[Dovecot] Problem with Dovecot after upgrade to Debian 7.0 (stable)
Dear all,
few days ago I updated Debian to the latest stable and since then Dovecot is not working. I use Dovecot as LDA for Postfix and also for IMAP access. Also I used SASL and everything was ok before update. After I updated to Dovecot 2.1.7 (it used to be 1.x before) it looks like that e-mail delever is working but I can not configure IMAP access to work.
All users/passwords are stored as local users in /etc/passwd
When I tried to connect to imap log file shows:
Oct 12 22:16:16 seenet-mtp dovecot: auth-worker(24788): Debug: pam(user@mydomain.com,178.x.y.z): lookup service=dovecot Oct 12 22:17:16 seenet-mtp dovecot: auth: Error: auth worker: Aborted request: Lookup timed out
Also tested access opensasl clent and after I tried to log in I have received:
- OK Waiting for authentication process to respond.. tar NO [UNAVAILABLE] Temporary authentication failure. [seenet-mtp:2013-10-12 20:20:27]
doveconf -n
# 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-686-pae i686 Debian 7.2 auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login auth_verbose = yes auth_verbose_passwords = plain login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c mail_location = maildir:/%h/mail namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } protocols = " imap" service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } ssl_cert =
Please help, Milan
ps. Sorry for my English.
Am 12.10.2013 22:24, schrieb Milan Milošević:
Dear all,
few days ago I updated Debian to the latest stable and since then Dovecot is not working. I use Dovecot as LDA for Postfix and also for IMAP access. Also I used SASL and everything was ok before update. After I updated to Dovecot 2.1.7 (it used to be 1.x before) it looks like that e-mail delever is working but I can not configure IMAP access to work.
1.x to 2.x is a *major upgrade*
so look in your syslog (not the maillog) and the next time before oyu do a migration i suggest https://www.google.at/search?q=upgrade+dovecot+1.x+to+2.x which will result at the following instructions *before* start the upgrade
I have checked that before and did doveconf -n -c... at first but the result was same. After that I have removed Postfix, Dovecot, saslauthd and all configurations. I installed everything again (by following documentations for Dovecot and Postfix) and the problem is still here.
To me it looks like that there is a problem when dovecot tries to connect to PAM but I'm not sure...
1.x to 2.x is a *major upgrade*
so look in your syslog (not the maillog) and the next time before oyu do a migration i suggest https://www.google.at/search?q=upgrade+dovecot+1.x+to+2.x which will result at the following instructions *before* start the upgrade
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Milan Milošević wrote:
Oct 12 22:16:16 seenet-mtp dovecot: auth-worker(24788): Debug: pam(user@mydomain.com,178.x.y.z): lookup service=dovecot Oct 12 22:17:16 seenet-mtp dovecot: auth: Error: auth worker: Aborted request: Lookup timed out
Also tested access opensasl clent and after I tried to log in I have received:
- OK Waiting for authentication process to respond.. tar NO [UNAVAILABLE] Temporary authentication failure. [seenet-mtp:2013-10-12 20:20:27]
protocols = " imap" service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } }
service auth { client_limit = 12500 unix_listener auth-client { mode = 0766 } unix_listener auth-userdb { mode = 0766 user = vmail } }
I'm pretty sure you need some of these above, too. You have only the Postfix auth demon, but none of the Dovecot-internal one.
Please check out the default config and add your configs to it.
Steffen -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (Darwin) Comment: Using GnuPG with undefined - http://www.enigmail.net/
iQEVAwUBUlm7M13r2wJMiz2NAQLLFgf+IrY1pMATHgQ3N5SOQ1eqVL0yjZx1GfUR ueCk5rAKvQ9b+ZUn7YVFaHJVie5lCZVYlQMx+4EG8BPxUNQIR84jmje9xhVRrNrF 3qBxYD8ksuDeVMaf4nX9wV2XnYmMe9M3tCKqSLyWksmmC2p+OCBdp996UW26gR2C suIR5162IXFpolRhcTCt/4BMRh6wodcl6A52J+jpKr9iU3EuNrAX/bDaYBL1tYsu w6VXU/HGXhl8xIbQwASnbtdqPii5PVTkRWZtPgHeOWdQ3oZ6N2gPO9O/3e7N3wzl cjJkzxLJ07nXwuFsVV3mKtUFYCcDVpR/DuWOm9qZEirxozeRkg+RkA== =9PL1 -----END PGP SIGNATURE-----
Thanks. I tried it (few combinations) but it didn't help.
I have received few errors: - User doesn't exist: vmail - dovecotWarning: fd limit (ulimit -n) is lower than required under max. load (1024 < 12500), because of service auth { client_limit
Milan
On 10/12/2013 11:12 PM, Steffen wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Milan Milošević wrote:
Oct 12 22:16:16 seenet-mtp dovecot: auth-worker(24788): Debug: pam(user@mydomain.com,178.x.y.z): lookup service=dovecot Oct 12 22:17:16 seenet-mtp dovecot: auth: Error: auth worker: Aborted request: Lookup timed out
Also tested access opensasl clent and after I tried to log in I have received:
- OK Waiting for authentication process to respond.. tar NO [UNAVAILABLE] Temporary authentication failure. [seenet-mtp:2013-10-12 20:20:27]
protocols = " imap" service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } service auth { client_limit = 12500 unix_listener auth-client { mode = 0766 } unix_listener auth-userdb { mode = 0766 user = vmail } }
I'm pretty sure you need some of these above, too. You have only the Postfix auth demon, but none of the Dovecot-internal one.
Please check out the default config and add your configs to it.
Steffen -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (Darwin) Comment: Using GnuPG with undefined - http://www.enigmail.net/
iQEVAwUBUlm7M13r2wJMiz2NAQLLFgf+IrY1pMATHgQ3N5SOQ1eqVL0yjZx1GfUR ueCk5rAKvQ9b+ZUn7YVFaHJVie5lCZVYlQMx+4EG8BPxUNQIR84jmje9xhVRrNrF 3qBxYD8ksuDeVMaf4nX9wV2XnYmMe9M3tCKqSLyWksmmC2p+OCBdp996UW26gR2C suIR5162IXFpolRhcTCt/4BMRh6wodcl6A52J+jpKr9iU3EuNrAX/bDaYBL1tYsu w6VXU/HGXhl8xIbQwASnbtdqPii5PVTkRWZtPgHeOWdQ3oZ6N2gPO9O/3e7N3wzl cjJkzxLJ07nXwuFsVV3mKtUFYCcDVpR/DuWOm9qZEirxozeRkg+RkA== =9PL1 -----END PGP SIGNATURE-----
participants (3)
-
Milan Milošević
-
Reindl Harald
-
Steffen