Hi! Dovecot is now a nearly 20 year old product, and during that time it has accumulated many different features and plugins in its core repository. We are starting to gradually remove some of these parts, which are unused, untested or deprecated. We will provide advance notification before removing anything. To start, the following features are likely to be removed in next few releases of Dovecot. - Authentication drivers: vpopmail, checkpassword, bsdauth, shadow, sia - Password schemes: HMAC-MD5, RPA, SKEY, PLAIN-MD4, LANMAN, NTLM, SMD5 - Authentication mechanisms: ntlm, rpa, skey - Dict drivers: memcached, memcached-ascii (use redis instead) - postfix postmap support - autocreate & autosubscribe plugins (use built-in auto=create/subscribe setting instead) - expire plugin (use built-in autoexpunge setting) - fts-squat plugin - mailbox alias plugin - mail-filter plugin - snarf plugin - xz compression algorithm For the authentication drivers that are being removed, we suggest using Lua as a replacement. See https://doc.dovecot.org/configuration_manual/authentication/lua_based_authentication/ For information about converting between password schemes, see https://wiki2.dovecot.org/HowTo/ConvertPasswordSchemes If you are using any of these features, please start preparing for their removal in the near future. Features will begin to be dropped as of v2.3.11. Additionally, the mbox format will no longer receive new development. It will still be maintained, however its use beyond migrations and other limited use cases will be discouraged. Please contact us via the mailing list if you have any questions. Regards, Dovecot Team -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 475 bytes Desc: not available URL: <https://dovecot.org/pipermail/dovecot-news/attachments/20200317/a5eacff2/attachment.sig>
With these planned changes, you mention they will be removed from 'core', so is the intention to allow more of these legacy plugins to more to their own repo's for those that might still want to use them? Eg, more in the the path of plug-in architecture? Just curious for clarity. Oh, and have to add.. still waiting on the variable capability patch, to allow plugins to modify advertised capabilities. (#pull request 86) This will allow us to provide our dove cot plugins more widely to the community. On 2020-03-16 11:50 p.m., Aki Tuomi wrote:> Hi! > > Dovecot is now a nearly 20 year old product, and during that time it has accumulated many different features and plugins in its core repository. > > We are starting to gradually remove some of these parts, which are unused, untested or deprecated. > We will provide advance notification before removing anything. > > To start, the following features are likely to be removed in next few releases of Dovecot. > > - Authentication drivers: vpopmail, checkpassword, bsdauth, shadow, sia > - Password schemes: HMAC-MD5, RPA, SKEY, PLAIN-MD4, LANMAN, NTLM, SMD5 > - Authentication mechanisms: ntlm, rpa, skey > - Dict drivers: memcached, memcached-ascii (use redis instead) > - postfix postmap support > - autocreate & autosubscribe plugins (use built-in auto=create/subscribe setting instead) > - expire plugin (use built-in autoexpunge setting) > - fts-squat plugin > - mailbox alias plugin > - mail-filter plugin > - snarf plugin > - xz compression algorithm > > For the authentication drivers that are being removed, we suggest using Lua as a replacement. See > https://doc.dovecot.org/configuration_manual/authentication/lua_based_authentication/ > > For information about converting between password schemes, see > https://wiki2.dovecot.org/HowTo/ConvertPasswordSchemes > > If you are using any of these features, please start preparing for their removal in the near > future. Features will begin to be dropped as of v2.3.11. > > Additionally, the mbox format will no longer receive new development. It will still be > maintained, however its use beyond migrations and other limited use cases will be discouraged. > > Please contact us via the mailing list if you have any questions. > > Regards, > Dovecot Team >-- "Catch the Magic of Linux..." ------------------------------------------------------------------------ Michael Peddemors, President/CEO LinuxMagic Inc. Visit us at http://www.linuxmagic.com @linuxmagic A Wizard IT Company - For More Info http://www.wizard.ca "LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd. ------------------------------------------------------------------------ 604-682-0300 Beautiful British Columbia, Canada This email and any electronic data contained are confidential and intended solely for the use of the individual or entity to which they are addressed. Please note that any views or opinions presented in this email are solely those of the author and are not intended to represent those of the company.
