Re: [Dovecot] Separate access to different "folders" of the same mailbox?

2011-02-09 Thread David Ford
~user/.procmailrc-backup or /etc/procmailrc-backup MDIR="${HOME}/.maildir" TODAY_YEAR=`date +%Y` TODAY_MONTH=`date +%m` TODAY_DAY=`date +%d` # prepare the archive :0 { dummy=`(p="${MDIR}/.archive.$TODAY_YEAR.$TODAY_MONTH.$TODAY_DAY"; if [ ! -d $p ]; then mkdir -p $p; fi;) 2>/dev/null`

Re: [Dovecot] Separate access to different "folders" of the same mailbox?

2011-02-09 Thread Oli Schacher
On Thu, 10 Feb 2011 09:15:18 +0200 Alexander Chekalin wrote: > in my company we have a mailbox that holds a copy of every message > that our SMTP processed. While it eats a lot of space, it saved us > several times when, you may imaging, user "suddenly" deleted the most > important message in his

[Dovecot] Separate access to different "folders" of the same mailbox?

2011-02-09 Thread Alexander Chekalin
Hello Timo and everyone, I think on such an idea that may save me a bit of space and time: in my company we have a mailbox that holds a copy of every message that our SMTP processed. While it eats a lot of space, it saved us several times when, you may imaging, user "suddenly" deleted the most

Re: [Dovecot] /var/mail/ and mail group privileges

2011-02-09 Thread Michal Hlavinka
On Thursday 10 of February 2011 02:54:39 Timo Sirainen wrote: > On Mon, 2011-01-10 at 14:08 +0100, Michal Hlavinka wrote: > > On Tuesday, January 04, 2011 00:47:16 Timo Sirainen wrote: > > > On 3.1.2011, at 19.15, Michal Hlavinka wrote: > > > > Shouldn't mkdir and chown make together a transaction?

Re: [Dovecot] LDAP and GSSAPI problems

2011-02-09 Thread Trever L. Adams
This is very good. A safe default (no import_environment) maybe TZ USER and HOME. Just to maintain functionality if people don't set this up. -Original message- From: Timo Sirainen To: Dovecot Mailing List Cc: "Trever L. Adams" Sent: Wed, Feb 9, 2011 23:55:06 GMT+00:00 Subject: Re:

[Dovecot] LDAP quota groups

2011-02-09 Thread ian+dovecot
Is there any way to have a per-LDAP-group quota? The OpenLDAP folk's suggestions are to hack the source for an overlay (ideal, but it looks somewhat involved) or to do it at the application (Dovecot). I've added an LDAP userattr 'quotaMegaBytes' which is great for allowing me to override the s

Re: [Dovecot] Access rights after dsync

2011-02-09 Thread Timo Sirainen
On Wed, 2011-01-05 at 19:26 -0500, Joan Moreau wrote: > It looks like the access rights are not correctly preserved > after a dsync > > I have rwXr-X-- from my original folder (which is right) > > > I have rwXrwXrwX in the "mirrored" fodler (which is very wrong) > > Not > sure what cause thi

Re: [Dovecot] Dovecot 2.0.7 doesn't disassociate STDERR when it daemonizes.

2011-02-09 Thread Timo Sirainen
On Thu, 2011-01-06 at 10:42 -0800, Virgil Champlin wrote: > --- main.c.orig 2010-11-04 11:58:48.0 -0700 > +++ main.c 2011-01-05 18:11:45.0 -0800 > @@ -717,7 +717,8 @@ > } > > if (dup2(null_fd, STDIN_FILENO) < 0 || > - dup2(null_fd, STDOUT_FILENO) < 0)

Re: [Dovecot] login_trusted_networks (v2.0.8)

2011-02-09 Thread Timo Sirainen
On Thu, 2011-01-06 at 11:14 -0800, Don Buchholz wrote: > I just spent a bit puzzling over "login_trusted_networks". My problem > was using "10.1.2/24" instead of "10.1.2.0/24". > > Here are some things I looked for during troubleshooting that didn't > pan out: > >(1) No messages printed to s

