Re: [Dovecot] Problem with sasl auth with postfix...

2009-03-13 Thread Timo Sirainen
On Fri, 2009-03-13 at 18:35 -0400, Douglas M. Stanley wrote:
> > Oh. I've heard this before! You've set auth_process_size to 64. Why?
> > It's too low and causes NSS plugin loading to fail silently and
> > return
> > "User doesn't exist" error. Wonder if I could detect this somehow..

Done: http://hg.dovecot.org/dovecot-1.1/rev/abef63c0613b

It now logs:

getpwnam() failed for some reason. Is auth_process_size set to too low?

> Huh, how odd...well the reason was it's in a VM with only 128mb total
> memory, so I set it lower. Should have known it was something silly like
> that that I changed from my original config and didn't think it would
> matter!

The *_process_size are VSZ limits, not RSS limits. So if you're using an
OS which uses address space layout randomization or something else that
causes each process to take about 64 MB of VSZ simply at startup, you
really shouldn't set the limits very low.


signature.asc
Description: This is a digitally signed message part


Re: [Dovecot] Problem with sasl auth with postfix...

2009-03-13 Thread Douglas M. Stanley
- "Timo Sirainen"  wrote:

> On Fri, 2009-03-13 at 17:50 -0400, Douglas M. Stanley wrote:
> > > > > Mar 13 19:16:30 mailserver dovecot: auth(default): User
> doesn't
> > > exist: postfix
> > > 
> > > Does your Postfix installation actually work? What user do you
> see
> > > running the Postfix processes?
> > 
> > Yep, works fine. The user running the postfix processes is postfix:
> > 
> > root  4219 1  0 19:28 ?00:00:00
> /usr/lib/postfix/master
> > postfix   4302  4219  0 19:48 ?00:00:00 qmgr -l -t fifo -u
> 
> Oh. I've heard this before! You've set auth_process_size to 64. Why?
> It's too low and causes NSS plugin loading to fail silently and
> return
> "User doesn't exist" error. Wonder if I could detect this somehow..

Huh, how odd...well the reason was it's in a VM with only 128mb total
memory, so I set it lower. Should have known it was something silly like
that that I changed from my original config and didn't think it would
matter!

Thanks so much!

Doug



Re: [Dovecot] Problem with sasl auth with postfix...

2009-03-13 Thread Timo Sirainen
On Fri, 2009-03-13 at 17:50 -0400, Douglas M. Stanley wrote:
> > > > Mar 13 19:16:30 mailserver dovecot: auth(default): User doesn't
> > exist: postfix
> > 
> > Does your Postfix installation actually work? What user do you see
> > running the Postfix processes?
> 
> Yep, works fine. The user running the postfix processes is postfix:
> 
> root  4219 1  0 19:28 ?00:00:00 /usr/lib/postfix/master
> postfix   4302  4219  0 19:48 ?00:00:00 qmgr -l -t fifo -u

Oh. I've heard this before! You've set auth_process_size to 64. Why?
It's too low and causes NSS plugin loading to fail silently and return
"User doesn't exist" error. Wonder if I could detect this somehow..



signature.asc
Description: This is a digitally signed message part


Re: [Dovecot] Problem with sasl auth with postfix...

2009-03-13 Thread Douglas M. Stanley
- "Timo Sirainen"  wrote:

> On Fri, 2009-03-13 at 16:40 -0400, Douglas M. Stanley wrote:
> > Yep, postfix is installed:
> > 
> > mailserver:/etc/postfix# postconf -h mail_owner
> > postfix
> ..
> > > Mar 13 19:16:30 mailserver dovecot: auth(default): User doesn't
> exist: postfix
> 
> Does your Postfix installation actually work? What user do you see
> running the Postfix processes?

Yep, works fine. The user running the postfix processes is postfix:

root  4219 1  0 19:28 ?00:00:00 /usr/lib/postfix/master
postfix   4302  4219  0 19:48 ?00:00:00 qmgr -l -t fifo -u
postfix   4319  4219  0 19:49 ?00:00:00 tlsmgr -l -t unix -u -c
postfix   4352  4219  0 21:27 ?00:00:00 pickup -l -t fifo -u -c

Thanks,
Doug



Re: [Dovecot] Problem with sasl auth with postfix...

2009-03-13 Thread Timo Sirainen
On Fri, 2009-03-13 at 16:40 -0400, Douglas M. Stanley wrote:
> Yep, postfix is installed:
> 
> mailserver:/etc/postfix# postconf -h mail_owner
> postfix
..
> > Mar 13 19:16:30 mailserver dovecot: auth(default): User doesn't exist: 
> > postfix

Does your Postfix installation actually work? What user do you see
running the Postfix processes?



signature.asc
Description: This is a digitally signed message part


Re: [Dovecot] Problem with sasl auth with postfix...

