[Dovecot] Unable to authenticate system users in Dovecot 1.0rc25
Hello,
I recently installed dovecot1.0rc25 on my RHEL4 system running postfix and wish to use both virtual and system users. Virtuals work fine, but I get authentication failures with system users. I've tried pam, passwd and shadow.
Attempting to telnet as system user telnet localhost 143 Trying 127.0.0.1... Connected to localhost.localdomain (127.0.0.1). Escape character is '^]'.
- OK Dovecot ready. a login user passwd a NO Authentication failed.
and corresponding log Mar 3 14:35:24 obvx dovecot: auth(default): client in: AUTH 1 PLAIN service=IMAP secured lip=127.0.0.1 rip=127.0.0.1 resp=AG1o******************* Mar 3 14:35:27 obvx dovecot: auth(default): pam(myuser,127.0.0.1): pam_authenticate() failed: Authentication failure Mar 3 14:35:27 obvx dovecot: auth(default): passwd(myuser,127.0.0.1): password mismatch Mar 3 14:35:27 obvx dovecot: auth(default): client out: FAIL 1 user=myuser
Below is the output of dovecot -n
# /etc/dovecot.conf protocols: imap pop3 ssl_disable: yes disable_plaintext_auth: no login_dir: /usr/local/var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login first_valid_uid: 101 last_valid_uid: 101 mail_extra_groups: mail mail_location: maildir:~/Maildir mail_debug: yes maildir_copy_with_hardlinks: yes mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 imap_client_workarounds(default): outlook-idle delay-newmail imap_client_workarounds(imap): outlook-idle delay-newmail imap_client_workarounds(pop3): outlook-idle pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: user: nobody verbose: yes debug: yes debug_passwords: yes passdb: driver: sql args: /etc/dovecot/sql.conf passdb: driver: pam args: * passdb: driver: passwd userdb: driver: sql args: /etc/dovecot/sql.conf userdb: driver: passwd userdb: driver: prefetch socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: mail master: path: /var/run/dovecot/auth-master mode: 432 user: vmail group: mail plugin: quota: maildir:storage=10240:messages=1000 trash: /etc/dovecot/trash.conf
Thanks,
Malaney
On 4.3.2007, at 0.11, Malaney J. Hill wrote:
I recently installed dovecot1.0rc25 on my RHEL4 system running
postfix and wish to use both virtual and system users. Virtuals
work fine, but I get authentication failures with system users.
I've tried pam, passwd and shadow. .. auth default: user: nobody
You're running dovecot-auth as nobody. I'm guessing nobody doesn't
have access to /etc/shadow.
userdb: driver: sql args: /etc/dovecot/sql.conf userdb: driver: passwd userdb: driver: prefetch
Prefetch is pretty pointless as the last userdb. If you've setup the
prefetch to work with passdb sql, then it should be first one in the
list.
On 3/6/07, Timo Sirainen tss@iki.fi wrote:
On 4.3.2007, at 0.11, Malaney J. Hill wrote:
I recently installed dovecot1.0rc25 on my RHEL4 system running postfix and wish to use both virtual and system users. Virtuals work fine, but I get authentication failures with system users. I've tried pam, passwd and shadow. .. auth default: user: nobody
You're running dovecot-auth as nobody. I'm guessing nobody doesn't have access to /etc/shadow.
Correct, nobody does not have access to /etc/shadow and never will. How do I resolve this? Do I have to create a separate password file for my system users? Or is there a better alternative.
MJH
On 7.3.2007, at 5.41, Malaney J. Hill wrote:
auth default: user: nobody
You're running dovecot-auth as nobody. I'm guessing nobody doesn't have access to /etc/shadow.
Correct, nobody does not have access to /etc/shadow and never
will. How do I resolve this? Do I have to create a separate password file for my system users?
Or is there a better alternative.
Usually people are just running dovecot-auth as root, which is also
the default (user = root inside auth {}). Or you could create some
doveauth user which has "shadow" as the primary group.
On 3/7/07, Timo Sirainen tss@iki.fi wrote:
On 7.3.2007, at 5.41, Malaney J. Hill wrote:
auth default: user: nobody
You're running dovecot-auth as nobody. I'm guessing nobody doesn't have access to /etc/shadow.
Correct, nobody does not have access to /etc/shadow and never will. How do I resolve this? Do I have to create a separate password file for my system users? Or is there a better alternative.
Usually people are just running dovecot-auth as root, which is also the default (user = root inside auth {}). Or you could create some doveauth user which has "shadow" as the primary group.
Thanks Timo, that did the trick!
MJH
participants (2)
-
Malaney J. Hill
-
Timo Sirainen