Re: [Dovecot] /var/mail/ and mail group privileges

2011-02-09 Thread Timo Sirainen
On Mon, 2011-01-10 at 14:08 +0100, Michal Hlavinka wrote: > On Tuesday, January 04, 2011 00:47:16 Timo Sirainen wrote: > > On 3.1.2011, at 19.15, Michal Hlavinka wrote: > > > Shouldn't mkdir and chown make together a transaction? When it fails just > > > for first time, it confuses some admins (thi

Re: [Dovecot] Error: FETCH [1] for mailbox badbox UID 1 got too little data: 2 vs 4

2011-02-09 Thread Timo Sirainen
On Wed, 2011-01-12 at 15:02 +, Chris Wilson wrote: > $ touch ~/mail/badbox > $ echo test | /usr/libexec/dovecot/dovecot-lda -m badbox Fixed finally: http://hg.dovecot.org/dovecot-2.0/rev/079a81fb5117

Re: [Dovecot] Panic: file mailbox-list-maildir.c: line 133: unreached

2011-02-09 Thread Timo Sirainen
On Mon, 2011-01-17 at 00:23 +0100, Holger Mauermann wrote: > I converted personal mailboxes from maildir to sdbox. Public mailboxes > are still in maildir format, because I need per-user seen flags. > However, if the user is subscribed to public mailboxes and the client > sends 'LIST (SUBSCRIBED) "

Re: [Dovecot] courier-imap to dovecot-imap migration: missing TLS_TRUSTCERTS feature

2011-02-09 Thread Timo Sirainen
On Wed, 2011-01-19 at 11:46 +0100, Uffe Jakobsen wrote: > All certificates are self signed "standalone" cerfificates - no CA > hierarchy/structure is made. > > With courier-imap we could just put every client certificate into a > trusted cert file (or hashed directory for a larger number of cli

Re: [Dovecot] expire plugin and sieve

2011-02-09 Thread Timo Sirainen
On Sat, 2011-01-22 at 08:27 +0100, c...@kruemel.org wrote: > However, the combination of sieve and expire does not seem to be > working: When sieve moves messages into a folder, no entry is created in > the database. Don't these plugins work together, or did I misconfigure > something? If y

Re: [Dovecot] dovecot not delivering emails in the right folder

2011-02-09 Thread Timo Sirainen
On Sat, 2011-02-05 at 14:11 -0800, paul...@calderonpale.com wrote: > deliver(adomain.com/test/@adomain.com): 2011-02-04 21:48:04 Info: auth > input: adomain.com/test/@adomain.com The username looks broken.. It should be t...@adomain.com, not adomain.com/test/@adomain.com.. > deliver(adomain.com/

Re: [Dovecot] pop3 index virtual question

2011-02-09 Thread Timo Sirainen
On Thu, 2011-02-10 at 00:32 +0100, Robert Schetterer wrote: > >> Debug: maildir++: root=/etc/dovecot/virtual, > >> index=/usr/local/virtual/domain.com/u...@domain.com//virtual, control=, > >> inbox= > >> > >> at my setup > >> > >> the double slash might not hurt , but how setup to avoid it? > > >

Re: [Dovecot] LDAP and GSSAPI problems

2011-02-09 Thread Timo Sirainen
On Thu, 2011-02-10 at 01:17 +0200, Timo Sirainen wrote: > > (does this really need to be set over and over or can the master process > > set it and have the environment inherited... it has been a long time > > since I did any coding related to environment variables accross forks, > > etc.)? > > En

Re: [Dovecot] pop3 index virtual question

2011-02-09 Thread Robert Schetterer
Am 10.02.2011 00:07, schrieb Timo Sirainen: > On Tue, 2011-02-08 at 21:30 +0100, Robert Schetterer wrote: > >> Debug: maildir++: root=/etc/dovecot/virtual, >> index=/usr/local/virtual/domain.com/u...@domain.com//virtual, control=, >> inbox= >> >> at my setup >> >> the double slash might not hurt ,

