Re: [Dovecot] unknown users (solved)

2013-01-10 Thread Averlon
Thanks for help
Signatur Averlon info

 

Mit freundlichen Grüßen / Kind Regards

Karl-Heinz Fischbach

 

Skype: khfischbach
jabber: aver...@jabber.org
Blog: averlon.posterous.com

Signatur:
Diese e-mail ist unter Umständen signiert. Die Signatur entspricht dem
Deutschen Signaturgesetz und entsprechenden europäischen Regelungen.
Important Note:
This e-mail may contain trade secrets or privileged, undisclosed or
otherwise confidential information. If you have received this e-mail in
error, you are hereby notified that any review, copying or distribution
of it is strictly prohibited. Please inform us immediately and destroy
the original transmittal.

> On 10.1.2013, at 6.53, Firma Averlon  wrote:
>
>> I know that the ldap query does not return the result I expected.
>>
>> Question is why.
>> Question is why does doevcot look at ldap with the recipients e-Mail
>> address. What does dovecot look for?
>> Yes, I know, it is a password request. But why look for a password for
>> the recipients e-Mail address user?
> http://wiki2.dovecot.org/UserDatabase/Static#Deliver
>
>



smime.p7s
Description: S/MIME Kryptografische Unterschrift


Re: [Dovecot] unknown users

2013-01-10 Thread Firma Averlon
hi,
sorry, I pull back.

who can read has probably an advantage!

Thanks.
Regards
Karl-Heinz

Am 10.01.2013 08:56, schrieb Timo Sirainen:
> On 10.1.2013, at 6.53, Firma Averlon  wrote:
>
>> I know that the ldap query does not return the result I expected.
>>
>> Question is why.
>> Question is why does doevcot look at ldap with the recipients e-Mail
>> address. What does dovecot look for?
>> Yes, I know, it is a password request. But why look for a password for
>> the recipients e-Mail address user?
> http://wiki2.dovecot.org/UserDatabase/Static#Deliver
>
>



smime.p7s
Description: S/MIME Kryptografische Unterschrift


Re: [Dovecot] unknown users

2013-01-10 Thread Averlon
Hi,
the question is what you want to tell me with this link since my dovecot
config says:

+++
userdb {
  args = uid=vmail gid=vmail home=/home/vmail/%n
  driver = static
}
+++


Signatur Averlon info

 

Mit freundlichen Grüßen / Kind Regards

Karl-Heinz Fischbach


Skype: khfischbach
jabber: aver...@jabber.org
Blog: averlon.posterous.com

Signatur:
Diese e-mail ist unter Umständen signiert. Die Signatur entspricht dem
Deutschen Signaturgesetz und entsprechenden europäischen Regelungen.
Important Note:
This e-mail may contain trade secrets or privileged, undisclosed or
otherwise confidential information. If you have received this e-mail in
error, you are hereby notified that any review, copying or distribution
of it is strictly prohibited. Please inform us immediately and destroy
the original transmittal.

Signatur Averlon info
Am 10.01.2013 08:56, schrieb Timo Sirainen:
> On 10.1.2013, at 6.53, Firma Averlon  wrote:
>
>> I know that the ldap query does not return the result I expected.
>>
>> Question is why.
>> Question is why does doevcot look at ldap with the recipients e-Mail
>> address. What does dovecot look for?
>> Yes, I know, it is a password request. But why look for a password for
>> the recipients e-Mail address user?
> http://wiki2.dovecot.org/UserDatabase/Static#Deliver
>
>



smime.p7s
Description: S/MIME Kryptografische Unterschrift


Re: [Dovecot] unknown users

2013-01-09 Thread Timo Sirainen
On 10.1.2013, at 6.53, Firma Averlon  wrote:

> I know that the ldap query does not return the result I expected.
> 
> Question is why.
> Question is why does doevcot look at ldap with the recipients e-Mail
> address. What does dovecot look for?
> Yes, I know, it is a password request. But why look for a password for
> the recipients e-Mail address user?

http://wiki2.dovecot.org/UserDatabase/Static#Deliver



Re: [Dovecot] unknown users

2013-01-09 Thread Firma Averlon
Hi,
I know that the ldap query does not return the result I expected.

Question is why.
Question is why does doevcot look at ldap with the recipients e-Mail
address. What does dovecot look for?
Yes, I know, it is a password request. But why look for a password for
the recipients e-Mail address user?

Since I have static userdb the mailbox to deliver to is defined.
I agree, since the delivery mailbox has "%n" as part of the path, the
"uid" must get looked up somewhere, probably via ldap. But how to
configure this.

