[clug-talk] email authentication stopped

[Gustin Johnson]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

If I understand your config, email users have their accounts listed in
/etc/passwd?

Perhaps this is a pam issue, /var/log/auth.log may be of some value to you.

Shawn wrote:
> I'm banging my head against the wall on this one...  One of the mail systems I 
> take care of has been working fine for months.  Today all of a sudden, nobody 
> can authenticate and retrieve their mail.  I checked the logs and see this:
> 
> Dec  9 11:46:40 [pop3d] Connection, ip=[::ffff:68.144.188.211]
> Dec  9 11:46:40 [pop3d] LOGIN FAILED, user=sgrover, ip=[::ffff:68.144.188.211]
> Dec  9 11:46:45 [pop3d] LOGOUT, ip=[::ffff:68.144.188.211]
> Dec  9 11:46:45 [pop3d] Disconnected, ip=[::ffff:68.144.188.211]
> Dec  9 11:46:47 [pop3d] Connection, ip=[::ffff:68.144.188.211]
> Dec  9 11:46:47 [pop3d] LOGIN FAILED, user=sgrover, ip=[::ffff:68.144.188.211]
> Dec  9 11:46:52 [pop3d] LOGOUT, ip=[::ffff:68.144.188.211]
> Dec  9 11:46:52 [pop3d] Disconnected, ip=[::ffff:68.144.188.211]
> 
> 
> but there is not much else in the logs that is useful.
> 
> The system in question is a very basic Postfix, sasl2, courier-authlib system, 
> (using courier-imap as well to provide the pop3 services).  I've restarted 
> each of the services and the problem persists.  I updated Postfix and 
> courier-authlib (they were a generation or two old), and still no luck.  I am 
> able to send mail to the server, and from a console prompt verify the mail is 
> there waiting.  I also verified I could send mail from a console (using 
> mutt).  But trying to connect with POP3 keeps failing login.  On a lark, I 
> even forced a password change for one of the shell accounts in question, 
> still no luck.
> 
> So, the problem appears to be with the courier-authlib set up, but this has 
> been working for months, and just stopped with no changes to any config files 
> (unless I've been hacked...).  Any tips on what else I could look at?  
> Thanks.
> 
> Shawn
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> clug-talk mailing list
> clug-talk at clug.ca
> http://clug.ca/mailman/listinfo/clug-talk_clug.ca
> Mailing List Guidelines (http://clug.ca/ml_guidelines.php)
> **Please remove these lines when replying
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDmgCDwRXgH3rKGfMRAnxGAJ9UF+mAWLt6FFwjytgqwWQrogLfGwCfeI5T
6FXEvlmDiKa+jKJNBZ7c2P8=
=c7ap
-----END PGP SIGNATURE-----