Dovecot Error Retrieving Information User
Contents |
[ author ] Hello, error retrieving information about user pam_succeed_if I am using Dovecot ver.1.0.7 on an x86
Error Retrieving Information About User Ldap
server with RedHat Linux Enterprise 5 and the following configuration: # 1.0.7:
Pam_succeed_if(sshd:auth): Error Retrieving Information About User
/etc/dovecot.conf protocols: pop3 login_dir: /var/run/dovecot/login login_executable: /usr/libexec/dovecot/pop3-login mail_location: mbox:~/mail:INBOX=/var/mail/%u mail_executable: /usr/libexec/dovecot/pop3 mail_plugin_dir: /usr/lib/dovecot/pop3 pop3_client_workarounds: outlook-no-nuls oe-ns-eoh auth default: passdb: driver: pam userdb: driver: passwd It seems that my mail server is being attacked by someone who tries to retrieve users' credentials. Please read below an output of logwatch. dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user sandra dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user tanya dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user tanya dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user dark dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user dark dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user gibson dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user frank dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user frank Besides, some of the local users receive "spam" emails, which seem to be sent by another local user. Please assist me on how to prevent the aforementioned attack. Best Regards, Nikos Previous message: [Dovecot] quota percents Next message: [Dovecot] Attacking Dovecot Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] More information about the dovecot mailing list
HCL Search Reviews Search ISOs Go to Page... LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user User Name Remember Me? Password Linux - Newbie This Linux forum is for members that are new to Linux. Just starting out and have a question? If it is not in the man pages or the how-to's this is the place! Notices Welcome to LinuxQuestions.org, a friendly and active Linux Community. http://www.dovecot.org/list/dovecot/2011-September/130873.html You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today! Note that registered members see fewer ads, and ContentLink http://www.linuxquestions.org/questions/linux-newbie-8/dovecot-auth-pam_succeed_if-dovecot-auth-error-retrieving-information-about-user-4175440744/ is completely disabled once you log in. Are you new to LinuxQuestions.org? Visit the following links: Site Howto | Site FAQ | Sitemap | Register Now If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here. Having a problem logging in? Please visit this page to clear all LQ-related cookies. Introduction to Linux - A Hands on Guide This guide was created as an overview of the Linux Operating System, geared toward new users as an exploration tour and getting started guide, with exercises at the end of each chapter. For more advanced trainees it can be a desktop reference, and a collection of the base knowledge needed to proceed with system and network administration. This book contains many real life examples derived from the author's experience as a Linux system and network administrator, trainer and consultant. They hope these examples will help you to get a better understanding of the Linux syste
Authentication Problem Username 30 posts / 0 new Log in or register to post comments Last post #1 Sat, 02/14/2009 - 12:39 mdtiberi Postfix Authentication Problem Username Been trying all morning to get postfix to work. Keep getting this error the https://www.virtualmin.com/node/9119 logs. Forums are no help. Seem to be a simple error but the solution http://www.iredmail.org/forum/topic6377-iredmail-support-lots-of-strange-records-in-varlogsecure.html is alluding me. Thanks. OS CentOS 5.2 From secure log: Feb 14 14:38:08 ns1 dovecot-auth: pam_unix(dovecot:auth): check pass; user unknown Feb 14 14:38:08 ns1 dovecot-auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser= rhost=::ffff:xx.xx.xx.138 Feb 14 14:38:08 ns1 dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user admin From maillog: dovecot: pop3-login: Disconnected: user=
Post edited by: mdtiberi, at: 2009/02/19 07:45 Log in or register to post comments #2 Sat, 02/14/2009 - 12:46 andreychek Well, the error message suggests that there is no user with the name "admin". Are you sure that's the correct name -- that there isn't perhaps a trailing domain name after that... maybe "admin@example.com" or "admin.example"? It should show you the full username when you error retrieving information look in Edit Mail and FTP Users, under "IMAP/FTP login". -Eric Log in or register to post comments #3 Sat, 02/14/2009 - 12:58 (Reply to #2) mdtiberi It doesn't seem to matter if the domain name is included or not, same error occurs. Log in or register to post comments #4 Sat, 02/14/2009 - 13:10 (Reply to #3) mdtiberi "It should show you the full username when you look in Edit Mail and FTP Users, under "IMAP/FTP login" Yes, I checked that its fine. Log in or register to post comments #5 Sat, 02/14/2009 - 13:14 (Reply to #4) andreychek If you log in as root over SSH, and type: id admin What does it return? -Eric Log in or register to post comments #6 Sat, 02/14/2009 - 13:14 (Reply to #5) Joe Pro Licensee Are you using @ in the username? If so, have you read the FAQ about this particular username extension? (You have to configure saslauthd explicitly for this format.) http://www.virtualmin.com/documentation/id,frequently_asked_questions/#w... Log in or register to post comments #7 Sat, 02/14/2009 - 13:16 (Reply to #6) mdtiberi It does show admin.domain.com I tried both variation in Thunderbird, one with the domain and without with no luck Log in or register to post comments #8 Sat, 02/14/200
10, 2016: iRedMail-0.9.5-1 has been released. How to migrate to a new iRedMail server More documents: http://www.iredmail.org/docs/. Subscribe to our mailing list so that you won't miss announcements, updates, bug fixes of iRedMail. [ Closed ] Lots of strange records in /var/log/secure iRedMail →iRedMail Support →Lots of strange records in /var/log/secure Pages 1 You must login or register to post a reply Topic RSS feed Posts: 2 1 Topic by misieq 2014-03-21 00:41:26 misieq Member Offline Registered: 2013-07-09 Posts: 81 Topic: Lots of strange records in /var/log/secure ==== Required information ====- iRedMail version: 0.8.6- Store mail accounts in which backend (LDAP/MySQL/PGSQL): mysql- Linux/BSD distribution name and version: centos 6.5- Related log if you're reporting an issue: /var/log/secure====Hello,My /var/log/secure is full of such records with different usernamesMar 20 17:37:08 mail auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=user@domain.tld rhost=X.X.X.X Mar 20 17:37:08 mail auth: pam_succeed_if(dovecot:auth): error retrieving information about user user@domain.tld Mar 20 17:37:09 mail auth: pam_unix(dovecot:auth): check pass; user unknownWhat can cause them. ---- Urgent issue? Get fast and profressional supppport from iRedMail developers. 2 Reply by misieq 2014-03-21 00:54:39 misieq Member Offline Registered: 2013-07-09 Posts: 81 Re: Lots of strange records in /var/log/secure OK.Solved:I had turned onpassdb pam {}Commented it out and now log is clean. Posts: 2 Pages 1 You must login or register to post a reply iRedMail →iRedMail Support →Lots of strange records in /var/log/secure Currently installed 3 official extensions. Copyright © 2003–2009 PunBB. Generated in 0.036 seconds (90% PHP - 10% DB) with 9 queries