Hi
Thenx but maby problem is in ssl or core file and gdb was incorrectly used


# 2.2.36 (1f10bfa63): /etc/dovecot/dovecot.conf
# Pigeonhole version 0.4.24 (124e06aa)
# OS: Linux 4.19.0-1-amd64 x86_64 Debian buster/sid

Jan 24 16:56:38 thebe-postfix dovecot: master: Dovecot v2.2.36 (1f10bfa63) starting up for imap, pop3, lmtp, sieve
Jan 24 16:56:39 thebe-postfix dovecot: master: Error: service(auth): command startup failed, throttling for 2 secs
Jan 24 16:56:39 thebe-postfix dovecot: auth: Fatal: master: service(auth): child 11078 killed with signal 11 (core dumped)
Jan 24 16:56:39 thebe-postfix dovecot: director: Error: Auth server disconnected unexpectedly

telnet IP 143
..........
Escape character is '^]'.
* OK Waiting for authentication process to respond..
* BYE Disconnected: Auth process broken
Connection closed by foreign host.


Jan 24 16:56:48 thebe-postfix dovecot: director: Error: Auth server disconnected unexpectedly
Jan 24 16:56:56 thebe-postfix dovecot: master: Error: service(auth): command startup failed, throttling for 16 secs
Jan 24 16:56:56 thebe-postfix dovecot: auth: Fatal: master: service(auth): child 11082 killed with signal 11 (core dumped)
an 24 16:56:56 thebe-postfix dovecot: director: Error: Auth server disconnected unexpectedly
Jan 24 16:56:56 thebe-postfix dovecot: director: Error: Auth server disconnected unexpectedly
Jan 24 16:56:56 thebe-postfix dovecot: director: Error: Auth server disconnected unexpectedly
Jan 24 16:56:56 thebe-postfix dovecot: director: Error: Auth server disconnected unexpectedly
Jan 24 16:57:07 thebe-postfix dovecot: imap-login: Warning: Auth process not responding, delayed sending initial response (greeting): user=<>, rip=46.xxx.xxx.xxx, lip=46.xxx.xxx.xxx, secured, session=<vEwzQzaAtHQu+Kdx>
Jan 24 16:57:12 thebe-postfix dovecot: master: Error: service(auth): command startup failed, throttling for 32 secs
Jan 24 16:57:12 thebe-postfix dovecot: auth: Fatal: master: service(auth): child 11084 killed with signal 11 (core dumped)
Jan 24 16:57:12 thebe-postfix dovecot: director: Error: Auth server disconnected unexpectedly
Jan 24 16:57:12 thebe-postfix dovecot: director: Error: Auth server disconnected unexpectedly
Jan 24 16:57:12 thebe-postfix dovecot: director: Error: Auth server disconnected unexpectedly
Jan 24 16:57:12 thebe-postfix dovecot: director: Error: Auth server disconnected unexpectedly
Jan 24 16:57:12 thebe-postfix dovecot: director: Error: Auth server disconnected unexpectedly
Jan 24 16:57:12 thebe-postfix dovecot: director: Error: Auth server disconnected unexpectedly
Jan 24 16:57:12 thebe-postfix dovecot: imap-login: Disconnected: Auth process broken (disconnected before auth was ready, waited 15 secs): user=<>, rip=46.xxx.xxx.xxx, lip=46.xxx.xxx.xxx, secured, session=<vEwzQzaAtHQu+Kdx>
Jan 24 16:57:12 thebe-postfix dovecot: director: Error: Auth server disconnected unexpectedly
Jan 24 16:57:12 thebe-postfix dovecot: director: Error: Auth server disconnected unexpectedly

core:

gdb --args /usr/local/dovecot/libexec/dovecot/imap-login /var/run/dovecot/core
Starting program: /usr/local/dovecot-2.2.36/libexec/dovecot/imap-login /var/run/dovecot/core
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
process 11878 is executing new program: /usr/local/dovecot-2.2.36/bin/doveconf
process 11878 is executing new program: /usr/local/dovecot-2.2.36/libexec/dovecot/imap-login
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
Fatal: settings_check(ssl) failed: ssl_verify_client_cert set, but ssl_ca not
[Inferior 1 (process 11878) exited with code 0131]


Fatal: settings_check(ssl) failed: ssl_verify_client_cert set, but ssl_ca not


If this true why works fine in debian 8.x ?



Hi!

Can you get backtrace from the core file?

https://dovecot.org/bugreport.html

Aki
On 24 January 2019 at 17:10 Maciej Milaszewski IQ PL < maciej.milaszewski@iq.pl> wrote:


Hi
Thenx for replay.

