user at domain splitting not working

Thu Jul 17 21:20:45 UTC 2014

Also just to note that Postfix is not the problem here, that has now 
been ruled out

Ive been trying the LMTP protocol directly and still confirm the problem..
220 localhost I am ready.
LHLO wenn.com
250-localhost
250-8BITMIME
250-ENHANCEDSTATUSCODES
250 PIPELINING
mail from:<it at wenn.com>
250 2.1.0 OK
rcpt to:<it at wenn.com>
550 5.1.1 <it at wenn.com> User doesn't exist: it at wenn.com
quit
221 2.0.0 OK

All I get in the LMTP log is..
Jul 17 22:13:57 lmtp(23016): Info: Connect from 127.0.0.1
Jul 17 22:14:16 lmtp(23016): Info: Disconnect from 127.0.0.1: Successful 
quit

The Auth log..
Jul 17 22:19:47 auth: Debug: master in: USER    1 it at wenn.com     
service=lmtp    lip=127.0.0.1   lport=24 rip=127.0.0.1    rport=41872
Jul 17 22:19:47 auth: Debug: userdb out: NOTFOUND       1

On 17/07/2014 22:10, Ricardo Branco wrote:
> We have been using LDA in the past with our old Sendmail system, on 
> our new mail server we were proposing to use LMTP with Postfix.
> LMTP does not work at all, it just keeps saying that the user is not 
> recognised, LDA on the otherhand does work.
> I am unable to login via IMAP/POP using the full email address of the 
> user even after the settings below are set.
> I have set auth_username_format=%n, also put username_format=%n in the 
> userdb, even tried it in PAM but that just breaks it all.
> I just cant seem to make it all work, if i just use the username then 
> its all fine but that does not resolve where i am planning to do.
>
> On 17/07/2014 21:36, Steffen wrote:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> Ricardo Branco wrote:
>>> Latest config
>>>
>>> http://pastebin.com/XKNn6W24
>>>
>>> Ricardo Branco wrote, On 16/07/2014 14:56:
>>>> Shows that auth is not honouring the %n i have. Does the
>>>> username_format need to be only in the userdb section or also the
>>>> passdb part?
>>>>
>>>> http://pastie.org/9396504
>>>>
>>>> Ricardo Branco wrote, On 15/07/2014 18:23:
>>>>> That was done for testing to see if it made any difference when
>>>>> I moved to LDA, in LDA mode it seems to not care if that is %n
>>>>> or %u, it always takes the first part of the email address
>>>>> which is weird. Ive just tested again to confirm on %n and its
>>>>> not working so ive reverted again back to LDA which does. Seems
>>>>> to not matter how that variable is set it does not do
>>>>> anything.
>>>>>
>>>>> When using %n ive tried to see if I can login via IMAP with the
>>>>> whole username but again no, this is the error, note the
>>>>> difference between the 'user' field on each line.
>>>>>
>>>>> Jul 15 18:22:17 imap-login: Info: Login:
>>>>> user=<mark.whittaker>, method=PLAIN, rip=10.0.0.180,
>>>>> lip=10.100.0.198, mpid=9493, session=<VVE8pj7+9wAKAAC0> Jul 15
>>>>> 18:22:20 imap-login: Info: Disconnected: Shutting down (auth
>>>>> failed, 4 attempts in 37 secs):
>>>>> user=<mark.whittaker at Wenn.com>, method=PLAIN, rip=10.0.0.3,
>>>>> lip=10.100.0.198, TLS, session=<Vjs9pD7+IgAKAAAD>
>>
>> Hi Ricardo,
>>
>> I seem to miss something: You are talking about LMTP and LDA, then
>> present a log of an IMAP login attempt. Neither LDA not LMTP should
>> need any authentification, where should the password come from? And
>> yes, for auth you will need %n in passdb, too. username_format is not
>> documented for passdb { driver = pam}, but you could try.
>>
>> Could you post a log of a LMTP delivery, when %n is in effect _and_
>> you are sure have reloaded Dovecot?
>>
>>>>> Steffen Kaiser wrote, On 15/07/2014 13:18:
>>> On Tue, 15 Jul 2014, Ricardo Branco wrote:
>>>
>>>>>>>> Attached files
>>>>>>>>
>>>>>>>> Nick Edwards wrote, On 15/07/2014 10:19:
>>>>>>>>> you need to show doveconf -n and what you have in the
>>>>>>>>> master.conf for dovecot
>>>>>>>>>
>>>>>>>>> On 7/15/14, Ricardo Branco <ricardo at wenn.com> wrote:
>>>>>>>>>> I have been trying looking though all the wiki
>>>>>>>>>> documents to setup LMTP. It now seems to all be
>>>>>>>>>> connected except that it keeps saying that the user
>>>>>>>>>> is not recognised when postfix sends to LMTP, it
>>>>>>>>>> sends the full recipent email address but seems that
>>>>>>>>>> on the dovecot side it is unable to work with this. I
>>>>>>>>>> have checked the userdb and made sure its using %n
>>>>>>>>>> but alas it still does not work.
>>> userdb { args = username_format=%u /etc/passwd driver =
>>> passwd-file name = passwd-file }
>>>
>>> In opposite to your sentence I see a %u there.
>>>
>>>>>>>>>> Currently ive had to revert to using LDA as it works
>>>>>>>>>> fine with that but i still dont know how as the
>>>>>>>>>> postfix config variable $RECIPIENT is the full email
>>>>>>>>>> address and does not seem to matter to LDA.
>>>>>>>>>>
>>>>>>>>
>>> -- Steffen Kaiser
>> - -- 
>> Steffen Kaiser
>>
>> H Bonn-Rhein-Sieg         | e-mail: Steffen.Kaiser at H-BRS.DE
>> FB Informatik             |
>> Grantham-Allee 20         | phone : +49 2241/865-203
>> 53757 Sankt Augustin      |
>> Germany - Deutschland     | fax   : +49 2241/865-8203
>>
>> - -- Steffen
>> -----BEGIN PGP SIGNATURE-----
>> Version: GnuPG v1.4.9 (Darwin)
>> Comment: Using GnuPG with undefined - http://www.enigmail.net/
>>
>> iQEVAwUBU8gz2HD1/YhP6VMHAQL4GAf/XSv7IGGacR1R/KOWP+DjBiqtiIT33Niw
>> DfZjRykZGYn1S2wb0S0UT9bvp0mxYABxSPuwEHOkAu56qtIJz/l37eneNE/mtyag
>> 2ZxnWa6cJsEngKgkGA9+2OnKKZEeU5fI3RhN6VRDjCxwV0DnI9fpf/vvYli1s3GK
>> LMeZq3cDVzZ+L23B2hBmWAOd1C9JU2mVRAchBF83TiEn+n7vAYGPGD9enFMphVBx
>> PjF24YRquVYMW3Dv+bSrPRgAFo/WCoZ7Lur7kZ6f3jaO6irUw7yMYvu8GdWi8AFB
>> y5CGOUBhCdsgEuZB4i2n1u+otgK+VhnF9+dLWSM5QB8uRTs+WRi5/w==
>> =Gpq3
>> -----END PGP SIGNATURE-----