• Willkommen im Linux Club - dem deutschsprachigen Supportforum für GNU/Linux. Registriere dich kostenlos, um alle Inhalte zu sehen und Fragen zu stellen.

Benutzerpasswörter werden ständig zurückgesetzt

Status
Für weitere Antworten geschlossen.

Shiro

Newbie
Hi,

ich habe hier einen Mailserver zu laufen mit Suse Linux 9.1.
Das ganze verwalte ich mit Webmin.

Ich weiss das nicht viele was von Webmin halten, aber ich finds ok.

Mein Problem:

Seit neuestem werden die Passwörter der Benutzerkonten von selbst geändert und das jeden tag. ohne grund und ohne etwas geändert zu haben.

danke schonmal

Gruss
Shiro
 

theBruce

Newbie
Hallo,

es wäre hilfreich, wenn du posten würdest was für einen Mailserver du verwendest und was für eine Authentifizierung.
Ein paar Logdateien wären auch sehr hilfreich.

lg theBruce
 
OP
S

Shiro

Newbie
ich verwende postfix mit der authentifizierung saslauth

messages logfile:
Dec 2 07:57:19 mailserver xinetd[3899]: Service ftp failed to start and is deac
tivated.
Dec 2 07:57:19 mailserver xinetd[3899]: xinetd Version 2.3.13 started with libw
rap loadavg options compiled in.
Dec 2 07:57:19 mailserver xinetd[3899]: Started working: 5 available services
Dec 2 07:57:28 mailserver kdm: :0[3735]: pam_unix2: session started for user ro
ot, service xdm
Dec 2 07:58:33 mailserver kernel: JBD: barrier-based sync failed on sdd1 - disa
bling barriers
Dec 2 07:59:00 mailserver /USR/SBIN/CRON[4213]: (root) CMD ( rm -f /var/spool/c
ron/lastrun/cron.hourly)
Dec 2 07:59:00 mailserver /USR/SBIN/CRON[4215]: (root) CMD (rm /var/spool/mail/
virenmeldungen)
Dec 2 08:01:00 mailserver /USR/SBIN/CRON[4462]: (root) CMD (/usr/bin/fetchmail -a >>/var/log/fetchmail 2>&1)
Dec 2 08:01:00 mailserver /USR/SBIN/CRON[4458]: (root) CMD ( /usr/bin/fetchmail -a >>/var/log/fetchmail 2>&1)
Dec 2 08:01:00 mailserver /USR/SBIN/CRON[4460]: (root) CMD (/usr/bin/php -f /ap ache/www/htdocs/FileShare/delete.php)
Dec 2 08:04:45 mailserver webmin[4677]: Logout by root from 192.168.12.3
Dec 2 08:13:07 mailserver kernel: JBD: barrier-based sync failed on sdb1 - disa bling barriers
Dec 2 08:13:11 mailserver kernel: sym0: SCSI parity error detected: SCR1=132 DB C=50000000 SBCL=0
Dec 2 08:36:38 mailserver -- MARK --
Dec 2 08:56:38 mailserver -- MARK --
Dec 2 08:59:00 mailserver /USR/SBIN/CRON[6888]: (root) CMD ( rm -f /var/spool/c ron/lastrun/cron.hourly)
Dec 2 08:59:00 mailserver /USR/SBIN/CRON[6890]: (root) CMD (rm /var/spool/mail/ virenmeldungen)
Dec 2 09:01:00 mailserver /USR/SBIN/CRON[6946]: (root) CMD ( /usr/bin/fetchmail -a >>/var/log/fetchmail 2>&1)
Dec 2 09:01:00 mailserver /USR/SBIN/CRON[6948]: (root) CMD (/usr/bin/php -f /ap ache/www/htdocs/FileShare/delete.php)
Dec 2 09:01:00 mailserver /USR/SBIN/CRON[6950]: (root) CMD (/usr/bin/fetchmail -a >>/var/log/fetchmail 2>&1)

