maintained
by the people who want it.

It's free software, and that kind of is the point of Open Source.

On 11/02/2016 04:36 AM, Michael A. Peters wrote:

They have stated they are going to remain API compatible with 1.0.1h (or
g, forget which they forked) - their new stuff is outside of libcrypto.

On 11/02/2016 04:25 AM, Aki Tuomi wrote:

It does work today, I am just bit worried that it will keep on breaking
with libressl as they evolve their API. I would personally like to avoid
more ifdef hell if possible...

Aki


On 02.11.2016 13:22, Michael A. Peters wrote:

Standard way to fix it (on the LibreSSL page) is to check for
LIBRESSL_VERSION_NUMBER - e.g. the patch attached which I think
catches them all where needed. Note the word think.

It certainly appears to be working anyway with it.

On 11/02/2016 04:07 AM, Aki Tuomi wrote:

After doing some testing by myself, I noticed that libressl, for some
unknown reason, defines

#define OPENSSL_VERSION_NUMBER 0x2000L

No idea why they decided to advertise that they are OpenSSL v2.0.0. A
local fix, if you need one, is to use

#if OPENSSL_VERSION_NUMBER == 0x2000L
#define OPENSSL_VERSION_NUMBER 0x1000100L
#endif

in dcrypt-openssl.c after includes.

Aki


On 02.11.2016 12:39, Aki Tuomi wrote:

Hi!

Those are used if

#if OPENSSL_VERSION_NUMBER >= 0x1010L

So (your) libressl is providing this define. We compile our code using
GCC and CLANG regularly, with OpenSSL v1.0.x which is the currently
officially supported one.

Aki


On 02.11.2016 12:34, Ruga wrote:

dovecot 2.2.26.0 uses the following functions, which are not
available on libressl 2.4.3:

HMAC_CTX_new
HMAC_CTX_free
EVP_PKEY_get0_EC_KEY
EVP_PKEY_get0_RSA
OBJ_length
EVP_MD_CTX_new
EVP_MD_CTX_free

The result of calling a non-existent function is a runtime error,
and we do not want that on production servers.







There are additional problems. I recommend compiling with clang-llvm
3.9.0
to see them all.







 Original Message 
Subject: Re: v2.2.26.0 released
Local Time: 1 November 2016 7:30 PM
UTC Time: 1 November 2016 18:30
From: aki.tu...@dovecot.fi
To: Dovecot Mailing List , Ruga


OpenSSL v1.0.1 is enough.

Aki


On November 1, 2016 at 7:46 PM Ruga  wrote:


Hello,

We cannot upgrade from 2.2.24, because we use libressl and the newer
dovecot versions demand openssl v1.1.

Please add the new library requirement to the INSTALL file.

All the best.









 Original Message 
Subject: v2.2.26.0 released
Local Time: 28 October 2016 6:51 PM
UTC Time: 28 October 2016 16:51
From: t...@iki.fi
To: dovecot-n...@dovecot.org, Dovecot Mailing List


http://dovecot.org/releases/2.2/dovecot-2.2.26.0.tar.gz
http://dovecot.org/releases/2.2/dovecot-2.2.26.0.tar.gz.sig

v2.2.26 had a couple of nasty bugs left in it, so here's a fixup
release. The version number is also a little bit weird, but had to
be done this way (although 2.2.26.0.1 could have been another
possibility).

- Fixed some compiling issues.
- auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
multiple passdbs.
- auth: Fixed crash when exporting to auth-worker passdb extra
fields
that had empty values.
- dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit

>

Re: Outlook 2010 woes

[Konstantin Khomoutov]

On Tue, 1 Nov 2016 18:20:14 -0500
Bryan Holloway  wrote:

> In case anyone is interested, we finally found the problem:
> 
> The new (2.2) server had "auth_mechanisms" of "digest-md5" enabled
> along with "plain". This is what was causing the four-second delay,
> but only with Outlook clients.
> 
> Everything is working great now across the board.
> 
> Thanks again to everyone's suggestions.

Thanks for sharing.

It's pretty amazing how far removed the problem cause can be from that
problem's manifestation ;-)

Re: v2.2.26.0 released

[Ruga]

libressl is a leaner and safer openssl

Sent from ProtonMail Mobile


On Wed, Nov 2, 2016 at 12:39 PM, Michael A. Peters <'mpet...@domblogger.net'> 
wrote:
IMHO it would be acceptable to have a LibreSSL patch that is maintained
by the people who want it.

It's free software, and that kind of is the point of Open Source.

