Hi,
I have recently moved a dovecot installation from 2.2.36 on RHEL7.9 onto 2.3.20 on Amazon Linux 2023 and I'm now seeing the error message in the title relating to /usr/bin/checkpassword (which doesn't exist on either). This is a project that I've inherited, and I've never used dovecot previously. I've been searching around for a couple of days trying to figure this out. Running out of ideas.
Here's a slightly redacted snippet from dovecot.log
Jan 04 17:23:22 auth: Debug: checkpassword(redacted@redacted.redacted.local,127.0.0.1,<6uwL/SEOzpt/AAAB>): Performing passdb lookup
Jan 04 17:23:22 auth: Debug: checkpassword(redacted@redacted.redacted.local,127.0.0.1,<6uwL/SEOzpt/AAAB>): execute: /usr/bin/checkpassword /usr/libexec/dovecot/checkpassword-reply
Jan 04 17:23:22 auth: Fatal: execv(/usr/bin/checkpassword) failed: No such file or directory
Jan 04 17:23:22 auth: Debug: checkpassword(redacted@redacted.redacted.local,127.0.0.1,<6uwL/SEOzpt/AAAB>): Received input:
Jan 04 17:23:22 auth: Debug: checkpassword(redacted@redacted.redacted.local,127.0.0.1,<6uwL/SEOzpt/AAAB>): exit_status=84
Jan 04 17:23:22 auth: Error: checkpassword(redacted@redacted.redacted.local,127.0.0.1,<6uwL/SEOzpt/AAAB>): Child 106455 exited with status 84
Jan 04 17:23:22 auth: Debug: checkpassword(redacted@redacted.redacted.local,127.0.0.1,<6uwL/SEOzpt/AAAB>): Finished passdb lookup
Jan 04 17:23:22 auth: Debug: auth(redacted@redacted.redacted.local,127.0.0.1,<6uwL/SEOzpt/AAAB>): Auth request finished
Jan 04 17:23:24 auth: Debug: client passdb out: FAIL 1 user=redacted@redacted.redacted.local code=temp_fail
Jan 04 17:23:24 imap-login: Info: Disconnected: Connection closed (auth service reported temporary failure): user=redacted@redacted.redacted.local, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured, session=<6uwL/SEOzpt/AAAB>
Jan 04 17:23:24 auth: Debug: auth client connected (pid=106456)
Jan 04 17:23:24 auth: Debug: client in: AUTH 1 PLAIN service=imap secured session=R5kq/SEO0Jt/AAAB lip=127.0.0.1 rip=127.0.0.1 lport=143 rport=39888
As part of the build process we overwrite the config files with ones which are presumably from a previous version.
In particular there's an auth.conf file which contains :-
!include auth-checkpassword.conf.ext
and in turn that file contains the stanza :-
passdb {
driver = checkpassword
args = /usr/bin/checkpassword}
which is where I guess the problem lies.
The thing is the config files are almost identical on both systems.
Here's the dovecot -n output...
[root@server dovecot]# dovecot -n
# 2.3.20 (xyz675d): /etc/dovecot/dovecot.conf
# OS: Linux 6.1.61-85.141.amzn2023.x86_64 x86_64 ext4
# Hostname: server...1a97d
auth_debug = yes
auth_verbose = yes
disable_plaintext_auth = no
first_valid_gid = 0
first_valid_uid = 0
listen = *
log_path = /var/project/log/dovecot/dovecot.log
mail_location = maildir:/var/mail/vhosts/%d/%n
mail_privileged_group = mail
mbox_write_locks = fcntl
passdb {
args = username_format=%u /etc/dovecot/users
driver = passwd-file
}
passdb {
args = /usr/bin/checkpassword
driver = checkpassword
}
protocols = imap
service auth {
unix_listener auth-userdb \{ group = postfix mode = 0600 user = postfix }
}
ssl_cert = </etc/pki/dovecot/certs/dovecot.pem
ssl_key = # hidden, use -P to show it
userdb {
args = uid=vmail gid=vmail home=/var/mail/vhosts/%d/%n
driver = static
}
userdb
{ driver = prefetch }
Hi,
I have recently moved a dovecot installation from 2.2.36 on RHEL7.9 onto 2.3.20 on Amazon Linux 2023 and I'm now seeing the error message in the title relating to /usr/bin/checkpassword (which doesn't exist on either). This is a project that I've inherited, and I've never used dovecot previously. I've been searching around for a couple of days trying to figure this out. Running out of ideas.
