Re: [Dovecot] dovecot 1.2 shared namespace/mailboxes %%u expands only to % SETACL: Unknown command
Timo Sirainen schrieb: > On Thu, 2009-01-15 at 09:46 +0100, Robert Schetterer wrote: >> Hi timo trying to use imap setacl over telnet >> seems not to work > .. >> . BAD Error in IMAP command SETACL: Unknown command. > > You haven't enabled imap_acl plugin. > Jep Timo, see my other mails, most stuff is partly solved now -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria
Re: [Dovecot] dovecot 1.2 shared namespace/mailboxes %%u expands only to % SETACL: Unknown command
On Thu, 2009-01-15 at 09:46 +0100, Robert Schetterer wrote: > Hi timo trying to use imap setacl over telnet > seems not to work .. > . BAD Error in IMAP command SETACL: Unknown command. You haven't enabled imap_acl plugin. signature.asc Description: This is a digitally signed message part
Re: [Dovecot] dovecot 1.2 shared namespace/mailboxes %%u expands only to % SETACL: Unknown command
Hi Timo, >> myself to see what kind of configuration you have at this moment. The >> proper way to fill the file is to just give IMAP commands, e.g.: >> >> 1 SETACL mybox another.u...@domain lr >> >> That ACL must not already exist in dovecot-acl file, otherwise the >> acl_shared_dict file isn't updated. If it is there already you could >> just do: >> >> 1 DELETEACL mybox another.u...@domain >> 2 SETACL mybox another.u...@domain lr >> >>> yes debug gives less information, as well there is to less >>> doku about shared namespaces and acl >> I haven't had time to write the documentation yet. > > i will do more tests tommorow > and see if i get more debug > no hurry timo , its alpha phase, but a short > doku should be available when 1.2 going beta > > Hi timo trying to use imap setacl over telnet seems not to work . list "" "*" * LIST (\HasNoChildren) "/" "Templates" * LIST (\HasNoChildren) "/" "Sent" * LIST (\HasNoChildren) "/" "Junk" * LIST (\HasNoChildren) "/" "Trash" * LIST (\HasNoChildren) "/" "Drafts" * LIST (\HasNoChildren) "/" "INBOX" * LIST (\Noselect \HasNoChildren) "/" "shared" . OK List completed. . . BAD Error in IMAP command SETACL: Unknown command. . . BAD Error in IMAP command SETACL: Unknown command. . getacl inbox . BAD Error in IMAP command GETACL: Unknown command no wonder acl is not in capability ( it think it should be ) OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE SORT THREAD=REFERENCES MULTIAPPEND UNSELECT IDLE CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH SEARCHRES WITHIN CONTEXT=SEARCH QUOTA] Logged in -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria
Re: [Dovecot] dovecot 1.2 shared namespace/mailboxes %%u expands only to %
Hi Timo
Timo Sirainen schrieb:
> On Tue, 2009-01-13 at 12:24 +0100, Robert Schetterer wrote:
>> namespace shared {
>>separator = /
>>prefix = "shared/%d/%%u/"
>>subscriptions = yes
>>list = yes
>> }
>
> This kind of configuration doesn't actually work too great. The %d there
> gets always replaced with the logged in user's domain. So there is just
> no extra benefit of having %d there, because it'll be the same for
> everyone, even for shared mailboxes from other domains (if you ever
> happened to have any). It also makes LIST "" % not work right by not
> listing "shared" mailbox. Probably too much trouble to fix that..
>
> So.. I'd just recommend using either shared/%%d/%%n/ or shared/%%u/
> prefix. Or since you want only the same domain maybe just shared/%%n/
OK understand
>
> Also you should probably set subscriptions=no to the namespace.
