I wrote mail as different used few minutes ago... Here is better result
from strace.
23:56:00.390607 close(18) = 0
23:56:00.390792 open("/usr/lib/sasl2/libplain.la", O_RDONLY) = 18
23:56:00.390858 close(18) = 0
23:56:00.390904 open("/usr/lib/sasl2/libldapdb.la", O_RDONLY) = 18
23:56:00.390963 fstat64(18, {st_mode=S_IFREG|0644, st_size=848, ...}) = 0
23:56:00.391050 mmap2(NULL, 4096, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_ANONYMOUS, -1, 0xffaf273c) = 0xf7fb2000
23:56:00.391103 read(18, "# libldapdb.la - a libtool libra"..., 4096) = 848
23:56:00.391173 close(18) = 0
23:56:00.391215 munmap(0xf7fb2000, 4096) = 0
23:56:00.391272 open("/usr/lib/sasl2/libldapdb.so.2", O_RDONLY) = 18
23:56:00.391341 read(18,
"\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\300\17"..., 512) = 512
23:56:00.391404 fstat64(18, {st_mode=S_IFREG|0644, st_size=14224, ...}) = 0
23:56:00.391483 mmap2(NULL, 17112, PROT_READ|PROT_EXEC,
MAP_PRIVATE|MAP_DENYWRITE, 18, 0) = 0xf7584000
23:56:00.391537 mmap2(0xf7588000, 4096, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 18, 0x3) = 0xf7588000
23:56:00.391591 close(18) = 0
23:56:00.391760 open("/usr/lib/sasl2/libldapdb.la", O_RDONLY) = 18
23:56:00.391817 close(18) = 0
23:56:00.391862 getdents(16, /* 0 entries */, 4096) = 0
23:56:00.391910 close(16) = 0
23:56:00.391992 geteuid32() = 0
23:56:00.392100 socket(PF_NETLINK, SOCK_RAW, 0) = 16
23:56:00.392155 bind(16, {sa_family=AF_NETLINK, pid=0, groups=00000000},
12) = 0
23:56:00.392212 getsockname(16, {sa_family=AF_NETLINK, pid=16064,
groups=00000000}, [12]) = 0
23:56:00.392294 time(NULL) = 1201560960
23:56:00.392345 sendto(16,
"\24\0\0\0\26\0\1\3\200]\236G\0\0\0\0\0\0\0\0", 20, 0,
{sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 20
23:56:00.392422 recvmsg(16, {msg_name(12)={sa_family=AF_NETLINK, pid=0,
groups=00000000},
msg_iov(1)=[{"0\0\0\0\24\0\2\0\200]\236G\300>\0\0\2\10\200\376\1\0\0"...,
4096}], msg_controllen=0, msg_flags=0}, 0) = 108
23:56:00.392516 recvmsg(16, {msg_name(12)={sa_family=AF_NETLINK, pid=0,
groups=00000000},
msg_iov(1)=[{"@\0\0\0\24\0\2\0\200]\236G\300>\0\0\n\200\200\376\1\0\0"...,
4096}], msg_controllen=0, msg_flags=0}, 0) = 128
23:56:00.392604 recvmsg(16, {msg_name(12)={sa_family=AF_NETLINK, pid=0,
groups=00000000},
msg_iov(1)=[{"\24\0\0\0\3\0\2\0\200]\236G\300>\0\0\0\0\0\0\1\0\0\0\24"...,
4096}], msg_controllen=0, msg_flags=0}, 0) = 20
23:56:00.392681 close(16) = 0
23:56:00.392745 socket(PF_INET, SOCK_STREAM, IPPROTO_IP) = 16
23:56:00.392801 setsockopt(16, SOL_TCP, TCP_NODELAY, [1], 4) = 0
23:56:00.392861 fcntl64(16, F_GETFL) = 0x2 (flags O_RDWR)
23:56:00.392908 fcntl64(16, F_SETFL, O_RDWR|O_NONBLOCK) = 0
23:56:00.392956 connect(16, {sa_family=AF_INET, sin_port=htons(389),
sin_addr=inet_addr("127.0.0.1")}, 16) = -1 EINPROGRESS (Operation now in
progress)
23:56:00.393326 select(1024, NULL, [16], NULL, {10, 0}) = 1 (out [16],
left {10, 0})
23:56:00.393488 getpeername(16, {sa_family=AF_INET, sin_port=htons(389),
sin_addr=inet_addr("127.0.0.1")}, [16]) = 0
23:56:00.393574 fcntl64(16, F_GETFL) = 0x802 (flags O_RDWR|O_NONBLOCK)
23:56:00.393618 fcntl64(16, F_SETFL, O_RDWR) = 0
23:56:00.393677 getpeername(16, {sa_family=AF_INET, sin_port=htons(389),
sin_addr=inet_addr("127.0.0.1")}, [16]) = 0
