Fedora Account System
Red Hat Associate
Red Hat Customer
Description of problem: Logins fail, with configuration inherited from F10. Version-Release number of selected component (if applicable): dovecot-1.2.0-3.fc11.i586 pam-1.0.91-6.fc11.i586 How reproducible: Synchronous Steps to Reproduce: 1. Install dovecot, use authentication for passdb pam Actual results: Login fails Expected results: Login succeeds Additional info: This definitely used to work. The strace of dovecot-auth shows that it talks to an AF_NETLINK socket before failing. Why? A mystery.
Created attachment 351509 [details] dovecot.conf
Created attachment 351510 [details] maillog
taking back previous comment, it was result of misconfiguration
it does not work in 1.1.x nor in 1.2.x auth_default_realm is the one making trouble here, it works if this variable is removed from dovecot.conf Also I'm not completely sure auth_default_realm can be used together with pam authentication, what is your use case, why do you use it?
In my case auth_default_realm is not set normally. You can see in maillog - a successful login using old dovecot - login failure - switch to default realm - switch back I'll reupload a new set of maillog and dovecot.conf.
Created attachment 351651 [details] dovecot.conf
Created attachment 351652 [details] maillog
thats odd, I've used exactly your dovecot.conf only replacing ip adrres in listen section and it works for me. could you try: telnet <dovecot_server_ip> 143 and enter: a login <some_username> <password> if it succeeds? Also, do you have any selinux related messages? I've tried this on Fedora 10, I'll try it on rawhide now
Manual login over telnet works. So it looks like a library broke the client, Sylpheed. The MUA itself wasn't updated since sylpheed-2.6.0-4.fc11.x86_64, but it runs on Rawhide now. It sends the authentication scrambled, so I cannot tell if it does that right.
I'm moving this from Sylpheed to Claws, because at least Claws was rebuilt for F12, and I expect more attention to this issue on Claws front. HOWEVER, both are broken in the same way. The log below is Claws failing with two different mailservers, dovecot and Communigate. Thunderbird works, so it's not as if I entered the password wrong. Maybe Sylpheed and Claws use a system library for IMAP that went bad in Rawhide. Versions: claws-mail-3.7.2-1.fc12.x86_64 [12:15:32] IMAP4< * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE STARTTLS AUTH=PLAIN] Dovecot ready. * IMAP connection is un-authenticated [12:15:42] IMAP4> 1 CAPABILITY [12:15:42] IMAP4< * CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE SORT THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT IDLE CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH STARTTLS AUTH=PLAIN [12:15:42] IMAP4< 1 OK Capability completed. [12:15:42] IMAP4> Logging zaitcev to mailhost.zaitcev.lan using LOGIN [12:15:45] IMAP4< Authentication failed. ** IMAP error on mailhost.zaitcev.lan: LOGIN error [12:15:45] IMAP4< Error logging in to mailhost.zaitcev.lan [12:16:20] IMAP4> Logging zaitcev to mailhost.zaitcev.lan using LOGIN [12:16:23] IMAP4< Authentication failed. ** IMAP error on mailhost.zaitcev.lan: LOGIN error [12:16:23] IMAP4< Error logging in to mailhost.zaitcev.lan [12:16:27] IMAP4> 4 LOGOUT [12:16:33] IMAP4< * BYE Logging out [12:16:33] IMAP4< 4 OK Logout completed. [12:16:40] IMAP4< * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE STARTTLS AUTH=PLAIN] Dovecot ready. * IMAP connection is un-authenticated [12:16:43] IMAP4> 1 LOGOUT [12:16:43] IMAP4< * BYE Logging out [12:16:43] IMAP4< 1 OK Logout completed. [12:22:04] IMAP4< * OK CommuniGate Pro IMAP Server 4.3.6 at phact.unm.edu ready * IMAP connection is un-authenticated [12:22:17] IMAP4> 1 CAPABILITY [12:22:17] IMAP4< * CAPABILITY IMAP4 IMAP4REV1 ACL NAMESPACE UIDPLUS IDLE LITERAL+ QUOTA ID MULTIAPPEND LISTEXT CHILDREN BINARY LOGIN-REFERRALS STARTTLS AUTH=LOGIN AUTH=PLAIN [12:22:17] IMAP4< 1 OK completed [12:22:17] IMAP4> Logging zaitcev to mail.unm.edu using LOGIN [12:22:19] IMAP4< incorrect password or account name ** IMAP error on mail.unm.edu: LOGIN error [12:22:19] IMAP4< Error logging in to mail.unm.edu [12:22:33] IMAP4> Logging zaitcev to mail.unm.edu using LOGIN [12:22:35] IMAP4< incorrect password or account name ** IMAP error on mail.unm.edu: LOGIN error [12:22:35] IMAP4< Error logging in to mail.unm.edu [12:22:37] IMAP4> 4 LOGOUT [12:22:37] IMAP4< * BYE CommuniGate Pro IMAP closing connection [12:22:37] IMAP4< 4 OK completed
Created attachment 354378 [details] yum.log One of these things (on July 20) fixed it. Claws-mail itself was not updated.
Pete, thanks for the feedback. What's the status of Sylpheed? Are you still seeing problems there?
Sylpheed and Claws Mail don't share any external IMAP code/library. Sylpheed includes its implementation in the built-in "libsylph" (which is not available in Fedora as a stand-alone library).
Sylpheed now works too, so the "fix" was shared. It's probably something in the way the hash of password was generated. Unfortunately, I already deleted the pcap file, so I cannot compare.