Discussion:
auth with entire email addr instead of just username
Cliff Hayes
2014-10-02 20:13:52 UTC
Permalink
I am trying to configure a new IMAP based mail server.
I thought I had everything correct.
I have dovecot logging turned up and see that dovecot is processing the
entire email address as the username like this...
Oct 2 14:52:20 servername dovecot: auth: Debug:
pam(testuser at domain.com,1.2.3.4): lookup service=dovecot
... and of course pam is reporting that as an invalid user.
Moments ago when all was mbox, authentication worked fine.
I can see Thunderbird has the username correct (no domain).
What is tacking on the domain and how do I fix?
Thanks in advance.
Reindl Harald
2014-10-02 20:19:21 UTC
Permalink
Post by Cliff Hayes
I am trying to configure a new IMAP based mail server.
I thought I had everything correct.
I have dovecot logging turned up and see that dovecot is processing the entire email address as the username like
this...
Oct 2 14:52:20 servername dovecot: auth: Debug: pam(testuser at domain.com,1.2.3.4): lookup service=dovecot
... and of course pam is reporting that as an invalid user.
Moments ago when all was mbox, authentication worked fine.
I can see Thunderbird has the username correct (no domain).
What is tacking on the domain and how do I fix?
output of "dovecot -n" would be in general a good start

* how looks your user database
* if you don't use domain as part of the username what do you do
in case you get a second domain and names collide
* these days the full qualified mail address as username is common
and in caes of virtual users you can feed all from the same
source instead hanlde the localpart special for login-names



-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: OpenPGP digital signature
URL: <http://dovecot.org/pipermail/dovecot/attachments/20141002/50378103/attachment.sig>
Cliff Hayes
2014-10-02 20:24:46 UTC
Permalink
Good point.
But when I try to add a user with the "user at domain" format using the
useradd command I get error...
useradd: invalid user name 'user at domain.com'

Here is output you requested:

# 2.0.9: /etc/dovecot/dovecot.conf
# OS: Linux 2.6.32-431.29.2.el6.x86_64 x86_64 Scientific Linux release
6.5 (Carbon)
auth_debug = yes
auth_debug_passwords = yes
auth_verbose = yes
auth_verbose_passwords = plain
mail_access_groups = mail
mail_debug = yes
mail_location = maildir:~/Maildir
mbox_write_locks = fcntl
namespace {
hidden = no
inbox = yes
list = yes
location =
prefix =
separator = .
subscriptions = yes
type = private
}
passdb {
driver = pam
}
protocols = imap
ssl_ca = </etc/pki/dovecot/certs/intermediate.crt
ssl_cert = </etc/pki/dovecot/certs/avalon20140929.crt
ssl_key = </etc/pki/dovecot/private/avalon20140929.key
userdb {
driver = passwd
}
verbose_ssl = yes
protocol imap {
imap_id_log = *
}
Post by Reindl Harald
Post by Cliff Hayes
I am trying to configure a new IMAP based mail server.
I thought I had everything correct.
I have dovecot logging turned up and see that dovecot is processing the entire email address as the username like
this...
Oct 2 14:52:20 servername dovecot: auth: Debug: pam(testuser at domain.com,1.2.3.4): lookup service=dovecot
... and of course pam is reporting that as an invalid user.
Moments ago when all was mbox, authentication worked fine.
I can see Thunderbird has the username correct (no domain).
What is tacking on the domain and how do I fix?
output of "dovecot -n" would be in general a good start
* how looks your user database
* if you don't use domain as part of the username what do you do
in case you get a second domain and names collide
* these days the full qualified mail address as username is common
and in caes of virtual users you can feed all from the same
source instead hanlde the localpart special for login-names
Reindl Harald
2014-10-02 20:28:52 UTC
Permalink
Post by Cliff Hayes
Good point.
But when I try to add a user with the "user at domain" format using the useradd command I get error...
useradd: invalid user name 'user at domain.com'
passdb {
driver = pam
}
userdb {
driver = passwd
}

