September 2017 - dovecot

pop3-login core dump when using TLSSTART on version dovecot-2.2.32 (OPEN)
by Arvid.Eikas＠telenor.com 08 Sep '17

08 Sep '17

Hi, Pop3-login are CORE-dumping when I log on with TLSSTART, I believe the same will happen with imap-logon to, but I have not tested it yet. The TLS session is coming up and it works fine until I log off, then it's core dump. Open sslvesrion is openssl-1.0.2k. We ran dovecot-2.2.27 before we upgraded to dovecote-2.2.32, and that seems to work fine. (not core dumping) Arvid LOG Sep 05 14:27:34 pop3-login: Debug: SSL: elliptic curve secp384r1 will be used for ECDH and ECDHE key exchanges Sep 05 14:30:30 pop3-login: Debug: SSL: elliptic curve secp384r1 will be used for ECDH and ECDHE key exchanges Sep 05 14:30:30 pop3-login: Debug: SSL: elliptic curve secp384r1 will be used for ECDH and ECDHE key exchanges Sep 05 14:30:42 pop3-login: Debug: SSL: elliptic curve secp384r1 will be used for ECDH and ECDHE key exchanges Sep 05 14:30:42 pop3-login: Debug: SSL: elliptic curve secp384r1 will be used for ECDH and ECDHE key exchanges Sep 05 14:30:50 pop3-login: Info: Login: user=<tstrand>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=18361, secured, session=<65m8ZXBYtpN/AAAB> Sep 05 14:30:50 pop3-login: Error: ENGINE_finish, bad functional reference count Sep 05 14:30:50 pop3-login: Fatal: master: service(pop3-login): child 18359 killed with signal 6 (core dumped) >From ./crypto/engine/eng_init.c ......... int engine_unlocked_finish(ENGINE *e, int unlock_for_handlers) { int to_return = 1; /* * Reduce the functional reference count here so if it's the terminating * case, we can release the lock safely and call the finish() handler * without risk of a race. We get a race if we leave the count until * after and something else is calling "finish" at the same time - * there's a chance that both threads will together take the count from 2 * to 0 without either calling finish(). */ e->funct_ref--; engine_ref_debug(e, 1, -1); if ((e->funct_ref == 0) && e->finish) { if (unlock_for_handlers) CRYPTO_w_unlock(CRYPTO_LOCK_ENGINE); to_return = e->finish(e); if (unlock_for_handlers) CRYPTO_w_lock(CRYPTO_LOCK_ENGINE); if (!to_return) return 0; } #ifdef REF_CHECK if (e->funct_ref < 0) { fprintf(stderr, "ENGINE_finish, bad functional reference count\n"); abort(); ......... /* The API (locked) version of "finish" */ int ENGINE_finish(ENGINE *e) { int to_return = 1; if (e == NULL) { ENGINEerr(ENGINE_F_ENGINE_FINISH, ERR_R_PASSED_NULL_PARAMETER); return 0; } CRYPTO_w_lock(CRYPTO_LOCK_ENGINE); to_return = engine_unlocked_finish(e, 1); CRYPTO_w_unlock(CRYPTO_LOCK_ENGINE); if (!to_return) { ENGINEerr(ENGINE_F_ENGINE_FINISH, ENGINE_R_FINISH_FAILED); return 0; } return to_return; }

2 1

Strange SASL issue
by Antoine Nguyen 07 Sep '17

07 Sep '17

Hi all, I've just upgraded my server from debian 8 to debian 9 and I now encounter a strange issue. I'm using prosody (XMPP server), configured to authenticate against dovecot using SASL and a unix socket. This setup was working fine on debian 8. Now, each time I try to connect using my XMPP client, the authentication fails and I see the following error in logs: auth: Error: BUG: Authentication client said it's PID 0 Have you ever heard about this? For information, dovecot version is 2.2.27. Thank you, Antoine Nguyen

