No, they had default login class. I'm still trying to find out some pattern
when and why this behavior occurs. When I create new account with `useradd
accountname` then set a password with `passwd accountname` and then
`doveadm auth test accountname`, everything seems good. Then `usermod -L
default accountname` and doveadm auth failed. When I created new account
with adduser - doveadm failed.
An old account on the system works fine no matter in which loggin class I
move it. I tried to move my account to other class without any luck.
Here is my login.conf. I can provide other info, too. Thanks for your time.
$ cat /etc/login.conf
# $OpenBSD: login.conf.in,v 1.6 2012/02/06 21:25:13 sobrado Exp $
#
# Sample login.conf file. See login.conf(5) for details.
#
#
# Standard authentication styles:
#
# krb5-or-pwd First try Kerberos V password, then local password file
# passwd Use only the local password file
# krb5 Use only the Kerberos V password
# chpass Do not authenticate, but change users password (change
# the YP password if the user has one, else change the
# local password)
# lchpass Do not login; change user's local password instead
# radius Use radius authentication
# reject Use rejected authentication
# skey Use S/Key authentication
# activ ActivCard X9.9 token authentication
# crypto CRYPTOCard X9.9 token authentication
# snk Digital Pathways SecureNet Key authentication
# tis TIS Firewall Toolkit authentication
# token Generic X9.9 token authentication
# yubikey YubiKey authentication
#
# Default allowed authentication styles
auth-defaults:auth=passwd,skey:
# Default allowed authentication styles for authentication type ftp
auth-ftp-defaults:auth-ftp=passwd:
#
# The default values
# To alter the default authentication types change the line:
# :tc=auth-defaults:\
# to be read something like: (enables passwd, "myauth", and activ)
# :auth=passwd,myauth,activ:\
# Any value changed in the daemon class should be reset in default
# class.
#
default:\
:path=/usr/bin /bin /usr/sbin /sbin /usr/X11R6/bin /usr/local/bin
/usr/local/sbin:\
:umask=022:\
:datasize-max=512M:\
:datasize-cur=512M:\
:maxproc-max=256:\
:maxproc-cur=128:\
:openfiles-cur=512:\
:stacksize-cur=4M:\
:localcipher=blowfish,6:\
:ypcipher=old:\
:tc=auth-defaults:\
:tc=auth-ftp-defaults:
#
# Settings used by /etc/rc and root
# This must be set properly for daemons started as root by inetd as well.
# Be sure reset these values back to system defaults in the default class!
#
daemon:\
:ignorenologin:\
:datasize=infinity:\
:maxproc=infinity:\
:openfiles-cur=128:\
:stacksize-cur=8M:\
:localcipher=blowfish,8:\
:tc=default:
dovecot:\
:openfiles-cur=512:\
:openfiles-max=2048:\
:tc=daemon:
#
# Staff have fewer restrictions and can login even when nologins are set.
#
staff:\
:datasize-cur=2048M:\
:datasize-max=infinity:\
:maxproc-max=512:\
:maxproc-cur=128:\
:ignorenologin:\
:requirehome@:\
:tc=default:
#
# Authpf accounts get a special motd and shell
#
authpf:\
:welcome=/etc/motd.authpf:\
:shell=/usr/sbin/authpf:\
:tc=default:
#
# Override resource limits for certain daemons started by rc.d(8)
#
bgpd:\
:openfiles-cur=512:\
:tc=daemon:
2014-03-09 15:19 GMT+02:00 Alexander Hall <alexan...@beard.se>:
On 03/08/14 23:30, Àòàíàñ Âëàäèìèðîâ wrote:
>
>> Hi,
>> I have a very strange problem with one user. After upgrade from "home
>> made"
>> release today dovecot stoped authenticating my account. Root and other
>> accounts are working well. I also made two new accounts which worked as
>> they should. It seems that for dovecot my account (vlado) not exists.
>> Thanks for any help.
>>
>
> Do the "two new accounts" have the same login class (=staff)? I would
> check the various auth= and auth-*= settings in /etc/login.conf.
>
> /Alexander
>
> In case the error message is a bit misleading
>
>
>
>> #########################
>> /var/log/maillog:
>>
>> Mar 8 23:40:20 ns dovecot: auth-worker(2646): bsdauth(vlado): unknown
>> user
>> (given password: Qazxswe00)
>> Mar 8 23:42:12 ns dovecot: auth-worker(6589): bsdauth(vlado): unknown
>> user
>> (given password: Qzxswe00)
>> Mar 8 23:42:40 ns dovecot: auth-worker(6589): bsdauth(vlado): unknown
>> user
>> (given password: Qawe00)
>> Mar 8 23:43:15 ns dovecot: auth-worker(6589): bsdauth(vlado): unknown
>> user
>> (given password: Qaze00)
>> Mar 8 23:43:36 ns dovecot: auth-worker(6589): bsdauth(vlado): unknown
>> user
>> (given password: dsd)
>>
>> #########################
>> /etc/passwd
>> ........................
