pam auth problem

[Randy Bush]

> What is in the pam.d/dovecot file? (Remember to strip passwords if
> included)

# cat /etc/pam.d/dovecot
passdb {
  driver = pam
  # args = failure_show_msg=yes
  # args = max_requests=12
  args = %s
}

and /etc/pam.d/{imap,pop3} were untouched; both as follows

#
# $FreeBSD: releng/10.3/etc/pam.d/pop3 170771 2007-06-15 11:33:13Z yar $
#
# PAM configuration for the "pop3" service
#

# auth
#auth           sufficient      pam_krb5.so             no_warn try_first_pass
#auth           sufficient      pam_ssh.so              no_warn try_first_pass
auth            required        pam_unix.so             no_warn try_first_pass

# account
#account        required        pam_nologin.so
account         required        pam_unix.so