> list=children also makes the shared/ prefix invisible if there are no
> shared mailboxes.
seeing prefix always is ok for me
>
>> i think it should look like ( no sharing over existing domains only own
>> domain )
>> location = maildir:/usr/local/virtual/%d/%%u/:INDEX=~/shared/%d/%%u/
>> but error stays
>
> The extra %d in INDEX location isn't useful, since it's already under
> your home dir. So:
>
> location = maildir:/usr/local/virtual/%d/%%u/:INDEX=~/shared/%%u/
Ok understand
>
> Are you really using /usr/local/virtual/domain/u...@domain/ and not
> just /usr/local/virtual/domain/user/?
jep i use a full scheme,
/usr/local/virtual/domain/u...@domain
which is possible from postfix admin ( which i like to use to admin
mailboxes )
it seems to me as the most logical variant, and it works nice without
using shared namespace yet, but it would be also possible
to use /usr/local/virtual/domain/user
or /usr/local/virtual/u...@domain
from postfixadmin i think
but i think it would be more nice to use a full name schema
to make things more clear if i like to use cross domain shared mailboxes
thats why i also wanted to use %d expansion for that, whatever
domain name is a must have cause username may be equal in cross domain
sharing like
/usr/local/virtual/domainA/user wants to share with
/usr/local/virtual/domainB/user
where user is equal so a domainname should be able to be seen
in the client to difference users by equal name in different domains
so if %d expansion dont work in shared
perhaps /usr/local/virtual/u...@domain schema
whould be better with shared mailboxes?
also later on i wanted to have a public namespace which should
be later under /usr/local/virtual/domain in the filesystem
but for now that not the point and it wouldnt be
a problem to have it elsewher like
/usr/local/virtual/public-namespace/domain
set this now
namespace shared {
separator = /
prefix = "shared/%%u/"
location = maildir:/usr/local/virtual/%d/%%u/:INDEX=~/shared/%%u/
subscriptions = no
list = yes
}
but the error seems to stay
is it possible that an @ in the user leads to it ?
( shouldnt be cause %u has no problem with )
but for the first look it doesnt change anything
--log
dovecot: Jan 15 02:09:58 Info: IMAP(rob...@schetterer.com): acl vfile:
Global ACL directory: (null)
dovecot: Jan 15 02:09:58 Info: IMAP(rob...@schetterer.com): acl vfile:
file /usr/local/virtual/schetterer.com/%/dovecot-acl not found
dovecot: Jan 15 02:09:58 Info: IMAP(rob...@schetterer.com): Namespace
shared/%/: Permission lookup failed from /usr/local/virtual/schetterer.com/%
>
>> dovecot: Jan 13 11:47:56 Info: IMAP(rob...@schetterer.com): maildir++:
>> root=/usr/local/virtual/schetterer.com/%,
>
> I was previously thinking a bit wrong. % is a LIST wildcard. I couldn't
> reproduce this problem with LIST though. Could you look at the IMAP
> traffic and reproduce it manually to see what command exactly causes
> this error?
>
acl_shared_dict: file:/var/lib/dovecot/shared/mailboxes
>>> What are the contents of this file? Also you'll only need
>>> acl_shared_dict. Looks like dovecot-example.conf incorrectly used
>>> acl_dict.
>> sorry timo, there ist less documention about this file
>> ( cant find any help what they should include on the web )
>> so they only exist without content, do you have examples?
>
> You don't need to know its contents. I just would have wanted to see it
> myself to see what kind of configuration you have at this moment. The
> proper way to fill the file is to just give IMAP commands, e.g.:
>
> 1 SETACL mybox another.u...@domain lr
>
> That ACL must not already exist in dovecot-acl file, otherwise the
> acl_shared_dict file isn't updated. If it is there already you could
> just do:
>
> 1 DELETEACL mybox another.u...@domain
> 2 SETACL mybox another.u...@domain lr
>
>> yes debug gives less information, as well there is to less
>> doku about shared namespaces and acl
>
> I haven't had time to write the documentation yet.
i will do more tests tommorow
and see if i get more debug
no hurry timo , its alpha phase, but a short
doku sho
Re: [Dovecot] dovecot 1.2 shared namespace/mailboxes %%u expands only to %
On Tue, 2009-01-13 at 12:24 +0100, Robert Schetterer wrote:
> namespace shared {
> separator = /
> prefix = "shared/%d/%%u/"
> subscriptions = yes
> list = yes
> }
This kind of configuration doesn't actually work too great. The %d there
gets always replaced with the logged in user's domain. So there is just
no extra benefit of having %d there, because it'll be the same for
everyone, even for shared mailboxes from other domains (if you ever
happened to have any). It also makes LIST "" % not work right by not
listing "shared" mailbox. Probably too much trouble to fix that..
So.. I'd just recommend using either shared/%%d/%%n/ or shared/%%u/
prefix. Or since you want only the same domain maybe just shared/%%n/
Also you should probably set subscriptions=no to the namespace.
list=children also makes the shared/ prefix invisible if there are no
shared mailboxes.
> i think it should look like ( no sharing over existing domains only own
> domain )
> location = maildir:/usr/local/virtual/%d/%%u/:INDEX=~/shared/%d/%%u/
> but error stays
The extra %d in INDEX location isn't useful, since it's already under
your home dir. So:
location = maildir:/usr/local/virtual/%d/%%u/:INDEX=~/shared/%%u/
Are you really using /usr/local/virtual/domain/u...@domain/ and not
just /usr/local/virtual/domain/user/?
> dovecot: Jan 13 11:47:56 Info: IMAP(rob...@schetterer.com): maildir++:
> root=/usr/local/virtual/schetterer.com/%,
I was previously thinking a bit wrong. % is a LIST wildcard. I couldn't
reproduce this problem with LIST though. Could you look at the IMAP
traffic and reproduce it manually to see what command exactly causes
this error?
> >> acl_shared_dict: file:/var/lib/dovecot/shared/mailboxes
> >
> > What are the contents of this file? Also you'll only need
> > acl_shared_dict. Looks like dovecot-example.conf incorrectly used
> > acl_dict.
>
> sorry timo, there ist less documention about this file
> ( cant find any help what they should include on the web )
> so they only exist without content, do you have examples?
You don't need to know its contents. I just would have wanted to see it
myself to see what kind of configuration you have at this moment. The
proper way to fill the file is to just give IMAP commands, e.g.:
1 SETACL mybox another.u...@domain lr
That ACL must not already exist in dovecot-acl file, otherwise the
acl_shared_dict file isn't updated. If it is there already you could
just do:
1 DELETEACL mybox another.u...@domain
2 SETACL mybox another.u...@domain lr
> yes debug gives less information, as well there is to less
> doku about shared namespaces and acl
I haven't had time to write the documentation yet.
signature.asc
Description: This is a digitally signed message part
Re: [Dovecot] dovecot 1.2 shared namespace/mailboxes %%u expands only to %
Hi Timo,
Timo Sirainen schrieb:
> On Wed, 2009-01-07 at 00:17 +0100, Robert Schetterer wrote:
>> Timo Sirainen schrieb:
>>> On Wed, 2009-01-07 at 00:05 +0100, Robert Schetterer wrote:
namespace shared {
separator = /
prefix = "shared/%d/%%u/"
subscriptions = yes
list = yes
}
>>> ..
%%u seems not expand to other existing users instead it expands to %
>>> Worked last I tried. Show the whole dovecot -n output?
