"Используемый сервер имеет сертификат безопасности, 
который невозможно проверить. Цепочка сертификатов 
обработана правильно, но обработка прервана на корневом 
сертификате, у которого отсутствует отношение доверия с 
поставщиком доверия. Продолжить использование данного 
сервера?"

Вот dovecot-sql.conf:
----------------
default_pass_scheme = CRAM-MD5
-----------
А в конфиге давкота:
-----------------
mechanisms = plain login digest-md5 cram-md5 

пытаюсь  аутглюком зайти на ящик - болты 
в логах: 
2011-05-30 11:18:23 auth(default): Info: new auth connection: pid=18924
2011-05-30 11:18:24 auth-worker(default): Info: pam(t3@dracon753.ru,192.168.4.15): pam_authenticate() failed: Authentication failure (password mismatch?) (given password: 759)
2011-05-30 11:18:24 auth-worker(default): Info: sql(t3@dracon753.ru,192.168.4.15): query: SELECT email as user, password FROM users WHERE email='t3@dracon753.ru';
2011-05-30 11:18:24 auth-worker(default): Error: sql(t3@dracon753.ru,192.168.4.15): Password in passdb is not in expected scheme CRAM-MD5
2011-05-30 11:18:26 auth(default): Info: client out: FAIL       1       user=t3@dracon753.ru
2011-05-30 11:18:27 imap-login: Info: Disconnected (auth failed, 1 attempts): user=<t3@dracon753.ru>, method=PLAIN, rip=192.168.4.15, lip=192.168.4.25, TLS: Disconnected
2011-05-30 11:18:31 imap-login: Info: Disconnected (auth failed, 1 attempts): user=<t3@dracon753.ru>, method=PLAIN, rip=192.168.4.15, lip=192.168.4.25, TLS: Disconnected

root@posts:/etc/dovecot# sed -e '/^ *#/d; /^ *$/d' dovecot.conf
protocols = imap imaps pop3 pop3s
disable_plaintext_auth = no
log_path = /var/log/dovecot.log
log_timestamp = "%Y-%m-%d %H:%M:%S "
mail_location = maildir:/home/vmail/%d/%n
mail_privileged_group = vmail
mail_debug = yes
verbose_proctitle = yes
protocol imap {
}
protocol pop3 {
  pop3_uidl_format = %08Xu%08Xv
}
protocol managesieve {
}
protocol lda {
  log_path = /home/vmail/dovecot-deliver.log
  auth_socket_path = /var/run/dovecot/auth-master
  postmaster_address = andrey@dracon753.ru
   mail_plugins = sieve
  global_script_path = /home/vmail/globalsieverc
}
auth_verbose = yes
auth_debug = yes
auth_debug_passwords = yes
auth default {
  mechanisms = plain login digest-md5 cram-md5
  passdb pam {
  }
  passdb sql {
    args = /etc/dovecot/dovecot-sql.conf
  }
  userdb passwd {
  }
  userdb static {
    args = uid=5000 gid=5000 home=/home/vmail/%d/%n allow_all_users=yes
  }
  user = root
  socket listen {
    master {
      path = /var/run/dovecot/auth-master
      mode = 0600
      user = vmail
    }
    client {
      path = /var/spool/postfix/private/auth
      mode = 0660
      user = postfix
      group = postfix
    }
  }
}
dict {
}
plugin {
}

# See /usr/share/postfix/main.cf.dist for a commented, more complete version 


# Debian specific:  Specifying a file name will cause the first 
# line of that file to be used as the name.  The Debian default 
# is /etc/mailname. 
#myorigin = /etc/mailname 

smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU) 
biff = no 

# appending .domain is the MUA's job. 
append_dot_mydomain = no 

# Uncomment the next line to generate "delayed mail" warnings 
#delay_warning_time = 4h 

readme_directory = no 

# TLS parameters 
#1smtpd_tls_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem 
#smtpd_tls_key_file=/etc/ssl/private/ssl-cert-snakeoil.key 
smtpd_use_tls=yes 
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache 
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache 
smtpd_sasl_type=dovecot 
smtpd_sasl_path=private/auth 
smtpd_sasl_auth_enable=yes 
smtpd_recipient_restrictions=permit_mynetworks,per mit_sasl_a uthenticated,reject_unauth_destination 
lsmtpd_tls_cert_file=/etc/ssl/certs/postfix.pem 
smtpd_tls_key_file=/etc/ssl/private/postfix.pem 
#smtpd_use_tls=yes 
#smtpd_tls_auth_only=yes 

