dovecot - Sep 2014 - LDAP authentication

CentOS 6.5, dovecot 2.0.9-7

I was using http://www.linuxmail.info/postfix-dovecot-ldap-centos-5/ to
get LDAP auth working.  And what's really annoying is, it worked...
until I screwed something up and had to pull my work back from a backup.
Now it doesn't work :-(

[joliver at localhost ~]$ telnet localhost 143
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE
IDLE STARTTLS AUTH=PLAIN] Dovecot ready.
a1 LOGIN testuser1 password
a1 NO [AUTHENTICATIONFAILED] Authentication failed.

Turn on debugging and see:

Sep 10 11:26:58 localhost dovecot: auth: Debug:
pam(testuser1,127.0.0.1): lookup service=dovecot
Sep 10 11:26:58 localhost dovecot: auth: Debug:
pam(testuser1,127.0.0.1): #1/1 style=1 msg=Password: 
Sep 10 11:27:00 localhost dovecot: auth: pam(testuser1,127.0.0.1):
pam_authenticate() failed: Permission denied
Sep 10 11:27:00 localhost dovecot: auth: ldap(testuser1,127.0.0.1):
invalid credentials
Sep 10 11:27:02 localhost dovecot: auth: Debug: client out:
FAIL#0111#011user=testuser1


So, I don't know what permission is being denied by PAM, or if that was
there or not when this did work.  I can access my LDAP server just fine.

What else can I check?

-- 
***********************************************************************
* John Oliver                             http://www.john-oliver.net/ *
*                                                                     *
***********************************************************************

Hi,
> Sep 10 11:27:00 localhost dovecot: auth: pam(testuser1,127.0.0.1):
> pam_authenticate() failed: Permission denied
> Sep 10 11:27:00 localhost dovecot: auth: ldap(testuser1,127.0.0.1):
> invalid credentials
I am not clear from this if you are using pam auth first and ldap auth
2nd, or if you are trying to use pam to do your ldap authentication for
you.  Assuming the former, I would guess that you are either failing the
auth_bind, or the attributes you are using for user_filter/pass_filter
aren't matching the username format.  I would start by checking the
settings in your dovecot-ldap.conf file...



 
> Sep 10 11:27:02 localhost dovecot: auth: Debug: client out:
> FAIL#0111#011user=testuser1
> 
> 
> So, I don't know what permission is being denied by PAM, or if that was
> there or not when this did work.  I can access my LDAP server just fine.
> 
> What else can I check?
>