No Nethserver email via Nextcloud Mail app

[thorsten]

Yippiihahhhaaa … das klalalalalappt … Danke schön. Mail in Nextcloud funktioniert nun.

Edit - Translation
Yippiihahhhaaa … that wowowowoworks… Thanky you. Mail in Nextcloud up and running

[schweidj (Joachim Schweidler)]

Great. This solution fixes the problem for me too.

Thank you very much @mrmarkuz

[DavidG (David Gordon)]

Nextclould email has stopped again
I tried applying the command again but no luck. My mail is working fine elsewhere including via RoundCube. Meanwhile over in my Nextclould logs I see email errors

Fatal mail OCA\Mail\Exception\ServiceException: IMAP errorError connecting to mail server.

Maybe it really is time to give up on Nextcloud mail. How is everyone else’s running?

[m.traeumner (Michael Träumner)]

@mrmarkuz Do you have an idea?

[DavidG (David Gordon)]

I’m not going to worry about this, I’ve removed the email from Nextcloud. I don’t really need it. Nice to have but too much trouble.

[royceb (Royce)]

@mrmarkuz

doveadm acl set -A Public authenticated lookup read

This resolved the issue for me.

1 NethServer (email host) installed and I applied this ACL and it resolved my ability to have a secondary NethServer (nextcloud) login and function properly.

[DavidG (David Gordon)]

Yes, that’s the code I used a few weeks ago to get NC mail working. I did try again but it didn’t work this time. As I say, I can live without NC mail. I have Roundcube.

[mmaridev (Marco Marinello)]

Thank you. This command worked for me too. Just a question: what does this acl mean? Does it have any security issue? May I allow it on a single IP?

Thanks

[dnutan (Marc)]

@mrmarkuz

The doveadm command just sets an additional read right for the Public folder. I don’t think that any client has a problem with that.

doveadm acl set -A Public authenticated lookup should reset the Public folder permissions as they were before.

Wiki has been closed

Access public junk folder from roundcube

The permissions are set in dovecot, the IMAP server. You need to use doveadm acl on command line. Just to give some ideas: Get permissions for Junk folder: doveadm acl get -A Public/Junk Set permissions for authenticated users to allow read of Junk folder: doveadm acl set -A Public/Junk authenticated lookup read Delete permissions for authenticated users on Junk folder: doveadm acl delete -A Public/Junk authenticated

[fausp (fpausp)]

@mrmarkuz

Please try the following to set ACLs for public folder and then try again to configure Nextcloud Mail.

doveadm acl set -A Public authenticated lookup read

I found another thread about the Nextcloud error and I think @thorsten is right here:

Hi, I am not shure, but for my feeling, it has something to do with this here: → Maybe the forbidden ACL leads to the same error, however with a larger impact on the nextcloud client. I am more and more convinced that may be solved on the Dovecot level. Maybe it could be worth giving a try to alter devecot ACL. Best regards Thorsten

I cant get it to work… I would like to get a log of it, where can I find it?

[mrmarkuz (Markus Neuberger)]

Nextcloud logs are in /var/lib/nethserver/nextcloud/nextcloud.log.

[fausp (fpausp)]

Thank you! Just got this:

{"reqId":"XywGm9-zv6br5OLMym7p2wAAAAk","level":4,"time":"2020-08-06T13:33:15+00:00","remoteAddr":"10.1.2.6","user":"xxxxxxxx-...","app":"mail","method":"POST","url":"/nextcloud/index.php/apps/mail/api/accounts","message":"Creating account failed: Could not connect to IMAP: Error connecting to mail server.","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0","version":"19.0.1.1"}

Any suggestions elsewhere to debug?

[mrmarkuz (Markus Neuberger)]

Maybe telnet to imap port to check if you get the “NOPERM permission denied” error:

Nextcloud mail app config error

I tested both on my production machine and on a freshly installed VM. Do you also get the NOPERM answer when querying the server using the STATUS command ? # telnet localhost 143 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready. . LOGIN matthieu@mydomain.tld password . STATUS Public (MESSAGES) . NO [NOPERM] Permission denied (0.001 + 0.000 se…

Let’s check the permissions:

doveadm acl get -A Public

To set them for working nextcloud mail:

doveadm acl set -A Public authenticated lookup read

[fausp (fpausp)]

@mrmarkuz

doveadm acl get -A Public

[mrmarkuz (Markus Neuberger)]

We need lookup and read, only lookup is not enough.

Please execute

doveadm acl set -A Public authenticated lookup read

to set the needed permissions.

[fausp (fpausp)]

@mrmarkuz

We need lookup and read, only lookup is not enough.

OK, I will test it soon… Thank you!

[fausp (fpausp)]

I still cannot connect. There must be something else?

[mrmarkuz (Markus Neuberger)]

I tested now and it worked with real domainname (and letsencrypt) instead of localhost and in the mail address part (instead of .lan). Maybe the NC mail app validates the mail addresses and servers.

[fausp (fpausp)]

OK, thank you Markus!