[Dovecot] Permission problems

[M. Rodrigo Monteiro]

2008/7/18 M. Rodrigo Monteiro <falecom at rodrigomonteiro.net>:

>
>
> 2008/7/17 Benny Pedersen <me at junc.org>:
>
>
>> On Thu, July 17, 2008 20:20, Timo Sirainen wrote:
>>
>> > This directory or one of its parent directories isn't owned by the user
>> > that logged in. So if you're using UID 108, chown -R 108 /home/vmail
>> > should do it.
>>
>> currect if id 108 gives 108
>>
>> if i am wroung tell me
>>
>>
>> --
>> Benny Pedersen
>> Need more webspace ? http://www.servage.net/?coupon=cust37098
>>
>>
> I'm reinstalling it. I'll upgrade dovecot to the latest version...
>
> Thanks for now,
> Rodrigo.
>
> --
> M. Rodrigo Monteiro
> falecom at rodrigomonteiro.net
> "Free as in Freedom, not free as in free beer"
> Linux User # 403730
>

Now it's a fresh installation with all the packages updated.
The problem is that I can't login with any user.
When I send an test e-mail to a new user, the directory
domain.ce.gov.br/user is created ok...

Here is the config.:


~# id dovecot
uid=201(dovecot) gid=201(dovecot) grupos=201(dovecot)

# id dovecot-auth
uid=202(dovecot-auth) gid=202(dovecot-auth) grupos=202(dovecot-auth)

# id vmail
uid=200(vmail) gid=200(vmail) grupos=200(vmail)

# /usr/local/dovecot/sbin/dovecot -n
# 1.1.1: /usr/local/dovecot/etc/dovecot.conf
log_path: /var/log/dovecot.log
info_log_path: /var/log/dovecot-info.log
ssl_disable: yes
disable_plaintext_auth: no
login_dir: /usr/local/dovecot/var/run/dovecot/login
login_executable: /usr/local/dovecot/libexec/dovecot/imap-login
valid_chroot_dirs: /home/vmail/domains
first_valid_uid: 201
last_valid_uid: 201
first_valid_gid: 201
last_valid_gid: 201
mail_location: maildir:/home/vmail/domains/%d/%n
auth default:
  user: dovecot-auth
  verbose: yes
  debug: yes
  debug_passwords: yes
  passdb:
    driver: ldap
    args: /usr/local/dovecot/etc/dovecot-ldap.conf
  userdb:
    driver: ldap
    args: /usr/local/dovecot/etc/dovecot-ldap.conf


# grep -v '^ *\(#.*\)\?$' /usr/local/dovecot/etc/dovecot-ldap.conf
hosts = localhost
dn = cn=dovecot,dc=XXXX,dc=ce,dc=gov,dc=br
dnpass = XXXXXXXX
ldap_version = 3
base = o=mail, dc=XXXX, dc=ce, dc=gov, dc=br
deref = never
scope = subtree
user_attrs = mail,homeDirectory,,,,
user_filter =
(&(objectClass=JammMailAccount)(mail=%u)(accountActive=TRUE)(delete=FALSE))
pass_attrs = mail,userPassword
pass_filter =
(&(objectClass=JammMailAccount)(mail=%u)(accountActive=TRUE)(delete=FALSE))
default_pass_scheme = CRYPT

# tail -f /var/log/dovecot.log
dovecot: Jul 18 14:21:28 Error: auth(default):
ldap(rodrigo at XXXX.ce.gov.br,XXX.XXX.XXX.XXX):
No password in reply

# cat /etc/saslauthd.conf
ldap_servers: ldap://127.0.0.1
ldap_search_base: o=mail,dc=XXXXX,dc=ce,dc=gov,dc=br
ldap_filter: (&(objectClass=JammMailAccount)(mail=%u@
%r)(accountActive=TRUE)(delete=FALSE))

# tail -f /var/log/dovecot-info.log
dovecot: Jul 18 14:21:26 Info: auth(default): client in: AUTH   1
PLAIN   service=imap    lip=172.31.4.43 rip=XXX.XXX.XXX.XXX
lport=143       rport=3860
dovecot: Jul 18 14:21:26 Info: auth(default): client out: CONT  1
dovecot: Jul 18 14:21:26 Info: auth(default): client in: CONT   1
AHJvZHJpZ29Ac2VkdWMuY2UuZ292LmJyAHRlc3Rl
dovecot: Jul 18 14:21:26 Info: auth(default):
ldap(rodrigo at XXXX.ce.gov.br,XXX.XXX.XXX.XXX):
pass search: base=o=mail, dc=XXXX, dc=ce, dc=gov, dc=br scope=subtree
filter=(&(objectClass=JammMailAccount)(mail=rodrigo at XXXX.ce.gov.br)(accountActive=TRUE)(delete=FALSE))
fields=mail,userPassword
dovecot: Jul 18 14:21:26 Info: auth(default):
ldap(rodrigo at XXXX.ce.gov.br,XXX.XXX.XXX.XXX):
result: mail(mail)=rodrigo at XXXX.ce.gov.bruserPassword(userPassword)={CRYPT}YZJZNkBk381gg
dovecot: Jul 18 14:21:28 Info: auth(default): client out: FAIL  1
user=rodrigo at XXXX.ce.gov.br    temp
mail=rodrigo at XXXX.ce.gov.bruserPassword={CRYPT}YZJZNkBk381gg

# tail -f /var/log/syslog
Jul 18 14:21:26 sedsrv043 slapd[1888]: conn=0 op=1 SRCH
base="o=mail,dc=XXXX,dc=ce,dc=gov,dc=br" scope=2 deref=0
filter="(&(objectClass=JammMailAccount)(mail=rodrigo at XXXX.ce.gov.br
)(accountActive=TRUE)(delete=FALSE))"
Jul 18 14:21:26 sedsrv043 slapd[1888]: conn=0 op=1 SRCH attr=mail
userPassword
Jul 18 14:21:26 sedsrv043 slapd[1888]: <= bdb_equality_candidates: (mail)
not indexed
Jul 18 14:21:26 sedsrv043 slapd[1888]: <= bdb_equality_candidates:
(accountActive) not indexed
Jul 18 14:21:26 sedsrv043 slapd[1888]: <= bdb_equality_candidates: (delete)
not indexed
Jul 18 14:21:26 sedsrv043 slapd[1888]: conn=0 op=1 SEARCH RESULT tag=101
err=0 nentries=1 text=
Jul 18 14:21:28 sedsrv043 slapd[1888]: conn=0 op=2 SRCH
base="o=mail,dc=XXXX,dc=ce,dc=gov,dc=br" scope=2 deref=0
filter="(&(objectClass=JammMailAccount)(mail=rodrigo at XXXX.ce.gov.br
)(accountActive=TRUE)(delete=FALSE))"

In phpLDAPadmin the userPassword attribute is {CRYPT}YZJZNkBk381gg


Regards,
Rodrigo.


-- 
M. Rodrigo Monteiro
falecom at rodrigomonteiro.net
"Free as in Freedom, not free as in free beer"
Linux User # 403730