<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-2022-jp">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"MS Gothic";
panose-1:2 11 6 9 7 2 5 8 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"\@MS Gothic";
panose-1:2 11 6 9 7 2 5 8 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang="EN-US" link="blue" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">Uncommented the section on userdb that was commented because it was throwing errors. It’s still throwing an error. Specifically this one:</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Jan 10 15:42:37 shuttle postfix/smtpd[21046]: connect from pvr[192.168.1.103]</p>
<p class="MsoNormal">Jan 10 15:42:47 shuttle postfix/smtpd[21046]: fatal: no SASL authentication mechanisms</p>
<p class="MsoNormal">Jan 10 15:42:48 shuttle postfix/master[18850]: warning: process /usr/libexec/postfix/smtpd pid 21046 exit status 1</p>
<p class="MsoNormal">Jan 10 15:42:48 shuttle postfix/master[18850]: warning: /usr/libexec/postfix/smtpd: bad command startup -- throttling</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I’ve combed Google for information on “no SASL authentication mechanism” with no solution. I appear to have things configured correctly (unless IM missing something, which is entirely possible given that I’m really struggling with this).</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Saslauthd is running:</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"># systemctl status saslauthd</p>
<p class="MsoNormal">● saslauthd.service - SASL authentication daemon.</p>
<p class="MsoNormal"> Loaded: loaded (/usr/lib/systemd/system/saslauthd.service; enabled; vendor preset: disabled)</p>
<p class="MsoNormal"> Active: active (running) since Mon 2020-01-06 19:13:37 MST; 3 days ago</p>
<p class="MsoNormal">Main PID: 29506 (saslauthd)</p>
<p class="MsoNormal"> Memory: 1.5M</p>
<p class="MsoNormal"> CGroup: /system.slice/saslauthd.service</p>
<p class="MsoNormal"> <span style="font-family:"MS Gothic"">├</span>─29506 /usr/sbin/saslauthd -m /run/saslauthd -a pam</p>
<p class="MsoNormal"> <span style="font-family:"MS Gothic"">├</span>─29507 /usr/sbin/saslauthd -m /run/saslauthd -a pam</p>
<p class="MsoNormal"> <span style="font-family:"MS Gothic"">├</span>─29508 /usr/sbin/saslauthd -m /run/saslauthd -a pam</p>
<p class="MsoNormal"> <span style="font-family:"MS Gothic"">├</span>─29509 /usr/sbin/saslauthd -m /run/saslauthd -a pam</p>
<p class="MsoNormal"> └瘢雹─29510 /usr/sbin/saslauthd -m /run/saslauthd -a pam</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Jan 06 19:13:37 shuttle systemd[1]: Starting SASL authentication daemon....</p>
<p class="MsoNormal">Jan 06 19:13:37 shuttle saslauthd[29506]: : master pid is: 29506</p>
<p class="MsoNormal">Jan 06 19:13:37 shuttle systemd[1]: Started SASL authentication daemon..</p>
<p class="MsoNormal">Jan 06 19:13:37 shuttle saslauthd[29506]: : listening on socket: /run/saslauthd/mux</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Dovecot and Postfix are running starting and running okay. /var/spool/postfix/private/auth is present and seems to be correct.</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Here are my current configs on those items:</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"># postconf -n</p>
<p class="MsoNormal">command_directory = /usr/sbin</p>
<p class="MsoNormal">compatibility_level = 2</p>
<p class="MsoNormal">daemon_directory = /usr/libexec/postfix</p>
<p class="MsoNormal">data_directory = /var/lib/postfix</p>
<p class="MsoNormal">html_directory = /usr/share/doc/postfix/html</p>
<p class="MsoNormal">inet_interfaces = shuttle</p>
<p class="MsoNormal">inet_protocols = all</p>
<p class="MsoNormal">lmtp-filter_destination_concurrency_limit = 2</p>