4 6

imapc bug (signal 6)
by Ralf Hildebrandt 07 Sep '17

07 Sep '17

Running 2.3.0~alpha0-1~auto+1045, basically as a proxy between MUA and Exchange (IMAP): Sep 7 16:10:32 mproxy dovecot: imap-login: Login: user=<holtgrem>, method=PLAIN, rip=172.16.128.8, lip=141.42.206.11, mpid=61031, TLS, session=<fp3JBZpYop+sEIAI> Sep 7 16:10:32 mproxy dovecot: imap(holtgrem)<fp3JBZpYop+sEIAI>: imapc(exchange-imap.charite.de:993): Connected to 10.32.37.100:993 (local 141.42.206.11:58124) Sep 7 16:10:32 mproxy dovecot: imap(holtgrem)<fp3JBZpYop+sEIAI>: Panic: file mail-index-sync-update.c: line 1056 (mail_index_sync_map): assertion failed: (map->hdr.indexid == index->indexid || map->hdr.indexid == 0) Sep 7 16:10:32 mproxy dovecot: imap(holtgrem)<fp3JBZpYop+sEIAI>: Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0xa1c2e) [0x7f059bd4cc2e] -> /usr/lib/dovecot/libdovecot.so.0(+0xa1d1c) [0x7f059bd4cd1c] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f059bcdbbce] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_index_sync_map+0x6a0) [0x7f059c0c91c0] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_index_map+0xf8) [0x7f059c0c01c8] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_index_refresh+0xe) [0x7f059c0d66de] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_list_index_refresh_force+0x8c) [0x7f059c094e7c] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0xab786) [0x7f059c091786] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0xabadc) [0x7f059c091adc] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_sync_deinit+0x35) [0x7f059c02f925] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_sync+0x4b) [0x7f059c0315bb] -> dovecot/imap [holtgrem 172.16.128.8 EXAMINE](cmd_select_full+0x170) [0x55fac9ae2b60] -> dovecot/imap [holtgrem 172.16.128.8 EXAMINE](command_exec+0x5c) [0x55fac9aea39c] -> dovecot/imap [holtgrem 172.16.128.8 EXAMINE](+0x1b822) [0x55fac9ae8822] -> dovecot/imap [holtgrem 172.16.128.8 EXAMINE](+0x1b8ac) [0x55fac9ae88ac] -> dovecot/imap [holtgrem 172.16.128.8 EXAMINE](client_handle_input+0x1e5) [0x55fac9ae8d05] -> dovecot/imap [holtgrem 172.16.128.8 EXAMINE](client_input+0x85) [0x55fac9ae9265] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x69) [0x7f059bd63469] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0x10a) [0x7f059bd64c9a] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x52) [0x7f059bd63572] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f059bd63788] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f059bce6fe3] -> dovecot/imap [holtgrem 172.16.128.8 EXAMINE](main+0x343) [0x55fac9adb143] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf0) [0x7f059b901830] -> dovecot/imap [holtgrem 172.16.128.8 EXAMINE](+0xe323) [0x55fac9adb323] Sep 7 16:10:32 mproxy dovecot: imap(holtgrem)<fp3JBZpYop+sEIAI>: Fatal: master: service(imap): child 61031 killed with signal 6 (core dumped) Sep 7 16:10:33 mproxy dovecot: imap-login: Login: user=<holtgrem>, method=PLAIN, rip=172.16.128.8, lip=141.42.206.11, mpid=61034, TLS, session=<X48IBppYpJ+sEIAI> Sep 7 16:10:33 mproxy dovecot: imap(holtgrem)<X48IBppYpJ+sEIAI>: imapc(exchange-imap.charite.de:993): Connected to 10.32.37.100:993 (local 141.42.206.11:58128) Sep 7 16:10:33 mproxy dovecot: imap-login: Login: user=<holtgrem>, method=PLAIN, rip=172.16.128.8, lip=141.42.206.11, mpid=61036, TLS, session=<0CQPBppYpp+sEIAI> Sep 7 16:10:33 mproxy dovecot: imap(holtgrem)<0CQPBppYpp+sEIAI>: imapc(exchange-imap.charite.de:993): Connected to 10.32.37.100:993 (local 141.42.206.11:58132) Sep 7 16:12:30 mproxy dovecot: imap(holtgrem)<0CQPBppYpp+sEIAI>: Connection closed (EXAMINE finished 28.690 secs ago) in=643 out=101173 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0 Sep 7 16:12:30 mproxy dovecot: imap(holtgrem)<X48IBppYpJ+sEIAI>: Connection closed (FETCH running for 116.592 + waiting input for 0.001 secs, 0.001 in locks, 28 B in + 64787+2070 B out, state=wait-input) in=105 out=66175 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0 Sep 7 16:12:35 mproxy dovecot: imap-login: Login: user=<holtgrem>, method=PLAIN, rip=172.16.128.8, lip=141.42.206.11, mpid=61049, TLS, session=<2ZkfDZpYKKCsEIAI> Sep 7 16:12:35 mproxy dovecot: imap(holtgrem)<2ZkfDZpYKKCsEIAI>: imapc(exchange-imap.charite.de:993): Connected to 10.32.37.100:993 (local 141.42.206.11:58160) Sep 7 16:12:36 mproxy dovecot: imap-login: Login: user=<holtgrem>, method=PLAIN, rip=172.16.128.8, lip=141.42.206.11, mpid=61051, TLS, session=<eg9cDZpYLqCsEIAI> Sep 7 16:12:36 mproxy dovecot: imap(holtgrem)<eg9cDZpYLqCsEIAI>: imapc(exchange-imap.charite.de:993): Connected to 10.32.37.100:993 (local 141.42.206.11:58164) Sep 7 16:12:41 mproxy dovecot: imap(holtgrem)<2ZkfDZpYKKCsEIAI>: Error: imapc: Remote server didn't send BODY[] for UID 1 in Calendar/BIH BCU (FETCH replied: FETCH completed.) Sep 7 16:14:19 mproxy dovecot: imap(holtgrem)<2ZkfDZpYKKCsEIAI>: Error: imapc(exchange-imap.charite.de:993): Command '1321 APPEND "INBOX" (\Seen) "29-Aug-2017 11:36:49 +0200" {42176625}' failed with BAD: 1321 Command Argument Error. 11 Sep 7 16:14:19 mproxy dovecot: imap(holtgrem)<2ZkfDZpYKKCsEIAI>: Error: imapc: APPEND failed: Command Argument Error. 11 Sep 7 16:14:19 mproxy dovecot: imap(holtgrem)<2ZkfDZpYKKCsEIAI>: IMAP session state is inconsistent, please relogin. in=42180017 out=220890 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=1 body_bytes=788 Sep 7 16:14:19 mproxy dovecot: imap-login: Login: user=<holtgrem>, method=PLAIN, rip=172.16.128.8, lip=141.42.206.11, mpid=61072, TLS, session=<Aa2IE5pYkKCsEIAI> Sep 7 16:14:19 mproxy dovecot: imap(holtgrem)<Aa2IE5pYkKCsEIAI>: imapc(exchange-imap.charite.de:993): Connected to 10.32.37.100:993 (local 141.42.206.11:58198) Sep 7 16:14:27 mproxy dovecot: imap(holtgrem)<Aa2IE5pYkKCsEIAI>: Connection closed (EXAMINE finished 8.029 secs ago) in=63 out=1372 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0 Sep 7 16:14:29 mproxy dovecot: imap(holtgrem)<eg9cDZpYLqCsEIAI>: Connection closed (FETCH running for 112.511 + waiting input for 0.001 secs, 0.001 in locks, 28 B in + 127311+2054 B out, state=wait-input) in=105 out=128699 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0 -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebrandt(a)charite.de | https://www.charite.de

