[Dovecot] Problem with lmtp director proxy
Angel L. Mateo
amateo at um.es
Mon Jun 18 09:52:37 EEST 2012
El 16/06/12 01:22, Timo Sirainen escribió:
> On 13.6.2012, at 20.11, Angel L. Mateo wrote:
>> Ok, you were right. I was looking for logs at my log repository, which doesn't receive debug log. Nevertheless, the only auth lines I have found at the ones above, with the proxy_refresh=450. I haven't found any line with a timeout log in the proxies neither the backends
> The backend logs don't matter. Director adds the proxy_refresh. You haven't shown in your logs what auth process logs as debug messages. This is what is supposed to happen:
>> Jun 16 02:19:11 auth: Debug: master out: PASS 1 user=director proxy proxy_timeout=1000
I don't have any log like this.
> "master out" must return proxy_timeout=1000. If it doesn't, then the problem is with your auth settings.
>> Jun 16 02:19:11 lmtp(11845): Debug: auth input: user=director proxy proxy_timeout=1000 host=22.214.171.124 proxy_refresh=450
> Director adds proxy_refresh, but preserves proxy_timeout.
I can find these logs, but they don't include any proxy_timeout option,
all of them are like:
Jun 18 08:26:26 myotis41 dovecot: lmtp(640): Debug: auth input:
user=<user> proxy host=126.96.36.199 proxy_refresh=450
But I have found, I think, the problem... I had configured 2 user backends:
The first for master password, and the other, to get users from a ldap
directory. In my auth-ldap.conf.ext I changed the ldap driver for passdb
to static (I can't check user password in the director for other
reasons), so I had:
driver = static
args = proxy=y nopassword=y
driver = prefetch
driver = ldap
args = /etc/dovecot/dovecot-ldap.conf.ext
so, although in the dovecot-ldap.conf.ext I have:
it seems that it isn't used and proxy_timeout it's not defined.
So I have changed passdb definition to be:
driver = static
args = proxy=y nopassword=y proxy_timeout=120
and now logs are like:
Jun 18 08:46:18 myotis40 dovecot: lmtp(11276): Debug: auth input:
user=<user> proxy proxy_timeout=120 host=188.8.131.52 proxy_refresh=450
Is this correct?
More information about the dovecot