<p class="MsoNormal">lmtp_sasl_mechanism_filter = plain</p>
<p class="MsoNormal">mail_owner = postfix</p>
<p class="MsoNormal">mailbox_transport = dovecot:shuttle:lmtp</p>
<p class="MsoNormal">mailq_path = /usr/bin/mailq</p>
<p class="MsoNormal">manpage_directory = /usr/share/man</p>
<p class="MsoNormal">meta_directory = /etc/postfix</p>
<p class="MsoNormal">mydestination = mynetworks</p>
<p class="MsoNormal">myhostname = shuttle</p>
<p class="MsoNormal">mynetworks = 192.168.1.0/24, 127.0.0.0/8</p>
<p class="MsoNormal">mynetworks_style = subnet</p>
<p class="MsoNormal">myorigin = shuttle</p>
<p class="MsoNormal">newaliases_path = /usr/bin/newaliases</p>
<p class="MsoNormal">queue_directory = /var/spool/postfix</p>
<p class="MsoNormal">readme_directory = /usr/share/doc/postfix/README_FILES</p>
<p class="MsoNormal">sendmail_path = /usr/sbin/sendmail.postfix</p>
<p class="MsoNormal">setgid_group = postdrop</p>
<p class="MsoNormal">shlib_directory = /usr/lib64</p>
<p class="MsoNormal">smtp-filter_destination_concurrency_limit = 2</p>
<p class="MsoNormal">smtp_bind_address = 192.168.1.105</p>
<p class="MsoNormal">smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt</p>
<p class="MsoNormal">smtp_tls_security_level = may</p>
<p class="MsoNormal">smtpd_banner = $myhostname ESMTP $mail_name ($mail_version) (Mageia Linux)</p>
<p class="MsoNormal">smtpd_recipient_restrictions = permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination</p>
<p class="MsoNormal">smtpd_sasl_auth_enable = yes</p>
<p class="MsoNormal">smtpd_sasl_authenticated_header = yes</p>
<p class="MsoNormal">smtpd_sasl_local_domain = $myhostname</p>
<p class="MsoNormal">smtpd_sasl_path = private/auth</p>
<p class="MsoNormal">smtpd_sasl_type = dovecot</p>
<p class="MsoNormal">smtpd_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt</p>
<p class="MsoNormal">smtpd_tls_cert_file = /etc/pki/tls/certs/adams-lan.mail.pem</p>
<p class="MsoNormal">smtpd_tls_key_file = /etc/pki/tls/private/adams-lan.mail.key</p>
<p class="MsoNormal">smtpd_use_tls = yes</p>
<p class="MsoNormal">unknown_local_recipient_reject_code = 450</p>
<p class="MsoNormal">virtual_alias_maps = mysql:/etc/postfix/mysql-virtual-alias-maps.cf</p>
<p class="MsoNormal">virtual_mailbox_base = /var/spool/mail/vhosts</p>
<p class="MsoNormal">virtual_mailbox_domains = mysql:/etc/postfix/mysql-virtual-mailbox-domains.cf</p>
<p class="MsoNormal">virtual_mailbox_maps = mysql:/etc/postfix/mysql-virtual-mailbox-maps.cf</p>
<p class="MsoNormal">virtual_transport = dovecot</p>
<p class="MsoNormal">postconf: warning: /etc/postfix/master.cf: unused parameter: flags=</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"># dovecot -n</p>
<p class="MsoNormal"># 2.3.7.2 (3c910f64b): /etc/dovecot/dovecot.conf</p>
<p class="MsoNormal"># OS: Linux 5.4.6-desktop-2.mga7 x86_64 Mageia 7</p>
<p class="MsoNormal"># Hostname: shuttle</p>
<p class="MsoNormal">auth_debug_passwords = yes</p>
<p class="MsoNormal">auth_mechanisms = plain login cram-md5</p>
<p class="MsoNormal">auth_username_format = %Ln</p>
<p class="MsoNormal">disable_plaintext_auth = no</p>
<p class="MsoNormal">first_valid_uid = 0</p>
<p class="MsoNormal">last_valid_uid = 10001</p>
<p class="MsoNormal">mail_gid = 10001</p>
<p class="MsoNormal">mail_location = mbox:~/mail:INBOX=/var/mail/%u</p>
<p class="MsoNormal">mail_privileged_group = mail</p>
<p class="MsoNormal">mail_uid = 10001</p>
<p class="MsoNormal">namespace inbox {</p>
<p class="MsoNormal"> inbox = yes</p>
<p class="MsoNormal"> location =</p>
<p class="MsoNormal"> mailbox Drafts {</p>
<p class="MsoNormal"> special_use = \Drafts</p>
<p class="MsoNormal"> }</p>
<p class="MsoNormal"> mailbox Junk {</p>
<p class="MsoNormal"> special_use = \Junk</p>
