[Dovecot] Auth USER lookup failed

Angel L. Mateo
Tue, 06 Nov 2012 11:08:05 -0000

Hello,

	I'm running dovecot 2.1.9 and I'm trying to configure shared folders.
So, as described at http://wiki2.dovecot.org/SharedMailboxes/Shared I
have configured a namespace like this:

namespace {
	type = shared
	separator = /
	prefix = shared/%%u/
	location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u
	subscriptions = no
	list = yes
}

	In one user (user1) I have configured ACLs so another one (user2) has
access to a folder.

	Now, I want to susbscribe user2 to this folder. The problem I have is
that whenever I try to list folders for this user (running thunderbird
client) I get a panic and an error in the dovecot server (I have
attached the complete log). The error says:

Nov  6 11:58:56 myotis30 dovecot: auth: Error: userdb(user1): client
doesn't have lookup permissions for this user: userdb uid (113246)
doesn't match peer uid (14585) (change userdb socket permissions)
Nov  6 11:58:56 myotis30 dovecot: auth: Debug: master out: FAIL#0112
Nov  6 11:58:56 myotis30 dovecot: imap(user2): Error: user user1: Auth
USER lookup failed
Nov  6 11:58:56 myotis30 dovecot: imap(user2): Debug: auth input:
Nov  6 11:58:56 myotis30 dovecot: imap(user2): Error: Couldn't create
namespace 'shared/' for user user1: userdb didn't return a home
directory, but plugin setting quota used it (%h): dict:User
quota::file:%h/Maildir/dovecot.quota

	It seems that imap process running for user2 is trying to a user lookup
that fails. So I have manually tried it

root at myotis30:/etc/dovecot/conf.d# sudo -u user2 doveadm user user2
userdb: user2
   home      : <homeDirectory>
   uid       : 14585
   gid       : 404

root at myotis30:/etc/dovecot/conf.d# sudo -u user2 doveadm user user1
doveadm(user2): Error: user user1: Auth USER lookup failed
doveadm(user2): Error: userdb lookup failed for user1

	I have checked the socket permissions, but they are 0666 (if I'm
looking the right socket):

root at myotis30:/etc/dovecot/conf.d# ls -l /var/run/dovecot/auth-userdb
srwxrwxrwx 1 dovecot root 0 nov  6 11:43 /var/run/dovecot/auth-userdb

	In fact, I have tried to put all sockets with permissions 0666 and
0777, but the error persists.

	Any idea?

