Re: Embeding a path in address extensions

2017-09-08 Thread @lbutlr
On 08 Sep 2017, at 12:19, @lbutlr wrote: > Or, maybe I make the admins use an MUA? If so, I should replace most of these > .'s with dashes… This seems like the obvious decision, so never mind. -- Apple broke AppleScripting signatures in Mail.app, so no random signatures.

Re: Dovecot and Letsencrypt certs

2017-09-08 Thread @lbutlr
On 08 Sep 2017, at 12:21, Ralph Seichter wrote: > On 08.09.2017 19:51, @lbutlr wrote: >> How I would do it is IF the certificate is expired, the dovecot should >> check if there is a new cert and if so, load it. > New cert as in file modification date or checksum changed? Either one, but checksu

Re: Dovecot and Letsencrypt certs

2017-09-08 Thread Ralph Seichter
On 08.09.2017 19:51, @lbutlr wrote: > How I would do it is IF the certificate is expired, the dovecot should > check if there is a new cert and if so, load it. New cert as in file modification date or checksum changed? Might work. Still, from what I seem to remember, Dovecot loads certificate dat

Embeding a path in address extensions

2017-09-08 Thread @lbutlr
I generate bcc backups with the pattern backups+date.user.domain@mybackupdomain.tld (for example, backups+20170908.kremels.kreme@mybackupdomain.tld) This puts mail in …/.20170908.kremels.kreme.com/new What I would like to do is get the expansion to generate the following path

Re: Dovecot and Letsencrypt certs

2017-09-08 Thread @lbutlr
On 08 Sep 2017, at 10:08, Ralph Seichter wrote: > What is Dovecot supposed to do? Keep track of the certificate expiry > date? And if that is passed, then what? Automatically shutdown/restart? > What if the certificate has not been updated in between? I think that > handling certificates is better

Re: Dovecot and Letsencrypt certs

2017-09-08 Thread @lbutlr
On 08 Sep 2017, at 09:28, Вадим Бажов wrote: > "I think it’s probably easier to just kick dovecot once a month." - > that's not good from system administration's point of view. You can > get into trouble when certificate is renewed but dovecot isn't > reloaded yet. That's simply not possible. The

Re: can't get quota working. I use static userdb driver.

2017-09-08 Thread Вадим Бажов
Got it ! The issue is in the 'type = public' parameter. I removed it from my namespace definition and quota got counted as expected ! Problem solved. 2017-09-01 21:34 GMT+05:00 Вадим Бажов : > Hi, people ! > Set up global quota according to docs to 2 Mb. > Send more than ten Mb on the box. > Mail

Re: can't get quota working. I use static userdb driver.

2017-09-08 Thread Вадим Бажов
I found what causes quota not being working at all - namespace. Whenever I declare a basic namespace : namespace { type = public prefix = INBOX. separator = . inbox = yes } or even namespace { type = public inbox = yes } Quota gets broken: # doveadm quota recalc -u administrator; d

Re: EOF from net_disconnect(fd)

2017-09-08 Thread Steffan Cline
Aki, Thanks for your direction! It seems that the issue I’m running into is this: https://www.dovecot.org/list/dovecot-cvs/2014-January/024154.html I’m told it’s fixed in 2.2.11 but CentOS 7’s repos have 2.2.10-7.el7. I found a work-around in the plugin at https://github.com/st3fan/dovecot-xap

Re: Dovecot and Letsencrypt certs

2017-09-08 Thread Ralph Seichter
On 08.09.2017 16:20, LuKreme wrote: > That is a great solution, but I think it’s probably easier to just > kick dovecot once a month. Certbot hooks are very easy to write, and are only executed when the certificate is updated. In that light, I can see no advantage in "kick dovecot once a month".

