dovecot - Jun 2017 - Need Help to analyze the error or is it a bug?

After done an update to dovecot-2.2.30.2

my connection is broken since days.

all what I try every time the same error:

Jun 15 00:02:18 auth: Error: auth: environment corrupt; missing value 
for DOVECOT_
Jun 15 00:02:18 auth: Fatal: unsetenv(RESTRICT_SETUID) failed: Bad address
Jun 15 00:02:18 master: Error: service(auth): command startup failed, 
throttling for 2 secs


I try this:

# doveadm -Dv auth test -x service=imap theusername mypassword

output:

Debug: Loading modules from directory: /usr/local/lib/dovecot
Debug: Module loaded: /usr/local/lib/dovecot/lib20_virtual_plugin.so
Debug: Loading modules from directory: /usr/local/lib/dovecot/doveadm
Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: 
/usr/local/lib/dovecot/doveadm/lib10_doveadm_acl_plugin.so: Undefined 
symbol "acl_user_module" (this is usually intentional, so just ignore 
this message)
Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: 
/usr/local/lib/dovecot/doveadm/lib10_doveadm_expire_plugin.so: Undefined 
symbol "expire_set_lookup" (this is usually intentional, so just
ignore
this message)
Debug: Skipping module doveadm_quota_plugin, because dlopen() failed: 
/usr/local/lib/dovecot/doveadm/lib10_doveadm_quota_plugin.so: Undefined 
symbol "quota_user_module" (this is usually intentional, so just
ignore
this message)
Debug: Skipping module doveadm_fts_plugin, because dlopen() failed: 
/usr/local/lib/dovecot/doveadm/lib20_doveadm_fts_plugin.so: Undefined 
symbol "fts_filter_filter" (this is usually intentional, so just
ignore
this message)
Debug: Skipping module doveadm_mail_crypt_plugin, because dlopen() 
failed: /usr/local/lib/dovecot/doveadm/libdoveadm_mail_crypt_plugin.so: 
Undefined symbol "mail_crypt_user_get_public_key" (this is usually 
intentional, so just ignore this message)
Error: Timeout waiting for handshake from auth server. my pid=63521, 
input bytes=0
Fatal: Couldn't connect to auth socket


dlopen() failed, Undefined symbols ... Is this a bug?

How do I check what is going wrong with this auth socket error?


2nd) I'm using

dovecot.conf
       protocols = imap lmtp
       !include conf.d/*.conf

10-auth.conf ,

10-master.conf,

auth-passwdfile.conf.ext,

10-ssl.conf

and 10-logging.conf (all logs are on)

All others, form the 29 configuration files, I haven't touch. It has 
worked, before I have done the update. What has changed? For what in the 
*.conf should I locking for?


Thanks a lot.

On 15.06.2017 01:45, Dipl.-Ing. Harald E. Langner wrote:
> After done an update to dovecot-2.2.30.2
> 
> my connection is broken since days.
> 
> all what I try every time the same error:
> 
> Jun 15 00:02:18 auth: Error: auth: environment corrupt; missing value for
DOVECOT_
> Jun 15 00:02:18 auth: Fatal: unsetenv(RESTRICT_SETUID) failed: Bad address
> Jun 15 00:02:18 master: Error: service(auth): command startup failed,
throttling for 2 secs
Could you post the output of "doveconf -n". Please also describe from
which version you upgraded to v2.2.30.2 and how you did the upgrade? Are you
compiling Dovecot yourself? What are the configuration & compilation options
etc.

