Re: [Dovecot] Quota exceeded messages

2007-07-10 Thread Frank Church

On 10/07/07, Timo Sirainen [EMAIL PROTECTED] wrote:

On Mon, 2007-07-09 at 17:36 +0100, Frank Church wrote:
   quota = maildir:storage=10240:messages=1000
..
 Looking at the above settings I assume that 10240 Kb or 1000 messages
 constitute the message limit.

Yes.

 Is there an override on a per mailbox setting in the mailbox folder?

By mailbox do you mean users or folders? It's a per-user setting, and
it's possible to override the global quota by having userdb return a
quota field. See the SQL examples in http://wiki.dovecot.org/Quota

 Do Postfix and PostfixAdmin also have their custom settings?

 The problem doesn't appear to apply at the delivery stage, so it
 appears to be something respected by dovecot alone.

If you want to enforce quota, use Dovecot's deliver or some other MDA
that supports Maildir++ quota. Postfix's internal MDA doesn't.





I think I got to the bottom of the problem, which probably is the
result of too much dependency on howtos and not enough RTFMing. I have
an empty blog named 'howtos considered harmful' , and this will
provide a good article.

It appears that I changed my dovecot/sql.conf from one with a separate
user_query and password_query to one with just the password_query in
conjunction with the prefetch scheme, which did not include the quota
setting. I will add  concat('dirsize:storage=', quota) AS
userdb_quota  to the password_query to see if it will fix the
problem.

I also have to remember to add a userdb entry to dovecot.conf and
user_query to dovecot/sql.conf just in case I opt to use dovecot's
deliver later.

The wiki states that in this case the userdb entry must come after the
prefetch entry in dovecot.conf. If this is the case I think the text
indicating the 'after' must be emphasized in the wiki. It is one of
the things that come back to bite you later.


Before
=
driver = mysql
user_query = SELECT concat('/var/vmail/', maildir) as home,
concat('maildir:/var/vmail/', maildir) as mail, 601 AS uid, 12 AS gid,
concat('dirsize:storage=', quota) AS quota FROM mailbox WHERE username
= '%u' AND active = '1'

password_query = SELECT username as user, password,
concat('/var/vmail/', maildir) as userdb_home,
concat('maildir:/var/vmail/', maildir) as userdb_mail, 601 as
userdb_uid, 12 as userdb_gid FROM mailbox WHERE username = '%u' AND
active = '1'

After
=
default_pass_scheme = MD5-CRYPT

driver = mysql

password_query = SELECT username as user, password,
concat('/var/vmail/', maildir) as userdb_home,
concat('maildir:/var/vmail/', maildir) as userdb_mail, 601 as
userdb_uid, 12 as userdb_gid FROM mailbox WHERE username = '%u' AND
active = '1'


[Dovecot] Repeated references to non existent users table

2007-07-10 Thread Frank Church

Dovecot keeps returning messages in the general log about a users
table, where my users table is called mailbox, based on my
postfixadmin configuration.

dovecot: Jul 10 11:37:27 Info: auth-worker(default):
sql([EMAIL PROTECTED]): SELECT home, uid, gid FROM users WHERE userid =
'[EMAIL PROTECTED]'
dovecot: Jul 10 11:37:27 Info: auth(default):
prefetch([EMAIL PROTECTED]): passdb didn't return userdb entries

I get errors stating that table postfix.users does not exist which is
right because my table is named mailbox

my dovecot-sql.conf files don't contain any references to a table named users.

dovecot.conf
=
protocol lda {
 postmaster_address = [EMAIL PROTECTED]
 mail_plugins = quota
 log_path = /var/log/dovecot-deliver.log
 info_log_path = /var/log/dovecot-deliver.log
}

main.cf
==
# -- SASL PART START --
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth
smtpd_sasl_auth_enable  = yes
smtpd_sasl_local_domain=
smtpd_sasl_exceptions_networks  =
smtpd_sasl_security_options = noanonymous
broken_sasl_auth_clients= yes
# -- SASL PART END --

master.cf
===
dovecot   unix  -   n   n   -   -   pipe
 flags=DRhu user=vmail:mail argv=/usr/local/libexec/dovecot/deliver
-d ${recipient}


Re: [Dovecot] pop for one ip spop for another

2007-07-10 Thread arjan
Dear Timo,

Thanx for your reply. But I can't immediately act on your answer.

  Is it possible to enable pop only for a specific ip and enable spop for
  every other ip?
  I've a vserver in which an application can check mail via pop, but not
  spop. And I don't like to enable pop for the outside world. 
 
 a) Firewall. Probably a better idea.
Yes, I will request to disable the ports 110 and 143 in the firewall,
but since we don't manage the firewall ourselves, I would also be able
to configure this in Dovecot.

 b) Fail authentication if non-secure authentication comes from outside
 world. 
Clear, that's what I would like. But how? How do I differentiate? How
can I say if this, then that? 

