userdb / user map with director

2015-08-10 Thread Will Yardley
This is with dovecot-ee 2.2.18.2 on RHEL6 To handle backend and frontend on same machine, I'm using the following hack, as previously outlined here: [in director instance config] passdb { # See thread ending in: # http://dovecot.org/pipermail/dovecot/2012-June/083817.html # for why this

Re: EL6 EE package dependencies

2015-04-02 Thread Will Yardley
On Fri, Apr 03, 2015 at 09:28:32AM +0900, Timo Sirainen wrote: > On 03 Apr 2015, at 04:22, Will Yardley wrote: > > I've been trying to upgrade Dovecot-ee package (on EL6/x86_64) from > > 2.2.15.8-1 to 2.2.16.2-1. It's complaining on these two dependencies:

Re: EL6 EE package dependencies

2015-04-02 Thread Will Yardley
On Thu, Apr 02, 2015 at 02:53:26PM -0600, Eric Broch wrote: > On 4/2/2015 1:22 PM, Will Yardley wrote: > > I've been trying to upgrade Dovecot-ee package (on EL6/x86_64) from > > 2.2.15.8-1 to 2.2.16.2-1. It's complaining on these two dependencies: > > > >

EL6 EE package dependencies

2015-04-02 Thread Will Yardley
I've been trying to upgrade Dovecot-ee package (on EL6/x86_64) from 2.2.15.8-1 to 2.2.16.2-1. It's complaining on these two dependencies: liblz4.so.1 libtextcat.so.0 These would both seem to be related to plugins, and don't seem to be required as package dependencies by the RPM fr

Re: Dovecot 2.1.7 still accepting SSLv3 though disabled?

2015-03-16 Thread Will Yardley
On Sun, Mar 15, 2015 at 02:42:00PM +0100, A. Schulze wrote: > Thomas Preissler: > The logging is right, but SSLv3 isn't used. > Today it's not uncommon that application /log/ SSLv3, where they /mean/ TLS1.x > > Some days ago where TLSv1 became available there wasn't a great > difference between

Re: Dovecot-ee

2014-12-17 Thread Will Yardley
On Fri, Oct 17, 2014 at 12:08:38PM -0700, Timo Sirainen wrote: > On 17 Oct 2014, at 07:24, Davide wrote: > > Hi to all, i found that dovecot-ee repository access is free 0,00 $ > > cost; i'm running dovecot community 2.2.13 can i migrate my system > > to dovecot-ee? What are difference between D

Re: disabling certain ciphers

2014-12-02 Thread Will Yardley
On Tue, Dec 02, 2014 at 10:12:22AM -0800, Darren Pilgrim wrote: > On 12/2/2014 10:05 AM, Will Yardley wrote: > > I had some problems the first few times I restarted with ssl-params > > seeming to hang, but it finally works. > > That would have been dovecot generating the 4

Re: disabling certain ciphers

2014-12-02 Thread Will Yardley
I had some problems the first few times I restarted with ssl-params seeming to hang, but it finally works. I am able to get it to work with just: ssl = required ssl_dh_parameters_length = 4096 ssl_parameters_regenerate = 0 ssl_prefer_server_ciphers = yes ssl_protocols = !SSLv2 !SSLv3 ssl_cipher_li

Re: disabling certain ciphers

2014-12-02 Thread Will Yardley
On Tue, Dec 02, 2014 at 08:34:50AM -0800, Darren Pilgrim wrote: > On 12/1/2014 9:44 PM, Will Yardley wrote: > > On Mon, Dec 01, 2014 at 09:27:48PM -0800, Darren Pilgrim wrote: > >> On 12/1/2014 4:43 PM, Will Yardley wrote: > >>> Can you use both ssl_protocols *an

Re: disabling certain ciphers

2014-12-01 Thread Will Yardley
On Mon, Dec 01, 2014 at 09:27:48PM -0800, Darren Pilgrim wrote: > On 12/1/2014 4:43 PM, Will Yardley wrote: > > Can you use both ssl_protocols *and* ssl_cipher_list in the same config > > (in a way that's sane)? > > > Is there a way to exclude these ciphers, while sti

disabling certain ciphers

2014-12-01 Thread Will Yardley
Can you use both ssl_protocols *and* ssl_cipher_list in the same config (in a way that's sane)? ssl_protocols (>= 2.1) and ssl_cipher_list co-exist, or are they mutually exclusive? I have a Dovecot 2.2.13 system, and I tried setting: I also tried things like ssl_cipher_list = HIGH or ssl_ciphe

Re: Dbox and Exim

2014-10-09 Thread Will Yardley
On Thu, Oct 09, 2014 at 06:03:57PM +0200, Philon wrote: > > I’m really curious as to if I really understand you correctly. Neither Exim > nor Postfix do need to support any mailbox format. They both should hand > incoming mail to either LDA or LMTP. Postfix has an LDA (local(8)). I believe Exim a

Re: Does dovecot work OK on *BSD?

