[Dovecot] CRAM-MD5 authentication memory leak problem.
I used dovecot Auth daemon for postfix SMTP Auth. I saved clear password to OpenLDAP, then I set up that as the password will be used.
There ware no trouble when authentication had sucessed. But when authentication failed by using "CRAM-MD5", it caused increasing memory allocation of dovecot auth daemon.
In case of using "PLAIN" or "LOGIN", there were no problem even if authentication had failed.
I got same result on dovecot-2.0.9(RHEL6) and dovecot-2.2.13.
Does anyone know similar case?
I tried restarting dovecot Auth daemon by using service_count parameter in service auth settings. When authentication failed, message on postfix was as follows:
** 535 5.7.8 Error: authentication failed: "CRAM-MD5 string"
When authentication failed and restarting dovecot auth daemon at the same time, message on postfix was changed as follows:
** 535 5.7.8 Error: authentication failed: Connection lost to authentication server
It looks like that the failed authentication request is suspended by restarting auth daemon.
-- config (10-auth.conf) auth_mechanisms = plain login cram-md5
-- config (10-master.conf) service auth { executable = auth
unix_listener /var/spool/postfix/private/auth { mode = 0666 user = postfix group = postfix } }
-- auth-ldap.conf.ext passdb { driver = ldap
args = /etc/dovecot/ldap-passdb.conf.ext }
-- ldap-passdb.conf.ext host = xxx.xxx.xxx.xxx dn = LDAP Manager DN dnpass = Manager DN password base = ou=mail,dc=xxxxxx,dc=xx scope = subtree pass_attrs = mailID=user,mailClearPassword=password pass_filter = (mailID=%u) auth_bind = no default_pass_scheme = plain
Thanks.
-- Kenji Tonami
participants (1)
-
Kenji Tonami