dovecot - Apr 2015 - Aw: Re: Please help: error after upgrade to version 2.1.16

Hallo

I can not find a forum at dovecot.org and I get a problem I can not solve.

After Updating to the version dovecot2? 2.1.16? I can no more get eMails with my
eMail-client. All has been working fine before.
Server: FreeBSD 10.0-RELEASE-p18, with
perl 5, version 18, subversion 4 (v5.18.4)
?
It seems it is an authentication problem with my server.
The errors are:
#cat dovecot.log
Apr 17 22:19:37 imap-login: Error: Timeout waiting for handshake from auth
server. my pid=41810, input bytes=0
Apr 17 22:19:58 auth: Error: auth: environment corrupt; missing value for
DOVECOT_
Apr 17 22:19:58 auth: Fatal: unsetenv(RESTRICT_SETUID) failed: Bad address
Apr 17 22:19:58 master: Error: service(auth): command startup failed, throttling
for 60 secs
Apr 17 22:24:04 auth: Error: auth: environment corrupt; missing value for
DOVECOT_
Apr 17 22:24:04 auth: Fatal: unsetenv(RESTRICT_SETUID) failed: Bad address
Apr 17 22:24:04 master: Error: service(auth): command startup failed, throttling
for 60 secs

I have google and has nothing found about "..environment corrupt; missing
value for DOVECOT_" and about "auth: Fatal: unsetenv(RESTRICT_SETUID)
failed: Bad address"

I have make a reinstall - but doesn't help. I get the same error.
I have not forget to create new certs with the dovecote shell-script after
installation.

I'm using passwd (virtual users). Make a cat on passwd shows that it is not
empty. Also the date of the file show that the update installation has it not
changed.
So I have not create the dovecot users again.
?
here are some other logs:
#cat dovecot-info.log
Apr 17 22:29:03 imap-login: Info: Disconnected: Auth process broken
(disconnected before auth was ready, waited 1 secs): user=<>,
rip=85.181.222.126, lip=78.47.225.20, TLS handshaking
Apr 17 22:29:33 imap-login: Info: Disconnected: Auth process broken
(disconnected before auth was ready, waited 30 secs): user=<>,
rip=85.181.222.126, lip=78.47.225.20, TLS
Apr 17 22:29:33 imap-login: Info: Disconnected: Auth process broken
(disconnected before auth was ready, waited 30 secs): user=<>,
rip=85.181.222.126, lip=78.47.225.20, TLS

#cat dovecot-debug.log
Apr 17 22:30:03 auth: Debug: Loading modules from directory:
/usr/local/lib/dovecot/auth
Apr 17 22:30:03 auth: Debug: Read auth token secret from
/var/run/dovecot//auth-token-secret.dat
Apr 17 22:34:01 auth: Debug: Loading modules from directory:
/usr/local/lib/dovecot/auth
Apr 17 22:34:01 auth: Debug: Read auth token secret from
/var/run/dovecot//auth-token-secret.dat
Apr 17 22:34:01 imap-login: Debug: SSL: where=0x10, ret=1: before/accept
initialization [85.181.222.126]
Apr 17 22:34:01 imap-login: Debug: SSL: where=0x2001, ret=1: before/accept
initialization [85.181.222.126]
Apr 17 22:34:01 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client
hello A [85.181.222.126]
Apr 17 22:34:01 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server
hello A [85.181.222.126]
Apr 17 22:34:01 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write
certificate A [85.181.222.126]
Apr 17 22:34:01 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write key
exchange A [85.181.222.126]
Apr 17 22:34:01 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server
done A [85.181.222.126]
Apr 17 22:34:01 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 flush data
[85.181.222.126]
Apr 17 22:34:01 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client
certificate A [85.181.222.126]
Apr 17 22:34:01 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client
key exchange A [85.181.222.126]
Apr 17 22:34:01 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client
key exchange A [85.181.222.126]
Apr 17 22:34:01 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client
key exchange A [85.181.222.126]
Apr 17 22:34:01 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client
key exchange A [85.181.222.126]