2014-09-25 Thread Will Yardley
On Thu, Sep 25, 2014 at 12:01:01PM -0500, Larry Rosenman wrote: > I run dovecot on FreeBSD and its in ports.. no issues at all and the > maintainer keeps it current. I don't use it very much (mostly read mail locally, and it's a single-user system), but I have no problems with Dovecot (2.2.x, bui

Re: doveadm with multiple instances on same machine(s)

2014-09-22 Thread Will Yardley
On Fri, Sep 19, 2014 at 09:55:51AM +0300, Teemu Huovila wrote: > On 09/19/2014 03:04 AM, Will Yardley wrote: > > director_doveadm_port = 8889 [] > > doveadm_proxy_port = > In the 2.2 series you can write this as "doveadm_port", I think. Thanks for the heads

Re: negative auth cache?

2014-09-18 Thread Will Yardley
On Thu, Sep 18, 2014 at 11:41:14PM -0700, Will Yardley wrote: > (is it connecting to the wrong instance's auth socket? the path to the > 'main' instance's auth socket is /var/run/dovecot-main/auth-master) > > and then I see > # doveadm -i main auth cache flu

Re: negative auth cache?

2014-09-18 Thread Will Yardley
On Fri, Sep 19, 2014 at 08:21:51AM +0200, Steffen Kaiser wrote: > On Thu, 18 Sep 2014, Will Yardley wrote: > > > Also, how can I flush the cache for a non-default instance's cache using > > doveadm -- "doveadm auth cache flush" doesn't seem to have an '-

Re: negative auth cache?

2014-09-18 Thread Will Yardley
On Fri, Sep 19, 2014 at 02:34:34AM +0200, Reindl Harald wrote: > Am 19.09.2014 um 02:09 schrieb Will Yardley: > > > > Also, how can I flush the cache for a non-default instance's cache using > > doveadm -- "doveadm auth cache flush" doesn'

negative auth cache?

2014-09-18 Thread Will Yardley
I am using Dovecot 2.2.13, which doesn't yet seem to have the $auth_cache_negative parameter. Should the negative cache value honor $auth_cache_ttl then? I had a problem where some of our ldap systems were reinitialized. Some users, presumably those who tried to login while their records were retu

doveadm with multiple instances on same machine(s)

2014-09-18 Thread Will Yardley
Couple questions about running doveadm with multiple instances... I have Dovecot 2.2.13 on RHEL6 running across 3 boxes, each with a director and main instance running. When I try to lookup something on the main instance (which is handling user auth) via its auth-userdb socket directly, I get an er

Re: Creating a backup of incoming mail

2014-09-06 Thread Will Yardley
On Mon, Sep 01, 2014 at 09:33:52AM +0200, Patrick De Zordo wrote: > To backup all mail (incoming and outgoing), BCC all mails, you could > do the following.. > Add to your "/etc/postfix/main.cf" the following: > ---8<

Re: Panic/backtrace in dovecot 2.2.13

2014-09-06 Thread Will Yardley
I'm seeing some similar problems, sometimes, but not always, resulting in a backtrace -- recently migrated (where we had POP3 access via an old version of Courier, and IMAP via an older version of Dovecot; rebuilt the indices for POP3 users using the script). A few cases, where it looks like Doveco

Re: Defer email via LMTP when there is 'no space left on device' instead of rejecting it

2014-08-11 Thread Will Yardley
On Sun, Aug 10, 2014 at 06:24:47PM +0200, Luuk wrote: > On 10-8-2014 06:18, Will Yardley wrote: > > Depends on the environment; in many cases, the admin could, or may even > > be expected to, raise the quota. > > !but should not! > > Quota should be set according

Re: Defer email via LMTP when there is 'no space left on device' instead of rejecting it

2014-08-09 Thread Will Yardley
On Sun, Aug 10, 2014 at 01:31:47AM +0300, Timo Sirainen wrote: > Problems that admins can solve are temporary errors for users and > the'll need an error logged. Problems that are caused by users > themselves (like over quota) are usually not temporary errors and they > shouldn't have errors logg

Re: prefix behavior with Dovecot / Squirrelmail

2014-08-05 Thread Will Yardley
On Mon, Aug 04, 2014 at 11:31:42PM -0700, Will Yardley wrote: > namespace private { > separator = . > prefix = Mail. > inbox = yes > } ps - Will simply making the Mail. namespace "hidden" fix the problem, while keeping things backwards compatible for clients who ha

prefix behavior with Dovecot / Squirrelmail

2014-08-04 Thread Will Yardley
Old: Dovecot 1.1.18 + Squirrelmail 1.4.8 + Imapproxy New: Dovecot 2.2.10 + Squirrelmail 1.4.22 (no Imapproxy) In both, we have: [dovecot config] namespace private { separator = . prefix = Mail. inbox = yes } (The 'Mail' prefix is set this way for compatibility reasons) $imap_server_type

ulimit warning when restarting

2014-07-17 Thread Will Yardley
When restarting Dovecot 2.2.10 (via atrpms) on RHEL 6, I get the error: Warning: fd limit (ulimit -n) is lower than required under max. load (1024 < 4096), because of default_client_limit # doveconf default_internal_user default_internal_user = dovecot Should dovecot print this warning based on

