dovecot - Jan 2013 - doveadm backup issue with ACL plugin enabled

Hi,

when trying to backup mailboxes I noticed some hiccups when the ACL plugin is
enabled. It works fine with ACL disabled:

$ doveadm -o plugin/quota= backup -u tlx at leuxner.net
mdbox:/home/backups/tlx/mdbox

However, enabled (and w/ a mailbox actually using ACLs) the following error
occurs:

$ doveadm -o plugin/quota= backup -u tlx at leuxner.net
mdbox:/home/backups/tlx/mdbox
dsync(tlx at leuxner.net): Error: Couldn't update mailbox <name>
metadata: Permission denied

I tried to override the ACL plugin via '-o' to no avail, but I may be
using the wrong syntax there.

Regards
Thomas
--
# 2.2.alpha1 (cd093d05037e): /etc/dovecot/dovecot.conf
# OS: Linux 3.2.0-0.bpo.4-amd64 x86_64 Debian 6.0.6 
auth_cache_size = 16 k
auth_verbose = yes
mail_location = mdbox:~/mdbox
mail_plugins = acl quota stats
mailbox_list_index = yes
namespace {
  list = yes
  location = mdbox:/var/vmail/public
  prefix = Public/
  separator = /
  subscriptions = no
  type = public
}
namespace inbox {
  hidden = no
  inbox = yes
  location = 
  mailbox Drafts {
    special_use = \Drafts
  }
  mailbox Junk {
    special_use = \Junk
  }
  mailbox Sent {
    special_use = \Sent
  }
  mailbox "Sent Messages" {
    special_use = \Sent
  }
  mailbox Trash {
    special_use = \Trash
  }
  prefix = 
  separator = /
  type = private
}
passdb {
  args = username_format=%u /var/vmail/auth.d/%d/passwd
  driver = passwd-file
}
plugin {
  acl = vfile:/var/vmail/conf.d/%d/acls:cache_secs=300
  mail_log_events = expunge mailbox_delete
  quota = dict:user::file:%h/mdbox/dovecot-quota
  quota_rule = *:storage=1GB
  quota_rule2 = Trash:storage=+10%%
  sieve = ~/.dovecot.sieve
  sieve_dir = ~/sieve
  sieve_global_dir = /var/vmail/conf.d/%d/sieve
  stats_refresh = 30s
  stats_track_cmds = yes
}
protocols = " imap lmtp"
quota_full_tempfail = yes
service auth-worker {
  unix_listener auth-worker {
    user = doveauth
  }
  user = doveauth
}
service auth {
  unix_listener /var/spool/postfix/private/auth {
    group = postfix
    mode = 0660
    user = postfix
  }
  user = doveauth
}
service imap-login {
  inet_listener imap {
    address = 1.2.3.4
    port = 143
  }
  inet_listener imaps {
    port = 0
  }
}
service lmtp {
  unix_listener /var/spool/postfix/private/dovecot-lmtp {
    group = postfix
    mode = 0660
    user = postfix
  }
}
service stats {
  fifo_listener stats-mail {
    mode = 0600
    user = vmail
  }
}
ssl_ca = </etc/ssl/certs/SSL123_CA_Bundle.pem
ssl_cert = </etc/ssl/certs/host_domain_tld.crt
ssl_key = </etc/ssl/private/host_domain_tld.key
syslog_facility = local1
userdb {
  args = username_format=%u /var/vmail/auth.d/%d/passwd
  driver = passwd-file
}
verbose_proctitle = yes
protocol lmtp {
  mail_plugins = acl quota stats sieve
}
protocol imap {
  mail_max_userip_connections = 20
  mail_plugins = acl quota stats mail_log notify imap_acl imap_quota imap_stats
}

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4364 bytes
Desc: not available
URL:
<http://dovecot.org/pipermail/dovecot/attachments/20130102/478dcda2/attachment-0004.bin>

On 2.1.2013, at 13.41, Thomas Leuxner <tlx at leuxner.net> wrote:
> when trying to backup mailboxes I noticed some hiccups when the ACL plugin
is enabled. It works fine with ACL disabled:
> 
> $ doveadm -o plugin/quota= backup -u tlx at leuxner.net
mdbox:/home/backups/tlx/mdbox
> 
> However, enabled (and w/ a mailbox actually using ACLs) the following error
occurs:
> 
> $ doveadm -o plugin/quota= backup -u tlx at leuxner.net
mdbox:/home/backups/tlx/mdbox
> dsync(tlx at leuxner.net): Error: Couldn't update mailbox <name>
metadata: Permission denied
> 
> I tried to override the ACL plugin via '-o' to no avail, but I may
be using the wrong syntax there.
http://hg.dovecot.org/dovecot-2.1/rev/721aba9128b9

I'll pull it to v2.2 among other changes today/tomorrow.