Уважаемые гуру. У меня возникла проблема. Вроде письма приходят и уходят. И случайно обнаружил вот такую бяку. Когда я набираю login и ввожу люьой пароль он заходит в ящик? Какой бы я пароль бы не вводил он все равно заходит. Почему? Что у меня в конфиге не так? Уже накапался и уже в голове каша. Может быть подскажете?
Вот мой конфиг
--main.cf
append_dot_mydomain = no
biff = no
broken_sasl_auth_clients = yes
config_directory = /etc/postfix
inet_interfaces = all
mailbox_size_limit = 0
mydestination = localhost
myhostname = mail.nnx.com
mynetworks = 127.0.0.0/8, 192.168.0.0/24
myorigin = nnx.com
recipient_delimiter = +
relayhost =
smtpd_data_restrictions = reject_unauth_pipelining, reject_multi_recipient_bounce, permit
smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_non_fqdn_hostname, reject_non_fqdn_sender, reject_non_fqdn_recipient, reject_unauth_destination, reject_unauth_pipelining, reject_invalid_hostname, reject_unknown_sender_domain, reject_rbl_client zen.spamhaus.org, reject_rbl_client list.dsbl.org, reject_rhsbl_sender dsn.fc-ignorant.org, check_policy_service inet:127.0.0.1:60000, permit
smtpd_sasl_auth_enable = yes
smtpd_sasl_exceptions_networks = $mynetworks
smtpd_sasl_path = private/auth
smtpd_sasl_security_options = noanonymous
smtpd_sasl_type = dovecot
smtpd_tls_cert_file = /var/mail/certs/mail-cert.pem
smtpd_tls_key_file = /var/mail/certs/mail-key.pem
smtpd_tls_loglevel = 0
smtpd_tls_received_header = no
smtpd_tls_security_level = may
smtpd_tls_session_cache_database = btree:/var/spool/postfix/smtpd_tls_session_cache
tls_random_source = dev:/dev/urandom
transport_maps = hash:/etc/postfix/transport
virtual_alias_maps = proxy:mysql:/etc/postfix/mysql_virtual_alias_maps.cf
virtual_create_maildirsize = yes
virtual_gid_maps = static:8
virtual_mailbox_base = /var/mail/mail
virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql_virtual_domains_maps.cf
virtual_mailbox_limit_override = yes
virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql_virtual_mailbox_maps.cf
virtual_maildir_limit_message = "The user you are trying to reach has exceeded their quota."
virtual_minimum_uid = 150
virtual_overquota_bounce = yes
virtual_transport = dovecot
virtual_uid_maps = static:150

--dovecot.conf
base_dir: /var/run/dovecot/
log_timestamp: %Y-%m-%d %H:%M:%S
protocols: imap imaps pop3 pop3s
listen(default): *:143
listen(imap): *:143
listen(pop3): *:110
ssl_listen(default): *:993
ssl_listen(imap): *:993
ssl_listen(pop3): *:995
ssl_cert_file: /var/mail/certs/mail-cert.pem
ssl_key_file: /var/mail/certs/mail-key.pem
ssl_verify_client_cert: yes
disable_plaintext_auth: no
login_dir: /var/run/dovecot//login
login_executable(default): /usr/lib/dovecot/imap-login
login_executable(imap): /usr/lib/dovecot/imap-login
login_executable(pop3): /usr/lib/dovecot/pop3-login
first_valid_uid: 150
last_valid_uid: 150
mail_privileged_group: mail
mail_location: /var/mail/mail/%d/%u
maildir_copy_with_hardlinks: yes
mail_executable(default): /usr/lib/dovecot/imap
mail_executable(imap): /usr/lib/dovecot/imap
mail_executable(pop3): /usr/lib/dovecot/pop3
mail_plugins(default): quota imap_quota
mail_plugins(imap): quota imap_quota
mail_plugins(pop3): quota
mail_plugin_dir(default): /usr/lib/dovecot/modules/imap
mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap
mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3
pop3_uidl_format(default):
pop3_uidl_format(imap):
pop3_uidl_format(pop3): %08Xu%08Xv
auth default:
  user: nobody
  passdb:
    driver: pam
  passdb:
    driver: sql
    args: /etc/dovecot/dovecot-sql.conf
  userdb:
    driver: passwd
  userdb:
    driver: sql
    args: /etc/dovecot/dovecot-sql.conf
  socket:
    type: listen
    client:
      path: /var/spool/postfix/private/auth
      mode: 432
      user: postfix
      group: postfix
    master:
      path: /var/run/dovecot/auth-master
      mode: 432
      user: vmail
      group: mail

--dovecot.conf
userdb_uid, gid as userdb_gid FROM users WHERE userid = '%u'
user_query = SELECT '/var/mail/mail/%d/%n' as home, 'maildir:/var/mail/mail/%d/%n' as mail, 150 AS uid, 8 AS gid, concat('dirsize:storage=', quota) AS quota FROM mailbox WHERE username = '%u' AND active = '1'
userdb_mail, 150 as userdb_uid, 8 as userdb_gid FROM mailbox WHERE username = '%u' AND active = '1'
password_query = SELECT null AS password, '%u' AS user

• Postfix+Dovecot не могу разобраться,ALex_hha, 12:22 , 02-Сен-08
  • Postfix+Dovecot не могу разобраться,zafik, 19:44 , 02-Сен-08
    • Postfix+Dovecot не могу разобраться,ALex_hha, 17:57 , 03-Сен-08

>password_query = SELECT null AS password, '%u' AS user

это что за бред?!

>>password_query = SELECT null AS password, '%u' AS user
>
>это что за бред?!

Во, исправил на
password_query = SELECT username as user, password, ‘/var/vmail/%d/%n’ as userdb_home, ‘maildir:/var/vmail/%d/%n’ as userdb_mail, 150 as userdb_uid, 8 as userdb_gid FROM mailbox WHERE username = ‘%u’ AND active = ‘1′

И заработала авторизация. Спасибо.
Странно одно, почему то в руководстве сказанно, если используете авторизацию сертификата, то
# If using client certificates for authentication, comment the above and uncomment the following
#password_query = SELECT null AS password, ‘%u’ AS user

Ссылка на мануал http://johnny.chadda.se/2007/04/15/mail-server-howto-postfix.../

>[оверквотинг удален]
>= ‘%u’ AND active = ‘1′
>
>И заработала авторизация. Спасибо.
>Странно одно, почему то в руководстве сказанно, если используете авторизацию сертификата, то
>
># If using client certificates for authentication, comment the above and uncomment
>the following
>#password_query = SELECT null AS password, ‘%u’ AS user
>
>Ссылка на мануал http://johnny.chadda.se/2007/04/15/mail-server-howto-postfix.../

Я не вижу чтобы вы использовали аутентификацию по ключам. Не путать с SSL/TLS