On 11/02/2016 04:36 AM, Michael A. Peters wrote:
> They have stated they are going to remain API compatible with 1.0.1h (or
> g, forget which they forked) - their new stuff is outside of libcrypto.
>
> On 11/02/2016 04:25 AM, Aki Tuomi wrote:
>> It does work today, I am just bit worried that it will keep on breaking
>> with libressl as they evolve their API. I would personally like to avoid
>> more ifdef hell if possible...
>>
>> Aki
>>
>>
>> On 02.11.2016 13:22, Michael A. Peters wrote:
>>> Standard way to fix it (on the LibreSSL page) is to check for
>>> LIBRESSL_VERSION_NUMBER - e.g. the patch attached which I think
>>> catches them all where needed. Note the word think.
>>>
>>> It certainly appears to be working anyway with it.
>>>
>>> On 11/02/2016 04:07 AM, Aki Tuomi wrote:
 After doing some testing by myself, I noticed that libressl, for some
 unknown reason, defines

 #define OPENSSL_VERSION_NUMBER 0x2000L

 No idea why they decided to advertise that they are OpenSSL v2.0.0. A
 local fix, if you need one, is to use

 #if OPENSSL_VERSION_NUMBER == 0x2000L
 #define OPENSSL_VERSION_NUMBER 0x1000100L
 #endif

 in dcrypt-openssl.c after includes.

 Aki


 On 02.11.2016 12:39, Aki Tuomi wrote:
> Hi!
>
> Those are used if
>
> #if OPENSSL_VERSION_NUMBER >= 0x1010L
>
> So (your) libressl is providing this define. We compile our code using
> GCC and CLANG regularly, with OpenSSL v1.0.x which is the currently
> officially supported one.
>
> Aki
>
>
> On 02.11.2016 12:34, Ruga wrote:
>> dovecot 2.2.26.0 uses the following functions, which are not
>> available on libressl 2.4.3:
>>
>> HMAC_CTX_new
>> HMAC_CTX_free
>> EVP_PKEY_get0_EC_KEY
>> EVP_PKEY_get0_RSA
>> OBJ_length
>> EVP_MD_CTX_new
>> EVP_MD_CTX_free
>>
>> The result of calling a non-existent function is a runtime error,
>> and we do not want that on production servers.
>>
>>
>>
>>
>>
>>
>>
>> There are additional problems. I recommend compiling with clang-llvm
>> 3.9.0
>> to see them all.
>>
>>
>>
>>
>>
>>
>>
>>  Original Message 
>> Subject: Re: v2.2.26.0 released
>> Local Time: 1 November 2016 7:30 PM
>> UTC Time: 1 November 2016 18:30
>> From: aki.tu...@dovecot.fi
>> To: Dovecot Mailing List , Ruga
>> 
>>
>> OpenSSL v1.0.1 is enough.
>>
>> Aki
>>
>>> On November 1, 2016 at 7:46 PM Ruga  wrote:
>>>
>>>
>>> Hello,
>>>
>>> We cannot upgrade from 2.2.24, because we use libressl and the newer
>>> dovecot versions demand openssl v1.1.
>>>
>>> Please add the new library requirement to the INSTALL file.
>>>
>>> All the best.
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>  Original Message 
>>> Subject: v2.2.26.0 released
>>> Local Time: 28 October 2016 6:51 PM
>>> UTC Time: 28 October 2016 16:51
>>> From: t...@iki.fi
>>> To: dovecot-n...@dovecot.org, Dovecot Mailing List
>>> 
>>>
>>> http://dovecot.org/releases/2.2/dovecot-2.2.26.0.tar.gz
>>> http://dovecot.org/releases/2.2/dovecot-2.2.26.0.tar.gz.sig
>>>
>>> v2.2.26 had a couple of nasty bugs left in it, so here's a fixup
>>> release. The version number is also a little bit weird, but had to
>>> be done this way (although 2.2.26.0.1 could have been another
>>> possibility).
>>>
>>> - Fixed some compiling issues.
>>> - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
>>> multiple passdbs.
>>> - auth: Fixed crash when exporting to auth-worker passdb extra
>>> fields
>>> that had empty values.
>>> - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
>>>

Re: v2.2.26.0 released

[Michael A. Peters]

IMHO it would be acceptable to have a LibreSSL patch that is maintained 
by the people who want it.


It's free software, and that kind of is the point of Open Source.

On 11/02/2016 04:36 AM, Michael A. Peters wrote:

They have stated they are going to remain API compatible with 1.0.1h (or
g, forget which they forked) - their new stuff is outside of libcrypto.

On 11/02/2016 04:25 AM, Aki Tuomi wrote:

It does work today, I am just bit worried that it will keep on breaking
with libressl as they evolve their API. I would personally like to avoid
more ifdef hell if possible...

