Authentication Failure

[Michael Nguyen]

Hey guys,

So, our CEO is getting an intermittent login failure and I'm not sure
how to track it down.  I checked the logs and I see entries like this
that coincide with his complaints:

Jun 18 21:16:00 web05 imapd: LOGIN FAILED, user=THE_CEO,
ip=[::ffff:10.8.167.140]

Now, what makes these entries so odd is that there are no corresponding
logs for authdaemond.  All other login failure logs look like something
of the sort:

Jun 18 21:47:41 web05 authdaemond: zero rows returned
Jun 18 21:47:41 web05 pop3d: LOGIN FAILED, user=BAD_USERNAME,
ip=[::ffff:10.8.167.140]

Jun 18 21:59:35 web05 authdaemond: authmysql: REJECT - try next module
Jun 18 21:59:35 web05 authdaemond: FAIL, all modules rejected
Jun 18 21:59:35 web05 pop3d: LOGIN FAILED, user=FAT_FINGER,
ip=[::ffff:10.8.167.140]

I changed the usernames obviously, but otherwise the logs are verbatim.  
So my question is this...what situation would lead to a login failure
without a corresponding authdaemond log?

Courier IMAP 4.01
Courier Authlib 0.53


Michael

-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://sourceforge.net/services/buy/index.php
_______________________________________________
courier-users mailing list
courier-users@...
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

[Gordon Messmer]

Michael Nguyen wrote:
> So, our CEO is getting an intermittent login failure and I'm not sure
> how to track it down.  I checked the logs and I see entries like this
> that coincide with his complaints:
>
> Jun 18 21:16:00 web05 imapd: LOGIN FAILED, user=THE_CEO,
> ip=[::ffff:10.8.167.140]
>
> Now, what makes these entries so odd is that there are no corresponding
> logs for authdaemond.

Are there any other errors from imapd?  Perhaps the queue for authdaemon
is full and imapd can't connect.  If that were the case, you'd want to
find out how long your queries are taking, and whether or not you can
speed that up.


-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://sourceforge.net/services/buy/index.php
_______________________________________________
courier-users mailing list
courier-users@...
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

[Michael Nguyen]

Gordon Messmer wrote:

Michael Nguyen wrote:
  

So, our CEO is getting an intermittent login failure and I'm not sure 
how to track it down.  I checked the logs and I see entries like this 
that coincide with his complaints:

Jun 18 21:16:00 web05 imapd: LOGIN FAILED, user=THE_CEO, 
ip=[::ffff:10.8.167.140]

Now, what makes these entries so odd is that there are no corresponding 
logs for authdaemond.
    

Are there any other errors from imapd?  Perhaps the queue for authdaemon 
is full and imapd can't connect.  If that were the case, you'd want to 
find out how long your queries are taking, and whether or not you can 
speed that up.

  

[snip]

I greatly appreciate your writing, Gordon.  The only thing about this is that I think I've seen what you're talking about (the queue being full).  When I've seen this, I get "Input/output" errors from Courier IMAP.  This is always fixed by either:

 - Increasing threads
 - Adding another Courier IMAP/Authlib front end proxy to the load balancer
 - Fixing the database problem  ;-)

I think this problem is different and it seems to be only happening to this user.  Also, there are no other errors from imapd when this happens.


Michael





-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://sourceforge.net/services/buy/index.php
_______________________________________________
courier-users mailing list
courier-users@...
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users