Hi Péter,
your recommendation did indeed solve this! The double passdb entry came
through an !include directive and an !include_try directive that did
both load the same file. The order of appearance is also now like yours.
Manymany thanks!
Dirk
On 04/07/2013 03:00 PM, Szládovics Péter wrote:
> 2013-04-07 14:38 keltezéssel, Dirk Werner írta:
>> Hi,
>>
>> when I login via Webinterface all is fine and I have these lines in
>> /var/log/mail.log about dovecot authentication
>>
>> Apr 7 14:21:49 remote dovecot: auth: Debug:
>> static(rweissmann,127.0.0.1): lookup
>> Apr 7 14:21:49 remote dovecot: auth: Debug:
>> static(rweissmann,127.0.0.1): Allowing any password
>> Apr 7 14:21:49 remote dovecot: auth: Debug: client out:
>> OK#0111#011user=rweissmann#011host=127.0.0.1
>> Apr 7 14:21:49 remote dovecot: auth: Debug: master in:
>> REQUEST#0112396913665#0112012#0111#011fc39378db49f0986263ee819c81028d8
>> Apr 7 14:21:49 remote dovecot: auth: Debug:
>> passwd(rweissmann,127.0.0.1): lookup
>> Apr 7 14:21:49 remote dovecot: auth: Debug: auth(rweissmann,127.0.0.1):
>> username changed rweissmann -> AIRMAIL\rweissmann
>> Apr 7 14:21:49 remote dovecot: auth: Debug: master out:
>> USER#0112396913665#011AIRMAIL\rweissmann#011system_groups_user=AIRMAIL\rweissmann#011uid=3000020#011gid=100#011home=/home/rweissmann
>> Apr 7 14:21:49 remote dovecot: imap-login: Login: user=<rweissmann>,
>> method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=2013, secured
>> Apr 7 14:21:49 remote dovecot: imap(AIRMAIL\rweissmann): Disconnected:
>> Logged out bytes=104/1124
>>
>>
>> But when I open Outlook I have these lines in /var/log/mail.log with
>> dovecot not being able to authenticate the same user:
>>
>>
>> Apr 7 14:21:47 remote dovecot: auth: Debug:
>> static(rweissmann,127.0.0.1): lookup
>> Apr 7 14:21:47 remote dovecot: auth: Debug:
>> static(rweissmann,127.0.0.1): Allowing any password
>> Apr 7 14:21:47 remote dovecot: auth: Debug: client out:
>> OK#0111#011user=rweissmann#011host=127.0.0.1
>> Apr 7 14:21:47 remote dovecot: auth: Debug: master in:
>> REQUEST#0112696413185#0112008#0111#01173119eff07df86e02c160d9adbbf9c1e
>> Apr 7 14:21:47 remote dovecot: auth: Debug:
>> passwd(rweissmann,127.0.0.1): lookup
>> Apr 7 14:21:47 remote dovecot: auth: Debug: auth(rweissmann,127.0.0.1):
>> username changed rweissmann -> AIRMAIL\rweissmann
>> Apr 7 14:21:47 remote dovecot: auth: Debug: master out:
>> USER#0112696413185#011AIRMAIL\rweissmann#011system_groups_user=AIRMAIL\rweissmann#011uid=3000020#011gid=100#011home=/home/rweissmann
>> Apr 7 14:21:47 remote dovecot: imap-login: Login: user=<rweissmann>,
>> method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=2011, secured
>> Apr 7 14:21:47 remote dovecot: imap(AIRMAIL\rweissmann): Disconnected:
>> Logged out bytes=64/904
>> Apr 7 14:21:47 remote dovecot: auth: Debug: auth client connected
>> (pid=2012)
>> Apr 7 14:21:47 remote dovecot: auth: Debug: client in:
>> AUTH#0111#011PLAIN#011service=imap#011secured#011lip=127.0.0.1#011rip=127.0.0.1#011lport=143#011rport=46674#011resp=<hidden>
>> Apr 7 14:21:47 remote dovecot: auth-worker: Debug:
>> pam(rweissmann,127.0.0.1): lookup service=dovecot
>> Apr 7 14:21:47 remote dovecot: auth-worker: Debug:
>> pam(rweissmann,127.0.0.1): #1/1 style=1 msg=Password:
>> Apr 7 14:21:49 dovecot: last message repeated 2 times
>> Apr 7 14:21:49 remote dovecot: auth-worker: pam(rweissmann,127.0.0.1):
>> pam_authenticate() failed: Authentication failure (password mismatch?)
>>
>>
>> I have no idea why this 'password mismatch' is coming up. Here's the
>> output of dovecot -n
>>
>> # 2.0.19: /etc/dovecot/dovecot.conf
>> # OS: Linux 3.5.0-26-generic x86_64 Ubuntu 12.04.2 LTS
>> auth_debug = yes
>> auth_failure_delay = 2 secs
>> auth_use_winbind = yes
>> disable_plaintext_auth = no
>> mail_location = maildir:~/.Maildir
>> passdb {
>> driver = pam
>> }
>> passdb {
>> args = nopassword=y host=127.0.0.1
>> driver = static
>> }
>> passdb {
>> args = nopassword=y host=127.0.0.1
>> driver = static
>> }
>> protocols = " imap"
>> ssl_cert = </etc/ssl/private/selfsignedcert.pem
>> ssl_key = </etc/ssl/private/selfsignedcert.pem
>> userdb {
>> driver = passwd
>> }
>
> Try this:
> passdb {
> args = nopassword=y allow_nets=127.0.0.1/32
> driver = static
> }
> passdb {
> driver = pam
> }
>
> Reversed order (first nopassword then pam) and only one nopassword with
> allow_nets and network instead of host and IP.
> This is in my config and working fine.
--
[email protected]
https://inverse.ca/sogo/lists