Re: [Dovecot] How to upgrade a running Dovecot?
Hi, Jerry/et al - On 4 Oct 2007, at 20:47, Jerry Yeager wrote: Have you considered sending out a message to each user to the effect that on some day, darned-early a.m. the system will be offline for 30 minutes for maintenance (no incoming email will be lost, etc., etc.). We have around 20,000 users at our site and need to keep downtime of the e-mail service to an absolute minimum. The quietest time is at around 4:00am ... when I am sound asleep in bed, and plan to stay that way! :-) Seriously... I'm not new to timing and managing software upgrades: I've been doing it for around 19 years here now. But what I _am_ new to is Dovecot. Not knowing the software well yet, my questions are in an attempt to find the best way to flip it to a new configuration or version with minimal/no disruption to connected users. Scenario 1: Change to dovecot.conf === If I make a change to dovecot.conf am I right in thinking I can simply send a HUP signal to the main dovecot process to get it to re- read the configuration file and act on its revised content? Yes, this is correct. Good... Scenario 2: Altered SSL Certificates = I need to replace our current certificates and have prepared new files containing the replacement certificate and private key. Am I right in thinking that I can simply modify dovecot.conf to point at the new files and send a HUP signal to dovecot? Specifically, will new connections use the revised certificates, and existing connections continue to work OK without interruption? Ehh not really, the auth child processes can be killed and new ones started. See your next scenario question. ...So here you're saying that although the dovecot master process re-reads the configuration file, it doing so has no effect on the existing authenticator child processes? And is it these processes that are dealing with the SSL connection? ... I'd have thought it was either the imap-login or imap processes? Scenario 3: Software Upgrade = I build a particular version of Dovecot into the tree /usr/local/ dovecot-A.B.C and then have a symlink called dovecot pointing at the this directory. To upgrade I can then build the new version into /usr/local/dovecot-X.Y.Z and test. To actually switch over the live service to the new X.Y.Z version do I need to: a) Totally shut down the old A.B.C version of Dovecot, thereby breaking all open connections for users? or b) Assuming I am using shutdown_clients = no can I just kill the master dovecot process and then start up the new version? See the preface, do the update when you typically have few folks using the system -- which gives you fewer complaints from users should things break on their end. Yes... However the dovecot.conf configuration file includes a comment which says this: # Should all IMAP and POP3 processes be killed when Dovecot master process # shuts down. Setting this to no means that Dovecot can be upgraded without # forcing existing client connections to close (although that could also be # a problem if the upgrade is eg. because of a security fix). This however # means that after master process has died, the client processes can't write # to log files anymore. #shutdown_clients = yes This implies it *is* possible to upgrade the software without breaking existing live connections. I'm trying to get confirmation of this along with any side-effects -- for example the comment seems to warn that pre-existing connections will no longer be able to write to the logfiles after the changeover? Cheers, Mike B-) -- The Computing Service, University of York, Heslington, York Yo10 5DD, UK Tel:+44-1904-433811 FAX:+44-1904-433740 * Unsolicited commercial e-mail is NOT welcome at this e-mail address. *
[Dovecot] Compiling drac.c on a 64 bit system
I have just installed dovecot and want to set up the drac interface. However, when I compile drac.c I get the following link errors; anybody know what the right compile options are for a 64 bit system? I have a Gentoo Linux system using the amd64 architecture. gcc -Wall -W -shared -fPIC -DHAVE_CONFIG_H -I$dovecot -I$dovecot/src/lib drac.c -o drac.so -ldrac /usr/lib/gcc/x86_64-pc-linux-gnu/4.1.2/../../../../x86_64-pc-linux-gnu/bin/ld: /usr/lib/gcc/x86_64-pc-linux-gnu/4.1.2/../../../../lib64/libdrac.a(dracauth.o): relocation R_X86_64_32S against `a local symbol' can not be used when making a shared object; recompile with -fPIC /usr/lib/gcc/x86_64-pc-linux-gnu/4.1.2/../../../../lib64/libdrac.a: could not read symbols: Bad value collect2: ld returned 1 exit status TIA -Robin. -- -- Robin Atwood. Ship me somewheres east of Suez, where the best is like the worst, Where there ain't no Ten Commandments an' a man can raise a thirst from Mandalay by Rudyard Kipling --