<p class="MsoNormal"> }</p>
<p class="MsoNormal"> mailbox Sent {</p>
<p class="MsoNormal"> special_use = \Sent</p>
<p class="MsoNormal"> }</p>
<p class="MsoNormal"> mailbox "Sent Messages" {</p>
<p class="MsoNormal"> special_use = \Sent</p>
<p class="MsoNormal"> }</p>
<p class="MsoNormal"> mailbox Trash {</p>
<p class="MsoNormal"> special_use = \Trash</p>
<p class="MsoNormal"> }</p>
<p class="MsoNormal"> prefix =</p>
<p class="MsoNormal">}</p>
<p class="MsoNormal">passdb {</p>
<p class="MsoNormal"> driver = sql</p>
<p class="MsoNormal">}</p>
<p class="MsoNormal">passdb {</p>
<p class="MsoNormal"> args = %s</p>
<p class="MsoNormal"> driver = pam</p>
<p class="MsoNormal">}</p>
<p class="MsoNormal">plugin {</p>
<p class="MsoNormal"> sieve = file:~/sieve;active=~/.dovecot.sieve</p>
<p class="MsoNormal">}</p>
<p class="MsoNormal">service anvil {</p>
<p class="MsoNormal"> unix_listener anvil {</p>
<p class="MsoNormal"> group = mail</p>
<p class="MsoNormal"> mode = 0666</p>
<p class="MsoNormal"> }</p>
<p class="MsoNormal">}</p>
<p class="MsoNormal">service auth-worker {</p>
<p class="MsoNormal"> user = vmail</p>
<p class="MsoNormal">}</p>
<p class="MsoNormal">service auth {</p>
<p class="MsoNormal"> unix_listener /var/spool/postfix/private/auth {</p>
<p class="MsoNormal"> group = postfix</p>
<p class="MsoNormal"> mode = 0666</p>
<p class="MsoNormal"> user = postfix</p>
<p class="MsoNormal"> }</p>
<p class="MsoNormal"> unix_listener auth-userdb {</p>
<p class="MsoNormal"> group =</p>
<p class="MsoNormal"> mode = 0666</p>
<p class="MsoNormal"> user = $default_internal_user</p>
<p class="MsoNormal"> }</p>
<p class="MsoNormal"> user = dovecot</p>
<p class="MsoNormal">}</p>
<p class="MsoNormal">service imap-login {</p>
<p class="MsoNormal"> inet_listener imap {</p>
<p class="MsoNormal"> port = 143</p>
<p class="MsoNormal"> }</p>
<p class="MsoNormal">}</p>
<p class="MsoNormal">service lmtp {</p>
<p class="MsoNormal"> unix_listener /var/spool/postfix/private/dovecot-lmtp {</p>
<p class="MsoNormal"> group = postfix</p>
<p class="MsoNormal"> mode = 0600</p>
<p class="MsoNormal"> user = postfix</p>
<p class="MsoNormal"> }</p>
<p class="MsoNormal">}</p>
<p class="MsoNormal">service pop3-login {</p>
<p class="MsoNormal"> inet_listener pop3s {</p>
<p class="MsoNormal"> port = 995</p>
<p class="MsoNormal"> ssl = yes</p>
<p class="MsoNormal"> }</p>
<p class="MsoNormal">}</p>
<p class="MsoNormal">service stats {</p>
<p class="MsoNormal"> unix_listener stats-reader {</p>
<p class="MsoNormal"> group = mail</p>
<p class="MsoNormal"> mode = 0666</p>
<p class="MsoNormal"> }</p>
<p class="MsoNormal"> unix_listener stats-writer {</p>
<p class="MsoNormal"> group = mail</p>
<p class="MsoNormal"> mode = 0666</p>
<p class="MsoNormal"> }</p>
<p class="MsoNormal">}</p>
<p class="MsoNormal">ssl = required</p>
<p class="MsoNormal">ssl_cert = </etc/pki/tls/certs/fullchain.cer</p>
<p class="MsoNormal">ssl_dh = # hidden, use -P to show it</p>
<p class="MsoNormal">ssl_key = # hidden, use -P to show it</p>
<p class="MsoNormal">userdb {</p>
<p class="MsoNormal"> driver = passwd</p>
<p class="MsoNormal">}</p>
<p class="MsoNormal">protocol lmtp {</p>
<p class="MsoNormal"> hostname = shuttle</p>
<p class="MsoNormal"> postmaster_address = postmaster@shuttle</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I just need this stuff to move mail on my LAN as it did for years prior to this upgrade. I’m perfectly willing to blow this config away and reinstall from scratch, which I’ve done twice already. I’ve been through at least 4 tutorials on
the web and nothing has led to my getting this thing working. Despite all that I’ve learned about Postfix + Dovecot + Mysql, I am still not smart enough to figure this out.