br,
Teemu
> 
> 
> I try this:
> 
> # doveadm -Dv auth test -x service=imap theusername mypassword
> 
> output:
> 
> Debug: Loading modules from directory: /usr/local/lib/dovecot
> Debug: Module loaded: /usr/local/lib/dovecot/lib20_virtual_plugin.so
> Debug: Loading modules from directory: /usr/local/lib/dovecot/doveadm
> Debug: Skipping module doveadm_acl_plugin, because dlopen() failed:
/usr/local/lib/dovecot/doveadm/lib10_doveadm_acl_plugin.so: Undefined symbol
"acl_user_module" (this is usually intentional, so just ignore this
message)
> Debug: Skipping module doveadm_expire_plugin, because dlopen() failed:
/usr/local/lib/dovecot/doveadm/lib10_doveadm_expire_plugin.so: Undefined symbol
"expire_set_lookup" (this is usually intentional, so just ignore this
message)
> Debug: Skipping module doveadm_quota_plugin, because dlopen() failed:
/usr/local/lib/dovecot/doveadm/lib10_doveadm_quota_plugin.so: Undefined symbol
"quota_user_module" (this is usually intentional, so just ignore this
message)
> Debug: Skipping module doveadm_fts_plugin, because dlopen() failed:
/usr/local/lib/dovecot/doveadm/lib20_doveadm_fts_plugin.so: Undefined symbol
"fts_filter_filter" (this is usually intentional, so just ignore this
message)
> Debug: Skipping module doveadm_mail_crypt_plugin, because dlopen() failed:
/usr/local/lib/dovecot/doveadm/libdoveadm_mail_crypt_plugin.so: Undefined symbol
"mail_crypt_user_get_public_key" (this is usually intentional, so just
ignore this message)
> Error: Timeout waiting for handshake from auth server. my pid=63521, input
bytes=0
> Fatal: Couldn't connect to auth socket
> 
> 
> dlopen() failed, Undefined symbols ... Is this a bug?
> 
> How do I check what is going wrong with this auth socket error?
> 
> 
> 2nd) I'm using
> 
> dovecot.conf
>       protocols = imap lmtp
>       !include conf.d/*.conf
> 
> 10-auth.conf ,
> 
> 10-master.conf,
> 
> auth-passwdfile.conf.ext,
> 
> 10-ssl.conf
> 
> and 10-logging.conf (all logs are on)
> 
> All others, form the 29 configuration files, I haven't touch. It has
worked, before I have done the update. What has changed? For what in the *.conf
should I locking for?
> 
> 
> Thanks a lot.

Hello,
thank You for helping me.
I did not remember the version before the update. I use FreeBSD 11.0. The OS
tells me, from time to time, there are updates to do.
So it was and I have also compiled dovecot via the FreeBSD ports system with
some others.
These are my settings:
[/usr/ports/mail/dovecot2] => make showconfig
===> The following configuration options are available for dovecot2-2.2.30.2:
     DOCS	=on: Build and/or install documentation
     EXAMPLES	=on: Build and/or install examples
     KQUEUE	=on: kqueue(2) support
     LIBWRAP	=on: TCP wrapper support
     LZ4		=off: LZ4 compression support
     VPOPMAIL	=off: vpopmail support
====> Database support
     CDB		=off: CDB database support
     LDAP	=on: LDAP protocol support
     MYSQL	=on: MySQL database support
     PGSQL	=off: PostgreSQL database support
     SQLITE	=off: SQLite database support
====> Full text search plugins
     ICU		=off: Use libicu for FTS unicode normalization
     LUCENE	=off: CLucene FTS support
     SOLR		=off: Solr FTS support
     TEXTCAT	=off: Libtextcat FTS support
====> GSSAPI Security API support: you have to select exactly one of them
     GSSAPI_NONE	=off: Build without GSSAPI support
     GSSAPI_BASE 	=off: Use GSSAPI from base
     GSSAPI_HEIMDAL=off: Use Heimdal GSSAPI from security/heimdal
     GSSAPI_MIT		=on: Use MIT GSSAPI from security/krb5

Today the error has gone. I DO NOT know why.

Yesterday I had make some more other updates for i.e. for  llvm... +
openjdk7....
with 
# portupgrade -r ( r means recursive). 
It takes very long time and the terminal-session was broken so the connection
was lost.

Today I come back and take a look. it seems that it has finished and I go on to
find out the dovecot error.
I do then:
#gdb --args /usr/local/libexec/dovecot/imap -u <username>@domain.tld

But "auth" like this: " Error: auth: environment corrupt; missing
value "
was no more broken.  But there was some rights not ok for the users db.
I changed this and try again
#gdb --args /usr/local/libexec/dovecot/imap -u <username>@domain.tld

wow: I get a login. Then without changing any settings in dovecot I try the
Outlook client............
.........and it works ???

