[Dovecot] LMTP: Rejecting unknown users

[Peer Heinlein]

Am Mittwoch 04 August 2010 schrieb Timo Sirainen:


> > Unfortunately, LMTP accepts mail for *all* users, even for those
> > users, that doesn't exist in LDAP at all:
>
> Shouldn't happen..

Okay, so I'm hopefully not toooo stupid :-)

> BTW. You should be able to test this more easily with "doveadm user
> foo at example.org". It should also return "unknown user".

Oh, I'm not used to the new features :-)

But even if doveadm user denies the existence of my dummy-user:

root at mail-archiv:/etc/dovecot# doveadm user hgjhgjhg at example.org
userdb lookup: user hgjhgjhg at example.org doesn't exist

Aug  4 14:30:49 mail-archiv dovecot: auth: ldap(hgjhgjhg at example.org): 
unknown user

...it's still possible to send him e-mails...

root at mail-archiv:/etc/dovecot# echo hhh | sendmail hgjhgjhg at example.org

root at mail-archiv:/etc/dovecot# grep 
hgjhgjhg at example.org /var/log/mail.info

Aug  4 14:31:07 mail-archiv postfix/smtp[11471]: 1EB2C8115: 
to=<hgjhgjhg at example.org>, relay=127.0.0.1[127.0.0.1]:7123, delay=0.37, 
delays=0.07/0.01/0.05/0.25, dsn=2.0.0, status=sent (250 Message 
requeued)
Aug  4 14:31:07 mail-archiv dovecot: lmtp(10423, hgjhgjhg at example.org): 
GFarClBFWUy3KAAA/hwkHw: 
msgid=<20100804123107.1EB2C8115 at mail-archiv.heinlein-support.test>: 
saved mail to INBOX
Aug  4 14:31:07 mail-archiv postfix/lmtp[11477]: 6026A8111: 
to=<hgjhgjhg at example.org>, 
relay=mail-archiv.heinlein-support.test[private/dovecot-lmtp], 
delay=0.13, delays=0.11/0.02/0/0.01, dsn=2.0.0, status=sent (250 2.0.0 
<hgjhgjhg at example.org> GFarClBFWUy3KAAA/hwkHw Saved)


2010-08-04 14:34:41 auth: Debug: Loading modules from 
directory: /usr/lib/dovecot/modules/auth
2010-08-04 14:34:41 auth: Debug: auth client connected (pid=11517)
2010-08-04 14:34:41 lmtp(11522): Debug: none: root=, index=, control=, 
inbox=
2010-08-04 14:34:41 auth: Debug: master in: USER        1       
hgjhgjhg at example.org    service=lmtp    lip=(null)      rip=(null)
2010-08-04 14:34:41 auth: Debug: ldap(hgjhgjhg at example.org,0.0.0.0): 
user search: base=ou=domain,dc=heinlein-support,dc=de scope=subtree 
filter=(email=hgjhgjhg at example.org) fields=jpberlinMailQuota
2010-08-04 14:34:41 auth: Debug: ldap(hgjhgjhg at example.org,0.0.0.0): no 
fields returned by the server
2010-08-04 14:34:41 auth: Debug: master out: USER       1       
hgjhgjhg at example.org    home=/mail/example.org/hgjhgjhg uid=10000       
gid=10000
2010-08-04 14:34:41 lmtp(11522): Debug: auth input: hgjhgjhg at example.org 
home=/mail/example.org/hgjhgjhg uid=10000 gid=10000
2010-08-04 14:34:41 lmtp(11522, hgjhgjhg at example.org): Debug: Effective 
uid=10000, gid=10000, home=/mail/example.org/hgjhgjhg
2010-08-04 14:34:41 lmtp(11522, hgjhgjhg at example.org): Debug: 
Namespace : type=private, prefix=, sep=/, inbox=yes, hidden=no, 
list=yes, subscriptions=yes
2010-08-04 14:34:41 lmtp(11522, hgjhgjhg at example.org): Debug: maildir++: 
root=/mail/example.org/hgjhgjhg/Maildir, index=, control=, 
inbox=/mail/example.org/hgjhgjhg/Maildir
2010-08-04 14:34:41 lmtp(11522, hgjhgjhg at example.org): Debug: 
Namespace : type=shared, prefix=shared/%u/, sep=/, inbox=no, hidden=no, 
list=children, subscriptions=no
2010-08-04 14:34:41 lmtp(11522, hgjhgjhg at example.org): Debug: shared: 
root=/var/run/dovecot, index=, control=, inbox=



Peer Heinlein



-- 

Heinlein Professional Linux Support GmbH
Linux: Akademie - Support - Hosting
http://www.heinlein-support.de

Tel: 030-405051-42
Fax: 030-405051-19

Zwangsangaben lt. §35a GmbHG:
HRB 93818 B / Amtsgericht Berlin-Charlottenburg, 
Geschäftsführer: Peer Heinlein  -- Sitz: Berlin