dovecot fail about a semicolon who doesn't exist

Bug #1983860 reported by Dorian Rosse
12
This bug affects 1 person
Affects Status Importance Assigned to Milestone
dovecot (Ubuntu)
Invalid
Undecided
Unassigned

Bug Description

hello,

dovecot fail about a semicolon who doesn't exist and who fail dovecot :

'''sudo service dovecot statut
doveconf: Fatal: Error in configuration file /etc/dovecot/conf.d/10-ssl.conf line 6: Unknown setting: service { ssl
doveconf: Error: managesieve-login: dump-capability process returned 89
doveconf: Fatal: Error in configuration file /etc/dovecot/conf.d/10-ssl.conf line 6: Unknown setting: service { ssl
'''

here below the script who fail :

'''##
## SSL settings
##

# SSL/TLS support: yes, no, required. <doc/wiki/SSL.txt>
ssl = yes

# PEM encoded X.509 SSL/TLS certificate and private key. They're opened before
# dropping root privileges, so keep the key file unreadable by anyone but
# root. Included doc/mkcert.sh can be used to easily generate self-signed
# certificate, just make sure to update the domains in dovecot-openssl.cnf
'''

thank you in advance to help myself pass this etrror,

Regards.

Azaretdodo.

Tags: dovecot
Revision history for this message
Lucas Kanashiro (lucaskanashiro) wrote :

Thanks for taking the time to report this bug and trying to make Ubuntu better.

In order to better understand your issue, we need some information like: which Ubuntu release are you using? Which version of dovecot do you have installed? Did you make any manual change in the configuration files to reach this state?

I launched a Ubuntu Kinetic (current development release) container to take a look at this, and after installing dovecot-core the service gets up and running as expected.

This ssl setting you pasted in the bug description was changed by debian some time ago, and no one complained so far. My initial feeling is that this is not the root cause of your issue.

I am setting the status of the bug to Incomplete, once you provide more information please set it back to New and we will take a look again.

Changed in dovecot (Ubuntu):
status: New → Incomplete
Revision history for this message
Dorian Rosse (dodozzz16493610) wrote :

i use ubuntu 22.04,

the kernel is that :

'''uname -a
Linux Ubuntu-ThinkPad-X250 5.15.0-43-generic #46-Ubuntu SMP Tue Jul 12 10:30:17 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux
'''

the version of dovecot is that :

'''dovecot --version
2.3.16 (7e2e900c1a)
'''

i don't see any file dovecot.conf as shown below :

'''locate dovecot
/etc/apparmor.d/abstractions/dovecot-common
/etc/apparmor.d/tunables/dovecot
/snap/core18/2538/etc/apparmor.d/abstractions/dovecot-common
/snap/core18/2538/etc/apparmor.d/tunables/dovecot
/snap/core20/1405/etc/apparmor.d/abstractions/dovecot-common
/snap/core20/1405/etc/apparmor.d/tunables/dovecot
/snap/core20/1587/etc/apparmor.d/abstractions/dovecot-common
/snap/core20/1587/etc/apparmor.d/tunables/dovecot
~$ whereis dovecot
dovecot: /usr/sbin/dovecot /usr/lib/dovecot /etc/dovecot /usr/share/dovecot /usr/share/man/man1/dovecot.1.gz
~$ whereis dovecot.conf
dovecot.conf:
~$ locate dovecot.conf
~$
'''

thanks you in advance to help myself repair dovecot for use it,

regards.

Dorian ROSSE.

Revision history for this message
Dorian Rosse (dodozzz16493610) wrote :

i went to read dovecot.conf in /etc/doveco and i don't see any designing,

i copy past from doveco.conf each line uncommented :

'''

!include_try /usr/share/dovecot/protocols.d/*.protocol

dict {
  #quota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext
}

!include conf.d/*.conf

!include_try local.conf

'''

i let you read my previous answer where the other ask are answered as the version of ubuntu and the version of doveco,

thanks you in advance to help myself repair doveco for use it,

regards.

Dorian ROSSE.

Revision history for this message
Athos Ribeiro (athos-ribeiro) wrote :

Could you also show the contents of /etc/dovecot/conf.d/10-ssl.conf?

Revision history for this message
Dorian Rosse (dodozzz16493610) wrote :
Download full text (3.5 KiB)

i paste below :

'''##
## SSL settings
##

# SSL/TLS support: yes, no, required. <doc/wiki/SSL.txt>
ssl = yes

# PEM encoded X.509 SSL/TLS certificate and private key. They're opened before
# dropping root privileges, so keep the key file unreadable by anyone but
# root. Included doc/mkcert.sh can be used to easily generate self-signed
# certificate, just make sure to update the domains in dovecot-openssl.cnf
ssl_cert = </etc/letsencrypt/live/mail.example.com/fullchain.pem
ssl_key = </etc/letsencrypt/live/mail.example.com/privkey.pem

# If key file is password protected, give the password here. Alternatively
# give it when starting dovecot with -p parameter. Since this file is often
# world-readable, you may want to place this setting instead to a different
# root owned 0600 file by using ssl_key_password = <path.
#ssl_key_password =

# PEM encoded trusted certificate authority. Set this only if you intend to use
# ssl_verify_client_cert=yes. The file should contain the CA certificate(s)
# followed by the matching CRL(s). (e.g. ssl_ca = </etc/ssl/certs/ca.pem)
#ssl_ca =

# Require that CRL check succeeds for client certificates.
#ssl_require_crl = yes

# Directory and/or file for trusted SSL CA certificates. These are used only
# when Dovecot needs to act as an SSL client (e.g. imapc backend or
# submission service). The directory is usually /etc/ssl/certs in
# Debian-based systems and the file is /etc/pki/tls/cert.pem in
# RedHat-based systems. Note that ssl_client_ca_file isn't recommended with
# large CA bundles, because it leads to excessive memory usage.
#ssl_client_ca_dir =
ssl_client_ca_dir = /etc/ssl/certs
#ssl_client_ca_file =

# Require valid cert when connecting to a remote server
#ssl_client_require_valid_cert = yes

# Request client to send a certificate. If you also want to require it, set
# auth_ssl_require_client_cert=yes in auth section.
#ssl_verify_client_cert = no

# Which field from certificate to use for username. commonName and
# x500UniqueIdentifier are the usual choices. You'll also need to set
# auth_ssl_username_from_cert=yes.
#ssl_cert_username_field = commonName

# SSL DH parameters
# Generate new params with `openssl dhparam -out /etc/dovecot/dh.pem 4096`
# Or migrate from old ssl-parameters.dat file with the command dovecot
# gives on startup when ssl_dh is unset.
ssl_dh = </etc/ssl/certs/dhparam.pem

# Minimum SSL protocol version to use. Potentially recognized values are SSLv3,
# TLSv1, TLSv1.1, TLSv1.2 and TLSv1.3, depending on the OpenSSL version used.
#
# Dovecot also recognizes values ANY and LATEST. ANY matches with any protocol
# version, and LATEST matches with the latest version supported by library.
#ssl_min_protocol = TLSv1.2

# SSL ciphers to use, the default is:
#ssl_cipher_list = ALL:!kRSA:!SRP:!kDHd:!DSS:!aNULL:!eNULL:!EXPORT:!DES:!3DES:!MD5:!PSK:!RC4:!ADH:!LOW@STRENGTH
# To disable non-EC DH, use:
ssl_cipher_list = EECDH+AES:EDH+AES+aRSA

# Colon separated list of elliptic curves to use. Empty value (the default)
# means use the defaults from the SSL library. P-521:P-384:P-256 would be an
# example of a valid value.
#ssl_curve_list =

# Prefer the server's order of ciphers over client's.
ssl_pr...

Read more...

Revision history for this message
Bryce Harrington (bryce) wrote :

Dorian, the issue may be a typo in one of your other config files, e.g. a missing close bracket.

Please attach your /etc/dovecot/conf.d/10-master.conf file.

Also, let's see this:

  ls -l /etc/dovecot/conf.d/

Changed in dovecot (Ubuntu):
status: Incomplete → New
status: New → Incomplete
Revision history for this message
Dorian Rosse (dodozzz16493610) wrote :

hello,

i have put in attachment that you ask,

now the line of command you ask below :

'''ls -l /etc/dovecot/conf.d/
total 136
-rw-r--r-- 1 root root 5280 août 8 14:09 10-auth.conf
-rw-r--r-- 1 root root 1781 août 6 2021 10-director.conf
-rw-r--r-- 1 root root 3757 août 6 2021 10-logging.conf
-rw-r--r-- 1 root root 18130 août 8 14:19 10-mail.conf
-rw-r--r-- 1 root root 2538 août 8 14:29 10-master.conf
-rw-r--r-- 1 root root 3446 août 8 14:33 10-ssl.conf
-rw-r--r-- 1 root root 291 juil. 7 19:13 10-tcpwrapper.conf
-rw-r--r-- 1 root root 1657 août 6 2021 15-lda.conf
-rw-r--r-- 1 root root 3250 août 8 14:02 15-mailboxes.conf
-rw-r--r-- 1 root root 4540 août 8 14:58 20-imap.conf
-rw-r--r-- 1 root root 1424 août 8 14:56 20-lmtp.conf
-rw-r--r-- 1 root root 2951 août 8 15:00 20-managesieve.conf
-rw-r--r-- 1 root root 4066 août 6 2021 20-pop3.conf
-rw-r--r-- 1 root root 676 août 6 2021 90-acl.conf
-rw-r--r-- 1 root root 292 août 6 2021 90-plugin.conf
-rw-r--r-- 1 root root 3229 août 8 14:02 90-quota.conf
-rw-r--r-- 1 root root 10981 août 8 15:02 90-sieve.conf
-rw-r--r-- 1 root root 1829 août 6 2021 90-sieve-extprograms.conf
-rw-r--r-- 1 root root 499 août 6 2021 auth-checkpassword.conf.ext
-rw-r--r-- 1 root root 489 août 6 2021 auth-deny.conf.ext
-rw-r--r-- 1 root root 343 août 6 2021 auth-dict.conf.ext
-rw-r--r-- 1 root root 561 août 6 2021 auth-master.conf.ext
-rw-r--r-- 1 root root 515 août 6 2021 auth-passwdfile.conf.ext
-rw-r--r-- 1 root root 788 août 6 2021 auth-sql.conf.ext
-rw-r--r-- 1 root root 611 août 6 2021 auth-static.conf.ext
-rw-r--r-- 1 root root 2182 août 6 2021 auth-system.conf.ext
'''