+++
# 2.0.19: /etc/dovecot/dovecot.conf
# OS: Linux 3.2.0-35-generic x86_64 Ubuntu 12.04.1 LTS
auth_debug = yes
auth_mechanisms = plain login cram-md5
auth_username_format = %Lu
hostname = mail.av.loc
mail_gid = vmail
mail_location = maildir:~/Maildir
mail_privileged_group = vmail
mail_uid = vmail
managesieve_notify_capability = mailto
managesieve_sieve_capability = fileinto reject envelope
encoded-character vacation subaddress comparator-i;ascii-numeric
relational regex imap4flags copy include variables body enotify
environment mailbox date ihave
passdb {
  args = /etc/dovecot/dovecot-ldap.conf.ext
  driver = ldap
}
protocols = imap pop3 sieve
service auth {
  unix_listener /var/spool/postfix/private/auth {
group = postfix
mode = 0660
user = postfix
  }
  unix_listener auth-userdb {
group = vmail
mode = 0660
user = vmail
  }
}
ssl_cert =  On Mon, Jan 07, 2013 at 08:00:37PM +0100, Averlon wrote:
>> can anyone tell me where these "unknown users" come from.
>> Jan 7 19:43:11 f42252se postfix/pipe[14632]: 9A86C30007C: 
>> to=, relay=spamassassin, delay=2.2, 
>> delays=0.05/0/0/2.1, dsn=2.0.0, status=sent (delivered via 
>> spamassassin service)
>> Jan  7 19:43:11 f42252se postfix/qmgr[14561]: 9A86C30007C: removed
> The original message is successfully delivered to your content 
> filter.
>
>> Jan  7 19:43:11 f42252se dovecot: auth: Debug: master in:
>> USER#0111#011redm...@averlon.loc#011service=lda
>> Jan 7 19:43:11 f42252se dovecot: auth: Debug: 
>> ldap(redm...@averlon.loc): pass search: 
>> base=ou=user,dc=averlon,dc=loc scope=onelevel 
>> filter=(&(objectClass=posixAccount)(uid=redm...@averlon.loc)) 
>> fields=uid,userPassword
> Here's one of your LDAP queries.
>
>> Jan  7 19:43:11 f42252se dovecot: auth: ldap(redm...@averlon.loc):
>> *unknown user*
>> Jan  7 19:43:11 f42252se dovecot: auth: Debug: master out: NOTFOUND#0111
>> Jan  7 19:43:11 f42252se postfix/pipe[14637]: BE0AC30007F:
>> to=, relay=dovecot, delay=0.02, delays=0/0/0/0.01,
>> dsn=5.1.1, status=bounced (user unknown)
> The content filter reinjects via sendmail(1), and the pipe(8) to the 
> Dovecot LDA fails. Your LDAP query is not returning what you expect, 
> or you're not querying for the right thing.
>
>> Jan  7 19:43:11 f42252se postfix/cleanup[14631]: C279030007E:
>> message-id=<20130107184311.c2790300...@mail.av.loc>
>> Jan  7 19:43:11 f42252se postfix/qmgr[14561]: C279030007E: from=<>,
>> size=3182, nrcpt=1 (queue active)
>> Jan  7 19:43:11 f42252se postfix/bounce[14639]: BE0AC30007F: sender
>> non-delivery notification: C279030007E
>> Jan  7 19:43:11 f42252se postfix/qmgr[14561]: BE0AC30007F: removed
>> Jan  7 19:43:11 f42252se dovecot: auth: Debug: master in:
>> USER#0111#011avad...@av.loc#011service=lda
>> Jan  7 19:43:11 f42252se dovecot: auth: Debug: ldap(avad...@av.loc):
>> pass search: base=ou=user,dc=averlon,dc=loc scope=onelevel
>> filter=(&(objectClass=posixAccount)(uid=avad...@av.loc))
>> fields=uid,userPassword
> There's another one of your queries, looking up the sender address 
> for delivery of the bounce.
>
>> Jan  7 19:43:11 f42252se dovecot: auth: ldap(avad...@av.loc): *unknown user*
>> Jan  7 19:43:11 f42252se dovecot: auth: Debug: master out: NOTFOUND#0111
>> Jan  7 19:43:11 f42252se postfix/pipe[14637]: C279030007E:
>> to=, relay=dovecot, delay=0.01, delays=0/0/0/0.01,
>> dsn=5.1.1, status=bounced (user unknown)
>> Jan  7 19:43:11 f42252se postfix/qmgr[14561]: C279030007E: removed
> Same thing happens to the bounce. Being undeliverable, your mail is 
> gone.
>
>> +++
>> Tell me what you need as additional info.
> Turn off verbose logging in Postfix, as Charles pointed out. I guess 
> it's only the TLS logging that you have made verbose.
>
> Review the Dovecot wiki / wiki2 (you didn't say what version you are
> using?) page on LDAP.