Re: [Dovecot] LDAP and GSSAPI problems

2011-02-09 Thread Timo Sirainen
On Sat, 2011-02-05 at 20:49 -0700, Trever L. Adams wrote: > > Timo, is it possible for you to add that "import_environment > =KRB5_KTNAME=/etc/dovecot/krb5.keytab KRB5CCNAME =/etc/dovecot/krb5.cc" So you've tried that doing this via auth.sh script that sets those before calling dovecot/auth works

Re: [Dovecot] problem configuring deliver in LDAP environment.

2011-02-09 Thread Timo Sirainen
On Tue, 2011-02-08 at 20:23 +0100, Andrea Borghi wrote: > dovecotlda unix - n n - - pipe > flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/deliver -s -e -f > ${sender} -d ${recipient} .. > What i am trying to do is leaving all the dovecot services running in ch

Re: [Dovecot] pop3 index virtual question

2011-02-09 Thread Timo Sirainen
On Tue, 2011-02-08 at 21:30 +0100, Robert Schetterer wrote: > Debug: maildir++: root=/etc/dovecot/virtual, > index=/usr/local/virtual/domain.com/u...@domain.com//virtual, control=, > inbox= > > at my setup > > the double slash might not hurt , but how setup to avoid it? I guess your home direct

Re: [Dovecot] IMAP subfolders and MDBOX

2011-02-09 Thread Timo Sirainen
On Wed, 2011-02-09 at 07:12 +0100, Frank Bonnet wrote: > We actually use MBOX format on our mailhub but this > does not permit to create IMAP subfolders. It does, although it's less obvious how to do that with most clients. > My problem is to choose the format that will permit > imap subfolders

Re: [Dovecot] LDAPS fault tolerance not working with dovecot

2011-02-09 Thread Timo Sirainen
On Wed, 2011-02-09 at 11:41 +0200, Nikita Koshikov wrote: > uris = ldaps://host1 ldaps://host2 ldaps://host2 > > Today host1 hangs and new connections can't be established with mail > server. Connected users worked fine (auth_cache_size = 5 k > auth_cache_ttl = 15 mins). At this time - host2 and

Re: [Dovecot] Domain blacklisting

2011-02-09 Thread Timo Sirainen
On Wed, 2011-02-09 at 11:57 +0100, Thomas Hummel wrote: > My understanding is that I cannot use some negative form of "allow_nets". The > only mechanism I can think of is tcp_wrappers. However, dovecot documentation > mention it only in the dovecot-1 section. Does it work the same way with > dove

Re: [Dovecot] Questions about dovecot-shared in 1.2 and inherit group membership from parent mailbox

2011-02-09 Thread Timo Sirainen
On Wed, 2011-02-09 at 12:51 +0100, Lukas Haase wrote: > First, if I want shared keywords I *must* have a dovecot-shared. In this > case, the permissions are not taken any longer from the parent folder > (what is exactly this parent folder?) If you have ~/Maildir/.foo/, then the permissions are

Re: [Dovecot] Using -s in "doveadm mailbox create"

2011-02-09 Thread Timo Sirainen
On Wed, 2011-02-09 at 20:57 +0100, Christoph Pleger wrote: > it seems that "doveadm mailbox create" does not handle the mailbox parameters > correctly if used with the "-s"-Parameter. Fixed: http://hg.dovecot.org/dovecot-2.0/rev/98f13cc1e649

[Dovecot] Using -s in "doveadm mailbox create"

2011-02-09 Thread Christoph Pleger
Hello, it seems that "doveadm mailbox create" does not handle the mailbox parameters correctly if used with the "-s"-Parameter. I am using the following command in a script for adding new users: doveadm mailbox create -u "${ACCOUNT}" -s INBOX Drafts Sent Trash Spam Templates This creates mail

Re: [Dovecot] Force STARTTLS on port 143 for !internalnetwork

2011-02-09 Thread Ralf Hildebrandt
* Timo Sirainen : > >> In v2.0 you can do: > >> > >> disable_plaintext_auth = yes > >> local 10.0.0.0/24 { > >> disable_plaintext_auth = no > >> } > > > > Can I also specify more than one subnet there? > > You can add multiple local {} blocks. Uh. Actually, you want remote {}, not > local {}.