--
Angel L. Mateo Mart?nez
Secci?n de Telem?tica
?rea de Tecnolog?as de la Informaci?n
y las Comunicaciones Aplicadas (ATICA)
http://www.um.es/atica
Tfo: 868889150
Fax: 868888337
-------------- next part --------------
Nov  6 11:58:55 myotis30 dovecot: auth: Debug: master in:
USER#0111#011user1#011service=imap
Nov  6 11:58:55 myotis30 dovecot: auth: Debug: prefetch(user1): passdb
didn't return userdb entries, trying the next userdb
Nov  6 11:58:55 myotis30 dovecot: auth: Debug: userdb-cache(user1): hit:
user1#011home=/home/alumnos/46/113246#011uid=113246#011gid=1001#011quota_rule=*:storage=10G
Nov  6 11:58:55 myotis30 dovecot: auth: Error: userdb(user1): client doesn't
have lookup permissions for this user: userdb uid (113246) doesn't match
peer uid (14585) (change userdb socket permissions)
Nov  6 11:58:55 myotis30 dovecot: auth: Debug: master out: FAIL#0111
Nov  6 11:58:55 myotis30 dovecot: imap(user2): Error: user user1: Auth USER
lookup failed
Nov  6 11:58:55 myotis30 dovecot: imap(user2): Debug: auth input:
Nov  6 11:58:55 myotis30 dovecot: imap(user2): Error: Couldn't create
namespace 'shared/' for user user1: userdb didn't return a home
directory, but plugin setting quota used it (%h): dict:User
quota::file:%h/Maildir/dovecot.quota
Nov  6 11:58:55 myotis30 dovecot: auth: Debug: master in:
USER#0112#011user1#011service=imap
Nov  6 11:58:55 myotis30 dovecot: auth: Debug: prefetch(user1): passdb
didn't return userdb entries, trying the next userdb
Nov  6 11:58:55 myotis30 dovecot: auth: Debug: userdb-cache(user1): hit:
user1#011home=/home/alumnos/46/113246#011uid=113246#011gid=1001#011quota_rule=*:storage=10G
Nov  6 11:58:55 myotis30 dovecot: auth: Error: userdb(user1): client doesn't
have lookup permissions for this user: userdb uid (113246) doesn't match
peer uid (14585) (change userdb socket permissions)
Nov  6 11:58:55 myotis30 dovecot: auth: Debug: master out: FAIL#0112
Nov  6 11:58:55 myotis30 dovecot: imap(user2): Error: user user1: Auth USER
lookup failed
Nov  6 11:58:55 myotis30 dovecot: imap(user2): Debug: auth input:
Nov  6 11:58:55 myotis30 dovecot: imap(user2): Error: Couldn't create
namespace 'shared/' for user user1: userdb didn't return a home
directory, but plugin setting quota used it (%h): dict:User
quota::file:%h/Maildir/dovecot.quota
Nov  6 11:58:55 myotis30 dovecot: imap(user2): Warning: Subscriptions file
/home/pas/85/014585/Maildir/subscriptions: Removing invalid entry:
shared/user1/kk
Nov  6 11:58:55 myotis30 dovecot: imap(user2): Panic: shared mailbox list:
Can't return a temp prefix for 'shared/'
Nov  6 11:58:55 myotis30 dovecot: imap(user2): Error: Raw backtrace:
/usr/lib/dovecot/libdovecot.so.0(+0x3f9ca) [0x7f1a5770c9ca] ->
/usr/lib/dovecot/libdovecot.so.0(+0x3fa0e) [0x7f1a5770ca0e] ->
/usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f1a576e0d90] ->
/usr/lib/dovecot/libdovecot-storage.so.0(+0x2991d) [0x7f1a5798291d] ->
/usr/lib/dovecot/libdovecot-storage.so.0(mailbox_list_subscriptions_refresh+0x2c1)
[0x7f1a579dd801] ->
/usr/lib/dovecot/libdovecot-storage.so.0(mailbox_list_iter_init_multiple+0x71)
[0x7f1a579d0dc1] -> dovecot/imap(+0xd598) [0x7f1a57e84598] ->
dovecot/imap(cmd_list_full+0x4b8) [0x7f1a57e84bb8] ->
dovecot/imap(command_exec+0x3d) [0x7f1a57e8949d] -> dovecot/imap(+0x114ee)
[0x7f1a57e884ee] -> dovecot/imap(+0x115c5) [0x7f1a57e885c5] ->
dovecot/imap(client_handle_input+0x125) [0x7f1a57e88815] ->
dovecot/imap(client_input+0x65) [0x7f1a57e890f5] ->
/usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7f1a57719946] ->
/usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xa7) [0x7f1a5771a637]
-> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7f1a57719358] ->
/usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f1a57704fe3] ->
dovecot/imap(main+0x295) [0x7f1a57e807e5] ->
/lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xed) [0x7f1a5732f76d] ->
dovecot/imap(+0x9969) [0x7f1a57e80969]
Nov  6 11:58:55 myotis30 dovecot: imap(user2): Fatal: master: service(imap):
child 6604 killed with signal 6 (core dumps disabled)
Nov  6 11:58:55 myotis30 dovecot: auth: Debug: auth client connected (pid=6657)
Nov  6 11:58:55 myotis30 dovecot: auth: Debug: client in:
AUTH#0111#011PLAIN#011service=imap#011session=zbsBfdHN9ACbNkMF#011lip=155.54.211.169#011rip=155.54.67.5#011lport=143#011rport=56308
Nov  6 11:58:55 myotis30 dovecot: auth: Debug: client out: CONT#0111#011