smime.p7s
Description: S/MIME Kryptografische Unterschrift


Re: [Dovecot] unknown users

2013-01-08 Thread Averlon

Signatur Averlon info
In addition to my info before, here is my ldap file.

hosts = localhost

dn = cn=aadmin,dc=averlon,dc=loc

#dnpass =

sasl_bind = no

auth_bind = no

ldap_version = 3

base = ou=user,dc=averlon,dc=loc

scope = onelevel

user_attrs = homeDirectory=home,uidNumber=uid,gidNumber=gid,
=mail=/home/vmail/%n/Maildir/

user_filter = (&(objectClass=posixAccount)(uid=%u))

pass_attrs = uid=user,userPassword=password

pass_filter = (&(objectClass=posixAccount)(uid=%u))

default_pass_scheme = MD5-CRYPT

Regards
Karl-Heinz Fischbach


Am 08.01.2013 17:36, schrieb Averlon:
> Hi,
> I know that the ldap query does not return the result I expected.
>
> Question is why.
> Question is why does doevcot look at ldap with the recipients e-Mail
> address. What does dovecot look for?
> Yes, I know, it is a password request. But why look for a password for
> the recipients e-Mail address user?
>
> Since I have static userdb the mailbox to deliver to is defined.
> I agree, since the delivery mailbox has "%n" as part of the path, the
> "uid" must get looked up somewhere, probably via ldap. But how to
> configure this.
>
> +++
> # 2.0.19: /etc/dovecot/dovecot.conf
> # OS: Linux 3.2.0-35-generic x86_64 Ubuntu 12.04.1 LTS
> auth_debug = yes
> auth_mechanisms = plain login cram-md5
> auth_username_format = %Lu
> hostname = mail.av.loc
> mail_gid = vmail
> mail_location = maildir:~/Maildir
> mail_privileged_group = vmail
> mail_uid = vmail
> managesieve_notify_capability = mailto
> managesieve_sieve_capability = fileinto reject envelope
> encoded-character vacation subaddress comparator-i;ascii-numeric
> relational regex imap4flags copy include variables body enotify
> environment mailbox date ihave
> passdb {
>   args = /etc/dovecot/dovecot-ldap.conf.ext
>   driver = ldap
> }
> protocols = imap pop3 sieve
> service auth {
>   unix_listener /var/spool/postfix/private/auth {
> group = postfix
> mode = 0660
> user = postfix
>   }
>   unix_listener auth-userdb {
> group = vmail
> mode = 0660
> user = vmail
>   }
> }
> ssl_cert =  ssl_cipher_list =
> ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM
> ssl_key =  syslog_facility = avdove
> userdb {
>   args = uid=vmail gid=vmail home=/home/vmail/%n
>   driver = static
> }
> protocol lda {
>   mail_plugins = " sieve"
>   sendmail_path = /usr/sbin/sendmail
> }
> +++
>
> I have switched off
> "smtpd_tls_loglevel = 2"
>
> Be ensured I have looked at the ldap page - but I am currently lost
> where to configure what.
> Signatur Averlon info
>
>  
>
> Mit freundlichen Grüßen / Kind Regards
>
> Karl-Heinz Fischbach
>
>
> Skype: khfischbach
> jabber: aver...@jabber.org
> Blog: averlon.posterous.com
>
> Signatur:
> Diese e-mail ist unter Umständen signiert. Die Signatur entspricht dem
> Deutschen Signaturgesetz und entsprechenden europäischen Regelungen.
> Important Note:
> This e-mail may contain trade secrets or privileged, undisclosed or
> otherwise confidential information. If you have received this e-mail in
> error, you are hereby notified that any review, copying or distribution
> of it is strictly prohibited. Please inform us immediately and destroy
> the original transmittal.
>
> Signatur Averlon info
>
>  
>
> Am 08.01.2013 01:11, schrieb /dev/rob0:
>> On Mon, Jan 07, 2013 at 08:00:37PM +0100, Averlon wrote:
>>> can anyone tell me where these "unknown users" come from.
>>> Jan 7 19:43:11 f42252se postfix/pipe[14632]: 9A86C30007C: 
>>> to=, relay=spamassassin, delay=2.2, 
>>> delays=0.05/0/0/2.1, dsn=2.0.0, status=sent (delivered via 
>>> spamassassin service)
>>> Jan  7 19:43:11 f42252se postfix/qmgr[14561]: 9A86C30007C: removed
>> The original message is successfully delivered to your content 
>> filter.
>>
>>> Jan  7 19:43:11 f42252se dovecot: auth: Debug: master in:
>>> USER#0111#011redm...@averlon.loc#011service=lda
>>> Jan 7 19:43:11 f42252se dovecot: auth: Debug: 
>>> ldap(redm...@averlon.loc): pass search: 
>>> base=ou=user,dc=averlon,dc=loc scope=onelevel 
>>> filter=(&(objectClass=posixAccount)(uid=redm...@averlon.loc)) 
>>> fields=uid,userPassword
>> Here's one of your LDAP queries.
>>
>>> Jan  7 19:43:11 f42252se dovecot: auth: ldap(redm...@averlon.loc):
>>> *unknown user*
>>> Jan  7 19:43:11 f42252se dovecot: auth: Debug: master out: NOTFOUND#0111
>>> Jan  7 19:43:11 f42252se postfix/pipe[14637]: BE0AC30007F:
>>> to=, relay=dovecot, delay=0.02, delays=0/0/0/0.01,
>>> dsn=5.1.1, status=bounced (user unknown)
>> The content filter reinjects via sendmail(1), and the pipe(8) to the 
>> Dovecot LDA fails. Your LDAP query is not returning what you expect, 
>> or you're not querying for the right thing.
>>
>>> Jan  7 19:43:11 f42252se postfix/cleanup[14631]: C279030007E:
>>> message-id=<20130107184311.c2790300...@mail.av.loc>
>>> Jan  7 19:43:11 f42252se postfix/qmgr[14561]: C279030007E: from=<>,
>>> size=3182, nrcpt=1 (queue active)
>>> Jan  7 19:43:11 f42252se postfix/bounce[14639]: BE0AC30007F: sender
>>> non-delivery notif