mail logfile:
Dec 2 09:15:00 mailserver postfix/cleanup[7162]: 4B76F2744C2: message-id=<866776387556094.PVEMOTJJPO@estocker.info>
Dec 2 09:15:00 mailserver postfix/qmgr[3764]: 4B76F2744C2: from=<Roehrig@estocker.info>, size=5764, nrcpt=1 (queue active)
Dec 2 09:15:00 mailserver postfix/smtpd[7167]: disconnect from localhost[127.0.0.1]
Dec 2 09:15:00 mailserver postfix/lmtp[7163]: D7E4B2744A2: to=<technik@sovd.de>, orig_to=<technik@sozialverband.de>, relay=127.0.0.1[127.0.0.1], delay=1, status=sent (250 2.0.0 <technik@sovd.de > OK)
Dec 2 09:15:00 mailserver postfix/qmgr[3764]: D7E4B2744A2: removed
Dec 2 09:15:01 mailserver postfix/smtpd[7161]: disconnect from mx-out.forthnet.gr[193.92.150.30]
Dec 2 09:15:01 mailserver popper[7195]: (v4.0.5) Unable to get canonical name of client 192.168.12.63: Unknown host (1) [pop_init.c:1087]
Dec 2 09:15:01 mailserver popper[7196]: (v4.0.5) Unable to get canonical name of client 192.168.12.63: Unknown host (1) [pop_init.c:1087]
Dec 2 09:15:01 mailserver popper[7197]: (v4.0.5) Unable to get canonical name of client 192.168.12.63: Unknown host (1) [pop_init.c:1087]
Dec 2 09:15:01 mailserver popper[7198]: (v4.0.5) Unable to get canonical name of client 192.168.12.63: Unknown host (1) [pop_init.c:1087]
Dec 2 09:15:11 mailserver popper[7195]: andreas.bieber at 192.168.12.63 (192.168.12.63): -ERR [AUTH] Password supplied for "andreas.bieber" is incorrect. [pop_pass.c:483]
Dec 2 09:15:11 mailserver popper[7195]: [AUTH] Failed attempted login to andreas.bieber from host (192.168.12.63) 192.168.12.63 [pop_pass.c:1383]
Dec 2 09:15:11 mailserver popper[7197]: delphi at 192.168.12.63 (192.168.12.63): -ERR [AUTH] Password supplied for "delphi" is incorrect. [pop_pass.c:492]
Dec 2 09:15:11 mailserver popper[7197]: [AUTH] Failed attempted login to delphi from host (192.168.12.63) 192.168.12.63 [pop_pass.c:1383]
Dec 2 09:15:11 mailserver popper[7196]: webminupdate at 192.168.12.63 (192.168.12.63): -ERR [AUTH] Password supplied for "webminupdate" is incorrect. [pop_pass.c:492]
Dec 2 09:15:11 mailserver popper[7196]: [AUTH] Failed attempted login to webminupdate from host (192.168.12.63) 192.168.12.63 [pop_pass.c:1383]
Dec 2 09:15:11 mailserver popper[7198]: myspam at 192.168.12.63 (192.168.12.63): -ERR [AUTH] Password supplied for "myspam" is incorrect. [pop_pass.c:492]
Dec 2 09:15:11 mailserver popper[7198]: [AUTH] Failed attempted login to myspam from host (192.168.12.63) 192.168.12.63 [pop_pass.c:1383]
Dec 2 09:16:01 mailserver popper[7206]: (v4.0.5) Unable to get canonical name of client 192.168.12.63: Unknown host (1) [pop_init.c:1087]
Dec 2 09:16:01 mailserver popper[7207]: (v4.0.5) Unable to get canonical name of client 192.168.12.63: Unknown host (1) [pop_init.c:1087]
Dec 2 09:16:01 mailserver popper[7208]: (v4.0.5) Unable to get canonical name of client 192.168.12.63: Unknown host (1) [pop_init.c:1087]
Dec 2 09:16:01 mailserver popper[7209]: (v4.0.5) Unable to get canonical name of client 192.168.12.63: Unknown host (1) [pop_init.c:1087]
Dec 2 09:16:02 mailserver popper[7210]: (v4.0.5) Unable to get canonical name of client 192.168.12.23: Unknown host (1) [pop_init.c:1087]
Dec 2 09:16:11 mailserver popper[7206]: andreas.bieber at 192.168.12.63 (192.168.12.63): -ERR [AUTH] Password supplied for "andreas.bieber" is incorrect. [pop_pass.c:483]
Dec 2 09:16:11 mailserver popper[7206]: [AUTH] Failed attempted login to andreas.bieber from host (192.168.12.63) 192.168.12.63 [pop_pass.c:1383]
Dec 2 09:16:11 mailserver popper[7207]: webminupdate at 192.168.12.63 (192.168.12.63): -ERR [AUTH] Password supplied for "webminupdate" is incorrect. [pop_pass.c:492]
Dec 2 09:16:11 mailserver popper[7207]: [AUTH] Failed attempted login to webminupdate from host (192.168.12.63) 192.168.12.63 [pop_pass.c:1383]
Dec 2 09:16:11 mailserver popper[7208]: delphi at 192.168.12.63 (192.168.12.63): -ERR [AUTH] Password supplied for "delphi" is incorrect. [pop_pass.c:492]
Dec 2 09:16:11 mailserver popper[7208]: [AUTH] Failed attempted login to delphi from host (192.168.12.63) 192.168.12.63 [pop_pass.c:1383]
Dec 2 09:16:11 mailserver popper[7209]: myspam at 192.168.12.63 (192.168.12.63): -ERR [AUTH] Password supplied for "myspam" is incorrect. [pop_pass.c:492]
Dec 2 09:16:11 mailserver popper[7209]: [AUTH] Failed attempted login to myspam from host (192.168.12.63) 192.168.12.63 [pop_pass.c:1383]
Dec 2 09:16:12 mailserver popper[7210]: jochen.weigelt at 192.168.12.23 (192.168.12.23): -ERR [AUTH] Password supplied for "jochen.weigelt" is incorrect. [pop_pass.c:492]
Dec 2 09:16:12 mailserver popper[7210]: [AUTH] Failed attempted login to jochen.weigelt from host (192.168.12.23) 192.168.12.23 [pop_pass.c:1383]
Dec 2 09:16:26 mailserver postfix/smtpd[7167]: connect from localhost[127.0.0.1]
Dec 2 09:16:26 mailserver postfix/smtpd[7167]: 28CD02744C2: client=localhost[127.0.0.1]
Dec 2 09:16:26 mailserver postfix/cleanup[7162]: 28CD02744C2: message-id=<iB29GQP00407165@mailserver>
Dec 2 09:16:26 mailserver postfix/smtpd[7167]: disconnect from localhost[127.0.0.1]
Dec 2 09:16:26 mailserver postfix/qmgr[3764]: 28CD02744C2: from=<>, size=3301, nrcpt=1 (queue active)
Dec 2 09:16:26 mailserver postfix/lmtp[7163]: 447CE2744A2: to=<contact@sovd.de>, orig_to=<contact@sozialverband.de>, relay=127.0.0.1[127.0.0.1], delay=2, status=sent (250 2.0.0 <contact@sovd.de > OK)
Dec 2 09:16:26 mailserver postfix/qmgr[3764]: 447CE2744A2: removed
Dec 2 09:16:28 mailserver postfix/smtpd[7161]: connect from mail.scheduleonline.com[69.43.132.156]
Dec 2 09:16:29 mailserver postfix/smtpd[7161]: 160642744A2: client=mail.scheduleonline.com[69.43.132.156]
Dec 2 09:16:29 mailserver postfix/cleanup[7162]: 160642744A2: message-id=<771888028391451.NJLUIYHOQS@estocker.info>
Dec 2 09:16:29 mailserver postfix/qmgr[3764]: 160642744A2: from=<Hirasuna@estocker.info>, size=4658, nrcpt=1 (queue active)
Dec 2 09:16:29 mailserver postfix/smtpd[7167]: connect from localhost[127.0.0.1]
Dec 2 09:16:29 mailserver postfix/smtpd[7167]: 9E0772744C2: client=localhost[127.0.0.1]
Dec 2 09:16:29 mailserver postfix/cleanup[7162]: 9E0772744C2: message-id=<771888028391451.NJLUIYHOQS@estocker.info>
Dec 2 09:16:29 mailserver postfix/qmgr[3764]: 9E0772744C2: from=<Hirasuna@estocker.info>, size=4823, nrcpt=1 (queue active)
Dec 2 09:16:29 mailserver postfix/smtpd[7167]: disconnect from localhost[127.0.0.1]
Dec 2 09:16:29 mailserver postfix/lmtp[7163]: 160642744A2: to=<bernd@sovd.de>, orig_to=<bernd@reichsbund.de>, relay=127.0.0.1[127.0.0.1], delay=1, status=sent (250 2.0.0 <bernd@sovd.de > OK)
Dec 2 09:16:29 mailserver postfix/qmgr[3764]: 160642744A2: removed
Dec 2 09:16:33 mailserver postfix/smtpd[7216]: connect from mailout04.sul.t-online.com[194.25.134.18]
Dec 2 09:16:33 mailserver postfix/smtpd[7216]: 75C9D2744A2: client=mailout04.sul.t-online.com[194.25.134.18]
Dec 2 09:16:33 mailserver postfix/cleanup[7162]: 75C9D2744A2: message-id=<1CZkzb-00wIQ40@mailin04.aul.t-online.de>
Dec 2 09:16:33 mailserver postfix/qmgr[3764]: 75C9D2744A2: from=<>, size=3428, nrcpt=1 (queue active)
Dec 2 09:16:33 mailserver postfix/smtpd[7167]: connect from localhost[127.0.0.1]
Dec 2 09:16:33 mailserver postfix/smtpd[7167]: AE1E42744C2: client=localhost[127.0.0.1]
Dec 2 09:16:33 mailserver postfix/cleanup[7162]: AE1E42744C2: message-id=<1CZkzb-00wIQ40@mailin04.aul.t-online.de>
Dec 2 09:16:33 mailserver postfix/qmgr[3764]: AE1E42744C2: from=<>, size=3604, nrcpt=1 (queue active)
Dec 2 09:16:33 mailserver postfix/smtpd[7167]: disconnect from localhost[127.0.0.1]
Dec 2 09:16:33 mailserver postfix/smtpd[7216]: disconnect from mailout04.sul.t-online.com[194.25.134.18]
Dec 2 09:15:00 mailserver postfix/cleanup[7162]: 4B76F2744C2: message-id=<866776387556094.PVEMOTJJPO@estocker.info>
Dec 2 09:15:00 mailserver postfix/qmgr[3764]: 4B76F2744C2: from=<Roehrig@estocker.info>, size=5764, nrcpt=1 (queue active)
Dec 2 09:15:00 mailserver postfix/smtpd[7167]: disconnect from localhost[127.0.0.1]
Dec 2 09:15:00 mailserver postfix/lmtp[7163]: D7E4B2744A2: to=<technik@sovd.de>, orig_to=<technik@sozialverband.de>, relay=127.0.0.1[127.0.0.1], delay=1, status=sent (250 2.0.0 <technik@sovd.de > OK)
Dec 2 09:15:00 mailserver postfix/qmgr[3764]: D7E4B2744A2: removed
Dec 2 09:15:01 mailserver postfix/smtpd[7161]: disconnect from mx-out.forthnet.gr[193.92.150.30]
Dec 2 09:15:01 mailserver popper[7195]: (v4.0.5) Unable to get canonical name of client 192.168.12.63: Unknown host (1) [pop_init.c:1087]
Dec 2 09:15:01 mailserver popper[7196]: (v4.0.5) Unable to get canonical name of client 192.168.12.63: Unknown host (1) [pop_init.c:1087]
Dec 2 09:15:01 mailserver popper[7197]: (v4.0.5) Unable to get canonical name of client 192.168.12.63: Unknown host (1) [pop_init.c:1087]
Dec 2 09:15:01 mailserver popper[7198]: (v4.0.5) Unable to get canonical name of client 192.168.12.63: Unknown host (1) [pop_init.c:1087]
Dec 2 09:15:11 mailserver popper[7195]: andreas.bieber at 192.168.12.63 (192.168.12.63): -ERR [AUTH] Password supplied for "andreas.bieber" is incorrect. [pop_pass.c:483]
Dec 2 09:15:11 mailserver popper[7195]: [AUTH] Failed attempted login to andreas.bieber from host (192.168.12.63) 192.168.12.63 [pop_pass.c:1383]
Dec 2 09:15:11 mailserver popper[7197]: delphi at 192.168.12.63 (192.168.12.63): -ERR [AUTH] Password supplied for "delphi" is incorrect. [pop_pass.c:492]
Dec 2 09:15:11 mailserver popper[7197]: [AUTH] Failed attempted login to delphi from host (192.168.12.63) 192.168.12.63 [pop_pass.c:1383]
Dec 2 09:15:11 mailserver popper[7196]: webminupdate at 192.168.12.63 (192.168.12.63): -ERR [AUTH] Password supplied for "webminupdate" is incorrect. [pop_pass.c:492]
Dec 2 09:15:11 mailserver popper[7196]: [AUTH] Failed attempted login to webminupdate from host (192.168.12.63) 192.168.12.63 [pop_pass.c:1383]
Dec 2 09:15:11 mailserver popper[7198]: myspam at 192.168.12.63 (192.168.12.63): -ERR [AUTH] Password supplied for "myspam" is incorrect. [pop_pass.c:492]
Dec 2 09:15:11 mailserver popper[7198]: [AUTH] Failed attempted login to myspam from host (192.168.12.63) 192.168.12.63 [pop_pass.c:1383]
Dec 2 09:16:01 mailserver popper[7206]: (v4.0.5) Unable to get canonical name of client 192.168.12.63: Unknown host (1) [pop_init.c:1087]
Dec 2 09:16:01 mailserver popper[7207]: (v4.0.5) Unable to get canonical name of client 192.168.12.63: Unknown host (1) [pop_init.c:1087]
Dec 2 09:16:01 mailserver popper[7208]: (v4.0.5) Unable to get canonical name of client 192.168.12.63: Unknown host (1) [pop_init.c:1087]
Dec 2 09:16:01 mailserver popper[7209]: (v4.0.5) Unable to get canonical name of client 192.168.12.63: Unknown host (1) [pop_init.c:1087]
Dec 2 09:16:02 mailserver popper[7210]: (v4.0.5) Unable to get canonical name of client 192.168.12.23: Unknown host (1) [pop_init.c:1087]
Dec 2 09:16:11 mailserver popper[7206]: andreas.bieber at 192.168.12.63 (192.168.12.63): -ERR [AUTH] Password supplied for "andreas.bieber" is incorrect. [pop_pass.c:483]
Dec 2 09:16:11 mailserver popper[7206]: [AUTH] Failed attempted login to andreas.bieber from host (192.168.12.63) 192.168.12.63 [pop_pass.c:1383]
Dec 2 09:16:11 mailserver popper[7207]: webminupdate at 192.168.12.63 (192.168.12.63): -ERR [AUTH] Password supplied for "webminupdate" is incorrect. [pop_pass.c:492]
Dec 2 09:16:11 mailserver popper[7207]: [AUTH] Failed attempted login to webminupdate from host (192.168.12.63) 192.168.12.63 [pop_pass.c:1383]
Dec 2 09:16:11 mailserver popper[7208]: delphi at 192.168.12.63 (192.168.12.63): -ERR [AUTH] Password supplied for "delphi" is incorrect. [pop_pass.c:492]
Dec 2 09:16:11 mailserver popper[7208]: [AUTH] Failed attempted login to delphi from host (192.168.12.63) 192.168.12.63 [pop_pass.c:1383]
Dec 2 09:16:11 mailserver popper[7209]: myspam at 192.168.12.63 (192.168.12.63): -ERR [AUTH] Password supplied for "myspam" is incorrect. [pop_pass.c:492]
Dec 2 09:16:11 mailserver popper[7209]: [AUTH] Failed attempted login to myspam from host (192.168.12.63) 192.168.12.63 [pop_pass.c:1383]
Dec 2 09:16:12 mailserver popper[7210]: jochen.weigelt at 192.168.12.23 (192.168.12.23): -ERR [AUTH] Password supplied for "jochen.weigelt" is incorrect. [pop_pass.c:492]
Dec 2 09:16:12 mailserver popper[7210]: [AUTH] Failed attempted login to jochen.weigelt from host (192.168.12.23) 192.168.12.23 [pop_pass.c:1383]
Dec 2 09:16:26 mailserver postfix/smtpd[7167]: connect from localhost[127.0.0.1]
Dec 2 09:16:26 mailserver postfix/smtpd[7167]: 28CD02744C2: client=localhost[127.0.0.1]
Dec 2 09:16:26 mailserver postfix/cleanup[7162]: 28CD02744C2: message-id=<iB29GQP00407165@mailserver>
Dec 2 09:16:26 mailserver postfix/smtpd[7167]: disconnect from localhost[127.0.0.1]
Dec 2 09:16:26 mailserver postfix/qmgr[3764]: 28CD02744C2: from=<>, size=3301, nrcpt=1 (queue active)
Dec 2 09:16:26 mailserver postfix/lmtp[7163]: 447CE2744A2: to=<contact@sovd.de>, orig_to=<contact@sozialverband.de>, relay=127.0.0.1[127.0.0.1], delay=2, status=sent (250 2.0.0 <contact@sovd.de > OK)
Dec 2 09:16:26 mailserver postfix/qmgr[3764]: 447CE2744A2: removed
Dec 2 09:16:28 mailserver postfix/smtpd[7161]: connect from mail.scheduleonline.com[69.43.132.156]
Dec 2 09:16:29 mailserver postfix/smtpd[7161]: 160642744A2: client=mail.scheduleonline.com[69.43.132.156]
Dec 2 09:16:29 mailserver postfix/cleanup[7162]: 160642744A2: message-id=<771888028391451.NJLUIYHOQS@estocker.info>
Dec 2 09:16:29 mailserver postfix/qmgr[3764]: 160642744A2: from=<Hirasuna@estocker.info>, size=4658, nrcpt=1 (queue active)
Dec 2 09:16:29 mailserver postfix/smtpd[7167]: connect from localhost[127.0.0.1]
Dec 2 09:16:29 mailserver postfix/smtpd[7167]: 9E0772744C2: client=localhost[127.0.0.1]
Dec 2 09:16:29 mailserver postfix/cleanup[7162]: 9E0772744C2: message-id=<771888028391451.NJLUIYHOQS@estocker.info>
Dec 2 09:16:29 mailserver postfix/qmgr[3764]: 9E0772744C2: from=<Hirasuna@estocker.info>, size=4823, nrcpt=1 (queue active)
Dec 2 09:16:29 mailserver postfix/smtpd[7167]: disconnect from localhost[127.0.0.1]
Dec 2 09:16:29 mailserver postfix/lmtp[7163]: 160642744A2: to=<bernd@sovd.de>, orig_to=<bernd@reichsbund.de>, relay=127.0.0.1[127.0.0.1], delay=1, status=sent (250 2.0.0 <bernd@sovd.de > OK)
Dec 2 09:16:29 mailserver postfix/qmgr[3764]: 160642744A2: removed
Dec 2 09:16:33 mailserver postfix/smtpd[7216]: connect from mailout04.sul.t-online.com[194.25.134.18]
Dec 2 09:16:33 mailserver postfix/smtpd[7216]: 75C9D2744A2: client=mailout04.sul.t-online.com[194.25.134.18]
Dec 2 09:16:33 mailserver postfix/cleanup[7162]: 75C9D2744A2: message-id=<1CZkzb-00wIQ40@mailin04.aul.t-online.de>
Dec 2 09:16:33 mailserver postfix/qmgr[3764]: 75C9D2744A2: from=<>, size=3428, nrcpt=1 (queue active)
Dec 2 09:16:33 mailserver postfix/smtpd[7167]: connect from localhost[127.0.0.1]
Dec 2 09:16:33 mailserver postfix/smtpd[7167]: AE1E42744C2: client=localhost[127.0.0.1]
Dec 2 09:16:33 mailserver postfix/cleanup[7162]: AE1E42744C2: message-id=<1CZkzb-00wIQ40@mailin04.aul.t-online.de>
Dec 2 09:16:33 mailserver postfix/qmgr[3764]: AE1E42744C2: from=<>, size=3604, nrcpt=1 (queue active)
Dec 2 09:16:33 mailserver postfix/smtpd[7167]: disconnect from localhost[127.0.0.1]
Dec 2 09:16:33 mailserver postfix/smtpd[7216]: disconnect from mailout04.sul.t-online.com[194.25.134.18]
Dec 2 09:15:00 mailserver postfix/cleanup[7162]: 4B76F2744C2: message-id=<866776387556094.PVEMOTJJPO@estocker.info>
Dec 2 09:15:00 mailserver postfix/qmgr[3764]: 4B76F2744C2: from=<Roehrig@estocker.info>, size=5764, nrcpt=1 (queue active)
Dec 2 09:15:00 mailserver postfix/smtpd[7167]: disconnect from localhost[127.0.0.1]
Dec 2 09:15:00 mailserver postfix/lmtp[7163]: D7E4B2744A2: to=<technik@sovd.de>, orig_to=<technik@sozialverband.de>, relay=127.0.0.1[127.0.0.1], delay=1, status=sent (250 2.0.0 <technik@sovd.de > OK)
Dec 2 09:15:00 mailserver postfix/qmgr[3764]: D7E4B2744A2: removed
Dec 2 09:15:01 mailserver postfix/smtpd[7161]: disconnect from mx-out.forthnet.gr[193.92.150.30]
Dec 2 09:15:01 mailserver popper[7195]: (v4.0.5) Unable to get canonical name of client 192.168.12.63: Unknown host (1) [pop_init.c:1087]
Dec 2 09:15:01 mailserver popper[7196]: (v4.0.5) Unable to get canonical name of client 192.168.12.63: Unknown host (1) [pop_init.c:1087]
Dec 2 09:15:01 mailserver popper[7197]: (v4.0.5) Unable to get canonical name of client 192.168.12.63: Unknown host (1) [pop_init.c:1087]
Dec 2 09:15:01 mailserver popper[7198]: (v4.0.5) Unable to get canonical name of client 192.168.12.63: Unknown host (1) [pop_init.c:1087]
Dec 2 09:15:11 mailserver popper[7195]: andreas.bieber at 192.168.12.63 (192.168.12.63): -ERR [AUTH] Password supplied for "andreas.bieber" is incorrect. [pop_pass.c:483]
Dec 2 09:15:11 mailserver popper[7195]: [AUTH] Failed attempted login to andreas.bieber from host (192.168.12.63) 192.168.12.63 [pop_pass.c:1383]
Dec 2 09:15:11 mailserver popper[7197]: delphi at 192.168.12.63 (192.168.12.63): -ERR [AUTH] Password supplied for "delphi" is incorrect. [pop_pass.c:492]
Dec 2 09:15:11 mailserver popper[7197]: [AUTH] Failed attempted login to delphi from host (192.168.12.63) 192.168.12.63 [pop_pass.c:1383]
Dec 2 09:15:11 mailserver popper[7196]: webminupdate at 192.168.12.63 (192.168.12.63): -ERR [AUTH] Password supplied for "webminupdate" is incorrect. [pop_pass.c:492]
Dec 2 09:15:11 mailserver popper[7196]: [AUTH] Failed attempted login to webminupdate from host (192.168.12.63) 192.168.12.63 [pop_pass.c:1383]
Dec 2 09:15:11 mailserver popper[7198]: myspam at 192.168.12.63 (192.168.12.63): -ERR [AUTH] Password supplied for "myspam" is incorrect. [pop_pass.c:492]
Dec 2 09:15:11 mailserver popper[7198]: [AUTH] Failed attempted login to myspam from host (192.168.12.63) 192.168.12.63 [pop_pass.c:1383]
Dec 2 09:16:01 mailserver popper[7206]: (v4.0.5) Unable to get canonical name of client 192.168.12.63: Unknown host (1) [pop_init.c:1087]
Dec 2 09:16:01 mailserver popper[7207]: (v4.0.5) Unable to get canonical name of client 192.168.12.63: Unknown host (1) [pop_init.c:1087]
Dec 2 09:16:01 mailserver popper[7208]: (v4.0.5) Unable to get canonical name of client 192.168.12.63: Unknown host (1) [pop_init.c:1087]
Dec 2 09:16:01 mailserver popper[7209]: (v4.0.5) Unable to get canonical name of client 192.168.12.63: Unknown host (1) [pop_init.c:1087]
Dec 2 09:16:02 mailserver popper[7210]: (v4.0.5) Unable to get canonical name of client 192.168.12.23: Unknown host (1) [pop_init.c:1087]
Dec 2 09:16:11 mailserver popper[7206]: andreas.bieber at 192.168.12.63 (192.168.12.63): -ERR [AUTH] Password supplied for "andreas.bieber" is incorrect. [pop_pass.c:483]
Dec 2 09:16:11 mailserver popper[7206]: [AUTH] Failed attempted login to andreas.bieber from host (192.168.12.63) 192.168.12.63 [pop_pass.c:1383]
Dec 2 09:16:11 mailserver popper[7207]: webminupdate at 192.168.12.63 (192.168.12.63): -ERR [AUTH] Password supplied for "webminupdate" is incorrect. [pop_pass.c:492]
Dec 2 09:16:11 mailserver popper[7207]: [AUTH] Failed attempted login to webminupdate from host (192.168.12.63) 192.168.12.63 [pop_pass.c:1383]
Dec 2 09:16:11 mailserver popper[7208]: delphi at 192.168.12.63 (192.168.12.63): -ERR [AUTH] Password supplied for "delphi" is incorrect. [pop_pass.c:492]
Dec 2 09:16:11 mailserver popper[7208]: [AUTH] Failed attempted login to delphi from host (192.168.12.63) 192.168.12.63 [pop_pass.c:1383]
Dec 2 09:16:11 mailserver popper[7209]: myspam at 192.168.12.63 (192.168.12.63): -ERR [AUTH] Password supplied for "myspam" is incorrect. [pop_pass.c:492]
Dec 2 09:16:11 mailserver popper[7209]: [AUTH] Failed attempted login to myspam from host (192.168.12.63) 192.168.12.63 [pop_pass.c:1383]
Dec 2 09:16:12 mailserver popper[7210]: jochen.weigelt at 192.168.12.23 (192.168.12.23): -ERR [AUTH] Password supplied for "jochen.weigelt" is incorrect. [pop_pass.c:492]
Dec 2 09:16:12 mailserver popper[7210]: [AUTH] Failed attempted login to jochen.weigelt from host (192.168.12.23) 192.168.12.23 [pop_pass.c:1383]
Dec 2 09:16:26 mailserver postfix/smtpd[7167]: connect from localhost[127.0.0.1]
Dec 2 09:16:26 mailserver postfix/smtpd[7167]: 28CD02744C2: client=localhost[127.0.0.1]
Dec 2 09:16:26 mailserver postfix/cleanup[7162]: 28CD02744C2: message-id=<iB29GQP00407165@mailserver>
Dec 2 09:16:26 mailserver postfix/smtpd[7167]: disconnect from localhost[127.0.0.1]
Dec 2 09:16:26 mailserver postfix/qmgr[3764]: 28CD02744C2: from=<>, size=3301, nrcpt=1 (queue active)
Dec 2 09:16:26 mailserver postfix/lmtp[7163]: 447CE2744A2: to=<contact@sovd.de>, orig_to=<contact@sozialverband.de>, relay=127.0.0.1[127.0.0.1], delay=2, status=sent (250 2.0.0 <contact@sovd.de > OK)
Dec 2 09:16:26 mailserver postfix/qmgr[3764]: 447CE2744A2: removed
Dec 2 09:16:28 mailserver postfix/smtpd[7161]: connect from mail.scheduleonline.com[69.43.132.156]
Dec 2 09:16:29 mailserver postfix/smtpd[7161]: 160642744A2: client=mail.scheduleonline.com[69.43.132.156]
Dec 2 09:16:29 mailserver postfix/cleanup[7162]: 160642744A2: message-id=<771888028391451.NJLUIYHOQS@estocker.info>
Dec 2 09:16:29 mailserver postfix/qmgr[3764]: 160642744A2: from=<Hirasuna@estocker.info>, size=4658, nrcpt=1 (queue active)
Dec 2 09:16:29 mailserver postfix/smtpd[7167]: connect from localhost[127.0.0.1]
Dec 2 09:16:29 mailserver postfix/smtpd[7167]: 9E0772744C2: client=localhost[127.0.0.1]
Dec 2 09:16:29 mailserver postfix/cleanup[7162]: 9E0772744C2: message-id=<771888028391451.NJLUIYHOQS@estocker.info>
Dec 2 09:16:29 mailserver postfix/qmgr[3764]: 9E0772744C2: from=<Hirasuna@estocker.info>, size=4823, nrcpt=1 (queue active)
Dec 2 09:16:29 mailserver postfix/smtpd[7167]: disconnect from localhost[127.0.0.1]
Dec 2 09:16:29 mailserver postfix/lmtp[7163]: 160642744A2: to=<bernd@sovd.de>, orig_to=<bernd@reichsbund.de>, relay=127.0.0.1[127.0.0.1], delay=1, status=sent (250 2.0.0 <bernd@sovd.de > OK)
Dec 2 09:16:29 mailserver postfix/qmgr[3764]: 160642744A2: removed
Dec 2 09:16:33 mailserver postfix/smtpd[7216]: connect from mailout04.sul.t-online.com[194.25.134.18]
Dec 2 09:16:33 mailserver postfix/smtpd[7216]: 75C9D2744A2: client=mailout04.sul.t-online.com[194.25.134.18]
Dec 2 09:16:33 mailserver postfix/cleanup[7162]: 75C9D2744A2: message-id=<1CZkzb-00wIQ40@mailin04.aul.t-online.de>
Dec 2 09:16:33 mailserver postfix/qmgr[3764]: 75C9D2744A2: from=<>, size=3428, nrcpt=1 (queue active)
Dec 2 09:16:33 mailserver postfix/smtpd[7167]: connect from localhost[127.0.0.1]
Dec 2 09:16:33 mailserver postfix/smtpd[7167]: AE1E42744C2: client=localhost[127.0.0.1]
Dec 2 09:16:33 mailserver postfix/cleanup[7162]: AE1E42744C2: message-id=<1CZkzb-00wIQ40@mailin04.aul.t-online.de>
Dec 2 09:16:33 mailserver postfix/qmgr[3764]: AE1E42744C2: from=<>, size=3604, nrcpt=1 (queue active)
Dec 2 09:16:33 mailserver postfix/smtpd[7167]: disconnect from localhost[127.0.0.1]
Dec 2 09:16:33 mailserver postfix/smtpd[7216]: disconnect from mailout04.sul.t-online.com[194.25.134.18]
 

