CentOS 8 / 7
Hello List, I have to install a "new" system, what is the best way for this. I like to install a CentOS System but I only found dovecot for CentOS 7 is this compatible for CentOS 8 or have I to setup a CentOS 7 System ? The onboard dovecot is 2.2.36-5 :-( Thanks for a answer, -- mit freundlichen Grüßen / best regards Günther J. Niederwimmer
Re: Replication issue 2.3.7
Hello,
Thanks for the info and workaround!
I found and have the same problems after read your mail :-(.
Am Samstag, 13. Juli 2019, 11:13:23 CEST schrieb Reio Remma via dovecot:
> Hello!
>
> I noticed these in the logs since upgrading from 2.3.6. to 2.3.7:
>
> Jul 13 11:52:10 turin dovecot: doveadm: Error:
> dsync-remote(r...@mrstuudio.ee): Error:
> Exporting mailbox INBOX failed: Mailbox attribute
> vendor/vendor.dovecot/pvt/server/sieve/files/MR lookup failed: Mailbox
> attributes not enabled
> Jul 13 11:52:11 turin dovecot: doveadm: Error:
> dsync-remote(r...@mrstuudio.ee): Error:
> Exporting mailbox INBOX failed: Mailbox attribute
> vendor/vendor.dovecot/pvt/server/sieve/files/MR lookup failed: Mailbox
> attributes not enabled
>
> After turning on mailbox attributes these errors went away:
>
> mail_attribute_dict = file:~/Maildir/dovecot-attributes
>
> protocol imap {
> imap_metadata = yes
> }
>
> But now the errors are replaced with (when deleting mail):
>
> Jul 13 12:04:32 turin dovecot: imap(r...@mrstuudio.ee): Warning:
> /home/vmail/mrstuudio.ee/reio/Maildir/dovecot-uidlist: Duplicate file
> entry at line 2: 1563008644.M18534P25946.orc.mrstuudio.ee,S=4180,W=4262
> (uid 23030 -> 23031) - retrying by re-reading from beginning
> Jul 13 12:04:32 turin dovecot: imap(r...@mrstuudio.ee): Warning: Maildir
> /home/vmail/mrstuudio.ee/reio/Maildir: Expunged message reappeared,
> giving a new UID (old uid=23030,
> file=1563008644.M18534P25946.orc.mrstuudio.ee,S=4180,W=4262:2,S)
>
> The mail message reappears on the other side of dsync and eventually I
> end up with 3 identical messages in trash after I've deleted them on
> both sides.
>
> Thanks for any advice,
> Reio
--
mit freundliche Grüßen / best regards,
Günther J. Niederwimmer
new dovecot, selinux Problem ?
Hello List,
after the last update I have a selinux "Problem" with dovecot.
My system is a centos 7.
After a new start from dovecot selinux block a connection.
Jul 12 16:24:24 mx01 systemd: Starting Dovecot IMAP/POP3 email server...
Jul 12 16:24:54 mx01 systemd: Started Dovecot IMAP/POP3 email server.
Jul 12 16:24:54 mx01 dovecot: Warning: Corrected permissions for login
directory /var/run/dovecot/token-login
Jul 12 16:24:54 mx01 dbus[3008]: [system] Activating service
name='org.fedoraproject.Setroubleshootd' (using servicehelper)
Jul 12 16:24:55 mx01 dbus[3008]: [system] Successfully activated service
'org.fedoraproject.Setroubleshootd'
Jul 12 16:24:55 mx01 setroubleshoot: SELinux is preventing dovecot from
getattr access on the file /proc/sys/fs/suid_dumpable. For complete SELinux
messages run: sealert -l c46ae6a7-64c4-49a7-9e3d-477547fb6da8
Jul 12 16:24:55 mx01 python: SELinux is preventing dovecot from getattr access
on the file /proc/sys/fs/suid_dumpable.#012#012* Plugin catchall (100.
confidence) suggests **#012#012If you believe that
dovecot should be allowed getattr access on the suid_dumpable file by
default.#012Then you should report this as a bug.#012You can generate a local
policy module to allow this access.#012Do#012allow this access for now by
executing:#012# ausearch -c 'dovecot' --raw | audit2allow -M my-dovecot#012#
semodule -i my-dovecot.pp#012
is this a bad Error?
When I install this local Policy i have a Problem with selinux wrong policy.
sealert -a /var/log/audit/audit.log
13% donetype=AVC msg=audit(1562936830.462:61868): avc: denied { getattr }
for pid=31288 comm="dovecot" path="/proc/sys/fs/suid_dumpable" dev="proc"
ino=35734 scontext=system_u:system_r:dovecot_t:s0
tcontext=system_u:object_r:proc_security_t:s0 tclass=file permissive=0
Invalid AVC allowed in current policy ***
100% done
found 0 alerts in /var/log/audit/audit.log
Can any tell / help me for a correct installation?