Aki


On 02.11.2016 13:22, Michael A. Peters wrote:

Standard way to fix it (on the LibreSSL page) is to check for
LIBRESSL_VERSION_NUMBER - e.g. the patch attached which I think
catches them all where needed. Note the word think.

It certainly appears to be working anyway with it.

On 11/02/2016 04:07 AM, Aki Tuomi wrote:

After doing some testing by myself, I noticed that libressl, for some
unknown reason, defines

#define OPENSSL_VERSION_NUMBER0x2000L

No idea why they decided to advertise that they are OpenSSL v2.0.0. A
local fix, if you need one, is to use

#if OPENSSL_VERSION_NUMBER == 0x2000L
#define OPENSSL_VERSION_NUMBER 0x1000100L
#endif

in dcrypt-openssl.c after includes.

Aki


On 02.11.2016 12:39, Aki Tuomi wrote:

Hi!

Those are used if

#if OPENSSL_VERSION_NUMBER >= 0x1010L

So (your) libressl is providing this define. We compile our code using
GCC and CLANG regularly, with OpenSSL v1.0.x which is the currently
officially supported one.

Aki


On 02.11.2016 12:34, Ruga wrote:

dovecot 2.2.26.0 uses the following functions, which are not
available on libressl 2.4.3:

HMAC_CTX_new
HMAC_CTX_free
EVP_PKEY_get0_EC_KEY
EVP_PKEY_get0_RSA
OBJ_length
EVP_MD_CTX_new
EVP_MD_CTX_free

The result of calling a non-existent function is a runtime error,
and we do not want that on production servers.







There are additional problems. I recommend compiling with clang-llvm
3.9.0
to see them all.







 Original Message 
Subject: Re: v2.2.26.0 released
Local Time: 1 November 2016 7:30 PM
UTC Time: 1 November 2016 18:30
From: aki.tu...@dovecot.fi
To: Dovecot Mailing List , Ruga


OpenSSL v1.0.1 is enough.

Aki


On November 1, 2016 at 7:46 PM Ruga  wrote:


Hello,

We cannot upgrade from 2.2.24, because we use libressl and the newer
dovecot versions demand openssl v1.1.

Please add the new library requirement to the INSTALL file.

All the best.









 Original Message 
Subject: v2.2.26.0 released
Local Time: 28 October 2016 6:51 PM
UTC Time: 28 October 2016 16:51
From: t...@iki.fi
To: dovecot-n...@dovecot.org, Dovecot Mailing List


http://dovecot.org/releases/2.2/dovecot-2.2.26.0.tar.gz
http://dovecot.org/releases/2.2/dovecot-2.2.26.0.tar.gz.sig

v2.2.26 had a couple of nasty bugs left in it, so here's a fixup
release. The version number is also a little bit weird, but had to
be done this way (although 2.2.26.0.1 could have been another
possibility).

- Fixed some compiling issues.
- auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
multiple passdbs.
- auth: Fixed crash when exporting to auth-worker passdb extra
fields
that had empty values.
- dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit

Re: v2.2.26.0 released

[Michael A. Peters]

They have stated they are going to remain API compatible with 1.0.1h (or 
g, forget which they forked) - their new stuff is outside of libcrypto.


On 11/02/2016 04:25 AM, Aki Tuomi wrote:

It does work today, I am just bit worried that it will keep on breaking
with libressl as they evolve their API. I would personally like to avoid
more ifdef hell if possible...

Aki


On 02.11.2016 13:22, Michael A. Peters wrote:

Standard way to fix it (on the LibreSSL page) is to check for
LIBRESSL_VERSION_NUMBER - e.g. the patch attached which I think
catches them all where needed. Note the word think.

It certainly appears to be working anyway with it.

On 11/02/2016 04:07 AM, Aki Tuomi wrote:

After doing some testing by myself, I noticed that libressl, for some
unknown reason, defines

#define OPENSSL_VERSION_NUMBER0x2000L

No idea why they decided to advertise that they are OpenSSL v2.0.0. A
local fix, if you need one, is to use

#if OPENSSL_VERSION_NUMBER == 0x2000L
#define OPENSSL_VERSION_NUMBER 0x1000100L
#endif

in dcrypt-openssl.c after includes.

Aki


On 02.11.2016 12:39, Aki Tuomi wrote:

Hi!

Those are used if

#if OPENSSL_VERSION_NUMBER >= 0x1010L

So (your) libressl is providing this define. We compile our code using
GCC and CLANG regularly, with OpenSSL v1.0.x which is the currently
officially supported one.

