• Proxying now supports sending SSL client certificate to server with ssl_client_cert/key settings.
• doveadm dump: Added support for dumping dbox headers/metadata.
• Fixed memory leaks in login processes with SSL connections
• vpopmail support was broken in v2.0.16

Comment from Timo on this release was:

I only now noticed that the VSZ limits weren’t being enforced with earlier v2.0.x releases (or they were set 1024 times too high). So if a Dovecot process was leaking memory, it wasn’t being killed by kernel. Now that this enforcing is done, some installations will probably start seeing errors about reaching these limits in normal operation. The default_vsz_limit is 256 MB. You may want to increase it in larger installations to 1 GB just in case.

Besides the changes listed below, a lot of smaller fixes were done.

A list of the bigger fixes:

• VSZ limits weren’t being enforced for any processes. On server with large mailboxes you may now see errors about it if the limits aren’t high enough. To fix them, either increase individual service { vsz_limit } values or simply increase the default_vsz_limit setting.
• Proxying: If using ssl=yes or starttls=yes with a hostname (not IP) as proxy destination, require that the certificate matches the given hostname.
• LMTP: Changed default client_limit to 1. This should improve LMTP throughput with default settings.
• dsync: Quota is no longer enforced (i.e. dsync can’t fail because user is over quota).
• Added “auto” mail storage driver, which can be used to auto detect mailbox location and format. This behavior is already the default for empty mail_location setting, so this change is mainly useful for shared namespace’s location setting.
• checkpassword: Export all auth %variables to AUTH_* environment.

http://diymacserver.com/mail/lion/

So enjoy your new installation of Lion with these instructions.

In the coming week I will move all my stuff to the new Mini, hopefully without too much interruptions in our service.

• Added “doveadm index” command to add unindexed messages into index/cache. If full text search is enabled, it also adds unindexed messages to the fts database
• added “doveadm director dump” command.
• pop3: Added support for showing messages in “POP3 order”, which can be different from IMAP message order. This can be useful for migrations from other servers. Implemented it for Maildir as ‘O’ field in dovecot-uidlist.
• doveconf: Fixed a wrong “subsection has ssl=yes” warning.
• mdbox purge: Fixed wrong warning about corrupted extrefs.
• sdbox: INBOX GUID changed when INBOX was autocreated, leading to trouble with dsync.
• script-login binary wasn’t actually dropping privileges to the user/group/chroot specified by its service settings.
• Fixed potential crashes and other problems when parsing header names that contained NUL characters.

• doveadm: Added “move” command for moving mails between mailboxes.
• virtual: Added support for “+mailbox” entries that clear Recent flag from messages (default is to preserve them).
• dbox: Fixes to handling external attachments
• dsync: More fixes to avoid hanging with remote syncs
• dsync: Many other syncing/correctness fixes
• doveconf: v2.0.10 and v2.0.11 didn’t output plugin {} section right

So here is the list of items solved in 2.0.10

• LMTP: For user+detail@domain deliveries, the +detail is again written to Delivered-To: header.
• Skip auth penalty checks from IPs in login_trusted_networks.
• Added import_environment setting.
• Added submission_host setting to send mails via SMTP instead of via sendmail binary.
• Added doveadm acl get/set/delete commands for ACL manipulation, similar to how IMAP ACL extension works.
• Added doveadm acl debug command to help debug and fix problems with why shared mailboxes aren’t working as expected.
• IMAP: Fixed hangs with COMPRESS extension
• IMAP: Fixed a hang when trying to COPY to a nonexistent mailbox.
• IMAP: Fixed hang/crash with SEARCHRES + pipelining $.
• IMAP: Fixed assert-crash if IDLE+DONE is sent in same TCP packet.
• LMTP: Fixed sending multiple messages in a session.
• doveadm: Fixed giving parameters to mail commands.
• doveadm import: Settings weren’t correctly used for the import storage.
• dsync: Fixed somewhat random failures with saving messages to remote dsync.
• v2.0.9: Config reload didn’t notify running processes with shutdown_clients=no, so they could have kept serving new clients with old settings.

And here is the issues solved in 2.0.11

• dotlock_use_excl setting’s default was accidentally “no” in all v2.0.x releases, instead of “yes” as in v1.1 and v1.2. Changed it back to “yes”.
• v2.0.10: LDAP support was broken
• v2.0.10: dsyncing to remote often hanged (timed out in 15 mins)

I’ve tested it and is running already on a production machine.