>>>
>> here it is ( without ip )
>> quota imap was working but temp disabled for testing
>> additional failure
>> loading listescape and autocreate, brakes autocreate
>
> Works here .. Maybe try the latest nightly snapshots? Perhaps things
> have been fixed there already.
i am on latest snapshot
>
>> namespace:
>> type: shared
>> separator: /
>> prefix: shared/%d/%%u/
>> list: yes
>> subscriptions: yes
>
> You're missing location for other users' maildirs here. Should probably
> be:
>
> location =
> maildir:/usr/local/virtual/%%d/%%u/Maildir:INDEX=~/Maildir/shared/%%u
dont change something ( tested )
i think it should look like ( no sharing over existing domains only own
domain )
location = maildir:/usr/local/virtual/%d/%%u/:INDEX=~/shared/%d/%%u/
but error stays
dovecot: Jan 13 11:47:56 Info: IMAP(rob...@schetterer.com): maildir++:
root=/usr/local/virtual/schetterer.com/%,
index=/usr/local/virtual/schetterer.com/rob...@schetterer.com//shared/schetterer.com/%,
control=, inbox=
dovecot: Jan 13 11:47:56 Info: IMAP(rob...@schetterer.com): acl:
initializing backend with data: vfile
dovecot: Jan 13 11:47:56 Info: IMAP(rob...@schetterer.com): acl: acl
username = rob...@schetterer.com
dovecot: Jan 13 11:47:56 Info: IMAP(rob...@schetterer.com): acl: owner = 0
dovecot: Jan 13 11:47:56 Info: IMAP(rob...@schetterer.com): acl vfile:
Global ACL directory: (null)
dovecot: Jan 13 11:47:56 Info: IMAP(rob...@schetterer.com): acl vfile:
file /usr/local/virtual/schetterer.com/%/dovecot-acl not found
dovecot: Jan 13 11:47:56 Info: IMAP(rob...@schetterer.com): Namespace
shared/schetterer.com/%/: Permission lookup failed from /usr/local/vi
>
>> acl_dict: file:/var/lib/dovecot/shared-mailboxes
ok disabled this
>> acl_shared_dict: file:/var/lib/dovecot/shared/mailboxes
>
> What are the contents of this file? Also you'll only need
> acl_shared_dict. Looks like dovecot-example.conf incorrectly used
> acl_dict.
sorry timo, there ist less documention about this file
( cant find any help what they should include on the web )
so they only exist without content, do you have examples?
>
> Anyway..:
>
>> dovecot: Jan 06 23:53:14 Info: IMAP(rob...@schetterer.com): Namespace
>> shared/schetterer.com/%/: Permission lookup failed from
>> /var/run/dovecot/user-not-found/%
>
> See the "namespace shared/schetterer.com/%/" part. You were somehow
> trying to look up a user called "%". Although unknown user lookups
> shouldn't cause error messages to be written to log files. Have to get
> this fixed.
% in real seems to be the login user
yes debug gives less information, as well there is to less
doku about shared namespaces and acl
or maybe its my fault to read the exist ones *g
--
Best Regards
MfG Robert Schetterer
Germany/Munich/Bavaria
Re: [Dovecot] dovecot 1.2 shared namespace/mailboxes %%u expands only to %
On Wed, 2009-01-07 at 00:17 +0100, Robert Schetterer wrote:
> Timo Sirainen schrieb:
> > On Wed, 2009-01-07 at 00:05 +0100, Robert Schetterer wrote:
> >> namespace shared {
> >>separator = /
> >>prefix = "shared/%d/%%u/"
> >>subscriptions = yes
> >>list = yes
> >> }
> > ..
> >> %%u seems not expand to other existing users instead it expands to %
> >
> > Worked last I tried. Show the whole dovecot -n output?
> >
> here it is ( without ip )
> quota imap was working but temp disabled for testing
> additional failure
> loading listescape and autocreate, brakes autocreate
Works here .. Maybe try the latest nightly snapshots? Perhaps things
have been fixed there already.
> namespace:
> type: shared
> separator: /
> prefix: shared/%d/%%u/
> list: yes
> subscriptions: yes
You're missing location for other users' maildirs here. Should probably
be:
location =
maildir:/usr/local/virtual/%%d/%%u/Maildir:INDEX=~/Maildir/shared/%%u
> acl_dict: file:/var/lib/dovecot/shared-mailboxes
> acl_shared_dict: file:/var/lib/dovecot/shared/mailboxes
What are the contents of this file? Also you'll only need
acl_shared_dict. Looks like dovecot-example.conf incorrectly used
acl_dict.