Re: [Dovecot] Compiling drac.c on a 64 bit system
On 2007-10-05 17:48:51 +0700, Robin Atwood wrote: I have just installed dovecot and want to set up the drac interface. However, when I compile drac.c I get the following link errors; anybody know what the right compile options are for a 64 bit system? I have a Gentoo Linux system using the amd64 architecture. gcc -Wall -W -shared -fPIC -DHAVE_CONFIG_H -I$dovecot -I$dovecot/src/lib drac.c -o drac.so -ldrac /usr/lib/gcc/x86_64-pc-linux-gnu/4.1.2/../../../../x86_64-pc-linux-gnu/bin/ld: /usr/lib/gcc/x86_64-pc-linux-gnu/4.1.2/../../../../lib64/libdrac.a(dracauth.o): relocation R_X86_64_32S against `a local symbol' can not be used when making a shared object; recompile with -fPIC /usr/lib/gcc/x86_64-pc-linux-gnu/4.1.2/../../../../lib64/libdrac.a: could not read symbols: Bad value collect2: ld returned 1 exit status your libdrac is compiled without -fPIC -pic darix -- openSUSE - SUSE Linux is my linux openSUSE is good for you www.opensuse.org
Re: [Dovecot] Compiling drac.c on a 64 bit system
On Friday 05 Oct 2007, Marcus Rueckert wrote: On 2007-10-05 17:48:51 +0700, Robin Atwood wrote: your libdrac is compiled without -fPIC -pic Thanks, that did the trick! -Robin. -- -- Robin Atwood. Ship me somewheres east of Suez, where the best is like the worst, Where there ain't no Ten Commandments an' a man can raise a thirst from Mandalay by Rudyard Kipling --
Re: [Dovecot] How to upgrade a running Dovecot?
It *is* neater to kill off the older version processes though. Most of our clients (coughOutlook Express /cough and Prayer Webmail) will reconnect automatically anyway. Agreed. I haven't come across any clients that puke when you abruptly cut off their connection. All the common ones I tried seem to simply reconnect and continue Ed W
[Dovecot] Thunderbird and imap alerts
Is Thunderbird supposed to show alerts sent via post-login scripts as in the wiki example? dovecot-imapd 1.0.5-1 (Debian) Thunderbird (Icedove) 2.0.0.4 (Debian) # dovecot -n|grep 'mail_executable(imap)' mail_executable(imap): /usr/local/sbin/dovecot-alert.sh # cat /usr/local/sbin/dovecot-alert.sh #!/bin/sh echo * OK [ALERT] Hello World. exec /usr/lib/dovecot/imap Logging in with Thunderbird I get this alert: Mail server imap.example.org is not an IMAP4 server. -- Thank you, Marco De Benedetto
[Dovecot] Corrupted index cache file error (Dovecot 1.0.3)
Greetings - Now that users are beginning to pile up more on our new Dovecot-based IMAP service I'm seeing a small number of entries like this in the logfiles: Corrupted index cache file /mailstore/index/o/ozw100/.INBOX/ dovecot.index.cache : invalid record size We are using Dovecot 1.0.3 with Maildir folders served over NFS from NetApp filers, but the index files are stored on local disk. By a small number I mean 4 or 5 on each of our two IMAP servers since midnight. * Should I be worried? * Is there anything I need to do fix the files? (I'm guessing not as no problem reports have come in, and the logs show the people affected continuing to work throughout the day.) * Would upgrading to 1.0.5 help? (I couldn't see anything in the Release Notes for either 1.0.4 or 1.0.5 about this) Cheers, Mike B-) -- The Computing Service, University of York, Heslington, York Yo10 5DD, UK Tel:+44-1904-433811 FAX:+44-1904-433740 * Unsolicited commercial e-mail is NOT welcome at this e-mail address. *
Re: [Dovecot] Corrupted index cache file error (Dovecot 1.0.3)