this are local users - never ever mixed mail and system users here

http://wiki2.dovecot.org/VirtualUsers
http://wiki2.dovecot.org/Sasl

combined both you have a uniqe auth-provider for incoming and
outgoing mail independent of system users
Post by Cliff Hayes
# 2.0.9: /etc/dovecot/dovecot.conf
# OS: Linux 2.6.32-431.29.2.el6.x86_64 x86_64 Scientific Linux release 6.5 (Carbon)
auth_debug = yes
auth_debug_passwords = yes
auth_verbose = yes
auth_verbose_passwords = plain
mail_access_groups = mail
mail_debug = yes
mail_location = maildir:~/Maildir
mbox_write_locks = fcntl
namespace {
hidden = no
inbox = yes
list = yes
location =
prefix =
separator = .
subscriptions = yes
type = private
}
passdb {
driver = pam
}
protocols = imap
ssl_ca = </etc/pki/dovecot/certs/intermediate.crt
ssl_cert = </etc/pki/dovecot/certs/avalon20140929.crt
ssl_key = </etc/pki/dovecot/private/avalon20140929.key
userdb {
driver = passwd
}
verbose_ssl = yes
protocol imap {
imap_id_log = *
}
Post by Reindl Harald
Post by Cliff Hayes
I am trying to configure a new IMAP based mail server.
I thought I had everything correct.
I have dovecot logging turned up and see that dovecot is processing the entire email address as the username like
this...
Oct 2 14:52:20 servername dovecot: auth: Debug: pam(testuser at domain.com,1.2.3.4): lookup service=dovecot
... and of course pam is reporting that as an invalid user.
Moments ago when all was mbox, authentication worked fine.
I can see Thunderbird has the username correct (no domain).
What is tacking on the domain and how do I fix?
output of "dovecot -n" would be in general a good start
* how looks your user database
* if you don't use domain as part of the username what do you do
in case you get a second domain and names collide
* these days the full qualified mail address as username is common
and in caes of virtual users you can feed all from the same
source instead hanlde the localpart special for login-names
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: OpenPGP digital signature
URL: <http://dovecot.org/pipermail/dovecot/attachments/20141002/8d093b20/attachment.sig>
Cliff Hayes
2014-10-02 21:03:59 UTC
Permalink
Good point.
But when I try to add a user with the "user at domain" format using the
useradd command I get error...
useradd: invalid user name 'user at domain.com'
Does this mean it's time to switch to database auth?

Here is output you requested:

# 2.0.9: /etc/dovecot/dovecot.conf
# OS: Linux 2.6.32-431.29.2.el6.x86_64 x86_64 Scientific Linux release
6.5 (Carbon)
auth_debug = yes
auth_debug_passwords = yes
auth_verbose = yes
auth_verbose_passwords = plain
mail_access_groups = mail
mail_debug = yes
mail_location = maildir:~/Maildir
mbox_write_locks = fcntl
namespace {
hidden = no
inbox = yes
list = yes
location =
prefix =
separator = .
subscriptions = yes
type = private
}
passdb {
driver = pam
}
protocols = imap
ssl_ca = </etc/pki/dovecot/certs/intermediate.crt
ssl_cert = </etc/pki/dovecot/certs/avalon20140929.crt
ssl_key = </etc/pki/dovecot/private/avalon20140929.key
userdb {
driver = passwd
}
verbose_ssl = yes
protocol imap {
imap_id_log = *
}