On 17/03/20 7:50 pm, Aki Tuomi wrote:> Dovecot is now a nearly 20 year old product, and during that time it has accumulated many different features and plugins in its core repository. > > We are starting to gradually remove some of these parts, which are unused, untested or deprecated. > We will provide advance notification before removing anything. > > To start, the following features are likely to be removed in next few releases of Dovecot.<snip laundry list of features to be removed over several point releases>> If you are using any of these features, please start preparing for their removal in the near > future. Features will begin to be dropped as of v2.3.11.Allow me to formally express my objections here. You provide repositories that automatically upgrade dovecot through point releases on various different package management systems, so here's what is going to happen: Anyone that uses features you remove in 2.3.11 will have dovecot break on them simply by running "yum update" (or equivalent) at that time. This could be production systems that have been running for years on platforms such as CentOS 7. Then things will break again in 2.3.12 (assuming you remove features then), and in 2.3.13, etc. So you want to have a product that has a reputation for purposefully breaking installations just for running security updates? Please consider holding off on removing features for the next major release, 2.4.0 instead. It makes sense to retain, in as much as is possible, feature backwards compatibility across a major release. Peter
<!doctype html>
<html>
<head>
<meta charset="UTF-8">
</head>
<body>
<div>
Those plugins can be resurrected with simple `git revert`.
</div>
<div>
<br>
</div>
<div>
Are you planning on open sourcing your client id authetication plugin?
</div>
<div>
<br>
</div>
<div>
Aki
</div>
<blockquote type="cite">
<div>
On 18/03/2020 01:44 Michael Peddemors <
<a
href="mailto:michael@linuxmagic.com">michael@linuxmagic.com</a>>
wrote:
</div>
<div>
<br>
</div>
<div>
<br>
</div>
<div>
With these planned changes, you mention they will be removed from
</div>
<div>
'core', so is the intention to allow more of these legacy plugins to
</div>
<div>
more to their own repo's for those that might still want to use them?
</div>
<div>
<br>
</div>
<div>
Eg, more in the the path of plug-in architecture? Just curious for
</div>
<div>
clarity.
</div>
<div>
<br>
</div>
<div>
Oh, and have to add.. still waiting on the variable capability patch, to
</div>
<div>
allow plugins to modify advertised capabilities. (#pull request 86)
</div>
<div>
<br>
</div>
<div>
This will allow us to provide our dove cot plugins more widely to the
</div>
<div>
community.
</div>
<div>
<br>
</div>
<div>
<br>
</div>
<div>
<br>
</div>
<div>
On 2020-03-16 11:50 p.m., Aki Tuomi wrote:
</div>
<blockquote type="cite">
<div>
Hi!
</div>
<div>
<br>
</div>
<div>
Dovecot is now a nearly 20 year old product, and during that time it has
accumulated many different features and plugins in its core repository.
</div>
<div>
<br>
</div>
<div>
We are starting to gradually remove some of these parts, which are unused,
untested or deprecated.
</div>
<div>
We will provide advance notification before removing anything.
</div>
<div>
<br>
</div>
<div>
To start, the following features are likely to be removed in next few
releases of Dovecot.
