<!doctype html>
<html>
<head>
<meta charset="UTF-8">
</head>
<body>
<div>
PAM is trying to lookup user@domain while you probably only have user. PAM driver does not yet support username_format.
</div>
<div>
<br>
</div>
<div>
Aki
</div>
<blockquote type="cite">
<div>
On 11 April 2019 15:36 Laura Smith via dovecot <
<a href="mailto:dovecot@dovecot.org">dovecot@dovecot.org</a>> wrote:
</div>
<div>
<br>
</div>
<div>
<br>
</div>
<div>
pam(
<a href="mailto:foobar@example.com">foobar@example.com</a>,192.0.1.1,<9zMTUUCGNfHZzMpL>): unknown user (SHA1 of given password: ff75068c2f4d700a49dae204d56477a5ffa5d23d)
</div>
<div>
<br>
</div>
<div>
<br>
</div>
<div>
The password is correct, i.e. 'echo -n 'passed' | openssl dgst -sha1' matches.
</div>
<div>
<br>
</div>
<div>
The user is setup correctly in /etc/dovecot/users (the /etc/dovecot/users was copied from another known-good server, so the syntax is correct and appropriate adjustments have been made for chmod and directory).
</div>
<div>
<br>
</div>
<div>
doveconf -N follows:
</div>
<div>
<br>
</div>
<div>
# 2.3.3 (dcead646b): /etc/dovecot/dovecot.conf
</div>
<div>
# Pigeonhole version 0.5.3 (f018bbab)
</div>
<div>
# OS: Linux 4.12.14-lp150.12.48-default x86_64
</div>
<div>
# Hostname: foobar
</div>
<div>
auth_mechanisms = plain login
</div>
<div>
auth_verbose = yes
</div>
<div>
auth_verbose_passwords = sha1
</div>
<div>
doveadm_password = # hidden, use -P to show it
</div>
<div>
first_valid_uid = 471
</div>
<div>
imapc_features = rfc822.size fetch-headers
</div>
<div>
imapc_host = foobar.example.com
</div>
<div>
imapc_password = # hidden, use -P to show it
</div>
<div>
imapc_port = 993
</div>
<div>
imapc_ssl = imaps
</div>
<div>
imapc_user = %u
</div>
<div>
mail_location = maildir:~/Maildir
</div>
<div>
mail_plugin_dir = /usr/lib64/dovecot/modules
</div>
<div>
mail_prefetch_count = 20
</div>
<div>
mailbox_list_index = yes
</div>
<div>
managesieve_notify_capability = mailto
</div>
<div>
managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body environment mailbox date ihave enotify
</div>
<div>
namespace inbox {
</div>
<div>
inbox = yes
</div>
<div>
location =
</div>
<div>
mailbox Drafts {
</div>
<div>
special_use = \Drafts
</div>
<div>
}
</div>
<div>
mailbox Junk {
</div>
<div>
special_use = \Junk
</div>
<div>
}
</div>
<div>
mailbox Sent {
</div>
<div>
special_use = \Sent
</div>
<div>
}
</div>
<div>
mailbox "Sent Messages" {
</div>
<div>
special_use = \Sent
</div>
<div>
}
</div>
<div>
mailbox Trash {
</div>
<div>
special_use = \Trash
</div>
<div>
}
</div>
<div>
prefix =
</div>
<div>
}
</div>
<div>
passdb {
</div>
<div>
driver = pam
</div>
<div>
name =
</div>
<div>
}
</div>
<div>
plugin {
</div>
<div>
sieve = file:~/.dovecot.sieve
</div>
<div>
}
</div>
<div>
protocols = imap lmtp
</div>
<div>
service auth {
</div>
<div>
unix_listener /var/spool/postfix/private/dovecot-auth {
</div>
<div>
group = postfix
</div>
<div>
mode = 0660
</div>
<div>
user = postfix
</div>
<div>
}
</div>
<div>
}
</div>
<div>
service imap-login {
</div>
<div>
process_min_avail = 3
</div>
<div>
}
</div>
<div>
service lmtp {
</div>
<div>
process_min_avail = 5
</div>
<div>
unix_listener /var/spool/postfix/private/dovecot-lmtp {
</div>
<div>
group = postfix
</div>
<div>
mode = 0660
</div>
<div>
user = postfix
</div>
<div>
}
</div>
<div>
user = my_virtmailuser
</div>
<div>
}
</div>
<div>
service managesieve-login {
</div>
<div>
inet_listener sieve {
</div>
<div>
port = 4190
</div>
<div>
}
</div>
<div>
inet_listener sieves {
</div>
<div>
address =
</div>
<div>
port = 5190
</div>
<div>
ssl = yes
</div>
<div>
}
</div>
<div>
}
</div>
<div>
ssl = required
</div>
<div>
ssl_ca = </etc/dovecot/ssl/certbot_ca.pem
</div>
<div>
ssl_cert = </etc/dovecot/ssl/certbot.pem
</div>
<div>
ssl_cipher_list = ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS
</div>
<div>
ssl_client_ca_dir = /etc/ssl/certs
</div>
<div>
ssl_dh = # hidden, use -P to show it
</div>
<div>
ssl_key = # hidden, use -P to show it
</div>
<div>
ssl_min_protocol = TLSv1.2
</div>
<div>
ssl_options = no_compression
</div>
<div>
ssl_prefer_server_ciphers = yes
</div>
<div>
userdb {
</div>
<div>
driver = passwd
</div>
<div>
name =
</div>
<div>
}
</div>
<div>
userdb {
</div>
<div>
args = scheme=ARGON2ID username_format=%u /etc/dovecot/users
</div>
<div>
auth_verbose = yes
</div>
<div>
driver = passwd-file
</div>
<div>
name =
</div>
<div>
}
</div>
<div>
protocol lmtp {
</div>
<div>
mail_plugins = sieve
</div>
<div>
postmaster_address =
<a href="mailto:foobar@example.com">foobar@example.com</a>
</div>
<div>
}
</div>
<div>
protocol lda {
</div>
<div>
deliver_log_format = msgid=%m: %$
</div>
<div>
mail_plugins = sieve
</div>
<div>
postmaster_address = postmaster
</div>
<div>
quota_full_tempfail = yes
</div>
<div>
rejection_reason = Your message to <%t> was automatically rejected:%n%r
</div>
<div>
}
</div>
<div>
protocol imap {
</div>
<div>
mail_max_userip_connections = 20
</div>
<div>
}
</div>
</blockquote>
<div>
<br>
</div>
<div class="io-ox-signature">
<pre>---
Aki Tuomi</pre>
</div>
</body>
</html>