<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><br class=""><div class="">
<div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none;">Auch darüber bin ich hinweg:</div></div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none;"><br class=""></div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none;">im alten System </div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none;"><br class=""></div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none;"><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Courier; color: rgb(119, 97, 0); background-color: rgb(187, 255, 220);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">dd if=/var/lib/dovecot/ssl-parameters.dat bs=1 skip=88 | openssl dhparam -inform der >/tmp/dh.pem</span></div></div><div><br class=""></div><div>ausgeführt und ins neue System nach /etc/dovecot/private(dh.pem kopiert.</div><div>Dann in 10-ssl.conf </div><div><br class=""></div><div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(50, 244, 241);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""># DH parameters length to use.</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(50, 244, 241);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">#ssl_dh_parameters_length = 1024</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(0, 0, 0);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">ssl_dh = </etc/dovecot/private/dh.pem</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(50, 244, 241);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""># SSL protocols to use</span></div><div class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><br class=""></span></div><div class=""><span style="font-variant-ligatures: no-common-ligatures" class="">eingetragen. Die Meldung ist weg. Aber es kommen immer wieder neue :):</span></div><div class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><br class=""></span></div><div class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: "Courier New"; background-color: rgb(254, 244, 139);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Sep 25 14:13:44 kuku dovecot: imap-login: Error: Failed to initialize SSL server context: Can't load DH parameters (ssl_dh setting): error:0A00018A:SSL routines::dh key too small: user=<>, rip=xx.161.251.yy, lip=xx.vvv.157.yy, session=<N7u+4y0G1NxXoevv></span></div><div class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><br class=""></span></div></span></div></div><div><br class=""><blockquote type="cite" class=""><div class="">Am 25.09.2023 um 13:55 schrieb Christoph Kukulies <<a href="mailto:kuku@physik.rwth-aachen.de" class="">kuku@physik.rwth-aachen.de</a>>:</div><br class="Apple-interchange-newline"><div class="">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" class=""><div style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div class="">Ich bin schon ein Stückchen weiter. Habe die Benutzer vmail und postfix angelegt und die GRANTS dazu.</div><div class="">Die mysql Zugriffsfehlermeldungen sind weg. Auch war noch das alte mysql Paßwort in </div><div class=""><br class=""></div><div class=""><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(219, 39, 218);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">virtual/mysql-aliases.cf</span><span style="font-variant-ligatures: no-common-ligatures; color: #38b9c7" class="">:</span><span style="font-variant-ligatures: no-common-ligatures;" class="">password = xxxx</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(219, 39, 218);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">virtual/mysql-domains.cf</span><span style="font-variant-ligatures: no-common-ligatures; color: #38b9c7" class="">:</span><span style="font-variant-ligatures: no-common-ligatures;" class="">password = xxxx</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;" class=""><span style="color: rgb(219, 39, 218); font-variant-ligatures: no-common-ligatures;" class="">virtual/mysql-maps.cf</span><span style="color: rgb(56, 185, 199); font-variant-ligatures: no-common-ligatures;" class="">:</span><span style="font-variant-ligatures: no-common-ligatures;" class="">password = </span><span style="font-variant-ligatures: no-common-ligatures; caret-color: rgb(202, 51, 35);" class=""><font color="#ca3323" class=""><b class="">xxxx</b></font></span></div></div><div class=""><span style="font-variant-ligatures: no-common-ligatures;" class=""><br class=""></span></div><div class=""><span style="font-variant-ligatures: no-common-ligatures;" class="">Langsam verschwinden die Fehlermeldungen in /var/mail/log. (keine mehr in syslog? wurde das geändert?)</span></div><div class=""><span style="font-variant-ligatures: no-common-ligatures;" class=""><br class=""></span></div><div class=""><span style="font-variant-ligatures: no-common-ligatures;" class="">Jetzt habe ich noch den Stolperstein:</span></div><div class=""><span style="font-variant-ligatures: no-common-ligatures;" class=""><br class=""></span></div><div class=""><span style="font-variant-ligatures: no-common-ligatures;" class=""><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: "Courier New"; color: rgb(223, 223, 223); background-color: rgb(133, 0, 2);" class=""><span style="font-variant-ligatures: no-common-ligatures; color: #b75e16; background-color: #fef48b" class=""><span style="font-variant-ligatures: no-common-ligatures; color: rgb(172, 31, 22);" class="">Sep 25 </span><span style="color: rgb(38, 170, 22); font-variant-ligatures: no-common-ligatures;" class="">13:42:23 kuku</span><span style="font-variant-ligatures: no-common-ligatures; color: rgb(36, 164, 177);" class=""> </span>dovecot: </span><span style="font-variant-ligatures: no-common-ligatures" class="">imap-login: Error: Diffie-Hellman key exchange requested, but no DH parameters provided. Set ssl_dh=</path/to/dh.pem</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: "Courier New"; color: rgb(223, 223, 223); background-color: rgb(133, 0, 2);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><div style="margin: 0px; font-stretch: normal; line-height: normal; color: rgb(38, 170, 22); background-color: rgb(254, 244, 139);" class=""><div style="margin: 0px; font-stretch: normal; line-height: normal; color: rgb(223, 223, 223); background-color: rgb(133, 0, 2);" class=""><span style="font-variant-ligatures: no-common-ligatures; color: #ac1f16; background-color: #fef48b" class="">Sep 25 </span><span style="font-variant-ligatures: no-common-ligatures; color: #26aa16; background-color: #fef48b" class="">13:42:23 </span><span style="font-variant-ligatures: no-common-ligatures; color: #24a4b1; background-color: #fef48b" class="">kuku </span><span style="font-variant-ligatures: no-common-ligatures; color: #b75e16; background-color: #fef48b" class="">dovecot: </span><span style="font-variant-ligatures: no-common-ligatures" class="">imap-login: Disconnected: Connection closed: SSL_accept() failed: error:0A0C0103:SSL routines::internal error (no auth attempts in 0 </span></div></div></span></div></span></div>