</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I’m still looking for help and/or options. I’m also wondering if it might not be a good idea to ditch the configs in /etc/dovecot/conf.d (by commenting out “!include conf.d/*.conf” in dovecot.conf). I’m just looking to move mail on my
LAN. This should be simple, no?</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks again.</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Mark</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div style="mso-element:para-border-div;border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal" style="border:none;padding:0in"><b>From: </b><a href="mailto:ad+lists@uni-x.org">Alexander Dalloz</a><br>
<b>Sent: </b>Friday, January 10, 2020 11:34 AM<br>
<b>To: </b><a href="mailto:madams9@msn.com">Mark ADAMS</a><br>
<b>Subject: </b>Re: Unable to authenticate on Dovecot - auth-userdb issue?</p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-bottom:12.0pt">Mark,<br>
<br>
first of all: please take care to whom you reply. Do not communicate <br>
directly with my list mail address. Please keep the discussion on the <br>
dovecot list. Thanks.<br>
<br>
<br>
Am 09.01.2020 um 18:29 schrieb Mark ADAMS:<br>
> At this point, passdb does not support lookups according to the log. Is there something else I should be looking at?<br>
> <br>
> I’ve worked on this and seem to be making little progress. A sample transaction log looks like this:<br>
> <br>
> <br>
> Jan 09 10:22:32 shuttle dovecot[26851]: master: Warning: SIGHUP received - reloading configuration<br>
> Jan 09 10:23:04 shuttle postfix/smtpd[5448]: connect from pvr[192.168.1.103]<br>
> Jan 09 10:23:04 shuttle dovecot[5432]: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/modules/auth<br>
> Jan 09 10:23:04 shuttle dovecot[5432]: auth: Debug: Module loaded: /usr/lib64/dovecot/modules/auth/lib20_auth_var_expand_crypt.so<br>
> Jan 09 10:23:04 shuttle dovecot[5432]: auth: Debug: Read auth token secret from /run/dovecot/auth-token-secret.dat<br>
> Jan 09 10:23:04 shuttle dovecot[5432]: auth: Debug: auth client connected (pid=0)<br>
> Jan 09 10:23:20 shuttle postfix/smtpd[5448]: 0C6BF4A6302: client=pvr[192.168.1.103]<br>
> Jan 09 10:23:30 shuttle postfix/cleanup[5459]: 0C6BF4A6302: message-id=<><br>
> Jan 09 10:23:30 shuttle postfix/qmgr[1385]: 0C6BF4A6302: from=<madams@pvr>, size=180, nrcpt=1 (queue active)<br>
> Jan 09 10:23:30 shuttle dovecot[5432]: auth: Debug: master in: USER 1 root@shuttle service=lda<br>
> Jan 09 10:23:30 shuttle dovecot[5432]: auth: Debug: static(root): Performing userdb lookup<br>
> Jan 09 10:23:30 shuttle dovecot[5432]: auth: Debug: pam(root): Performing passdb lookup<br>
> Jan 09 10:23:30 shuttle dovecot[5432]: auth: Debug: pam(root): passdb doesn't support credential lookups<br>
> Jan 09 10:23:30 shuttle dovecot[5432]: auth: Debug: pam(root): Finished passdb lookup<br>
> Jan 09 10:23:30 shuttle dovecot[5432]: auth: Error: static(root): passdb doesn't support lookups, can't verify user's existence<br>
> Jan 09 10:23:30 shuttle dovecot[5432]: auth: Debug: static(root): Finished userdb lookup<br>
> Jan 09 10:23:30 shuttle dovecot[5432]: auth: Debug: userdb out: FAIL 1<br>