Aki


On 02.11.2016 12:34, Ruga wrote:

dovecot 2.2.26.0 uses the following functions, which are not
available on libressl 2.4.3:

HMAC_CTX_new
HMAC_CTX_free
EVP_PKEY_get0_EC_KEY
EVP_PKEY_get0_RSA
OBJ_length
EVP_MD_CTX_new
EVP_MD_CTX_free

The result of calling a non-existent function is a runtime error,
and we do not want that on production servers.







There are additional problems. I recommend compiling with clang-llvm
3.9.0
to see them all.







 Original Message 
Subject: Re: v2.2.26.0 released
Local Time: 1 November 2016 7:30 PM
UTC Time: 1 November 2016 18:30
From: aki.tu...@dovecot.fi
To: Dovecot Mailing List , Ruga


OpenSSL v1.0.1 is enough.

Aki


On November 1, 2016 at 7:46 PM Ruga  wrote:


Hello,

We cannot upgrade from 2.2.24, because we use libressl and the newer
dovecot versions demand openssl v1.1.

Please add the new library requirement to the INSTALL file.

All the best.









 Original Message 
Subject: v2.2.26.0 released
Local Time: 28 October 2016 6:51 PM
UTC Time: 28 October 2016 16:51
From: t...@iki.fi
To: dovecot-n...@dovecot.org, Dovecot Mailing List


http://dovecot.org/releases/2.2/dovecot-2.2.26.0.tar.gz
http://dovecot.org/releases/2.2/dovecot-2.2.26.0.tar.gz.sig

v2.2.26 had a couple of nasty bugs left in it, so here's a fixup
release. The version number is also a little bit weird, but had to
be done this way (although 2.2.26.0.1 could have been another
possibility).

- Fixed some compiling issues.
- auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
multiple passdbs.
- auth: Fixed crash when exporting to auth-worker passdb extra fields
that had empty values.
- dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit

Re: Α compilation problem exists with Sun studio 12

[Aki Tuomi]

On 02.11.2016 13:30, Limperis Antonis wrote:

Hello,

I tried  to compile Dovecot  2.2.26.0 with Sun Studio 12.0 on a Sun Solaris 10 
x86 machine,   but an error occurred related to src/lib-ldap/ldap-compare.c.

"ldap-compare.c", line 112: void function cannot return value
cc: acomp failed for ldap-compare.c
*** Error code 1
make: Fatal error: Command failed for target `ldap-compare.lo'

The problem fixed with the following changes on this file:

--- dovecot-2.2.26.0/src/lib-ldap/ldap-compare.c.orig   Wed Nov  2 06:51:27 2016
+++ dovecot-2.2.26.0/src/lib-ldap/ldap-compare.cWed Nov  2 06:24:02 2016
@@ -109,7 +109,9 @@
 req->send_request_cb = ldap_compare_send;
 req->timeout_secs = input->timeout_secs;
  
-   return ldap_connection_queue_request(conn, req);

+// return ldap_connection_queue_request(conn, req);
+   ldap_connection_queue_request(conn, req);
+   return;
  }

You could see it in the next release of dovecot;
Thank You.
Antonis


Hi!

Thank you.

Aki Tuomi
Dovecot oy

Α compilation problem exists with Sun studio 12

[Limperis Antonis]

Hello,

I tried  to compile Dovecot  2.2.26.0 with Sun Studio 12.0 on a Sun Solaris 10 
x86 machine,   but an error occurred related to src/lib-ldap/ldap-compare.c.

"ldap-compare.c", line 112: void function cannot return value
cc: acomp failed for ldap-compare.c
*** Error code 1
make: Fatal error: Command failed for target `ldap-compare.lo'

The problem fixed with the following changes on this file:

--- dovecot-2.2.26.0/src/lib-ldap/ldap-compare.c.orig   Wed Nov  2 06:51:27 2016
+++ dovecot-2.2.26.0/src/lib-ldap/ldap-compare.cWed Nov  2 06:24:02 2016
@@ -109,7 +109,9 @@
req->send_request_cb = ldap_compare_send;
req->timeout_secs = input->timeout_secs;
 
-   return ldap_connection_queue_request(conn, req);
+// return ldap_connection_queue_request(conn, req);
+   ldap_connection_queue_request(conn, req);
+   return;
 }

You could see it in the next release of dovecot;
Thank You.
Antonis

Re: v2.2.26.0 released

[Aki Tuomi]

It does work today, I am just bit worried that it will keep on breaking 
with libressl as they evolve their API. I would personally like to avoid 
more ifdef hell if possible...


Aki


On 02.11.2016 13:22, Michael A. Peters wrote:
Standard way to fix it (on the LibreSSL page) is to check for 
LIBRESSL_VERSION_NUMBER - e.g. the patch attached which I think 
catches them all where needed. Note the word think.


It certainly appears to be working anyway with it.

