Re: [Dovecot] Problems with the IMAP proxy after upgrading from dovecot 1.1.16 to 1.211

2010-06-07 Thread Holger Richter
May  7 14:47:42 ttt dovecot: auth(default):   
worker-server(uid,yyy.yyy.yyy.yyy): Aborted: Lookup timed out

May  7 14:47:42 ttt dovecot: auth-worker(default): mysql: Connected to
lll.lll.lll.lll (imapauth)


Lookup timed out really shouldn't be happening.. That sounds like
Dovecot's MySQL connections hangs after a while? You have some stateful
firewall between Dovecot and MySQL that drops idling connections and
afterwards starts dropping the connection's packets?


Indeed, there is a firewall with stateful inspection between Dovecot  
and MySQL. The only workaround is a downgrade to Dovecot 1.1.20. I  
think my problem has to do with the changes in  
src/auth/auth-worker-server.c in changeset 8859.




Re: [Dovecot] Ignoring the quota by the LDA?

2010-06-07 Thread Holger Richter

Is it possible to configure dovecot in a manner that only the imap
process respects the quota, and the local delivery ignores completely
the quota? I think it should happen if I don't activate the quota
plugin in the lda section but only in the imap section.


Better to override quota setting in protocol lda {} by
adding :noenforcing to it.


Does the :noenforcing parameter work with the maildir quota? It's  
documented for the fs quota only. Can I add the parameter direct to  
the protocol lda {} section? Does the following construct work?


protocol lda {
  ...
  mail_plugins = quota:noenforcing
  ...
  }




Re: [Dovecot] Problems with the IMAP proxy after upgrading from dovecot 1.1.16 to 1.211

2010-06-07 Thread Holger Richter

 May  7 14:47:42 ttt dovecot: auth(default):
 worker-server(uid,yyy.yyy.yyy.yyy): Aborted: Lookup timed out
 May  7 14:47:42 ttt dovecot: auth-worker(default): mysql: Connected to
 lll.lll.lll.lll (imapauth)

 Lookup timed out really shouldn't be happening.. That sounds like
 Dovecot's MySQL connections hangs after a while? You have some stateful
 firewall between Dovecot and MySQL that drops idling connections and
 afterwards starts dropping the connection's packets?

Indeed, there is a firewall with stateful inspection between Dovecot
and MySQL.


Right, so the Lookup timed out works as intended. But I guess it
should automatically retry when that happens. There would still be that
1 minute delay before that happens though.


 The only workaround is a downgrade to Dovecot 1.1.20.


Wonder what v1.1 does differently. I can't think of anything, really.
The main fundamental problem is still that mysql connection hangs and
the hang can't be detected/avoided. I think the right fix here would be
to change your firewall settings..


I think my problem has to do with the changes in
src/auth/auth-worker-server.c in changeset 8859.


8559:b0bc4519332f?


Yep.



[Dovecot] Ignoring the quota by the LDA?

2010-04-30 Thread Holger Richter
Is it possible to configure dovecot in a manner that only the imap  
process respects the quota, and the local delivery ignores completely  
the quota? I think it should happen if I don't activate the quota  
plugin in the lda section but only in the imap section.


protocol lda {
   ...
   # mail_plugins =
   ...
   }

protocol imap {
   ...
   mail_plugins = quota imap_quota
   ...
   }

Will it work or will it result in a big mess? I've the aim that a mail  
will never be rejected because the recipient is over his/her quota.


Regards, Holger



Re: [Dovecot] INBOX of a shared namespace appears to be always subscribed

2010-03-17 Thread Holger Richter
There was an other problem. I forgot to remove the .INBOX  
subdirectories. They were a rudiment of earlier tests. Well, I've  
removed them, and the original problem is resolved. But now I run into  
another trouble. The users cannot subscribe to the inboxes other  
users. The inbox paths in the shared namespace point to the namespace  
prefixes of the users' shared namespace. And they are marked with the  
\Noselect flag. Thus the inboxes are unaccessible via the shared  
namespace.


BTW, I've set subscriptions=no in the config file, dovecot -n lists  
the subscription parameter only if it was set to yes.


Holger



Re: [Dovecot] INBOX of a shared namespace appears to be always subscribed

2010-03-16 Thread Holger Richter
 On Fri, 2010-03-12 at 12:17 +0100, Holger Richter wrote:
 I've repeated the tests with LSUB  *. I think there's a problem with 
 setting the namespace prefix.
 
