Hello! I just updated to ISPConfig 3.0.5.4.p4 on 3 of my servers. On 2 of them I'm running Ubuntu 12.04 and after the update Dovecot won't start on these servers. On my Ubuntu 14.04 it's running normally. In my server #1 (VPS) in mail.err log I get the following errors on my server. Oct 18 05:51:44 *** dovecot: config: Fatal: Error in configuration file /etc/dovecot/dovecot.conf line 10: Unknown setting: ssl_protocols Oct 18 05:51:44 ***dovecot: master: Error: service(config): command startup failed, throttling Oct 18 05:55:01 ***postfix/smtpd[6238]: fatal: no SASL authentication mechanisms Oct 18 06:00:02 ***postfix/smtpd[6323]: fatal: no SASL authentication mechanisms Oct 18 06:02:12 ***amavis[6088]: (06088-01) (!!)WARN: all primary virus scanners failed, considering backups Oct 18 06:02:17 ***amavis[6088]: (06088-01) (!!)TROUBLE in check_mail: virus_scan FAILED: AV: ALL VIRUS SCANNERS FAILED In server #2 I only get the following error. Oct 18 12:08:20 Ubuntu-1204-precise-64-minimal postfix/smtpd[3529]: fatal: no SASL authentication mechanisms When I do a restart on Dovecot it starts up but then goes down immediately after. These are the errors in my mail.log Oct 18 06:05:02 **** postfix/smtpd[6442]: connect from localhost[127.0.0.1] Oct 18 06:05:02 **** postfix/smtpd[6442]: warning: SASL: Connect to private/auth failed: Connection refused Oct 18 06:05:02 **** postfix/smtpd[6442]: fatal: no SASL authentication mechanisms Oct 18 06:05:03 **** postfix/master[5170]: warning: process /usr/lib/postfix/smtpd pid 6442 exit status 1 Oct 18 06:05:03 **** postfix/master[5170]: warning: /usr/lib/postfix/smtpd: bad command startup -- throttling Oct 18 06:10:02 **** postfix/smtpd[6538]: connect from localhost[127.0.0.1] Oct 18 06:10:02 **** postfix/smtpd[6538]: warning: SASL: Connect to private/auth failed: Connection refused Oct 18 06:10:02 **** postfix/smtpd[6538]: fatal: no SASL authentication mechanisms Oct 18 06:10:03 **** postfix/master[5170]: warning: process /usr/lib/postfix/smtpd pid 6538 exit status 1 Oct 18 06:10:03 **** postfix/master[5170]: warning: /usr/lib/postfix/smtpd: bad command startup -- throttling Oct 18 06:15:01 **** postfix/smtpd[6961]: connect from localhost[127.0.0.1] Oct 18 06:15:01 **** postfix/smtpd[6961]: warning: SASL: Connect to private/auth failed: Connection refused Oct 18 06:15:01 **** postfix/smtpd[6961]: fatal: no SASL authentication mechanisms Oct 18 06:15:02 **** postfix/master[5170]: warning: process /usr/lib/postfix/smtpd pid 6961 exit status 1 Oct 18 06:15:02 **** postfix/master[5170]: warning: /usr/lib/postfix/smtpd: bad command startup -- throttling Oct 18 06:17:05 **** postfix/qmgr[5181]: 057DC2812B: from=<root@server1.****.**>, size=713, nrcpt=1 (queue active) Oct 18 06:17:06 **** amavis[6087]: (06087-01) (!)ClamAV-clamd: Can't connect to UNIX socket /var/run/clamav/clamd.ctl: No such file or directory, retrying (2) Oct 18 06:17:12 **** amavis[6087]: (06087-01) (!)ClamAV-clamd av-scanner FAILED: run_av error: Too many retries to talk to /var/run/clamav/clamd.ctl (Can't connect to UNIX socket /var/run/clamav/clamd.ctl: No such file or directory) at (eval 102) line 375.\n Oct 18 06:17:12 **** amavis[6087]: (06087-01) (!!)WARN: all primary virus scanners failed, considering backups Oct 18 06:17:16 **** amavis[6087]: (06087-01) (!)ClamAV-clamscan av-scanner FAILED: /usr/bin/clamscan KILLED, signal 9 (0009) at (eval 102) line 596. Oct 18 06:17:16 **** amavis[6087]: (06087-01) (!!)TROUBLE in check_mail: virus_scan FAILED: AV: ALL VIRUS SCANNERS FAILED Oct 18 06:17:16 **** amavis[6087]: (06087-01) (!)PRESERVING EVIDENCE in /var/lib/amavis/tmp/amavis-20141018T061705-06087 Oct 18 06:17:16 **** postfix/smtp[7011]: 057DC2812B: to=<root@server1.****.