On 11/02/2016 04:07 AM, Aki Tuomi wrote:

After doing some testing by myself, I noticed that libressl, for some
unknown reason, defines

#define OPENSSL_VERSION_NUMBER0x2000L

No idea why they decided to advertise that they are OpenSSL v2.0.0. A
local fix, if you need one, is to use

#if OPENSSL_VERSION_NUMBER == 0x2000L
#define OPENSSL_VERSION_NUMBER 0x1000100L
#endif

in dcrypt-openssl.c after includes.

Aki


On 02.11.2016 12:39, Aki Tuomi wrote:

Hi!

Those are used if

#if OPENSSL_VERSION_NUMBER >= 0x1010L

So (your) libressl is providing this define. We compile our code using
GCC and CLANG regularly, with OpenSSL v1.0.x which is the currently
officially supported one.

Aki


On 02.11.2016 12:34, Ruga wrote:

dovecot 2.2.26.0 uses the following functions, which are not
available on libressl 2.4.3:

HMAC_CTX_new
HMAC_CTX_free
EVP_PKEY_get0_EC_KEY
EVP_PKEY_get0_RSA
OBJ_length
EVP_MD_CTX_new
EVP_MD_CTX_free

The result of calling a non-existent function is a runtime error,
and we do not want that on production servers.







There are additional problems. I recommend compiling with clang-llvm
3.9.0
to see them all.







 Original Message 
Subject: Re: v2.2.26.0 released
Local Time: 1 November 2016 7:30 PM
UTC Time: 1 November 2016 18:30
From: aki.tu...@dovecot.fi
To: Dovecot Mailing List , Ruga


OpenSSL v1.0.1 is enough.

Aki


On November 1, 2016 at 7:46 PM Ruga  wrote:


Hello,

We cannot upgrade from 2.2.24, because we use libressl and the newer
dovecot versions demand openssl v1.1.

Please add the new library requirement to the INSTALL file.

All the best.









 Original Message 
Subject: v2.2.26.0 released
Local Time: 28 October 2016 6:51 PM
UTC Time: 28 October 2016 16:51
From: t...@iki.fi
To: dovecot-n...@dovecot.org, Dovecot Mailing List


http://dovecot.org/releases/2.2/dovecot-2.2.26.0.tar.gz
http://dovecot.org/releases/2.2/dovecot-2.2.26.0.tar.gz.sig

v2.2.26 had a couple of nasty bugs left in it, so here's a fixup
release. The version number is also a little bit weird, but had to
be done this way (although 2.2.26.0.1 could have been another
possibility).

- Fixed some compiling issues.
- auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
multiple passdbs.
- auth: Fixed crash when exporting to auth-worker passdb extra fields
that had empty values.
- dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit

Re: v2.2.26.0 released

[Michael A. Peters]

Standard way to fix it (on the LibreSSL page) is to check for 
LIBRESSL_VERSION_NUMBER - e.g. the patch attached which I think catches 
them all where needed. Note the word think.


It certainly appears to be working anyway with it.

On 11/02/2016 04:07 AM, Aki Tuomi wrote:

After doing some testing by myself, I noticed that libressl, for some
unknown reason, defines

#define OPENSSL_VERSION_NUMBER0x2000L

No idea why they decided to advertise that they are OpenSSL v2.0.0. A
local fix, if you need one, is to use

#if OPENSSL_VERSION_NUMBER == 0x2000L
#define OPENSSL_VERSION_NUMBER 0x1000100L
#endif

in dcrypt-openssl.c after includes.

Aki


On 02.11.2016 12:39, Aki Tuomi wrote:

Hi!

Those are used if

#if OPENSSL_VERSION_NUMBER >= 0x1010L

So (your) libressl is providing this define. We compile our code using
GCC and CLANG regularly, with OpenSSL v1.0.x which is the currently
officially supported one.

Aki


On 02.11.2016 12:34, Ruga wrote:

dovecot 2.2.26.0 uses the following functions, which are not
available on libressl 2.4.3:

HMAC_CTX_new
HMAC_CTX_free
EVP_PKEY_get0_EC_KEY
EVP_PKEY_get0_RSA
OBJ_length
EVP_MD_CTX_new
EVP_MD_CTX_free

The result of calling a non-existent function is a runtime error,
and we do not want that on production servers.







There are additional problems. I recommend compiling with clang-llvm
3.9.0
to see them all.







 Original Message 
Subject: Re: v2.2.26.0 released
Local Time: 1 November 2016 7:30 PM
UTC Time: 1 November 2016 18:30
From: aki.tu...@dovecot.fi
To: Dovecot Mailing List , Ruga


OpenSSL v1.0.1 is enough.