> Jan 09 10:23:30 shuttle dovecot[5466]: lda(root@shuttle)<5466><>: Error: auth-master: userdb lookup(root@shuttle): Auth USER lookup failed<br>
> Jan 09 10:23:30 shuttle dovecot[5466]: lda: Fatal: Internal error occurred. Refer to server log for more information.<br>
> Jan 09 10:23:30 shuttle postfix/pipe[5465]: 0C6BF4A6302: to=<root@shuttle>, relay=dovecot, delay=17, delays=17/0.01/0/0.06, dsn=4.3.0, status=deferred (tempora><br>
> Jan 09 10:23:31 shuttle sshd[5468]: Connection closed by 192.168.1.100 port 48324 [preauth]<br>
> Jan 09 10:23:31 shuttle postfix/smtpd[5448]: disconnect from pvr[192.168.1.103] ehlo=1 mail=1 rcpt=1 data=1 quit=1 commands=5<br>
> <br>
> <br>
> My current dovecot configuration looks like this:<br>
> <br>
> # 2.3.7.2 (3c910f64b): /etc/dovecot/dovecot.conf<br>
> # OS: Linux 5.4.6-desktop-2.mga7 x86_64 Mageia 7<br>
> # Hostname: shuttle<br>
> auth_debug_passwords = yes<br>
> auth_username_format = %Ln<br>
> disable_plaintext_auth = no<br>
> first_valid_uid = 0<br>
> last_valid_uid = 10001<br>
> mail_gid = 10001<br>
> mail_location = mbox:~/mail:INBOX=/var/mail/%u<br>
> mail_privileged_group = mail<br>
> mail_uid = 10001<br>
> namespace inbox {<br>
> inbox = yes<br>
> location =<br>
> mailbox Drafts {<br>
> special_use = \Drafts<br>
> }<br>
> mailbox Junk {<br>
> special_use = \Junk<br>
> }<br>
> mailbox Sent {<br>
> special_use = \Sent<br>
> }<br>
> mailbox "Sent Messages" {<br>
> special_use = \Sent<br>
> }<br>
> mailbox Trash {<br>
> special_use = \Trash<br>
> }<br>
> prefix =<br>
> }<br>
> passdb {<br>
> args = %s<br>
> driver = pam<br>
> }<br>
> plugin {<br>
> sieve = file:~/sieve;active=~/.dovecot.sieve<br>
> }<br>
> service anvil {<br>
> unix_listener anvil {<br>
> group = mail<br>
> mode = 0666<br>
> }<br>
> }<br>
> service auth-worker {<br>
> user = vmail<br>
> }<br>
> service auth {<br>
> unix_listener /var/spool/postfix/private/auth {<br>
> group = postfix<br>
> mode = 0666<br>
> user = postfix<br>
> }<br>
> unix_listener auth-userdb {<br>
> group =<br>
> mode = 0666<br>
> user = $default_internal_user<br>
> }<br>
> user = dovecot<br>
> }<br>
> service imap-login {<br>
> inet_listener imap {<br>
> port = 143<br>
> }<br>
> }<br>
> service lmtp {<br>
> unix_listener /var/spool/postfix/private/dovecot-lmtp {<br>
> group = postfix<br>
> mode = 0600<br>
> user = postfix<br>
> }<br>
> }<br>
> service pop3-login {<br>
> inet_listener pop3s {<br>
> port = 995<br>
> ssl = yes<br>
> }<br>
> }<br>
> service stats {<br>
> unix_listener stats-reader {<br>
> group = mail<br>
> mode = 0666<br>
> }<br>
> unix_listener stats-writer {<br>
> group = mail<br>
> mode = 0666<br>
> }<br>
> }<br>
> ssl = required<br>
> ssl_cert = </etc/pki/tls/certs/fullchain.cer<br>
> ssl_dh = # hidden, use -P to show it<br>
> ssl_key = # hidden, use -P to show it<br>
> protocol lmtp {<br>
> hostname = shuttle<br>
> postmaster_address = postmaster@shuttle<br>
> }<br>
> <br>
> <br>
> As always I appreciate the help and any assistance is appreciated.<br>
> <br>
> Mark<br>
<br>
According to your "doveconf -n" output you have no userdb defined. Just <br>
do that.<br>
<br>
<a href="https://doc.dovecot.org/configuration_manual/authentication/user_databases_userdb/">https://doc.dovecot.org/configuration_manual/authentication/user_databases_userdb/</a><br>
