Juergen Obermann
2009-Jun-19  14:25 UTC
[Dovecot] 1.1.16 stops authenticating users after several days
Hello,
we use dovecot v1.1.16 on two servers with Solaris 9. This week both suddenly
stopped authenticating users. The first server was startet on Jun 2 and ran
until Jun 18 and the other startet on Jun 3 and failed on Jun 15. Both generated
then lots of error messages, three for every user that attemps to login, looking
like that:
Jun 15 08:35:23 minerva dovecot-auth[20831]: [ID 401707 user.error] open_module:
/usr/lib/security/pam_unix_account.so.1 failed: ld.so.1: dovecot-auth: fatal:
/usr/lib/security/pam_unix_account.so.1: open failed: No such file or directory
Jun 15 08:35:23 minerva dovecot-auth[20831]: [ID 487707 user.error]
load_modules: can not open module /usr/lib/security/pam_unix_account.so.1 
Jun 15 08:35:23 minerva dovecot: [ID 107833 local0.error] auth-worker(default):
pam(gp1071,134.176.2.89): pam_acct_mgmt() failed: Dlopen failure
The file /usr/lib/security/pam_unix_account.so.1 was still there and had not
been changed.
Until these events there have been on both servers circa 1.600.000 logins. 
After a restart dovecot did work again.
The configuration is:
# ulimit -n 8192
# /opt/local/sbin/dovecot -n
# 1.1.16: /opt/local/etc/dovecot.conf
# OS: SunOS 5.9 sun4u  
syslog_facility: local0
protocols: imap imaps pop3 pop3s
ssl_cert_file: /etc/ssl/server.crt
ssl_key_file: /etc/ssl/server.key
disable_plaintext_auth: no
version_ignore: yes
login_dir: /opt/local/var/run/dovecot/login
login_executable(default): /opt/local/libexec/dovecot/imap-login
login_executable(imap): /opt/local/libexec/dovecot/imap-login
login_executable(pop3): /opt/local/libexec/dovecot/pop3-login
login_process_per_connection: no
login_processes_count: 12
max_mail_processes: 4096
mail_location: mbox:~/Mail:INBOX=/var/mail/%u
mmap_disable: yes
mail_nfs_storage: yes
mail_nfs_index: yes
mail_executable(default): /opt/local/libexec/dovecot/imap
mail_executable(imap): /opt/local/libexec/dovecot/imap
mail_executable(pop3): /opt/local/libexec/dovecot/pop3
mail_plugins(default): quota imap_quota
mail_plugins(imap): quota imap_quota
mail_plugins(pop3): quota
mail_plugin_dir(default): /opt/local/lib/dovecot/imap
mail_plugin_dir(imap): /opt/local/lib/dovecot/imap
mail_plugin_dir(pop3): /opt/local/lib/dovecot/pop3
imap_client_workarounds(default): delay-newmail netscape-eoh
tb-extra-mailbox-sep
imap_client_workarounds(imap): delay-newmail netscape-eoh tb-extra-mailbox-sep
imap_client_workarounds(pop3): 
pop3_uidl_format(default): %08Xu%08Xv
pop3_uidl_format(imap): %08Xu%08Xv
pop3_uidl_format(pop3): %08Xv%08Xu
pop3_client_workarounds(default): 
pop3_client_workarounds(imap): 
pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh
namespace:
  type: private
  separator: /
  inbox: yes
  list: yes
  subscriptions: yes
namespace:
  type: private
  separator: /
  prefix: Mail/
  hidden: yes
  subscriptions: yes
auth default:
  passdb:
    driver: pam
  userdb:
    driver: passwd
plugin:
  quota: fs:Home-Verzeichnis
Greetings,
J?rgen
-- 
Hochschulrechenzentrum der | Mail: Juergen.Obermann at hrz.uni-giessen.de
Justus-Liebig-Universitaet | WWW:  http://www.uni-giessen.de/~g033
Heinrich-Buff-Ring 44      | Tel:  0641-99-13054 (0641-99-13001)
D-35392 Giessen, Germany   | Fax:  0641-99-13009
Timo Sirainen
2009-Jun-19  15:27 UTC
[Dovecot] 1.1.16 stops authenticating users after several days
On Jun 19, 2009, at 10:25 AM, Juergen Obermann wrote:> Jun 15 08:35:23 minerva dovecot-auth[20831]: [ID 401707 user.error] > open_module: > /usr/lib/security/pam_unix_account.so.1 failed: ld.so.1: dovecot- > auth: fatal: > /usr/lib/security/pam_unix_account.so.1: open failed: No such file > or directory > Jun 15 08:35:23 minerva dovecot-auth[20831]: [ID 487707 user.error] > load_modules: can not open module /usr/lib/security/ > pam_unix_account.so.1 > Jun 15 08:35:23 minerva dovecot: [ID 107833 local0.error] auth- > worker(default): > pam(gp1071,134.176.2.89): pam_acct_mgmt() failed: Dlopen failureProbably leaks memory? Try setting this to some non-zero value: # Number of auth requests to handle before destroying the process. This may # be useful if PAM plugins leak memory. #auth_worker_max_request_count = 0