[Dovecot] Internal login failure
Hello,
I am fairly new to Dovecot, so please forgive me if I am missing something obvious here. I have checked the archived dovecot mailing list messages and have Googled for everything I can think of, and I still have not found anything to help me solve this problem. I am running Postfix+Postgresql+Dovecot on my Fedora FC2 box. I have compiled both Postfix and Dovecot from source. I believe I have postfix running properly. No error messages show up in my logs when starting Postfix or Dovecot. Messages are being delivered by Postfix just fine:
Dec 12 11:45:42 co-nundrum postfix/virtual[15759]: 15E82F8EF0:
to=<jaeson@domain.name>, relay=virtual, delay=1, status=sent
(delivered to maildir)
However, when I try to login to Dovecot over IMAP I get an "Internal login failure" error:
[jaeson@localhost jaeson]$ telnet co-nundrum imap
Trying 207.7.137.6...
Connected to co-nundrum.
Escape character is '^]'.
* OK dovecot ready.
1 LOGIN jaeson secret
1 OK Logged in.
* BYE Internal login failure. Error report written to server
log.
Connection closed by foreign host.
When I check the dovecot log file I see the following entries:
dovecot-auth: Dec 12 01:15:59 Info: PGSQL: Performing query:
SELECT password FROM user_accounts WHERE username='jaeson'
imap-login: Dec 12 01:15:59 Info: Internal login failure: jaeson
[66.159.231.21]
dovecot: Dec 12 01:15:59 Error: child 9845 (auth) killed with
signal 11
Here are the entries from my dovecot.conf file. As you can see, I have set both auth_verbose and auth_debug = yes, but I don't seem to be getting any log messages with enough verbosity to indicate just what the problem is.
base_dir = /var/run/dovecot/
protocols = imap imaps pop3 pop3s
imap_listen = *
pop3_listen = *
ssl_parameters_regenerate = 24
disable_plaintext_auth = no
log_path = /var/log/dovecot.log
info_log_path = /var/log/dovecot.log
login_dir = /var/run/dovecot-login
login = imap
login_executable = /usr/libexec/dovecot/imap-login
login_user = dovecot
login_process_size = 16
login_process_per_connection = yes
login_processes_count = 3
login_max_processes_count = 128
login_max_logging_users = 256
max_mail_processes = 1024
verbose_proctitle = yes
verbose_ssl = yes
first_valid_uid = 5000
last_valid_uid = 65535
first_valid_gid = 5000
last_valid_gid = 65535
default_mail_env = maildir:/mail/%d/%u
mail_save_crlf = yes
maildir_copy_with_hardlinks = no
maildir_check_content_changes = no
mbox_locks = fcntl
umask = 0077
imap_executable = /usr/libexec/dovecot/imap
imap_process_size = 256
auth = default
auth_mechanisms = plain
auth_userdb = pgsql /etc/dovecot-pgsql.conf
auth_passdb = pgsql /etc/dovecot-pgsql.conf
auth_executable = /usr/libexec/dovecot/dovecot-auth
auth_user = root
auth_count = 1
auth_username_chars =
abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@
auth_verbose = yes
auth_debug = yes
Additionally, here are the entries in my dovecot-pgsql.conf file:
connect = host=localhost dbname=mail_DB user=mailreader
password=secret
default_pass_scheme = PLAIN
password_query = SELECT password FROM user_accounts WHERE
username='%u'
user_query = SELECT '/mail/'||mailbox AS home, uid, gid FROM
user_accounts WHERE username='%u'
Finally, here is the configure command I used when building Dovecot from source:
./configure --prefix=/usr --enable-debug --with-pgsql
--with-cyrus-sasl2 --with-ssl=openssl --sysconfdir=/etc
At this point, I think that the connections to my postgresql tables are all working properly, and the initial authentication with Dovecot appears to be working. Dovecot *does* accept my password and gives me the "OK Logged in." response message, but somewhere before it kicks off the IMAP process it dies with a SIGSEGV. Perhaps I have some file permissions out of whack? Has anyone else encountered this problem, or perhaps has any insight into what might be going wrong or how to find out more information?
Thanks, Jaeson Schultz jaeson at jaeson dot net
Jaeson,
While you have been delightfuly thorough with providing information related
to your problem, you appear to have neglected to mention which version of Dovecot you are using. I'm sure the list would like to know.
I don't use SQL based user auth, so I can't help much there, though it all
looks ok to me.
Finally, here is the configure command I used when building Dovecot from source:
./configure --prefix=/usr --enable-debug --with-pgsql --with-cyrus-sasl2 --with-ssl=openssl --sysconfdir=/etc
Why have you put "--with-cyrus-sasl2"? Last I heard that wasn't working, and even if it was, I've never heard good things about it. Dovecot has its own SASL implementation, which by most reports is very good.
At this point, I think that the connections to my postgresql tables are all working properly, and the initial authentication with Dovecot appears to be working. Dovecot *does* accept my password and gives me the "OK Logged in." response message, but somewhere before it kicks off the IMAP process it dies with a SIGSEGV. Perhaps I have some file permissions out of whack? Has anyone else encountered this problem, or perhaps has any insight into what might be going wrong or how to find out more information?
I do recall some messages on the list recently about recent patches unbreaking DB connections. Of course, this would depend on which version of Dovecot you are running.
