[Dovecot] LMTP: Rejecting unknown users

[Peer Heinlein]

Am Mittwoch 04 August 2010 schrieb Timo Sirainen:

> What are the full debug logs for this lookup? (What's different in
> them compared to "doveadm user"?)
>
> > ...it's still possible to send him e-mails...
>
> LMTP and "doveadm user" should send the same command to auth process
> and they should be processed identically.

Strange:

root at mail-archiv:/etc/dovecot# doveadm user notexistent at example.org
userdb lookup: user notexistent at example.org doesn't exist

root at mail-archiv:/etc/dovecot# echo hhhhh | sendmail 
notexistent at example.org

root at mail-archiv:/etc/dovecot# doveadm user notexistent at example.org
userdb: notexistent at example.org
  home      : /mail/example.org/notexistent
  uid       : 10000
  gid       : 10000
root at mail-archiv:/etc/dovecot# 


But the user still exists if his Maildir is deleted:

root at mail-archiv:/mail/example.org# rm -R /mail/example.org/notexistent/

root at mail-archiv:/mail/example.org# doveadm user notexistent at example.org
userdb: notexistent at example.org
  home      : /mail/example.org/notexistent
  uid       : 10000
  gid       : 10000

...and the user still exists after a complete restart of Dovecot?!

Peer Heinlein



-- 

Heinlein Professional Linux Support GmbH
Linux: Akademie - Support - Hosting
http://www.heinlein-support.de

Tel: 030-405051-42
Fax: 030-405051-19

Zwangsangaben lt. §35a GmbHG:
HRB 93818 B / Amtsgericht Berlin-Charlottenburg, 
Geschäftsführer: Peer Heinlein  -- Sitz: Berlin