<br>
Maybe this one fits your current system setup<br>
<br>
<a href="https://doc.dovecot.org/configuration_manual/authentication/passwd/#authentication-passwd">https://doc.dovecot.org/configuration_manual/authentication/passwd/#authentication-passwd</a><br>
<br>
Alexander<br>
<br>
<br>
<br>
> From: Alexander Dalloz<<a href="mailto:ad+lists@uni-x.org">mailto:ad+lists@uni-x.org</a>><br>
> Sent: Friday, January 3, 2020 5:26 AM<br>
> To: dovecot@dovecot.org<<a href="mailto:dovecot@dovecot.org">mailto:dovecot@dovecot.org</a>><br>
> Subject: Re: Unable to authenticate on Dovecot - auth-userdb issue?<br>
> <br>
> Am 03.01.2020 um 03:27 schrieb Mark ADAMS:<br>
>> Jan 02 18:47:37 shuttle dovecot[6744]: lda(root@shuttle)<6744><>: Error: auth-master: userdb lookup(root@shuttle): connect(/run/dovecot/auth-userdb) failed: Permission denied (euid=8(mail) egid=12(mail) missing +r perm: /run/dovecot/auth-userdb, dir owned
by 0:0 mode=0755)<br>
> <br>
> Run "namei -lv /run/dovecot/auth-userdb" to check the permissions of the<br>
> complete path. The auth-userdb socket actually is owned mail:mail<br>
> according to your error logging. Is dovecot member of the mail group?<br>
> <br>
> Actually it does not match the config details you have pasted:<br>
> <br>
> unix_listener auth-userdb {<br>
> group = dovecot<br>
> mode = 0600<br>
> user = vmail<br>
> }<br>
> <br>
> On my side it looks like this and I have not custom configured that<br>
> part. The defaults are:<br>
> <br>
> unix_listener auth-userdb {<br>
> group =<br>
> mode = 0666<br>
> user = $default_internal_user<br>
> }<br>
> <br>
> So on my system the permissions look like this:<br>
> <br>
> # namei -lv /var/run/dovecot/auth-userdb<br>
> f: /var/run/dovecot/auth-userdb<br>
> dr-xr-xr-x root root /<br>
> drwxr-xr-x root root var<br>
> drwxr-xr-x root root run<br>
> drwxr-xr-x root dovecot dovecot<br>
> srw-rw-rw- dovecot root auth-userdb<br>
> <br>
>> Jan 02 18:47:37 shuttle dovecot[6744]: lda: Fatal: Internal error occurred. Refer to server log for more information.<br>
>> Jan 02 18:47:37 shuttle postfix/pipe[6743]: 6345D4A4A97: to=<root@shuttle>, relay=dovecot, delay=1.1, delays=1.1/0.01/0/0.06, dsn=4.3.0, status=deferred (temporary failure. Command output: lda(root@shuttle): Error: net_connect_unix(/run/dovecot/stats-writer)
failed: Permission denied )<br>
>> ^C<br>
>><br>
>><br>
>><br>
>> Note: this error references "/run/dovecot/auth-userdb". That isn't even supposed to be the location of that file. I have no idea why that location shows up. The correct location should be "/etc/dovecot/auth-userdb". The file does exist at that location.<br>
> <br>
> Mark,<br>
> <br>
> I have no idea why you expect the dovecot sockets to be located inside<br>
> /etc/dovecot/. /etc is the FHS location for configurations. /run or<br>
> /var/run (typically a symlink on modern linux distributions) is the<br>
> right location for runtime files like service sockets.<br>
> <br>
> You say /etc/dovecot/auth-userdb exists. Am I correct to guess that you<br>
> have created that manually with whatever content?<br>
> <br>
> Alexander<br>
> <br>
> <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>