Hello,
since nobody replied to this issue it might be a bug. Until bug reports
are also going to this mailing list, I would like to tell this is a bug
for me.
I will add the dovecot -n:
# 2.2.27 (c0f36b0): /etc/dovecot/dovecot.conf
# Pigeonhole version 0.4.16 (fed8554)
# OS: Linux 3.10.0-327.10.1.el7.x86_64 x86_64 CentOS Linux release
7.2.1511 (Core)
auth_cache_size = 10 M
auth_cache_ttl = 6 hours
auth_debug = yes
auth_gssapi_hostname = $ALL
auth_username_format = %Ln
doveadm_password = # hidden, use -P to show it
doveadm_port = 12345
first_valid_uid = 1000000
haproxy_timeout = 5 secs
haproxy_trusted_networks = 10.0.0.0/8
lmtp_save_to_detail_mailbox = yes
mail_access_groups = all_mailuser
mail_debug = yes
mail_plugins = " mail_log notify replication acl"
managesieve_notify_capability = mailto
managesieve_sieve_capability = fileinto reject envelope
encoded-character vacation subaddress comparator-i;ascii-numeric
relational regex imap4flags copy include variables body enotify
environment mailbox date index ihave duplicate mime foreverypart extracttext
mbox_write_locks = fcntl
namespace inbox {
inbox = yes
location =
mailbox Drafts {
special_use = \Drafts
}
mailbox Junk {
special_use = \Junk
}
mailbox Sent {
special_use = \Sent
}
mailbox "Sent Messages" {
special_use = \Sent
}
mailbox Trash {
special_use = \Trash
}
prefix =
separator = /
}
namespace public-test {
location = maildir:/opt/mail/_public/test
prefix = public/test/
separator = /
subscriptions = no
type = public
}
passdb {
args = /etc/dovecot/dovecot-ldap.conf
default_fields = userdb_home=/opt/mail/%u
userdb_mail=maildir:/opt/mail/%u/Mails userdb_gid=vmail
driver = ldap
}
plugin {
acl = vfile
acl_shared_dict = file:/var/lib/dovecot/shared-mailboxes.db
mail_debug = yes
mail_plugins = " mail_log notify replication acl imap_acl"
mail_replica = tcps:imap-1.office.gameduell.de
sieve = file:~/sieve;active=~/.dovecot.sieve
sieve_default = /etc/dovecot/sieve/default.sieve
sieve_global = /etc/dovecot/sieve/global/
}
protocols = imap lmtp sieve
recipient_delimiter = -
replication_dsync_parameters = -d -l 30 -U
service aggregator {
fifo_listener replication-notify-fifo {
mode = 0666
user = vmail
}
unix_listener replication-notify {
mode = 0666
user = vmail
}
}
service auth-worker {
process_min_avail = 1
}
service auth {
inet_listener {
port = 12245
}
process_min_avail = 1
unix_listener /var/spool/postfix/private/auth {
group = postfix
mode = 0666
user = postfix
}
unix_listener auth-userdb {
group = vmail
mode = 0666
user = vmail
}
}
service doveadm {
inet_listener {
port = 12345
ssl = yes
}
}
service imap-login {
inet_listener imaps {
port = 0
ssl = yes
}
inet_listener imaps_haproxy {
haproxy = yes
port = 10993
ssl = yes
}
}
service imap-postlogin {
executable = script-login /adm/scripts/dovecot_acl_groups.sh
user = $default_internal_user
}
service imap {
executable = imap imap-postlogin
}
service lmtp {
inet_listener lmtp {
port = 24
ssl = yes
}
}
service managesieve-login {
inet_listener sieve {
port = 4190
}
service_count = 1
}
service replicator {
process_min_avail = 1
unix_listener replicator-doveadm {
mode = 0666
}
}
ssl = required
ssl_cert = </etc/pki/tls/certs/imap.office.gameduell.de.crt.pem
ssl_client_ca_file = /etc/pki/tls/cert.pem
ssl_key = # hidden, use -P to show it