1 0

master: Warning: Sent SIGKILL to 511 pop3-login processes
by Luciano Mannucci 07 Sep '17

07 Sep '17

I have a lot of "master: Warning: Sent SIGKILL to 511 pop3-login processes" in my log file. Should I worry? (I'm running # 2.2.32 (dfbe293d4)) Thanks to all, Luciano. -- /"\ /Via A. Salaino, 7 - 20144 Milano (Italy) \ / ASCII RIBBON CAMPAIGN / PHONE : +39 2 485781 FAX: +39 2 48578250 X AGAINST HTML MAIL / E-MAIL: posthamster(a)sublink.sublink.ORG / \ AND POSTINGS / WWW: http://www.lesassaie.IT/

1 0

migrate courier to dovecot and forward mail like maildrop does it
by Markus Rosjat 07 Sep '17

07 Sep '17

Hi there, I was wondering what's the way to go if I want to migrate my courier/maildrop setup to dovecot/sieve? Is it even possible or do I need something else? The approach of using maildrop with postfix just hit the fan because I'm to dumb to configure it :( so with maildrop I have a .mailfilter file with cc "!some_email(a)some_domain.tld" and this just works like a charm with courier and maildrop but whats the equivalent in dovecote and the sieve plugin ? regards -- Markus Rosjat fon: +49 351 8107223 mail: rosjat(a)ghweb.de G+H Webservice GbR Gorzolla, Herrmann Königsbrücker Str. 70, 01099 Dresden http://www.ghweb.de fon: +49 351 8107220 fax: +49 351 8107227 Bitte prüfen Sie, ob diese Mail wirklich ausgedruckt werden muss! Before you print it, think about your responsibility and commitment to the ENVIRONMENT

