Displaying 20 results from an estimated 10000 matches similar to: "Dovecot.1.1.6 Authentication problems using PAM+Kerberos"
2008 Nov 26
2
Dovecot auth-worker permission denied.
Hello,
I am trying to get dovecot to use virtual users and authenticate using
PAM+kerberos against Active Directory and I am running into some problems.
I followed the tutorials from the wiki page from:
http://www.linuxmail.info/active-directory-dovecot-pam-authentication/
And here is what I get from the /var/log/mail log:
Nov 26 15:12:27 housigma20 dovecot: auth(default): client in:
2008 Dec 04
4
LDA questions
Hello,
I am looking at the docs and I see this:
Problems with deliver
Namespaces are supported with v1.1 and later. With v1.0 and older
versions mails can be delivered only to mailboxes specified by the
mail_location setting.
But in the dovecot.conf I see:
# NOTE: Namespaces currently work ONLY with IMAP! POP3 and LDA currently
ignore
# namespaces completely, they use only the mail_location
2008 Dec 05
1
Username changed by dovecot..?
Hello,
I have postfix+dovecot authenticating via LDAP to Active directory and
everything is working fine except that some user names get changed by
dovecot.
# cat dovecot/dovecot-ldap.conf
hosts = 192.168.50.30 192.168.50.31
base = ou=HST-Users,dc=h-st,dc=com
ldap_version = 3
auth_bind = yes
dn = cn=<account>,cn=Users,dc=h-st,dc=com
dnpass = <password>
user_attrs =
2009 Feb 27
6
Outlook cant delete folders
Hello,
It has been brought to my attention that outlook users cant delete
folders from their mailbox. They can move them around and erase
emails, but when it comes to folders, they cant.. Any ideas..?
# dovecot --version
1.1.7
# dovecot -n
# 1.1.7: /etc/dovecot/dovecot.conf
# OS: Linux 2.6.16.60-0.21-xenpae i686 SUSE Linux Enterprise Server
10 (i586)
login_dir: /var/run/dovecot/login
2009 Jul 28
1
Expunged emails getting automatically deleted
Hello,
So i had this email in my inbox, i moved it to Folder1/tickets/
folder, then i decided to move the same email back to my inbox and
when i went to the inbox it wasnt there nor in Folder1/tickets/
folder...
I opened a SSH session to the mail server and went to /srv/mail/
vmail/DOMAIN.COM/rventura/Maildir
There i did "ll expunged/.INBOX/cur" and it showed me 300+ emails
2008 Dec 03
2
Dovecot authenticating to multiple kerberos realms
Hello,
I got Postfix, Dovecot 1.1.7 configure to use pam and the pam.d/dovecot
file is configure to use pam_krb5 module. Everything is working with no
problems, but I am finding that the user must type the domain part in
uppercase in order to successfully authenticate.
So I am wondering if there is any way for the user to login as
user1 at domain.com instead of user1 at DOMAIN.COM...?
2009 Jan 12
1
1.1.6: PAM passdb/userdb (mis)configuration
I'm sure I'm missing something obvious :-(
Dovecot version 1.1.6, pam authentication via ldap (openldap). basicly,
we use:
passdb pam
userdb passwd
which work fine, except for Outlook/OL Express users that are asked for
their password whenever they "send/receive"... We've had also "passdb shadow"
that somehow "fixed" this but allowed also users with
2009 Jul 07
3
Lost email where did it go...?
Hello,
I have this user that lost an email, even when the server is set up
to do lazy expunge. The mail server logs show that the message was
received, the user also read it and he did reply to it. here is the
mail.log
Jun 29 07:52:48 mx20 postfix/smtpd[19289]: 0ACD81C443B:
client=usxsl050.slb.atosorigin-asp.com[199.6.139.15]
Jun 29 07:52:48 mx20 postfix/cleanup[20259]: 0ACD81C443B:
2001 Jun 18
1
openssh-2.9p2 with PAM and Kerberos 5 on Solaris 8
Hi.
Has anyone been able to get Openssh-2.9p2 or p1 or Openssh-2.5.2p2 to
work with the Kerberos 5 PAM on Solaris 8 ? More specifically, I am
trying to get the system to work with Kerberos 5 only (no pam_unix).
My attempts to get things running result in the following messages
from ssh (client side):
> user at ssh-gateway's password:
> client: Requesting pty.
> client: Requesting
2002 Mar 26
2
SSH / PAM / Kerberos / password aging
Ok, so, things are complicated.
The PAM standard insists on password aging being done after account
authorization, which comes after user authentication. Kerberos can't
authenticate users whose passwords are expired.