-------------- next part --------------
2010-08-04 14:48:36 auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth
2010-08-04 14:48:36 auth: Debug: master in: USER	1	notexistent at example.org	service=doveadm
2010-08-04 14:48:36 auth: Debug: ldap(notexistent at example.org): user search: base=ou=domain,dc=heinlein-support,dc=de scope=subtree filter=(email=notexistent at example.org) fields=jpberlinMailQuota
2010-08-04 14:48:36 auth: Debug: master out: NOTFOUND	1
2010-08-04 14:48:46 auth: Debug: auth client connected (pid=11786)
2010-08-04 14:48:46 lmtp(11788): Debug: none: root=, index=, control=, inbox=
2010-08-04 14:48:46 auth: Debug: master in: USER	1	notexistent at example.org	service=lmtp	lip=(null)	rip=(null)
2010-08-04 14:48:46 auth: Debug: ldap(notexistent at example.org,0.0.0.0): user search: base=ou=domain,dc=heinlein-support,dc=de scope=subtree filter=(email=notexistent at example.org) fields=jpberlinMailQuota
2010-08-04 14:48:46 auth: Debug: ldap(notexistent at example.org,0.0.0.0): no fields returned by the server
2010-08-04 14:48:46 auth: Debug: master out: USER	1	notexistent at example.org	home=/mail/example.org/notexistent	uid=10000	gid=10000
2010-08-04 14:48:46 lmtp(11788): Debug: auth input: notexistent at example.org home=/mail/example.org/notexistent uid=10000 gid=10000
2010-08-04 14:48:46 lmtp(11788, notexistent at example.org): Debug: Effective uid=10000, gid=10000, home=/mail/example.org/notexistent
2010-08-04 14:48:46 lmtp(11788, notexistent at example.org): Debug: Namespace : type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes
2010-08-04 14:48:46 lmtp(11788, notexistent at example.org): Debug: maildir++: root=/mail/example.org/notexistent/Maildir, index=, control=, inbox=/mail/example.org/notexistent/Maildir
2010-08-04 14:48:46 lmtp(11788, notexistent at example.org): Debug: Namespace : Permission lookup failed from /mail/example.org/notexistent/Maildir
2010-08-04 14:48:46 lmtp(11788, notexistent at example.org): Debug: Namespace : Using permissions from /mail/example.org/notexistent/Maildir: mode=0700 gid=-1
2010-08-04 14:48:46 lmtp(11788, notexistent at example.org): Debug: Namespace : type=shared, prefix=shared/%u/, sep=/, inbox=no, hidden=no, list=children, subscriptions=no
2010-08-04 14:48:46 lmtp(11788, notexistent at example.org): Debug: shared: root=/var/run/dovecot, index=, control=, inbox=
2010-08-04 14:48:49 auth: Debug: master in: USER	1	notexistent at example.org	service=doveadm
2010-08-04 14:48:49 auth: Debug: ldap(notexistent at example.org): user search: base=ou=domain,dc=heinlein-support,dc=de scope=subtree filter=(email=notexistent at example.org) fields=jpberlinMailQuota
2010-08-04 14:48:49 auth: Debug: ldap(notexistent at example.org): no fields returned by the server
2010-08-04 14:48:49 auth: Debug: master out: USER	1	notexistent at example.org	home=/mail/example.org/notexistent	uid=10000	gid=10000
2010-08-04 14:53:14 auth: Debug: master in: USER	1	notexistent at example.org	service=doveadm
2010-08-04 14:53:14 auth: Debug: ldap(notexistent at example.org): user search: base=ou=domain,dc=heinlein-support,dc=de scope=subtree filter=(email=notexistent at example.org) fields=jpberlinMailQuota
2010-08-04 14:53:14 auth: Debug: ldap(notexistent at example.org): no fields returned by the server
2010-08-04 14:53:14 auth: Debug: master out: USER	1	notexistent at example.org	home=/mail/example.org/notexistent	uid=10000	gid=10000
2010-08-04 14:53:28 auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth
2010-08-04 14:53:28 auth: Debug: master in: USER	1	notexistent at example.org	service=doveadm
2010-08-04 14:53:28 auth: Debug: ldap(notexistent at example.org): user search: base=ou=domain,dc=heinlein-support,dc=de scope=subtree filter=(email=notexistent at example.org) fields=jpberlinMailQuota
2010-08-04 14:53:28 auth: Debug: ldap(notexistent at example.org): no fields returned by the server
2010-08-04 14:53:28 auth: Debug: master out: USER	1	notexistent at example.org	home=/mail/example.org/notexistent	uid=10000	gid=10000
2010-08-04 14:53:46 auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth
2010-08-04 14:53:46 auth: Debug: master in: USER	1	notexistent at example.org	service=doveadm
2010-08-04 14:53:46 auth: Debug: ldap(notexistent at example.org): user search: base=ou=domain,dc=heinlein-support,dc=de scope=subtree filter=(email=notexistent at example.org) fields=jpberlinMailQuota
2010-08-04 14:53:46 auth: Debug: ldap(notexistent at example.org): no fields returned by the server
2010-08-04 14:53:46 auth: Debug: master out: USER	1	notexistent at example.org	home=/mail/example.org/notexistent	uid=10000	gid=10000
2010-08-04 14:54:52 auth: Debug: auth client connected (pid=11874)
2010-08-04 14:54:52 lmtp(11876): Debug: none: root=, index=, control=, inbox=
2010-08-04 14:54:52 auth: Debug: master in: USER	1	notexistent at example.org	service=lmtp	lip=(null)	rip=(null)
2010-08-04 14:54:52 auth: Debug: ldap(notexistent at example.org,0.0.0.0): user search: base=ou=domain,dc=heinlein-support,dc=de scope=subtree filter=(email=notexistent at example.org) fields=jpberlinMailQuota
2010-08-04 14:54:52 auth: Debug: ldap(notexistent at example.org,0.0.0.0): no fields returned by the server
2010-08-04 14:54:52 auth: Debug: master out: USER	1	notexistent at example.org	home=/mail/example.org/notexistent	uid=10000	gid=10000
2010-08-04 14:54:52 lmtp(11876): Debug: auth input: notexistent at example.org home=/mail/example.org/notexistent uid=10000 gid=10000
2010-08-04 14:54:52 lmtp(11876, notexistent at example.org): Debug: Effective uid=10000, gid=10000, home=/mail/example.org/notexistent
2010-08-04 14:54:52 lmtp(11876, notexistent at example.org): Debug: Namespace : type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes
2010-08-04 14:54:52 lmtp(11876, notexistent at example.org): Debug: maildir++: root=/mail/example.org/notexistent/Maildir, index=, control=, inbox=/mail/example.org/notexistent/Maildir
2010-08-04 14:54:52 lmtp(11876, notexistent at example.org): Debug: Namespace : Permission lookup failed from /mail/example.org/notexistent/Maildir
2010-08-04 14:54:52 lmtp(11876, notexistent at example.org): Debug: Namespace : Using permissions from /mail/example.org/notexistent/Maildir: mode=0700 gid=-1
2010-08-04 14:54:52 lmtp(11876, notexistent at example.org): Debug: Namespace : type=shared, prefix=shared/%u/, sep=/, inbox=no, hidden=no, list=children, subscriptions=no
2010-08-04 14:54:52 lmtp(11876, notexistent at example.org): Debug: shared: root=/var/run/dovecot, index=, control=, inbox=
2010-08-04 14:55:06 auth: Debug: master in: USER	1	notexistentdd at example.org	service=doveadm
2010-08-04 14:55:06 auth: Debug: ldap(notexistentdd at example.org): user search: base=ou=domain,dc=heinlein-support,dc=de scope=subtree filter=(email=notexistentdd at example.org) fields=jpberlinMailQuota
2010-08-04 14:55:06 auth: Debug: master out: NOTFOUND	1
2010-08-04 14:55:10 auth: Debug: master in: USER	1	notexistent at example.org	service=doveadm
2010-08-04 14:55:10 auth: Debug: ldap(notexistent at example.org): user search: base=ou=domain,dc=heinlein-support,dc=de scope=subtree filter=(email=notexistent at example.org) fields=jpberlinMailQuota
2010-08-04 14:55:10 auth: Debug: ldap(notexistent at example.org): no fields returned by the server
2010-08-04 14:55:10 auth: Debug: master out: USER	1	notexistent at example.org	home=/mail/example.org/notexistent	uid=10000	gid=10000