 Before I'll test further.. What do your namespace settings look like in
 dovecot -n output?
 


Here's the relevant extract of the output of dovecot -n:

# 1.2.10: /etc/dovecot.neu/dovecot.conf
# OS: Linux 2.6.27.39 x86_64  
mail_privileged_group: mail
mail_cache_min_mail_count: 10
mail_plugins: acl imap_acl quota imap_quota trash fts fts_squat listescape
imap_client_workarounds: delay-newmail outlook-idle
namespace:
  type: private
  separator: /
  location: 
maildir:/srv/mail.neu/dirs/%u:INBOX=/srv/mail.neu/dirs/%u/.INBOX:INDEX=/srv/mail.neu/meta/%u/index:CONTROL=/srv/mail.neu/meta/%u/control
  inbox: yes
  list: yes
  subscriptions: yes
namespace:
  type: shared
  separator: /
  prefix: shared/%%u/
  location: 
maildir:/srv/mail.neu/dirs/%%u:INDEX=/srv/mail.neu/meta/%u/shared/%%u/index:CONTROL=/srv/mail.neu/meta/%u/shared/%%u/control
  list: children
namespace:
  type: public
  separator: /
  prefix: Mailarchiv/
  location: 
maildir:/srv/mail.neu/dirs/archive:INDEX=/srv/mail.neu/meta/%u/archive/index:CONTROL=/srv/mail.neu/meta/archive/control
  hidden: yes
  list: children
namespace:
  type: public
  separator: /
  prefix: public/
  location: 
maildir:/srv/mail.neu/dirs/public:INDEX=/srv/mail.neu/meta/%u/public/index:CONTROL=/srv/mail.neu/meta/public/control
  list: yes
plugin:
  quota: maildir
  quota_rule: *:storage=1G
  quota_rule2: Trash:storage=100M
  quota_warning: storage=100%% /usr/local/bin/mailquota 100
  quota_warning2: storage=98%% /usr/local/bin/mailquota 98
  trash: /etc/dovecot.neu/dovecot-trash.conf
  fts: squat
  acl: vfile
  acl_shared_dict: proxy::acl
dict:
  acl: mysql:/etc/dovecot.neu/dovecot-dict-sql.conf

I should mention another amazing fact. The   LIST  *   command shows all 
mailboxes in all namespaces for which the user has the l(ist) permission but 
the INBOXES of other users are never listed. But the myrights command shows 
that the ACLs are correct.

Holger

Re: [Dovecot] INBOX of a shared namespace appears to be always subscribed

2010-03-12 Thread Holger Richter
I've repeated the tests with LSUB  *. I think there's a problem with 
setting the namespace prefix.


telnet imap.xx.yy 143
1 LOGIN user password
2 LSUB  *= shows INBOX
Sent
Trash
folderAA
shared/UserB/folderXX
3 LSUB  *= shows shared/UserB/INBOX
shared/UserB/folderXX
Sent
Trash
folderAA
4 LSUB  *= shows shared/UserB/INBOX
shared/UserB/folderXX
Sent
Trash
folderAA

This behavior is reproducable. Please note that the mailboxes of the 
shared namespace are listed first and the own inbox of the user disappears.


Holger


[Dovecot] INBOX of a shared namespace appears to be always subscribed

2010-03-04 Thread Holger Richter
In dovecot 1.2.10 I run into the following problem: Our users are  
entitled to share their personal mailboxes. This works. But if user A  
shares any of its mailboxes with user B, then dovecot always reports  
the INBOX of user A as subscribed by user B. No matter whether user B  
really subscribed the INBOX of A, or whether user A permitted user B  
the access to its INBOX. The problem is caused by the repeated call of  
LSUB. Starting with the second call LSUB always shows INBOX as  
subscribed.


To reproduce:
- telnet imap.xx.yy 143
  1 LOGIN user password
  2 LSUB  shared/*= shows shared/UserB/folderXX
  3 LSUB  shared/*= shows shared/UserB/INBOX
 shared/UserB/folderXX
  4 LSUB  shared/*= shows shared/UserB/INBOX
 shared/UserB/folderXX

Regards, Holger