Aki


On November 1, 2016 at 7:46 PM Ruga  wrote:


Hello,

We cannot upgrade from 2.2.24, because we use libressl and the newer
dovecot versions demand openssl v1.1.

Please add the new library requirement to the INSTALL file.

All the best.









 Original Message 
Subject: v2.2.26.0 released
Local Time: 28 October 2016 6:51 PM
UTC Time: 28 October 2016 16:51
From: t...@iki.fi
To: dovecot-n...@dovecot.org, Dovecot Mailing List


http://dovecot.org/releases/2.2/dovecot-2.2.26.0.tar.gz
http://dovecot.org/releases/2.2/dovecot-2.2.26.0.tar.gz.sig

v2.2.26 had a couple of nasty bugs left in it, so here's a fixup
release. The version number is also a little bit weird, but had to
be done this way (although 2.2.26.0.1 could have been another
possibility).

- Fixed some compiling issues.
- auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
multiple passdbs.
- auth: Fixed crash when exporting to auth-worker passdb extra fields
that had empty values.
- dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit


diff -ur dovecot-2.2.26.0.orig/src/lib-dcrypt/dcrypt-openssl.c dovecot-2.2.26.0/src/lib-dcrypt/dcrypt-openssl.c
--- dovecot-2.2.26.0.orig/src/lib-dcrypt/dcrypt-openssl.c	2016-10-27 05:26:28.0 -0700
+++ dovecot-2.2.26.0/src/lib-dcrypt/dcrypt-openssl.c	2016-11-02 04:12:32.854546200 -0700
@@ -67,7 +67,7 @@
   2key algo oid1symmetric algo namesalthash algoroundsE(RSA = i2d_PrivateKey, EC=Private Point)key id
 **/
 
-#if OPENSSL_VERSION_NUMBER < 0x1010L
+#if OPENSSL_VERSION_NUMBER < 0x1010L || defined (LIBRESSL_VERSION_NUMBER)
 #define EVP_PKEY_get0_EC_KEY(x) x->pkey.ec
 #define EVP_PKEY_get0_RSA(x) x->pkey.rsa
 #define OBJ_length(o) ((o)->length)
@@ -90,7 +90,7 @@
 struct dcrypt_context_hmac {
 	pool_t pool;
 	const EVP_MD *md;
-#if OPENSSL_VERSION_NUMBER >= 0x1010L
+#if OPENSSL_VERSION_NUMBER >= 0x1010L && !defined (LIBRESSL_VERSION_NUMBER)
 	HMAC_CTX *ctx;
 #else
 	HMAC_CTX ctx;
@@ -427,7 +427,7 @@
 void dcrypt_openssl_ctx_hmac_destroy(struct dcrypt_context_hmac **ctx)
 {
 	pool_t pool = (*ctx)->pool;
-#if OPENSSL_VERSION_NUMBER >= 0x1010L
+#if OPENSSL_VERSION_NUMBER >= 0x1010L && !defined (LIBRESSL_VERSION_NUMBER)
 	if ((*ctx)->ctx) HMAC_CTX_free((*ctx)->ctx);
 #else
 	HMAC_cleanup(&((*ctx)->ctx));
@@ -470,7 +470,7 @@
 {
 	int ec;
 	i_assert(ctx->md != NULL);
-#if OPENSSL_VERSION_NUMBER >= 0x1010L
+#if OPENSSL_VERSION_NUMBER >= 0x1010L && !defined (LIBRESSL_VERSION_NUMBER)
 	ctx->ctx = HMAC_CTX_new();
 	if (ctx->ctx == NULL) return dcrypt_openssl_error(error_r);
 	ec = HMAC_Init_ex(ctx->ctx, ctx->key, ctx->klen, ctx->md, NULL);
@@ -484,7 +484,7 @@
 bool dcrypt_openssl_ctx_hmac_update(struct dcrypt_context_hmac *ctx, const unsigned char *data, size_t data_len, const char **error_r)
 {
 	int ec;
-#if OPENSSL_VERSION_NUMBER >= 0x1010L
+#if OPENSSL_VERSION_NUMBER >= 0x1010L && !defined (LIBRESSL_VERSION_NUMBER)
 	ec = HMAC_Update(ctx->ctx, data, data_len);
 #else
 	ec = HMAC_Update(&(ctx->ctx), data, data_len);
@@ -498,7 +498,7 @@
 	int ec;
 	unsigned char buf[HMAC_MAX_MD_CBLOCK];
 	unsigned int outl;
-#if OPENSSL_VERSION_NUMBER >= 0x1010L
+#if OPENSSL_VERSION_NUMBER >= 0x1010L && !defined (LIBRESSL_VERSION_NUMBER)
 	ec = HMAC_Final(ctx->ctx, buf, );
 	

Re: v2.2.26.0 released

[Aki Tuomi]

After doing some testing by myself, I noticed that libressl, for some 
unknown reason, defines


#define OPENSSL_VERSION_NUMBER0x2000L

No idea why they decided to advertise that they are OpenSSL v2.0.0. A 
local fix, if you need one, is to use


#if OPENSSL_VERSION_NUMBER == 0x2000L
#define OPENSSL_VERSION_NUMBER 0x1000100L
#endif

in dcrypt-openssl.c after includes.