So PAM_KRB5 implementations tend to return PAM_SUCCESS from
pam_krb5:pam_sm_authenticate() and arrange for pam_krb5:pam_sm_acct_mgmt()
to return PAM_NEW_AUTHTOK_REQD, as
2008 Nov 22
1
Panic in version 1.1.6
Hello,
We have seen a few of these panics in 1.1.6. It seems to happen when pine
is being used and a POP3 check occurs at the same time (but not always),
but I'm not positive this is always the case:
---
Nov 22 11:10:32 lexiconn2 dovecot: Panic: POP3(techjm): file istream.c:
line 76 (i_stream_read): assertion failed: (_stream->
skip != _stream->pos)
Nov 22 11:10:32 lexiconn2
2019 Feb 28
0
[OT?] Kerberos, PAM, NSS: if user does not exist, pam_krb5 try login?
Hmm, marco,
logname=admin uid=0 euid=0 << no no.. Uid=0 ? Thats not good, root = uid 0
User setup example.
Linux: Root uid 0
LinuxAdmin uid doest not matter as long within range of (see /etc/adduser.conf)
FIRST_UID=1000 LAST_UID=59999
Administrator is mapped through /etc/samba/smb.conf ( usermapping)
And that Admin of you, is probley migrated of ldap to AD, execpt now its not allowed
2008 Nov 04
2
dovecot-1.1.6 fatal error: userdb didn't return a home directory
dovecot version 1.1.6
>dovecot -n
# 1.1.6: /etc/dovecot/dovecot.conf
# OS: Linux 2.6.27-gentoo-r1 i686 Gentoo Base System release 2.0.0 xfs
base_dir: /var/run/dovecot/
protocols: imap pop3
listen(default): *:143
listen(imap): *:143
listen(pop3): *:110
ssl_disable: yes
disable_plaintext_auth: no
login_dir: /var/run/dovecot//login
login_executable(default): /usr/libexec/dovecot/imap-login
2011 Jan 11
4
Denying authentication
Hello,
I've been running dovecot for over 3 years now and it works
with no problems. I have it setup so that it authenticates users against
Active Directory via LDAP and so far no problems.
What I would like to know is if there is any way that I
could deny access for users trying to access email via cellphones or email
clients outside the company. I can
2018 Feb 12
0
FreeBSD Core dump: PAM authentication with Kerberos credentials (GSSAPI_MIT)
Hi!
Can you attempt to get core dump with debugging symbols with dovecot too? Currently it seems to only contain symbols from kerberos bit, which is not very useful on it's own.
Aki
> On 12 February 2018 at 17:34 Ben Woods <woodsb02 at gmail.com> wrote:
>
>
> Hi everyone,
>
> I have a repeatable core dump when running dovecot on FreeBSD in the
> specific
2013 May 09
1
Crossrealm Kerberos problems
I am running dovecot 2.1.7 on Debian Squeeze 64 bit, config information
at the end of the email.
I am working on a Kerberos/GSSAPI based setup that requires cross-realm
authentication. I have regular GSSAPI working, I can log in using
pam_krb5 with password based logins or with the GSSAPI support when
using a kerberos ticket in the default realm.
However when I attempt to authenticate using
2015 Jan 21
2
Is anyone using C7 in production yet? (sssd, nss-pam-ldapd, kerberos, etc)
Hi all,
Is anyone using C7 in production with LDAP and kerberos?
Currently all of my machines run C5 or C6 with nss-pam-ldapd or nss_ldap,
with kerberos and pam_krb5 for authentication.
Before I fire up a test VM (is it even worth it?) I wanted to check
feedback from the community.
Cheers!
Dan
2008 Dec 17
0
Autocreate wrong version for dovecot's version installed on system.
Hello,
I downloaded the dovecot-autocreate-0.1-4.6.i586.rpm made by Time
Sirainen from opensuse.org and I am getting the following messages in my
logs:
Module is for different version 1.0.15:
/usr/lib/dovecot/modules/imap/lib90_autocreate_plugin.so
Couldn't load required plugins
They appear for every attempt to autocreate a folder. So my question is
what can I do to make it work
2015 Jan 21
2
Is anyone using C7 in production yet? (sssd, nss-pam-ldapd, kerberos, etc)
> -----Original Message-----
> From: centos-bounces at centos.org [mailto:centos-bounces at centos.org] On
> Behalf Of Gordon Messmer
> Sent: den 21 januari 2015 05:47
> To: CentOS mailing list
> Subject: Re: [CentOS] Is anyone using C7 in production yet? (sssd,
nss-pam-
> ldapd, kerberos, etc)
>
> On 01/20/2015 05:26 PM, Dan Irwin wrote:
> > Before I fire up a
2009 Mar 17
1
Fatal: write() failed to info log: Interrupted system call
Last night Dovecot stopped, and the last message in the log was:
Fatal: write() failed to info log: Interrupted system call
Would you please advise?
***
# dovecot -n
# 1.1.6: /usr/local/etc/dovecot.conf
Warning: mail_extra_groups setting was often used insecurely so it is now
deprecated, use mail_access_groups or mail_privileged_group instead
# OS: FreeBSD 6.4-PRERELEASE i386
log_path: