Hi Everyone,
We are running two CentOS 7.2 servers with Sendmail 8.14.7 V10 and Dovecot
2.2.10 installed on both and are trying to configure Master-Master
Replication using doveadm replicator.
We are using system users with PAM authentication but are receiving the
following fatal error when dsync tries to run:
doveadm(user): Fatal: /var/run/dovecot/auth-userdb: Configured passdbs don't
support crentials lookups (to see if user is proxied, because doveadm_port
is set).
Please could someone confirm whether it is possible to configure replication
using PAM passdb as the above error seems to suggest it isn't but we have
come across various people online who seem to have it working. I don't know
whether we need to create a master user or whether we need to create a
separate password file with a directory of all of our user's passwords? We
do have all the user passwords as they are only internal accounts that we
are servicing.
Thanks in advance
Output of dovecot -n:
# 2.2.10: /etc/dovecot/dovecot.conf
# OS: Linux 3.10.0-327.13.1.el7.x86_64 x86_64 CentOS Linux release 7.2.1511
(Core)
auth_mechanisms = plain login
auth_socket_path = /var/run/dovecot/auth-userdb
doveadm_password = secret
doveadm_port = 12345
login_greeting = POP3-IMAP server ready.
mail_location = maildir:~/Maildir
mail_plugins = " notify replication"
mbox_write_locks = fcntl
namespace inbox {
inbox = yes
location
mailbox "Deleted Items" {
auto = subscribe
special_use = \Trash
}
mailbox Drafts {
auto = subscribe
special_use = \Drafts
}
mailbox "Junk E-mail" {
auto = subscribe
special_use = \Junk
}
mailbox Sent {
auto = subscribe
special_use = \Sent
}
prefix
}
passdb {
args = session=yes setcred=yes failure_show_msg=yes dovecot
driver = pam
}
plugin {
mail_replica = tcp:VMAILSERVER1:12345
}
pop3_client_workarounds = outlook-no-nuls oe-ns-eoh
service aggregator {
fifo_listener replication-notify-fifo {
mode = 0666
}
unix_listener replication-notify {
mode = 0666
}
}
service auth {
unix_listener auth-userdb {
mode = 0777
}
}
service doveadm {
inet_listener {
port = 12345
}
}
service replicator {
process_min_avail = 1
unix_listener replicator-doveadm {
mode = 0600
}
}
ssl_ca = </etc/pki/tls/certs/chain.crt
ssl_cert = </etc/pki/tls/certs/ca.crt
ssl_key = </etc/pki/dovecot/private/dovecot.pem
ssl_verify_client_cert = yes
userdb {
driver = passwd
}
verbose_ssl = yes