I'm using passwd:
auth_userdb = passwd
auth_passdb = pam

Do I do something within
protocol pop3 {

}
But how can I make an if/then-like statement so that I can use:
 If you're using SQL as passdb this would be easy. With anything
 else probably not. %r and %c variables anyway allow this
 (http://wiki.dovecot.org/Variables)

It's not possible to do this I've discovered:
protocols = pop3 pop3s
disable_plaintext_auth = yes
(...)
userdb static {
args = uid=1005 gid=1005 allow_all_users=yes
disable_plaintext_auth=no
  }

Here I tried to make siable_plaintext_auth different for a specific
user.

Kind regards,
Arjan.



Re: [Dovecot] 1.0.1: corrupt index on fresh mailbox, ideas?

2007-07-10 Thread Troy Engel

Timo Sirainen wrote:


So the real reasons for these could include temporarily using different
index file paths, restoring indexes/uidlists from backups, temporarily
using index files for accessing other mailbox.


OK I understand your 3 points about how it actually could happen, and 
the ideas above as to possible causes; unfortunately we are in none of 
those situations. :( It was a mailbox simply created, accessed via 
Thunderbird and Squirrelmail all of... maybe 3 times. Nothing at all 
changed between the time it was working and the time it wasn't (no other 
mailboxes were affected).


I'll keep an eye out - I created another new mailbox yesterday which 
will get the exact same treatment for an employee starting next Monday. 
If it doesn't happen again I'll just resign to calling it a random 
happenstance.


-te

--
Troy Engel | Systems Engineer
Fluid, Inc | http://www.fluid.com


Re: [Dovecot] 1.0.1: corrupt index on fresh mailbox, ideas?

2007-07-10 Thread Timo Sirainen
On Mon, 2007-07-09 at 11:45 -0700, Troy Engel wrote:
 dovecot: Jul 09 09:38:54 Error: IMAP(xxx): Maildir 
 /home/x/xxx/Maildir sync: UIDVALIDITY changed (1183406107 - 1183999134)

Fixed: http://hg.dovecot.org/dovecot-1.0/rev/90ea01bfaf82



signature.asc
Description: This is a digitally signed message part


Re: [Dovecot] 1.0.1: corrupt index on fresh mailbox, ideas?

2007-07-10 Thread Stewart Dean

when will there be a respin for a V1.0.2?

Timo Sirainen wrote:

On Mon, 2007-07-09 at 11:45 -0700, Troy Engel wrote:
  
dovecot: Jul 09 09:38:54 Error: IMAP(xxx): Maildir 
/home/x/xxx/Maildir sync: UIDVALIDITY changed (1183406107 - 1183999134)



Fixed: http://hg.dovecot.org/dovecot-1.0/rev/90ea01bfaf82

  


--

Stewart Dean, Unix System Admin, Henderson Computer Resources 
Center of Bard College, Annandale-on-Hudson, New York  12504  
[EMAIL PROTECTED]  voice: 845-758-7475, fax: 845-758-7035




Re: [Dovecot] 1.0.1: corrupt index on fresh mailbox, ideas?

2007-07-10 Thread Timo Sirainen
On Tue, 2007-07-10 at 13:28 -0400, Stewart Dean wrote:
 when will there be a respin for a V1.0.2?

This week.



signature.asc
Description: This is a digitally signed message part


Re: [Dovecot] mbox vs maildir

2007-07-10 Thread FiL @ Kpoxa




The last time I tried to convert from mbox to maildir, things got 
pretty botched up, no data loss, but it wasn't pretty. :-)
just because you got it wrong doesn't make it's hard. you probably 
didn't take enough time to get it right.


Well, if you know the RIGHT way - just share it with the rest of us.
I was asking Timo before and as far as I understood - there is no way of 
converting mbox to Maildir without losing message UIDs.
And given that we already have huge mailboxes, that means that every 
user, connecting to the server after the conversion will need to
redownload all the messages and delete all the messages in the local 
cache. Just imagine that user with ~5Gb of mail across 5-10 folders
connect from home not-so-fast DSL line to check email and has to wait 
until the client rechecks all the mail No, this is not right.
Exactly as Don Russell wrote - no data loss, but it isn't pretty. And 
this is the only reason I don't migrate to Maildir. I really want to do it,

but this is not something I can do to my users.

FiL




Re: [Dovecot] mbox vs maildir

2007-07-10 Thread Timo Sirainen
On Tue, 2007-07-10 at 13:57 -0400, FiL @ Kpoxa wrote:
 
  The last time I tried to convert from mbox to maildir, things got 
  pretty botched up, no data loss, but it wasn't pretty. :-)
  just because you got it wrong doesn't make it's hard. you probably 
  didn't take enough time to get it right.
 
 Well, if you know the RIGHT way - just share it with the rest of us.
 I was asking Timo before and as far as I understood - there is no way of 
 converting mbox to Maildir without losing message UIDs.

With existing tools. It would be pretty easy to write such a tool that
creates dovecot-uidlist file with correct UIDs.



signature.asc
Description: This is a digitally signed message part


[Dovecot] Migrating subscription lists

2007-07-10 Thread Stewart Dean
I thought this would be relatively straightforwardI would create 
.subscriptions by doing an ls -1 of ~/mail. 
I'm running into some problems.


