dovecot - Mar 2005 - hanging imap... and users getting other users' emails!

Hi All,

    We recently upgraded from UW (boy, starting to sound like a broken 
record, eh?)...

    Two problems:

    1. Every two or three days users are unable to access their email 
via IMAP. It seems that it's because dovecot-auth has hung. Has anyone 
seen anything like this? 

    2. (the really serious one)... one of our users, "angie" has twice
had her Outlook download other users' email! Once as another user, 
"helene", and just now as "mkarlin". The first time she got
800 of
helene's email, and just now, about 30 of mkarlin's.... from our log, I 
noticed:


Mar  2 17:27:10 core imap-login: Login: mkarlin [::ffff:128.195.131.2]
Mar  2 17:27:10 core imap-login: Login: mkarlin [::ffff:128.195.131.2]
Mar  2 17:27:11 core pop3-login: Login: angie [::ffff:68.231.223.128]
Mar  2 17:27:11 core imap-login: Login: mkarlin [::ffff:128.195.131.2]
Mar  2 17:27:11 core imap-login: Login: mkarlin [::ffff:128.195.131.2]


Our server setup:

Fedora Core 3. dovecot-0.99.13. OpenLDAP, and dovecot auth'ing off PAM 
(mostly default setup, using Mailbox, and mail/ as a subdir).

Any ideas? Any more debug info I can supply?

.josh

Josh Burley said:
> Hi All,
>
>     We recently upgraded from UW (boy, starting to sound like a broken
> record, eh?)...
>
>     Two problems:
>
>     1. Every two or three days users are unable to access their email
> via IMAP. It seems that it's because dovecot-auth has hung. Has anyone
> seen anything like this?
Ive dont believe I've  seen this and I've had dovecot running for months
on FreeBSD with pam authentication. Perhaps that indicates it could be a
Fedora thing?
>     2. (the really serious one)... one of our users, "angie" has
twice
> had her Outlook download other users' email! Once as another user,
> "helene", and just now as "mkarlin". The first time she
got 800 of
> helene's email, and just now, about 30 of mkarlin's.... from our
log, I
> noticed:
>
Never seen this either. But I use maildir, so that could be related too, I
guess.
> Mar  2 17:27:10 core imap-login: Login: mkarlin [::ffff:128.195.131.2]
> Mar  2 17:27:10 core imap-login: Login: mkarlin [::ffff:128.195.131.2]
> Mar  2 17:27:11 core pop3-login: Login: angie [::ffff:68.231.223.128]
> Mar  2 17:27:11 core imap-login: Login: mkarlin [::ffff:128.195.131.2]
> Mar  2 17:27:11 core imap-login: Login: mkarlin [::ffff:128.195.131.2]
>
>
> Our server setup:
>
> Fedora Core 3. dovecot-0.99.13. OpenLDAP, and dovecot auth'ing off PAM
> (mostly default setup, using Mailbox, and mail/ as a subdir).
Thought about using a different version (newer, or even older) of dovecot
and seeing if that makes the problem go away.
> Any ideas? Any more debug info I can supply?
>
> .josh
>
--
Dominic

On Wed, 2005-03-02 at 18:04 -0800, Josh Burley wrote:
>     2. (the really serious one)... one of our users, "angie" has
twice
> had her Outlook download other users' email! Once as another user, 
> "helene", and just now as "mkarlin". The first time she
got 800 of
> helene's email, and just now, about 30 of mkarlin's.... from our
log, I
> noticed:
What userdb are you using? ldap? Is it returning mail-setting for users?
This is breaking only randomly? 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL:
<http://dovecot.org/pipermail/dovecot/attachments/20050303/1ab9b778/attachment-0001.bin>

I've just switched to ldap.

But, when this problem was occurring (don't know if it is still), it was 
set up with userdb = passwd, and passwd = pam. But, our passwd only has 
none of our users in it (I don't really understand the use of this in 
the PAM context).

What mail-settings do you mean?

It's breaking randomly, yes.

login_preocess_per_connection is commented out. What is the default? 
I'll change this to "yes" now.

.josh


Timo Sirainen wrote:
> On Wed, 2005-03-02 at 18:04 -0800, Josh Burley wrote:
> 
>>    2. (the really serious one)... one of our users, "angie"
has twice
>>had her Outlook download other users' email! Once as another user, 
>>"helene", and just now as "mkarlin". The first time
she got 800 of
>>helene's email, and just now, about 30 of mkarlin's.... from our
log, I
>>noticed:
> 
> 
> What userdb are you using? ldap? Is it returning mail-setting for users?
> This is breaking only randomly? 
>