Anyway..:
> dovecot: Jan 06 23:53:14 Info: IMAP(rob...@schetterer.com): Namespace
> shared/schetterer.com/%/: Permission lookup failed from
> /var/run/dovecot/user-not-found/%
See the "namespace shared/schetterer.com/%/" part. You were somehow
trying to look up a user called "%". Although unknown user lookups
shouldn't cause error messages to be written to log files. Have to get
this fixed.
signature.asc
Description: This is a digitally signed message part
Re: [Dovecot] dovecot 1.2 shared namespace/mailboxes %%u expands only to %
Timo Sirainen schrieb:
> On Wed, 2009-01-07 at 00:05 +0100, Robert Schetterer wrote:
>> namespace shared {
>>separator = /
>>prefix = "shared/%d/%%u/"
>>subscriptions = yes
>>list = yes
>> }
> ..
>> %%u seems not expand to other existing users instead it expands to %
>
> Worked last I tried. Show the whole dovecot -n output?
>
here it is ( without ip )
quota imap was working but temp disabled for testing
additional failure
loading listescape and autocreate, brakes autocreate
# 1.2.alpha5: /etc/dovecot/dovecot.conf
# OS: Linux 2.6.24-19-server i686 Ubuntu 8.04.1 ext3
base_dir: /var/run/dovecot/
log_path: /var/log/dovecot
info_log_path: /var/log/dovecot.info
protocols: imap pop3 managesieve
listen(default):
listen(imap):
listen(pop3):
listen(managesieve):
ssl_disable: yes
disable_plaintext_auth: no
login_dir: /var/run/dovecot/login
login_executable(default): /usr/lib/dovecot/imap-login
login_executable(imap): /usr/lib/dovecot/imap-login
login_executable(pop3): /usr/lib/dovecot/pop3-login
login_executable(managesieve): /usr/lib/dovecot/managesieve-login
login_greeting: welcome on master.schetterer.com high performance imap
an pop server
mail_max_userip_connections(default): 10
mail_max_userip_connections(imap): 10
mail_max_userip_connections(pop3): 3
mail_max_userip_connections(managesieve): 10
verbose_proctitle: yes
last_valid_uid: 1001
first_valid_gid: 1001
last_valid_gid: 1001
mail_access_groups: vmail
mail_privileged_group: vmail
mail_uid: 1001
mail_gid: 1001
mail_location: maildir:/usr/local/virtual/%d/%u/
mail_debug: yes
maildir_stat_dirs: yes
dbox_rotate_days: 0
mail_drop_priv_before_exec: yes
mail_executable(default): /usr/lib/dovecot/rawlog /usr/lib/dovecot/imap
mail_executable(imap): /usr/lib/dovecot/rawlog /usr/lib/dovecot/imap
mail_executable(pop3): /usr/lib/dovecot/pop3
mail_executable(managesieve): /usr/lib/dovecot/managesieve
mail_plugins(default): acl fts fts_squat mail_log listescape
mail_plugins(imap): acl fts fts_squat mail_log listescape
mail_plugins(pop3): quota
mail_plugins(managesieve):
mail_plugin_dir(default): /usr/lib/dovecot/modules/imap
mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap
mail_plugin_dir(pop3): /usr/lib/dovecot/pop3
mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve
imap_client_workarounds(default): outlook-idle delay-newmail
imap_client_workarounds(imap): outlook-idle delay-newmail
imap_client_workarounds(pop3):
imap_client_workarounds(managesieve):
pop3_enable_last(default): no
pop3_enable_last(imap): no
pop3_enable_last(pop3): yes
pop3_enable_last(managesieve): no
pop3_client_workarounds(default):
