Heloo
CENTOS7
tonda ~]# rpm -qa | grep dovecot
dovecot-2.2.18-3.qt.el7.x86_64
[root@tonda ~]#
running 1 day OK with dbg log, next day no login.
Aug 31 19:20:45 auth: Debug: auth client connected (pid=17760)
Aug 31 19:20:45 auth: Debug: client in: AUTH 1 DIGEST-MD5
service=imap secured session=DjZmp54evQAAAAAAAAAAAAAAAAAAAAAB
lip=::1 rip=::1 lport=143 rport=37565
Aug 31 19:20:45 auth: Debug: client passdb out: CONT 1
cmVhbG09IiIsbm9uY2U9Img5cDJyMmxIL3grMThVOXFMUHYxckE9PSIscW9wPSJhdXRoIixjaGFyc2V0PSJ1dGYtOCIsYWxnb3JpdGhtPSJtZDUtc2VzcyI=
Aug 31 19:20:45 auth: Debug: client in: CONT 1
Y2hhcnNldD11dGYtOCx1c2VybmFtZT0iemRlbmVrQGxob3RrYW5ldC5jeiIscmVhbG09IiIsbm9uY2U9Img5cDJyMmxIL3grMThVOXFMUHYxckE9PSIsbmM9MDAwMDAwMDEsY25vbmNlPSJOVFZrTWpnNVpURm1aV1JpWVRJek5HVTFNbUkxTmpNMU9EQTVaVFl3Tm1NPSIsZGlnZXN0LXVyaT0iaW1hcC9sb2NhbGhvc3QiLHJlc3BvbnNlPWVhNDljMjhkYzc4NjNlNmQ4NzU3YzZmMTIwYTczZWUxLHFvcD1hdXRo
(previous base64 data may contain sensitive data)
Aug 31 19:20:45 auth: Debug:
vpopmail(zde...@lhotkanet.cz,::1,<DjZmp54evQAAAAAAAAAAAAAAAAAAAAAB>):
cache hit: {SHA1}6bP5yAgOrVdgCHxfzMhH473+67g= user=zde...@lhotkanet.cz
Aug 31 19:20:45 auth: Info:
vpopmail(zde...@lhotkanet.cz,::1,<DjZmp54evQAAAAAAAAAAAAAAAAAAAAAB>):
Requested DIGEST-MD5 scheme, but we have only SHA1 (input:
6bP5yAgOrVdgCHxfzMhH473+67g=)
Aug 31 19:20:47 auth: Debug: client passdb out: FAIL 1
user=zde...@lhotkanet.cz
Aug 31 19:20:47 imap-login: Info: Aborted login (auth failed, 1 attempts
in 2 secs): user=<zde...@lhotkanet.cz>, method=DIGEST-MD5, rip=::1,
lip=::1, secured, session=<DjZmp54evQAAAAAAAAAAAAAAAAAAAAAB>
after restart dovecot, login OK
first login:
Aug 31 19:26:26 auth: Debug: auth client connected (pid=24652)
Aug 31 19:26:26 auth: Debug: client in: AUTH 1 DIGEST-MD5
service=imap secured session=8D+yu54eOAAAAAAAAAAAAAAAAAAAAAAB
lip=::1 rip=::1 lport=143 rport=37944
Aug 31 19:26:26 auth: Debug: client passdb out: CONT 1
cmVhbG09IiIsbm9uY2U9InhKVjZMR1NaYUpVRUE5L2NzVzdWS2c9PSIscW9wPSJhdXRoIixjaGFyc2V0PSJ1dGYtOCIsYWxnb3JpdGhtPSJtZDUtc2VzcyI=
Aug 31 19:26:26 auth: Debug: client in: CONT 1
Y2hhcnNldD11dGYtOCx1c2VybmFtZT0iemRlbmVrQGxob3RrYW5ldC5jeiIscmVhbG09IiIsbm9uY2U9InhKVjZMR1NaYUpVRUE5L2NzVzdWS2c9PSIsbmM9MDAwMDAwMDEsY25vbmNlPSJZelUyTjJ
FeFlXRmpNRFU0WVRSa1pqRTFNREZsTVdabU5qZGhObVV4T1dFPSIsZGlnZXN0LXVyaT0iaW1hcC9sb2NhbGhvc3QiLHJlc3BvbnNlPWQ5NTg0YjZlNzUwNTQ5YjU5Yzg1MzVjMGZiYmY4ODU4LHFvcD1hdXRo
(previous base64 data may contain sensitive data)
Aug 31 19:26:26 auth: Debug:
vpopmail(zde...@lhotkanet.cz,::1,<8D+yu54eOAAAAAAAAAAAAAAAAAAAAAAB>):
cache miss
Aug 31 19:26:26 auth-worker(24564): Debug:
vpopmail(zde...@lhotkanet.cz,::1): lookup user=zdenek domain=lhotkanet.cz
Aug 31 19:26:26 auth: Debug:
vpopmail(zde...@lhotkanet.cz,::1,<8D+yu54eOAAAAAAAAAAAAAAAAAAAAAAB>):
Generating DIGEST-MD5 from user 'zde...@lhotkanet.cz@', password