--
mit freundliche Grüßen / best regards,
Günther J. Niederwimmer
CentOS 7 SeLinux Problem?
Hello,
I update my dovecot to the last Version, now I have this error in the audit
Log.
Can any tell me what I can do, without selinux disabled
//
SELinux hindert /usr/sbin/dovecot daran, mit getattr-Zugriff auf Datei /proc/
sys/fs/suid_dumpable zuzugreifen.
* Plugin catchall (100. Wahrscheinlichkeit) schlägt vor**
If you believe that dovecot should be allowed getattr access on the
suid_dumpable file by default.
Dann sie sollten dies als Fehler melden.
Um diesen Zugriff zu erlauben, können Sie ein lokales Richtlinien-Modul
erstellen.
Ausführen
allow this access for now by executing:
# ausearch -c 'dovecot' --raw | audit2allow -M my-dovecot
# semodule -i my-dovecot.pp
zusätzliche Information:
Quellkontext system_u:system_r:dovecot_t:s0
Zielkontext system_u:object_r:proc_security_t:s0
Zielobjekte /proc/sys/fs/suid_dumpable [ file ]
Quelledovecot
Quellpfad /usr/sbin/dovecot
Port
Host
RPM-Pakete der Quelle dovecot-2.3.6-2.x86_64
RPM-Pakete des Ziels
Richtlinien-RPM selinux-policy-3.13.1-229.el7_6.12.noarch
SELinux aktiviert True
Richtlinientyptargeted
Enforcing-Modus Enforcing
Rechnername mx01.example.com
Plattform Linux mx01.example.com
3.10.0-957.21.3.el7.x86_64 #1
SMP Tue Jun 18 16:35:19 UTC 2019 x86_64 x86_64
Anzahl der Alarme 1
Zuerst gesehen2019-06-21 06:15:28 CEST
Zuletzt gesehen 2019-06-21 06:15:28 CEST
Lokale ID 259a6386-ad49-4cdf-a21b-97f891c997aa
Raw-Audit-Meldungen
type=AVC msg=audit(1561090528.816:4135): avc: denied { getattr } for
pid=28610 comm="dovecot" path="/proc/sys/fs/suid_dumpable" dev="proc"
ino=39881 scontext=system_u:system_r:dovecot_t:s0
tcontext=system_u:object_r:proc_security_t:s0 tclass=file permissive=0
type=SYSCALL msg=audit(1561090528.816:4135): arch=x86_64 syscall=stat
success=no exit=EACCES a0=556b5394906b a1=7fff567c8e40 a2=7fff567c8e40
a3=7fff567c87e0 items=0 ppid=1 pid=28610 auid=4294967295 uid=0 gid=0 euid=0
suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm=dovecot
exe=/usr/sbin/dovecot subj=system_u:system_r:dovecot_t:s0 key=(null)
Hash: dovecot,dovecot_t,proc_security_t,file,getattr
//
when I create a separate my-dovecot.pp I have the same Error :-(
--
mit freundliche Grüßen / best regards,
Günther J. Niederwimmer
Re: CentOS Repository broken ?
Hello, I download and install it manual, this working now? waiting for next update to found out, yum is working correct again ;-) Thanks for answers, Am Sonntag, 31. März 2019, 13:59:17 CEST schrieb Kostya Vasilyev via dovecot: > On Sun, Mar 31, 2019, at 2:30 PM, Günther J. Niederwimmer via dovecot wrote: > > Hello, > > > > Am Samstag, 30. März 2019, 21:36:12 CEST schrieb Peter via dovecot: > > > On 30/03/19 10:56 PM, Gerald Galster via dovecot wrote: > > > > Maybe there is something wrong with his local yum/repo configuration. > > > > > > I'm tending to agree now. > > > > [ ... ] > > > > > It would have to be for yum to see dovecot-imaptest-2.3.5.1-1.x86_64 and > > > dovecot-lua-2.3.5.1-1.x86_64. It sounds more like he's put an > > > exclude=dovecot line in his dovecot-2.3-latest repo container. > > > > NO, I have no exclude in the dovecot.repo but it is not possible for yum > > to > > find the dovecot Package but the dovecot-lua ... is found? > > > > I mean there are wrong permissions on the repo? > > FWIW, works for me just fine. > > I created a brand new, fresh, CentOS 7 image in the cloud. > > Configured Dovecot repo as described here: > > https://repo.dovecot.org/ > > Did