Mike Brudenell wrote: Greetings - Now that users are beginning to pile up more on our new Dovecot-based IMAP service I'm seeing a small number of entries like this in the logfiles: Corrupted index cache file /mailstore/index/o/ozw100/.INBOX/dovecot.index.cache : invalid record size We are using Dovecot 1.0.3 with Maildir folders served over NFS from NetApp filers, but the index files are stored on local disk. By a small number I mean 4 or 5 on each of our two IMAP servers since midnight. * Should I be worried? Probably not. * Is there anything I need to do fix the files? (I'm guessing not as no problem reports have come in, and the logs show the people affected continuing to work throughout the day.) I think they probably fix themselves. You could check to see if the same file occurs more than once. If so, I'd try deleting the cache files while the user is disconnected (or at least not having that folder open). * Would upgrading to 1.0.5 help? (I couldn't see anything in the Release Notes for either 1.0.4 or 1.0.5 about this) Possibly, but we still get occassional index errors too (just one today, plus four assertion failures in mail_index_view_sync_end). We're on 1.0.5 with mboxes. Chris -- --+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+- Christopher Wakelin, [EMAIL PROTECTED] IT Services Centre, The University of Reading, Tel: +44 (0)118 378 8439 Whiteknights, Reading, RG6 2AF, UK Fax: +44 (0)118 975 3094
Re: [Dovecot] How to upgrade a running Dovecot?
On Oct 5, 2007, at 12:41 PM, [EMAIL PROTECTED] wrote: -- Message: 1 Date: Fri, 5 Oct 2007 10:25:49 +0100 From: Mike Brudenell [EMAIL PROTECTED] Subject: Re: [Dovecot] How to upgrade a running Dovecot? To: Dovecot Mailing List dovecot@dovecot.org Message-ID: [EMAIL PROTECTED] Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed Hi, Jerry/et al - Hello Mike, (stuff chomped out) Scenario 2: Altered SSL Certificates = I need to replace our current certificates and have prepared new files containing the replacement certificate and private key. Am I right in thinking that I can simply modify dovecot.conf to point at the new files and send a HUP signal to dovecot? Specifically, will new connections use the revised certificates, and existing connections continue to work OK without interruption? Ehh not really, the auth child processes can be killed and new ones started. See your next scenario question. ...So here you're saying that although the dovecot master process re-reads the configuration file, it doing so has no effect on the existing authenticator child processes? And is it these processes that are dealing with the SSL connection? ... I'd have thought it was either the imap-login or imap processes? Just to be clear about this for myself, (instead of relying on the 'ol saying 'that is how it used to work' -- because I am switching over to 1.1 from 1.0.n your question takes on new relevance for me as well) I tested this and yes it works as before, the new files seem to be used for the new connections (all of the dovecot auth processes are killed on the HUP signal -- dovecot itself just rereads the conf file and new auth listeners are started -- assuming that you use Dovecot for the auth mechanism to Postfix) and existing connections seem to handle things okay. I did find something new (or I have not noticed it before) If you kill (not just restart) the Dovecot process itself and restart it with existing connections (someone was connected to IMAPS when you killed Dovecot) Dovecot will not restart, complaining that port 993 is taken already. This happens regardless of the shutdown_clients = yes/no setting. This may be particular to the new version 1.1, I do not know. Jerry smime.p7s Description: S/MIME cryptographic signature
[Dovecot] problematic ACL with shared folders and maildir
Hello, Recently we have been asked to deploy some shared imap folders within our instance of dovecot. However, we ran into a problem with how ACLs are implemented, and consequences regarding maildir++ mailboxes. Long story short: * IMAP clients sees the hierarchy as a tree: sample/1, where 1 is a child of sample * on the filesystem, sample/1 is represented as .sample and .sample.1, both on the same level This presents a problem: dovecot-acl file meant for sample mailbox does not apply to mailbox 1. In fact, a user with permissions to create mailboxes under sample, will not be able to access those mailboxes, once created. Wonder if anybody has been in a similar predicament, and found a solution. Any hints would be greatly appreciated. PS) I'm also documenting this process, maybe others will find it useful: https://collaboration.vbi.vt.edu/display/~dom/dovecot+-+shared+imap+folders -- Dominik L. Borkowski - Senior Systems Administrator Virginia Bioinformatics Institute - www.vbi.vt.edu
[Dovecot] Outlook can't see namespace folders
Hi guys i understand that you can't subscribe to the Prefix names of
namespace folders right now with dovecot.