Here's a slightly redacted snippet from dovecot.log
Jan 04 17:23:22 auth: Debug: checkpassword (redacted@redacted.redacted.local,127.0.0.1,<6uwL/SEOzpt/AAAB>): Performing passdb lookup
Jan 04 17:23:22 auth: Debug: checkpassword (redacted@redacted.redacted.local,127.0.0.1,<6uwL/SEOzpt/AAAB>): execute: /usr/ bin/checkpassword /usr/libexec/dovecot/checkpassword-reply
Jan 04 17:23:22 auth: Fatal: execv(/usr/bin/checkpassword) failed: No such file or directory
Jan 04 17:23:22 auth: Debug: checkpassword (redacted@redacted.redacted.local,127.0.0.1,<6uwL/SEOzpt/AAAB>): Received input:
Jan 04 17:23:22 auth: Debug: checkpassword (redacted@redacted.redacted.local,127.0.0.1,<6uwL/SEOzpt/AAAB>): exit_status=84
Jan 04 17:23:22 auth: Error: checkpassword (redacted@redacted.redacted.local,127.0.0.1,<6uwL/SEOzpt/AAAB>): Child 106455 exited with status 84
Jan 04 17:23:22 auth: Debug: checkpassword (redacted@redacted.redacted.local,127.0.0.1,<6uwL/SEOzpt/AAAB>): Finished passdb lookup
Jan 04 17:23:22 auth: Debug: auth (redacted@redacted.redacted.local,127.0.0.1,<6uwL/SEOzpt/AAAB>): Auth request finished
Jan 04 17:23:24 auth: Debug: client passdb out: FAIL 1 user=redacted@redacted.redacted.local code=temp_fail
Jan 04 17:23:24 imap-login: Info: Disconnected: Connection closed (auth service reported temporary failure): user=redacted@redacted.redacted.local, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured, session=<6uwL/SEOzpt/AAAB>
Jan 04 17:23:24 auth: Debug: auth client connected (pid=106456)
Jan 04 17:23:24 auth: Debug: client in: AUTH 1 PLAIN service=imap secured session=R5kq/SEO0Jt/AAAB lip=127.0.0.1 rip=127.0.0.1 lport=143 rport=39888
As part of the build process we overwrite the config files with ones which are presumably from a previous version.
In particular there's an auth.conf file which contains :-
!include auth-checkpassword.conf.ext
and in turn that file contains the stanza :-
passdb {
driver = checkpassword
args = /usr/bin/checkpassword
}
which is where I guess the problem lies.
The thing is the config files are almost identical on both systems.
Here's the dovecot -n output...
[root@server dovecot]# dovecot -n
# 2.3.20 (xyz675d): /etc/dovecot/dovecot.conf
# OS: Linux 6.1.61-85.141.amzn2023.x86_64 x86_64 ext4
# Hostname: server...1a97d
auth_debug = yes
auth_verbose = yes
disable_plaintext_auth = no
first_valid_gid = 0
first_valid_uid = 0
listen = *
log_path = /var/project/log/dovecot/dovecot.log
mail_location = maildir:/var/mail/vhosts/%d/%n
mail_privileged_group = mail
mbox_write_locks = fcntl
passdb {
args = username_format=%u /etc/dovecot/users
driver = passwd-file
}
passdb {
args = /usr/bin/checkpassword
driver = checkpassword
}
protocols = imap
service auth {
unix_listener auth-userdb \{ group = postfix mode = 0600 user = postfix }
}
ssl_cert = </etc/pki/dovecot/certs/dovecot.pem
ssl_key = # hidden, use -P to show it
userdb {
args = uid=vmail gid=vmail home=/var/mail/vhosts/%d/%n
driver = static
}
userdb
{ driver = prefetch }