<html> <head> <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type"> </head> <body text="#000000" bgcolor="#FFFFFF"> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 05/04/2014 10:22 PM, Matt . wrote: > Hi Guys, > > I'm trying to auth Dovecot agains FreeIPA using this tut: > > <a class="moz-txt-link-freetext" href="http://www.freeipa.org/page/Dovecot_IMAPS_Integration_with_FreeIPA_using_Single_Sign_On">http://www.freeipa.org/page/Dovecot_IMAPS_Integration_with_FreeIPA_using_Single_Sign_On</a> > > (and also Postfix using this: <a class="moz-txt-link-freetext" href="https://www.dalemacartney.com/2013/03/14/deploying-postfix-with-ldap-freeipa-virtual-aliases-and-kerberos-authentication/">https://www.dalemacartney.com/2013/03/14/deploying-postfix-with-ldap-freeipa-virtual-aliases-and-kerberos-authentication/</a> (as it should be working with dovecot at the end I believe) > > I'm having some issues here and get the following errors no matter what I do: Hi Matt Apologies for the delayed response. >> May 4 23:13:28 mail-01 dovecot: imap-login: Disconnected (no auth attempts): rip=xxx.xxx.xxx.xxx, lip=xxx.xxx.xxx.xxx This particular log output is consistent with a failed login attempt when using SSL, however the Dovecot howto will setup StartTLS and not SSL. Could you please confirm how you are testing this setup? OS version of both IPA server and mail server, OS version and also mail client of the workstation. I'm setting up a new demo lab with these how tos at present to verify the steps on RHEL 6.5 to ensure there are no changes required. Dale > May 4 23:13:28 mail-01 postfix/smtpd[2949]: fatal: no SASL authentication mechanisms > May 4 23:13:29 mail-01 postfix/master[1627]: warning: process /usr/lib/postfix/smtpd pid 2949 exit status 1 > May 4 23:13:29 mail-01 postfix/master[1627]: warning: /usr/lib/postfix/smtpd: bad command startup -- throttling > May 4 23:14:18 mail-01 dovecot: auth: Fatal: No passdbs specified in configuration file. LOGIN mechanism needs one > May 4 23:14:18 mail-01 dovecot: master: Error: service(auth): command startup failed, throttling > May 4 23:15:09 mail-01 postfix/anvil[2952]: statistics: max connection rate 1/60s for (<a class="moz-txt-link-freetext" href="smtp:xxx.xxx.xxx.xxx">smtp:xxx.xxx.xxx.xxx</a>) at May 4 23:13:18 > May 4 23:15:09 mail-01 postfix/anvil[2952]: statistics: max connection count 1 for (<a class="moz-txt-link-freetext" href="smtp:xxx.xxx.xxx.xxx">smtp:xxx.xxx.xxx.xxx</a>) at May 4 23:13:18 > May 4 23:15:09 mail-01 postfix/anvil[2952]: statistics: max cache size 1 at May 4 23:13:18 > > Outside the issue that it cannot find the aliasses db, I'm kinda stuck here... the tut should be working "out of the box", but I have the feeling I'm missing something here. > > I hope someone can help me out! > > Thanks! > > Matt > > > _______________________________________________ > Freeipa-users mailing list > <a class="moz-txt-link-abbreviated" href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a> > <a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/freeipa-users">https://www.redhat.com/mailman/listinfo/freeipa-users</a> -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 Comment: Using GnuPG with Thunderbird - <a class="moz-txt-link-freetext" href="http://www.enigmail.net/">http://www.enigmail.net/</a> iQIcBAEBAgAGBQJTa+rJAAoJEAJsWS61tB+qbHIP/jO5VYmc7wzTo0btdV5DqU5T 1UdqrqeCrZAOppJLJdkCq/nQpbz2SATkTgaT1++uIJRoLVb5NeVkpM70dMD4o7mB 3tAIUp0FtYZOi71flaPNIFzjv2aTybE0Ctp4bg8dhBa/LrdPtp4kBTWpAaUKH07X ahSuZ1wyOPPAXRtC2Aa7dbfVIRIuowzm6XEQPj7ocJfF0GOHId10JzHg2oTPm5yD ICs95tyyA5qzkx1t6f5iWPOReEVbb3MXMXAisNMblZriQ6I/gOAH4HhvCWD4ZU+a X3wkrL3aPgQTzLVX9fJvvrGDDDAml0ZieNCKxPEjwwt0RrTcs9FzoHVvZeZjW0PM 011YFP30dNSvK1qqJRlWwgSErDbdbaNQv6lIfpE6jDZlpaLv9Os+RqPo/DMIaLGO ZTccGe2fo2+774uU4c0ogINSk14xkt1K1KGkVpfyzpTVFlKSNBxt06QA/9iu9iWm v4l5rzJ+cxLWFltGobkSWuJQVGXkcI2VpYzZNVCYpkb4B79VziX/7euZfnjErlRu PPMlmlzCQ9wJtoBAqYaMWtl9oOpJbMrwwXHh3bVDzGgXUXRRh7+i8ARihpKXwbmk jz/Mjm3o7Y1rUTC83qLb90CB0E+59DYrt8CVpT+YKiMjOHLcqI2B/MyUtqma84Sd xegOX8dy/zWnoJRdTpvm =80WR -----END PGP SIGNATURE----- </body> </html>