• Linux: Fixed a high system CPU usage / high context switch count performance problem
• Maildir: Avoid unnecessarily reading dovecot-uidlist while opening mailbox.
• Maildir: Fixed renaming child mailboxes when namespace had a prefix.
• mdbox: Don’t leave partially written messages to mdbox files when aborting saving.
• Fixed master user logins when using userdb prefetch
• lda: Fixed a crash when trying to send “out of quota” reply
• lmtp: If delivering duplicate messages to same user’s INBOX, create different GUIDs for them. This helps to avoid duplicate POP3 UIDLs when pop3_uidl_format=%g.
• virtual storage: Fixed saving multiple mails in a transaction (e.g. copy multiple messages).
• dsync: Saved messages’ save-date was set to 1970-01-01.

So here is a quick overview of people who are eager to use MySQL 5.5.x, I will update the other stuff over the next few weeks accordingly. By the way I’ve only done this on Snow Leopard, the Leopard version is only available for Intel, so no more PPC support from MySQL.

First get the binary installer package for MySQL 5.5.x from here (I’ve used 5.5.8) and install only the software (no preference pane or startup item).

If you haven’t installed Apache yet now is a good time. (Installing Apache)

Next up is PHP, this requires a new compilation instruction. From now on we will use the native MySQL driver for compilation. Which means changing:

–with-mysql=/usr/local/mysql
–with-pdo-mysql=/usr/local/mysql
–with-mysqli=/usr/local/mysql/bin/mysql_config

into:

–with-mysql=mysqlnd
–with-pdo-mysql=mysqlnd
–with-mysqli=mysqlnd

In all the compilation instructions found here and it all will compile perfectly.

For Postfix and Dovecot we require a bit of a workaround to get it working properly as the MySQL installation does not correctly sets the full library paths. You can see this when you execute the command:

otool -DX /usr/local/mysql/lib/libmysqlclient.dylib

You can correct it by executing the following command:

sudo install_name_tool -id /usr/local/mysql/lib/libmysqlclient.16.dylib /usr/local/mysql/lib/libmysqlclient.dylib

If you’ve done this you can compile Postfix and Dovecot using the existing instructions without any problem.

• Services’ default vsz_limits weren’t being enforced correctly in earlier v2.0 releases. Now that they are enforced, you might notice that the default limits are too low and you need to increase them. This problem will show up in logs as “out of memory” errors. See default_vsz_limit and service { vsz_limit } settings.
• LMTP: In earlier versions if mail was delivered to user+detail@domain address, LMTP server always attempted to deliver the mail to mailbox named “detail”. This was rather unintentional and shouldn’t have been the default. lmtp_save_to_detail_mailbox=yes setting now preserves this behavior (default is no).
• Added systemd support (configure –with-systemdsystemunitdir). Based on patch by Christophe Fergeau.
• Replaced broken mbox-snarf plugin with a new more generic snarf plugin.
• dbox: Fixes to handling external mail attachments
• verbose_proctitle=yes didn’t work for all processes in v2.0.7
• imap, pop3: When service { client_count } was larger than 1, the log messages didn’t use the correct prefix. Last logged in user’s prefix was always used, regardless of what user’s session actually logged it. Now the proper log prefix is always used.
• MySQL: Only the first specified host was ever used

• master: default_process_limit wasn’t actually used anywhere, rather the default was unlimited. Now that it is enforced, you might notice that the default limit is too low and you need to increase it. Dovecot logs a warning when this happens.
• mail-log plugin: Log mailbox name as virtual name rather than physical name (e.g. namespace prefix is included in the name)
• doveadm dump: Added imapzlib type to uncompress IMAP’s COMPRESS DEFLATE I/O traffic (e.g. from rawlog).
• IMAP: Fixed LIST-STATUS when listing subscriptions with subscriptions=no namespaces.
• IMAP: Fixed SELECT QRESYNC not to crash on mailbox close if a lot of changes were being sent.
• quota: Don’t count virtual mailboxes in quota
• doveadm expunge didn’t always actually do the physical expunging
• Fixed some index reading optimizations introduced by v2.0.5.
• LMTP proxying fixes