'---hide---'
Aug 31 19:26:26 auth: Debug:
vpopmail(zde...@lhotkanet.cz,::1,<8D+yu54eOAAAAAAAAAAAAAAAAAAAAAAB>):
Credentials: 6dfa0329b7f81aa669994f6b827d47aa
Aug 31 19:26:26 auth: Debug: client passdb out: CONT 1
cnNwYXV0aD03MDNhMTI4NmRiMzQ3ODNjOTQ1NTg5YmU3ZmQyOTYyZQ==
Aug 31 19:26:26 auth: Debug: client in: CONT 1 (previous
base64 data may contain sensitive data)
Aug 31 19:26:26 auth: Debug: client passdb out: OK 1
user=zde...@lhotkanet.cz
Aug 31 19:26:26 auth: Debug: master in: REQUEST 2322333697 24652
1 f2a0d197d55599c414ab7e05a07fb78c session_pid=24653
request_auth_token
Aug 31 19:26:26 auth: Debug:
vpopmail(zde...@lhotkanet.cz,::1,<8D+yu54eOAAAAAAAAAAAAAAAAAAAAAAB>):
userdb cache miss
Aug 31 19:26:26 auth-worker(24564): Debug:
vpopmail(zde...@lhotkanet.cz,::1): lookup user=zdenek domain=lhotkanet.cz
Aug 31 19:26:26 auth: Debug: master userdb out: USER 2322333697
zde...@lhotkanet.cz uid=89 gid=89
home=/home/vpopmail/domains/lhotkanet.cz/zdenek
auth_token=2b7afee9393c50257f686541cd0f5b2d625ef543
Aug 31 19:26:26 imap-login: Info: Login: user=<zde...@lhotkanet.cz>,
method=DIGEST-MD5, rip=::1, lip=::1, mpid=24653, secured,
session=<8D+yu54eOAAAAAAAAAAAAAAAAAAAAAAB>
second login
Aug 31 19:27:05 auth: Debug: auth client connected (pid=25614)
Aug 31 19:27:05 auth: Debug: client in: AUTH 1 DIGEST-MD5
service=imap secured session=gdUEvp4eggAAAAAAAAAAAAAAAAAAAAAB
lip=::1 rip=::1 lport=143 rport=38018
Aug 31 19:27:05 auth: Debug: client passdb out: CONT 1
cmVhbG09IiIsbm9uY2U9IkRaTDFJbVVzR0IyOERJR1VETTJEMHc9PSIscW9wPSJhdXRoIixjaGFyc2V0PSJ1dGYtOCIsYWxnb3JpdGhtPSJtZDUtc2VzcyI=
Aug 31 19:27:05 auth: Debug: client in: CONT 1
Y2hhcnNldD11dGYtOCx1c2VybmFtZT0iemRlbmVrQGxob3RrYW5ldC5jeiIscmVhbG09IiIsbm9uY2U9IkRaTDFJbVVzR0IyOERJR1VETTJEMHc9PSIsbmM9MDAwMDAwMDEsY25vbmNlPSJZelprT1ROak1USmhNREV3TWpBME5HTTVNRGc0TmpoaU1XRmtOREExT0RrPSIsZGlnZXN0LXVyaT0iaW1hcC9sb2NhbGhvc3QiLHJlc3BvbnNlPTExYmRlNmVhY2JhNWM5Yjk3MTlmYjdhYTRmY2E2NWNjLHFvcD1hdXRo
(previous base64 data may contain sensitive data)
Aug 31 19:27:05 auth: Debug:
vpopmail(zde...@lhotkanet.cz,::1,<gdUEvp4eggAAAAAAAAAAAAAAAAAAAAAB>):
cache hit: {CLEARTEXT.b64}---HIDE---- user=zde...@lhotkanet.cz
Aug 31 19:27:05 auth: Debug:
vpopmail(zde...@lhotkanet.cz,::1,<gdUEvp4eggAAAAAAAAAAAAAAAAAAAAAB>):
Generating DIGEST-MD5 from user 'zde...@lhotkanet.cz@', password
'---hide---'
Aug 31 19:27:05 auth: Debug:
vpopmail(zde...@lhotkanet.cz,::1,<gdUEvp4eggAAAAAAAAAAAAAAAAAAAAAB>):
Credentials: 6dfa0329b7f81aa669994f6b827d47aa
Aug 31 19:27:05 auth: Debug: client passdb out: CONT 1
cnNwYXV0aD1jMDg3ZjZiNzk1MGUwNGVhYWJlOTFhMzZlNTQzZWIyMQ==
Aug 31 19:27:05 auth: Debug: client in: CONT 1 (previous
base64 data may contain sensitive data)
Aug 31 19:27:05 auth: Debug: client passdb out: OK 1
user=zde...@lhotkanet.cz