23:56:00.393780 uname({sys="Linux", node="server", ...}) = 0
23:56:00.393966 time(NULL) = 1201560960
23:56:00.394014 write(16, "01\2\1\1`,\2\1\3\4\37cn="..., 51) = 51
23:56:00.394217 time(NULL) = 1201560960
23:56:00.394266 select(1024, [16], [], NULL, {10, 0}) = 1 (in [16], left
{10, 0})
23:56:00.394468 read(16, "0\f\2\1\1a\7\n", 8) = 8
23:56:00.394521 read(16, "\1\0\4\0\4\0", 6) = 6
23:56:00.394591 time(NULL) = 1201560960
23:56:00.394668 time(NULL) = 1201560960
23:56:00.394711 write(16,
"07\2\1\2c2\4\22dc=printflow,dc=sk\n\1\2\n\1"..., 57) = 57
23:56:00.395613 select(1024, [16], [], NULL, NULL) = 1 (in [16])
23:56:00.395803 read(16, "0\202\2\302\2\1\2d", 8) = 8
23:56:00.395857 read(16, "\202\2\273\4*cn=USER NAME,ou=users,dc="...,
702) = 702
23:56:00.395937 select(1024, [16], [], NULL, NULL) = 1 (in [16])
23:56:00.396120 read(16, "0\f\2\1\2e\7\n", 8) = 8
23:56:00.396170 read(16, "\1\0\4\0\4\0", 6) = 6
23:56:00.396224 time(NULL) = 1201560960
23:56:00.396426 time(NULL) = 1201560960
23:56:00.396468 write(16, "08\2\1\3`3\2\1\3\4*cn=USER NAME,ou=us"...,
58) = 58
23:56:00.397030 time(NULL) = 1201560960
23:56:00.397075 select(1024, [16], [], NULL, {10, 0}) = 1 (in [16], left
{10, 0})
23:56:00.397268 read(16, "0\f\2\1\3a\7\n", 8) = 8
23:56:00.397320 read(16, "\0011\4\0\4\0", 6) = 6
23:56:00.397376 time(NULL) = 1201560960
23:56:00.397440 time(NULL) = 1201560960
23:56:00.397488 open("/etc/localtime", O_RDONLY) = 18
23:56:00.397541 fstat64(18, {st_mode=S_IFREG|0644, st_size=806, ...}) = 0
23:56:00.397616 fstat64(18, {st_mode=S_IFREG|0644, st_size=806, ...}) = 0
23:56:00.397691 mmap2(NULL, 4096, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_ANONYMOUS, -1, 0xffaf8728) = 0xf7fb2000
23:56:00.397740 read(18,
"TZif\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\6\0\0\0\6\0"..., 4096) = 806
23:56:00.397812 close(18) = 0
23:56:00.397855 munmap(0xf7fb2000, 4096) = 0
23:56:00.397919 stat64("/etc/localtime", {st_mode=S_IFREG|0644,
st_size=806, ...}) = 0
23:56:00.398018 socket(PF_FILE, SOCK_DGRAM, 0) = 18
23:56:00.398065 fcntl64(18, F_SETFD, FD_CLOEXEC) = 0
23:56:00.398111 connect(18, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
23:56:00.398201 send(18, "<11>Jan 28 23:56:00 dovecot-auth"..., 139,
MSG_NOSIGNAL) = 139
23:56:00.398307 geteuid32() = 0
23:56:00.398354 time(NULL) = 1201560960
23:56:00.398396 write(16,
"01\2\1\4`,\2\1\3\4\37cn=LDAPADMIN,dc=prin"..., 51) = 51
23:56:00.398546 time(NULL) = 1201560960
23:56:00.398590 select(1024, [16], [], NULL, {10, 0}) = 1 (in [16], left
{10, 0})
23:56:00.398784 read(16, "0\f\2\1\4a\7\n", 8) = 8
23:56:00.398836 read(16, "\1\0\4\0\4\0", 6) = 6
23:56:00.398889 time(NULL) = 1201560960
23:56:00.398939 getuid32() = 0
23:56:00.399004 socket(PF_FILE, SOCK_STREAM, 0) = 19
23:56:00.399049 fcntl64(19, F_SETFL, O_RDWR|O_NONBLOCK) = 0
23:56:00.399095 connect(19, {sa_family=AF_FILE,
path="/var/run/nscd/socket"}, 110) = 0
23:56:00.399205 send(19, "\2\0\0\0\v\0\0\0\7\0\0\0passwd\0", 19,
MSG_NOSIGNAL) = 19
23:56:00.399299 poll([{fd=19, events=POLLIN|POLLERR|POLLHUP,
revents=POLLIN|POLLHUP}], 1, 5000) = 1
23:56:00.399361 recvmsg(19, {msg_name(0)=NULL, msg_iov(2)=[{"passwd\0",
7}, {"\270O\3\0\0\0\0\0", 8}], msg_controllen=16, {cmsg_len=16,
cmsg_level=SOL_SOCKET, cmsg_type=SCM_RIGHTS, {20}}, msg_flags=0},
