RE: Local lmtp proxy on backend server

[Marc Roos]

Hi Aki,

If I adapt this configuration on svr1 like this[0], should the mail not 
be delivered at svr2
passdb {
  driver = pam
  # [session=yes] [setcred=yes] [failure_show_msg=yes] 
[max_requests=<n>]
  # [cache_key=<key>] [<service name>]
  #args = dovecot
  default_fields = proxy=y host=svr2
}
passdb {
  driver = passwd
  skip = authenticated
  default_fields = proxy=y host=svr2
}


 

-----Original Message-----
From: Aki Tuomi [mailto:aki.tu...@open-xchange.com] 
Sent: 16 December 2019 06:22
To: Marc Roos; dovecot
Subject: Re: Local lmtp proxy on backend server


        On 15/12/2019 23:09 Marc Roos < m.r...@f1-outsourcing.eu> wrote: 


        I receive a local mail when I do a 'mail test' on a backend svr1 
with 
        this[0] configuration. However when I just add only one 
configuration 
        change 'lmtp_proxy = yes' I am getting these errors[1]. I would 
expect 
        this email to still be delivered locally, should this be working or 
do I 
        misunderstand the lmtp proxy functionality? 


        [0] 
        passdb { 
        args = 
        auth_verbose = default 
        default_fields = proxy=y host=svr1 
        deny = no 
        driver = pam 


        [1] 
        Dec 15 23:28:48 svr1 dovecot: lmtp(9270): Debug: none: root=, 
index=, 
        indexpvt=, control=, inbox=, alt= 
        Dec 15 23:28:48 svr1 dovecot: lmtp(9270): Connect from local 
        Dec 15 23:28:48 svr1 dovecot: auth: Debug: master in: 
        PASS#0111#011test#011service=lmtp 
        Dec 15 23:28:48 svr1 dovecot: auth: Debug: pam(test): passdb 
doesn't 
        support credential lookups 
        Dec 15 23:28:48 svr1 dovecot: auth: Debug: passdb out: 
        FAIL#0111#011reason=Configured passdbs don't support credentials 
lookups 
        Dec 15 23:28:48 svr1 dovecot: lmtp(9270): Debug: user test: Auth 
PASS 
        lookup returned temporary failure: reason=Configured passdbs don't 
        support credentials lookups 
        Dec 15 23:28:48 svr1 dovecot: lmtp(9270): Debug: auth PASS input: 
        reason=Configured passdbs don't support credentials lookups 


        dovecot-pigeonhole-2.2.36-3.el7_7.1.x86_64 
        dovecot-2.2.36-3.el7_7.1.x86_64 


PAM does not support looking up users, so you cannot use it for LMTP 
proxying. Try adding 

passdb {
  driver = passwd
  skip = authenticated
} 

after PAM block. 
---
Aki Tuomi