Re: [exim] Dovecot authenticator always fails if in first at…

Top Page
Delete this message
Reply to this message
Author: Eduardo M KALINOWSKI
Date:  
To: exim-users
Subject: Re: [exim] Dovecot authenticator always fails if in first attempt wrong password is given
Tony Finch escreveu:
> What do the dovecot logs say?


dovecot: 2008-09-12 09:47:48 Error: auth-worker(default):
pam(test.com.br,127.0.0.1): pam_authenticate() failed: User not known to
the underlying authentication module
dovecot: 2008-09-12 09:48:03 Error: auth(default): BUG: Authentication
client gave a PID 21989 of existing connection

> Does the problem become clearer if you run
> Exim in debugging mode?
>


Not much, here is the output:

# exim -bd -d-all+auth -oX 12345 -tls-on-connect
Exim version 4.68 uid=0 gid=0 pid=21974 D=8
Berkeley DB: Sleepycat Software: Berkeley DB 4.3.29: (September  6, 2005)
Support for: crypteq iconv() IPv6 PAM Perl GnuTLS move_frozen_messages
Content_Scanning Old_Demime
Lookups: lsearch wildlsearch nwildlsearch iplsearch cdb dbm dbmnz dnsdb
dsearch ldap ldapdn ldapm mysql nis nis0 passwd pgsql sqlite
Authenticators: cram_md5 cyrus_sasl dovecot plaintext spa
Routers: accept dnslookup ipliteral iplookup manualroute queryprogram
redirect
Transports: appendfile/maildir/mailstore/mbx autoreply lmtp pipe smtp
Fixed never_users: 0
Size of off_t: 8
configuration file is /var/lib/exim4/config.autogenerated
log selectors = 00000ffc 00612001
cwd=/home/ekalin 6 args: exim -bd -d-all+auth -oX 12345 -tls-on-connect
trusted user
admin user
21974 daemon_smtp_port overridden by -oX:
21974   <: 12345
21974 listening on 127.0.0.1 port 12345
21974 listening on 66.197.134.9 port 12345
21974 LOG: MAIN
21974   exim 4.68 daemon started: pid=21974, no queue runs, listening
for SMTPS on [127.0.0.1]:12345 [66.197.134.9]:12345
21974 daemon running with uid=102 gid=104 euid=102 egid=104
21974 Listening...
21974 Connection request from 127.0.0.1 port 39935
21989 Process 21989 is handling incoming connection from [127.0.0.1]
21974 1 SMTP accept process running
21974 Listening...
21989 Process 21989 is ready for new message
21989 dovecot authentication
21989 received: MECH    PLAIN   plaintext
21989 received: MECH    LOGIN   plaintext
21989 received: MECH    CRAM-MD5        dictionary      active
21989 received: VERSION 1       0
21989 received: SPID    10213
21989 received: CUID    889
21989 received: DONE
21989 sent: VERSION     1       0
21989 CPID      21989
21989 AUTH      889     PLAIN   service=smtp    secured rip=127.0.0.1  
lip=127.0.0.1   resp=AHRlc3QuY29tLmJyAGFhYWEA
21989 received: FAIL    889     user=test.com.br
21989 LOG: MAIN REJECT
21989   dovecot_plain authenticator failed for mail.kalinowski.com.br
(kalinowski.com.br) [127.0.0.1]: 535 Incorrect authentication data
(set_id=test.com.br)
21989 dovecot authentication
21989 received: MECH    PLAIN   plaintext
21989 received: MECH    LOGIN   plaintext
21989 received: MECH    CRAM-MD5        dictionary      active
21989 received: VERSION 1       0
21989 received: SPID    10213
21989 received: CUID    890
21989 received: DONE
21989 sent: VERSION     1       0
21989 CPID      21989
21989 AUTH      890     PLAIN   service=smtp    secured rip=127.0.0.1  
lip=127.0.0.1   resp=AHRlc3QuY29tLmJyAGFhYWEA
21989 LOG: MAIN REJECT
21989   dovecot_plain authenticator failed for mail.kalinowski.com.br
(kalinowski.com.br) [127.0.0.1]: 435 Unable to authenticate at present:
authentication socket read error or premature eof
21989 LOG: smtp_connection MAIN
21989   SMTP connection from mail.kalinowski.com.br (kalinowski.com.br)
[127.0.0.1] closed by QUIT
21974 child 21989 ended: status=0x0
21974 0 SMTP accept processes now running


It appears to be a problem on how exim talks to the authenticating
program. Since Phil mentioned changes in version 4.69, I might try to
upgrade exim, unless someone has any other ideas.

--
Eduardo M Kalinowski
eduardo@???