[Dovecot] Dovecot PAM sessions with Maildir
I am configuring a new mail server on RHEL 5 x64. I have configured dovecot as follows: ... protocols = imaps ... ssl_cert_file = /etc/pki/dovecot/certs/mailserver.cer ssl_key_file = /etc/pki/dovecot/private/mailserver.pem ... login_process_size = 64 ... mail_location = maildir:~/Maildir ... passdb pam { args = "session=yes cache_key=%u%s dovecot" } ...
I'm getting the following error messages in /var/log/maillog: Aug 5 20:57:45 [hostname] dovecot: imap-login: Aborted login: rip=::ffff:128.8.244.15, lip=::ffff:[server], TLS Aug 5 21:01:34 [hostname] dovecot: imap-login: Aborted login: user=<[me]>, method=PLAIN, rip=::ffff:[server], lip=::ffff:[server], TLS
I'm getting the following messages in /var/log/audit/audit.log: type=USER_AUTH msg=audit(1217984152.016:347): user pid=7669 uid=0 auid=10243 subj=user_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct="[me]" : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:[client], addr=::ffff:[client], terminal=dovecot res=success)' type=USER_ACCT msg=audit(1217984152.017:348): user pid=7669 uid=0 auid=10243 subj=user_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct="[me]" : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:[client], addr=::ffff:[client], terminal=dovecot res=success)' type=USER_START msg=audit(1217984152.017:349): user pid=7669 uid=0 auid=10243 subj=user_u:system_r:dovecot_auth_t:s0 msg='PAM: session open acct="[me]" : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:[client], addr=::ffff:[client], terminal=dovecot res=failed)'
I find the message in the audit.log interesting because I configured the connection with SSL not TLS, but if I use TLS the result is the same.
On Aug 6, 2008, at 2:03 PM, Sean Smitz wrote:
I am configuring a new mail server on RHEL 5 x64. I have configured
dovecot as follows: ... protocols = imaps ... ssl_cert_file = /etc/pki/dovecot/certs/mailserver.cer ssl_key_file = /etc/pki/dovecot/private/mailserver.pem ... login_process_size = 64 ... mail_location = maildir:~/Maildir ... passdb pam { args = "session=yes cache_key=%u%s dovecot" } ...I'm getting the following error messages in /var/log/maillog: Aug 5 20:57:45 [hostname] dovecot: imap-login: Aborted login:
rip=::ffff:128.8.244.15, lip=::ffff:[server], TLS Aug 5 21:01:34 [hostname] dovecot: imap-login: Aborted login:
user=<[me]>, method=PLAIN, rip=::ffff:[server], lip=::ffff:[server],
TLS
You could see if auth_debug=yes shows more. Although debugging PAM
problems is annoying because PAM's logging is so bad.
I find the message in the audit.log interesting because I configured
the connection with SSL not TLS, but if I use TLS the result is the
same.
I think you're confusing SSL and TLS with imaps port and STARTTLS
command (and so do many client UIs..). You're going to be using TLS
connections in any case.
participants (2)
-
Sean Smitz
-
Timo Sirainen