[Dovecot] unknown users

[/dev/rob0]

On Mon, Jan 07, 2013 at 08:00:37PM +0100, Averlon wrote:
> can anyone tell me where these "unknown users" come from.

> Jan 7 19:43:11 f42252se postfix/pipe[14632]: 9A86C30007C: 
> to=<redmine at averlon.loc>, relay=spamassassin, delay=2.2, 
> delays=0.05/0/0/2.1, dsn=2.0.0, status=sent (delivered via 
> spamassassin service)
> Jan  7 19:43:11 f42252se postfix/qmgr[14561]: 9A86C30007C: removed

The original message is successfully delivered to your content 
filter.

> Jan  7 19:43:11 f42252se dovecot: auth: Debug: master in:
> USER#0111#011redmine at averlon.loc#011service=lda
> Jan 7 19:43:11 f42252se dovecot: auth: Debug: 
> ldap(redmine at averlon.loc): pass search: 
> base=ou=user,dc=averlon,dc=loc scope=onelevel 
> filter=(&(objectClass=posixAccount)(uid=redmine at averlon.loc)) 
> fields=uid,userPassword

Here's one of your LDAP queries.

> Jan  7 19:43:11 f42252se dovecot: auth: ldap(redmine at averlon.loc):
> *unknown user*
> Jan  7 19:43:11 f42252se dovecot: auth: Debug: master out: NOTFOUND#0111
> Jan  7 19:43:11 f42252se postfix/pipe[14637]: BE0AC30007F:
> to=<redmine at averlon.loc>, relay=dovecot, delay=0.02, delays=0/0/0/0.01,
> dsn=5.1.1, status=bounced (user unknown)

The content filter reinjects via sendmail(1), and the pipe(8) to the 
Dovecot LDA fails. Your LDAP query is not returning what you expect, 
or you're not querying for the right thing.

> Jan  7 19:43:11 f42252se postfix/cleanup[14631]: C279030007E:
> message-id=<20130107184311.C279030007E at mail.av.loc>
> Jan  7 19:43:11 f42252se postfix/qmgr[14561]: C279030007E: from=<>,
> size=3182, nrcpt=1 (queue active)
> Jan  7 19:43:11 f42252se postfix/bounce[14639]: BE0AC30007F: sender
> non-delivery notification: C279030007E
> Jan  7 19:43:11 f42252se postfix/qmgr[14561]: BE0AC30007F: removed
> Jan  7 19:43:11 f42252se dovecot: auth: Debug: master in:
> USER#0111#011avadmin at av.loc#011service=lda
> Jan  7 19:43:11 f42252se dovecot: auth: Debug: ldap(avadmin at av.loc):
> pass search: base=ou=user,dc=averlon,dc=loc scope=onelevel
> filter=(&(objectClass=posixAccount)(uid=avadmin at av.loc))
> fields=uid,userPassword

There's another one of your queries, looking up the sender address 
for delivery of the bounce.

> Jan  7 19:43:11 f42252se dovecot: auth: ldap(avadmin at av.loc): *unknown user*
> Jan  7 19:43:11 f42252se dovecot: auth: Debug: master out: NOTFOUND#0111
> Jan  7 19:43:11 f42252se postfix/pipe[14637]: C279030007E:
> to=<avadmin at av.loc>, relay=dovecot, delay=0.01, delays=0/0/0/0.01,
> dsn=5.1.1, status=bounced (user unknown)
> Jan  7 19:43:11 f42252se postfix/qmgr[14561]: C279030007E: removed

Same thing happens to the bounce. Being undeliverable, your mail is 
gone.

> +++
> Tell me what you need as additional info.

Turn off verbose logging in Postfix, as Charles pointed out. I guess 
it's only the TLS logging that you have made verbose.

Review the Dovecot wiki / wiki2 (you didn't say what version you are
using?) page on LDAP.
-- 
  http://rob0.nodns4.us/ -- system administration and consulting
  Offlist GMX mail is seen only if "/dev/rob0" is in the Subject: