[Dovecot] Problem Authenticating with Master User
Dovecot provides a master login (a master user name and password that can log into all user accounts).
I've setup Dovecot as per: http://wiki1.dovecot.org/Authentication/MasterUsers
Here's my problem.
The only way I can authenticate successfully is if I try to authenticate through telnet twice. Also, imapsync (the tool I need to use to migrate over emails from Dovecot to other mail server) won't work because of this.
$ telnet mail01.server.com 143 Trying 10.10.10.12... Connected to mail01.server.com. Escape character is '^]'.
- OK Dovecot ready. 1 login user@server.com*master my_password 1 NO Authentication failed. 1 login user@server.com*master my_password 1 OK Logged in.
On 29.4.2011, at 0.25, Henry Franco wrote:
The only way I can authenticate successfully is if I try to authenticate through telnet twice. Also, imapsync (the tool I need to use to migrate over emails from Dovecot to other mail server) won't work because of this.
dovecot -n output?
dovecot -n
1.1.20: /etc/dovecot.conf
OS: Linux 2.6.18-8.el5xen x86_64 CentOS release 5.2 (Final) ext3
protocols: imaps imap listen: * ssl_ca_file: /etc/ssl/ca/ca-bundle.crt ssl_cert_file: /etc/ssl/crt/server.crt ssl_key_file: /etc/ssl/key/server.key login_dir: /var/run/dovecot/login login_executable: /usr/libexec/dovecot/imap-login login_processes_count: 64 login_max_processes_count: 2048 valid_chroot_dirs: /home/vmail/domains max_mail_processes: 4096 first_valid_uid: 102 last_valid_uid: 102 first_valid_gid: 102 last_valid_gid: 102 mail_uid: vmail mail_gid: vmail mail_location: maildir:/home/vmail/domains/%d/%n lda: postmaster_address: postmaster@server.com auth_socket_path: /var/run/dovecot-auth-master global_script_path: /home/vmail/domains/server.com/sieve mail_plugins: cmusieve auth default_with_listener: master_user_separator: * verbose: yes debug: yes debug_passwords: yes passdb: driver: ldap args: /etc/dovecot-ldap.conf userdb: driver: ldap args: /etc/dovecot-ldap.conf socket: type: listen client: path: /var/run/dovecot/auth-client mode: 432 master: path: /var/run/dovecot-auth-master mode: 384 user: vmail group: vmail auth default: master_user_separator: * verbose: yes debug: yes debug_passwords: yes passdb: driver: passwd-file args: /etc/dovecot.master pass: yes master: yes passdb: driver: shadow passdb: driver: pam passdb: driver: ldap args: /etc/dovecot-ldap.conf userdb: driver: passwd userdb: driver: ldap args: /etc/dovecot-ldap.conf--
On Apr 28, 2011, at 5:27 PM, Timo Sirainen wrote:
On 29.4.2011, at 0.25, Henry Franco wrote:
The only way I can authenticate successfully is if I try to authenticate through telnet twice. Also, imapsync (the tool I need to use to migrate over emails from Dovecot to other mail server) won't work because of this.
dovecot -n output?
On 29.4.2011, at 0.31, Henry Franco wrote:
passdb: driver: passwd-file args: /etc/dovecot.master pass: yes master: yes
pass=yes doesn't work properly with PAM.
passdb: driver: shadow passdb: driver: pam passdb: driver: ldap args: /etc/dovecot-ldap.conf
You also seem to have too many passdbs. You should probably remove either shadow or pam.
So I removed the passdb's and the pass=yes since it doesn't work with PAM but I'm still not having any luck. Any suggestions? I'm open.
$ telnet mail01.server.com 143 Trying 10.10.10.12... Connected to mail01.server.com. Escape character is '^]'.
- OK Dovecot ready. 1 login user@server.com*master my_password 1 NO Authentication failed. 1 login user@server.com*master my_password 1 OK Logged in.
dovecot -n
1.1.20: /etc/dovecot.conf
OS: Linux 2.6.18-8.el5xen x86_64 CentOS release 5.2 (Final) ext3
protocols: imaps imap listen: * ssl_ca_file: /etc/ssl/ca/ca-bundle.crt ssl_cert_file: /etc/ssl/crt/server.crt ssl_key_file: /etc/ssl/key/server.key login_dir: /var/run/dovecot/login login_executable: /usr/libexec/dovecot/imap-login login_processes_count: 64 login_max_processes_count: 2048 valid_chroot_dirs: /home/vmail/domains max_mail_processes: 4096 first_valid_uid: 102 last_valid_uid: 102 first_valid_gid: 102 last_valid_gid: 102 mail_uid: vmail mail_gid: vmail mail_location: maildir:/home/vmail/domains/%d/%n lda: postmaster_address: postmaster@server.com auth_socket_path: /var/run/dovecot-auth-master global_script_path: /home/vmail/domains/server.com/sieve mail_plugins: cmusieve auth default_with_listener: master_user_separator: * verbose: yes debug: yes debug_passwords: yes passdb: driver: ldap args: /etc/dovecot-ldap.conf userdb: driver: ldap args: /etc/dovecot-ldap.conf socket: type: listen client: path: /var/run/dovecot/auth-client mode: 432 master: path: /var/run/dovecot-auth-master mode: 384 user: vmail group: vmail auth default: master_user_separator: * verbose: yes debug: yes debug_passwords: yes passdb: driver: passwd-file args: /etc/dovecot.master master: yes passdb: driver: ldap args: /etc/dovecot-ldap.conf userdb: driver: passwd userdb: driver: ldap args: /etc/dovecot-ldap.conf On Apr 28, 2011, at 5:36 PM, Timo Sirainen wrote:
On 29.4.2011, at 0.31, Henry Franco wrote:
passdb: driver: passwd-file args: /etc/dovecot.master pass: yes master: yes
pass=yes doesn't work properly with PAM.
passdb: driver: shadow passdb: driver: pam passdb: driver: ldap args: /etc/dovecot-ldap.conf
You also seem to have too many passdbs. You should probably remove either shadow or pam.
On 29.4.2011, at 6.19, Henry Franco wrote:
So I removed the passdb's and the pass=yes since it doesn't work with PAM but I'm still not having any luck. Any suggestions? I'm open.
Oh, I didn't notice earlier:
auth default_with_listener: .. auth default:
Don't use two auth {} blocks. That's the one causing this.
Timo,
That worked. I appreciate it.
-------- Original Message -------- Subject: Re: [Dovecot] Problem Authenticating with Master User From: Timo Sirainen <tss@iki.fi> To: Dovecot Mailing List <dovecot@dovecot.org> Date: 04/29/2011 03:34 AM
On 29.4.2011, at 6.19, Henry Franco wrote:
So I removed the passdb's and the pass=yes since it doesn't work with PAM but I'm still not having any luck. Any suggestions? I'm open.
Oh, I didn't notice earlier:
auth default_with_listener: .. auth default:
Don't use two auth {} blocks. That's the one causing this.
participants (3)
-
Henry Franco
-
Henry Franco
-
Timo Sirainen