Re: disable imap for ldap user

2017-09-08 Thread Ralph Seichter
On 08.09.2017 17:11, Markus Rosjat wrote: > I have a LDAP dir with an attribute set to 0 or 1 and in my old setup > (a courier server) I used this attribute to map it to an authoption > called disableimap. This prevent users to access the mailbox with imap > protocol. > > So the question is what s

Re: Dovecot and Letsencrypt certs

2017-09-08 Thread Вадим Бажов
"I think it’s probably easier to just kick dovecot once a month." - that's not good from system administration's point of view. You can get into trouble when certificate is renewed but dovecot isn't reloaded yet. And, doing something via cron just by-guess, once a month - is a no no logic. "it seem

disable imap for ldap user

2017-09-08 Thread Markus Rosjat
hi there, I have a LDAP dir with an attribute set to 0 or 1 and in my old setup (a courier server) I used this attribute to map it to an authoption called disableimap. This prevent users to access the mailbox with imap protocol. So the question is what should I set in dovecot to get the sam

Re: Automatic DB password hash scheme selection

2017-09-08 Thread Kurt Fitzner
Hi all, Is there a way to get dovecot to recognize arbitrary password hash schemes when looking up a password in a database? I originally set up with #default_pass_scheme = MD5, and I would like to migrate to SHA512. Is this possible currently? Thanks, Kurt Hi! Prefix with {SCHEME}. Hi A

Re: Hide public mailboxes from some users

2017-09-08 Thread Arie Peterson
> Is a user without the "lookup" ACL right to a given mailbox supposed to be > able to see the mailbox listed in their email client? Anything I can try to debug this further? Any hints or suggestions are appreciated :-).

Re: Dovecot and Letsencrypt certs

2017-09-08 Thread LuKreme
On Sep 8, 2017, at 07:56, Darac Marjal wrote: > #!/bin/bash > >set -e >set -u >set -o pipefail > >if [[ ${1} == "deploy_cert" && ${2} == "mail.darac.org.uk" ]]; then >echo " + Hook: Restarting Dovecot..." >/usr/sbin/service dovecot restart >fi > >

Re: Dovecot and Letsencrypt certs

2017-09-08 Thread Darac Marjal
On Fri, Sep 08, 2017 at 06:47:25AM -0600, @lbutlr wrote: So this morning at 4am I was awoken to my mail clients getting certificate errors for an expired certificate. I hopped on to the server and checked and… no, the LE certs renewed last month and are valid until November. After some moment

Re: Dovecot and Letsencrypt certs

2017-09-08 Thread Eduardo M KALINOWSKI
On 08-09-2017 09:47, @lbutlr wrote: > Should dovecot check for certs being refreshed? Or is this an artifact of my > using symbolic links everywhere to point to the newest LE certs (which are > themselves links the dehydrate script creates to point to the newest > cert-1502534746.csr etc files?

Re: Dovecot and Letsencrypt certs

2017-09-08 Thread Вадим Бажов
Dovecot seems to load certificates into memory and don't refresh them until restart, or may be reload. And this is a correct logic. You better add restart/reload task to the LE cron job after the successful renewal of LE certificate. Check that it really works as it should. Dovecot shouldn't be res

Dovecot and Letsencrypt certs

2017-09-08 Thread @lbutlr
So this morning at 4am I was awoken to my mail clients getting certificate errors for an expired certificate. I hopped on to the server and checked and… no, the LE certs renewed last month and are valid until November. After some moments of confusion I noticed that dovecot had been running sinc

Re: password reset

2017-09-08 Thread @lbutlr
On Sep 8, 2017, at 3:20 AM, Steffen Kaiser wrote: > >> sudo passed > > After you did so, where does the passwort *not* work? In Dovecot? I never got as far as checking in dovecot. It did not work from the command line. >> if I try to change the password in the user's account (after su ) t

Problems to configure IMAP Quota

2017-09-08 Thread Jacques Belin
Hello, We manage a mail server using Dovecot under Debian. Since a long time, we run nightly a script permitting to display the storage usage of each user on the webmail, using internal calls. The usage on each mailbox is stored in a Mysql database. For several reasons, we would now want to use

Re: doveadm expunge returns error code 68

2017-09-08 Thread Florian Lohoff
Hi Aki, On Wed, Sep 06, 2017 at 11:26:30AM +0300, Aki Tuomi wrote: > On 05.09.2017 14:39, Florian Lohoff wrote: > > Hi, > > i am running basically this from cron: > > > > /usr/bin/doveadm -v expunge -u * mailbox INBOX.Spam SENTBEFORE 90d > > /usr/bin/doveadm -v expunge -u * mailbox INBOX.Trash SE

Re: Is it possible to disable pipelining in imapc?

