OK ��� I think I am golden now.�� had a couple of other minor issues with dovecot as well but all figured out:

 

-Needed to add ssl_protocols = !SSLv2 !SSLv3 to dovecot.conf (along with my ssl_cipher_list = ALL:!LOW:!MED:!SSLv2) so that more commonly available ciphers could be negotiated (TLS 1.2 has pretty limited ciphers that are not generally available on email clients)

-a couple config and socket file path locations needed to be changed in config files

 

I see that dovecot creates a new process for the imap connection that uses the uid and gid entered in the virtual domain creation form.

 

Seems to be working well now, but I have a URIBL issue that I will send a separate message about if I do not find anything in the archives.

 

Thx!

 

From: users [mailto:users-bounces@exim4u.org] On Behalf Of Helmut Fritz
Sent: Thursday, April 14, 2016 10:25 PM
To: 'Exim4U General Discussion'
Subject: Re: [Exim4U] issues with setup

 

Got it ��� will check.  I think dovecot is running as dovecot.  Kinda makes sense as exim is running as mailnull:mail but can drop mail into that mail store.

 

Thx Rimas.

 

From: users [mailto:users-bounces@exim4u.org] On Behalf Of Rimas Kudelis
Sent: Thursday, April 14, 2016 9:58 PM
To: users@exim4u.org
Subject: Re: [Exim4U] issues with setup

 

Hi Helmut,


2016-04-15 07:13, Helmut Fritz wrote:

So incoming smtp is working, the domain directory gets created with the user, etc. when the mail comes in.  The issue is the domain directory is not getting created not getting created with any group permissions, only user.  I did put the uid and gid int the web form when creating the domain.

 

Since there are no group permissions and dovecot does not run as exim4u, it cannot access the mail store.

 

Any ideas?  I suppose I could have dovecot run as exim4u, but that does not seem like the right way to do it.


I just checked my server, and the situation is the same there: user's Maildir is created with access permissions for that user only. Yet my IMAP server runs under its own user.

I don't think umask is really the issue here. At least according to the Dovecot manual, you're supposed to simply run it as root by default. See http://wiki2.dovecot.org/RunningDovecot . I guess it drops unnecessary permissions when a user connects.

Regards,
Rimas