Re: [Dovecot] unknown users

2013-01-08 Thread Averlon
Hi,
I know that the ldap query does not return the result I expected.

Question is why.
Question is why does doevcot look at ldap with the recipients e-Mail
address. What does dovecot look for?
Yes, I know, it is a password request. But why look for a password for
the recipients e-Mail address user?

Since I have static userdb the mailbox to deliver to is defined.
I agree, since the delivery mailbox has "%n" as part of the path, the
"uid" must get looked up somewhere, probably via ldap. But how to
configure this.

+++
# 2.0.19: /etc/dovecot/dovecot.conf
# OS: Linux 3.2.0-35-generic x86_64 Ubuntu 12.04.1 LTS
auth_debug = yes
auth_mechanisms = plain login cram-md5
auth_username_format = %Lu
hostname = mail.av.loc
mail_gid = vmail
mail_location = maildir:~/Maildir
mail_privileged_group = vmail
mail_uid = vmail
managesieve_notify_capability = mailto
managesieve_sieve_capability = fileinto reject envelope
encoded-character vacation subaddress comparator-i;ascii-numeric
relational regex imap4flags copy include variables body enotify
environment mailbox date ihave
passdb {
  args = /etc/dovecot/dovecot-ldap.conf.ext
  driver = ldap
}
protocols = imap pop3 sieve
service auth {
  unix_listener /var/spool/postfix/private/auth {
group = postfix
mode = 0660
user = postfix
  }
  unix_listener auth-userdb {
group = vmail
mode = 0660
user = vmail
  }
}
ssl_cert =  On Mon, Jan 07, 2013 at 08:00:37PM +0100, Averlon wrote:
>> can anyone tell me where these "unknown users" come from.
>> Jan 7 19:43:11 f42252se postfix/pipe[14632]: 9A86C30007C: 
>> to=, relay=spamassassin, delay=2.2, 
>> delays=0.05/0/0/2.1, dsn=2.0.0, status=sent (delivered via 
>> spamassassin service)
>> Jan  7 19:43:11 f42252se postfix/qmgr[14561]: 9A86C30007C: removed
> The original message is successfully delivered to your content 
> filter.
>
>> Jan  7 19:43:11 f42252se dovecot: auth: Debug: master in:
>> USER#0111#011redm...@averlon.loc#011service=lda
>> Jan 7 19:43:11 f42252se dovecot: auth: Debug: 
>> ldap(redm...@averlon.loc): pass search: 
>> base=ou=user,dc=averlon,dc=loc scope=onelevel 
>> filter=(&(objectClass=posixAccount)(uid=redm...@averlon.loc)) 
>> fields=uid,userPassword
> Here's one of your LDAP queries.
>
>> Jan  7 19:43:11 f42252se dovecot: auth: ldap(redm...@averlon.loc):
>> *unknown user*
>> Jan  7 19:43:11 f42252se dovecot: auth: Debug: master out: NOTFOUND#0111
>> Jan  7 19:43:11 f42252se postfix/pipe[14637]: BE0AC30007F:
>> to=, relay=dovecot, delay=0.02, delays=0/0/0/0.01,
>> dsn=5.1.1, status=bounced (user unknown)
> The content filter reinjects via sendmail(1), and the pipe(8) to the 
> Dovecot LDA fails. Your LDAP query is not returning what you expect, 
> or you're not querying for the right thing.
>
>> Jan  7 19:43:11 f42252se postfix/cleanup[14631]: C279030007E:
>> message-id=<20130107184311.c2790300...@mail.av.loc>
>> Jan  7 19:43:11 f42252se postfix/qmgr[14561]: C279030007E: from=<>,
>> size=3182, nrcpt=1 (queue active)
>> Jan  7 19:43:11 f42252se postfix/bounce[14639]: BE0AC30007F: sender
>> non-delivery notification: C279030007E
>> Jan  7 19:43:11 f42252se postfix/qmgr[14561]: BE0AC30007F: removed
>> Jan  7 19:43:11 f42252se dovecot: auth: Debug: master in:
>> USER#0111#011avad...@av.loc#011service=lda
>> Jan  7 19:43:11 f42252se dovecot: auth: Debug: ldap(avad...@av.loc):
>> pass search: base=ou=user,dc=averlon,dc=loc scope=onelevel
>> filter=(&(objectClass=posixAccount)(uid=avad...@av.loc))
>> fields=uid,userPassword
> There's another one of your queries, looking up the sender address 
> for delivery of the bounce.
>
>> Jan  7 19:43:11 f42252se dovecot: auth: ldap(avad...@av.loc): *unknown user*
>> Jan  7 19:43:11 f42252se dovecot: auth: Debug: master out: NOTFOUND#0111
>> Jan  7 19:43:11 f42252se postfix/pipe[14637]: C279030007E:
>> to=, relay=dovecot, delay=0.01, delays=0/0/0/0.01,
>> dsn=5.1.1, status=bounced (user unknown)
>> Jan  7 19:43:11 f42252se postfix/qmgr[14561]: C279030007E: removed
> Same thing happens to the bounce. Being undeliverable, your mail is 
> gone.
>
>> +++
>> Tell me what you need as additional info.
> Turn off verbose logging in Postfix, as Charles pointed out. I guess 
> it's only the TLS logging that you have made verbose.
>
> Review the Dovecot wiki / wiki2 (you didn't say what version you are
> using?) page on LDAP.



smime.p7s
Description: S/MIME Kryptografische Unterschrift


Re: [Dovecot] unknown users

2013-01-07 Thread /dev/rob0
On Mon, Jan 07, 2013 at 08:00:37PM +0100, Averlon wrote:
> can anyone tell me where these "unknown users" come from.

> Jan 7 19:43:11 f42252se postfix/pipe[14632]: 9A86C30007C: 
> to=, relay=spamassassin, delay=2.2, 
> delays=0.05/0/0/2.1, dsn=2.0.0, status=sent (delivered via 
> spamassassin service)
> Jan  7 19:43:11 f42252se postfix/qmgr[14561]: 9A86C30007C: removed

The original message is successfully delivered to your content 
filter.

> Jan  7 19:43:11 f42252se dovecot: auth: Debug: master in:
> USER#0111#011redm...@averlon.loc#011service=lda
> Jan 7 19:43:11 f42252se dovecot: auth: Debug: 
> ldap(redm...@averlon.loc): pass search: 
> base=ou=user,dc=averlon,dc=loc scope=onelevel 
> filter=(&(objectClass=posixAccount)(uid=redm...@averlon.loc)) 
> fields=uid,userPassword

Here's one of your LDAP queries.

> Jan  7 19:43:11 f42252se dovecot: auth: ldap(redm...@averlon.loc):
> *unknown user*
> Jan  7 19:43:11 f42252se dovecot: auth: Debug: master out: NOTFOUND#0111
> Jan  7 19:43:11 f42252se postfix/pipe[14637]: BE0AC30007F:
> to=, relay=dovecot, delay=0.02, delays=0/0/0/0.01,
> dsn=5.1.1, status=bounced (user unknown)

The content filter reinjects via sendmail(1), and the pipe(8) to the 
Dovecot LDA fails. Your LDAP query is not returning what you expect, 
or you're not querying for the right thing.

