Master user login attempted without master passdbs
Hi, I have dovecot version v2.3.21.1 and my users (username@domain.name) are in mysql, all can logon to imap and sending mail, but when I am trying to create and enable sieve scripts from an weblient (horde webmail) it fails with authentication errors. It tries to use master user authentication and the logs are showing following: A pr 15 10:34:51 auth: Debug: client in: AUTH 1 PLAIN service=sieve secured session=yTdN4nRPFcF/AAAB lip=127.0.0.1 rip=127.0.0.1 lport=4190 rport=49429 resp=aG9yc3QAaG9yc3RAaGJzaW1vbi5uZXQAYXVnQDYmOXVzdA== (previous base64 data may contain sensitive data) Apr 15 10:34:51 auth: Info: plain(horst@hbsimon.net,127.0.0.1,<yTdN4nRPFcF/AAAB>): login user: Master user login attempted without master passdbs Apr 15 10:34:51 auth: Debug: auth(horst@hbsimon.net,127.0.0.1,<yTdN4nRPFcF/AAAB>): Auth request finished Apr 15 10:34:51 auth: Debug: auth client connected (pid=1478) Apr 15 10:34:53 auth: Debug: client passdb out: FAIL 1 user=horst@hbsimon.net Apr 15 10:34:53 managesieve-login: Info: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<horst@hbsimon.net>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured, session=<yTdN4nRPFcF/AAAB> Apr 15 10:35:06 auth: Debug: client in: AUTH 1 PLAIN service=sieve secured session=VEgr43RPGMF/AAAB lip=127.0.0.1 rip=127.0.0.1 lport=4190 rport=49432 resp=aG9yc3QAaG9yc3RAaGJzaW1vbi5uZXQAYXVnQDYmOXVzdA== (previous base64 data may contain sensitive data) Apr 15 10:35:06 auth: Info: plain(horst@hbsimon.net,127.0.0.1,<VEgr43RPGMF/AAAB>): login user: Master user login attempted without master passdbs Apr 15 10:35:06 auth: Debug: auth(horst@hbsimon.net,127.0.0.1,<VEgr43RPGMF/AAAB>): Auth request finished Apr 15 10:35:06 auth: Debug: auth client connected (pid=1484) Apr 15 10:35:08 auth: Debug: client passdb out: FAIL 1 user=horst@hbsimon.net Apr 15 10:35:08 managesieve-login: Info: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<horst@hbsimon.net>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured, session=<VEgr43RPGMF/AAAB>
How can I bypass the master user login and use the assigned user or what should the master user be and how to create it?
Thanks and Regards, Horst
On 20/04/2026 07:29 EEST horst.simon.aus--- via dovecot <dovecot@dovecot.org> wrote:
Hi, I have dovecot version v2.3.21.1 and my users (username@domain.name) are in mysql, all can logon to imap and sending mail, but when I am trying to create and enable sieve scripts from an weblient (horde webmail) it fails with authentication errors. It tries to use master user authentication and the logs are showing following: A pr 15 10:34:51 auth: Debug: client in: AUTH 1 PLAIN service=sieve secured session=yTdN4nRPFcF/AAAB lip=127.0.0.1 rip=127.0.0.1 lport=4190 rport=49429 resp=aG9yc3QAaG9yc3RAaGJzaW1vbi5uZXQAYXVnQDYmOXVzdA== (previous base64 data may contain sensitive data) Apr 15 10:34:51 auth: Info: plain(horst@hbsimon.net,127.0.0.1,<yTdN4nRPFcF/AAAB>): login user: Master user login attempted without master passdbs Apr 15 10:34:51 auth: Debug: auth(horst@hbsimon.net,127.0.0.1,<yTdN4nRPFcF/AAAB>): Auth request finished Apr 15 10:34:51 auth: Debug: auth client connected (pid=1478) Apr 15 10:34:53 auth: Debug: client passdb out: FAIL 1 user=horst@hbsimon.net Apr 15 10:34:53 managesieve-login: Info: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<horst@hbsimon.net>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured, session=<yTdN4nRPFcF/AAAB> Apr 15 10:35:06 auth: Debug: client in: AUTH 1 PLAIN service=sieve secured session=VEgr43RPGMF/AAAB lip=127.0.0.1 rip=127.0.0.1 lport=4190 rport=49432 resp=aG9yc3QAaG9yc3RAaGJzaW1vbi5uZXQAYXVnQDYmOXVzdA== (previous base64 data may contain sensitive data) Apr 15 10:35:06 auth: Info: plain(horst@hbsimon.net,127.0.0.1,<VEgr43RPGMF/AAAB>): login user: Master user login attempted without master passdbs Apr 15 10:35:06 auth: Debug: auth(horst@hbsimon.net,127.0.0.1,<VEgr43RPGMF/AAAB>): Auth request finished Apr 15 10:35:06 auth: Debug: auth client connected (pid=1484) Apr 15 10:35:08 auth: Debug: client passdb out: FAIL 1 user=horst@hbsimon.net Apr 15 10:35:08 managesieve-login: Info: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<horst@hbsimon.net>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured, session=<VEgr43RPGMF/AAAB>
How can I bypass the master user login and use the assigned user or what should the master user be and how to create it?
