dovecot - Apr 2008 - memory issues with 1.1.rc4 (now it's PAM)

Hi!

I'm running 1.1rc4 on a system and this happens occasionally:

--8<--
mail.info; dovecot: auth(default): client in: AUTH   1       PLAIN  
service=imap    lip=NN.NN.NN.NN rip=NNN.NN.NNN.NN       lport=143
mail.info; dovecot: auth-worker(default): pam(XXXXXXXXXXXX,NNN.NN.NNN.NN):
lookup service=imap
kern.alert; kernel: grsec: From NN.NN.NN.NN: denied resource overstep by
requesting 134242304 for RLIMIT_AS against limit 134217728 for /us
authpriv.err; dovecot-auth: PAM unable to dlopen(/lib/security/pam_unix.so)
authpriv.err; dovecot-auth: PAM [error: /lib/security/pam_unix.so: failed to map
segment from shared object: Cannot allocate memory]
authpriv.err; dovecot-auth: PAM adding faulty module: /lib/security/pam_unix.so
mail.err; dovecot: auth-worker(default): pam(XXXXXXXXXXXX,NNN.NN.NNN.NN):
pam_authenticate() failed: Authentication failure
mail.info; dovecot: auth(default): new auth connection: pid=6262
mail.info; dovecot: auth(default): client out: FAIL  1       user=XXXXXXXXXXXX
--8<--

When I restart dovecot, it runs fine for a while, then it starts happening
again.
I'm pretty unsure about the cause, can someone give me a hint?

--8<--[ dovecot -n ]--8<--
# 1.1.rc4: /etc/dovecot/dovecot.conf
protocols: imap pop3
ssl_disable: yes
disable_plaintext_auth: no
login_dir: /var/run/dovecot/login
login_executable(default): /usr/libexec/dovecot/imap-login
login_executable(imap): /usr/libexec/dovecot/imap-login
login_executable(pop3): /usr/libexec/dovecot/pop3-login
login_process_size: 128
max_mail_processes: 128
verbose_proctitle: yes
mail_privileged_group: mail
mail_location: maildir:%h/.maildir
mail_debug: yes
mail_drop_priv_before_exec: yes
mail_executable(default): /usr/libexec/dovecot/imap
mail_executable(imap): /usr/libexec/dovecot/imap
mail_executable(pop3): /usr/libexec/dovecot/pop3
mail_process_size: 1024
mail_plugin_dir(default): /usr/lib/dovecot/imap
mail_plugin_dir(imap): /usr/lib/dovecot/imap
mail_plugin_dir(pop3): /usr/lib/dovecot/pop3
auth default:
  verbose: yes
  debug: yes
  process_size: 128
  passdb:
    driver: pam
    args: *
  userdb:
    driver: passwd
--8<--

Thanks!
-- 
Regards,
Wolfram Schlich <wschlich at gentoo.org>
Gentoo Linux * http://dev.gentoo.org/~wschlich/

On Apr 10, 2008, at 3:21 PM, Wolfram Schlich wrote:
> mail.info; dovecot: auth-worker(default):  
> pam(XXXXXXXXXXXX,NNN.NN.NNN.NN): lookup service=imap
> kern.alert; kernel: grsec: From NN.NN.NN.NN: denied resource  
> overstep by requesting 134242304 for RLIMIT_AS against limit  
> 134217728 for /us
> authpriv.err; dovecot-auth: PAM unable to dlopen(/lib/security/ 
> pam_unix.so)
> authpriv.err; dovecot-auth: PAM [error: /lib/security/pam_unix.so:  
> failed to map segment from shared object: Cannot allocate memory]
> authpriv.err; dovecot-auth: PAM adding faulty module: /lib/security/ 
> pam_unix.so
> mail.err; dovecot: auth-worker(default):  
> pam(XXXXXXXXXXXX,NNN.NN.NNN.NN): pam_authenticate() failed:  
> Authentication failure
I guess your PAM plugins are leaking memory. This should help:

# Number of auth requests to handle before destroying the process.  
This may
# be useful if PAM plugins leak memory.
#auth_worker_max_request_count = 0

-------------- next part --------------
A non-text attachment was scrubbed...
Name: PGP.sig
Type: application/pgp-signature
Size: 194 bytes
Desc: This is a digitally signed message part
URL:
<http://dovecot.org/pipermail/dovecot/attachments/20080411/af3fdff4/attachment-0002.bin>