</div>
<div>
<br>
</div>
<div>
- Authentication drivers: vpopmail, checkpassword, bsdauth, shadow, sia
</div>
<div>
- Password schemes: HMAC-MD5, RPA, SKEY, PLAIN-MD4, LANMAN, NTLM, SMD5
</div>
<div>
- Authentication mechanisms: ntlm, rpa, skey
</div>
<div>
- Dict drivers: memcached, memcached-ascii (use redis instead)
</div>
<div>
- postfix postmap support
</div>
<div>
- autocreate & autosubscribe plugins (use built-in
auto=create/subscribe setting instead)
</div>
<div>
- expire plugin (use built-in autoexpunge setting)
</div>
<div>
- fts-squat plugin
</div>
<div>
- mailbox alias plugin
</div>
<div>
- mail-filter plugin
</div>
<div>
- snarf plugin
</div>
<div>
- xz compression algorithm
</div>
<div>
<br>
</div>
<div>
For the authentication drivers that are being removed, we suggest using Lua
as a replacement. See
</div>
<div>
<a
href="https://doc.dovecot.org/configuration_manual/authentication/lua_based_authentication/"
rel="noopener"
target="_blank">https://doc.dovecot.org/configuration_manual/authentication/lua_based_authentication/</a>
</div>
<div>
<br>
</div>
<div>
For information about converting between password schemes, see
</div>
<div>
<a
href="https://wiki2.dovecot.org/HowTo/ConvertPasswordSchemes"
rel="noopener"
target="_blank">https://wiki2.dovecot.org/HowTo/ConvertPasswordSchemes</a>
</div>
<div>
<br>
</div>
<div>
If you are using any of these features, please start preparing for their
removal in the near
</div>
<div>
future. Features will begin to be dropped as of v2.3.11.
</div>
<div>
<br>
</div>
<div>
Additionally, the mbox format will no longer receive new development. It
will still be
</div>
<div>
maintained, however its use beyond migrations and other limited use cases
will be discouraged.
</div>
<div>
<br>
</div>
<div>
Please contact us via the mailing list if you have any questions.
</div>
<div>
<br>
</div>
<div>
Regards,
</div>
<div>
Dovecot Team
</div>
<div>
<br>
</div>
</blockquote>
<div>
<br>
</div>
<div>
<br>
</div>
<div>
--
</div>
<div>
"Catch the Magic of Linux..."
</div>
<div>
------------------------------------------------------------------------
</div>
<div>
Michael Peddemors, President/CEO LinuxMagic Inc.
</div>
<div>
Visit us at
<a href="http://www.linuxmagic.com" rel="noopener"
target="_blank">http://www.linuxmagic.com</a> @linuxmagic
</div>
<div>
A Wizard IT Company - For More Info
<a href="http://www.wizard.ca" rel="noopener"
target="_blank">http://www.wizard.ca</a>
</div>
<div>
"LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices
Ltd.
</div>
<div>
------------------------------------------------------------------------
</div>
<div>
604-682-0300 Beautiful British Columbia, Canada
</div>
<div>
<br>
</div>
<div>
This email and any electronic data contained are confidential and intended
</div>
<div>
solely for the use of the individual or entity to which they are addressed.
</div>
<div>
Please note that any views or opinions presented in this email are solely
</div>
<div>
those of the author and are not intended to represent those of the company.
</div>
</blockquote>
<div>
<br>
</div>
<div class="io-ox-signature">
<pre>---
Aki Tuomi</pre>
</div>
</body>
</html>
18.03.20, 04:32 CET, Peter:> Please consider holding off on removing features for the next major > release, 2.4.0 instead. It makes sense to retain, in as much as is > possible, feature backwards compatibility across a major release.Seconded! That you are going to drop features from the code base that are old and rarely used is understandable. Doing so in a minor release is not. -- Regards mks
> Additionally, the mbox format will no longer receive new development. It will still be > maintained, however its use beyond migrations and other limited use cases will be discouraged.As someone who digs into instructions to find just the bits and pieces needed to get things going, is there any guidance on how to configure dovecot to use something other than mbox? At the moment, we have postfix delivering mail as normal and then dovecot providing the IMAP layer on top of that mbox file. Thank you. Philip On Tue, 17 Mar 2020 at 06:51, Aki Tuomi <aki.tuomi at dovecot.fi> wrote:> > Hi! > > Dovecot is now a nearly 20 year old product, and during that time it has accumulated many different features and plugins in its core repository. > > We are starting to gradually remove some of these parts, which are unused, untested or deprecated. > We will provide advance notification before removing anything. > > To start, the following features are likely to be removed in next few releases of