Thanks and Regards, Horst
Hi!
Tell horde not to use master authentication, this should be in the Horde manual.
Aki
Hi Unfortunately there is no manual on this. it works perfect if dovecot is using system authentication (pam), but the if using sql authentication. I think it cat not access the users sieve files which are in a directory owned by the virtual master user vmail. When using system pam authentication the users sieve scripts are in its home directory. The horde configuration s is the same for both, I could not see a parameter specifying to use the master user.
Horst
On 20/04/2026 10:44 EEST horst.simon.aus--- via dovecot <dovecot@dovecot.org> wrote:
Hi Unfortunately there is no manual on this. it works perfect if dovecot is using system authentication (pam), but the if using sql authentication. I think it cat not access the users sieve files which are in a directory owned by the virtual master user vmail. When using system pam authentication the users sieve scripts are in its home directory. The horde configuration s is the same for both, I could not see a parameter specifying to use the master user.
Horst
if you want to use master login:
passdb master-db { driver = sql query = SELECT password FROM users WHERE userid = '%{user}' and master_user = true master = yes result_success = continue }
see https://doc.dovecot.org/latest/core/config/auth/master_users.html
Aki
horst.simon.aus--- via dovecot skrev den 2026-04-20 09:44:
Hi Unfortunately there is no manual on this. it works perfect if dovecot is using system authentication (pam), but the if using sql authentication. I think it cat not access the users sieve files which are in a directory owned by the virtual master user vmail. When using system pam authentication the users sieve scripts are in its home directory. The horde configuration s is the same for both, I could not see a parameter specifying to use the master user.
if horde fails then try roundcube :-)
horde should not use sql for sieve anyway
i have lost horde...
Roundcube requires php-imap, which is no more supported in later versions of php. Sieve is not in sql, only the virtual users created by postfixadmin.
I don't understand what the master user should be. In 10-master.conf I have service auth { unix_listener /opt/local/var/spool/postfix/private/auth { mode = 0666 user = _postfix group = _postfix } unix_listener auth-userdb { mode = 0600 user = _vmail }
Auth process is run as this user.
#user = $default_internal_user user = _dovecot } service auth-worker { user = _vmail }
Who should be defined as the master user _dovecot or _vmail
Horst
Hello Horst,
This ist my personal DokuWiki in German language and my configurations for the master User:
https://dokuwiki.tachtler.net/doku.php?id=tachtler:dovecot_archlinux_-_maste...
Maybe, this could be a solution for you too?
Greetings Klaus.
--
e-Mail : klaus@tachtler.net Homepage: https://www.tachtler.net DokuWiki: https://dokuwiki.tachtler.net
Vielen Dank Klaus,
This gives me a better understanding, I only need to check now what horde is sending to dovecot for activating the sieves rules.
Regards, Horst
participants (4)
-
Aki Tuomi
-
Benny Pedersen
-
horst.simon.aus＠gmail.com
-
Klaus Tachtler