[Dovecot] username and password can't be verified

Steffen Kaiser skdovecot at smail.inf.fh-brs.de
Tue Aug 20 17:06:24 EEST 2013


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tue, 20 Aug 2013, Eric Kom wrote:

> On 20/08/2013 15:07, Steffen Kaiser wrote:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>> 
>>> Aug 20 09:03:03 ajk dovecot: auth-worker(17041): Debug: 
>>> pam(erickom at metropolitan.org.za,10.0.0.103): lookup service=dovecot
>> 
>> Your passwd contains the user with @domain?
> I don't think so.

you tried to auth as user erickom at metropolitan.org.za via PAM, but your 
/etc/passwd would know erickom only. Hence, try to auth without domain.

> I uncommented the above
> # System users (NSS, /etc/passwd, or similiar).
> # In many systems nowadays this uses Name Service Switch, which is
> # configured in /etc/nsswitch.conf. <doc/wiki/AuthDatabase.Passwd.txt>
> passdb {
>  driver = passwd
>  # [blocking=no]
>  #args =
> }
>
> and commented the pam authentication.
>
> see below the log:
> Aug 20 15:32:00 ajk dovecot: auth: Debug: auth client connected (pid=17996)
> Aug 20 15:32:00 ajk dovecot: auth: Debug: client in: 
> AUTH#0111#011PLAIN#011service=imap#011session=TFLnFGHkuwAKAABn#011lip=10.0.0.244#011rip=10.0.0.103#011lport=143#011rport=60347
> Aug 20 15:32:00 ajk dovecot: auth: Debug: client passdb out: CONT#0111#011
> Aug 20 15:32:00 ajk dovecot: auth: Debug: client in: 
> CONT#0111#011AGVyaWNrb20AbmluYTAxMDE4M2M= (previous base64 data may contain 
> sensitive data)
> Aug 20 15:32:00 ajk dovecot: auth-worker(17987): Debug: 
> passwd(erickom,10.0.0.103): lookup
> Aug 20 15:32:00 ajk dovecot: auth-worker(17987): Error: 
> passwd(erickom,10.0.0.103): Invalid password 'x' in passdb: crypt() failed: 
> Invalid argument

Now you try with another passwd driver and access /etc/passwd without PAM, 
but you have a shadowed passwd system. Revert to passdb pam and try the 
username without domain.

- -- 
Steffen Kaiser
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iQEVAwUBUhN34F3r2wJMiz2NAQIvlQgArga4yyFyaFX0GkQ3zybvbd6jO/gNL0uK
+IARdKOP7w//Z+Zmzrnp4rPy1DJQahiw/IQ7FwepeOKpM8166v4Hg1JHjKJ+/pLp
+opsIvuW5B2PLuYP9VE5NocNTiU5dq8YGmHr71ktCIlVizDLqRusHj54EwSNpyxH
UVWYbGkiNfyzGunOHwI9hCUNMGER4E9NggMR9VQUjI5SnzKCy1me8f1T2dYRZZp5
djyN1oiuXcUycpVPo1ZcNj+vtJ5SBtTBCxll+gaRmHNR6IqkQ/QSMvUi++LpVKDZ
8tB4+j42nyAqi3Z7S/6X6li4CbjwF3jllsyKHUt8n8ie9Z5Fwavr6g==
=K3/l
-----END PGP SIGNATURE-----


More information about the dovecot mailing list