Dovecot. > > - Authentication drivers: vpopmail, checkpassword, bsdauth, shadow, sia > - Password schemes: HMAC-MD5, RPA, SKEY, PLAIN-MD4, LANMAN, NTLM, SMD5 > - Authentication mechanisms: ntlm, rpa, skey > - Dict drivers: memcached, memcached-ascii (use redis instead) > - postfix postmap support > - autocreate & autosubscribe plugins (use built-in auto=create/subscribe setting instead) > - expire plugin (use built-in autoexpunge setting) > - fts-squat plugin > - mailbox alias plugin > - mail-filter plugin > - snarf plugin > - xz compression algorithm > > For the authentication drivers that are being removed, we suggest using Lua as a replacement. See > https://doc.dovecot.org/configuration_manual/authentication/lua_based_authentication/ > > For information about converting between password schemes, see > https://wiki2.dovecot.org/HowTo/ConvertPasswordSchemes > > If you are using any of these features, please start preparing for their removal in the near > future. Features will begin to be dropped as of v2.3.11. > > Additionally, the mbox format will no longer receive new development. It will still be > maintained, however its use beyond migrations and other limited use cases will be discouraged. > > Please contact us via the mailing list if you have any questions. > > Regards, > Dovecot Team
??? xz compression support for mdbox is used extensively here. Why are you planning to remove it? El 17/03/2020 a las 7:50, Aki Tuomi escribi?:> Hi! > > Dovecot is now a nearly 20 year old product, and during that time it has accumulated many different features and plugins in its core repository. > > We are starting to gradually remove some of these parts, which are unused, untested or deprecated. > We will provide advance notification before removing anything. > > To start, the following features are likely to be removed in next few releases of Dovecot. > > - Authentication drivers: vpopmail, checkpassword, bsdauth, shadow, sia > - Password schemes: HMAC-MD5, RPA, SKEY, PLAIN-MD4, LANMAN, NTLM, SMD5 > - Authentication mechanisms: ntlm, rpa, skey > - Dict drivers: memcached, memcached-ascii (use redis instead) > - postfix postmap support > - autocreate & autosubscribe plugins (use built-in auto=create/subscribe setting instead) > - expire plugin (use built-in autoexpunge setting) > - fts-squat plugin > - mailbox alias plugin > - mail-filter plugin > - snarf plugin > - xz compression algorithm > > For the authentication drivers that are being removed, we suggest using Lua as a replacement. See > https://doc.dovecot.org/configuration_manual/authentication/lua_based_authentication/ > > For information about converting between password schemes, see > https://wiki2.dovecot.org/HowTo/ConvertPasswordSchemes > > If you are using any of these features, please start preparing for their removal in the near > future. Features will begin to be dropped as of v2.3.11. > > Additionally, the mbox format will no longer receive new development. It will still be > maintained, however its use beyond migrations and other limited use cases will be discouraged. > > Please contact us via the mailing list if you have any questions. > > Regards, > Dovecot Team > > _______________________________________________ > Dovecot-news mailing list > Dovecot-news at dovecot.org > https://dovecot.org/mailman/listinfo/dovecot-news-------------- next part -------------- An HTML attachment was scrubbed... URL: <https://dovecot.org/pipermail/dovecot/attachments/20200318/85971b01/attachment.html>
Thank-you for the heads-up notification. It is very helpful for
planning. Unfortunately we do not allow any languages to be installed
on production systems (per the security people).
As we do use autocreate/subscribe plugins, could you please direct us to
any workaround for our current use of
plugin {
autocreate = Sent
autocreate2 = Drafts
autocreate3 = SPAM
autocreate4 = Junk E-mail
autosubscribe = Sent
autosubscribe2 = Drafts
autosubscribe3 = SPAM
autosubscribe4 = Junk E-mail
quota = maildir:User quota
...
I'm sure that many would appreciate any pointers or advise to any other
plugin replacement methods or is the user-base expected to learn lua?
We have used dovecot and greatly appreciate the work that the dovecot
team have provided for us.
Kind regards, Dewayne.
------ Original Message ------>[...] >To start, the following features are likely to be removed in next few releases of Dovecot. >[...] > - mailbox alias plugin >Like autocreate, autosubscribe, and expire - Is there a built-in feature that makes this plugin obsolete? --- Daniel