>> _dovecot:*:518:518:Dovecot Account:/nonexistent:/sbin/nologin
>> _dovenull:*:666:666:Dovecot Login User:/nonexistent:/sbin/nologin
>> _netflow:*:575:575:flow-tools user:/var/empty:/sbin/nologin
>> _nfcapd:*:649:649:nfcapd user:/nonexistent:/sbin/nologin
>> vlado:*:1000:1000:Atanas Vladimirov:/home/vlado:/bin/ksh
>> ........................
>>
>> #########################
>> /etc/master.passwd
>> _netflow:*************:575:575:daemon:0:0:flow-tools
>> user:/var/empty:/sbin/nologin
>> _nfcapd:*************:649:649:daemon:0:0:nfcapd
>> user:/nonexistent:/sbin/nologin
>> vlado:$2a$06$iVr1p*hmfMLW:1000:1000:staff:0:0:Atanas
>> Vladimirov:/home/vlado:/bin/ksh
>>
>> #########################
>> $ dovecot -n
>>
>> # 2.2.10: /etc/dovecot/dovecot.conf
>> # OS: OpenBSD 5.5 i386
>> auth_debug = yes
>> auth_verbose = yes
>> auth_verbose_passwords = plain
>> first_valid_uid = 1000
>> imap_client_workarounds = delay-newmail tb-extra-mailbox-sep tb-lsub-flags
>> mail_debug = yes
>> mbox_write_locks = fcntl
>> mmap_disable = yes
>> namespace inbox {
>> inbox = yes
>> location =
>> mailbox Drafts {
>> special_use = \Drafts
>> }
>> mailbox Junk {
>> special_use = \Junk
>> }
>> mailbox Sent {
>> special_use = \Sent
>> }
>> mailbox "Sent Messages" {
>> special_use = \Sent
>> }
>> mailbox Trash {
>> special_use = \Trash
>> }
>> prefix =
>> }
>> passdb {
>> driver = bsdauth
>> }
>> pop3_client_workarounds = outlook-no-nuls oe-ns-eoh
>> ssl = required
>> ssl_cert = </etc/ssl/dovecotcert.pem
>> ssl_key = </etc/ssl/private/dovecot.pem
>> userdb {
>> driver = passwd
>> }
>>
>> #########################
>> dmesg:
>>
>> OpenBSD 5.5-current (GENERIC.MP) #0: Sat Mar 8 14:41:24 EET 2014
>> r...@i386.bsdbg.net:/usr/src/sys/arch/i386/compile/GENERIC.MP
>> cpu0: AMD Athlon(tm) 64 X2 Dual Core Processor 4400+ ("AuthenticAMD"
>> 686-class, 512KB L2 cache) 2.31 GHz
>> cpu0:
>> FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,
>> CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,HTT,NXE,MMXX,FFXSR,LON
>> G,3DNOW2,3DNOW,SSE3,CX16,LAHF,CMPLEG,SVM,EAPICSP,AMCR8,3DNOWP
>> real mem = 2129096704 (2030MB)
>> avail mem = 2081988608 (1985MB)
>> mainbus0 at root
>> bios0 at mainbus0: AT/286+ BIOS, date 06/02/10, BIOS32 rev. 0 @ 0xf2030,
>> SMBIOS rev. 2.4 @ 0xf0000 (70 entries)
>> bios0: vendor Phoenix Technologies, LTD version "ASUS M2NPV-VM ACPI BIOS
>> Revision 5005" date 06/02/2010
>> bios0: ASUSTek Computer INC. M2NPV-VM
>> acpi0 at bios0: rev 2
>> acpi0: sleep states S0 S1 S3 S4 S5
>> acpi0: tables DSDT FACP MCFG APIC
>> acpi0: wakeup devices HUB0(S5) XVRA(S5) XVRB(S5) XVRC(S5) UAR1(S5)
>> UAR2(S5)
>> PS2M(S4) PS2K(S4) USB0(S4) USB2(S4) AZAD(S5) MMAC
>> (S5) MMCI(S5)
>> acpitimer0 at acpi0: 3579545 Hz, 24 bits
>> acpimcfg0 at acpi0 addr 0xe0000000, bus 0-255
>> acpimadt0 at acpi0 addr 0xfee00000: PC-AT compat
>> cpu0 at mainbus0: apid 0 (boot processor)
>> mtrr: Pentium Pro MTRR support, 8 var ranges, 88 fixed ranges
>> cpu0: apic clock running at 200MHz
>> cpu1 at mainbus0: apid 1 (application processor)
>> cpu1: AMD Athlon(tm) 64 X2 Dual Core Processor 4400+ ("AuthenticAMD"
>> 686-class, 512KB L2 cache) 2.31 GHz
>> cpu1:
>> FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,
>> CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,HTT,NXE,MMXX,FFXSR,LON
>> G,3DNOW2,3DNOW,SSE3,CX16,LAHF,CMPLEG,SVM,EAPICSP,AMCR8,3DNOWP
>> ioapic0 at mainbus0: apid 4 pa 0xfec00000, version 11, 24 pins