yum install and it worked just fine (see the output below). > > Maybe you can do > > yum list "dovecot*" > > > > So we can see what you have installed right now vs. what your system sees in > the repo? > > - > > # yum install dovecot dovecot-lua dovecot-imaptest > > Resolving Dependencies > --> Running transaction check > ---> Package dovecot.x86_64 2:2.3.5.1-1 will be installed > --> Processing Dependency: libclucene-core.so.1()(64bit) for package: > 2:dovecot-2.3.5.1-1.x86_64 --> Processing Dependency: > libclucene-shared.so.1()(64bit) for package: 2:dovecot-2.3.5.1-1.x86_64 > ---> Package dovecot-imaptest.x86_64 2:2.3.5.1-1 will be installed ---> > Package dovecot-lua.x86_64 2:2.3.5.1-1 will be installed > --> Running transaction check > ---> Package clucene-core.x86_64 0:2.3.3.4-11.el7 will be installed > --> Finished Dependency Resolution > > Dependencies Resolved > > > == Package Arch > VersionRepository Size > === > === Installing: > dovecot x86_642:2.3.5.1-1 > dovecot-2.3-latest4.4 M dovecot-imaptestx86_64 > 2:2.3.5.1-1dovecot-2.3-latest 79 k > dovecot-lua x86_642:2.3.5.1-1 > dovecot-2.3-latest100 k Installing for dependencies: > clucene-corex86_642.3.3.4-11.el7 > base 528 k > > Transaction Summary > > == Install 3 Packages (+1 Dependent > package) > > .. > > Running transaction > Installing : clucene-core-2.3.3.4-11.el7.x86_64 > 1/4 Installing : 2:dovecot-2.3.5.1-1.x86_64 > 2/4 Installing > : 2:dovecot-imaptest-2.3.5.1-1.x86_64 > 3/4 Installing : 2:dovecot-lua-2.3.5.1-1.x86_64 > 4/4 Verifying : > clucene-core-2.3.3.4-11.el7.x86_64 >1/4 Verifying : 2:dovecot-imaptest-2.3.5.1-1.x86_64 >2/4 Verifying : > 2:dovecot-2.3.5.1-1.x86_64 >3/4 Verifying : 2:dovecot-lua-2.3.5.1-1.x86_64 >4/4 > > Installed: > dovecot.x86_64 2:2.3.5.1-1 dovecot-imaptest.x86_64 2:2.3.5.1-1 > dovecot-lua.x86_64 2:2.3.5.1-1 > > Dependency Installed: > clucene-core.x86_64 0:2.3.3.4-11.el7 > > -- K -- mit freundliche Grüßen / best regards, Günther J. Niederwimmer
Re: CentOS Repository broken ?
Hello, Am Samstag, 30. März 2019, 21:36:12 CEST schrieb Peter via dovecot: > On 30/03/19 10:56 PM, Gerald Galster via dovecot wrote: > > Maybe there is something wrong with his local yum/repo configuration. > > I'm tending to agree now. > > > CentOS 7 usually doesn't mix 32bit and 64bit packages anymore. > > > > Installiert: 2:dovecot-2.3.5-1.x86_64 (Installiert = installed) -> > > dovecot-2.3.5-1 is already installed as a 64bit package (this is an epoch > > 2 package that supersedes 2.2.36-3, which is epoch 1). > > > > Benötigt: dovecot = 2:2.3.5.1-1 (Benötigt = this is the required version > > that should be installed) > > > > Verfügbar: 1:dovecot-2.2.36-3.el7.i686 (base) (Verfügbar = this version is > > available) -> but this is epoch 1 and i686, although > > dovecot-2.3.5-1.x86_64 has already been installed. > Yeah, as I said before, the language got in the way of me understanding > the yum output properly. > > > Therefore my guess is that the dovecot-2.3-latest repo is not > > available/enabled on his side. > It would have to be for yum to see dovecot-imaptest-2.3.5.1-1.x86_64 and > dovecot-lua-2.3.5.1-1.x86_64. It sounds more like he's put an > exclude=dovecot line in his dovecot-2.3-latest repo container. NO, I have no exclude in the dovecot.repo but it is not possible for yum to find the dovecot Package but the dovecot-lua ... is found? I mean there are wrong permissions on the repo? -- mit freundliche Grüßen / best regards, Günther J. Niederwimmer
Re: CentOS Repository broken ?
