• Session ID is now included by default in auth and login process log lines. It can be added to mail processes also by adding %{session} to mail_log_prefix.
• Added ssl_require_crl setting, which specifies if CRL check must be successful when verifying client certificates.
• Added mail_shared_explicit_inbox setting to specify if a shared INBOX should be accessible as “shared/$user” or “shared/$user/INBOX”.
• v2.1.5: Using “~/” as mail_location or elsewhere failed to actually expand it to home directory.
• dbox: Fixed potential assert-crash when reading dbox files.
• trash plugin: Fixed behavior when quota is already over limit.
• mail_log plugin: Logging “copy” event didn’t work.
• Proxying to backend server with SSL: Verifying server certificate
  name always failed, because it was compared to an IP address.

And here are the upgrade instructions for Dovecot!

• IMAP: When neither the session nor the mailbox has modseq tracking enabled, return the mailbox as having NOMODSEQ in SELECT/EXAMINE reply. Old versions in this situation always simply returned HIGHESTMODSEQ as 1, which could have broken some clients.
• dict file: Added optional fcntl/flock locking (default is dotlock)
• fts-solr: doveadm fts rescan now resets indexes, which allows reindexing mails. (This isn’t a full rescan implementation like fts-lucene has.)
• doveadm expunge: Added -d parameter to delete mailbox if it’s empty after expunging.
• IMAP: Several fixes related to mailbox listing in some configs
• director: A lot of fixes and performance improvements
• v2.1.4 didn’t work without a mail home directory set
• mbox: Deleting a mailbox didn’t delete its index files.
• pop3c: TOP command was sent incorrectly
• trash plugin didn’t work properly
• LMTP: Don’t add a duplicate Return-Path: header when proxying.
• listescape: Don’t unescape namespace prefixes.

And here are the upgrade instructions for Dovecot!

• Initial implementation of dsync-based replication. For now this should be used only on non-critical systems.
• Proxying: POP3 now supports sending remote IP+port from proxy to backend server via Dovecot-specific XCLIENT extension.
• Proxying: proxy_maybe=yes with host= (instead of IP) works now properly.
• Proxying: Added auth_proxy_self setting
• Proxying: Added proxy_always extra field (see wiki docs)
• Added director_username_hash setting to specify what part of the username is hashed. This can be used to implement per-domain backends (which allows safely accessing shared mailboxes within domain).
• + Added a “session ID” string for imap/pop3 connections, available in %{session} variable. The session ID passes through Dovecot IMAP/POP3 proxying to backend server. The same session ID is can be reused after a long time (currently a bit under 9 years).
• passdb checkpassword: Support “credentials lookups” (for non-plaintext auth and for lmtp_proxy lookups)
• fts: Added fts_index_timeout setting to abort search if indexing hasn’t finished by then (default is to wait forever).
• doveadm sync: If mailbox was expunged empty, messages may have become back instead of also being expunged in the other side.
• director: If user logged into two directors while near user expiration, the directors might have redirected the user to two different backends.
• imap_id_* settings were ignored before login.
• Several fixes to mailbox_list_index=yes
• Previous v2.1.x didn’t log all messages at shutdown.
• mbox: Fixed accessing Dovecot v1.x mbox index files without errors.

And as usual here are the upgrade instructions for Dovecot!

I’ve got it running on my machines and I’m very happy with it.

The only change that might affect your installation in the upgrade to 2.1.x is that Dovecot lost the case sensitivity for its usernames. If you want to re-enable that please set auth_username_format= (i.e. to empty).

And as an extra here are the upgrade instructions for Dovecot!

I need to compile, test and adjust everything where necessary and as you might understand with major upgrade there is more going on then just a compile, run and test. There are new configuration options to be evaluated and older ones deprecated that might need a new one or a workaround for lost functionality.

So I’m working on it but it take a bit longer then usual…

• DIGEST-MD5 authentication supports authorization id now. Patch by Yubao Liu
• Added instance_name setting which is used to prefix Dovecot processes in ps output.
• LDA/LMTP: Sending a large mail via submission_host or via LMTP proxy may have caused a hang.
• Fixed dbox + mail_attachment_dir + zlib problems.
• Login processes weren’t logging all intended messages with auth_verbose=yes
• IMAP: THREAD REFS sometimes returned invalid (0) nodes.
• IMAP: CONTEXT search return option wasn’t handled at all.
• dbox: Various error handling fixes.
• snarf plugin: Keep the mailbox locked during snarfing to avoid duplicates.

• Proxying now supports sending SSL client certificate to server with ssl_client_cert/key settings.
• doveadm dump: Added support for dumping dbox headers/metadata.
• Fixed memory leaks in login processes with SSL connections
• vpopmail support was broken in v2.0.16

Comment from Timo on this release was:

I only now noticed that the VSZ limits weren’t being enforced with earlier v2.0.x releases (or they were set 1024 times too high). So if a Dovecot process was leaking memory, it wasn’t being killed by kernel. Now that this enforcing is done, some installations will probably start seeing errors about reaching these limits in normal operation. The default_vsz_limit is 256 MB. You may want to increase it in larger installations to 1 GB just in case.

Besides the changes listed below, a lot of smaller fixes were done.

A list of the bigger fixes:

• VSZ limits weren’t being enforced for any processes. On server with large mailboxes you may now see errors about it if the limits aren’t high enough. To fix them, either increase individual service { vsz_limit } values or simply increase the default_vsz_limit setting.
• Proxying: If using ssl=yes or starttls=yes with a hostname (not IP) as proxy destination, require that the certificate matches the given hostname.
• LMTP: Changed default client_limit to 1. This should improve LMTP throughput with default settings.
• dsync: Quota is no longer enforced (i.e. dsync can’t fail because user is over quota).
• Added “auto” mail storage driver, which can be used to auto detect mailbox location and format. This behavior is already the default for empty mail_location setting, so this change is mainly useful for shared namespace’s location setting.
• checkpassword: Export all auth %variables to AUTH_* environment.

http://diymacserver.com/mail/lion/

So enjoy your new installation of Lion with these instructions.

In the coming week I will move all my stuff to the new Mini, hopefully without too much interruptions in our service.

• Added “doveadm index” command to add unindexed messages into index/cache. If full text search is enabled, it also adds unindexed messages to the fts database
• added “doveadm director dump” command.
• pop3: Added support for showing messages in “POP3 order”, which can be different from IMAP message order. This can be useful for migrations from other servers. Implemented it for Maildir as ‘O’ field in dovecot-uidlist.
• doveconf: Fixed a wrong “subsection has ssl=yes” warning.
• mdbox purge: Fixed wrong warning about corrupted extrefs.
• sdbox: INBOX GUID changed when INBOX was autocreated, leading to trouble with dsync.
• script-login binary wasn’t actually dropping privileges to the user/group/chroot specified by its service settings.
• Fixed potential crashes and other problems when parsing header names that contained NUL characters.