Aki


On 02.11.2016 12:39, Aki Tuomi wrote:

Hi!

Those are used if

#if OPENSSL_VERSION_NUMBER >= 0x1010L

So (your) libressl is providing this define. We compile our code using 
GCC and CLANG regularly, with OpenSSL v1.0.x which is the currently 
officially supported one.


Aki


On 02.11.2016 12:34, Ruga wrote:
dovecot 2.2.26.0 uses the following functions, which are not 
available on libressl 2.4.3:


HMAC_CTX_new
HMAC_CTX_free
EVP_PKEY_get0_EC_KEY
EVP_PKEY_get0_RSA
OBJ_length
EVP_MD_CTX_new
EVP_MD_CTX_free

The result of calling a non-existent function is a runtime error,
and we do not want that on production servers.







There are additional problems. I recommend compiling with clang-llvm 
3.9.0

to see them all.







 Original Message 
Subject: Re: v2.2.26.0 released
Local Time: 1 November 2016 7:30 PM
UTC Time: 1 November 2016 18:30
From: aki.tu...@dovecot.fi
To: Dovecot Mailing List , Ruga 



OpenSSL v1.0.1 is enough.

Aki


On November 1, 2016 at 7:46 PM Ruga  wrote:


Hello,

We cannot upgrade from 2.2.24, because we use libressl and the newer
dovecot versions demand openssl v1.1.

Please add the new library requirement to the INSTALL file.

All the best.









 Original Message 
Subject: v2.2.26.0 released
Local Time: 28 October 2016 6:51 PM
UTC Time: 28 October 2016 16:51
From: t...@iki.fi
To: dovecot-n...@dovecot.org, Dovecot Mailing List 



http://dovecot.org/releases/2.2/dovecot-2.2.26.0.tar.gz
http://dovecot.org/releases/2.2/dovecot-2.2.26.0.tar.gz.sig

v2.2.26 had a couple of nasty bugs left in it, so here's a fixup 
release. The version number is also a little bit weird, but had to 
be done this way (although 2.2.26.0.1 could have been another 
possibility).


- Fixed some compiling issues.
- auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
multiple passdbs.
- auth: Fixed crash when exporting to auth-worker passdb extra fields
that had empty values.
- dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit

Re: v2.2.26.0 released

[Aki Tuomi]

Hi!

Those are used if

#if OPENSSL_VERSION_NUMBER >= 0x1010L

So (your) libressl is providing this define. We compile our code using 
GCC and CLANG regularly, with OpenSSL v1.0.x which is the currently 
officially supported one.


Aki


On 02.11.2016 12:34, Ruga wrote:

dovecot 2.2.26.0 uses the following functions, which are not available on 
libressl 2.4.3:

HMAC_CTX_new
HMAC_CTX_free
EVP_PKEY_get0_EC_KEY
EVP_PKEY_get0_RSA
OBJ_length
EVP_MD_CTX_new
EVP_MD_CTX_free

The result of calling a non-existent function is a runtime error,
and we do not want that on production servers.







There are additional problems. I recommend compiling with clang-llvm 3.9.0
to see them all.







 Original Message 
Subject: Re: v2.2.26.0 released
Local Time: 1 November 2016 7:30 PM
UTC Time: 1 November 2016 18:30
From: aki.tu...@dovecot.fi
To: Dovecot Mailing List , Ruga 

OpenSSL v1.0.1 is enough.

Aki


On November 1, 2016 at 7:46 PM Ruga  wrote:


Hello,

We cannot upgrade from 2.2.24, because we use libressl and the newer
dovecot versions demand openssl v1.1.

Please add the new library requirement to the INSTALL file.

All the best.









 Original Message 
Subject: v2.2.26.0 released
Local Time: 28 October 2016 6:51 PM
UTC Time: 28 October 2016 16:51
From: t...@iki.fi
To: dovecot-n...@dovecot.org, Dovecot Mailing List 

http://dovecot.org/releases/2.2/dovecot-2.2.26.0.tar.gz
http://dovecot.org/releases/2.2/dovecot-2.2.26.0.tar.gz.sig

v2.2.26 had a couple of nasty bugs left in it, so here's a fixup release. The 
version number is also a little bit weird, but had to be done this way 
(although 2.2.26.0.1 could have been another possibility).