Finaly for a test in my lab

I upgrate to latest 2.2.36 and os debian 10
In this machine is dovecot director

But if i tested via telnet

root@postfix:~# telnet 46.xxx.xxx.xxx 143
Trying 46.xxx.xxx.xxx...
Connected to 46.xxx.xxx.xxx.
Escape character is '^]'.
* BYE Disconnected: Auth process broken
Connection closed by foreign host.

In log:
Jan 24 16:02:07 postfix dovecot: master: Dovecot v2.2.36 (1f10bfa63)
starting up for imap, pop3, lmtp, sieve
Jan 24 16:02:07 postfix dovecot: master: Error: service(auth): command
startup failed, throttling for 2 secs
Jan 24 16:02:07 postfix dovecot: auth: Fatal: master: service(auth):
child 10443 killed with signal 11 (core dumped)
Jan 24 16:02:07 postfix dovecot: director: Error: Auth server
disconnected unexpectedly


in strace:

ioctl(3, FIONBIO, [1])                  = 0
setsockopt(3, SOL_SOCKET, SO_OOBINLINE, [1], 4) = 0
select(4, [0 3], [], [3], {tv_sec=0, tv_usec=0}) = 0 (Timeout)
select(4, [0 3], [], [3], NULL)         = 1 (in [3])
recvfrom(3, "* BYE Disconnected: Auth process"..., 8191, 0, NULL, NULL) = 41
select(4, [0 3], [1], [3], {tv_sec=0, tv_usec=0}) = 2 (in [3], out [1],
left {tv_sec=0, tv_usec=0})
write(1, "* BYE Disconnected: Auth process"..., 40* BYE Disconnected:
Auth process broken
) = 40
recvfrom(3, "", 8151, 0, NULL, NULL)    = 0
......
ioctl(0, TCGETS, {B38400 opost isig icanon echo ...}) = 0
ioctl(0, SNDCTL_TMR_STOP or TCSETSW, {B38400 opost isig icanon echo
...}) = 0
ioctl(0, TCGETS, {B38400 opost isig icanon echo ...}) = 0
ioctl(0, FIONBIO, [0])                  = 0
ioctl(1, FIONBIO, [0])                  = 0
write(2, "Connection closed by foreign hos"..., 35Connection closed by
foreign host.
) = 35
close(-1)                               = -1 EBADF (Bad file descriptor)
exit_group(1)                           = ?
+++ exited with 1 +++




Second machine (backend with dovecot clinet) is old debian (8.11) and
2.2.32 | ( and tested 2.2.36)

telnet 10.0.0.24 143
Trying 10.0.0.24...
Connected to 10.0.0.24.
Escape character is '^]'.
* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE
IDLE AUTH=PLAIN AUTH=LOGIN] Imap ready.

and works fine

In productions i have debian 8.11 and 9.x all workings fine (this same
configurations etc)

Where i found solutions  etc ?

On 23.01.2019 08:35, Aki Tuomi via dovecot wrote:
Maybe you should try 2.2.36?
Aki
On 22.1.2019 16.47, Maciej Milaszewski IQ PL wrote:
Hi
I have little problem with debian10 and dovecot 2.2.33.2
>> ps -ax
>> 21815 ?        S      0:00 dovecot/pop3-login director
>> 21816 ?        S      0:00 dovecot/pop3-login director
>> 21817 ?        S      0:00 dovecot/pop3-login director
>> 21818 ?        S      0:00 dovecot/pop3-login director
>> 21819 ?        S      0:00 dovecot/pop3-login director
>> 21821 ?        S      0:00 dovecot/pop3-login director
>> 21822 ?        S      0:00 dovecot/pop3-login director
>>
>> But if I testes via telnet like this:
>>
>> telnet 46.xxx.xxx.113 143
>> Trying 46.xxx.xxx.113...
>> Connected to 46.xxx.xxx.113.
>> Escape character is '^]'.
>> * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE
>> IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN] Imap ready.
>> ^]
>> telnet> q
>> Connection closed.
>>
>> and ps:
>> 21808 ?        S      0:00 dovecot/imap-login  
>> ???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????
>> 21826 ?        S      0:00 dovecot/imap-login  
>> ?????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????
>>
>> strace:
>> strace -p 21808
>> strace: Process 21808 attached
>> gettimeofday({tv_sec=1548168193, tv_usec=419420}, NULL) = 0
>> epoll_wait(14,
>>
>> doveconf:
>> doveconf -n |head -n 4
>> # 2.2.33.2 (d6601f4ec): /etc/dovecot/dovecot.conf
>> # Pigeonhole version 0.4.8 (0c4ae064f307+)
>> # OS: Linux 4.19.0-1-amd64 x86_64 Debian buster/sid
>> auth_cache_negative_ttl = 5 mins
>>
>>
>>
>> Probably dovecot not closed correctly imap-login and this same for
>> imap-pop3. Any idea ?
>>
>>


---
Aki Tuomi