But for instance if i user outlook express and it can't see the prefix
name then it can't see the subfolders of that prefix folder either.
So even though it can detect and see the subfolders it won't display
them cause it can't see the parent
Is there any fix for this? it's also kind of annoying in thunderbird but
at least you can still see the subfolders.
TIA
James
Here's my config
# /etc/dovecot/dovecot.conf
protocols = imap imaps pop3 pop3s
log_timestamp = %Y-%m-%d %H:%M:%S
first_valid_uid = 100
login_user=vmail
mail_extra_groups = mail
mail_debug = yes
pop3_uidl_format = %08Xu%08Xv
mail_location = maildir:/home/vmail/domains/%n/Maildir
#default_mail_env = maildir:/home/vmail/domains/%n/Maildir
auth default {
mechanisms = plain
passdb ldap {
args = /etc/dovecot/dovecot-ldap.conf
}
userdb ldap {
args = /etc/dovecot/dovecot-ldap.conf
}
}
# maildir
namespace private {
separator = /
prefix =
location = maildir:/home/vmail/domains/%n/Maildir
inbox = yes
hidden = no
}
# mbox
namespace private {
separator = /
prefix = Mbox/
location = mbox:/home/vmail/domains/%n/Mbox
inbox = no
hidden = no
}
#public spam folder
namespace public {
separator = /
prefix = /Spam/
location = maildir:/home/vmail/domains/Spam/Maildir/
hidden = no
}
ssl_disable = no
ssl_cert_file = /etc/ssl/certs/dovecot.pem
ssl_key_file = /etc/ssl/private/dovecot.pem
ssl_verify_client_cert = no
ssl_cipher_list = ALL:!LOW:HIGH:MEDIUM:+SSLv2:RSA
Re: [Dovecot] Outlook [Express] can't see namespace folders
James wrote:
Hi guys i understand that you can't subscribe to the Prefix names of
namespace folders right now with dovecot.
But for instance if i user outlook express and it can't see the prefix
name then it can't see the subfolders of that prefix folder either.
So even though it can detect and see the subfolders it won't display
them cause it can't see the parent
Is there any fix for this? it's also kind of annoying in thunderbird
but at least you can still see the subfolders.
