Bug 149673

Summary:	Dovecot fails with pam_access
Product:	[Fedora] Fedora	Reporter:	Josh Smith <irilyth+redhat>
Component:	dovecot	Assignee:	John Dennis <jdennis>
Status:	CLOSED RAWHIDE	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	3	CC:	david_kewley, tss, wtogami
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	i386
OS:	Linux
Whiteboard:
Fixed In Version:	dovecot-0.99.14-6.fc5	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2005-07-22 21:31:59 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Josh Smith 2005-02-24 23:06:43 UTC

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.5)
Gecko/20041111 Firefox/1.0

Description of problem:
If /etc/pam.d/dovecot contains

  account     required      /lib/security/$ISA/pam_access.so

then any attempt to connect to Dovecot generates errors in
/var/log/messages, like

  Feb 24 14:46:10 ilium dovecot(pam_unix)[5345]: check pass; user unknown
  Feb 24 14:46:10 ilium dovecot(pam_unix)[5345]: authentication
failure; logname= uid=0 euid=0 tty= ruser= rhost=
  Feb 24 14:46:10 ilium pam_access[5345]: couldn't get the tty name

If the pam_access line is removed, Dovecot works as expected. This is
very similar to
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=146073 and
presumably has a similar cause.

Version-Release number of selected component (if applicable):
dovecot-0.99.13-3.FC3

How reproducible:
Always

Steps to Reproduce:
1. Add "account     required      /lib/security/$ISA/pam_access.so" to
/etc/pam.d/dovecot
2. Attempt to log in to Dovecot

Actual Results:  Login failure (e.g. Thunderbird says "Login to server
<server name> failed."), and errors in /var/log/messages.

Expected Results:  Login should succeed.

Additional info:

This is very similar to
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=146073 and may
have a similar cause.

Comment 1 David Kewley 2005-02-25 00:04:09 UTC

I confirmed that the string "PAM_TTY" doesn't exist in the latest 
FC3 dovecot srpm.  The fix for bug 146073 involved adding two lines 
that included this string. 
 
I've sent Timo Sirainen, the dovecot author, an email about this, 
but I see that he's cc'd on the bug already. :)