2009-03-13 Thread Douglas M. Stanley
- "Pascal Volk"  wrote:

> On 13.03.2009 21:40 Douglas M. Stanley wrote:
> > Yep, postfix is installed:
> > 
> > mailserver:/etc/postfix# postconf -h mail_owner
> > postfix
> 
> Please don't top post.
> 
> I've got no clue what it may be. Please provide the output from
> `dovecot -n`.
> 
Here it is...

auth default:
  mechanisms: plain login digest-md5 cram-md5
  user: dovecot-auth
  debug: yes
  process_size: 64
  passdb:
driver: sql
args: /etc/dovecot/dovecot-sql.conf
  userdb:
driver: sql
args: /etc/dovecot/dovecot-sql.conf
  userdb:
driver: prefetch
  socket:
type: listen
client:
  path: /var/spool/postfix/private/auth
  mode: 438

> 
> Regards,
> Pascal
> -- 
> The trapper recommends today: c01dcofe.0907...@localdomain.org

Thanks,
Doug




Re: [Dovecot] Problem with sasl auth with postfix...

2009-03-13 Thread Pascal Volk
On 13.03.2009 21:40 Douglas M. Stanley wrote:
> Yep, postfix is installed:
> 
> mailserver:/etc/postfix# postconf -h mail_owner
> postfix

Please don't top post.

I've got no clue what it may be. Please provide the output from
`dovecot -n`.


Regards,
Pascal
-- 
The trapper recommends today: c01dcofe.0907...@localdomain.org


Re: [Dovecot] Problem with sasl auth with postfix...

2009-03-13 Thread Douglas M. Stanley
Yep, postfix is installed:

mailserver:/etc/postfix# postconf -h mail_owner
postfix

Thanks,
Doug

- Original Message -
From: "Pascal Volk" 
To: "Douglas M. Stanley" 
Cc: "Dovecot Mailing List" 
Sent: Friday, March 13, 2009 4:37:07 PM GMT -05:00 US/Canada Eastern
Subject: Re: [Dovecot] Problem with sasl auth with postfix...

On 13.03.2009 21:01 Douglas M. Stanley wrote:
> Hello list,
> 
> I'm running into some problems, and I couldn't find any info about this 
> anywhere on the net.
> 
> I recently set up a new debian lenny machine, and used my notes from the last 
> debian etch
> machine I set up, which basically is for postfix + dovecot for sasl auth.
> 
> On my old etch box, in the dovecot.conf, in the auth default section, I have a
>   socket listen {
> client {
>   path = /var/spool/postfix/private/auth
>   mode = 0660
>   user = postfix
>   group = postfix
> }
>   }
> 
> However, if I use the same config on my lenny setup, dovecot fails to start, 
> and I see this
> in my logs:
> 
> Mar 13 19:16:30 mailserver dovecot: Dovecot v1.0.15 starting up
> Mar 13 19:16:30 mailserver dovecot: auth(default): User doesn't exist: postfix
> Mar 13 19:16:30 mailserver dovecot: Auth process died too early - shutting 
> down
> Mar 13 19:16:30 mailserver dovecot: child 4623 (auth) returned error 89
> 
> Now if I comment out the user and group lines, it works fine, but the socket 
> is
> owned by root, and so I have to change the mode line so that it's world 
> readable
> in order for postfix to use it.
> 
> The version of dovecot in etch is: 1.0.rc15-2etch4
> and the version in lenny is: 1.0.15-2.3
> 
> Any ideas why this might be happening? Did the syntax to do this change 
> between those
> versions? Any input? I guess I don't mind leaving it world readable, but I 
> wasted an
> entire morning trying everything to get it to work, so I guess I'm hoping 
> some one
> atleast has an answer as to why it doesn't work.

Is Postfix installed on this system? If so, what shows the command
postconf -h mail_owner


Regards,
Pascal
-- 
The trapper recommends today: c01dcofe.0907...@localdomain.org





Re: [Dovecot] Problem with sasl auth with postfix...

2009-03-13 Thread Pascal Volk
On 13.03.2009 21:01 Douglas M. Stanley wrote:
> Hello list,
> 
> I'm running into some problems, and I couldn't find any info about this 
> anywhere on the net.
> 
> I recently set up a new debian lenny machine, and used my notes from the last 
> debian etch
> machine I set up, which basically is for postfix + dovecot for sasl auth.
> 
> On my old etch box, in the dovecot.conf, in the auth default section, I have a
>   socket listen {
> client {
>   path = /var/spool/postfix/private/auth
>   mode = 0660
>   user = postfix
>   group = postfix
> }
>   }
> 
> However, if I use the same config on my lenny setup, dovecot fails to start, 
> and I see this
> in my logs:
> 
> Mar 13 19:16:30 mailserver dovecot: Dovecot v1.0.15 starting up
> Mar 13 19:16:30 mailserver dovecot: auth(default): User doesn't exist: postfix
> Mar 13 19:16:30 mailserver dovecot: Auth process died too early - shutting 
> down
> Mar 13 19:16:30 mailserver dovecot: child 4623 (auth) returned error 89
> 
> Now if I comment out the user and group lines, it works fine, but the socket 
> is
> owned by root, and so I have to change the mode line so that it's world 
> readable
> in order for postfix to use it.
> 
> The version of dovecot in etch is: 1.0.rc15-2etch4
> and the version in lenny is: 1.0.15-2.3
> 
> Any ideas why this might be happening? Did the syntax to do this change 
> between those
> versions? Any input? I guess I don't mind leaving it world readable, but I 
> wasted an
> entire morning trying everything to get it to work, so I guess I'm hoping 
> some one
> atleast has an answer as to why it doesn't work.

Is Postfix installed on this system? If so, what shows the command
postconf -h mail_owner


Regards,
Pascal
-- 
The trapper recommends today: c01dcofe.0907...@localdomain.org