0x40000000 /* MSG_??? */) = 15
23:56:00.399445 mmap2(NULL, 217016, PROT_READ, MAP_SHARED, 20,
0xffaf895c) = 0xf754f000
23:56:00.399498 close(20) = 0
23:56:00.399537 close(19) = 0
23:56:00.400433 access("/var/run/utmpx", F_OK) = -1 ENOENT (No such file
or directory)
23:56:00.400489 open("/var/run/utmp", O_RDWR|O_LARGEFILE|0x80000) = 19
23:56:00.400544 fcntl64(19, F_GETFD) = 0
23:56:00.400585 fcntl64(19, F_SETFD, FD_CLOEXEC) = 0
23:56:00.400630 _llseek(19, 0, [0], SEEK_SET) = 0
23:56:00.400681 alarm(0) = 0
23:56:00.400728 rt_sigaction(SIGALRM, {0xf7b7c590, [], 0}, {0x8071030,
[], 0}, 8) = 0
23:56:00.400798 alarm(1) = 0
23:56:00.400841 fcntl64(19, F_SETLKW, {type=F_RDLCK, whence=SEEK_SET,
start=0, len=0}) = 0
23:56:00.400894 read(19,
"\10\0\0\0\31\t\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384) = 384
23:56:00.400962 read(19,
"\2\0\0\0\0\0\0\0~\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384) = 384
23:56:00.401022 read(19,
"\1\0\0\0002N\0\0~\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384) = 384
23:56:00.401082 read(19,
"\10\0\0\0V\16\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384) = 384
23:56:00.401142 read(19,
"\7\0\0\0\313\24\0\0tty1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384) = 384
23:56:00.401202 read(19,
"\7\0\0\0\314\24\0\0tty2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384) = 384
23:56:00.401261 read(19,
"\6\0\0\0\315\24\0\0tty3\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384) = 384
23:56:00.401334 read(19,
"\6\0\0\0\316\24\0\0tty4\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384) = 384
23:56:00.401394 read(19,
"\6\0\0\0\320\24\0\0tty5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384) = 384
23:56:00.401453 read(19,
"\7\0\0\0\322\24\0\0tty6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384) = 384
23:56:00.401513 read(19, "\10\0\0\0\370
\0\0pts/1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384) = 384
23:56:00.401575 read(19,
"\7\0\0\0W-\0\0pts/2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384) = 384
23:56:00.401634 read(19,
"\10\0\0\0x-\0\0pts/3\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384) = 384
23:56:00.401693 read(19,
"\7\0\0\0000/\0\0pts/4\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384) = 384
23:56:00.401753 read(19, "", 384) = 0
23:56:00.401795 fcntl64(19, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET,
start=0, len=0}) = 0
23:56:00.401843 alarm(0) = 1
23:56:00.401885 rt_sigaction(SIGALRM, {0x8071030, [], 0}, NULL, 8) = 0
23:56:00.401942 close(19) = 0
23:56:00.401984 getuid32() = 0
23:56:00.402022 geteuid32() = 0
23:56:00.402076 time(NULL) = 1201560960
23:56:00.402120 stat64("/etc/localtime", {st_mode=S_IFREG|0644,
st_size=806, ...}) = 0
23:56:00.402215 send(18, "<85>Jan 28 23:56:00 dovecot-auth"..., 157,
MSG_NOSIGNAL) = 157
23:56:00.402316 select(0, NULL, NULL, NULL, {2, 284999}) = 0 (Timeout)
23:56:02.689316 write(16, "0\5\2\1\5B\0", 7) = 7
23:56:02.689557 shutdown(16, 2 /* send and receive */) = 0
23:56:02.689625 close(16) = 0
23:56:02.689715 --- SIGSEGV (Segmentation fault) @ 0 (0) ---
PS: because of security a rewrote some names
PS: process ends quick so is it hard to catch it so it may not be
complete, but hopefully sufficient