Re: [Dovecot] Dovecot + Solr does not index without break-imap-search?

2011-02-09 Thread Timo Sirainen
On 9.2.2011, at 15.12, Jose Álvaro Domínguez Díaz wrote: > With 'break-imap-search', Dovecot connects with solr, solr indexes all, > searchs are fast and all works fine. BUT if we don't add 'break-imap-search', > solr doesn't index anything. With break-imap-search the indexing is used for TEXT

Re: [Dovecot] Force STARTTLS on port 143 for !internalnetwork

2011-02-09 Thread Timo Sirainen
On 9.2.2011, at 17.13, Ralf Hildebrandt wrote: > * Timo Sirainen : > >> I think that'll work, yes, but it has the additional feature of allowing >> clients from localnet to fake their IP address. > > Yes, I noticed this while reading the checkin message for the feature. It's also mentioned in

Re: [Dovecot] Force STARTTLS on port 143 for !internalnetwork

2011-02-09 Thread Ralf Hildebrandt
* Timo Sirainen : > I think that'll work, yes, but it has the additional feature of allowing > clients from localnet to fake their IP address. Yes, I noticed this while reading the checkin message for the feature. > In v2.0 you can do: > > disable_plaintext_auth = yes > local 10.0.0.0/24 { >

Re: [Dovecot] Force STARTTLS on port 143 for !internalnetwork

2011-02-09 Thread Timo Sirainen
On 9.2.2011, at 15.09, Nick Rosier wrote: >> How can I force users which are connecting from OUTSIDE our newtworks >> to user STARTTLS on Port 143? >> >> Right now we resort to IMAPS on port 993, but an additional STARTTLS >> enabled login on the default port would make things easier! >> > You c

Re: [Dovecot] dsync problem

2011-02-09 Thread Frank Bonnet
On 02/09/2011 03:16 PM, Pascal Volk wrote: On 02/09/2011 03:10 PM Frank Bonnet wrote: … dsync(toto): Error: Failed to sync mailbox .dovecot.sieve: Mailbox isn't a valid mbox file The directory .dovecot.sieve is used by sieve and it seems dsync doesn't like it ... Yeah, dsync works with mailbo

Re: [Dovecot] dsync problem

2011-02-09 Thread Pascal Volk
On 02/09/2011 03:10 PM Frank Bonnet wrote: > … > dsync(toto): Error: Failed to sync mailbox .dovecot.sieve: Mailbox isn't > a valid mbox file > > The directory .dovecot.sieve is used by sieve and it seems dsync > doesn't like it ... Yeah, dsync works with mailboxes an messages, but not with any

Re: [Dovecot] dsync problem

2011-02-09 Thread Frank Bonnet
On 02/09/2011 03:01 PM, Joseba Torre wrote: El Wednesday 09 February 2011, Frank Bonnet dijo: hello I try to convert from mbox to mdbox using dsync i get the followin error using the following command dsync mirror -u toto mbox:/user/toto:INBOX=/var/mail/toto I get this error message : mail3

Re: [Dovecot] dsync problem

2011-02-09 Thread Joseba Torre
El Wednesday 09 February 2011, Frank Bonnet dijo: > hello > > I try to convert from mbox to mdbox using dsync > i get the followin error using the following command > > dsync mirror -u toto mbox:/user/toto:INBOX=/var/mail/toto > > I get this error message : > > mail3# dsync mirror -u toto mbox

[Dovecot] dsync problem

2011-02-09 Thread Frank Bonnet
hello I try to convert from mbox to mdbox using dsync i get the followin error using the following command dsync mirror -u toto mbox:/user/toto:INBOX=/var/mail/toto I get this error message : mail3# dsync mirror -u toto mbox:/user/toto:INBOX=/var/mail/toto dsync(root): Fatal: execvp(-u) failed

[Dovecot] Dovecot + Solr does not index without break-imap-search?