Nov  6 11:58:55 myotis30 dovecot: auth: Debug: client in: CONT<hidden>
Nov  6 11:58:55 myotis30 dovecot: auth: Debug:
cache(user2,155.54.67.5,<zbsBfdHN9ACbNkMF>): hit:
<hidden>#011userdb_home=/home/pas/85/014585#011userdb_uid=14585#011userdb_gid=404
Nov  6 11:58:55 myotis30 dovecot: auth: Debug: client out: OK#0111#011user=user2
Nov  6 11:58:55 myotis30 dovecot: auth: Debug: master in:
REQUEST#0111406664705#0116657#0111#0117c7aa4c4342037d77879c13562726d53
Nov  6 11:58:55 myotis30 dovecot: auth: Debug:
prefetch(user2,155.54.67.5,<zbsBfdHN9ACbNkMF>): success
Nov  6 11:58:55 myotis30 dovecot: auth: Debug: master out:
USER#0111406664705#011user2#011home=/home/pas/85/014585#011uid=14585#011gid=404
Nov  6 11:58:55 myotis30 dovecot: imap: Debug: Loading modules from directory:
/usr/lib/dovecot/modules
Nov  6 11:58:55 myotis30 dovecot: imap: Debug: Module loaded:
/usr/lib/dovecot/modules/lib01_acl_plugin.so
Nov  6 11:58:55 myotis30 dovecot: imap: Debug: Module loaded:
/usr/lib/dovecot/modules/lib02_imap_acl_plugin.so
Nov  6 11:58:55 myotis30 dovecot: imap: Debug: Module loaded:
/usr/lib/dovecot/modules/lib02_lazy_expunge_plugin.so
Nov  6 11:58:55 myotis30 dovecot: imap: Debug: Module loaded:
/usr/lib/dovecot/modules/lib10_quota_plugin.so
Nov  6 11:58:55 myotis30 dovecot: imap: Debug: Module loaded:
/usr/lib/dovecot/modules/lib11_imap_quota_plugin.so
Nov  6 11:58:55 myotis30 dovecot: imap: Debug: Module loaded:
/usr/lib/dovecot/modules/lib20_zlib_plugin.so
Nov  6 11:58:55 myotis30 dovecot: imap(user2): Debug: Effective uid=14585,
gid=404, home=/home/pas/85/014585
Nov  6 11:58:55 myotis30 dovecot: imap(user2): Debug: acl: No acl_shared_dict
setting - shared mailbox listing is disabled
Nov  6 11:58:55 myotis30 dovecot: imap(user2): Debug: Quota root: name=User
quota backend=dict args=:file:/home/pas/85/014585/Maildir/dovecot.quota
Nov  6 11:58:55 myotis30 dovecot: imap(user2): Debug: Quota rule: root=User
quota mailbox=* bytes=10737418240 messages=0
Nov  6 11:58:55 myotis30 dovecot: imap(user2): Debug: Quota rule: root=User
quota mailbox=Trash bytes=+1073741824 messages=0
Nov  6 11:58:55 myotis30 dovecot: imap(user2): Debug: dict quota: user=user2,
uri=file:/home/pas/85/014585/Maildir/dovecot.quota, noenforcing=0
Nov  6 11:58:55 myotis30 dovecot: imap(user2): Debug: Namespace : type=private,
prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes
location=maildir:~/Maildir:INDEX=/var/indexes/user2
Nov  6 11:58:55 myotis30 dovecot: imap(user2): Debug: maildir++:
root=/home/pas/85/014585/Maildir, index=/var/indexes/user2, control=,
inbox=/home/pas/85/014585/Maildir, altNov  6 11:58:55 myotis30 dovecot:
imap(user2): Debug: acl: initializing backend with data: vfile
Nov  6 11:58:55 myotis30 dovecot: imap(user2): Debug: acl: acl username = user2
Nov  6 11:58:55 myotis30 dovecot: imap(user2): Debug: acl: owner = 1
Nov  6 11:58:55 myotis30 dovecot: imap(user2): Debug: acl vfile: Global ACL
directory: (none)
Nov  6 11:58:55 myotis30 dovecot: imap(user2): Debug: Namespace : type=shared,
prefix=shared/%u/, sep=/, inbox=no, hidden=no, list=yes, subscriptions=no
location=maildir:%h/Maildir:INDEX=~/Maildir/shared/%u
Nov  6 11:58:55 myotis30 dovecot: imap(user2): Debug: shared:
root=/var/run/dovecot, index=, control=, inbox=, altNov  6 11:58:55 myotis30
dovecot: imap(user2): Debug: acl: initializing backend with data: vfile
Nov  6 11:58:55 myotis30 dovecot: imap(user2): Debug: acl: acl username = user2
Nov  6 11:58:55 myotis30 dovecot: imap(user2): Debug: acl: owner = 0
Nov  6 11:58:55 myotis30 dovecot: imap(user2): Debug: acl vfile: Global ACL
directory: (none)
Nov  6 11:58:55 myotis30 dovecot: imap(user2): Debug: Namespace : type=private,
prefix=BORRADOS/, sep=/, inbox=no, hidden=no, list=no, subscriptions=yes
location=maildir:~/Maildir/expunged/
Nov  6 11:58:55 myotis30 dovecot: imap(user2): Debug: maildir++:
root=/home/pas/85/014585/Maildir/expunged, index=, control=, inbox=, altNov  6
11:58:55 myotis30 dovecot: imap-login: Login: user=<user2>, method=PLAIN,
rip=155.54.67.5, lip=155.54.211.169, mpid=6633, session=<zbsBfdHN9ACbNkMF>
Nov  6 11:58:55 myotis30 dovecot: imap(user2): Debug: acl: initializing backend
with data: vfile
Nov  6 11:58:55 myotis30 dovecot: imap(user2): Debug: acl: acl username = user2
Nov  6 11:58:55 myotis30 dovecot: imap(user2): Debug: acl: owner = 1
Nov  6 11:58:55 myotis30 dovecot: imap(user2): Debug: acl vfile: Global ACL