2017-09-08 Thread Nagy, Attila
On 09/08/2017 01:53 PM, Aki Tuomi wrote: On 08.09.2017 14:50, Nagy, Attila wrote: Hi, I've a broken IMAP server, which doesn't support pipelining and fails on dovecot's attempt to do this ([C] is dovecot's imapc, [S] is the IMAP server): [C] 24 LOGIN "user" "pass" [S] 23 OK [C] 25 SELECT "INB

Re: pop3-login core dump when using TLSSTART on version dovecot-2.2.32 (OPEN)

2017-09-08 Thread Aki Tuomi
I assume you mean STARTTLS. Can you provide gdb /path/to/bin /path/to/core and provide output of bt full? Aki On 08.09.2017 15:01, arvid.ei...@telenor.com wrote: > Hi, > > Pop3-login are CORE-dumping when I log on with TLSSTART, I believe the same > will happen with imap-logon to, but I have no

pop3-login core dump when using TLSSTART on version dovecot-2.2.32 (OPEN)

2017-09-08 Thread Arvid.Eikas
Hi, Pop3-login are CORE-dumping when I log on with TLSSTART, I believe the same will happen with imap-logon to, but I have not tested it yet. The TLS session is coming up and it works fine until I log off, then it's core dump. Open sslvesrion is openssl-1.0.2k. We ran dovecot-2.2.27 before we

Re: Is it possible to disable pipelining in imapc?

2017-09-08 Thread Aki Tuomi
On 08.09.2017 14:50, Nagy, Attila wrote: > Hi, > > I've a broken IMAP server, which doesn't support pipelining and fails > on dovecot's attempt to do this ([C] is dovecot's imapc, [S] is the > IMAP server): > > [C] 24 LOGIN "user" "pass" > [S] 23 OK > [C] 25 SELECT "INBOX" > [C] 23 UID FETCH 2 (I

Is it possible to disable pipelining in imapc?

2017-09-08 Thread Nagy, Attila
Hi, I've a broken IMAP server, which doesn't support pipelining and fails on dovecot's attempt to do this ([C] is dovecot's imapc, [S] is the IMAP server): [C] 24 LOGIN "user" "pass" [S] 23 OK [C] 25 SELECT "INBOX" [C] 23 UID FETCH 2 (INTERNALDATE) [S] 25 OK [S] 23 BAD No mailbox selected Sa

Re: password reset

2017-09-08 Thread Olaf Hopp
On 09/08/2017 11:20 AM, Steffen Kaiser wrote: When I try to change the password with sudo, the timestamp on /etc/passwd gets updated but there is nothing logged to anything in /var/log/ /etc/shadow should get updated but not /etc/passwd ! make a copy of /etc/passwd before the change and loo

Re: password reset

2017-09-08 Thread Steffen Kaiser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, 7 Sep 2017, @lbutlr wrote: I have a local user who cannot login because of a forgotten password, so I went to reset her password with sudo passed After you did so, where does the passwort *not* work? In Dovecot? doveadm auth cache flu

Re: EOF from net_disconnect(fd)

2017-09-08 Thread Aki Tuomi
If you are using unix socket, you could use socat to see what's going on there. It might require little setting up though. Aki On 08.09.2017 10:16, Steffan Cline wrote: > I'm not the originator. I'm just trying to do some maintenance on the code to > make it work for CentOS 7. > > I'll check o

Re: EOF from net_disconnect(fd)

2017-09-08 Thread Steffan Cline
I'm not the originator. I'm just trying to do some maintenance on the code to make it work for CentOS 7. I'll check out those two. Any ideas on how to check exactly what's sent via the socket? If the EOF is sent, I know to dig further into the daemon code. Thanks, Steffan Cline stef...@hld

Re: EOF from net_disconnect(fd)

2017-09-08 Thread Steffan Cline
If you read the entire context you'll see code from a dovecot plugin and I'm trying to determine if dovecot is sending an EOF when closing the socket or not because the other end of the socket is at fault. From there I can check elsewhere. Dovecot code, dovecot list, made sense to try here fir