similar to: dovecot-auth: gkr-pam: error looking up user information for: IP ?

Hello, is it possible to limit the number of pop3 (or imap) login attempts from one IP with dovecot to stop attackers? We recently had an attack from one IP-address lasting 50 minutes that tried 50000 pop3-logins with guessed users and passwords. I know about Fail2Ban but really would prefer an easy to configure solution inside of dovecot. Dovecot has this anvil daemon, can it be used

Hi, I am using dovecot 2.2 for some time. All users on the system can log in using Horde Webmail. But now, after creating a new user on the server with <useradd -m username> this new user is not able to log in. Of course I have set a password for the new user. In the log file I can see: Sep 16 23:04:05 servername auth: gkr-pam: error looking up user information Sep 16 23:04:07

I have a problem that is now becoming very annoying. Namely I have a Centos 7 member server running Sernet Samba 4.7.4 for which everything seems to work except gdm or ftp logins. On the linux client it seems winbindd is set up correctly. For example (the data shown below has been sanitized): > getent passwd testuser2:*:3001108:3000513::/home/testuser1:/bin/bash

Currently using dovecot 2.0.12 and mysql server 4.0.20 (I know, it's really old) and having issues getting Dovecot to authenticate to the mysql server. We have confirmed that the credentials are correct and the host machine can access the database, however we are getting the following error: Jun 23 08:12:50 hostname dovecot: auth: Error: mysql(databaseserver.com): Connect failed to database

I'm running Dovecot IMAP and POP3 on Debian. But it look's like it's keeping mail in the user's inbox on the server until it's deleted by the user. I thought POP servers deleted email as soon as it was downloaded, but apparently not, according to dovecot.org. Is there something in the Dovecot conf I can do to get rid of all this redundant crud? I see several conversations on

Hello, I'm running Dovecot 2.0.13 on my Ubuntu10.04. It's working very well but I faced a problem with Redirect and Vacation using Sieve. :-( In fact, after well configuring the system I dont't receive the redirect message, and in the log I found: ######################################################################################## Jun 9 18:49:37 box7 dovecot: lmtp(10734, user at

Hello! I'd like to setup quota for for virtualusers, i'm using both maildir++ and mdbox as storage, and i'm using postgresql to keep users. I'm keeping all users data in one table: [...] login text NOT NULL, domain text, password text, quota_mb integer NOT NULL DEFAULT 0 [... other columns ...] i'd like to keep present quota in such two columns: quota_dict_bytes integer NOT

On Tue, 26 Dec 2017 18:08:11 -0700 "Paul R. Ganci via samba" <samba at lists.samba.org> wrote: > I have a problem that is now becoming very annoying. Namely I have a > Centos 7 member server running Sernet Samba 4.7.4 for which > everything seems to work except gdm or ftp logins. On the linux > client it seems winbindd is set up correctly. For example (the data >

I (somewhat sadly, imo) need to run Tomcat/SSL on a public-facing machine at work. I was really, really hoping I could use the GCJ-compiled version of Tomcat supplied in the base repository. I can't get Tomcat to read a Java keystore created with the keytool utility provided (in java-1.4.2-gcj-compat-1.4.2.0-40jpp.110). The Sun and GNU keytools produce different keystores. I'll use

Hi, I would like to do what I mentioned in the subject on an Ububtu 18.04. I tried it with the following steps: https://lists.samba.org/archive/samba/2011-March/161372.html My files on the client: smb.conf [global] ;Workstation Settings workgroup = PM netbios name = DS1223 server string = %h security = domain idmap backend = tdb idmap uid = 15000-20000 idmap gid = 15000-20000 wins server =

I use a lot of plus-style addresses (me+stuff at example.com), except I use underscore as the separator rather than plus (me_stuff at example.com). My mail logs are full of messages where dovecot looks for a mailbox named "stuff", fails, then delivers to my inbox. Is there a way to turn that off so that dovecot automatically delivers to my inbox? Thanks! Here are the details: >

Now that I am running Thunderbird on Linux and away from Windows/Outlook, I'd like to take another run at setting up NTLM authentication from Thunderbird to my Samba4 AC/DC. With the help of the samba maillist folks I was able to set up NTLM authentication for domain user login. I should be able to do the same for email! But, I need help. I went to

I've been using Dovecot 2.2.15 as the IMAP server for Outlook (2010/2013) on Windows workstations for over 6 months with no problems. Dovecot is hosted on the office Samba4 AC/DC server. I have been using auth_mechanisms plain login, and passdb driver = shadow. What I'd like to do now is use the "Windows Authenticated" login so I don't have to have separate passwords for

Processing commands for control at bugs.debian.org: > # fixed in 6cb523e > tags 618411 + pending Bug #618411 [logcheck-database] logcheck-database: Fails to filter messages from pam-gkr at workstation level Added tag(s) pending. > thanks Stopping processing here. Please contact me if you need assistance. -- 618411: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=618411 Debian Bug

Hello All, these days one of my tasks is connecting some Centos7 laptops to Freeipa, also running on Centos7. After doing that, some users report nog being able to unlock their screens. Only after reboot are they able to login again. I see this em in /var/log/secure: Aug 10 13:34:37 **** mate-screensaver-dialog: pam_sss(mate-screensaver:auth): authentication failure; logname= uid=382900663

Also it seems we lack support for NTLMv2. If you want to use NTLM you need to permit use of NTLM(v1), which is usually not enabled by default. Aki > On June 25, 2016 at 7:43 PM Mark Foley <mfoley at ohprs.org> wrote: > > > I've asked this several times over the past year with essentially zero responses. I'll keep it simple: > > Does NTLM authentication work in

Hi all, If I may, one more question on this subject: I would like to create a fail2ban filer, that scans for these lines: > Jul 20 11:10:09 auth: Info: ldap(user1,60.166.35.162,<cDFXHbxUQgA8piOi>): invalid credentials (given password: password) > Jul 20 11:10:19 auth: Info: ldap(user2,61.53.66.4,<V+nyHbxU+wA9NUIE>): invalid credentials (given password: password) (as you can

Hi Mark, I haven't done it, but I've played with the scenario enough to have an idea. What you want to do is have Outlook auth via NTLM to Dovecot.? First that means having the machine be a domain member (usually via Samba) in order to properly process NTLM/Kerberos handshake - which it appears you have. Second that means having Dovecot know how to accept NTLM authentication (SPA) to

It should work. Although if you are using linux server you might want to use gssapi instead. > On June 25, 2016 at 7:43 PM Mark Foley <mfoley at ohprs.org> wrote: > > > I've asked this several times over the past year with essentially zero responses. I'll keep it simple: > > Does NTLM authentication work in Dovecot? > > I'll post this one last time.

Hello, I have encountered with strange issue. When I uncomment the following line auth_verbose_passwords = yes in the /etc/dovecot/conf.d/10-logging.conf I get the following errors # dovecot -a # 2.2.10: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-431.3.1.el6.x86_64 x86_64 CentOS release 6.5 (Final) ext4 # NOTE: Send doveconf -n output instead when asking for help. Segmentation fault (core