dovecot - Aug 2017 - pam auth problem

> What is in the pam.d/dovecot file? (Remember to strip passwords if
> included)
# cat /etc/pam.d/dovecot
passdb {
  driver = pam
  # args = failure_show_msg=yes
  # args = max_requests=12
  args = %s
}

and /etc/pam.d/{imap,pop3} were untouched; both as follows

#
# $FreeBSD: releng/10.3/etc/pam.d/pop3 170771 2007-06-15 11:33:13Z yar $
#
# PAM configuration for the "pop3" service
#

# auth
#auth           sufficient      pam_krb5.so             no_warn try_first_pass
#auth           sufficient      pam_ssh.so              no_warn try_first_pass
auth            required        pam_unix.so             no_warn try_first_pass

# account
#account        required        pam_nologin.so
account         required        pam_unix.so

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Thu, 3 Aug 2017, Randy Bush wrote:
> # cat /etc/pam.d/dovecot
> passdb {
>  driver = pam
>  # args = failure_show_msg=yes
>  # args = max_requests=12
>  args = %s
> }
this info belongs into Dovecot's conf files, not into /etc/pam.d.
> and /etc/pam.d/{imap,pop3} were untouched; both as follows
>
> #
> # $FreeBSD: releng/10.3/etc/pam.d/pop3 170771 2007-06-15 11:33:13Z yar $
> #
> # PAM configuration for the "pop3" service
> #
>
> # auth
> #auth           sufficient      pam_krb5.so             no_warn
try_first_pass
> #auth           sufficient      pam_ssh.so              no_warn
try_first_pass
> auth            required        pam_unix.so             no_warn
try_first_pass
>
> # account
> #account        required        pam_nologin.so
> account         required        pam_unix.so
copy or link /etc/pam.d/imap do /etc/pam.d/dovecot

- -- 
Steffen Kaiser
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEVAwUBWYMlw3z1H7kL/d9rAQLrCQgAyDJmgni9kmFa5833CedRV1aeA+JsUAjJ
IzRuDFXCsi+uEJfOdL8ZxlIXdnTPmvVSGHzx+iDNLId0y4VsJYDuby4d8LkKu7Be
MkOp+H6Ii1Qsx60Us9D9S8wcMwpdv0gG/4GrxuxCFC4CZUth/gF2yMmI9FxDa3f6
jQbJDOHVcs3mMtByxICRwWH8TT05hhDQ6duMNlTldULfhVoym1VTQOx0AivJYHOv
gnaozfnDlp2HTIz5VBIH3sob7ZSJde01KW2gpfz6O3aMhZSmAPhe6tr4xOMBMWUT
8n6t/CH0G0U4K/5yRw/DE+9CCAs4/A/YNsVKzEG0Art7kfwRSi7HPw==3p5l
-----END PGP SIGNATURE-----

>> # cat /etc/pam.d/dovecot
>> passdb {
>>  driver = pam
>>  # args = failure_show_msg=yes
>>  # args = max_requests=12
>>  args = %s
>> }
> 
> this info belongs into Dovecot's conf files, not into /etc/pam.d.
doh.  i misread the wiki page.  thanks.
> copy or link /etc/pam.d/imap do /etc/pam.d/dovecot
that seems to have helped a lot!

thank you

randy