>> ioapic0: misconfigured as apic 0, remapped to apid 4
>> acpiprt0 at acpi0: bus 0 (PCI0)
>> acpiprt1 at acpi0: bus 1 (HUB0)
>> acpicpu0 at acpi0
>> acpicpu1 at acpi0
>> acpitz0 at acpi0: critical temperature is 75 degC
>> acpibtn0 at acpi0: PWRB
>> aibs0 at acpi0 RTMP RVLT RFAN
>> aibs0: FSIF: misformed package: 3/5, assume 5
>> bios0: ROM list: 0xc0000/0xec00 0xd4000/0x1000 0xd5000/0x1000
>> pci0 at mainbus0 bus 0: configuration mode 1 (bios)
>> "NVIDIA C51 Host" rev 0xa2 at pci0 dev 0 function 0 not configured
>> "NVIDIA C51 Memory" rev 0xa2 at pci0 dev 0 function 2 not configured
>> "NVIDIA C51 Memory" rev 0xa2 at pci0 dev 0 function 3 not configured
>> "NVIDIA C51 Memory" rev 0xa2 at pci0 dev 0 function 4 not configured
>> "NVIDIA C51 Memory" rev 0xa2 at pci0 dev 0 function 5 not configured
>> "NVIDIA C51 Memory" rev 0xa2 at pci0 dev 0 function 6 not configured
>> "NVIDIA C51 Memory" rev 0xa2 at pci0 dev 0 function 7 not configured
>> vga1 at pci0 dev 5 function 0 "NVIDIA GeForce 6150" rev 0xa2
>> wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
>> wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
>> "NVIDIA MCP51 Host" rev 0xa2 at pci0 dev 9 function 0 not configured
>> pcib0 at pci0 dev 10 function 0 "NVIDIA MCP51 ISA" rev 0xa3
>> nviic0 at pci0 dev 10 function 1 "NVIDIA MCP51 SMBus" rev 0xa3
>> iic0 at nviic0
>> spdmem0 at iic0 addr 0x50: 1GB DDR2 SDRAM non-parity PC2-5300CL5
>> spdmem1 at iic0 addr 0x51: 1GB DDR2 SDRAM non-parity PC2-5300CL5
>> iic1 at nviic0
>> "NVIDIA MCP51 Memory" rev 0xa3 at pci0 dev 10 function 2 not configured
>> pciide0 at pci0 dev 13 function 0 "NVIDIA MCP51 IDE" rev 0xa1: DMA,
>> channel
>> 0 configured to compatibility, channel 1 configur
>> ed to compatibility
>> wd0 at pciide0 channel 0 drive 0: <WDC WD800JB-00ETA0>
>> wd0: 16-sector PIO, LBA48, 76319MB, 156301488 sectors
>> wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 5
>> pciide0: channel 1 disabled (no drives)
>> pciide1 at pci0 dev 14 function 0 "NVIDIA MCP51 SATA" rev 0xa1: DMA
>> pciide1: using apic 4 int 20 for native-PCI interrupt
>> pciide2 at pci0 dev 15 function 0 "NVIDIA MCP51 SATA" rev 0xa1: DMA
>> pciide2: using apic 4 int 20 for native-PCI interrupt
>> ppb0 at pci0 dev 16 function 0 "NVIDIA MCP51" rev 0xa2
>> pci1 at ppb0 bus 1
>> em0 at pci1 dev 8 function 0 "Intel 82540EM" rev 0x02: apic 4 int 16,
>> address 00:07:e9:10:32:a8
>> em1 at pci1 dev 9 function 0 "Intel 82540EM" rev 0x02: apic 4 int 17,
>> address 00:07:e9:10:2a:20
>> pchb0 at pci0 dev 24 function 0 "AMD AMD64 0Fh HyperTransport" rev 0x00
>> pchb1 at pci0 dev 24 function 1 "AMD AMD64 0Fh Address Map" rev 0x00
>> pchb2 at pci0 dev 24 function 2 "AMD AMD64 0Fh DRAM Cfg" rev 0x00
>> kate0 at pci0 dev 24 function 3 "AMD AMD64 0Fh Misc Cfg" rev 0x00: core
>> rev
>> BH-G1
>> isa0 at pcib0
>> isadma0 at isa0
>> com0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
>> com0: console
>> com1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo
>> pckbc0 at isa0 port 0x60/5
>> pcppi0 at isa0 port 0x61
>> spkr0 at pcppi0
>> lpt0 at isa0 port 0x378/4 irq 7
>> it0 at isa0 port 0x2e/2: IT8716F rev 1, EC port 0x290
>> npx0 at isa0 port 0xf0/16: reported by CPUID; using exception 16
>> vscsi0 at root
>> scsibus0 at vscsi0: 256 targets
>> softraid0 at root
>> scsibus1 at softraid0: 256 targets
>> root on wd0a (b198b672451a33ab.a) swap on wd0b dump on wd0b