I don't know what it was. I could not figure out what was the authorize
problem because of to less debug information.
When I have not program this software an error message like this "Fatal:
Couldn't connect to auth socket" is not very helpful,
also there are in /var/run/dovecot 7 auth sockets and more then 38 sockets in
all ?!

If you have an idea, how I could better debug this please tell me. 
But again, thank for trying helping me.

Harald

-----Urspr?ngliche Nachricht-----
Von: dovecot [mailto:dovecot-bounces at dovecot.org] Im Auftrag von Teemu
Huovila
Gesendet: Freitag, 16. Juni 2017 09:19
An: dovecot at dovecot.org
Betreff: Re: Need Help to analyze the error or is it a bug?



On 15.06.2017 01:45, Dipl.-Ing. Harald E. Langner wrote:
> After done an update to dovecot-2.2.30.2
> 
> my connection is broken since days.
> 
> all what I try every time the same error:
> 
> Jun 15 00:02:18 auth: Error: auth: environment corrupt; missing value 
> for DOVECOT_ Jun 15 00:02:18 auth: Fatal: unsetenv(RESTRICT_SETUID) 
> failed: Bad address Jun 15 00:02:18 master: Error: service(auth): 
> command startup failed, throttling for 2 secs
Could you post the output of "doveconf -n". Please also describe from
which version you upgraded to v2.2.30.2 and how you did the upgrade? Are you
compiling Dovecot yourself? What are the configuration & compilation options
etc.

br,
Teemu
> 
> 
> I try this:
> 
> # doveadm -Dv auth test -x service=imap theusername mypassword
> 
> output:
> 
> Debug: Loading modules from directory: /usr/local/lib/dovecot
> Debug: Module loaded: /usr/local/lib/dovecot/lib20_virtual_plugin.so
> Debug: Loading modules from directory: /usr/local/lib/dovecot/doveadm
> Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: 
> /usr/local/lib/dovecot/doveadm/lib10_doveadm_acl_plugin.so: Undefined 
> symbol "acl_user_module" (this is usually intentional, so just
ignore
> this message)
> Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: 
> /usr/local/lib/dovecot/doveadm/lib10_doveadm_expire_plugin.so: 
> Undefined symbol "expire_set_lookup" (this is usually
intentional, so
> just ignore this message)
> Debug: Skipping module doveadm_quota_plugin, because dlopen() failed: 
> /usr/local/lib/dovecot/doveadm/lib10_doveadm_quota_plugin.so: 
> Undefined symbol "quota_user_module" (this is usually
intentional, so
> just ignore this message)
> Debug: Skipping module doveadm_fts_plugin, because dlopen() failed: 
> /usr/local/lib/dovecot/doveadm/lib20_doveadm_fts_plugin.so: Undefined 
> symbol "fts_filter_filter" (this is usually intentional, so just 
> ignore this message)
> Debug: Skipping module doveadm_mail_crypt_plugin, because dlopen() 
> failed: 
> /usr/local/lib/dovecot/doveadm/libdoveadm_mail_crypt_plugin.so: 
> Undefined symbol "mail_crypt_user_get_public_key" (this is
usually
> intentional, so just ignore this message)
> Error: Timeout waiting for handshake from auth server. my pid=63521, 
> input bytes=0
> Fatal: Couldn't connect to auth socket
> 
> 
> dlopen() failed, Undefined symbols ... Is this a bug?
> 
> How do I check what is going wrong with this auth socket error?
> 
> 
> 2nd) I'm using
> 
> dovecot.conf
>       protocols = imap lmtp
>       !include conf.d/*.conf
> 
> 10-auth.conf ,
> 
> 10-master.conf,
> 
> auth-passwdfile.conf.ext,
> 
> 10-ssl.conf
> 
> and 10-logging.conf (all logs are on)
> 
> All others, form the 29 configuration files, I haven't touch. It has
worked, before I have done the update. What has changed? For what in the *.conf
should I locking for?
> 
> 
> Thanks a lot.