Aug 31 19:27:05 auth: Debug: master in: REQUEST 1071775745 25614
1 a887e6238d3ad78e56387a93476a9a22 session_pid=25615
request_auth_token
Aug 31 19:27:05 auth: Debug:
vpopmail(zde...@lhotkanet.cz,::1,<gdUEvp4eggAAAAAAAAAAAAAAAAAAAAAB>):
userdb cache hit: uid=89 gid=89
home=/home/vpopmail/domains/lhotkanet.cz/zdenek
Aug 31 19:27:05 auth: Debug: master userdb out: USER 1071775745
zde...@lhotkanet.cz uid=89 gid=89
home=/home/vpopmail/domains/lhotkanet.cz/zdenek
auth_token=6ca0724c9b8dfb6fbf2fac6e2167d05922925f9c
Aug 31 19:27:05 imap-login: Info: Login: user=<zde...@lhotkanet.cz>,
method=DIGEST-MD5, rip=::1, lip=::1, mpid=25615, secured,
session=<gdUEvp4eggAAAAAAAAAAAAAAAAAAAAAB>
[root@tonda ~]# cat /etc/dovecot/toaster.conf
# Settings for 'stock' qmail-toaster
auth_cache_size = 32M
auth_mechanisms = plain login digest-md5 cram-md5
auth_username_format = %Lu
first_valid_uid = 89
first_valid_gid = 89
log_path = /var/log/dovecot.log
login_greeting = Dovecot toaster ready.
mail_plugins = $mail_plugins quota
plugin/quota = maildir
protocols = imap pop3
ssl_cert = </var/qmail/control/servercert.pem
ssl_key = </var/qmail/control/servercert.pem
# the following will likely be the default at some point
ssl_dh_parameters_length = 2048
#havrla uprava
#disable_plaintext_auth = no
auth_verbose = yes
auth_verbose_passwords = yes
auth_debug = yes
auth_debug_passwords = yes
#mail_debug = yes
namespace {
inbox = yes
location =
prefix =
# prefix = INBOX.
# Use 'prefix = INBOX.' for Courier-IMAP compatible transparent migration.
# This forces all client apps to create subfolders underneath/within
# the inbox instead of adjacent to it. It's not necessary to be that way.
# FWIW, shubes thinks this setting is annoying/rediculous/retarded.
# As a practical example, having no prefix allows mobile users to select
# which folders get synchronized. Otherwise their whole mailbox is
# synchronized, and they have no way to choose which folders they want
sync'd.
separator = .
type = private
}
passdb {
args = cache_key=%u webmail=127.0.0.1
driver = vpopmail
}
protocol imap {
imap_client_workarounds = "delay-newmail"
mail_plugins = $mail_plugins imap_quota
mail_max_userip_connections = 500
}
protocol pop3 {
pop3_client_workarounds = outlook-no-nuls oe-ns-eoh
pop3_fast_size_lookups = yes
pop3_lock_session = yes
# pop3_uidl_format = UID%u-%v
}
userdb {
args = cache_key=%u quota_template=quota_rule=*:backend=%q
driver = vpopmail
}
plugin {
quota = maildir:ignore=Trash
quota_rule = ?:storage=0
}
[root@tonda ~]#
Temporary solutions:
in /etc/dovecot/toaster.conf
enable: disable_plaintext_auth = no
in /etc/squirrelmail/config_local.php
change
$smtp_auth_mech = 'login';
no secure, but it works :D
Havrla
---------------------------------------------------------------------
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com