- Fixed some compiling issues.
- auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
multiple passdbs.
- auth: Fixed crash when exporting to auth-worker passdb extra fields
that had empty values.
- dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit

Re: v2.2.26.0 released

[Ruga]

dovecot 2.2.26.0 uses the following functions, which are not available on 
libressl 2.4.3:

HMAC_CTX_new
HMAC_CTX_free
EVP_PKEY_get0_EC_KEY
EVP_PKEY_get0_RSA
OBJ_length
EVP_MD_CTX_new
EVP_MD_CTX_free

The result of calling a non-existent function is a runtime error,
and we do not want that on production servers.







There are additional problems. I recommend compiling with clang-llvm 3.9.0
to see them all.







 Original Message 
Subject: Re: v2.2.26.0 released
Local Time: 1 November 2016 7:30 PM
UTC Time: 1 November 2016 18:30
From: aki.tu...@dovecot.fi
To: Dovecot Mailing List , Ruga 

OpenSSL v1.0.1 is enough.

Aki

> On November 1, 2016 at 7:46 PM Ruga  wrote:
>
>
> Hello,
>
> We cannot upgrade from 2.2.24, because we use libressl and the newer
> dovecot versions demand openssl v1.1.
>
> Please add the new library requirement to the INSTALL file.
>
> All the best.
>
>
>
>
>
>
>
>
>
>  Original Message 
> Subject: v2.2.26.0 released
> Local Time: 28 October 2016 6:51 PM
> UTC Time: 28 October 2016 16:51
> From: t...@iki.fi
> To: dovecot-n...@dovecot.org, Dovecot Mailing List 
>
> http://dovecot.org/releases/2.2/dovecot-2.2.26.0.tar.gz
> http://dovecot.org/releases/2.2/dovecot-2.2.26.0.tar.gz.sig
>
> v2.2.26 had a couple of nasty bugs left in it, so here's a fixup release. The 
> version number is also a little bit weird, but had to be done this way 
> (although 2.2.26.0.1 could have been another possibility).
>
> - Fixed some compiling issues.
> - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
> multiple passdbs.
> - auth: Fixed crash when exporting to auth-worker passdb extra fields
> that had empty values.
> - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit

Re: Dovecot 2 LDAP "unknown user"

[Steffen Kaiser]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Tue, 1 Nov 2016, Peter Fraser wrote:


root@BSD-11:/usr/local/etc/dovecot # doveadm auth test username
Password:
passdb: user auth succeeded
extra fields:
 user=username
root@BSD-11:/usr/local/etc/dovecot #

But when I run telnet 127.0.0.1 110 and try to log in it says unknown user.
Error below in maillog.
BSD-11 dovecot: pop3: Error: Authenticated user not found from userdb, auth
lookup id=2262958081 (client-pid=2273 client-id=1)
Nov  1 15:15:41 BSD-11 dovecot: pop3-login: Internal login failure
(pid=2273 id=1) (internal failure, 1 successful auths): user=



passdb {
 args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext
 driver = ldap
}



userdb {
 args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext
 driver = ldap
}



#Contents of dovecot-ldap.conf.ext
hosts = 192.168.153.143
dn = u...@domain.com
dnpass = password
auth_bind = yes
auth_bind_userdn = domain\%u
ldap_version = 3
base = dc=domain,dc=com
pass_filter = (&(objectclass=person)(uid=%u))
user_attrs = homeDirectory=/home/vmail/%u,uid=1002,gid=1002


duplicate pass_filter to user_filter.

- -- 
Steffen Kaiser

-BEGIN PGP SIGNATURE-
Version: GnuPG v1

iQEVAwUBWBm0Onz1H7kL/d9rAQJWhQf+PRD5yd29UyL1drjlTOWD/s4qUffg8OBh
inb8L3eCKDuSad8s9INUJSa6WxGEVdatL4PKjTcbL5IsPIob87W5jOduWFMtPlt0
FXxWtfc1bAjRyNLzkGe1mUT1z0EDVO22UkQSd9J3bZQ9wR+FzgeGqdcyzl+WSyzB
Eaiea23ieCjhZRAZF/pl1gDjkap+tPQ8gZLdt4p1QQrY5Jllifu5jYEyjqPkwUXf
YMfEiCJSInyMQ8CCuL1Aj8iM/7qLLi8pyC9KSA6NntK4mpHAaInYln6SZY+ZGJCY
KV60nGuwwv3qQFeKchhhr+GpGDQYXJ5eBq+Ji+cKgvbypFa13NNS8A==
=l02F
-END PGP SIGNATURE-