I'm using bind auth for LDAP - this is probably why I don't run into the problem there.

I checked the core file - the program was ending on DES_set_key_unchecked - an OpenSSL function.

I changed auth/mycrypt.c to use the OpenSSL crypt function:

char *mycrypt(const char *key, const char *salt) { return DES_crypt(key, salt); }

After rebuilding the binaries, they work with the OpenSSL function: dovecotpw -p123 -scrypt {CRYPT}VZtB3DdcYpi0E

I now have the passdb running against SQL and all is well.

I don't know which is faster... Solaris crypt() or OpenSSL DES_crypt(); but CPU is not an issue on my server so I'll take the tradeoff.

On Tue, Jan 23, 2007 at 05:06:24PM -0500, Andre Dalle wrote:

Platform is Solaris 8 on a 280R.

I'm setting up a new installation of Dovecot, and I ran into some troubles that I've partly tracked down.

I setup auth/user dbs with LDAP initially, and things worked well.

Passwords are stored as "{crypt}zxcv..." in LDAP.

I setup SQL, and began getting this:

dovecot: Jan 23 16:37:47 Error: child 8718 (auth-worker) killed with signal 11

Passwords are stored as "zxcv..." in SQL.

I changed default_pass_scheme from CRYPT to PLAIN, and no troubles.

I then tried dovecotpw:

dovecotpw -p 123 -s PLAIN-MD5 {PLAIN-MD5}202cb962ac59075b964b07152d234b70 dovecotpw -p 123 -s CRYPT
Segmentation Fault (core dumped)

So I then tried this: truss dovecotpw -p 123 -s crypt

open64("/dev/urandom", O_RDONLY) = 3 read(3, "F80E82 c", 4) = 4 fcntl(3, F_GETFD, 0x00000000) = 0 fcntl(3, F_SETFD, 0x00000001) = 0 open64("/usr/local/lib/dovecot/auth/password", O_RDONLY|O_NDELAY) Err#2 ENOENT read(3, "8382", 2) = 2 Incurred fault #6, FLTBOUNDS %pc = 0xFF0E3304 siginfo: SIGSEGV SEGV_MAPERR addr=0x00000005 Received signal #11, SIGSEGV [default] siginfo: SIGSEGV SEGV_MAPERR addr=0x00000005 *** process killed ***

Suffice to say, there is no "/usr/local/lib/dovecot/auth/password".

I'm guessing that the dovecot auth-worker process is failing for the same reason but I don't know how to debug that one.

I have core files for the dovecotpw process.

-- André Dalle Systems Administrator NCF Internet

-- André Dalle Systems Administrator NCF Internet