BUG: Authentication client sent unknown handshake command

[Lukas Haase]

Hi,

Just a very gentle reminder :)
I don't see anything I am doing "wrong" in my config ...

Thanks
Luke

On 2014-07-11 17:45, Lukas Haase wrote:
> Hi Timo,
> 
> Thank you very much. I really appreciate your response!
> 
> I have indeed a non-default socket config because I also let exim4
> authenticate against it. So I I am not really able to remove the config.
> 
> What makes me wonder is that the problem just appeared recently. I think
> I have the config running for 2 years now or so.
> 
> I provide "doveconf -n" in any case, maybe you can spot an issue?
> 
> Thanks, Luke
> 
> # 2.1.7: /etc/dovecot/dovecot.conf
> # OS: Linux 2.6.32-openvz-042stab090.2-amd64 i686 Debian 7.5
> auth_mechanisms = plain login
> auth_verbose = yes
> log_timestamp = "%Y-%m-%d %H:%M:%S "
> mail_location = maildir:~/Maildir
> mail_privileged_group = mail
> managesieve_notify_capability = mailto
> managesieve_sieve_capability = fileinto reject envelope
> encoded-character vacation subaddress comparator-i;ascii-numeric
> relational regex imap4flags copy include variables body enotify
> environment mailbox date ihave imapflags
> namespace {
>   hidden = yes
>   inbox = no
>   list = no
>   location = maildir:~/Maildir-root
>   prefix =
>   separator = .
>   subscriptions = yes
>   type = private
> }
> namespace {
>   inbox = yes
>   location = maildir:~/Maildir
>   prefix = INBOX.
>   separator = .
>   subscriptions = yes
>   type = private
> }
> namespace {
>   hidden = no
>   inbox = no
>   list = yes
>   location = maildir:/var/mail/public:INDEX=~/Maildir/public
>   prefix = Public.
>   separator = .
>   subscriptions = no
>   type = public
> }
> namespace {
>   hidden = no
>   inbox = no
>   list = yes
>   location = maildir:/var/mail/shared:INDEX=~/Maildir/shared:LAYOUT=fs
>   prefix = Shared.
>   separator = .
>   subscriptions = no
>   type = public
> }
> passdb {
>   args = /etc/dovecot/%Ls.passwd
>   driver = passwd-file
> }
> passdb {
>   args = /etc/dovecot/dovecot-ldap.conf
>   driver = ldap
> }
> passdb {
>   args = failure_show_msg=yes dovecotp
>   driver = pam
> }
> plugin {
>   acl = vfile
>   sieve = ~/.dovecot.sieve
>   sieve_dir = ~/sieve
>   sieve_extensions = +imapflags
>   sieve_global_path = /etc/dovecot/default.sieve
> }
> protocols = sieve imap
> service auth {
>   unix_listener auth-client {
>     mode = 0666
>   }
>   user = root
> }
> service imap-login {
>   inet_listener imap {
>     port = 0
>   }
> }
> service imap {
>   executable = /usr/local/sbin/dovecot-imap-fix
> }
> ssl_ca = </etc/ssl/sub.class1.server.ca.crt
> ssl_cert = </etc/ssl/mail.crt
> ssl_key = </etc/ssl/mail.key
> userdb {
>   driver = prefetch
> }
> userdb {
>   args = /etc/dovecot/dovecot-ldap.conf
>   driver = ldap
> }
> protocol imap {
>   imap_client_workarounds = tb-extra-mailbox-sep
>   mail_max_userip_connections = 15
>   mail_plugins = acl
> }
> protocol pop3 {
>   pop3_uidl_format = %08Xu%08Xv
> }
> protocol lda {
>   hostname = mail.intra.local
>   mail_plugins = sieve
>   postmaster_address = postmaster at intra.local
> }
> 
> 
> 
> On 2014-07-10 8:23, Timo Sirainen wrote:
>> You have misconfigured Dovecot's auth sockets. Providing doveconf -n
>> output would help figuring out the problem. Or just delete all the
>> auth-related socket settings from config files and it should work.
>>
>> On 9.7.2014, at 0.03, Lukas Haase <lukashaase at gmx.at> wrote:
>>
>>> May I gently "push" this? The string "BUG: Authentication client
>>> sent unknown handshake command" comes from dovecot (presumably it's
>>> in the source code) so I think it shouldn't be too mysterious
>>> what's happening here.
>>>
>>> Thank you, Luke
>>>
>>> On 2014-07-03 19:10, Lukas Haase wrote:
>>>> Hi,
>>>>
>>>> Some time ago my dovecot started to become BUGgy: Evertime I
>>>> restart the system, dovecot is started but I cannot login. I see
>>>> the following information in the logs:
>>>>
>>>> Jul  4 04:04:36 mail dovecot: auth: 
>>>> passwd-file(user,127.11.91.218,<nfkQjFT9vwCADFra>): no passwd
>>>> file: /etc/dovecot/imap.passwd Jul  4 04:04:36 mail dovecot:
>>>> auth: Error: BUG: Authentication client sent unknown handshake
>>>> command: 
>>>> REQUEST?1183186945?20438?1?a8c7241e7b0778f9f0125da760cd16fa Jul
>>>> 4 04:04:36 mail dovecot: imap: Error: Authentication server
>>>> didn't send valid SPID as expected: MECH#011PLAIN#011plaintext 
>>>> Jul  4 04:04:36 mail dovecot: imap: Error: Disconnected from
>>>> auth server, aborting (client-pid=20438 client-id=1) Jul  4
>>>> 04:04:36 mail dovecot: imap-login: Internal login failure 
>>>> (pid=20438 id=1) (internal failure, 1 succesful auths):
>>>> user=<user>, method=PLAIN, rip=127.11.91.218, lip=73.82.101.172,
>>>> mpid=20439, TLS, session=<nfkQjFT9vwCADFra>
>>>>
>>>> It does not help to restart the client. But when I then restart
>>>> the server service dovecot restart it works again.
>>>>
>>>> But this is very dangerous because the server might reboot and I
>>>> might not immideately have the chance to restart dovecot
>>>> manually.
>>>>
>>>> What's going on here?
>>>>
>>>> mail:/# uname -a Linux mail 2.6.32-openvz-042stab090.2-amd64 #1
>>>> SMP Sat Jun 21 00:22:42 MSK 2014 i686 GNU/Linux mail:/# dovecot
>>>> --version 2.1.7
>>>>
>>>> Thanks, Luke
>>>>
>>
>