> On 10 April 2019 21:26 Laura Smith via dovecot <dovecot@dovecot.org> wrote:
> 
>  
> ===
> dsync(foo...@example.com): Error: imapc(foobar.example.com:993): 
> dns_lookup(foobar.example.com) failed: read(/var/run/dovecot/dns-client) 
> failed: read(size=512) failed: Connection reset by peer
>

This is dovecot's internal dns-client, and something goes wrong when talking to 
the service.
 
> dsync(foo...@example.com): Error: Failed to initialize user: imapc: Login to 
> foobar.example.com failed: Disconnected from server

This is btw dsync service, not imap service.

> ===
> 
> Initially I thought "oh no, not another AppArmor block".
> 
> But then surely the second message would not appear if the DNS lookup was not 
> successful ?
> 
> Also "dig foobar.example.com" works fine.
> 
> How should I be troubleshooting this ?  And if it is still likely to be 
> AppArmor, what is calling it ? "doveadm" itself or something else ?  What 
> does "/var/run/dovecot/dns-client" do and why doesn't dovecot use standard OS 
> calls like everyone else ?
> 

Because the "standard OS call" is blocking and we would prefer it to not block 
everything else.

> So many questions !

Aki

Reply via email to