theBruce

Newbie
Hallo,

also ich bin selbst noch nicht so fit was das ganze angeht, aber ich wills mal versuchen:

Dec 2 09:16:01 mailserver popper[7206]: (v4.0.5) Unable to get canonical name of client 192.168.12.63: Unknown host (1) [pop_init.c:1087]
Dec 2 09:16:01 mailserver popper[7207]: (v4.0.5) Unable to get canonical name of client 192.168.12.63: Unknown host (1) [pop_init.c:1087]
Dec 2 09:16:01 mailserver popper[7208]: (v4.0.5) Unable to get canonical name of client 192.168.12.63: Unknown host (1) [pop_init.c:1087]
Dec 2 09:16:01 mailserver popper[7209]: (v4.0.5) Unable to get canonical name of client 192.168.12.63:

Also das bedeutet, dass der Server den Client nicht im DNS auflösen kann, also entweder den DNS-Eintrag checken oder den Client einfach mal in die /etc/hosts eintragen.


Dann würde ich mal checken ob der saslauthd läuft.

und

Probier mal ne POP-Abfrage mit nem Systemkonto. Ich glaube ehrlich gesagt nicht, dass die Passwörter geändert werden, ich glaube eher das Problem liegt beim saslauth dämon.

Aber wie gesagt, bin in die Mailserver Geschichte selbst erst vor kurzem eingestiegen und mit POP hab ich mich noch garnicht beschäftigt. Vielleicht findet sich ja jemand der dir besser helfen kann als ich.

lg theBruce
 
OP
S

Shiro

Newbie
das komische ist ja, das wenn ich das passwort neu setzte, das es dann wieder geht ?!? der benutzer kann dann wieder seine mails abrufen.

das passiert jeden tag.

