[Dovecot] memory issues with 1.1.rc4 (now it's PAM)
Hi!
I'm running 1.1rc4 on a system and this happens occasionally:
--8<-- mail.info; dovecot: auth(default): client in: AUTH 1 PLAIN service=imap lip=NN.NN.NN.NN rip=NNN.NN.NNN.NN lport=143 mail.info; dovecot: auth-worker(default): pam(XXXXXXXXXXXX,NNN.NN.NNN.NN): lookup service=imap kern.alert; kernel: grsec: From NN.NN.NN.NN: denied resource overstep by requesting 134242304 for RLIMIT_AS against limit 134217728 for /us authpriv.err; dovecot-auth: PAM unable to dlopen(/lib/security/pam_unix.so) authpriv.err; dovecot-auth: PAM [error: /lib/security/pam_unix.so: failed to map segment from shared object: Cannot allocate memory] authpriv.err; dovecot-auth: PAM adding faulty module: /lib/security/pam_unix.so mail.err; dovecot: auth-worker(default): pam(XXXXXXXXXXXX,NNN.NN.NNN.NN): pam_authenticate() failed: Authentication failure mail.info; dovecot: auth(default): new auth connection: pid=6262 mail.info; dovecot: auth(default): client out: FAIL 1 user=XXXXXXXXXXXX --8<--
When I restart dovecot, it runs fine for a while, then it starts happening again. I'm pretty unsure about the cause, can someone give me a hint?
--8<--[ dovecot -n ]--8<-- # 1.1.rc4: /etc/dovecot/dovecot.conf protocols: imap pop3 ssl_disable: yes disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_process_size: 128 max_mail_processes: 128 verbose_proctitle: yes mail_privileged_group: mail mail_location: maildir:%h/.maildir mail_debug: yes mail_drop_priv_before_exec: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_process_size: 1024 mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 auth default: verbose: yes debug: yes process_size: 128 passdb: driver: pam args: * userdb: driver: passwd --8<--
Thanks!
Regards, Wolfram Schlich wschlich@gentoo.org Gentoo Linux * http://dev.gentoo.org/~wschlich/
On Apr 10, 2008, at 3:21 PM, Wolfram Schlich wrote:
mail.info; dovecot: auth-worker(default):
pam(XXXXXXXXXXXX,NNN.NN.NNN.NN): lookup service=imap kern.alert; kernel: grsec: From NN.NN.NN.NN: denied resource
overstep by requesting 134242304 for RLIMIT_AS against limit
134217728 for /us authpriv.err; dovecot-auth: PAM unable to dlopen(/lib/security/ pam_unix.so) authpriv.err; dovecot-auth: PAM [error: /lib/security/pam_unix.so:
failed to map segment from shared object: Cannot allocate memory] authpriv.err; dovecot-auth: PAM adding faulty module: /lib/security/ pam_unix.so mail.err; dovecot: auth-worker(default):
pam(XXXXXXXXXXXX,NNN.NN.NNN.NN): pam_authenticate() failed:
Authentication failure
I guess your PAM plugins are leaking memory. This should help:
# Number of auth requests to handle before destroying the process.
This may
# be useful if PAM plugins leak memory.
#auth_worker_max_request_count = 0
participants (2)
-
Timo Sirainen
-
Wolfram Schlich