Hey folks,
I am chasing a vicious problem that appeared when I upgraded my
OpenBSD mail server yesterday. I upgraded to the most recent CURRENT
snapshot of both the OS and packages.
During this upgrade, PHP, dovecot, and Postfix all got updates. I
did *NOT* touch Squirrelmail, it remains 1.4.20.
However, I now get seemingly random authentication failures, as
I leave my browser logged into Squirrelmail during the day. Several
times an hour, it will kick me to the username/password failure
page as the web site refreshes (or as I click on links).
I've already spoken with the OpenBSD dovecot package maintainer,
he has not heard of similar issues, and he uses 1.2.13 heavily. I
also swung by the dovecot list, to be reminded of the auth_debug
and auth_verbose configuration options, which I have enabled. And
now I see the problem:
Aug 3 12:15:23 fusion dovecot: auth(default): client in: AUTH 1
PLAIN service=imap secured lip=127.0.0.1 rip=127.0.0.1
lport=143 rport=10068 resp=<hidden>
Aug 3 12:15:23 fusion dovecot: auth(default): bsdauth(benny,127.0.0.1):
lookup
Aug 3 12:15:23 fusion dovecot: auth(default): bsdauth(benny,127.0.0.1):
password mismatch
Aug 3 12:15:24 fusion dovecot: auth(default): new auth connection: pid=9575
Aug 3 12:15:25 fusion dovecot: auth(default): client out: FAIL 1
user=benny
Aug 3 12:15:30 fusion dovecot: imap-login: Aborted login (auth failed, 1
attempts): user=<benny>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1,
secured
Note the "password mismatch" - that's interesting, as Squirrelmail
should be providing that and I haven't changed it. So, is there any
reason Squirrelmail would suddenly start *intermittently* providing
the wrong credentials to dovecot? Anything PHP-related? Sessions?
I don't use any sort of IMAP proxy, so there should be nothing between
Squirrelmail and dovecot getting in the way.
Versions are as follows:
Apache 1.3.29 (OpenBSD's modified version)
PHP 5.2.13
dovecot 1.2.13
The system's php.ini was not changed during this upgrade, and this
configuration with slightly older software has been working
flawlessly for months.
I would GREATLY appreciate any help! Please ask if there's further
information needed.
Benny
--
"Something's going on in this house - last night, I saw a face!"
"Did it have a nose?"
"Yes!"
"That sounds like a face all right."
-- Scary Movie 4
------------------------------------------------------------------------------
The Palm PDK Hot Apps Program offers developers who use the
Plug-In Development Kit to bring their C/C++ apps to Palm for a share
of $1 Million in cash or HP Products. Visit us here for more details:
http://p.sf.net/sfu/dev2dev-palm
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