**>, orig_to=<root>, relay=127.0.0.1[127.0.0.1]:10024, delay=430510, delays=430498/0.01/0.02/11, dsn=4.5.0, status=deferred (host 127.0.0.1[127.0.0.1] said: 451 4.5.0 Error in processing, id=0608$ Oct 18 06:20:01 **** postfix/smtpd[7067]: connect from localhost[127.0.0.1] Oct 18 06:20:01 **** postfix/smtpd[7067]: warning: SASL: Connect to private/auth failed: Connection refused Oct 18 06:20:01 **** postfix/smtpd[7067]: fatal: no SASL authentication mechanisms Oct 18 06:20:02 **** postfix/master[5170]: warning: process /usr/lib/postfix/smtpd pid 7067 exit status 1 Oct 18 06:20:02 **** postfix/master[5170]: warning: /usr/lib/postfix/smtpd: bad command startup -- throttling Oct 18 06:25:02 **** postfix/smtpd[7161]: connect from localhost[127.0.0.1] Oct 18 06:25:02 **** postfix/smtpd[7161]: warning: SASL: Connect to private/auth failed: Connection refused Oct 18 06:25:02 **** postfix/smtpd[7161]: fatal: no SASL authentication mechanisms Oct 18 06:25:03 **** postfix/master[5170]: warning: process /usr/lib/postfix/smtpd pid 7161 exit status 1 Oct 18 06:25:03 **** postfix/master[5170]: warning: /usr/lib/postfix/smtpd: bad command startup -- throttling Oct 18 06:30:02 **** postfix/smtpd[7406]: connect from localhost[127.0.0.1] Oct 18 06:30:02 **** postfix/smtpd[7406]: warning: SASL: Connect to private/auth failed: Connection refused Oct 18 06:30:02 **** postfix/smtpd[7406]: fatal: no SASL authentication mechanisms Oct 18 06:30:03 **** postfix/master[5170]: warning: process /usr/lib/postfix/smtpd pid 7406 exit status 1 Oct 18 06:30:03 **** postfix/master[5170]: warning: /usr/lib/postfix/smtpd: bad command startup -- throttling Oct 18 06:32:05 **** postfix/qmgr[5181]: A254F2813C: from=<root@server1.****.**>, size=713, nrcpt=1 (queue active) Oct 18 06:32:06 **** amavis[6088]: (06088-02) (!)ClamAV-clamd: Can't connect to UNIX socket /var/run/clamav/clamd.ctl: No such file or directory, retrying (2) Oct 18 06:32:12 **** amavis[6088]: (06088-02) (!)ClamAV-clamd av-scanner FAILED: run_av error: Too many retries to talk to /var/run/clamav/clamd.ctl (Can't connect to UNIX socket /var/run/clamav/clamd.ctl: No such file or directory) at (eval 102) line 375.\n Oct 18 06:32:12 **** amavis[6088]: (06088-02) (!!)WARN: all primary virus scanners failed, considering backups Oct 18 06:32:18 **** amavis[6088]: (06088-02) (!)ClamAV-clamscan av-scanner FAILED: /usr/bin/clamscan KILLED, signal 9 (0009) at (eval 102) line 596. Oct 18 06:32:18 **** amavis[6088]: (06088-02) (!!)TROUBLE in check_mail: virus_scan FAILED: AV: ALL VIRUS SCANNERS FAILED Oct 18 06:32:18 **** amavis[6088]: (06088-02) (!)PRESERVING EVIDENCE in /var/lib/amavis/tmp/amavis-20141018T063205-06088 Oct 18 06:32:18 **** postfix/smtp[7467]: A254F2813C: to=<root@server1.****.**>, orig_to=<root>, relay=127.0.0.1[127.0.0.1]:10024, delay=344804, delays=344791/0.02/0.03/13, dsn=4.5.0, status=deferred (host 127.0.0.1[127.0.0.1] said: 451 4.5.0 Error in processing, id=0608$ Oct 18 06:35:02 **** postfix/smtpd[7542]: connect from localhost[127.0.0.1] Oct 18 06:35:02 **** postfix/smtpd[7542]: warning: SASL: Connect to private/auth failed: Connection refused Oct 18 06:35:02 **** postfix/smtpd[7542]: fatal: no SASL authentication mechanisms Oct 18 06:35:03 **** postfix/master[5170]: warning: process /usr/lib/postfix/smtpd pid 7542 exit status 1 Oct 18 06:35:03 **** postfix/master[5170]: warning: /usr/lib/postfix/smtpd: bad command startup -- throttling Any suggestion what could be wrong and what could be done to fix the problems?
Please edit /etc/dovecot/dovecot.conf file, add # in front of the line ssl_protocols and restart dovecot. Then please send me the output of: dovecot --version so that I can see which exact version of dovecot you have that does not support this option.
Thanks Till! Did what you said and Dovecot is now up and running and hasn't crashed yet. I did it only on server #1. What are the results of commenting out the ssl_protocols? dovecot --version 2.0.19
The ssl_protocols switch has been added to protect servers against the recent SSL poodle attach. the problem is that this switch is only available since dovecot 2.1 but ispconfig currently differnetiates only between dovecot 1.x and 2.x,so I'all have to extend the installer to exclude ubuntu 12.x from this security patch as the dovecot version is too old.
@till: You might want to add CentOS 6.x (6.5 in my case) along with RHEL 6.x to that list, as Dovecot v2.0.9 is the latest stable release available to us. Thanks!