-- Curtis Maloney
On 12.12.2004, at 23:08, Jaeson Schultz wrote:
dovecot: Dec 12 01:15:59 Error: child 9845 (auth) killed with signal 11
So, this is the real problem. For some reason it crashes before doing userdb lookup. gdb backtrace from this would be helpful. Easiest way to do this would be:
gdb /usr/local/libexec/dovecot/dovecot-auth pidof dovecot-auth
cont
<wait for crash>
bt full
and mail it to me.
[root@co-nundrum root]# gdb /usr/local/libexec/dovecot/dovecot-auth 26340 GNU gdb Red Hat Linux (6.0post-0.20040223.19rh) Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i386-redhat-linux-gnu".../usr/local/libexec/dovecot/dovecot-auth: No such file or directory.
Attaching to process 26340 Reading symbols from /usr/libexec/dovecot/dovecot-auth...done. Using host libthread_db library "/lib/tls/libthread_db.so.1". Reading symbols from /lib/libcrypt.so.1...done. Loaded symbols for /lib/libcrypt.so.1 Reading symbols from /lib/libcrypto.so.4...done. Loaded symbols for /lib/libcrypto.so.4 Reading symbols from /lib/libpam.so.0...done. Loaded symbols for /lib/libpam.so.0 Reading symbols from /usr/lib/libpq.so.3...done. Loaded symbols for /usr/lib/libpq.so.3 Reading symbols from /lib/libdl.so.2...done. Loaded symbols for /lib/libdl.so.2 Reading symbols from /lib/tls/libc.so.6...done. Loaded symbols for /lib/tls/libc.so.6 Reading symbols from /usr/lib/libgssapi_krb5.so.2...done. Loaded symbols for /usr/lib/libgssapi_krb5.so.2 Reading symbols from /usr/lib/libkrb5.so.3...done. Loaded symbols for /usr/lib/libkrb5.so.3 Reading symbols from /lib/libcom_err.so.2...done. Loaded symbols for /lib/libcom_err.so.2 Reading symbols from /usr/lib/libk5crypto.so.3...done. Loaded symbols for /usr/lib/libk5crypto.so.3 Reading symbols from /lib/libresolv.so.2...done. Loaded symbols for /lib/libresolv.so.2 Reading symbols from /usr/lib/libz.so.1...done. Loaded symbols for /usr/lib/libz.so.1 Reading symbols from /lib/libssl.so.4...done. Loaded symbols for /lib/libssl.so.4 Reading symbols from /lib/libnsl.so.1...done. Loaded symbols for /lib/libnsl.so.1 Reading symbols from /lib/tls/libpthread.so.0...done. [Thread debugging using libthread_db enabled] [New Thread -151047520 (LWP 26340)] Loaded symbols for /lib/tls/libpthread.so.0 Reading symbols from /lib/ld-linux.so.2...done. Loaded symbols for /lib/ld-linux.so.2 Reading symbols from /lib/libnss_files.so.2...done. Loaded symbols for /lib/libnss_files.so.2 0x00a4f7a2 in _dl_sysinfo_int80 () from /lib/ld-linux.so.2 (gdb) cont Continuing.
Program received signal SIGSEGV, Segmentation fault. [Switching to Thread -151047520 (LWP 26340)] 0x00ac93d4 in _int_free () from /lib/tls/libc.so.6 (gdb) bt full #0 0x00ac93d4 in _int_free () from /lib/tls/libc.so.6 No symbol table info available. #1 0x00aca72b in free () from /lib/tls/libc.so.6 No symbol table info available. #2 0x0805495e in i_free (mem=0x97dfe28) at imem.c:37 No locals. #3 0x08051554 in pgsql_lookup_pass (auth_request=0x97dfc30, pgsql_request=0xb7ffdc) at passdb-pgsql.c:117 conn = (struct pgsql_connection *) 0x97dfe28 query = 0x9800000
str = (string_t *) 0xb81760 #4 0x0804f723 in mech_plain_auth_continue (auth_request=0x97dfc30, request=0x9800000, data=0x97dfe20 "", callback=0x9800000) at mech-plain.c:68 authenid = 0x97d9509 "jaeson" pass = 0x97bb060 "secret" i = 131553 count = 2 #5 0x0804f05e in mech_request_continue (conn=0x97d4e00, request=0xfeea6dc0, data=0x97d9508 "", callback=0x804de34-----Original Message----- From: Timo Sirainen [mailto:tss@iki.fi] Sent: Monday, December 13, 2004 11:52 AM To: Jaeson Schultz Cc: dovecot@dovecot.org Subject: Re: [Dovecot] Internal login failure
On 12.12.2004, at 23:08, Jaeson Schultz wrote:
dovecot: Dec 12 01:15:59 Error: child 9845 (auth) killed with signal 11
So, this is the real problem. For some reason it crashes before doing userdb lookup. gdb backtrace from this would be helpful. Easiest way to do this would be:
gdb /usr/local/libexec/dovecot/dovecot-auth pidof dovecot-auth
cont <wait
for crash> bt full
and mail it to me.
[This E-mail scanned for viruses]
FYI, when I de-installed version v0.99.12.1 and installed v0.99.11.1 everything works fine. Seems there is a problem with my pgsql query strings getting munged when they are passed to db_pgsql_query in v0.99.12.1. I would still like to be running the "latest & greatest" version of dovecot, but for now I don't mind running a slightly older version.
If anyone has any insight into what might have caused the problem with the v0.99.12.1, please let me know.
~Jaeson
participants (3)
-
Curtis Maloney
-
Jaeson Schultz
-
Timo Sirainen