Glenn,
May 2 14:02:15 server dovecot-auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=be rhost=
If this is an Ubuntu system, it could be a problem with the dovecot PAM authentication configuration. I saw this problem a couple of years ago, fixed it (but don't remember how), but then an update to my server caused it to reappear. I no longer authenticate by pam locally and the error no longer occurs.
every 10 minutes. Note the empty rhost= data. 'be' was a username -- I got him to change it yesterday. Now I'm getting the same log entries with the both names.
The culprit in my case was my iPad and it would check for e-mail every 10 minutes. -- Gary Chambers
