Hi Thenx but maby problem is in ssl or core file and gdb was incorrectly used
# 2.2.36 (1f10bfa63): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.24 (124e06aa) # OS: Linux 4.19.0-1-amd64 x86_64 Debian buster/sid
Jan 24 16:56:38 thebe-postfix dovecot: master: Dovecot v2.2.36 (1f10bfa63) starting up for imap, pop3, lmtp, sieve Jan 24 16:56:39 thebe-postfix dovecot: master: Error: service(auth): command startup failed, throttling for 2 secs Jan 24 16:56:39 thebe-postfix dovecot: auth: Fatal: master: service(auth): child 11078 killed with signal 11 (core dumped) Jan 24 16:56:39 thebe-postfix dovecot: director: Error: Auth server disconnected unexpectedly
telnet IP 143 .......... Escape character is '^]'.
- OK Waiting for authentication process to respond..
- BYE Disconnected: Auth process broken Connection closed by foreign host.
Jan 24 16:56:48 thebe-postfix dovecot: director: Error: Auth server disconnected unexpectedly Jan 24 16:56:56 thebe-postfix dovecot: master: Error: service(auth): command startup failed, throttling for 16 secs Jan 24 16:56:56 thebe-postfix dovecot: auth: Fatal: master: service(auth): child 11082 killed with signal 11 (core dumped) an 24 16:56:56 thebe-postfix dovecot: director: Error: Auth server disconnected unexpectedly Jan 24 16:56:56 thebe-postfix dovecot: director: Error: Auth server disconnected unexpectedly Jan 24 16:56:56 thebe-postfix dovecot: director: Error: Auth server disconnected unexpectedly Jan 24 16:56:56 thebe-postfix dovecot: director: Error: Auth server disconnected unexpectedly Jan 24 16:57:07 thebe-postfix dovecot: imap-login: Warning: Auth process not responding, delayed sending initial response (greeting): user=<>, rip=46.xxx.xxx.xxx, lip=46.xxx.xxx.xxx, secured, session=<vEwzQzaAtHQu+Kdx> Jan 24 16:57:12 thebe-postfix dovecot: master: Error: service(auth): command startup failed, throttling for 32 secs Jan 24 16:57:12 thebe-postfix dovecot: auth: Fatal: master: service(auth): child 11084 killed with signal 11 (core dumped) Jan 24 16:57:12 thebe-postfix dovecot: director: Error: Auth server disconnected unexpectedly Jan 24 16:57:12 thebe-postfix dovecot: director: Error: Auth server disconnected unexpectedly Jan 24 16:57:12 thebe-postfix dovecot: director: Error: Auth server disconnected unexpectedly Jan 24 16:57:12 thebe-postfix dovecot: director: Error: Auth server disconnected unexpectedly Jan 24 16:57:12 thebe-postfix dovecot: director: Error: Auth server disconnected unexpectedly Jan 24 16:57:12 thebe-postfix dovecot: director: Error: Auth server disconnected unexpectedly Jan 24 16:57:12 thebe-postfix dovecot: imap-login: Disconnected: Auth process broken (disconnected before auth was ready, waited 15 secs): user=<>, rip=46.xxx.xxx.xxx, lip=46.xxx.xxx.xxx, secured, session=<vEwzQzaAtHQu+Kdx> Jan 24 16:57:12 thebe-postfix dovecot: director: Error: Auth server disconnected unexpectedly Jan 24 16:57:12 thebe-postfix dovecot: director: Error: Auth server disconnected unexpectedly
core:
gdb --args /usr/local/dovecot/libexec/dovecot/imap-login /var/run/dovecot/core Starting program: /usr/local/dovecot-2.2.36/libexec/dovecot/imap-login /var/run/dovecot/core [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". process 11878 is executing new program: /usr/local/dovecot-2.2.36/bin/doveconf process 11878 is executing new program: /usr/local/dovecot-2.2.36/libexec/dovecot/imap-login [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". Fatal: settings_check(ssl) failed: ssl_verify_client_cert set, but ssl_ca not [Inferior 1 (process 11878) exited with code 0131]
Fatal: settings_check(ssl) failed: ssl_verify_client_cert set, but ssl_ca not
If this true why works fine in debian 8.x ?
Hi!
Can you get backtrace from the core file?
https://dovecot.org/bugreport.html
Aki
On 24 January 2019 at 17:10 Maciej Milaszewski IQ PL < maciej.milaszewski@iq.pl <mailto:maciej.milaszewski@iq.pl>> wrote:
Hi Thenx for replay.
