dovecot - Feb 2005 - Problems with MySQL/PAM authentication

Hi,

I'm using (or trying to at least) a combination of PAM/passwd and MySQL 
authentication:

auth vmail {
         mechanisms = plain
         userdb = sql /etc/dovecot/dovecot-sql.conf
         passdb = sql /etc/dovecot/dovecot-sql.conf
         user = root
}

auth system {
         mechanisms = plain
         userdb = passwd
         passdb = pam imap
         user = root
}

MySQL authentication works without problems but authentication real 
(system) users dosn't:

Feb 13 02:05:57 coredump dovecot: auth(vmail): sql(alj,127.0.0.1): 
query: SELECT crypt AS password FROM passwd WHERE id = 'al
j'
Feb 13 02:05:57 coredump dovecot: auth(vmail): sql(alj,127.0.0.1): 
unknown user
Feb 13 02:05:57 coredump dovecot: auth(system): userdb(alj,127.0.0.1): 
uid=10000 gid=1000 home=/home/alj mailFeb 13 02:05:57 coredump dovecot:
imap-login: Login: alj [127.0.0.1]
Feb 13 02:05:57 coredump dovecot: auth(system): userdb(alj,127.0.0.1): 
uid=10000 gid=1000 home=/home/alj mailFeb 13 02:05:57 coredump dovecot:
imap-login: Login: alj [127.0.0.1]
Feb 13 02:05:57 coredump dovecot: auth(system): userdb(alj,127.0.0.1): 
uid=10000 gid=1000 home=/home/alj mailFeb 13 02:05:57 coredump dovecot:
imap-login: Login: alj [127.0.0.1]
Feb 13 02:05:57 coredump dovecot: auth(system): userdb(alj,127.0.0.1): 
uid=10000 gid=1000 home=/home/alj mailFeb 13 02:05:57 coredump dovecot:
imap-login: Login: alj [127.0.0.1]
Feb 13 02:05:57 coredump dovecot: auth(vmail): file 
auth-client-connection.c: line 31 (auth_client_send): assertion failed: 
(conn->refcount > 1)
Feb 13 02:05:57 coredump dovecot: auth(system): userdb(alj,127.0.0.1): 
uid=10000 gid=1000 home=/home/alj mailFeb 13 02:05:57 coredump dovecot:
imap-login: Login: alj [127.0.0.1]
Feb 13 02:05:57 coredump dovecot: child 22359 (auth) killed with signal 6
Feb 13 02:05:58 coredump dovecot: auth(vmail): mysql: Connected to 
(null) (vmail)

After a few logins authentication stops working and dovecot needs to be 
restarted.

It seems that the mysql dovecot-auth crashes if the MySQL query does not 
  return anything but only if it is combined with the PAM authentication.

-- 
Allan Joergensen - http://nowhere.dk/
"I believe my plan has a fatal flaw." -- The Brain

On 13-Feb-2005, Allan Joergensen wrote:
> After a few logins authentication stops working and dovecot needs to be 
> restarted.
> It seems that the mysql dovecot-auth crashes if the MySQL query does not 
>  return anything but only if it is combined with the PAM authentication.
I was hoping someone was able to help with this one.

-- 
Allan Joergensen

"Well, why don't I show you to your quarters." - Sisko

> I'm using (or trying to at least) a combination of PAM/passwd and MySQL
> authentication:
   : (snip)
> MySQL authentication works without problems but authentication real 
> (system) users dosn't:
   :

I have similar problem using Multiple Auth Database:

auth virtual {
  mechanisms = plain
  userdb = passwd-file /etc/dovecot/passwd
  passdb = passwd-file /etc/dovecot/passwd
  user = root
}

auth local {
  mechanisms = plain
  userdb = passwd
  passdb = shadow
  user = root
}

I tested:

| % telnet localhost 143
| Trying 127.0.0.1...
| Connected to localhost.
| Escape character is '^]'.
| * OK Dovecot ready.
| 1 login kato at harp.gr.jp password
| 1 NO Authentication failed.
| 1 login kato at harp.gr.jp password
| 1 OK Logged in.
| 1 logout
| * BYE Logging out
| 1 OK Logout completed.
| Connection closed by foreign host.

"kato at harp.gr.jp" is registered in /etc/dovecot/passwd. First time
it
failed, but success at second time. "auth local" works without
problem.

| Feb 24 11:19:24 tara dovecot: auth(local): shadow(kato at
harp.gr.jp,127.0.0.1): unknown user
| Feb 24 11:19:33 tara dovecot: auth(local): shadow(kato at
harp.gr.jp,127.0.0.1): unknown user
| Feb 24 11:19:33 tara dovecot: auth(virtual): userdb(kato at
harp.gr.jp,127.0.0.1): uid=1000 gid=100 home=/home/kato mail| Feb 24 11:19:33
tara dovecot: IMAP(kato at harp.gr.jp): mkdir(/home/kato at
harp.gr.jp/Maildir/cur) failed: Permission denied
| Feb 24 11:19:33 tara dovecot: imap-login: Login: kato at harp.gr.jp
[127.0.0.1]
| Feb 24 11:19:35 tara dovecot: auth(local): file auth-client-connection.c: line
31 (auth_client_send): assertion failed: (conn->refcount > 1)
| Feb 24 11:19:35 tara dovecot: child 14884 (auth) killed with signal 6

I rewritten dovecot.conf and tested. The result is different.

auth local {
  mechanisms = plain
  userdb = passwd
  passdb = shadow
  user = root
}

auth virtual {
  mechanisms = plain
  userdb = passwd-file /etc/dovecot/passwd
  passdb = passwd-file /etc/dovecot/passwd
  user = root
}

At this time, "auth virtual" work, and "auth local"
doesn't work.

| * OK Dovecot ready.
| 1 login kato at harp.gr.jp password
| 1 OK Logged in.
| 1 logout
| * BYE Logging out
| 1 OK Logout completed.

| * OK Dovecot ready.
| 1 login kato password
| 1 NO Authentication failed.
| 1 login kato password
| 1 OK Logged in.
| 1 logout
| * BYE Logging out
| 1 OK Logout completed.
(kato is system user)

| Feb 24 11:28:52 tara dovecot: auth(virtual): passwd-file(kato,127.0.0.1):
unknown user
| Feb 24 11:28:59 tara dovecot: auth(virtual): passwd-file(kato,127.0.0.1):
unknown user
| Feb 24 11:28:59 tara dovecot: auth(local): userdb(kato,127.0.0.1): uid=1000
gid=100 home=/home/kato mail| Feb 24 11:28:59 tara dovecot: imap-login: Login:
kato [127.0.0.1]
| Feb 24 11:28:59 tara dovecot: auth(virtual): file auth-client-connection.c:
line 31 (auth_client_send): assertion failed: (conn->refcount > 1)
| Feb 24 11:28:59 tara dovecot: child 14924 (auth) killed with signal 6

It is not worked well to write configuration previously, but worked
well to write after.

I tested with ldap auth instead of paswd-file auth. I got same result.

Env:
  Plamo Linux 4.01 (kernel 2.6.10, glibc 2.3.2)
  dovcot-1.0-test62, dovecot-stable-20050222

-- 
karma @ jazz.email.ne.jp / Y.KATOH

Sorry for my poor English.