[Bug 874135] Re: mail-stack-delivery does not install postfix->dovecot sasl authentication with dovecot 2.x

[James Page]

Fixed packaged uploaded to oneiric-proposed.

** Description changed:

  SRU Information:
  
  IMPACT: Attempting to send email to postfix using STARTTLS connections
  against the default mail-stack-delivery package fails as dovecot has not
  created a sasl authentication socket for postfix to communicate over.
  
  FIX: Add updated configuration to 01-mail-stack-delivery.conf (see
  original bug report) for dovecot to ensure that supported auth
  mechanisms are enabled and the socket for postfix is created.
+ 
+ TEST CASE:
+ 1) Install mail-stack-delivery on a fresh server install
+   - Access Internet site option and ensure server is configured with a FQDN
+ 
+ 2) Restart dovecot carefully i.e. stop dovecot; pause; start dovecot
+ (bug 873390)
+ 
+ 3) Configure a mail client (i.e. thunderbird) with an account on the mail server:
+   - Ensure outgoing mail configuration uses STARTTLS with a valid username/password on the mail server
+   - Ensure inbound server configuration uses IMAP with SSL/TLS with a valid username/password
+   - Accept certificates (they are self signed)
+ 
+ 4) Send an email to the account on the mail server using the mail server:
+   - Send will fail with the following error in /var/log/mail.log
+ Oct 14 13:58:14 mercury postfix/smtpd[11876]: warning: SASL: Connect to private/dovecot-auth failed: No such file or directory
+ Oct 14 13:58:14 mercury postfix/smtpd[11876]: fatal: no SASL authentication mechanisms
+ Oct 14 13:58:15 mercury postfix/master[11834]: warning: process /usr/lib/postfix/smtpd pid 11876 exit status 1
+ Oct 14 13:58:15 mercury postfix/master[11834]: warning: /usr/lib/postfix/smtpd: bad command startup -- throttling
+ 
+ With the fix in place the mail is sent successfully and should appear in
+ the associated inbox.
+ 
+ REGRESSION POTENTIAL: Limited - this function is already broken in
+ oneiric and the change is relatively isolated.
+ 
+ ----
+ 
+ The mail-stack-delivery package includes a dovecot auth file - 01-mail-
+ stack-delivery.auth.
+ 
+ This is installed to /etc/dovecot/auth.d; however
+ 
+ 1) dovecot 2.x by default does not try_include files in this directory
+ 2) the auth configuration does not work with dovecot 2.x
+ 
+ I think the auth configuration can now be included in 01-mail-stack-
+ delivery.conf as detailed below:
+ 
+ # Authentication configuration
+ auth_mechanisms = plain login
+ 
+ service auth {
+   # Postfix smtp-auth
+   unix_listener /var/spool/postfix/private/dovecot-auth {
+     mode = 0660
+     user = postfix
+     group = postfix
+   }
+ }
+ 
+ With the package in its current state postfix cannot SASL authenticate
+ against dovecot.
+ 
+ ProblemType: Bug
+ DistroRelease: Ubuntu 11.10
+ Package: mail-stack-delivery 1:2.0.13-1ubuntu3
+ ProcVersionSignature: Ubuntu 3.0.0-12.20-server 3.0.4
+ Uname: Linux 3.0.0-12-server x86_64
+ ApportVersion: 1.23-0ubuntu3
+ Architecture: amd64
+ Date: Fri Oct 14 13:10:50 2011
+ PackageArchitecture: all
+ ProcEnviron:
+  LANGUAGE=en_GB:
+  LANG=en_GB.UTF-8
+  SHELL=/bin/bash
+ SourcePackage: dovecot
+ UpgradeStatus: No upgrade log present (probably fresh install)

** Also affects: dovecot (Ubuntu Oneiric)
   Importance: Undecided
       Status: New

** Changed in: dovecot (Ubuntu Oneiric)
    Milestone: None => oneiric-updates

** Also affects: dovecot (Ubuntu Precise)
   Importance: High
     Assignee: James Page (james-page)
       Status: In Progress

** Changed in: dovecot (Ubuntu Oneiric)
   Importance: Undecided => High

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to dovecot in Ubuntu.
https://bugs.launchpad.net/bugs/874135

Title:
  mail-stack-delivery does not install postfix->dovecot sasl
  authentication with dovecot 2.x

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dovecot/+bug/874135/+subscriptions