[Dovecot] Connection refused userdb lookup ..dovecot/auth-userdb

[Tom Hendrikx]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 26-03-14 12:01, Charles Marcus wrote:
> On 3/25/2014 4:08 PM, Simon <greminn at gmail.com> wrote:
>> On Wed, Mar 26, 2014 at 12:15 AM, Charles Marcus 
>> <CMarcus at media-brokers.com>wrote:
>>> On 3/24/2014 7:10 PM, Simon <greminn at gmail.com> wrote:
>>>> Mar 13 09:55:44 vmail1 dovecot: lda: Error: userdb lookup: 
>>>> connect(/usr/local/dovecot/var/run/dovecot/auth-userdb)
>>>> failed: Connection refused
> 
>>> So, your SQL userdb is refusing connections from dovecot...
>>> 
>>> Fix this...
> 
>> Thanks Charles, I have looked into this and tried to fix
>> permissions but still have the same issue. I have tried changing
>> the permissions on the auth-userdb to 0666 (see below) as well as
>> setting the permissions of /usr/local/dovecot/var/run/dovecot/ to
>> 777 just for testing.
> 
> You misunderstood...
> 
> I didn't say the filesystem permissions were wrong.
> 
> Your SQL SERVER is refusing the connection.
> 
> The user (vmail) you are using to connect to the SQL server doesn't
> have permission to talk to it.
> 
> This needs to be fixed IN THE SQL SERVER ACCESS PERMISSIONS for
> the 'vmail' user.
> 

Charles, auth-worker would have logged errors about sql access if that
was an issue. lda doesn't do sql queries by itself, it sends the
queries to the auth socket instead, and that fails.

The socket is not usable, as was already observed upthread by doing
tests as root using socat. I'm still opting for
selinux/apparmor/rsbac/etc issues here.

Simon, are you sure you're not missing any logging on that? I'm not
really experienced in thoose systems, but everytime I run into issues
with them , they sure fill my logs with all kinds of cryptic stuff ;)

Tom
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=1vTO
-----END PGP SIGNATURE-----