1

Topic: Lots of strange records in /var/log/secure

==== Required information ====
- iRedMail version: 0.8.6
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): mysql
- Linux/BSD distribution name and version: centos 6.5
- Related log if you're reporting an issue: /var/log/secure
====
Hello,
My /var/log/secure is full of such records with different usernames

Mar 20 17:37:08 mail auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=user@domain.tld rhost=X.X.X.X
Mar 20 17:37:08 mail auth: pam_succeed_if(dovecot:auth): error retrieving information about user user@domain.tld
Mar 20 17:37:09 mail auth: pam_unix(dovecot:auth): check pass; user unknown

What can cause them.

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: Lots of strange records in /var/log/secure

OK.
Solved:
I had turned on

passdb pam {}

Commented it out and now log is clean.