saslauthd lief nicht.
als ich zum erstenmal prüfte ob sasl läuft kam das hier:
mailserver:~ # ps ax | grep saslauthd
12806 pts/1 R+ 0:00 grep saslauthd LESSKEY=/etc/lesskey.bin NNTPSERVER=ne
ws INFODIR=/usr/local/info:/usr/share/info:/usr/info MANPATH=/usr/share/man:/usr
/local/man:/usr/X11R6/man:/opt/gnome/share/man KDE_MULTIHEAD=false HOSTNAME=mail
server GNOME2_PATH=/usr/local:/opt/gnome:/usr XKEYSYMDB=/usr/X11R6/lib/X11/XKeys
ymDB GPG_AGENT_INFO=/tmp/gpg-KR3Edd/S.gpg-agent:4011:1 HOST=mailserver TERM=xter
m SHELL=/bin/bash PROFILEREAD=true HISTSIZE=1000 XDM_MANAGED=/var/run/xdmctl/xdm
ctl-:0,maysd,mayfn,sched,rsvd,method=classic STYLE=keramik GTK2_RC_FILES=/etc/op
t/gnome/gtk-2.0/gtkrc:/opt/gnome/share/themes/Geramik/gtk-2.0/gtkrc:/root/.gtkrc
-2.0-keramik:/root/.kde/share/config/gtkrc GNOME_PATH=:/opt/gnome:/usr GTK_RC_FI
LES=/etc/opt/gnome/gtk/gtkrc:/opt/gnome/share/themes/Geramik/gtk/gtkrc:/root/.gt
krc-keramik:/root/.kde/share/config/gtkrc WINDOWID=46137351 KDEHOME=/root/.kde Q
TDIR=/usr/lib/qt3 XSESSION_IS_UP=yes KDE_FULL_SESSION=true USER=root XCURSOR_SIZ
E= LS_COLORS=no=00:fi=00:di=01;34:ln=00;36:pi=40;33:so=01;35:do=01;35:bd=40;33;0
1:cd=40;33;01:eek:r=40;31:ex=00;32:*.cmd=00;32:*.exe=01;32:*.com=01;32:*.bat=01;32:
*.btm=01;32:*.dll=01;32:*.tar=00;31:*.tbz=00;31:*.tgz=00;31:*.rpm=00;31:*.deb=00
;31:*.arj=00;31:*.taz=00;31:*.lzh=00;31:*.zip=00;31:*.zoo=00;31:*.z=00;31:*.Z=00
;31:*.gz=00;31:*.bz2=00;31:*.tb2=00;31:*.tz2=00;31:*.tbz2=00;31:*.avi=01;35:*.bm
p=01;35:*.fli=01;35:*.gif=01;35:*.jpg=01;35:*.jpeg=01;35:*.mng=01;35:*.mov=01;35
:*.mpg=01;35:*.pcx=01;35:*.pbm=01;35:*.pgm=01;35:*.png=01;35:*.ppm=01;35:*.tga=0
1;35:*.tif=01;35:*.xbm=01;35:*.xpm=01;35:*.dl=01;35:*.gl=01;35:*.aiff=00;32:*.au
=00;32:*.mid=00;32:*.mp3=00;32:*.ogg=00;32:*.voc=00;32:*.wav=00;32: OPENWINHOME=
/usr/openwin XNLSPATH=/usr/X11R6/lib/X11/nls HOSTTYPE=i386 KDEROOTHOME=/root/.kd
e SESSION_MANAGER=local/mailserver:/tmp/.ICE-unix/4094 PAGER=less LD_HWCAP_MASK=
0x20000000 KONSOLE_DCOP=DCOPRef(konsole-12765,konsole) MINICOM=-c on GNOMEDIR=/o
pt/gnome DESKTOP_SESSION=default PATH=/sbin:/usr/sbin:/usr/local/sbin:/root/bin:
/usr/local/bin:/usr/bin:/usr/X11R6/bin:/bin:/usr/games:/opt/gnome/bin:/opt/kde3/
bin CPU=i686 KONSOLE_DCOP_SESSION=DCOPRef(konsole-12765,session-1) INPUTRC=/etc/
inputrc PWD=/root XMODIFIERS=@im=local TEXINPUTS=::/root/.TeX:/usr/share/doc/.Te
X:/usr/doc/.TeX:/root/.TeX:/usr/share/doc/.TeX:/usr/doc/.TeX SHLVL=2 HOME=/root
LESS_ADVANCED_PREPROCESSOR=no OSTYPE=linux LS_OPTIONS=-a -N --color=tty -T 0 no_
proxy=localhost XCURSOR_THEME=crystalwhite WINDOWMANAGER=/usr/X11R6/bin/kde GTK_
PATH=/usr/local/lib/gtk-2.0:/opt/gnome/lib/gtk-2.0:/usr/lib/gtk-2.0 LESS=-M -I M
ACHTYPE=i686-suse-linux LOGNAME=root LC_CTYPE=de_DE.UTF-8 PKG_CONFIG_PATH=/opt/g
nome/lib/pkgconfig LESSOPEN=lessopen.sh %s USE_FAM= ACLOCAL_PATH=/opt/gnome/shar
e/aclocal INFOPATH=/usr/local/info:/usr/share/info:/usr/info DISPLAY=:0.0 LESSCL
OSE=lessclose.sh %s %s G_BROKEN_FILENAMES=1 COLORTERM= _=/usr/bin/grep /usr/bin/

beim zweiten mal:
mailserver:~ # ps ax | grep saslauthd
12812 pts/1 R+ 0:00 grep saslauthd

danach hab ich sasl gestartet und dann bekam endlich nach der status abfrage das hier:
mailserver:~ # ps ax | grep saslauthd
12834 ? Ss 0:00 /usr/sbin/saslauthd -a pam
12835 ? S 0:00 /usr/sbin/saslauthd -a pam
12836 ? S 0:00 /usr/sbin/saslauthd -a pam
12837 ? S 0:00 /usr/sbin/saslauthd -a pam
12838 ? S 0:00 /usr/sbin/saslauthd -a pam
12841 pts/1 R+ 0:00 grep saslauthd
 
OP
S

Shiro

Newbie
ich könnte jetzt echt fluchen.

passwörter gehen schonwieder nicht. hab mir gestern aber die passwd und shadow gesichert und mit den heutigen verglichen. exakt die selben?!?

also passwörter stehen noch drin, doch er greift warscheinlich nicht drauf zu...
 

ip_dlg

Newbie
Hi,
ich habe/hatte das selbe Fehlerbild.
grübel, grübel und studier....

- schau doch mal die Datei /etc/shadow an
- vermutlich hast die die gültigkeit der zugänge nicht richtig eingestellt

z.B.
unbekannt:Z0uUSDp90l2Gs:12762:0:0::::
ändern in
unbekannt:Z0uUSDp90l2Gs:12762:0:99999:7:::

die 99999 steht für die Gültigkeit des Passworts
die 7 steht für die Warnung vor Ablauf der Gültigkeit.

MfG
IP
 
OP
S

Shiro

Newbie
ok, danke erstmal. ich werde es ausprobieren. jedoch verstehe ich nicht, warum das erst seit kurzem passiert?!?

einige monate lief es ja ...



Gruss
Shiro
 
Status
Für weitere Antworten geschlossen.
Oben