> Jan  7 19:43:11 f42252se postfix/cleanup[14631]: C279030007E:
> message-id=<20130107184311.c2790300...@mail.av.loc>
> Jan  7 19:43:11 f42252se postfix/qmgr[14561]: C279030007E: from=<>,
> size=3182, nrcpt=1 (queue active)
> Jan  7 19:43:11 f42252se postfix/bounce[14639]: BE0AC30007F: sender
> non-delivery notification: C279030007E
> Jan  7 19:43:11 f42252se postfix/qmgr[14561]: BE0AC30007F: removed
> Jan  7 19:43:11 f42252se dovecot: auth: Debug: master in:
> USER#0111#011avad...@av.loc#011service=lda
> Jan  7 19:43:11 f42252se dovecot: auth: Debug: ldap(avad...@av.loc):
> pass search: base=ou=user,dc=averlon,dc=loc scope=onelevel
> filter=(&(objectClass=posixAccount)(uid=avad...@av.loc))
> fields=uid,userPassword

There's another one of your queries, looking up the sender address 
for delivery of the bounce.

> Jan  7 19:43:11 f42252se dovecot: auth: ldap(avad...@av.loc): *unknown user*
> Jan  7 19:43:11 f42252se dovecot: auth: Debug: master out: NOTFOUND#0111
> Jan  7 19:43:11 f42252se postfix/pipe[14637]: C279030007E:
> to=, relay=dovecot, delay=0.01, delays=0/0/0/0.01,
> dsn=5.1.1, status=bounced (user unknown)
> Jan  7 19:43:11 f42252se postfix/qmgr[14561]: C279030007E: removed

Same thing happens to the bounce. Being undeliverable, your mail is 
gone.

> +++
> Tell me what you need as additional info.

Turn off verbose logging in Postfix, as Charles pointed out. I guess 
it's only the TLS logging that you have made verbose.

Review the Dovecot wiki / wiki2 (you didn't say what version you are
using?) page on LDAP.
-- 
  http://rob0.nodns4.us/ -- system administration and consulting
  Offlist GMX mail is seen only if "/dev/rob0" is in the Subject:


Re: [Dovecot] unknown users

2013-01-07 Thread Charles Marcus
Please TURN OFF verbose logging in postfix. Verbose logs are almost 
never needed, and only make debugging much harder.


On 2013-01-07 2:00 PM, Averlon  wrote:

Hi,
can anyone tell me where these "unknown users" come from.

As far as I see the fact, dovecot is asked by postfix to look for the
password of the recipient-user (why ever).