thanks you in advance to help myself repair dovecot,

regards.

Dorian ROSSE.

Revision history for this message
Bryce Harrington (bryce) wrote :

Hi Dorian,

I think your problem is at the end of your 10-master.conf:

service dict {
unix_listener dict {
    mode = 0660
    user = vmail
    group = vmail
}

You are missing a curly bracket at the end of the file. These settings are shipped disabled so guessing these got configured on at some point in the past, so perhaps the typo occurred then? Let us know if this fixes things for you.

Changed in dovecot (Ubuntu):
status: Incomplete → New
status: New → Incomplete
Revision history for this message
Dorian Rosse (dodozzz16493610) wrote :

hello,

now we pass this error i am got another error that i don't understand well thus it say it miss one opening bracket on line 33 unfornately i have tried at the begun of the line or else a the end of the line finally the program keep this error i paste firstly the code then i paste systemctl :

'''
##
## ManageSieve specific settings
##

# Uncomment to enable managesieve protocol:
#protocols = $protocols sieve

# Service definitions

  #inet_listener sieve_deprecated {
  # port = 2000
  #}

service managesieve-login {
inet_listener sieve {
    port = 4190
}
}

  # Number of connections to handle before starting a new process. Typically
  # the only useful values are 0 (unlimited) or 1. 1 is more secure, but 0
  # is faster. <doc/wiki/LoginProcess.txt>
  #service_count = 1

  # Number of processes to always keep waiting for more connections.
  #process_min_avail = 0

  # If you set service_count=0, you probably need to grow this.
  #vsz_limit = 64M
#}

service managesieve {
  Max. number of ManageSieve processes (connections)
  process_limit = 1024
}
'''

'''sudo systemctl status dovecot
× dovecot.service - Dovecot IMAP/POP3 email server
     Loaded: loaded (/lib/systemd/system/dovecot.service; enabled; vendor preset: enabled)
     Active: failed (Result: exit-code) since Mon 2022-08-22 22:28:03 CEST; 8min ago
       Docs: man:dovecot(1)
             https://doc.dovecot.org/
    Process: 111106 ExecStart=/usr/sbin/dovecot -F (code=exited, status=89)
   Main PID: 111106 (code=exited, status=89)
        CPU: 28ms

août 22 22:28:03 Ubuntu-ThinkPad-X250 systemd[1]: Starting Dovecot IMAP/POP3 email server...
août 22 22:28:03 Ubuntu-ThinkPad-X250 dovecot[111107]: doveconf: Fatal: Error in configuration file /etc/dovecot/conf.d/20-managesieve.conf line 33: Expecting '{'
août 22 22:28:03 Ubuntu-ThinkPad-X250 dovecot[111106]: doveconf: Error: managesieve-login: dump-capability process returned 89
août 22 22:28:03 Ubuntu-ThinkPad-X250 dovecot[111106]: doveconf: Fatal: Error in configuration file /etc/dovecot/conf.d/10-ssl.conf line 12: ssl_cert: Can't open file /etc/letsencrypt/live/mail.example.com/fullchain.pem: No such file or directory
août 22 22:28:03 Ubuntu-ThinkPad-X250 systemd[1]: dovecot.service: Main process exited, code=exited, status=89/n/a
août 22 22:28:03 Ubuntu-ThinkPad-X250 systemd[1]: dovecot.service: Failed with result 'exit-code'.
août 22 22:28:03 Ubuntu-ThinkPad-X250 systemd[1]: Failed to start Dovecot IMAP/POP3 email server.
'''

thanks you in advance for your help,

Regards.

Dorian ROSSE.

Revision history for this message
Athos Ribeiro (athos-ribeiro) wrote :

Hi Dorian,

Thank you for taking the time to report bugs and help make Ubuntu better.

This looks like a local configuration issue rather than a bug in the software itself. Please check your configuration to make sure it's correct. If you need help configuring, you can get community support in the Ubuntu channels on freenode.net, or in http://www.ubuntu.com/support/community

I'm marking this "Invalid" because it doesn't appear to be a bug, but if I'm wrong, please change it back to "New" and add some more info to point me in the right direction. Use this link as a guide: http://www.chiark.greenend.org.uk/~sgtatham/bugs.html

Changed in dovecot (Ubuntu):
status: Incomplete → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.