[clug-talk] email authentication stopped

[Shawn]

I'm banging my head against the wall on this one...  One of the mail systems I 
take care of has been working fine for months.  Today all of a sudden, nobody 
can authenticate and retrieve their mail.  I checked the logs and see this:

Dec  9 11:46:40 [pop3d] Connection, ip=[::ffff:68.144.188.211]
Dec  9 11:46:40 [pop3d] LOGIN FAILED, user=sgrover, ip=[::ffff:68.144.188.211]
Dec  9 11:46:45 [pop3d] LOGOUT, ip=[::ffff:68.144.188.211]
Dec  9 11:46:45 [pop3d] Disconnected, ip=[::ffff:68.144.188.211]
Dec  9 11:46:47 [pop3d] Connection, ip=[::ffff:68.144.188.211]
Dec  9 11:46:47 [pop3d] LOGIN FAILED, user=sgrover, ip=[::ffff:68.144.188.211]
Dec  9 11:46:52 [pop3d] LOGOUT, ip=[::ffff:68.144.188.211]
Dec  9 11:46:52 [pop3d] Disconnected, ip=[::ffff:68.144.188.211]


but there is not much else in the logs that is useful.

The system in question is a very basic Postfix, sasl2, courier-authlib system, 
(using courier-imap as well to provide the pop3 services).  I've restarted 
each of the services and the problem persists.  I updated Postfix and 
courier-authlib (they were a generation or two old), and still no luck.  I am 
able to send mail to the server, and from a console prompt verify the mail is 
there waiting.  I also verified I could send mail from a console (using 
mutt).  But trying to connect with POP3 keeps failing login.  On a lark, I 
even forced a password change for one of the shell accounts in question, 
still no luck.

So, the problem appears to be with the courier-authlib set up, but this has 
been working for months, and just stopped with no changes to any config files 
(unless I've been hacked...).  Any tips on what else I could look at?  
Thanks.

Shawn
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://clug.ca/pipermail/clug-talk_clug.ca/attachments/20051209/c0aad99c/attachment.bin