1 0

lda
by dovecotml＠fuckaround.org 06 Sep '17

06 Sep '17

Hi all :) I will try to use /usr/lib/dovecot/deliver instead of postfix. I'd like automatically move email to junk folder. I use debian 9. cat /etc/postfix/master.cf [...] spamassassin unix - n n - - pipe user=debian-spamd argv=/usr/bin/spamc -f -e /usr/lib/dovecot/deliver -f ${sender} -d ${recipient} with this line dovecot works perfectly but only with virtual users, my system has also system users /etc/passwd How to tell dovecot to deliver email also to real system users? Sep 03 17:05:08 auth: Debug: master in: USER 1 test(a)mydomain.org service=lda Sep 03 17:05:08 auth-worker(24749): Debug: passwd(test(a)mydomain.org): lookup Sep 03 17:05:08 auth: Debug: pam(test(a)mydomain.org): passdb doesn't support credential lookups Sep 03 17:05:08 lda(test(a)mydomain.org): Debug: auth USER input: Sep 03 17:05:08 auth: Debug: passwd-file(test(a)mydomain.org): lookup: user=todo(a)fuckaround.org file=/etc/dovecot/users Sep 03 17:05:08 auth: Debug: userdb out: NOTFOUND 1 Sep 03 17:05:08 auth: Debug: auth client connected (pid=24758) Sep 03 17:05:08 auth: Debug: client in: AUTH 1 PLAIN service=imap secured session=GIfuUUpY1BCXMEZw lip=192.168.0.2 rip=x.x.x.x lport=993 rport=4308 local_name=imap.mydomain.org Sep 03 17:05:08 auth: Debug: client passdb out: CONT 1 Sep 03 17:05:08 auth: Debug: client in: CONT 1 hfdskjfsdkjdshjkfd== (previous base64 data may contain sensitive data) Sep 03 17:05:08 auth-worker(24749): Debug: pam(user,151.48.70.112,<GIfuUUpY1BCXMEZw>): lookup service=dovecot Sep 03 17:05:08 auth-worker(24749): Debug: pam(user,151.48.70.112,<GIfuUUpY1BCXMEZw>): #1/1 style=1 msg=Password: Sep 03 17:05:09 auth: Debug: client passdb out: OK 1 user=user Sep 03 17:05:09 auth: Debug: master in: REQUEST 2331639809 24758 1 754574397549379543789547 session_pid=24760 request_auth_token thanks for help! Pol

4 4

Improve dovecot logging
by Slobodan Zdravkovic 06 Sep '17

06 Sep '17

In case when user login with pop3 and only download only mail headers (partial download), but not email body, there is nothing in mail.log Is it possible to configure one of the existing dovecot plugins to log actions like TOP and LIST or is it possible to write new plugin for dovecot which can fetch this actions ?