-------- Original Message --------
From: - Thu Oct 02 15:19:41 2014
X-Account-Key: account6
X-UIDL: 00046c9947d56bfd
X-Mozilla-Status: 0011
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-Path: <dovecot-bounces at dovecot.org>
Received: from nitronium05.afomx.net (wsip-66-210-221-15.pn.at.cox.net
[66.210.221.15]) by sendmail.afo.net (8.14.7/8.14.7) with ESMTP id
s92KJXqO012885 for <chayes at afo.net>; Thu, 2 Oct 2014 15:19:34 -0500
Received: from wursti.dovecot.fi (wursti.dovecot.fi [87.106.245.223])
by nitronium05.afomx.net (8.14.4/8.14.4) with ESMTP id s92KJUjn032312
for <chayes at afo.net>; Thu, 2 Oct 2014 15:19:31 -0500
Received: from wursti.dovecot.fi (localhost.localdomain [127.0.0.1]) by
wursti.dovecot.fi (Postfix) with ESMTP id 211FE22373; Thu, 2 Oct 2014
22:19:24 +0200 (CEST)
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on
wursti.dovecot.fi
X-Spam-Level:
X-Spam-Status: No, score=-1.1 required=5.0 tests=BAYES_00,RDNS_NONE
autolearn=no version=3.3.1
Received: from talvi.dovecot.org (unknown [137.117.229.219]) by
wursti.dovecot.fi (Postfix) with ESMTP; Thu, 2 Oct 2014 22:19:24 +0200
(CEST)
Received: from [100.90.112.97] (localhost [127.0.0.1]) by
talvi.dovecot.org (Postfix) with ESMTP id 44D7D235EA; Thu, 2 Oct 2014
20:19:44 +0000 (UTC)
X-Original-To: dovecot at dovecot.org
Delivered-To: dovecot at dovecot.org
Received: by talvi.dovecot.org (Postfix, from userid 506) id
A9CBD235F0; Thu, 2 Oct 2014 20:19:42 +0000 (UTC)
Received: from mail.thelounge.net (unknown [91.118.73.15]) by
talvi.dovecot.org (Postfix) with ESMTPS id 4DC95234B4 for
<dovecot at dovecot.org>; Thu, 2 Oct 2014 20:19:42 +0000 (UTC)
Message-ID: <542DB349.4080704 at thelounge.net>
Date: Thu, 02 Oct 2014 22:19:21 +0200
From: Reindl Harald <h.reindl at thelounge.net>
Organization: the lounge interactive design
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101
Thunderbird/31.1.1
MIME-Version: 1.0
To: dovecot at dovecot.org
Subject: Re: auth with entire email addr instead of just username
References: <542DB200.40809 at afo.net>
In-Reply-To: <542DB200.40809 at afo.net>
OpenPGP: id=7F780279;
url=http://arrakis.thelounge.net/gpg/h.reindl_thelounge.net.pub.txt
Content-Type: multipart/signed; micalg=pgp-sha1;
protocol="application/pgp-signature";
boundary="EccDjHRFv91hW96jI9NRNb7nA289vHKte"
X-BeenThere: dovecot at dovecot.org
X-Mailman-Version: 2.1.17
Precedence: list
Reply-To: Dovecot Mailing List <dovecot at dovecot.org>
List-Id: Dovecot Mailing List <dovecot.dovecot.org>
List-Unsubscribe: <http://dovecot.org/cgi-bin/mailman/options/dovecot>,
<mailto:dovecot-request at dovecot.org?subject=unsubscribe>
List-Archive: <http://dovecot.org/pipermail/dovecot/>
List-Post: <mailto:dovecot at dovecot.org>
List-Help: <mailto:dovecot-request at dovecot.org?subject=help>
List-Subscribe: <http://dovecot.org/cgi-bin/mailman/listinfo/dovecot>,
<mailto:dovecot-request at dovecot.org?subject=subscribe>
Errors-To: dovecot-bounces at dovecot.org
Sender: "dovecot" <dovecot-bounces at dovecot.org>
X-Scanned-By: MIMEDefang 2.73
X-Scanned-By: MIMEDefang 2.75
Post by Cliff Hayes
I am trying to configure a new IMAP based mail server.
I thought I had everything correct.
I have dovecot logging turned up and see that dovecot is processing the entire email address as the username like
this...
Oct 2 14:52:20 servername dovecot: auth: Debug: pam(testuser at domain.com,1.2.3.4): lookup service=dovecot
... and of course pam is reporting that as an invalid user.
Moments ago when all was mbox, authentication worked fine.
I can see Thunderbird has the username correct (no domain).
What is tacking on the domain and how do I fix?
output of "dovecot -n" would be in general a good start

* how looks your user database
* if you don't use domain as part of the username what do you do
in case you get a second domain and names collide
* these days the full qualified mail address as username is common
and in caes of virtual users you can feed all from the same
source instead hanlde the localpart special for login-names






-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://dovecot.org/pipermail/dovecot/attachments/20141002/6fe7d6c4/attachment-0001.sig>
Loading...