directory: (none)
Nov  6 11:58:56 myotis30 dovecot: auth: Debug: master in:
USER#0111#011user1#011service=imap
Nov  6 11:58:56 myotis30 dovecot: auth: Debug: prefetch(user1): passdb
didn't return userdb entries, trying the next userdb
Nov  6 11:58:56 myotis30 dovecot: auth: Debug: userdb-cache(user1): hit:
user1#011home=/home/alumnos/46/113246#011uid=113246#011gid=1001#011quota_rule=*:storage=10G
Nov  6 11:58:56 myotis30 dovecot: auth: Error: userdb(user1): client doesn't
have lookup permissions for this user: userdb uid (113246) doesn't match
peer uid (14585) (change userdb socket permissions)
Nov  6 11:58:56 myotis30 dovecot: auth: Debug: master out: FAIL#0111
Nov  6 11:58:56 myotis30 dovecot: imap(user2): Error: user user1: Auth USER
lookup failed
Nov  6 11:58:56 myotis30 dovecot: imap(user2): Debug: auth input:
Nov  6 11:58:56 myotis30 dovecot: imap(user2): Error: Couldn't create
namespace 'shared/' for user user1: userdb didn't return a home
directory, but plugin setting quota used it (%h): dict:User
quota::file:%h/Maildir/dovecot.quota
Nov  6 11:58:56 myotis30 dovecot: auth: Debug: master in:
USER#0112#011user1#011service=imap
Nov  6 11:58:56 myotis30 dovecot: auth: Debug: prefetch(user1): passdb
didn't return userdb entries, trying the next userdb
Nov  6 11:58:56 myotis30 dovecot: auth: Debug: userdb-cache(user1): hit:
user1#011home=/home/alumnos/46/113246#011uid=113246#011gid=1001#011quota_rule=*:storage=10G
Nov  6 11:58:56 myotis30 dovecot: auth: Error: userdb(user1): client doesn't
have lookup permissions for this user: userdb uid (113246) doesn't match
peer uid (14585) (change userdb socket permissions)
Nov  6 11:58:56 myotis30 dovecot: auth: Debug: master out: FAIL#0112
Nov  6 11:58:56 myotis30 dovecot: imap(user2): Error: user user1: Auth USER
lookup failed
Nov  6 11:58:56 myotis30 dovecot: imap(user2): Debug: auth input:
Nov  6 11:58:56 myotis30 dovecot: imap(user2): Error: Couldn't create
namespace 'shared/' for user user1: userdb didn't return a home
directory, but plugin setting quota used it (%h): dict:User
quota::file:%h/Maildir/dovecot.quota
Nov  6 11:58:56 myotis30 dovecot: imap(user2): Warning: Subscriptions file
/home/pas/85/014585/Maildir/subscriptions: Removing invalid entry:
shared/user1/kk
Nov  6 11:58:56 myotis30 dovecot: imap(user2): Panic: shared mailbox list:
Can't return a temp prefix for 'shared/'
Nov  6 11:58:56 myotis30 dovecot: imap(user2): Error: Raw backtrace:
/usr/lib/dovecot/libdovecot.so.0(+0x3f9ca) [0x7effec3dd9ca] ->
/usr/lib/dovecot/libdovecot.so.0(+0x3fa0e) [0x7effec3dda0e] ->
/usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7effec3b1d90] ->
/usr/lib/dovecot/libdovecot-storage.so.0(+0x2991d) [0x7effec65391d] ->
/usr/lib/dovecot/libdovecot-storage.so.0(mailbox_list_subscriptions_refresh+0x2c1)
[0x7effec6ae801] ->
/usr/lib/dovecot/libdovecot-storage.so.0(mailbox_list_iter_init_multiple+0x71)
[0x7effec6a1dc1] -> dovecot/imap(+0xd598) [0x7effecb55598] ->
dovecot/imap(cmd_list_full+0x4b8) [0x7effecb55bb8] ->
dovecot/imap(command_exec+0x3d) [0x7effecb5a49d] -> dovecot/imap(+0x114ee)
[0x7effecb594ee] -> dovecot/imap(+0x115c5) [0x7effecb595c5] ->
dovecot/imap(client_handle_input+0x125) [0x7effecb59815] ->
dovecot/imap(client_input+0x65) [0x7effecb5a0f5] ->
/usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7effec3ea946] ->
/usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xa7) [0x7effec3eb637]
-> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7effec3ea358] ->
/usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7effec3d5fe3] ->
dovecot/imap(main+0x295) [0x7effecb517e5] ->
/lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xed) [0x7effec00076d] ->
dovecot/imap(+0x9969) [0x7effecb51969]
Nov  6 11:58:56 myotis30 dovecot: imap(user2): Fatal: master: service(imap):
child 6633 killed with signal 6 (core dumps disabled)
Nov  6 11:59:06 myotis30 dovecot: auth: Debug: auth client connected (pid=6659)
Nov  6 11:59:06 myotis30 dovecot: pop3-login: Disconnected (no auth attempts in
0 secs): user=<>, rip=155.54.211.187, lip=155.54.211.169, secured,
session=<RNyhfdHNqwCbNtO7>
Nov  6 11:59:06 myotis30 dovecot: auth: Debug: auth client connected (pid=6660)
Nov  6 11:59:06 myotis30 dovecot: imap-login: Disconnected (no auth attempts in
0 secs): user=<>, rip=155.54.211.187, lip=155.54.211.169, secured,
session=<3+ihfdHNbwCbNtO7>