2011-02-09 Thread Jose Álvaro Domínguez Díaz
Hi folks, We are working with Dovecot 2.0.9 with Solr support and there is a thing, a little strange for us. Let me explain. We have this conf for Solr: plugin { ... fts = solr fts_solr = url=http:// solr.domain:8983/solr/ break-imap-search quota = maildir ... }

Re: [Dovecot] Force STARTTLS on port 143 for !internalnetwork

2011-02-09 Thread Nick Rosier
Ralf Hildebrandt wrote: Hi! How can I force users which are connecting from OUTSIDE our newtworks to user STARTTLS on Port 143? Right now we resort to IMAPS on port 993, but an additional STARTTLS enabled login on the default port would make things easier! You can probably add login_trusted_n

[Dovecot] Force STARTTLS on port 143 for !internalnetwork

2011-02-09 Thread Ralf Hildebrandt
Hi! How can I force users which are connecting from OUTSIDE our newtworks to user STARTTLS on Port 143? Right now we resort to IMAPS on port 993, but an additional STARTTLS enabled login on the default port would make things easier! -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk

Re: [Dovecot] Permissions in shared folders

2011-02-09 Thread Lukas Haase
Dear Timo, Am 08.02.2011 23:48, schrieb Timo Sirainen: On 9.2.2011, at 0.20, Lukas Haase wrote: namespace public { separator = . prefix = Shared. location = maildir:/var/mail/shared:CONTROL=~/Maildir/shared location = maildir:/var/mail/shared:INDEX=~/Maildir/shared Why? According to the Wik

Re: [Dovecot] ldap: LDAP attribute used multiple times. This is currently unsupported

2011-02-09 Thread Lukas Haase
Am 08.02.2011 23:52, schrieb Timo Sirainen: On 9.2.2011, at 0.12, Lukas Haase wrote: I'm pretty sure it never worked. I think in v1.0 it simply ignored the first uid=user. So you could probably just remove that. Unfortunately not. I am really sure it worked in v1.0. For example: I mean in v

[Dovecot] Questions about dovecot-shared in 1.2 and inherit group membership from parent mailbox

2011-02-09 Thread Lukas Haase
Hi, I read the Wiki about dovecot-shared a few times but it is not 100% clear to me (at least for 1.2). First, if I want shared keywords I *must* have a dovecot-shared. In this case, the permissions are not taken any longer from the parent folder (what is exactly this parent folder?) but fro

[Dovecot] Domain blacklisting

2011-02-09 Thread Thomas Hummel
Hello, I run dovecot-2/Maildir/LDAP user/passdb and would like to be able to deny acess to users who connect from certain domains/IP (google.com for instance since in that case they gave their credentials to a third party). My understanding is that I cannot use some negative form of "allow_nets".

Re: [Dovecot] critical feature from version 1 not migrated to version 2 = authentication configuration database per IP

2011-02-09 Thread da...@apollo.lv
Timo Sirainen wrote: On 9.2.2011, at 9.37, da...@apollo.lv wrote: existing version 1 config file, that allow such configuration: /etc/dovecot.conf BEGIN server mail.domain1.tld { I'm surprised that this server block really worked for you. I only remember ha

[Dovecot] LDAPS fault tolerance not working with dovecot

2011-02-09 Thread Nikita Koshikov
Hello list, In my dovecot-ldap.ext I have: uris = ldaps://host1 ldaps://host2 ldaps://host2 Today host1 hangs and new connections can't be established with mail server. Connected users worked fine (auth_cache_size = 5 k auth_cache_ttl = 15 mins). At this time - host2 and host3 are working fin