TIA
James
Here's my config
# /etc/dovecot/dovecot.conf
protocols = imap imaps pop3 pop3s
log_timestamp = %Y-%m-%d %H:%M:%S
first_valid_uid = 100
login_user=vmail
mail_extra_groups = mail
mail_debug = yes
pop3_uidl_format = %08Xu%08Xv
mail_location = maildir:/home/vmail/domains/%n/Maildir
#default_mail_env = maildir:/home/vmail/domains/%n/Maildir
auth default {
mechanisms = plain
passdb ldap {
args = /etc/dovecot/dovecot-ldap.conf
}
userdb ldap {
args = /etc/dovecot/dovecot-ldap.conf
}
}
# maildir
namespace private {
separator = /
prefix =
location = maildir:/home/vmail/domains/%n/Maildir
inbox = yes
hidden = no
}
# mbox
namespace private {
separator = /
prefix = Mbox/
location = mbox:/home/vmail/domains/%n/Mbox
inbox = no
hidden = no
}
#public spam folder
namespace public {
separator = /
prefix = /Spam/
location = maildir:/home/vmail/domains/Spam/Maildir/
hidden = no
}
ssl_disable = no
ssl_cert_file = /etc/ssl/certs/dovecot.pem
ssl_key_file = /etc/ssl/private/dovecot.pem
ssl_verify_client_cert = no
ssl_cipher_list = ALL:!LOW:HIGH:MEDIUM:+SSLv2:RSA
To clarify for everyone this is regarding Outlook Express
The namespaces work fine for regular Outlook
[Dovecot] User database ldap lookups and sasl
Hello I'm currently trying to use Active Directory with Unix extensions to store UID, GID and homedir and retrieve them with ldap I don't want to allow anonymous bindings and I would rather not use TLS and manage a PKI. So I'm trying to use SASL to do a Kerberos authentication for Dovecot against AD LDAP. I'm currently getting GSSAPI errors about the lack of credentials cache. Looking at similar cases where services act as clients, like using nss_ldap for unix host accounts, I understand the credentials cache should be initiated by an external program (cron and startup script), at least with the TGT and maybe the TGS for ldap. Since usually kerberosv5 cache is based on the user id ( /tmp/krb5cc_0 for root) there's an option in ldap.conf (krb5_ccname) to set the filename (/etc/.ldapcache in nss_ldap tutorials) for this cache. Is there any way to do this with dovecot-ldap.conf or should I try to use auth user default cache filename ? Thanks in advance
Re: [Dovecot] Subscribe to root of Maildir namespace?
On Thu, 2007-10-04 at 13:50 -0700, Adam Tilghman wrote: Is it possible to subscribe to the root of this new Maildir heirarchy as if it were just another folder? If not, would this be a useful feature to add? It was in my TODO for a while, but no-one has yet told me why they need/want this. signature.asc Description: This is a digitally signed message part
Re: [Dovecot] Folder renaming oddities.
On Tue, 2007-10-02 at 11:32 +0800, Tan Shao Yi wrote: Hi Timo, We are observing some weird behaviour when we try to rename an inferior folder, followed by the superior folder. These folders have an asterisk in the name. Thanks, fixed: http://hg.dovecot.org/dovecot-1.0/rev/880d21a2a629 P.S., Will it be possible to also request the mail-log plugin to log rename operations too? :) v1.1 can do this now. signature.asc Description: This is a digitally signed message part
Re: [Dovecot] dovecot cloning mails?
On Tue, 2007-10-02 at 00:41 +0200, Andreas Schneider wrote: Hi, I have a strange issue here. I have a large message of a svn commit and the message is cloning itself more and more. I've deleted it several time completely but it doesn't go away. Find the duplicated message files in maildir and check their hard link count. If hard link count is more than one, it's most likely your IMAP client that's doing the duplication by COPYing the message. You can verify this with e.g. rawlog. If hard link count is 1, then the message is probably being redelivered for some reason. Check the received headers to see if they're different. signature.asc Description: This is a digitally signed message part
Re: [Dovecot] imap sort assertion failure
On Mon, 2007-10-01 at 16:09 -0500, Andrew Garner wrote: The following error occurred after a SORT (TO) US-ASCII ALL command. This only seems to happen with to, all our other tests work as expected. Oct 1 20:32:49 dovecot: IMAP([EMAIL PROTECTED]): pool_data_stack_realloc(): stack frame changed Thanks, fixed: http://hg.dovecot.org/dovecot/rev/58d9f94b9919 http://hg.dovecot.org/dovecot/rev/1b7d91f7b151 signature.asc Description: This is a digitally signed message part
Re: [Dovecot] saslauth for digest or cram-md5?