-------------- next part --------------
# 2.1.9: /etc/dovecot/dovecot.conf
# OS: Linux 3.4.0-030400-generic x86_64 Ubuntu 12.04.1 LTS
auth_anonymous_username = anonymous
auth_cache_negative_ttl = 1 hours
auth_cache_size = 20 M
auth_cache_ttl = 1 days
auth_debug = yes
auth_debug_passwords = no
auth_default_realm =
auth_failure_delay = 2 secs
auth_first_valid_uid = 500
auth_gssapi_hostname =
auth_krb5_keytab =
auth_last_valid_uid = 0
auth_master_user_separator = *
auth_mechanisms = plain
auth_proxy_self =
auth_realms =
auth_socket_path = auth-userdb
auth_ssl_require_client_cert = no
auth_ssl_username_from_cert = no
auth_use_winbind = no
auth_username_chars =
abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@
auth_username_format = %Lu
auth_username_translation =
auth_verbose = yes
auth_verbose_passwords = no
auth_winbind_helper_path = /usr/bin/ntlm_auth
auth_worker_max_count = 30
base_dir = /var/run/dovecot
config_cache_size = 1 M
debug_log_path =
default_client_limit = 1000
default_idle_kill = 1 mins
default_internal_user = dovecot
default_login_user = dovenull
default_process_limit = 1000
default_vsz_limit = 256 M
deliver_log_format = msgid=%m: %$
dict_db_config =
director_doveadm_port = 0
director_mail_servers =
director_servers =
director_user_expire = 15 mins
director_username_hash = %u
disable_plaintext_auth = no
dotlock_use_excl = yes
doveadm_allowed_commands =
doveadm_password =
doveadm_proxy_port = 0
doveadm_socket_path = doveadm-server
doveadm_worker_count = 0
dsync_alt_char = _
dsync_remote_cmd = ssh -l%{login} %{host} doveadm dsync-server -u%u
-l%{lock_timeout} -n%{namespace}
first_valid_gid = 1
first_valid_uid = 500
hostname =
imap_capability =
imap_client_workarounds =
imap_id_log =
imap_id_send =
imap_idle_notify_interval = 2 mins
imap_logout_format = in=%i out=%o
imap_max_line_length = 64 k
imapc_features =
imapc_host =
imapc_list_prefix =
imapc_master_user =
imapc_password =
imapc_port = 143
imapc_rawlog_dir =
imapc_ssl = no
imapc_ssl_ca_dir =
imapc_ssl_verify = yes
imapc_user = %u
import_environment = TZ
info_log_path =
instance_name = dovecot
last_valid_gid = 0
last_valid_uid = 0
lda_mailbox_autocreate = no
lda_mailbox_autosubscribe = no
lda_original_recipient_header =
libexec_dir = /usr/lib/dovecot
listen = *, ::
lmtp_address_translate =
lmtp_proxy = no
lmtp_save_to_detail_mailbox = no
lock_method = fcntl
log_path = syslog
log_timestamp = %Y-%m-%d %H:%M:%S
login_access_sockets =
login_greeting = Dovecot ready.
login_log_format = %$: %s
login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c
session=<%{session}>
login_trusted_networks = 155.54.211.176/28
mail_access_groups =
mail_attachment_dir =
mail_attachment_fs = sis posix
mail_attachment_hash = %{sha1}
mail_attachment_min_size = 128 k
mail_cache_fields = flags
mail_cache_min_mail_count = 0
mail_chroot =
mail_debug = yes
mail_fsync = optimized
mail_full_filesystem_access = no
mail_gid =
mail_home =
mail_location = maildir:~/Maildir:INDEX=/var/indexes/%n
mail_log_prefix = "%s(%u): "
mail_max_keyword_length = 50
mail_max_lock_timeout = 0
mail_max_userip_connections = 10
mail_never_cache_fields = imap.envelope
mail_nfs_index = no
mail_nfs_storage = no
mail_plugin_dir = /usr/lib/dovecot/modules
mail_plugins = quota zlib lazy_expunge acl
mail_prefetch_count = 0
mail_privileged_group = mail
mail_save_crlf = no
mail_shared_explicit_inbox = yes
mail_temp_dir = /tmp
mail_temp_scan_interval = 1 weeks
mail_uid =
mailbox_idle_check_interval = 30 secs
mailbox_list_index = no
maildir_broken_filename_sizes = no
maildir_copy_with_hardlinks = yes
maildir_stat_dirs = no
maildir_very_dirty_syncs = yes
managesieve_client_workarounds =
managesieve_implementation_string = Dovecot Pigeonhole
managesieve_logout_format = bytes=%i/%o
managesieve_max_compile_errors = 5
managesieve_max_line_length = 65536
managesieve_notify_capability = mailto
managesieve_sieve_capability = fileinto reject envelope encoded-character
vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy
include variables body enotify environment mailbox date ihave imapflags
master_user_separator =
mbox_dirty_syncs = yes
mbox_dotlock_change_timeout = 2 mins
mbox_lazy_writes = yes
mbox_lock_timeout = 5 mins
mbox_md5 = apop3d
mbox_min_index_size = 0
mbox_read_locks = fcntl
mbox_very_dirty_syncs = no
mbox_write_locks = dotlock fcntl
mdbox_preallocate_space = no
mdbox_rotate_interval = 0
mdbox_rotate_size = 20 M
mmap_disable = no
namespace {
  hidden = no
  ignore_on_failure = no
  inbox = yes
  list = yes
  location =
  prefix =
  separator = /