pop3_client_workarounds(imap):
pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh
pop3_client_workarounds(managesieve):
managesieve_implementation_string(default): dovecot
managesieve_implementation_string(imap): dovecot
managesieve_implementation_string(pop3): dovecot
managesieve_implementation_string(managesieve): Cyrus timsieved v2.2.13
namespace:
type: shared
separator: /
prefix: shared/%d/%%u/
list: yes
subscriptions: yes
namespace:
type: private
separator: /
location:
maildir:/usr/local/virtual/%d/%u/:CONTROL=/usr/local/virtual/%d/%u/:INDEX=/usr/local/virtual/%d/%u/
inbox: yes
list: yes
subscriptions: yes
auth default:
username_chars:
verbose: yes
debug: yes
debug_passwords: yes
passdb:
driver: sql
args: /etc/dovecot/dovecot-sql.conf
passdb:
driver: sql
args: /etc/dovecot/dovecot-sql-master.conf
pass: yes
master: yes
userdb:
driver: sql
args: /etc/dovecot/dovecot-sql.conf
socket:
type: listen
client:
path: /var/spool/postfix/private/auth
mode: 432
user: postfix
group: postfix
master:
path: /var/run/dovecot/auth-master
mode: 384
user: vmail
group: vmail
plugin:
quota_warning: storage=95%% /usr/local/bin/quota-warning.sh 95
quota_warning2: storage=80%% /usr/local/bin/quota-warning.sh 80
quota: dict:::proxy::quotadict
acl: vfile
acl_dict: file:/var/lib/dovecot/shared-mailboxes
acl_shared_dict: file:/var/lib/dovecot/shared/mailboxes
mail_log_events: delete undelete expunge copy mailbox_delete
mail_log_fields: uid box msgid size
fts: squat
sieve: /usr/local/virtual/%d/%u/.dovecot.sieve
mail_log_max_lines_per_sec: 0
autocreate: Trash
autocreate2: Junk
autocreate3: Sent
autocreate4: Drafts
autocreate5: Templates
autosubscribe: Trash
autosubscribe2: Junk
autosubscribe3: Sent
autosubscribe4: Drafts
autosubscribe5: Templates
home: /usr/local/virtual/%d/%u
dict:
quotadict: mysql:/etc/dovecot/dovecot-dict-quota.conf
--
Best Regards
MfG Robert Schetterer
Germany/Munich/Bavaria
Re: [Dovecot] dovecot 1.2 shared namespace/mailboxes %%u expands only to %
On Wed, 2009-01-07 at 00:05 +0100, Robert Schetterer wrote:
> namespace shared {
>separator = /
>prefix = "shared/%d/%%u/"
>subscriptions = yes
>list = yes
> }
..
> %%u seems not expand to other existing users instead it expands to %
Worked last I tried. Show the whole dovecot -n output?
signature.asc
Description: This is a digitally signed message part
[Dovecot] dovecot 1.2 shared namespace/mailboxes %%u expands only to %
Hi Timo,
with
dovecot --version
1.2.alpha5
namespace shared {
separator = /
prefix = "shared/%d/%%u/"
subscriptions = yes
list = yes
}
and dovecot-acl
authenticated lr
in /usr/local/virtual/schetterer.com
%%u seems not expand to other existing users instead it expands to %
i expected showing all other maildir beyond
dovecot: Jan 06 23:53:14 Info: IMAP(rob...@schetterer.com): acl vfile:
file /var/run/dovecot/user-not-found/%/dovecot-acl not found
dovecot: Jan 06 23:53:14 Info: IMAP(rob...@schetterer.com): Namespace
shared/schetterer.com/%/: Permission lookup failed from
/var/run/dovecot/user-not-found/%
i am not clear if its my fault, or some bug
--
Best Regards
MfG Robert Schetterer
Germany/Munich/Bavaria
