Dovecot config keeps breaking

Hi,

Had all of that happened running Virtualmin 6.10 or 6.11?

How does your /etc/dovecot/dovecot.conf look like at the moment?

For me problem occurs again.

My host debian 9 and latest virtualmin.

Dovecot config is corrupted after those lines in syslog

.................

ug 5 19:16:02 host6 systemd[1]: Started User Manager for UID 1221.

Aug 5 19:16:02 host6 systemd[1]: Stopping User Manager for UID 1221...

Aug 5 19:16:02 host6 systemd[3413]: Failed to enqueue exit.target job: Access denied

Aug 5 19:16:02 host6 systemd[1]: Stopped User Manager for UID 1221.

Aug 5 19:16:02 host6 systemd[1]: Removed slice User Slice of avantura.

Aug 5 19:16:02 host6 systemd[1]: Created slice User Slice of avantura.

Aug 5 19:16:02 host6 systemd[1]: Starting User Manager for UID 1221...

Aug 5 19:16:02 host6 systemd[1]: Started Session c293514 of user avantura.

Aug 5 19:16:02 host6 systemd[3425]: Reached target Timers.

Aug 5 19:16:02 host6 systemd[3425]: gpg-agent-browser.socket: Socket service gpg-agent.service not loaded, refusing.

Aug 5 19:16:02 host6 systemd[3425]: Failed to listen on GnuPG cryptographic agent (access for web browsers).

Aug 5 19:16:02 host6 systemd[3425]: gpg-agent-ssh.socket: Socket service gpg-agent.service not loaded, refusing.

Aug 5 19:16:02 host6 systemd[3425]: Failed to listen on GnuPG cryptographic agent (ssh-agent emulation).

Aug 5 19:16:02 host6 systemd[3425]: gpg-agent.socket: Socket service gpg-agent.service not loaded, refusing.

Aug 5 19:16:02 host6 systemd[3425]: Failed to listen on GnuPG cryptographic agent and passphrase cache.

Aug 5 19:16:02 host6 systemd[3425]: Reached target Paths.

Aug 5 19:16:02 host6 systemd[3425]: gpg-agent-extra.socket: Socket service gpg-agent.service not loaded, refusing.

Aug 5 19:16:02 host6 systemd[3425]: Failed to listen on GnuPG cryptographic agent and passphrase cache (restricted).

Aug 5 19:16:02 host6 systemd[3425]: Reached target Sockets.

Aug 5 19:16:02 host6 systemd[3425]: Reached target Basic System.

Aug 5 19:16:02 host6 systemd[3425]: Reached target Default.

Aug 5 19:16:02 host6 systemd[3425]: Startup finished in 26ms.

Aug 5 19:16:02 host6 systemd[1]: Started User Manager for UID 1221.

Aug 5 19:16:02 host6 systemd[1]: Stopping User Manager for UID 1221...

Aug 5 19:16:02 host6 systemd[3425]: Failed to enqueue exit.target job: Access denied

Aug 5 19:16:02 host6 systemd[1]: Stopped User Manager for UID 1221.

Aug 5 19:16:02 host6 systemd[1]: Removed slice User Slice of avantura.

Aug 5 19:16:23 host6 dovecot: config: Fatal: Error in configuration file /etc/dovecot/dovecot.conf: Missing '}' (section started at /etc/dovecot/dovecot.conf:149)

Aug 5 19:16:23 host6 dovecot: master: Error: service(config): command startup failed, throttling for 2 secs

.................................

When certbos is running to renew certs all was ok.

Here is the fix:

https://forum.virtualmin.com/t/dovecote-conf-feedback/106946/19?u=ilia

Can I also weigh in on this, I am having the exact same issues. Twice in the last few weeks SSL updates for client domains have corrupted this file and taken my dovecot services offline.

here is an example This domain SSL updated yesterday... (note the missing "}" below in dovecot.conf

Here same issue yesterday. Does the patch work for that or is it more safe to wait for a regular update?

I think the issue is not just soving the bug but checking the dovecot config before applying it. mail is such an important part of a hosters system, it should justify the extra effort here.

Does the patch work for that or is it more safe to wait for a regular update?

It would work, however, for now, I would manually edited dovecot.conf file and made sure to remove all ssl_ca directives, leaving out only ssl_cert and ssl_key. Even with Virtualmin 6.11 the issue will not happen, if there is no ssl_ca directive. Virtualmin 6.12 will work either way, and remove automatically ssl_ca directive properly.

Alternatively, you could run the following script to do it for you, which will fix it all in no time, in case of too many virtual servers. To run this, you would need to have a legit Dovecot config, having all curly brackets in place.

#!/bin/sh
doms=`virtualmin list-domains --name-only --no-alias`
for dom in $doms; do
        virtualmin install-service-cert --domain $dom --remove-domain --service dovecot
        virtualmin install-service-cert --domain $dom --add-domain --service dovecot
done

Note: Put this code in a file and run as sh script-name.