Finaly for a test in my lab
I upgrate to latest 2.2.36 and os debian 10 In this machine is dovecot director
But if i tested via telnet
root@postfix:~# telnet 46.xxx.xxx.xxx 143 Trying 46.xxx.xxx.xxx... Connected to 46.xxx.xxx.xxx. Escape character is '^]'.
- BYE Disconnected: Auth process broken Connection closed by foreign host.
In log: Jan 24 16:02:07 postfix dovecot: master: Dovecot v2.2.36 (1f10bfa63) starting up for imap, pop3, lmtp, sieve Jan 24 16:02:07 postfix dovecot: master: Error: service(auth): command startup failed, throttling for 2 secs Jan 24 16:02:07 postfix dovecot: auth: Fatal: master: service(auth): child 10443 killed with signal 11 (core dumped) Jan 24 16:02:07 postfix dovecot: director: Error: Auth server disconnected unexpectedly
in strace:
ioctl(3, FIONBIO, [1]) = 0 setsockopt(3, SOL_SOCKET, SO_OOBINLINE, [1], 4) = 0 select(4, [0 3], [], [3], {tv_sec=0, tv_usec=0}) = 0 (Timeout) select(4, [0 3], [], [3], NULL) = 1 (in [3]) recvfrom(3, "* BYE Disconnected: Auth process"..., 8191, 0, NULL, NULL) = 41 select(4, [0 3], [1], [3], {tv_sec=0, tv_usec=0}) = 2 (in [3], out [1], left {tv_sec=0, tv_usec=0}) write(1, "* BYE Disconnected: Auth process"..., 40* BYE Disconnected: Auth process broken ) = 40 recvfrom(3, "", 8151, 0, NULL, NULL) = 0 ...... ioctl(0, TCGETS, {B38400 opost isig icanon echo ...}) = 0 ioctl(0, SNDCTL_TMR_STOP or TCSETSW, {B38400 opost isig icanon echo ...}) = 0 ioctl(0, TCGETS, {B38400 opost isig icanon echo ...}) = 0 ioctl(0, FIONBIO, [0]) = 0 ioctl(1, FIONBIO, [0]) = 0 write(2, "Connection closed by foreign hos"..., 35Connection closed by foreign host. ) = 35 close(-1) = -1 EBADF (Bad file descriptor) exit_group(1) = ? +++ exited with 1 +++
Second machine (backend with dovecot clinet) is old debian (8.11) and 2.2.32 | ( and tested 2.2.36)
telnet 10.0.0.24 143 Trying 10.0.0.24... Connected to 10.0.0.24. Escape character is '^]'.
- OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN] Imap ready.
and works fine
In productions i have debian 8.11 and 9.x all workings fine (this same configurations etc)
Where i found solutions etc ?
On 23.01.2019 08:35, Aki Tuomi via dovecot wrote:
Maybe you should try 2.2.36? Aki On 22.1.2019 16.47, Maciej Milaszewski IQ PL wrote:
Hi I have little problem with debian10 and dovecot 2.2.33.2 ps -ax 21815 ? S 0:00 dovecot/pop3-login director 21816 ? S 0:00 dovecot/pop3-login director 21817 ? S 0:00 dovecot/pop3-login director 21818 ? S 0:00 dovecot/pop3-login director 21819 ? S 0:00 dovecot/pop3-login director 21821 ? S 0:00 dovecot/pop3-login director 21822 ? S 0:00 dovecot/pop3-login director
But if I testes via telnet like this:
telnet 46.xxx.xxx.113 143 Trying 46.xxx.xxx.113... Connected to 46.xxx.xxx.113. Escape character is '^]'.
- OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN] Imap ready. ^] telnet> q Connection closed.
and ps: 21808 ? S 0:00 dovecot/imap-login
???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????
21826 ? S 0:00 dovecot/imap-login
?????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????
strace: strace -p 21808 strace: Process 21808 attached gettimeofday({tv_sec=1548168193, tv_usec=419420}, NULL) = 0 epoll_wait(14,
doveconf: doveconf -n |head -n 4 # 2.2.33.2 (d6601f4ec): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.8 (0c4ae064f307+) # OS: Linux 4.19.0-1-amd64 x86_64 Debian buster/sid auth_cache_negative_ttl = 5 mins
Probably dovecot not closed correctly imap-login and this same for imap-pop3. Any idea ?
Aki Tuomi