  subscriptions = yes
  type = private
}
namespace {
  hidden = no
  ignore_on_failure = no
  inbox = no
  list = yes
  location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u
  prefix = shared/%%u/
  separator = /
  subscriptions = no
  type = shared
}
namespace {
  hidden = no
  ignore_on_failure = no
  inbox = no
  list = no
  location = maildir:~/Maildir/expunged/
  prefix = BORRADOS/
  separator = /
  subscriptions = yes
  type = private
}
passdb {
  args = /etc/dovecot/master-users
  default_fields =
  deny = no
  driver = passwd-file
  master = yes
  override_fields =
  pass = yes
}
passdb {
  args = /etc/dovecot/dovecot-ldap.conf.ext
  default_fields =
  deny = no
  driver = ldap
  master = no
  override_fields =
  pass = no
}
passdb {
  args = session=yes dovecot
  default_fields =
  deny = no
  driver = pam
  master = no
  override_fields =
  pass = no
}
plugin {
  acl = vfile
  lazy_expunge = BORRADOS/
  quota = dict:User quota::file:%h/Maildir/dovecot.quota
  quota_rule = *:storage=10G
  quota_rule2 = Trash:storage=+1G
  sieve = ~/.dovecot.sieve
  sieve_dir = ~/sieve
  sieve_extensions = +imapflags
  sieve_max_redirects = 15
  zlib_save = gz
  zlib_save_level = 6
}
pop3_client_workarounds =
pop3_enable_last = no
pop3_fast_size_lookups = no
pop3_lock_session = no
pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s
pop3_no_flag_updates = no
pop3_reuse_xuidl = no
pop3_save_uidl = no
pop3_uidl_duplicates = allow
pop3_uidl_format = %08Xu%08Xv
pop3c_host =
pop3c_master_user =
pop3c_password =
pop3c_port = 110
pop3c_rawlog_dir =
pop3c_ssl = no
pop3c_ssl_ca_dir =
pop3c_ssl_verify = yes
pop3c_user = %u
postmaster_address = postmaster at um.es
protocols = imap pop3 lmtp sieve
quota_full_tempfail = no
recipient_delimiter = +
rejection_reason = Your message to <%t> was automatically rejected:%n%r
rejection_subject = Rejected: %s
replication_full_sync_interval = 12 hours
replication_max_conns = 10
replicator_host = replicator
replicator_port = 0
sendmail_path = /usr/sbin/sendmail
service aggregator {
  chroot = .
  client_limit = 0
  drop_priv_before_exec = no
  executable = aggregator
  extra_groups =
  fifo_listener replication-notify-fifo {
    group =
    mode = 0600
    user =
  }
  group =
  idle_kill = 0
  privileged_group =
  process_limit = 0
  process_min_avail = 0
  protocol =
  service_count = 0
  type =
  unix_listener replication-notify {
    group =
    mode = 0600
    user =
  }
  user = $default_internal_user
  vsz_limit = 18446744073709551615 B
}
service anvil {
  chroot = empty
  client_limit = 2003
  drop_priv_before_exec = no
  executable = anvil
  extra_groups =
  group =
  idle_kill = 4294967295 secs
  privileged_group =
  process_limit = 1
  process_min_avail = 1
  protocol =
  service_count = 0
  type = anvil
  unix_listener anvil-auth-penalty {
    group =
    mode = 0600
    user =
  }
  unix_listener anvil {
    group =
    mode = 0600
    user =
  }
  user = $default_internal_user
  vsz_limit = 18446744073709551615 B
}
service auth-worker {
  chroot =
  client_limit = 1
  drop_priv_before_exec = no
  executable = auth -w
  extra_groups =
  group =
  idle_kill = 0
  privileged_group =
  process_limit = 0
  process_min_avail = 0
  protocol =
  service_count = 1
  type =
  unix_listener auth-worker {
    group =
    mode = 0600
    user = $default_internal_user
  }
  user =
  vsz_limit = 18446744073709551615 B
}
service auth {
  chroot =
  client_limit = 3000
  drop_priv_before_exec = no
  executable = auth
  extra_groups =
  group =
  idle_kill = 0
  privileged_group =
  process_limit = 1
  process_min_avail = 0
  protocol =
  service_count = 0
  type =
  unix_listener auth-client {
    group =
    mode = 0600
    user =
  }
  unix_listener auth-login {
    group =
    mode = 0600
    user = $default_internal_user
  }
  unix_listener auth-master {
    group =
    mode = 0600
    user =
  }
  unix_listener auth-userdb {
    group =
    mode = 0666
    user = $default_internal_user
  }
  unix_listener login/login {
    group =
    mode = 0666
    user =
  }
  user = $default_internal_user
  vsz_limit = 18446744073709551615 B
}
service config {
  chroot =
  client_limit = 0
  drop_priv_before_exec = no
  executable = config
  extra_groups =
  group =
  idle_kill = 0
  privileged_group =
  process_limit = 0
  process_min_avail = 0
  protocol =
  service_count = 0
  type = config
  unix_listener config {
    group =
    mode = 0600
    user =
  }
  user =
  vsz_limit = 18446744073709551615 B
}
service dict {
  chroot =
  client_limit = 1
