dovecot - Jun 2007 - dovecot.conf authentication after Debian upgrade

Hello,

I'm new on this mailing list.
I run a Dovecot imaps server since several month on a Debian server.

I just upgrade a Debian server from Debian Sarge --> Etch
and I discover that a lot of parameters have changed (must be changed) in
the dovecot.conf.

I finally find an exemple an try to adapt it to our server.

We never defined special authentification or password scheme.
It was simple the "passwd".

Dovecot is running, but impossible for users to connect  :-(

Actually, this is my dovecot.conf :

=====================================
base_dir = /var/run/dovecot/

protocols = imap imaps

protocol imap {
listen = 127.0.0.1:143
ssl_listen = *:993
}

# protocol pop3 {
# # listen = *:110
# # ssl_listen = *:995
# # }

ssl_disable = no

ssl_cert_file = /etc/ssl/certs/dovecot.pem
ssl_key_file = /etc/ssl/private/dovecot.pem

disable_plaintext_auth = no

log_timestamp = "%Y-%m-%d %H:%M:%S "

login_dir = /var/run/dovecot/login
#login_dir = /var/log/dovecot


login_chroot = yes

login_user = dovecot

login_process_per_connection = yes

login_greeting = Dovecot ready.

first_valid_uid = 1000
last_valid_uid = 0
first_valid_gid = 1
last_valid_gid = 0

mail_extra_groups = mail
# #default_mail_env = mbox:/var/mail/%u
default_mail_env = maildir:~/Maildir

protocol imap {
imap_client_workarounds = outlook-idle delay-newmail netscape-eoh
tb-extra-mailbox-sep
}

# # protocol pop3 {
# # }

auth default {
mechanisms = plain

#####  Didier Misson : must be check !!!


#passdb passwd-file {
#args = /etc/dovecot/pass
#}

#passdb pam {
passdb passwd {
}

#userdb passwd-file {
#args = /etc/dovecot/users
#}

userdb passwd {
}

user = root

}

plugin {

}

====================================================================
in /var/log/syslog


Jun 25 11:14:02 ks36586 dovecot: Dovecot v1.0.rc15 starting up
Jun 25 11:14:53 ks36586 dovecot: imap-login: Aborted login:
user=<sebastien-descy>, method=PLAIN, rip=62.235.215.24, lip=87.98.219.84,
TLS
Jun 25 11:14:59 ks36586 dovecot: imap-login: Aborted login:
user=<dominique>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured
Jun 25 11:15:01 ks36586 /USR/SBIN/CRON[16295]: (root) CMD
(/usr/local/rtm/bin/rtm 41 >/dev/null 2>/dev/null)


I hope somebody already solved this king of problem.

Thanks a lot.

;-)

-- 
Didier

http://didier.misson.net

Bruno Puga a ?crit :
> I don't know what are the exactly parameters changed from sarge to
etch,
> but you can send us more detailed information changing this settings in
> your dovecot's conf:
> http://wiki.dovecot.org/Debugging/Authentication
> 
> See this section to find out if you are looking for logs in the right
> place accordingly to you configuration.
> http://wiki.dovecot.org/Logging <http://wiki.dovecot.org/Logging>
> 
> Send us the dovecot -n output instead of dovecot.conf.

Thanks for you reply Bruno ;-)

Between Sarge and Etch, many parameters changed between the 2 Dovecot
version ...

example :

imaps_listen = *   --->  replace by
---> replace by
protocol imap {
listen = 127.0.0.1:143
ssl_listen = *:993
}

...

of course, simply replacing the package version, and new Dovecot doesn't
run !

:-(

---------------------------------------------

dovecot -n  (I discover this command today)

ks:/etc/dovecot# dovecot -n
# /etc/dovecot/dovecot.conf
base_dir: /var/run/dovecot/
log_timestamp: %Y-%m-%d %H:%M:%S
listen: 127.0.0.1:143
ssl_listen: *:993
disable_plaintext_auth: no
login_dir: /var/run/dovecot/login
login_executable: /usr/lib/dovecot/imap-login
first_valid_uid: 1000
mail_extra_groups: mail
default_mail_env: maildir:~/Maildir
mail_location: maildir:~/Maildir
imap_client_workarounds: outlook-idle delay-newmail netscape-eoh
tb-extra-mailbox-sep
auth default:
  passdb:
    driver: passwd
  userdb:
    driver: passwd

---------------------

I will try to read the documentation on the authentication debugging.


Thanks a lot for your help.

;-)


-- 
Didier

Google Talk : didier.misson at gmail.com
Jabber : didier.misson at amessage.be
http://didier.misson.net

Bruno Puga a ?crit :
> but you can send us more detailed information changing this settings in
> your dovecot's conf:
> http://wiki.dovecot.org/Debugging/Authentication
> 
> See this section to find out if you are looking for logs in the right
> place accordingly to you configuration.
> http://wiki.dovecot.org/Logging <http://wiki.dovecot.org/Logging>
> 
> Send us the dovecot -n output instead of dovecot.conf.
I read this documentation about Authentication and Logging debuggind.

I add :

auth_debug=yes
auth_debug_passwords=yes

---------------------------
for this test, I change my password = "MyPasswd"
(and I change again after)
My client is Thunderbird on Ubuntu 7.04


in /var/log/syslog


dovecot: auth(default): client in:
AUTH^I1^IPLAIN^Iservice=IMAP^Isecured^Ilip=87.98.98.98^Irip=212.71.11.157
dovecot: auth(default): client out: CONT^I1^I
dovecot: auth(default): client in: CONT^I1^IAGRpZGllcgBNeVBhc3N3ZA=dovecot:
auth(default): passwd(didier,212.71.11.157): password mismatch
dovecot: auth(default): client out: FAIL^I1^Iuser=didier


I try to check myself :


printf 'didier\didier\MyPasswd' | mmencode
ZGlkaWVyXGRpZGllclxNeVBhc3N3ZA=
The end seem to be the same...
Is it correct ?

So why Dovecot don't accept my password ?
Dovecot or Debian ? ...


I don't know what I can check more...

Thanks

;-)


-- 
Didier

Google Talk : didier.misson at gmail.com
Jabber : didier.misson at amessage.be
http://www.misson.net