Login auth request failed: Authenticated user not found from userdb

Hi!

I’m getting this log messages in cockpit and I can’t access any of the email accounts on the server.

Login auth request failed: Authenticated user not found from userdb

Can’t login via webmail nor using email clients.

Thanks for your help

Other log I’m getting is

pam_authenticate() failed: Authentication failure (/etc/pam.d/imap missing?)

But I have that file with the following content:

#%PAM-1.0
auth	required	pam_apnscpvwh.so	saveroot
auth	required	pam_nologin.so
auth	required	pam_listfile.so onerr=fail item=user sense=allow file=/etc/imap.pamlist
auth       include  system-auth
account    include  system-auth
password   include  system-auth
session    include  system-auth
session required pam_apnscpvwh.so restorelogin restoreroot

I don’t have the file /etc/imap.pamlist

Don’t know if this helps.

Thanks again

Sent out a FLARE update for everyone on edge. This will be automatically fixed within the next 15 minutes.

Old NSS package kicks out custom configuration upon update. Migration will reapply these rules to /etc/nsswitch.conf as well as restart Dovecot that caches it upon startup.

2 Likes

Is there a manual fix for this? Seeing this on non-Edge.
Edit: never mind, it looks like the log entries have stopped afterall.

Im still having this issue, it just started a few hours ago. How do I trigger the update in this case?

upcp

These updates were delivered only on edge.

What does cpcmd misc:cp-version report? Is the problem resolved after running systemctl restart dovecot?

What’s reported with rpm -qi dovecot23-apnscp | grep Date? For the user having trouble logging in, does getent passwd USER@DOMAIN report a result?

Run upcp -sb system/nss, then check again with getent.

What’s in /etc/nsswitch.conf? What’s reported for rpm -qi nss-apnscp | grep Date?

Add “apnscpvwh” to passwd such that the line becomes:

passwd: files apnscpvwh sss systemd

Then systemctl restart dovecot

As for why it wasn’t readded, what does this report? authselect current -r ; echo $?

No, echo $? - literally $?:

authselect current -r ; echo $?