On Mon, 2007-10-01 at 11:00 -0700, Knute Johnson wrote: Is it possible to use saslauth for digest-md5 or cram-md5 authentication? If so how would one go about configuring dovecot? What's saslauth? If you mean Cyrus saslauthd or something like that, then no. signature.asc Description: This is a digitally signed message part
Re: [Dovecot] Namespace Question
Timo Sirainen wrote: On Tue, 2007-10-02 at 18:12 -0700, Jeff Grossman wrote: So, what would have changed between version 1.0.5 and 1.1beta2 to somehow make the phone think all of the messages are older than 30 days? Is it using SORT command? Apparently there are some bugs still in it. http://dovecot.org/bugreport.html#sniffing I don't think so. Here is the first .in file from the rawlog A6 NAMESPACE A7 SELECT Inbox A8 SEARCH SINCE 6-Sep-2007 A9 SELECT Sent Items A10 LOGOUT Here are the results from the above .in file * OK [RAWLOG TIMESTAMP] 2007-10-05 17:22:53 * NAMESPACE (( .)) NIL NIL A6 OK Namespace completed. * FLAGS (\Answered \Flagged \Deleted \Seen \Draft $Forwarded) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft $Forwarded \*)] Flags permitted. * 14 EXISTS * 1 RECENT * OK [UIDVALIDITY 1191346544] UIDs valid * OK [UIDNEXT 275] Predicted next UID A7 OK [READ-WRITE] Select completed. * SEARCH A8 OK Search completed. * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft \*)] Flags permitted. * 164 EXISTS * 0 RECENT * OK [UIDVALIDITY 1191346634] UIDs valid * OK [UIDNEXT 165] Predicted next UID A9 OK [READ-WRITE] Select completed. * BYE Logging out A10 OK Logout completed. And, here is the second .in file from the rawlog A6 LIST % A7 LOGOUT Please let me know if there is anything else I can run for you. Jeff
Re: [Dovecot] Custom password encryption scheme, how to do it?
On Mon, 2007-10-01 at 13:10 -0400, Madison Kelly wrote: My question is, can I have Postfix/Dovecot use a custom password hashing system? http://dovecot.org/patches/password-scheme-lmpass.c is an example plugin. It's been written a long time ago, so I'm not sure if it still works with v1.0. I think it should. So the idea is that you'll define a struct password_scheme pluginname_scheme and implement the verify and generate functions. signature.asc Description: This is a digitally signed message part
Re: [Dovecot] Timeout leak
On Mon, 2007-10-01 at 14:24 +0200, Lars Stavholm wrote: In my development environment I sometimes get: dovecot: IMAP(stava): Timeout leak: 0x4425d0 Does anyone know what it means or how I can use this information? It means timeout_add() was called, but the returned struct wasn't passed to timeout_remove(). The number above is a pointer and with gdb's help you can figure out what function it points to: gdb /usr/local/libexec/dovecot/imap l *0x4425d0 signature.asc Description: This is a digitally signed message part
Re: [Dovecot] Namespace Question
On Fri, 2007-10-05 at 17:27 -0700, Jeff Grossman wrote: Timo Sirainen wrote: On Tue, 2007-10-02 at 18:12 -0700, Jeff Grossman wrote: So, what would have changed between version 1.0.5 and 1.1beta2 to somehow make the phone think all of the messages are older than 30 days? Is it using SORT command? Apparently there are some bugs still in it. http://dovecot.org/bugreport.html#sniffing I don't think so. Here is the first .in file from the rawlog A6 NAMESPACE A7 SELECT Inbox A8 SEARCH SINCE 6-Sep-2007 OK, this finds the messages based on their INTERNALDATE. With maildir that means the files' mtime. Are all the mtimes older than 6 Sep? If not, try deleting dovecot.index.cache file to see if it helps. signature.asc Description: This is a digitally signed message part
Re: [Dovecot] trouble deleting folders that only contain folders
On Fri, 2007-10-05 at 16:51 -0500, Ken A wrote: Hi, I'm using dovecot 1.0.5 with mbox storage. Users can't delete folders that are created to 'only hold other folders'. I can create these folders with no problem. They are directories in the file system. Normal folders (which are mbox files) are deleted with no problem. I've tried with both squirrelmail and Thunderbird, and what happens when a delete is requested, is that all files within the folder's dir tree are deleted and the client is unsubscribed, but the directory tree remains. I think this is a client bug. See what commands the client sends. Seems to work right with me: x create dir/ x OK Create completed. x list dir * LIST (\Noselect \HasChildren) / dir x OK List completed. x delete dir x OK Delete completed. x list dir x OK List completed. signature.asc Description: This is a digitally signed message part
Re: [Dovecot] Corrupted index cache file error (Dovecot 1.0.3)
On Fri, 2007-10-05 at 17:40 +0100, Mike Brudenell wrote: Corrupted index cache file /mailstore/index/o/ozw100/.INBOX/ dovecot.index.cache : invalid record size All cache file errors are completely transparent to clients. The cache file gets deleted and Dovecot creates the wanted data from scratch. We are using Dovecot 1.0.3 with Maildir folders served over NFS from NetApp filers, but the index files are stored on local disk. I haven't seen these in my stress tests for a long time. So unless you can figure out a way to reproduce this, I don't think I can do anything about these for now. Maybe v1.1 has already fixed them. :) signature.asc Description: This is a digitally signed message part
Re: [Dovecot] How to upgrade a running Dovecot?
