Op maandag 29 januari 2024 19:39:27 CET schreef Carlos E. R.:
On 2024-01-29 18:26, Freek de Kruijf wrote:
Op maandag 29 januari 2024 16:48:15 CET schreef Freek de Kruijf:
Op maandag 29 januari 2024 15:27:09 CET schreef Freek de Kruijf:
Op vrijdag 26 januari 2024 12:01:25 CET schreef Freek de Kruijf:
Suddenly, probably caused by a recent update, my KMail is unable to connect to the dovecot imap server on the same system. The server has a listening port on 127.0.0.1:143 and support STARTTLS. KMail is configured to connect to that port. On that system "telnet localhost 143" shows: Trying ::1... telnet: connect to address ::1: Connection refused Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS AUTH=PLAIN] Dovecot ready.
Using "openssl s_client -connect localhost:143 -quiet" I get: 40F756DECB7F0000:error:0A00010B:SSL routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:354:
Using "openssl s_client -connect localhost:143 -starttls imap -quiet" I can enter "tag login <username> <password>" and I get:
tag NO [AUTHENTICATIONFAILED] Authentication failed.
But I am sure username and password are OK. KMail also gets an authentication failure. But yesterday all was OK.
Filed a bug report: https://bugzilla.opensuse.org/show_bug.cgi?id=1219301
I went back to snapshot 20240122 and authentication works. Setting Tumbleweed on 20240123 and installing only pam-1.6.0-1.1 made it not working.
So there is something wrong in pam-1.6.0-1.1.
According to the bug report the problem is in apparmor. Waiting for solution to appear in following snapshots.
I don't know what is the problem with apparmor, but you could try running "aa-logprof" as root, and following your nose there :-)
dovecot via pam is now using another library, which needs approval for access via apparmor. -- fr.gr. member openSUSE Freek de Kruijf