ssl_protocols = !SSLv2 !SSLv3
userdb {
default_fields = home=/opt/mail/%u mail=maildir:/opt/mail/%u/Mails
gid=vmail
driver = prefetch
}
userdb {
args = /etc/dovecot/dovecot-ldap.conf
default_fields = home=/opt/mail/%u mail=maildir:/opt/mail/%u/Mails
gid=vmail
driver = ldap
}
protocol lmtp {
mail_plugins = " mail_log notify replication acl sieve"
}
protocol lda {
mail_plugins = " mail_log notify replication acl sieve"
}
protocol imap {
mail_max_userip_connections = 50
mail_plugins = " mail_log notify replication acl imap_acl"
}
protocol sieve {
managesieve_implementation_string = Dovecot Pigeonhole
managesieve_logout_format = bytes=%i/%o
managesieve_max_line_length = 65536
}
local_name imap.gameduell.de {
ssl_cert = </etc/pki/tls/certs/star.gameduell.de.bundle.crt
ssl_key = # hidden, use -P to show it
}
On 12/22/2016 11:31 AM, Mike Fröhner wrote:
Hello,
I already wrote regarding that, but maybe it sounded too complex. I will
write it a bit softer now.
The replication through dsnyc works perfectly with one exception. I am
having an issue with the replication of the subscriptions file on shared
folder.
We have a public mailbox defined:
namespace public-test {
location = maildir:/opt/mail/_public/test
prefix = public/test/
separator = /
subscriptions = no
type = public
}
There 2 subfolder .Test1 and .Test2 which I would like to subscribe on
my user "ldaptestuser" which is part of the group "ldaptestgroup"
The dovecot-acl file on /opt/mail/_public/test and
/opt/mail/_public/test/.Test{1,2} are the same and are containing:
group=ldaptestgroup lrwstipekxa
Now if I login through my client (Thunderbird or Roundcubemail) I can
see the following debug log:
dovecot: imap(ldaptestuser): Debug: acl: acl username = ldaptestuser
dovecot: imap(ldaptestuser): Debug: acl: owner = 0
dovecot: imap(ldaptestuser): Debug: acl: group added: domain users
dovecot: imap(ldaptestuser): Debug: acl: group added: ldaptestgroup
dovecot: imap(ldaptestuser): Debug: acl: group added: all_mailuser
I created one new private folder on the mailbox of my test user and also
subscribed it. This subscription is successfully replicated.
After that I am trying to subscribe the public folder. I can see the
folder in my client after I subscribed them. But on the 2nd dovecot
server the subscription file is not updated.
imap-1 # cat subscription
Private1
public/test/Test1
imap-2 # cat subscription
Private1
The debug log on both dovecot server tells me:
dovecot: doveadm(<ip>,ldaptestuser): Debug: Effective uid=834603987,
gid=991, home=/opt/mail/ldaptestuser
dovecot: doveadm(<ip>,ldaptestuser): Debug: acl: No acl_shared_dict
setting - shared mailbox listing is disabled
dovecot: doveadm(<ip>,ldaptestuser): Debug: maildir++:
root=/opt/mail/_public/test, index=, indexpvt=, control=, inbox=, alt=
dovecot: doveadm(<ip>,ldaptestuser): Debug: acl: initializing backend
with data: vfile
dovecot: doveadm(<ip>,ldaptestuser): Debug: acl: acl username =
ldaptestuser
dovecot: doveadm(<ip>,ldaptestuser): Debug: acl: owner = 0
dovecot: doveadm(<ip>,ldaptestuser): Debug: acl vfile: Global ACLs disabled
It looks like the doveadm() cannot find the group or is not
checking/initalizing the groups.
Anybody any idea if I missconfigured something or is this just a bug? I
really would appreciate some help.
kind regards,
Mike;
