<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"></head><body><div>Do you see anything else in logs? </div><div><br></div><div><br></div><div><br></div><div id="composer_signature"><meta http-equiv="Content-Type" content="text/html; charset=UTF-8">---<div>Aki Tuomi</div><div>Dovecot oy</div></div><div><br></div><div style="font-size:100%;color:#000000"><!-- originalMessage --><div>-------- Original message --------</div><div>From: Simone Lazzaris <s.lazzaris@interactive.eu> </div><div>Date: 07/09/2018 10:13 (GMT+02:00) </div><div>To: dovecot@dovecot.org </div><div>Subject: Auth process sometimes stop responding after upgrade </div><div><br></div></div>Hi all;<br>I've upgraded a ring of dovecot directors from 2.2.15 to 2.2.36. After the <br>upgrade I've got some instability: a few time per day per server, seemly at <br>random, the auth process stop responding and the clients cannot authenticate <br>any more:<br><br>Sep 6 14:45:51 imap-front13 dovecot: pop3-login: Warning: Auth process not <br>responding, delayed sending initial response (greeting): user=<>, <br>rip=xx.xx.xx.xx, lip=xx.xx.xx.xx, TLS, session=<1HVqRTN10MNTie+S><br><br>I can't figure it out.... Any hints?<br><br>This is my configuration:<br><br><br># 2.2.36 (1f10bfa63): /usr/local/etc/dovecot/dovecot.conf<br># OS: Linux 3.2.0-4-686-pae i686 Debian 7.11 <br># Hostname: imap-front13.mailfarm.interac.it<br>auth_mechanisms = plain login digest-md5 cram-md5 apop scram-sha-1<br>auth_verbose = yes<br>auth_verbose_passwords = plain<br>auth_worker_max_count = 50<br>base_dir = /var/run/dovecot/<br>default_login_user = nobody<br>director_doveadm_port = 9091<br>director_mail_servers = 192.168.1.142 192.168.1.143 192.168.1.144 <br>192.168.1.145 192.168.1.216 192.168.1.217 192.168.1.218 192.168.1.219<br>director_servers = 212.183.164.157 212.183.164.158 212.183.164.159 <br>212.183.164.160<br>listen = *<br>passdb {<br> args = /usr/local/etc/dovecot/sql.conf<br> driver = sql<br>}<br>protocols = imap pop3<br>service director {<br> fifo_listener login/proxy-notify {<br> mode = 0666<br> }<br> inet_listener {<br> port = 9090<br> }<br> unix_listener director-userdb {<br> mode = 0600<br> }<br> unix_listener login/director {<br> mode = 0666<br> }<br>}<br>service imap-login {<br> executable = imap-login director<br> service_count = 0<br> vsz_limit = 128 M<br>}<br>service pop3-login {<br> executable = pop3-login director<br> service_count = 0<br> vsz_limit = 128 M<br>}<br>ssl_cert = </usr/local/etc/dovecot/qcom.wildcard.pem<br>ssl_cipher_list = ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-<br>SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-<br>AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-<br>SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-<br>SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-<br>SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-<br>AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-<br>SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-<br>SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!<br>MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA<br>ssl_dh_parameters_length = 2048<br>ssl_key = # hidden, use -P to show it<br>ssl_parameters_regenerate = 1 weeks<br>ssl_prefer_server_ciphers = yes<br>ssl_protocols = !SSlv2 !SSLv3<br>syslog_facility = local5<br>userdb {<br> driver = prefetch<br>}<br><br>-- <br>*Simone Lazzaris*<br>*Qcom S.p.A.*<br><br><br><br></body></html>