1 0

error while compiling
by Rajesh M 05 Sep '17

05 Sep '17

hello this may not be in the scope of this forum, so am sorry about that i use qmailtoaster with dovecot i am trying to update dovecot to version 2.29, using the source rpm rpmbuild --rebuild --define "dist .qt.el6" dovecot-2.2.29.1-15.qt.src.rpm but getting error as follow. help require to identify the cause please make[3]: Leaving directory `/root/rpmbuild/BUILD/dovecot-2.2.29.1/src/plugins/quota' Making check in quota-clone make[3]: Entering directory `/root/rpmbuild/BUILD/dovecot-2.2.29.1/src/plugins/quota-clone' make[3]: Nothing to be done for `check'. make[3]: Leaving directory `/root/rpmbuild/BUILD/dovecot-2.2.29.1/src/plugins/quota-clone' Making check in imap-quota make[3]: Entering directory `/root/rpmbuild/BUILD/dovecot-2.2.29.1/src/plugins/imap-quota' make[3]: Nothing to be done for `check'. make[3]: Leaving directory `/root/rpmbuild/BUILD/dovecot-2.2.29.1/src/plugins/imap-quota' Making check in pop3-migration make[3]: Entering directory `/root/rpmbuild/BUILD/dovecot-2.2.29.1/src/plugins/pop3-migration' for bin in test-pop3-migration-plugin; do \ if ! ./$bin; then exit 1; fi; \ done pop3 migration get hdr sha1 .......................................... : ok 0 / 1 tests failed make[3]: Leaving directory `/root/rpmbuild/BUILD/dovecot-2.2.29.1/src/plugins/pop3-migration' Making check in replication make[3]: Entering directory `/root/rpmbuild/BUILD/dovecot-2.2.29.1/src/plugins/replication' make[3]: Nothing to be done for `check'. make[3]: Leaving directory `/root/rpmbuild/BUILD/dovecot-2.2.29.1/src/plugins/replication' Making check in snarf make[3]: Entering directory `/root/rpmbuild/BUILD/dovecot-2.2.29.1/src/plugins/snarf' make[3]: Nothing to be done for `check'. make[3]: Leaving directory `/root/rpmbuild/BUILD/dovecot-2.2.29.1/src/plugins/snarf' Making check in stats make[3]: Entering directory `/root/rpmbuild/BUILD/dovecot-2.2.29.1/src/plugins/stats' make[3]: Nothing to be done for `check'. make[3]: Leaving directory `/root/rpmbuild/BUILD/dovecot-2.2.29.1/src/plugins/stats' Making check in imap-stats make[3]: Entering directory `/root/rpmbuild/BUILD/dovecot-2.2.29.1/src/plugins/imap-stats' make[3]: Nothing to be done for `check'. make[3]: Leaving directory `/root/rpmbuild/BUILD/dovecot-2.2.29.1/src/plugins/imap-stats' Making check in mail-crypt make[3]: Entering directory `/root/rpmbuild/BUILD/dovecot-2.2.29.1/src/plugins/mail-crypt' for bin in test-mail-global-key test-mail-key; do \ if ! env NOUNDEF=1 ./$bin; then exit 1; fi; \ done try_load_keys ........................................................ : ok test_empty_keyset .................................................... : ok 0 / 2 tests failed generate user key .................................................... : ok generate inbox key ................................................... : ok cache reset .......................................................... : ok verify keys .......................................................... : ok test-mail-key.c:429: Assert failed: mail_crypt_get_private_key(t, mcp_old_box_key_id, FALSE, FALSE, &privkey, &error) > 0 test: random seed #2 was 2074645272 test-mail-key(root): Error: mail_crypt_get_private_key(7c9a1039ea2e4fed73e81dd3ffc3fa22ea4a28352939adde7bf8ea858b00fa4f) failed: Cannot decrypt key 7c9a1039ea2e4fed73e81dd3ffc3fa22ea4a28352939adde7bf8ea858b00fa4f: error:100AE081:elliptic curve routines:EC_GROUP_new_by_curve_name:unknown group test-mail-key.c:438: Assert failed: privkey != NULL old keys ............................................................. : FAILED 1 / 5 tests failed make[3]: *** [check-test] Error 1 make[3]: Leaving directory `/root/rpmbuild/BUILD/dovecot-2.2.29.1/src/plugins/mail-crypt' make[2]: *** [check-recursive] Error 1 make[2]: Leaving directory `/root/rpmbuild/BUILD/dovecot-2.2.29.1/src/plugins' make[1]: *** [check-recursive] Error 1 make[1]: Leaving directory `/root/rpmbuild/BUILD/dovecot-2.2.29.1/src' make: *** [check-recursive] Error 1 error: Bad exit status from /var/tmp/rpm-tmp.LDWEGt (%check) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.LDWEGt (%check) thanks rajesh