+++
Jan  7 19:43:09 f42252se postfix/smtpd[14625]: initializing the
server-side TLS engine
Jan  7 19:43:09 f42252se postfix/tlsmgr[14627]: open smtpd TLS cache
btree:/var/lib/postfix/smtpd_scache
Jan  7 19:43:09 f42252se postfix/tlsmgr[14627]: tlsmgr_cache_run_event:
start TLS smtpd session cache cleanup
Jan  7 19:43:09 f42252se postfix/smtpd[14625]: connect from
f42252ud.averlon.loc[192.168.110.165]
Jan  7 19:43:09 f42252se postfix/smtpd[14625]: setting up TLS connection
from f42252ud.averlon.loc[192.168.110.165]
Jan  7 19:43:09 f42252se postfix/smtpd[14625]:
f42252ud.averlon.loc[192.168.110.165]: TLS cipher list
"aNULL:-aNULL:ALL:+RC4:@STRENGTH"
Jan  7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:before/accept
initialization
Jan  7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 read
client hello A
Jan  7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 write
server hello A
Jan  7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 write
certificate A
Jan  7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 write
key exchange A
Jan  7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 write
server done A
Jan  7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 flush data
Jan  7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 read
client key exchange A
Jan  7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 read
finished A
Jan  7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 write
session ticket A
Jan  7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 write
change cipher spec A
Jan  7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 write
finished A
Jan  7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 flush data
Jan  7 19:43:09 f42252se postfix/smtpd[14625]: Anonymous TLS connection
established from f42252ud.averlon.loc[192.168.110.165]: TLSv1 with
cipher ECDHE-RSA-AES256-SHA (256/256 bits)
Jan  7 19:43:09 f42252se dovecot: auth: Debug: Loading modules from
directory: /usr/lib/dovecot/modules/auth
Jan  7 19:43:09 f42252se dovecot: auth: Debug: Module loaded:
/usr/lib/dovecot/modules/auth/libauthdb_ldap.so
Jan  7 19:43:09 f42252se dovecot: auth: Debug: auth client connected
(pid=14625)
Jan  7 19:43:09 f42252se dovecot: auth: Debug: client in:
AUTH#0111#011PLAIN#011service=smtp#011nologin#011lip=192.168.110.150#011rip=192.168.110.165#011secured#011resp=
Jan  7 19:43:09 f42252se dovecot: auth: Debug:
ldap(avadmin,192.168.110.165): pass search:
base=ou=user,dc=averlon,dc=loc scope=onelevel
filter=(&(objectClass=posixAccount)(uid=avadmin)) fields=uid,userPassword
Jan  7 19:43:09 f42252se dovecot: auth: Debug:
ldap(avadmin,192.168.110.165): result: uid(user)=avadmin
userPassword(password)=
Jan  7 19:43:09 f42252se dovecot: auth: Debug: client out:
OK#0111#011user=avadmin
Jan  7 19:43:09 f42252se postfix/smtpd[14625]: 9A86C30007C:
client=f42252ud.averlon.loc[192.168.110.165], sasl_method=PLAIN,
sasl_username=avadmin
Jan  7 19:43:09 f42252se postfix/cleanup[14631]: 9A86C30007C:
message-id=<50eb173b.5090...@av.loc>
Jan  7 19:43:09 f42252se postfix/qmgr[14561]: 9A86C30007C:
from=, size=1227, nrcpt=1 (queue active)
Jan  7 19:43:09 f42252se postfix/smtpd[14625]: disconnect from
f42252ud.averlon.loc[192.168.110.165]
Jan  7 19:43:11 f42252se postfix/pickup[14560]: BE0AC30007F: uid=5002
from=
Jan  7 19:43:11 f42252se postfix/cleanup[14631]: BE0AC30007F:
message-id=<50eb173b.5090...@av.loc>
Jan  7 19:43:11 f42252se postfix/qmgr[14561]: BE0AC30007F:
from=, size=1534, nrcpt=1 (queue active)
Jan  7 19:43:11 f42252se postfix/pipe[14632]: 9A86C30007C:
to=, relay=spamassassin, delay=2.2,
delays=0.05/0/0/2.1, dsn=2.0.0, status=sent (delivered via spamassassin
service)
Jan  7 19:43:11 f42252se postfix/qmgr[14561]: 9A86C30007C: removed
Jan  7 19:43:11 f42252se dovecot: auth: Debug: master in:
USER#0111#011redm...@averlon.loc#011service=lda
Jan  7 19:43:11 f42252se dovecot: auth: Debug:
ldap(redm...@averlon.loc): pass search: base=ou=user,dc=averlon,dc=loc
scope=onelevel
filter=(&(objectClass=posixAccount)(uid=redm...@averlon.loc))
fields=uid,userPassword
Jan  7 19:43:11 f42252se dovecot: auth: ldap(redm...@averlon.loc):
*unknown user*
Jan  7 19:43:11 f42252se dovecot: auth: Debug: master out: NOTFOUND#0111
Jan  7 19:43:11 f42252se postfix/pipe[14637]: BE0AC30007F:
to=, relay=dovecot, delay=0.02, delays=0/0/0/0.01,
dsn=5.1.1, status=bounced (user unknown)
Jan  7 19:43:11 f42252se postfix/cleanup[14631]: C279030007E:
message-id=<20130107184311.c2790300...@mail.av.loc>
Jan  7 19:43:11 f42252se postfix/qmgr[14561]: C279030007E: from=<>,
size=3182, nrcpt=1 (queue active)
Jan  7 19:43:11 f42252se post

[Dovecot] unknown users

2013-01-07 Thread Averlon
Hi,
can anyone tell me where these "unknown users" come from.

As far as I see the fact, dovecot is asked by postfix to look for the
password of the recipient-user (why ever).