########################################################################################
My configuration is
sendmail(MTA) -> procmail(LDA) -> dovecot(IMAP) with TLS and Maildir (no
DB)
Authentification been done with dovecot password file (no real user, no
OpenLDAP, no other DB-User)
#dovecot -n
# 2.2.16: /usr/local/etc/dovecot/dovecot.conf
# OS: FreeBSD 10.0-RELEASE-p18 amd64? ufs
auth_debug = yes
auth_mechanisms = digest-md5 plain login
auth_verbose = yes
auth_verbose_passwords = plain
base_dir = /var/run/dovecot/
debug_log_path = /var/log/dovecot-debug.log
default_internal_user = vmail
default_login_user = vmail
deliver_log_format = msgid=%m: %$ %f %s
disable_plaintext_auth = no
first_valid_uid = 1000
hostname = swdevil.de
info_log_path = /var/log/dovecot-info.log
lda_mailbox_autocreate = yes
lda_mailbox_autosubscribe = yes
log_path = /var/log/dovecot.log
login_greeting = IMAPd ready.
login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c
mail_access_groups = mailnull
mail_debug = yes
mail_location = maildir:/home/vmail/%d/%n/:INBOX=/home/vmail/%d/%n/.INBOX
mail_plugins = " virtual"
mail_temp_dir = /tmp/mail
namespace inbox {
? inbox = yes
? location ? prefix }
passdb {
? args = scheme=DIGEST-MD5 username_format=%n /usr/local/etc/dovecot/pass
? driver = passwd-file
}
service auth-worker {
? group = wheel
? user = root
}
service imap-login {
? group = dovenull
? inet_listener imap {
??? port = 0
? }
? inet_listener imaps {
??? port = 993
? }
}
service imap {
? process_limit = 100
}
service pop3-login {
? group = dovenull
? inet_listener pop3 {
??? port = 0
? }
? inet_listener pop3s {
??? port = 0
? }
}
service pop3 {
? process_limit = 100
}
ssl = required
ssl_cert = </usr/local/etc/dovecot/certs/dovecot_ssl_crt.pem
ssl_key = </usr/local/etc/dovecot/certs/dovecot_ssl_key.pem
userdb {
? args = uid=vmail gid=vmail home=/home/vmail/%d/%n
? driver = static
}
verbose_proctitle = yes
verbose_ssl = yes
protocol pop3 {
? pop3_uidl_format = %08Xu%08Xv
}

Many thanks for Your advice what could be wrong.

Harald Langner
EU (Germany)




?

I think you may need something similar to:

protocols = imap pop3 lmtp sieve
service auth {
  unix_listener auth-userdb {
    group = _smtpd
    mode = 0666
    user = _smtpd
  }
}
service imap-login {
  inet_listener imap {
    port = 143
  }
  inet_listener imaps {
    port = 993
    ssl = yes
  }
}
service managesieve-login {
  inet_listener sieve {
    port = 4190
  }
  inet_listener sieve_deprecated {
    port = 2000
  }
}
service pop3-login {
  inet_listener pop3 {
    port = 110
  }
  inet_listener pop3s {
    port = 995
    ssl = yes
  }
}

thanks,
but I do not understand was has a new configuration to do with my auth-Problem?

My configuration settings has worked before the Update to 2.1.16. I have not see
that the update has changed some of my config-files.
?

Gesendet:?Samstag, 18. April 2015 um 20:24 Uhr
Von:?"Edgar Pettijohn III" <edgar at pettijohn-web.com>
An:?"Dovecot Mailing List" <dovecot at dovecot.org>
Betreff:?Re: Please help: error after upgrade to version 2.1.16
I think you may need something similar to:

protocols = imap pop3 lmtp sieve
service auth {
unix_listener auth-userdb {
group = _smtpd
mode = 0666
user = _smtpd
}
}
service imap-login {
inet_listener imap {
port = 143
}
inet_listener imaps {
port = 993
ssl = yes
}
}
service managesieve-login {
inet_listener sieve {
port = 4190
}
inet_listener sieve_deprecated {
port = 2000
}
}
service pop3-login {
inet_listener pop3 {
port = 110
}
inet_listener pop3s {
port = 995
ssl = yes
}
}