Problem with Dovecot 2.4.2 & debian 13

[Klaus Tachtler]

Hi Sebastian,

try in /etc/dovecot/conf.d/10-logging.conf or wherever your settings are:

log_debug = category=auth OR category=ssl

as syntax, tham you have both category auth OR ssl inside the log (DO  
NOT use AND)!

See:  
https://doc.dovecot.org/2.4.2/core/config/events/filter.html#global-filter-syntax

Global Filter Syntax

Settings such as log_debug use the common filtering language. For example:

log_debug = (event=http_request_finished AND category=imap) OR \
     (event=imap_command_finished AND user=testuser)


Greetings
Klaus.

> I have disabled apparmor - same log entry.
>
> How do i enable logging ?
>
> I put:
>
> *****
>
> mail_debug = yes
> auth_verbose = yes
> log_debug = category=ssl
> log_debug = category=auth
> log_debug = category=mail
> log_debug = category=imap
>
> debug_log_path = /var/log/dovecot-debug.log
>
> *****
>
> at the beginning of the config-file - but the dovecot-debug.log is empty.
>
>
> Am 02.01.26 um 22:26 schrieb Christian Boltz:
>> Hello,
>>
>> Am Donnerstag, 1. Januar 2026, 21:38 schrieb sebastian--- via Dovecot:
>>> i build a new debian 13 system and tried to use dovcecot 2.4.2 with
>>> postfix & mysql.
>> Very wild guess: Debian has AppArmor enabled by default, and Dovecot 2.4
>> needs some additional permissions in the AppArmor profiles (and explodes
>> without these permissions).
>>
>> I'd recommend to check for DENIED lines in your /var/log/audit/audit.log
>>
>> Assuming you find such DENIED lines for Dovecot:
>> You can grab the latest Dovecot profiles from
>> https://gitlab.com/apparmor/apparmor/-/tree/apparmor-4.1/profiles/apparmor.d
>> and copy them to /etc/apparmor.d/ to get Dovecot working. Note that
>> you'll also need to update abstractions/dovecot-common.
>>
>> If you stilll get DENIED log lines with the latest profiles, please tell
>> me ;-)
>>
>> The better (but slower) fix would be an updated AppArmor package in
>> Debian. Feel free to request that via the Debian bugtracker.
>>
>>
>> Gruß
>>
>> Christian Boltz
>>
>> PS: random signature, unrelated to the Dovecot profiles ;-)


----- Ende der Nachricht von sebastian--- via Dovecot  
<dovecot at listen.jpberlin.de> -----



-- 

---------------------------------------
e-Mail  : klaus at tachtler.net
Homepage: https://www.tachtler.net
DokuWiki: https://dokuwiki.tachtler.net
---------------------------------------
-------------- nächster Teil --------------
Ein Dateianhang mit Binärdaten wurde abgetrennt...
Dateiname   : nicht verfügbar
Dateityp    : application/pgp-keys
Dateigröße  : 3121 bytes
Beschreibung: Öffentlicher PGP-Schlüssel
URL         : <https://listen.jpberlin.de/pipermail/dovecot/attachments/20260104/1ab9ef08/attachment.skr>