1 0

pam authentication
by Pol Hallen 05 Sep '17

05 Sep '17

Hello all I use debian 9 with dovecot 2.x: real system users and virtual users: almost all works perfectly ;) Virtual users can connect via imap and pop using name + domain name: user00(a)domain1.org, etc. pam (real system users) users can connect via imap and pop ONLY without domain name It's a problem with pam authentication because linux make users authentication with only username (and not with also domain name) but I'd like user full email like test00(a)realdomain.org cat /etc/dovecot/conf.d/auth-passwdfile.conf.ext passdb { driver = passwd-file args = scheme=SHA256 username_format=%u /etc/dovecot/users } userdb { driver = passwd-file args = scheme=SHA256 username_format=%u /etc/dovecot/users } cat /etc/dovecot/conf.d/auth-system.conf.ext passdb { driver = pam } userdb { driver = passwd } inside /etc/dovecot/conf.d/10-auth.conf [...] #auth_username_format = %n is commented because I've multiple domains cat /var/log/dovecot.debug Sep 05 01:49:51 auth: Debug: Read auth token secret from /var/run/dovecot/auth-token-secret.dat Sep 05 01:49:51 auth: Debug: passwd-file /etc/dovecot/users: Read 4 users in 0 secs Sep 05 01:49:51 auth: Debug: auth client connected (pid=23412) Sep 05 01:49:51 auth: Debug: client in: AUTH 1 PLAIN service=imap secured session=hjdhgfghhg lip=192.168.1.100 rip=192.168.1.100 lport=143 rport=39356 resp=hsdfhsfddfjk jklsdfkljkdlskfljsdkjlfds== (previous base64 data may contain sensitive data) Sep 05 01:49:51 auth-worker(23414): Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Sep 05 01:49:51 auth-worker(23414): Debug: passwd-file /etc/dovecot/users: Read 4 users in 0 secs Sep 05 01:49:51 auth-worker(23414): Debug: pam(test(a)realdomain.org,192.168.1.100,<PitAxGVYvJnAqAFk>): lookup service=dovecot Sep 05 01:49:51 auth-worker(23414): Debug: pam(test(a)realdomain.org,192.168.1.100,<PitAxGVYvJnAqAFk>): #1/1 style=1 msg=Password: Sep 05 01:49:53 auth: Debug: passwd-file(test(a)realdomain.org,192.168.1.100,<PitAxGVYvJnAqAFk>): lookup: user=test(a)realdomain.org file=/etc/dovecot/users Sep 05 01:49:55 auth: Debug: client passdb out: FAIL 1 user=test(a)realdomain.com Sep 05 01:51:15 auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Sep 05 01:51:15 auth: Debug: Read auth token secret from /var/run/dovecot/auth-token-secret.dat Sep 05 01:51:15 auth: Debug: passwd-file /etc/dovecot/users: Read 4 users in 0 secs Sep 05 01:51:15 auth: Debug: auth client connected (pid=23461) Sep 05 01:51:26 auth: Debug: client in: AUTH 1 PLAIN service=imap secured session=ycnxyWVYQYokInmi lip=192.168.0.2 rip=36.34.121.162 lport=993 rport=35393 Sep 05 0 any idea? thanks for help! Pol -- Pol

3 13

transition from 1.x to 2? What did I break?
by Paul Beard 05 Sep '17

05 Sep '17

It’s been awhile since I set up my dovecot instance (like several years) and my transition from 1.x to 2 seems to have not gone well: all I can see is that authentication is banjaxed and I’m not sure what needs to be done to fix it. # 2.2.32 (dfbe293d4): /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 10.3-STABLE i386 auth_debug = yes auth_mechanisms = plain login listen = *,[::] log_path = /var/log/dovecot.log mail_access_groups = mail mail_location = /var/mail/%u mail_privileged_group = mail namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } passdb { driver = pam } passdb { driver = pam } protocols = imap service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = root } ssl_cert = </etc/ssl/certs/dovecot.pem userdb { driver = passwd } userdb { driver = passwd } userdb { driver = passwd } protocol lda { postmaster_address = postmaster@redacted quota_full_tempfail = no } Sep 02 07:54:08 imap-login: Info: Disconnected (no auth attempts in 0 secs): user=<>, rip=192.168.0.1, lip=192.168.0.25, TLS handshaking: SSL_accept() failed: error:1408A0C1:SSL routines:ssl3_get_client_hello:no shared cipher, session=<2hS8DDZYyN7AqAAB> Sep 02 07:54:08 auth: Debug: auth client connected (pid=47645) Sep 02 07:54:08 imap-login: Info: Disconnected (no auth attempts in 0 secs): user=<>, rip=192.168.0.1, lip=192.168.0.25, TLS handshaking: SSL_accept() failed: error:1408A0C1:SSL routines:ssl3_get_client_hello:no shared cipher, session=<SFK8DDZYyt7AqAAB> Sep 02 07:54:54 auth: Warning: auth client 0 disconnected with 2 pending requests: EOF Sep 02 07:55:19 auth: Debug: auth client connected (pid=47714) Sep 02 07:55:19 imap-login: Info: Disconnected (no auth attempts in 0 secs): user=<>, rip=192.168.0.1, lip=192.168.0.25, TLS handshaking: SSL_accept() failed: error:1408A0C1:SSL routines:ssl3_get_client_hello:no shared cipher, session=<WbD0EDZY2N7AqAAB> Sep 02 07:55:19 auth: Debug: auth client connected (pid=47716) Sep 02 07:55:19 imap-login: Info: Disconnected (no auth attempts in 0 secs): user=<>, rip=192.168.0.1, lip=192.168.0.25, TLS handshaking: SSL_accept() failed: error:1408A0C1:SSL routines:ssl3_get_client_hello:no shared cipher, session=<1Qb1EDZY2d7AqAAB>

3 3