shared Folder & sync

Fr Sep 9 15:48:04 CEST 2016

Hallo Klaus,

Am Freitag, 9. September 2016, 11:35:35 schrieb Klaus Tachtler:

> könnten wir Deine 'doveconf -n' Konfiguration haben und evtl. eine
> Fehlermeldung aus dem LOG?

ohne shared funktioniert der sync anscheinend gut ?

Was dem Teil nicht passt ist mir etwas schleierhaft denn die Ordner sind 
angelegt worden und auch einige Files sind da aber eben nicht alles ?

Sep  9 15:20:25 mx03 dovecot: doveadm(gjn at xxxxxxxxx.at): Error: sync: 
Disconnected from remote: Connection timed out
Sep  9 15:20:28 mx03 dovecot: dsync-local(gjn at xxxxxxxxx.at): Error: Can't 
create mailbox shared/info at yyyyyyyyyyyy.com: Permission denied
Sep  9 15:23:34 mx03 clamd[2400]: SelfCheck: Database status OK.
Sep  9 15:25:26 mx03 dovecot: dsync-local(gjn at xxxxxxxxxx.at): Error: Can't 
create mailbox shared/info at yyyyyyyyyyyyy.com: Permission denied
Sep  9 15:28:38 mx03 dovecot: doveadm(gjn at xxxxxxxxxx.at): Error: doveadm 
server disconnected before handshake: Connection timed out
Sep  9 15:28:38 mx03 dovecot: doveadm(gjn at xxxxxxxxxx.at): Error: sync: 
Disconnected from remote: Connection timed out
Sep  9 15:28:40 mx03 dovecot: dsync-local(gjn at xxxxxxxxxx.at): Error: Can't 
create mailbox shared/info at yyyyyyyyyyyyy.com: Permission denied
Sep  9 15:30:26 mx03 dovecot: dsync-local(gjn at xxxxxxxxx.at): Error: Can't 
create mailbox shared/info at yyyyyyyyyyyy.com: Permission denied

Selbstverständlich ;-)

# 2.2.25 (7be1766): /etc/dovecot/dovecot.conf
# Pigeonhole version 0.4.14 (099a97c)
# OS: Linux 3.10.0-327.28.3.el7.x86_64 x86_64 CentOS Linux release 7.2.1511 
(Core)  
doveadm_password =  # hidden, use -P to show it
doveadm_port = 10993
mail_location = maildir:~/Maildir
mail_plugins = zlib acl fts fts_lucene notify replication
managesieve_notify_capability = mailto
managesieve_sieve_capability = fileinto reject envelope encoded-character 
vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy 
include variables body enotify environment mailbox date index ihave duplicate 
mime foreverypart extracttext
mbox_write_locks = fcntl
namespace {
  list = children
  location = maildir:
%%h/Maildir:INDEX=%h/shared/%%u:CONTROL=%h/shared/%%u:INDEXPVT=%h/shared/%%u
  prefix = shared/%%u/
  separator = /
  subscriptions = yes
  type = shared
}
namespace inbox {
  hidden = no
  ignore_on_failure = no
  inbox = yes
  list = yes
  location = 
  mailbox Drafts {
    auto = subscribe
    special_use = \Drafts
  }
  mailbox Junk {
    auto = subscribe
    special_use = \Junk
  }
  mailbox Sent {
    auto = subscribe
    special_use = \Sent
  }
  mailbox "Sent Messages" {
    special_use = \Sent
  }
  mailbox Trash {
    auto = subscribe
    special_use = \Trash
  }
  prefix = INBOX/
  separator = /
  subscriptions = yes
  type = private
}
passdb {
  args = /etc/dovecot/dovecot-ldap.conf.ext
  driver = ldap
}
plugin {
  acl = vfile
  acl_shared_dict = file:/srv/vmail/shared-mailboxes
  mail_replica = tcp:217.196.154.213
  sieve = file:~/sieve;active=~/.dovecot.sieve
}
protocols = imap lmtp sieve sieve
service aggregator {
  fifo_listener replication-notify-fifo {
    user = vmail
  }
  unix_listener replication-notify {
    user = vmail
  }
}
service auth {
  unix_listener /var/spool/postfix/private/auth {
    mode = 0666
  }
}
service doveadm {
  inet_listener {
    port = 10993
  }
}
service lmtp {
  inet_listener lmtp {
    address = 127.0.0.1
    port = 24
  }
}
service managesieve-login {
  inet_listener sieve {
    port = 4190
  }
}
service replicator {
  process_min_avail = 1
  unix_listener replicator-doveadm {
    group = vmail
    mode = 0660
    user = vmail
  }
}
ssl = required
ssl_ca = </etc/ipa/ca.crt
ssl_cert = </etc/pki/tls/certs/esslmaier.pem
ssl_cipher_list = 
EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:
+CAMELLIA256:+AES256:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!
3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!ECDSA:CAMELLIA256-SHA:AES256-
SHA:CAMELLIA128-SHA:AES128-SHA
ssl_client_ca_file = /etc/pki/tls/cert.pem
ssl_dh_parameters_length = 2048
ssl_key = </etc/pki/tls/private/esslmaier.key.pem
ssl_protocols = !SSLv2 !SSLv3
userdb {
  args = /etc/dovecot/dovecot-ldap-userdb.conf.ext
  driver = ldap
}
protocol imap {
  mail_max_userip_connections = 10
  mail_plugins = zlib acl fts fts_lucene notify replication acl imap_acl 
imap_zlib
}

> > Dovecot 2.2..25
> > CentOS 7.2
> > 
> > Ihr habt das Problem sicher schon mal gehabt ;-).
> > 
> > Aber im Ernst, ich habe jetzt einen Sicherheitsserver für Dovecot
> > gemacht, das
> > ganze scheint auch zu funktionieren ?
> > 
> > Nur habe ich bei mir shared Folder eingerichtet, jetzt schreibt das
> > Teil immer
> > er hat keine Berechtigung zu schreiben in den shared Foldern ?
> > 
> > User ist vmail;vmail (10000) wie im Buch ;-)
> > 
> > Habt Ihr eine Idee wo man da suchen soll / kann
> > 
> > mit selinux hängt es nicht zusammen, da ich das schon ausgeschaltet hatte.
> > 
> > Danke für jede Info,
> > --
> > mit freundlichen Grüßen / best regards,
> > 
> >   Günther J. Niederwimmer
> 
> --
> 
> ------------------------------------------
> e-Mail  : klaus at tachtler.net
> Homepage: http://www.tachtler.net
> DokuWiki: http://www.dokuwiki.tachtler.net
> ------------------------------------------

-- 
mit freundlichen Grüßen / best regards,

  Günther J. Niederwimmer