+++
Jan  7 19:43:09 f42252se postfix/smtpd[14625]: initializing the
server-side TLS engine
Jan  7 19:43:09 f42252se postfix/tlsmgr[14627]: open smtpd TLS cache
btree:/var/lib/postfix/smtpd_scache
Jan  7 19:43:09 f42252se postfix/tlsmgr[14627]: tlsmgr_cache_run_event:
start TLS smtpd session cache cleanup
Jan  7 19:43:09 f42252se postfix/smtpd[14625]: connect from
f42252ud.averlon.loc[192.168.110.165]
Jan  7 19:43:09 f42252se postfix/smtpd[14625]: setting up TLS connection
from f42252ud.averlon.loc[192.168.110.165]
Jan  7 19:43:09 f42252se postfix/smtpd[14625]:
f42252ud.averlon.loc[192.168.110.165]: TLS cipher list
"aNULL:-aNULL:ALL:+RC4:@STRENGTH"
Jan  7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:before/accept
initialization
Jan  7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 read
client hello A
Jan  7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 write
server hello A
Jan  7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 write
certificate A
Jan  7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 write
key exchange A
Jan  7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 write
server done A
Jan  7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 flush data
Jan  7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 read
client key exchange A
Jan  7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 read
finished A
Jan  7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 write
session ticket A
Jan  7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 write
change cipher spec A
Jan  7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 write
finished A
Jan  7 19:43:09 f42252se postfix/smtpd[14625]: SSL_accept:SSLv3 flush data
Jan  7 19:43:09 f42252se postfix/smtpd[14625]: Anonymous TLS connection
established from f42252ud.averlon.loc[192.168.110.165]: TLSv1 with
cipher ECDHE-RSA-AES256-SHA (256/256 bits)
Jan  7 19:43:09 f42252se dovecot: auth: Debug: Loading modules from
directory: /usr/lib/dovecot/modules/auth
Jan  7 19:43:09 f42252se dovecot: auth: Debug: Module loaded:
/usr/lib/dovecot/modules/auth/libauthdb_ldap.so
Jan  7 19:43:09 f42252se dovecot: auth: Debug: auth client connected
(pid=14625)
Jan  7 19:43:09 f42252se dovecot: auth: Debug: client in:
AUTH#0111#011PLAIN#011service=smtp#011nologin#011lip=192.168.110.150#011rip=192.168.110.165#011secured#011resp=
Jan  7 19:43:09 f42252se dovecot: auth: Debug:
ldap(avadmin,192.168.110.165): pass search:
base=ou=user,dc=averlon,dc=loc scope=onelevel
filter=(&(objectClass=posixAccount)(uid=avadmin)) fields=uid,userPassword
Jan  7 19:43:09 f42252se dovecot: auth: Debug:
ldap(avadmin,192.168.110.165): result: uid(user)=avadmin
userPassword(password)=
Jan  7 19:43:09 f42252se dovecot: auth: Debug: client out:
OK#0111#011user=avadmin
Jan  7 19:43:09 f42252se postfix/smtpd[14625]: 9A86C30007C:
client=f42252ud.averlon.loc[192.168.110.165], sasl_method=PLAIN,
sasl_username=avadmin
Jan  7 19:43:09 f42252se postfix/cleanup[14631]: 9A86C30007C:
message-id=<50eb173b.5090...@av.loc>
Jan  7 19:43:09 f42252se postfix/qmgr[14561]: 9A86C30007C:
from=, size=1227, nrcpt=1 (queue active)
Jan  7 19:43:09 f42252se postfix/smtpd[14625]: disconnect from
f42252ud.averlon.loc[192.168.110.165]
Jan  7 19:43:11 f42252se postfix/pickup[14560]: BE0AC30007F: uid=5002
from=
Jan  7 19:43:11 f42252se postfix/cleanup[14631]: BE0AC30007F:
message-id=<50eb173b.5090...@av.loc>
Jan  7 19:43:11 f42252se postfix/qmgr[14561]: BE0AC30007F:
from=, size=1534, nrcpt=1 (queue active)
Jan  7 19:43:11 f42252se postfix/pipe[14632]: 9A86C30007C:
to=, relay=spamassassin, delay=2.2,
delays=0.05/0/0/2.1, dsn=2.0.0, status=sent (delivered via spamassassin
service)
Jan  7 19:43:11 f42252se postfix/qmgr[14561]: 9A86C30007C: removed
Jan  7 19:43:11 f42252se dovecot: auth: Debug: master in:
USER#0111#011redm...@averlon.loc#011service=lda
Jan  7 19:43:11 f42252se dovecot: auth: Debug:
ldap(redm...@averlon.loc): pass search: base=ou=user,dc=averlon,dc=loc
scope=onelevel
filter=(&(objectClass=posixAccount)(uid=redm...@averlon.loc))
fields=uid,userPassword
Jan  7 19:43:11 f42252se dovecot: auth: ldap(redm...@averlon.loc):
*unknown user*
Jan  7 19:43:11 f42252se dovecot: auth: Debug: master out: NOTFOUND#0111
Jan  7 19:43:11 f42252se postfix/pipe[14637]: BE0AC30007F:
to=, relay=dovecot, delay=0.02, delays=0/0/0/0.01,
dsn=5.1.1, status=bounced (user unknown)
Jan  7 19:43:11 f42252se postfix/cleanup[14631]: C279030007E:
message-id=<20130107184311.c2790300...@mail.av.loc>
Jan  7 19:43:11 f42252se postfix/qmgr[14561]: C279030007E: from=<>,
size=3182, nrcpt=1 (queue active)
Jan  7 19:43:11 f42252se postfix/bounce[14639]: BE0AC30007F: sender
non-delivery notification: C279030007E
Jan  7 19:43:11 f42252se postfix/qmgr[14561]: BE0AC30007F: removed
Jan  7 19:43:11 f