On Thu, 2007-10-04 at 13:57 +0100, Mike Brudenell wrote: Scenario 1: Change to dovecot.conf === If I make a change to dovecot.conf am I right in thinking I can simply send a HUP signal to the main dovecot process to get it to re- read the configuration file and act on its revised content? One problem with SIGHUP is that it kills connections that are currently logging in (sending * BYE Server is shutting down. to client). Would be nice if one day the login and auth processes simply stop accepting new connections and kill themselves only after the last client has disconnected. Scenario 2: Altered SSL Certificates = I need to replace our current certificates and have prepared new files containing the replacement certificate and private key. Am I right in thinking that I can simply modify dovecot.conf to point at the new files and send a HUP signal to dovecot? Specifically, will new connections use the revised certificates, and existing connections continue to work OK without interruption? Yes, the SSL files are read by login processes at startup. And SIGHUP restarts login processes. signature.asc Description: This is a digitally signed message part
Re: [Dovecot] Corrupt Message?
On Fri, 2007-10-05 at 15:29 +0100, Daniel Watts wrote: ERROR: Bad or malformed request. Query: FETCH 549,551,555:557,563,565,567:569 (FLAGS UID RFC822.SIZE INTERNALDATE BODY.PEEK[HEADER.FIELDS (Date To Cc From Subject X-Priority Importance Priority Content-Type)]) Server responded: No mailbox selected. Squirrelmail's error handling/reporting seems to suck. Timo, perhaps Dovecot could give a slightly more useful 'permission denied' error in these instances? It logs: Error: open(/home/tss/Maildir/cur/1191626926.M302220P8987.hurina,W=55:2,) failed: Permission denied And client gets logged out: * BYE Internal error occurred. Refer to server log for more information. [2007-10-06 04:20:47] signature.asc Description: This is a digitally signed message part
Re: [Dovecot] graceful failure when some folders are not available...
