Please help: error after upgrade to version 2.1.16

Sat Apr 18 17:22:06 UTC 2015

Hallo

I can not find a forum at dovecot.org and I get a problem I can not solve.

After Updating to the version dovecot2  2.1.16  I can no more get eMails with my eMail-client. All has been working fine before.
Server: FreeBSD 10.0-RELEASE-p18, with
perl 5, version 18, subversion 4 (v5.18.4)

It seems it is an authentication problem with my server.
The errors are:
#cat dovecot.log
Apr 17 22:19:37 imap-login: Error: Timeout waiting for handshake from auth server. my pid=41810, input bytes=0
Apr 17 22:19:58 auth: Error: auth: environment corrupt; missing value for DOVECOT_
Apr 17 22:19:58 auth: Fatal: unsetenv(RESTRICT_SETUID) failed: Bad address
Apr 17 22:19:58 master: Error: service(auth): command startup failed, throttling for 60 secs
Apr 17 22:24:04 auth: Error: auth: environment corrupt; missing value for DOVECOT_
Apr 17 22:24:04 auth: Fatal: unsetenv(RESTRICT_SETUID) failed: Bad address
Apr 17 22:24:04 master: Error: service(auth): command startup failed, throttling for 60 secs

I have google and has nothing found about "..environment corrupt; missing value for DOVECOT_" and about "auth: Fatal: unsetenv(RESTRICT_SETUID) failed: Bad address"

I have make a reinstall - but doesn't help. I get the same error.
I have not forget to create new certs with the dovecote shell-script after installation.

I'm using passwd (virtual users). Make a cat on passwd shows that it is not empty. Also the date of the file show that the update installation has it not changed.
So I have not create the dovecot users again.

here are some other logs:
#cat dovecot-info.log
Apr 17 22:29:03 imap-login: Info: Disconnected: Auth process broken (disconnected before auth was ready, waited 1 secs): user=<>, rip=85.181.222.126, lip=78.47.225.20, TLS handshaking
Apr 17 22:29:33 imap-login: Info: Disconnected: Auth process broken (disconnected before auth was ready, waited 30 secs): user=<>, rip=85.181.222.126, lip=78.47.225.20, TLS
Apr 17 22:29:33 imap-login: Info: Disconnected: Auth process broken (disconnected before auth was ready, waited 30 secs): user=<>, rip=85.181.222.126, lip=78.47.225.20, TLS

#cat dovecot-debug.log
Apr 17 22:30:03 auth: Debug: Loading modules from directory: /usr/local/lib/dovecot/auth
Apr 17 22:30:03 auth: Debug: Read auth token secret from /var/run/dovecot//auth-token-secret.dat
Apr 17 22:34:01 auth: Debug: Loading modules from directory: /usr/local/lib/dovecot/auth
Apr 17 22:34:01 auth: Debug: Read auth token secret from /var/run/dovecot//auth-token-secret.dat
Apr 17 22:34:01 imap-login: Debug: SSL: where=0x10, ret=1: before/accept initialization [85.181.222.126]
Apr 17 22:34:01 imap-login: Debug: SSL: where=0x2001, ret=1: before/accept initialization [85.181.222.126]
Apr 17 22:34:01 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client hello A [85.181.222.126]
Apr 17 22:34:01 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server hello A [85.181.222.126]
Apr 17 22:34:01 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write certificate A [85.181.222.126]
Apr 17 22:34:01 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write key exchange A [85.181.222.126]
Apr 17 22:34:01 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server done A [85.181.222.126]
Apr 17 22:34:01 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 flush data [85.181.222.126]
Apr 17 22:34:01 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client certificate A [85.181.222.126]
Apr 17 22:34:01 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client key exchange A [85.181.222.126]
Apr 17 22:34:01 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client key exchange A [85.181.222.126]
Apr 17 22:34:01 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client key exchange A [85.181.222.126]
Apr 17 22:34:01 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client key exchange A [85.181.222.126]

########################################################################################
My configuration is
sendmail(MTA) -> procmail(LDA) -> dovecot(IMAP) with TLS and Maildir (no DB)
Authentification been done with dovecot password file (no real user, no OpenLDAP, no other DB-User)
#dovecot -n
# 2.2.16: /usr/local/etc/dovecot/dovecot.conf
# OS: FreeBSD 10.0-RELEASE-p18 amd64  ufs
auth_debug = yes
auth_mechanisms = digest-md5 plain login
auth_verbose = yes
auth_verbose_passwords = plain
base_dir = /var/run/dovecot/
debug_log_path = /var/log/dovecot-debug.log
default_internal_user = vmail
default_login_user = vmail
deliver_log_format = msgid=%m: %$ %f %s
disable_plaintext_auth = no
first_valid_uid = 1000
hostname = swdevil.de
info_log_path = /var/log/dovecot-info.log
lda_mailbox_autocreate = yes
lda_mailbox_autosubscribe = yes
log_path = /var/log/dovecot.log
login_greeting = IMAPd ready.
login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c
mail_access_groups = mailnull
mail_debug = yes
mail_location = maildir:/home/vmail/%d/%n/:INBOX=/home/vmail/%d/%n/.INBOX
mail_plugins = " virtual"
mail_temp_dir = /tmp/mail
namespace inbox {
  inbox = yes
  location =
  prefix =
}
passdb {
  args = scheme=DIGEST-MD5 username_format=%n /usr/local/etc/dovecot/pass
  driver = passwd-file
}
service auth-worker {
  group = wheel
  user = root
}
service imap-login {
  group = dovenull
  inet_listener imap {
    port = 0
  }
  inet_listener imaps {
    port = 993
  }
}
service imap {
  process_limit = 100
}
service pop3-login {
  group = dovenull
  inet_listener pop3 {
    port = 0
  }
  inet_listener pop3s {
    port = 0
  }
}
service pop3 {
  process_limit = 100
}
ssl = required
ssl_cert = </usr/local/etc/dovecot/certs/dovecot_ssl_crt.pem
ssl_key = </usr/local/etc/dovecot/certs/dovecot_ssl_key.pem
userdb {
  args = uid=vmail gid=vmail home=/home/vmail/%d/%n
  driver = static
}
verbose_proctitle = yes
verbose_ssl = yes
protocol pop3 {
  pop3_uidl_format = %08Xu%08Xv
}

Many thanks for Your advice what could be wrong.

Harald Langner
EU (Germany)