[Dovecot] I can't logon to the mail server using an NIS user account
Below is my configuration
# 2.0.13: /etc/dovecot/dovecot.conf # OS: Linux 3.0.0-17-server x86_64 Ubuntu 11.10 auth_mechanisms = plain login mail_location = maildir:/nfs/users/%u/Maildir passdb { args = scheme=CRYPT username_format=%u /etc/dovecot/users driver = passwd-file } protocols = " imap pop3" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } ssl_cert =
/etc/pam.d/common-password
# here are the per-package modules (the "Primary" block) password [success=1 default=ignore] pam_unix.so obscure sha512 nis # here's the fallback if no module succeeds password requisite pam_deny.so # prime the stack with a positive return value if there isn't one already; # this avoids us returning an error just because nothing sets a success code # since the modules above will each just jump around password required pam_permit.so # and here are more per-package modules (the "Additional" block) password optional pam_ecryptfs.so # end of pam-auth-update config
dovecot logs
May 26 13:14:39 prisa-appserver ntpdate[574]: Can't find host ntp.ubuntu.com: Name or service not known (-2) May 26 13:14:39 prisa-appserver ntpdate[574]: no servers can be used, exiting May 26 13:14:48 prisa-appserver sudo: pam_ecryptfs: pam_sm_authenticate: /home/prisa is already mounted May 26 13:14:50 prisa-appserver kernel: [ 90.418686] CIFS: Unknown mount option - May 26 13:14:50 prisa-appserver kernel: [ 90.472004] CIFS VFS: default security mechanism requested. The default security mechanism will be upgraded from ntlm to ntlmv2 in kernel release 3.1 May 26 13:15:44 prisa-appserver ntpdate[1571]: Can't find host ntp.ubuntu.com: Name or service not known (-2) May 26 13:15:44 prisa-appserver ntpdate[1571]: no servers can be used, exiting May 26 13:17:01 prisa-appserver CRON[1678]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly) May 26 13:39:01 prisa-appserver CRON[1775]: (root) CMD ( [ -x /usr/lib/php5/maxlifetime ] && [ -d /var/lib/php5 ] && find /var/lib/php5/ -depth -mindepth 1 -maxdepth 1 -type f -cmin +$(/usr/lib/php5/maxlifetime) ! -execdir fuser -s {} 2>/dev/null \; -delete) May 26 13:46:08 prisa-appserver dovecot: imap-login: Disconnected (auth failed, 3 attempts): user=<prisa>, method=PLAIN, rip=192.168.128.14, lip=192.168.128.15, TLS May 26 13:46:59 prisa-appserver dovecot: imap-login: Aborted login (no auth attempts): rip=192.168.128.14, lip=192.168.128.15 May 26 13:46:59 prisa-appserver dovecot: imap-login: Aborted login (no auth attempts): rip=192.168.128.14, lip=192.168.128.15 May 26 13:46:59 prisa-appserver dovecot: imap-login: Disconnected (no auth attempts): rip=192.168.128.14, lip=192.168.128.15, TLS handshaking: SSL_accept() failed: error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca: SSL alert number 48 May 26 13:46:59 prisa-appserver dovecot: pop3-login: Aborted login (no auth attempts): rip=192.168.128.14, lip=192.168.128.15 May 26 13:46:59 prisa-appserver dovecot: pop3-login: Aborted login (no auth attempts): rip=192.168.128.14, lip=192.168.128.15 May 26 13:46:59 prisa-appserver dovecot: pop3-login: Disconnected (no auth attempts): rip=192.168.128.14, lip=192.168.128.15, TLS handshaking: SSL_accept() failed: error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca: SSL alert number 48 May 26 13:46:59 prisa-appserver dovecot: imap-login: Aborted login (no auth attempts): rip=192.168.128.14, lip=192.168.128.15, TLS May 26 13:46:59 prisa-appserver dovecot: pop3-login: Disconnected (no auth attempts): rip=192.168.128.14, lip=192.168.128.15, TLS May 26 13:47:04 prisa-appserver postfix/smtpd[1820]: connect from unknown[192.168.128.14] May 26 13:47:04 prisa-appserver postfix/smtpd[1820]: improper command pipelining after EHLO from unknown[192.168.128.14] May 26 13:47:04 prisa-appserver postfix/smtpd[1820]: disconnect from unknown[192.168.128.14] May 26 13:47:04 prisa-appserver postfix/smtpd[1830]: connect from unknown[192.168.128.14] May 26 13:47:04 prisa-appserver postfix/smtpd[1830]: lost connection after CONNECT from unknown[192.168.128.14] May 26 13:47:04 prisa-appserver postfix/smtpd[1830]: disconnect from unknown[192.168.128.14] May 26 13:47:22 prisa-appserver dovecot: imap-login: Disconnected (auth failed, 3 attempts): user=<femmy>, method=PLAIN, rip=192.168.128.14, lip=192.168.128.15, TLS May 26 13:47:48 prisa-appserver dovecot: imap-login: Disconnected (auth failed, 3 attempts): user=femmy@mail.prisaltd.local, method=PLAIN, rip=192.168.128.14, lip=192.168.128.15, TLS May 26 13:48:15 prisa-appserver dovecot: imap-login: Disconnected (auth failed, 3 attempts): user=<femmy>, method=PLAIN, rip=192.168.128.14, lip=192.168.128.15, TLS May 26 13:48:21 prisa-appserver dovecot: imap-login: Disconnected (auth failed, 3 attempts): user=femmy@mail.prisaltd.local, method=PLAIN, rip=192.168.128.14, lip=192.168.128.15, TLS
Please what am I doing wrong? I've been on this for 2 weeks.
-- Odeyemi 'Kayode O. http://ng.linkedin.com/in/kayodeodeyemi. t: @charyorde blog: http://sinati.com/tree/java-cheat-sheet
On Sat, 2012-05-26 at 13:51 +0100, Kayode Odeyemi wrote:
Below is my configuration
passdb { args = scheme=CRYPT username_format=%u /etc/dovecot/users driver = passwd-file }
Dovecot isn't using NIS. It's using user accounts in /etc/dovecot/users file.
And in any case set auth_debug_passwords=yes to debug authentication.
On Tue, May 29, 2012 at 4:47 PM, Timo Sirainen tss@iki.fi wrote:
On Sat, 2012-05-26 at 13:51 +0100, Kayode Odeyemi wrote:
Below is my configuration
passdb { args = scheme=CRYPT username_format=%u /etc/dovecot/users driver = passwd-file }
Dovecot isn't using NIS. It's using user accounts in /etc/dovecot/users file.
And in any case set auth_debug_passwords=yes to debug authentication.
Thanks Timo.
The content of /etc/dovecot/users is gotten from:
# ypcat passwd > /etc/dovecot/users
I have also configured multiple password source like this:
# 2.0.13: /etc/dovecot/dovecot.conf # OS: Linux 3.0.0-17-server x86_64 Ubuntu 11.10 nfs4 auth_mechanisms = plain login disable_plaintext_auth = no mail_location = maildir:/nfs/users/%u/Maildir passdb { driver = pam } passdb { driver = passwd } passdb { args = scheme=CRYPT username_format=%u /etc/dovecot/users driver = passwd-file } protocols = " imap pop3" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } ssl_cert =
No luck yet.
Thanks for helping out.
-- Odeyemi 'Kayode O. http://ng.linkedin.com/in/kayodeodeyemi. t: @charyorde blog: http://sinati.com/tree/java-cheat-sheet
participants (2)
-
Kayode Odeyemi
-
Timo Sirainen