<div class=""><br class=""></div><div class="">--</div><div class="">Christoph</div><div class=""><br class=""><blockquote type="cite" class=""><div class="">Am 25.09.2023 um 11:19 schrieb Christoph Kukulies <<a href="mailto:kuku@physik.rwth-aachen.de" class="">kuku@physik.rwth-aachen.de</a>>:</div><br class="Apple-interchange-newline"><div class="">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Ich versuche gerade eine bestehende postfix/dovecot Installation von einem Ubuntu 18.04 (32bit) Server auf einen 22.04 (64bit) zu migrieren.<div class=""><br class=""></div><div class="">Konfigurationsdateien von postfix und dovecot habe ich übertragen. </div><div class=""><br class=""></div><div class="">Momentan gibt's noch Probleme mit den mysql Usern, vmail und postfix.</div><div class=""><br class=""></div><div class="">Beide sind im mysql des Zielsystems noch nicht eingetragen.</div><div class=""><br class=""></div><div class="">Insbesondere bekomme ich von Dovecot derzeit noch:</div><div class=""><br class=""></div><div class="">Access denied for user 'vmail'@'localhost' (using password: YES)<br class=""><br class=""><br class="">Im alten System steht Folgendes:</div><div class=""><br class=""></div><div class=""><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Courier; color: rgb(119, 97, 0); background-color: rgb(187, 255, 220);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">mysql> select user, authentication_string from User;</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Courier; color: rgb(119, 97, 0); background-color: rgb(187, 255, 220);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">+------------------+-------------------------------------------+</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Courier; color: rgb(119, 97, 0); background-color: rgb(187, 255, 220);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">| user | authentication_string |</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Courier; color: rgb(119, 97, 0); background-color: rgb(187, 255, 220);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">+------------------+-------------------------------------------+</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Courier; color: rgb(119, 97, 0); background-color: rgb(187, 255, 220);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">| root | *9A0501BCB119RXXXXXXXXXF35B615E3CA6BE0D69 |</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Courier; color: rgb(119, 97, 0); background-color: rgb(187, 255, 220);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">| root | *272E1D31F3923A03776D9A1F9CF590XXXXXXXXXX |</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Courier; color: rgb(119, 97, 0); background-color: rgb(187, 255, 220);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">| root | *272E1D31F39XXXXXXX23A03776D9A0D5BA58F68D |</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Courier; color: rgb(119, 97, 0); background-color: rgb(187, 255, 220);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">| debian-sys-maint | *3AED877E220FC12FB77AE3BE2F156XXXXXXXXXXX |</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Courier; color: rgb(119, 97, 0); background-color: rgb(187, 255, 220);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">| mail | *A488A81CC94259A6AF0DB61AF4DF9EXXXXXXXXXX |</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Courier; color: rgb(119, 97, 0); background-color: rgb(187, 255, 220);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">| vmail | *272E1D31F3923A03776D9A1F9CFXXXXXXXXXXXXX |</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Courier; color: rgb(119, 97, 0); background-color: rgb(187, 255, 220);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">| postfix | *31D2107A38EAF13C1FBE605D3C2XXXXXXXXXXXXX |</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Courier; color: rgb(119, 97, 0); background-color: rgb(187, 255, 220);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">| mysql.sys | *THISISNOTAVALIDPASSWORDTHATXXXXXXXXXXXXX |</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Courier; color: rgb(119, 97, 0); background-color: rgb(187, 255, 220);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">| mysql.session | *THISISNOTAVALIDPASSWORDTHATCXXXXXXXXXXXXX|</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Courier; color: rgb(119, 97, 0); background-color: rgb(187, 255, 220);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">+------------------+-------------------------------------------+</span></div><div class=""><br class="webkit-block-placeholder"></div><div class=""><br class="webkit-block-placeholder"></div><div class="">
<div style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">Wie kann ich die User so eintragen, daß der Zugriff klappt?</div></div></div><div style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><br class=""></div><div style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">(mußte mich jetzt hier noch mal unter einer anderen Email anmelden, weil ich mir den eigenen Ast abgesägt habe) </div><div style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><br class=""></div><div style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">Grüße</div><div style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">Christoph</div><div style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><br class=""></div></div></div></blockquote></div><br class=""></div></div></blockquote></div><br class=""></body></html>