Re: [vchkpw] vdeliver perimission denied for vadddomain -u

Fri, 04 Dec 2009 16:19:06 -0800

you could hard code vpopmail's uid and vchkpw gid in that user_query.. not quite sure if that will do what you're looking for though. 

++jukka

Michael Mussulis wrote:
Hmm... so basically so far from everything that's been said, it looks like the uid/gid values are being used for domain creation purposes, but not stored in the sql backend, which brings me to the issue of dovecot authentication via IMAP.
As mentioned before, I did a bog standard vpopmail build/install, followed by a bog standard dovecot build/install. If I add a domain, that is owned by vpopmail/vchkpw - dovecot imap authentication from squirremail works just fine.
However, if for a domain owned by a 'mike4', dovecot authentication fails with:
auth(default): Info: client in: AUTH 1 PLAIN service=imap secured lip=127.0.0.1 rip=127.0.0.1 lport=143 rport=56559 resp=AHBvc3RtYXN0ZXJAdGVzdDEwLmNvbQAxMjM= auth(default): Info: vpopmail(postmas...@test10.com,127.0.0.1): lookup user=postmaster domain=test10.com 
auth(default): Info: vpopmail(postmas...@test10.com,127.0.0.1): unknown user
auth(default): Info: new auth connection: pid=18526
auth(default): Info: client out: FAIL   1       user=postmas...@test10.com
imap-login: Info: Aborted login (auth failed, 1 attempts): user=<postmas...@test10.com>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured 

My dovecot.conf auth section is:

##
## Authentication processes
##

auth default {
   mechanisms = plain

   ### works for vpopmail/vchkpw domains
   #passdb vpopmail {
   #    args =
   #}

   #userdb vpopmail {
   #}
   ###

   ### works for -u domains
   passdb sql {
      args = /usr/local/hcp/etc/dovecot-sql.conf
   }


   userdb sql {
       args = /usr/local/hcp/etc/dovecot-sql.conf
        }

   user = vpopmail
   count = 1
   ssl_require_client_cert = no
}

and dovecot-sql.conf:

driver = mysql
connect = host=localhost port=3306 user=admin password=xxxxxxxx dbname=hcp
default_pass_scheme = CRYPT
password_query = SELECT CONCAT(pw_name, '@', pw_domain) AS user, pw_passwd AS password FROM vpopmail WHERE pw_name = '%n' AND pw_domain = '%d' user_query = SELECT pw_dir as home, pw_uid AS uid, pw_gid AS gid FROM vpopmail WHERE pw_name = '%n' AND pw_domain = '%d'
Also, the pw_uid/pw_gid in vpopmail table MUST have the correct uid/gid values for the domain if created with -u, other dovecot will fail with:
dovecot: Error: User postmas...@test10.com not allowed to log in using UNIX UID 0 (root logins are never allowed)
Am I doing something wrong? Am I to understand that for any domain I create with -u, I then have to update vpopmail table with the real uid/gid values? 

Thanks,
Michael.
(PS: I know part of the question is about dovecot, but it's closely tied to vpopmail authentication). 

 > Date: Fri, 4 Dec 2009 09:46:37 -0600
 > From: m...@inter7.com
 > To: vchkpw@inter7.com
 > Subject: Re: [vchkpw] vdeliver perimission denied for vadddomain -u
 >
 > -----BEGIN PGP SIGNED MESSAGE-----
 > Hash: SHA1
 >
 > Pavel V. Yanchenko wrote:
 > > Could it be that vdelivermail ignores groups? Is it possible at all?
 >
 > The groups file is not read by uid selection or execution system calls.
 > - --
 > /*
 > Matt Brookings <m...@inter7.com> GnuPG Key FAE0672C
 > Software developer Systems technician
 > Inter7 Internet Technologies, Inc. (815)776-9465
 > */
 > -----BEGIN PGP SIGNATURE-----
 > Version: GnuPG v1.4.9 (GNU/Linux)
 > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
 >
 > iEYEARECAAYFAksZLt0ACgkQIwet2/rgZyyUBACcCRonIobcnTDT02rhYIr43oqA
 > /94Ani3PjvK4TTtEB0fmsiHhCi9mbU8E
 > =sHP6
 > -----END PGP SIGNATURE-----

------------------------------------------------------------------------
Use Hotmail to send and receive mail from your different email accounts. Find out how. <http://clk.atdmt.com/UKM/go/186394592/direct/01/> 


!DSPAM:4b19a6ae32711147615442!

Reply via email to