1) the ~/mail directories haves directories in them for 5% of the 
accounts!  AFAIK, our mail sevice has always been UWIMAP with mbox 
format INBOXes, and it was my understanding that the mbox format is flat 
and NOT hierarchical and thus I'd have thought that ~/mail would be all 
folders and wouldn't have a directory with folders in it.  Plus our 
users are not, as a rule, power/geek user that would understand even 
making subdirs in ~mail, so I don't know how this would have come to pass.


Should this be?  Or am I misunderstanding things?

2) Some people are consciously or  unconsciously using  the UWIMAP  
.mailboxlist subscription file as it is meant to be used, namely to  
*restrict* the  folders shown.  If/when I generated the Dovecot 
.subsbcriptions file by just doing an ls -1 of their mail directory,  
they will be surprised to see stuff not previously displayedthat 
they may very well not know they'd had.


Murphy must be a terribly overworked deity...you'd think he'd take a 
rest now and then from maximizing entropy


--

Stewart Dean, Unix System Admin, Henderson Computer Resources 
Center of Bard College, Annandale-on-Hudson, New York  12504  
[EMAIL PROTECTED]  voice: 845-758-7475, fax: 845-758-7035




Re: [Dovecot] Migrating subscription lists

2007-07-10 Thread albinootje
Stewart Dean wrote:

 2) Some people are consciously or  unconsciously using  the UWIMAP 
 .mailboxlist subscription file as it is meant to be used, namely to 
 *restrict* the  folders shown.  If/when I generated the Dovecot
 .subsbcriptions file by just doing an ls -1 of their mail directory, 
 they will be surprised to see stuff not previously displayedthat
 they may very well not know they'd had.

http://wiki.dovecot.org/Migration/UW claims that your can use a script
to handle this

 Murphy must be a terribly overworked deity...you'd think he'd take a
 rest now and then from maximizing entropy

let Murphy have some days off now ;]




[Dovecot] Connecting to dovecot/imap without a password

2007-07-10 Thread Don Russell
I have written a script that connects (localhost) to the dovecot/imap 
server and performs various maintenance on my mail, by folder. 
deleting old stuff, keeping the n most recent, that sort of crap, er 
good stuff. :-)


My script is written in php (I use the various imap_* functions), and it 
connects to the imap server running on the same machine... is there a 
way to connect to the server without having to specify my user name and 
password?


I was thinking there may be some form of implied logon if a request 
from user don requests to log on to user don, then there's no need 
for a password check, when the connection is via localhost.


That way I don't have to deal with userid/password related issues. :-)

Thanks


Re: [Dovecot] 1.0.1: corrupt index on fresh mailbox, ideas?

2007-07-10 Thread Troy Engel

Timo Sirainen wrote:

On Tue, 2007-07-10 at 13:28 -0400, Stewart Dean wrote:

when will there be a respin for a V1.0.2?


This week.


Thank you! I'm not sure how I would test this for you, prior to 1.0.2 - 
do you need it tested somehow?


regards,
-te

--
Troy Engel | Systems Engineer
Fluid, Inc | http://www.fluid.com


Re: [Dovecot] 1.0.1: corrupt index on fresh mailbox, ideas?

2007-07-10 Thread Jim Horner
On Tuesday 10 July 2007 17:32:57 Troy Engel wrote:
 Timo Sirainen wrote:
  On Tue, 2007-07-10 at 13:28 -0400, Stewart Dean wrote:
  when will there be a respin for a V1.0.2?
 
  This week.

 Thank you! I'm not sure how I would test this for you, prior to 1.0.2 -
 do you need it tested somehow?


I can patch (probably will) and test my rig but I don't know how to reproduce 
the problem. As I pointed out in a different thread about UIDVALIDITY 
error/warnings, we initially saw the UIDVALIDITY error/warning immediately 
upon upgrade to 1.0.1. I have not seen them since. I haven't seen the utime 
error/warning since I used that patch but I could never reproduce that 
problem either.


Re: [Dovecot] Connecting to dovecot/imap without a password

2007-07-10 Thread Timo Sirainen

On 11.7.2007, at 0.07, Don Russell wrote:

I have written a script that connects (localhost) to the dovecot/ 
imap server and performs various maintenance on my mail, by  
folder. deleting old stuff, keeping the n most recent, that  
sort of crap, er good stuff. :-)


My script is written in php (I use the various imap_* functions),  
and it connects to the imap server running on the same machine...  
is there a way to connect to the server without having to specify  
my user name and password?


I was thinking there may be some form of implied logon if a  
request from user don requests to log on to user don, then  
there's no need for a password check, when the connection is via  
localhost.


How about using master users? http://wiki.dovecot.org/Authentication/ 
MasterUsers


The master user password can be empty of course also.. You can limit  
the allowed IPs with http://wiki.dovecot.org/PasswordDatabase/ 
ExtraFields/AllowNets




PGP.sig
Description: This is a digitally signed message part