Re: ATrpms repo

2014-07-15 Thread Will Yardley
On Tue, Jul 15, 2014 at 06:04:22PM +, Pascal Volk wrote: > On 07/15/2014 03:42 AM Will Yardley wrote: > > Not only is > > http://atrpms.net/name/dovecot/ > > empty, but: > > http://packages.atrpms.net/dist/el6/ > > seems to return a 404. Some of the mir

Re: ATrpms repo

2014-07-15 Thread Will Yardley
On Tue, Jul 15, 2014 at 10:43:32AM +0200, Reindl Harald wrote: > > > > Not only is > > http://atrpms.net/name/dovecot/ > > empty, but: > > http://packages.atrpms.net/dist/el6/ > > seems to return a 404. Some of the mirrors still have the packages, but > > does anyone know if they're going to con

director / main instance

2014-07-14 Thread Will Yardley
I have directors and backend servers running on the same systems (x3). To be able to run doveadm foo with a minimum of fuss (without having to list socket paths explicitly), should it be the director that's the "default"? If so, is it safe to symlink '/var/run/dovecot' to '/var/run/dovecot-director

ATrpms repo

2014-07-14 Thread Will Yardley
Tried mailing the maintainer, but didn't get a response -- anyone know what's happened to the ATrpms repo? Not only is http://atrpms.net/name/dovecot/ empty, but: http://packages.atrpms.net/dist/el6/ seems to return a 404. Some of the mirrors still have the packages, but does anyone know if the

Re: [Dovecot] director with multiple instances

2014-06-05 Thread Will Yardley
So, going to latest 2.2 RPM from ATRPMs does seem to fix the problem (that is, the same config works as expected). So, my question then is, in terms of indices, dovecot-uidlist, etc., is it safe to move from Dovecot 1.0.7 directly to 2.2.10? Also, even if I put: doveadm_socket_path = localhost:88

Re: [Dovecot] director with multiple instances

2014-06-05 Thread Will Yardley
I'm guessing this is the most significant issue: Jun 3 16:22:33 retr01 dovecot: director: Fatal: No inet_listeners defined for director service (for standalone keep director_servers empty) What confuses me, is that not only do I have this in my config: service director { fifo_listener login/

Re: [Dovecot] director with multiple instances

2014-06-03 Thread Will Yardley
And I realize that doveadm isn't setup properly yet, and that director_doveadm_port needs to be doveadm's inet_listener, not director's as it is now. Presumably this should just affect being able to run doveadm, though, and not cause the problems I mentioned? It would be really convenient if runni

[Dovecot] director with multiple instances

2014-06-03 Thread Will Yardley
I'm experiencing some problems similar to those described in http://dovecot.org/list/dovecot/2012-July/137250.html except with 2.0.9. Adding http://dovecot.org/list/dovecot/2012-July/084906.html to the main config didn't seem to help, nor did setting the list of director and backend servers to ju

Re: [Dovecot] list all emails from command line?

2014-06-02 Thread Will Yardley
This seems like a pretty complicated (and time / labor intensive) way to solve the problem. That said, if this is the way you want to approach the problem, Python's imaplib is pretty good at doing this kind of thing. This may not format it exactly the way you want, but it should give you a startin

Re: [Dovecot] Copies of outgoing emails in the Sent folder

2014-05-25 Thread Will Yardley
On Fri, May 23, 2014 at 02:26:37PM +0200, Steffen Kaiser wrote: > > > And how can you do it for the entire server? > > Well, as I said, "in postfix". It's your MTA all your users are going > through. How to do it with postfix, I don't know, because I do not run > no postfix. OT for this list, bu

[Dovecot] director with same director / backend servers

2014-05-22 Thread Will Yardley
I know this has been covered somewhat, but I'm still not totally clear. I'm trying to setup a 3 node cluster with 3 directors and 3 backend systems. This post (from 2012) suggests that proxy_maybe should work with director: http://www.dovecot.org/list/dovecot/2012-December/069806.html However, th

Re: [Dovecot] UIDL conversion courier -> dovecot

2013-10-25 Thread Will Yardley
Sorry for the self-followup... Looks like I just needed to look at the Courier v0 instructions and set pop3_uidl_format = %f That seems to work as expected, and the bonus is, I'll have the UIDLs the clients expect without any conversion. /wby

[Dovecot] UIDL conversion courier -> dovecot

2013-10-25 Thread Will Yardley
I've got a weird split setup where POP3 is currently handled by Courier (courier-imap-3.0.2 distribution), and IMAP is currently handled by the RHEL 5 version of Dovecot (1.0.7) I'm trying to figure out a way to convert the POP3 UIDLs (in cases where the courierpop3dsizelist is newer than dovecot-