  drop_priv_before_exec = no
  executable = dict
  extra_groups =
  group =
  idle_kill = 0
  privileged_group =
  process_limit = 0
  process_min_avail = 0
  protocol =
  service_count = 0
  type =
  unix_listener dict {
    group =
    mode = 0600
    user =
  }
  user = $default_internal_user
  vsz_limit = 18446744073709551615 B
}
service director {
  chroot = .
  client_limit = 0
  drop_priv_before_exec = no
  executable = director
  extra_groups =
  fifo_listener login/proxy-notify {
    group =
    mode = 00
    user =
  }
  group =
  idle_kill = 4294967295 secs
  inet_listener {
    address =
    port = 0
    ssl = no
  }
  privileged_group =
  process_limit = 1
  process_min_avail = 0
  protocol =
  service_count = 0
  type =
  unix_listener director-admin {
    group =
    mode = 0600
    user =
  }
  unix_listener director-userdb {
    group =
    mode = 0600
    user =
  }
  unix_listener login/director {
    group =
    mode = 00
    user =
  }
  user = $default_internal_user
  vsz_limit = 18446744073709551615 B
}
service dns_client {
  chroot =
  client_limit = 1
  drop_priv_before_exec = no
  executable = dns-client
  extra_groups =
  group =
  idle_kill = 0
  privileged_group =
  process_limit = 0
  process_min_avail = 0
  protocol =
  service_count = 0
  type =
  unix_listener dns-client {
    group =
    mode = 0666
    user =
  }
  unix_listener login/dns-client {
    group =
    mode = 0666
    user =
  }
  user = $default_internal_user
  vsz_limit = 18446744073709551615 B
}
service doveadm {
  chroot =
  client_limit = 1
  drop_priv_before_exec = no
  executable = doveadm-server
  extra_groups =
  group =
  idle_kill = 0
  inet_listener {
    address =
    port = 24245
    ssl = no
  }
  privileged_group =
  process_limit = 0
  process_min_avail = 0
  protocol =
  service_count = 1
  type =
  unix_listener doveadm-server {
    group =
    mode = 0600
    user =
  }
  user =
  vsz_limit = 18446744073709551615 B
}
service imap-login {
  chroot = login
  client_limit = 0
  drop_priv_before_exec = no
  executable = imap-login
  extra_groups =
  group =
  idle_kill = 0
  inet_listener imap {
    address =
    port = 143
    ssl = no
  }
  inet_listener imaps {
    address =
    port = 993
    ssl = yes
  }
  privileged_group =
  process_limit = 0
  process_min_avail = 0
  protocol = imap
  service_count = 1
  type = login
  user = $default_login_user
  vsz_limit = 18446744073709551615 B
}
service imap {
  chroot =
  client_limit = 1
  drop_priv_before_exec = no
  executable = imap
  extra_groups =
  group =
  idle_kill = 0
  privileged_group =
  process_limit = 5120
  process_min_avail = 2
  protocol = imap
  service_count = 1
  type =
  unix_listener login/imap {
    group =
    mode = 0666
    user =
  }
  user =
  vsz_limit = 512 M
}
service indexer-worker {
  chroot =
  client_limit = 1
  drop_priv_before_exec = no
  executable = indexer-worker
  extra_groups =
  group =
  idle_kill = 0
  privileged_group =
  process_limit = 10
  process_min_avail = 0
  protocol =
  service_count = 0
  type =
  unix_listener indexer-worker {
    group =
    mode = 0600
    user = $default_internal_user
  }
  user =
  vsz_limit = 18446744073709551615 B
}
service indexer {
  chroot =
  client_limit = 0
  drop_priv_before_exec = no
  executable = indexer
  extra_groups =
  group =
  idle_kill = 0
  privileged_group =
  process_limit = 1
  process_min_avail = 0
  protocol =
  service_count = 0
  type =
  unix_listener indexer {
    group =
    mode = 0666
    user =
  }
  user = $default_internal_user
  vsz_limit = 18446744073709551615 B
}
service ipc {
  chroot = empty
  client_limit = 0
  drop_priv_before_exec = no
  executable = ipc
  extra_groups =
  group =
  idle_kill = 0
  privileged_group =
  process_limit = 1
  process_min_avail = 0
  protocol =
  service_count = 0
  type =
  unix_listener ipc {
    group =
    mode = 0600
    user = dovecot
  }
  unix_listener login/ipc-proxy {
    group =
    mode = 0600
    user = $default_login_user
  }
  user = $default_internal_user
  vsz_limit = 18446744073709551615 B
}
service lmtp {
  chroot =
  client_limit = 1
  drop_priv_before_exec = no
  executable = lmtp
  extra_groups =
  group =
  idle_kill = 0
  inet_listener lmtp {
    address =
    port = 24
    ssl = no
  }
  privileged_group =
  process_limit = 0
  process_min_avail = 10
  protocol = lmtp
  service_count = 0
  type =
  unix_listener lmtp {
    group =
    mode = 0666
    user =
  }
  user =
  vsz_limit = 512 M
}
service log {
  chroot =