Hello, All is correct on my system also a yum clean is make. But the dovecot = 2.3.5.1-1 is MISSING on the repositories !! Yum like to update to the new packages dovecot-lua and dovecot-imaptest but can't found the latest passed dovecot Version 2.3.5.1-1 The packages dovecot-lua and dovecot-imaptes 2.3.5.1-1 are found but not the dovecot version?? Am Freitag, 29. März 2019, 14:49:29 CET schrieb Gerald Galster via dovecot: > Hello, > > can you please check if the dovecot repository is enabled? > Is it mentioned at the top of the output when you do "yum update": > > (1/10): base/7/x86_64/group_gz > (2/10): updates/7/x86_64/primary_db > ... > > Verfügbar / available: > > Verfügbar: 1:dovecot-2.2.36-3.el7.i686 (base) > > There should be something available from the dovecot-2.3-latest repo. > > Or try: yum update --enablerepo=dovecot-2.3-latest > > Best regards > Gerald > > > Am 29.03.2019 um 13:31 schrieb Günther J. Niederwimmer via dovecot > > : > > > > Hello, > > > > I have a CentOS 7 server with dovecot Repository enabled. > > > > But it is not possible to Update with Yum Update > > I have this Error? > > The dovecot package is missing? > > > > --> Transaktionsprüfung wird ausgeführt > > ---> Paket dovecot-imaptest.x86_64 2:2.3.5-1 markiert, um aktualisiert zu > > werden > > ---> Paket dovecot-imaptest.x86_64 2:2.3.5.1-1 markiert, um eine > > Aktualisierung zu werden > > --> Abhängigkeit dovecot = 2:2.3.5.1-1 wird für Paket 2:dovecot- > > imaptest-2.3.5.1-1.x86_64 verarbeitet > > ---> Paket dovecot-lua.x86_64 2:2.3.5-1 markiert, um aktualisiert zu > > werden > > ---> Paket dovecot-lua.x86_64 2:2.3.5.1-1 markiert, um eine Aktualisierung > > zu werden > > --> Abhängigkeit dovecot = 2:2.3.5.1-1 wird für Paket 2:dovecot- > > lua-2.3.5.1-1.x86_64 verarbeitet > > --> Abhängigkeitsauflösung beendet > > Fehler: Paket: 2:dovecot-imaptest-2.3.5.1-1.x86_64 (dovecot-2.3-latest) > > > >Benötigt: dovecot = 2:2.3.5.1-1 > >Installiert: 2:dovecot-2.3.5-1.x86_64 (installed) > > > >dovecot = 2:2.3.5-1 > > > >Verfügbar: 1:dovecot-2.2.36-3.el7.i686 (base) > > > >dovecot = 1:2.2.36-3.el7 > > > > Fehler: Paket: 2:dovecot-lua-2.3.5.1-1.x86_64 (dovecot-2.3-latest) > > > >Benötigt: dovecot = 2:2.3.5.1-1 > >Installiert: 2:dovecot-2.3.5-1.x86_64 (installed) > > > >dovecot = 2:2.3.5-1 > > > >Verfügbar: 1:dovecot-2.2.36-3.el7.i686 (base) > > > >dovecot = 1:2.2.36-3.el7 > > > > Thanks for repair. -- mit freundliche Grüßen / best regards, Günther J. Niederwimmer
CentOS Repository broken ?
Hello, I have a CentOS 7 server with dovecot Repository enabled. But it is not possible to Update with Yum Update I have this Error? The dovecot package is missing? --> Transaktionsprüfung wird ausgeführt ---> Paket dovecot-imaptest.x86_64 2:2.3.5-1 markiert, um aktualisiert zu werden ---> Paket dovecot-imaptest.x86_64 2:2.3.5.1-1 markiert, um eine Aktualisierung zu werden --> Abhängigkeit dovecot = 2:2.3.5.1-1 wird für Paket 2:dovecot- imaptest-2.3.5.1-1.x86_64 verarbeitet ---> Paket dovecot-lua.x86_64 2:2.3.5-1 markiert, um aktualisiert zu werden ---> Paket dovecot-lua.x86_64 2:2.3.5.1-1 markiert, um eine Aktualisierung zu werden --> Abhängigkeit dovecot = 2:2.3.5.1-1 wird für Paket 2:dovecot- lua-2.3.5.1-1.x86_64 verarbeitet --> Abhängigkeitsauflösung beendet Fehler: Paket: 2:dovecot-imaptest-2.3.5.1-1.x86_64 (dovecot-2.3-latest) Benötigt: dovecot = 2:2.3.5.1-1 Installiert: 2:dovecot-2.3.5-1.x86_64 (installed) dovecot = 2:2.3.5-1 Verfügbar: 1:dovecot-2.2.36-3.el7.i686 (base) dovecot = 1:2.2.36-3.el7 Fehler: Paket: 2:dovecot-lua-2.3.5.1-1.x86_64 (dovecot-2.3-latest) Benötigt: dovecot = 2:2.3.5.1-1 Installiert: 2:dovecot-2.3.5-1.x86_64 (installed) dovecot = 2:2.3.5-1 Verfügbar: 1:dovecot-2.2.36-3.el7.i686 (base) dovecot = 1:2.2.36-3.el7 Thanks for repair. -- mit freundliche Grüßen / best regards, Günther J. Niederwimmer