On Wed, 2007-10-03 at 20:03 -0500, [EMAIL PROTECTED] wrote: Hi folks. Quick question in the hopes that someone knows the answer, before I dig in the code some more. In testing a new setup with some long-term archival mbox-format mailboxes stored on an NFS mount, we've found the following: if the mount is unavailable for any reason, the user cannot log into their email at all. Dovecot says: stat() failed with mbox foo and dies. This is coming from the mbox sync checks. (It's possible the same happens with a maildir folder--I'm just specifying mbox because that's what we've tested with so far). It shouldn't die. Maybe your client kills the connection? I tested this by making the stat() call always fail with EIO: x select inbox x NO Internal error occurred. Refer to server log for more information. [2007-10-06 04:24:48] x status foo (messages) x NO Internal error occurred. Refer to server log for more information. [2007-10-06 04:24:58] Or even if the mailbox is successfully opened and after that: x noop * NO Internal error occurred. Refer to server log for more information. [2007-10-06 04:27:31] x OK NOOP completed. signature.asc Description: This is a digitally signed message part
Re: [Dovecot] Strange errors
On Tue, 2007-10-02 at 15:38 +0200, Ralf Hildebrandt wrote: One of our users seems to have strange problems with his mailbox: Oct 2 00:36:42 postamt dovecot: IMAP(rb): Corrupted transaction log file /home/r/b/rb/Maildir/.listen.CCL/dovecot.index.log: Append with UID 1096, but next_uid = 1097 Oct 2 00:36:42 postamt dovecot: IMAP(rb): Corrupted transaction log file /home/r/b/rb/Maildir/.listen.CCL/dovecot.index.log: Append with UID 1096, but next_uid = 1097 Oct 2 00:36:42 postamt dovecot: IMAP(rb): Unexpected transaction log desync with index /home/r/b/rb/Maildir/.listen.CCL/dovecot.index Oct 2 00:36:42 postamt dovecot: IMAP(rb): Transaction log file /home/r/b/rb/Maildir/.listen.CCL/dovecot.index.log: marked corrupted Oct 2 02:40:54 postamt dovecot: IMAP(rb): Unlinked a duplicate: 1191278050.P11797Q0M631938.postamt.charite.de,S=3164:2, Oct 2 02:40:54 postamt dovecot: IMAP(rb): Maildir /home/r/b/rb/Maildir/.listen.CCL sync: UID inserted in the middle of mailbox (1097 1096, file = 1191278202.P12120Q0M512940.postamt.charite.de,S=5349:2,) Does he have direct access to the maildir? Do you use Dovecot's deliver or something else to deliver the new mails? Or does new mail get delivered to these mailboxes only via IMAP COPY/APPEND? signature.asc Description: This is a digitally signed message part
Re: [Dovecot] trouble deleting folders that only contain folders
Timo Sirainen wrote: On Fri, 2007-10-05 at 16:51 -0500, Ken A wrote: Hi, I'm using dovecot 1.0.5 with mbox storage. Users can't delete folders that are created to 'only hold other folders'. I can create these folders with no problem. They are directories in the file system. Normal folders (which are mbox files) are deleted with no problem. I've tried with both squirrelmail and Thunderbird, and what happens when a delete is requested, is that all files within the folder's dir tree are deleted and the client is unsubscribed, but the directory tree remains. I think this is a client bug. See what commands the client sends. Seems to work right with me: x create dir/ x OK Create completed. x list dir * LIST (\Noselect \HasChildren) / dir x OK List completed. x delete dir x OK Delete completed. x list dir x OK List completed. I get this, from telnet: x create dir/ x OK Create completed. x list dir * LIST (\Noselect \HasChildren) / dir x OK List completed. x delete dir x NO Mailbox isn't selectable: dir x list dir * LIST (\Noselect \HasChildren) / dir x OK List completed. I must have something misconfigured. mail_location: mbox:/var/spool/mail/folders/%u:INBOX=/var/spool/mail/%u:INDEX=/var/spool/dovecot_indexes/%u Thanks for any assistance, Ken -- Ken Anderson Pacific.Net
Re: [Dovecot] Namespace Question
Timo Sirainen wrote: On Fri, 2007-10-05 at 17:27 -0700, Jeff Grossman wrote: Timo Sirainen wrote: On Tue, 2007-10-02 at 18:12 -0700, Jeff Grossman wrote: So, what would have changed between version 1.0.5 and 1.1beta2 to somehow make the phone think all of the messages are older than 30 days? Is it using SORT command? Apparently there are some bugs still in it. http://dovecot.org/bugreport.html#sniffing I don't think so. Here is the first .in file from the rawlog A6 NAMESPACE A7 SELECT Inbox A8 SEARCH SINCE 6-Sep-2007 OK, this finds the messages based on their INTERNALDATE. With maildir that means the files' mtime. Are all the mtimes older than 6 Sep? If not, try deleting dovecot.index.cache file to see if it helps. Out of 13 messages in my inbox, 12 of them are newer than 6 Sep. I deleted the dovecot.index.cache file and it still will not display any messages in my inbox when I have the setting to only display the most current 30 days worth of mail. Jeff