  client_limit = 0
  drop_priv_before_exec = no
  executable = log
  extra_groups =
  group =
  idle_kill = 4294967295 secs
  privileged_group =
  process_limit = 1
  process_min_avail = 0
  protocol =
  service_count = 0
  type = log
  unix_listener log-errors {
    group =
    mode = 0600
    user =
  }
  user =
  vsz_limit = 18446744073709551615 B
}
service managesieve-login {
  chroot = login
  client_limit = 0
  drop_priv_before_exec = no
  executable = managesieve-login
  extra_groups =
  group =
  idle_kill = 0
  inet_listener sieve {
    address =
    port = 4190
    ssl = no
  }
  privileged_group =
  process_limit = 0
  process_min_avail = 0
  protocol = sieve
  service_count = 1
  type = login
  user = $default_login_user
  vsz_limit = 18446744073709551615 B
}
service managesieve {
  chroot =
  client_limit = 1
  drop_priv_before_exec = no
  executable = managesieve
  extra_groups =
  group =
  idle_kill = 0
  privileged_group =
  process_limit = 0
  process_min_avail = 0
  protocol = sieve
  service_count = 1
  type =
  unix_listener login/sieve {
    group =
    mode = 0666
    user =
  }
  user =
  vsz_limit = 18446744073709551615 B
}
service pop3-login {
  chroot = login
  client_limit = 0
  drop_priv_before_exec = no
  executable = pop3-login
  extra_groups =
  group =
  idle_kill = 0
  inet_listener pop3 {
    address =
    port = 110
    ssl = no
  }
  inet_listener pop3s {
    address =
    port = 995
    ssl = yes
  }
  privileged_group =
  process_limit = 0
  process_min_avail = 0
  protocol = pop3
  service_count = 1
  type = login
  user = $default_login_user
  vsz_limit = 18446744073709551615 B
}
service pop3 {
  chroot =
  client_limit = 1
  drop_priv_before_exec = no
  executable = pop3
  extra_groups =
  group =
  idle_kill = 0
  privileged_group =
  process_limit = 1024
  process_min_avail = 2
  protocol = pop3
  service_count = 1
  type =
  unix_listener login/pop3 {
    group =
    mode = 0666
    user =
  }
  user =
  vsz_limit = 18446744073709551615 B
}
service replicator {
  chroot =
  client_limit = 0
  drop_priv_before_exec = no
  executable = replicator
  extra_groups =
  group =
  idle_kill = 4294967295 secs
  privileged_group =
  process_limit = 1
  process_min_avail = 0
  protocol =
  service_count = 0
  type =
  unix_listener replicator {
    group =
    mode = 0600
    user = $default_internal_user
  }
  user =
  vsz_limit = 18446744073709551615 B
}
service ssl-params {
  chroot =
  client_limit = 0
  drop_priv_before_exec = no
  executable = ssl-params
  extra_groups =
  group =
  idle_kill = 0
  privileged_group =
  process_limit = 0
  process_min_avail = 0
  protocol =
  service_count = 0
  type = startup
  unix_listener login/ssl-params {
    group =
    mode = 0666
    user =
  }
  user =
  vsz_limit = 18446744073709551615 B
}
service stats {
  chroot = empty
  client_limit = 0
  drop_priv_before_exec = no
  executable = stats
  extra_groups =
  fifo_listener stats-mail {
    group =
    mode = 0600
    user =
  }
  group =
  idle_kill = 4294967295 secs
  privileged_group =
  process_limit = 1
  process_min_avail = 0
  protocol =
  service_count = 0
  type =
  unix_listener stats {
    group =
    mode = 0600
    user =
  }
  user = $default_internal_user
  vsz_limit = 18446744073709551615 B
}
shutdown_clients = yes
ssl = no
ssl_ca =
ssl_cert = </etc/ssl/certs/dovecot.pem
ssl_cert_username_field = commonName
ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL
ssl_client_cert =
ssl_client_key =
ssl_crypto_device =
ssl_key = </etc/ssl/private/dovecot.pem
ssl_key_password =
ssl_parameters_regenerate = 1 weeks
ssl_protocols = !SSLv2
ssl_require_crl = yes
ssl_verify_client_cert = no
stats_command_min_time = 1 mins
stats_domain_min_time = 12 hours
stats_ip_min_time = 12 hours
stats_memory_limit = 16 M
stats_session_min_time = 15 mins
stats_user_min_time = 1 hours
submission_host =
syslog_facility = mail
userdb {
  args =
  default_fields =
  driver = prefetch
  override_fields =
}
userdb {
  args = /etc/dovecot/dovecot-ldap.conf.ext
  default_fields =
  driver = ldap
  override_fields =
}
valid_chroot_dirs =
verbose_proctitle = no
verbose_ssl = no
version_ignore = no
protocol lda {
  mail_plugins = quota zlib lazy_expunge acl sieve
}
protocol imap {
  mail_plugins = quota zlib lazy_expunge acl imap_quota imap_acl
}
protocol lmtp {
  mail_plugins = quota zlib lazy_expunge acl sieve
}
protocol pop3 {
  pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, in=%i, out=%o
}
local 155.54.211.160/27/27 {
  doveadm_password = ]dWhu5kB
}