# See /usr/share/doc/postfix/TLS_README.gz in the postfix-doc package for 
# information on enabling SSL in the smtp client. 

myhostname = posts.dracon753.ru 
alias_maps = hash:/etc/aliases 
alias_database = hash:/etc/aliases 
myorigin = /etc/mailname 
mydestination = localhost 
relayhost = 
mynetworks = 192.168.4.0/24 
mailbox_command = procmail -a "$EXTENSION" 
mailbox_size_limit = 0 
recipient_delimiter = + 
inet_interfaces = all 
virtual_alias_domains = 
virtual_alias_maps = hash:/etc/postfix/aliases, proxy:mysql:/etc/postfix/mysql-forwards.cf, mysql:/etc/postfix/mysql-email.cf 
virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql-domains.cf 
virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql-mailboxes.cf 
virtual_mailbox_base = /home/vmail 
virtual_uid_maps = static:5000 
virtual_gid_maps = static:5000 

virtual_transport = dovecot 
dovecot_destination_recipient_limit = 1 



dovecot.conf Код:

protocols = imap imaps pop3 pop3s 
disable_plaintext_auth = no 
log_path = /var/log/dovecot.log 
log_timestamp = "%Y-%m-%d %H:%M:%S " 
mail_location = maildir:/home/vmail/%d/%n 
mail_privileged_group = vmail 
mail_debug = yes 
verbose_proctitle = yes 
protocol imap { 
} 
protocol pop3 { 
  pop3_uidl_format = %08Xu%08Xv 
} 
protocol managesieve { 
} 
protocol lda { 
  log_path = /home/vmail/dovecot-deliver.log 
  auth_socket_path = /var/run/dovecot/auth-master 
  postmaster_address = andrey@dracon753.ru 
   mail_plugins = sieve 
  global_script_path = /home/vmail/globalsieverc 
} 
auth_verbose = yes 
auth_debug = yes 
auth_debug_passwords = yes 
auth default { 
  mechanisms = plain login 
  passdb pam { 
  } 
  passdb sql { 
    args = /etc/dovecot/dovecot-sql.conf 
  } 
  userdb passwd { 
  } 
  userdb static { 
    args = uid=5000 gid=5000 home=/home/vmail/%d/%n allow_all_users=yes 
  } 
  user = root 
  socket listen { 
    master { 
      path = /var/run/dovecot/auth-master 
      mode = 0600 
      user = vmail 
    } 
    client { 
      path = /var/spool/postfix/private/auth 
      mode = 0660 
      user = postfix 
      group = postfix 
    } 
  } 
} 
dict { 
} 
plugin { 
} 


Почтовый клиент Mozila Thunderbirde 

root@posts:/home/vmail# telnet 192.168.4.25 110
Trying 192.168.4.25...
Connected to 192.168.4.25.
Escape character is '^]'.
+OK Dovecot ready.
user andrey
+OK
pass dr759123
-ERR Authentication failed.

protocols = imap imaps pop3 pop3s 
disable_plaintext_auth = no 
log_path = /var/log/dovecot.log 
log_timestamp = "%Y-%m-%d %H:%M:%S " 
ssl_cert_file = /etc/ssl/certs/dovecot.pem 
ssl_key_file = /etc/ssl/private/dovecot.pem 
mail_location = maildir:/home/vmail/%d/%n 
mail_privileged_group = vmail 
mail_debug = yes 
verbose_proctitle = yes 
protocol imap { 
} 
protocol pop3 { 
  pop3_uidl_format = %08Xu%08Xv 
} 
protocol managesieve { 
} 
protocol lda { 
  log_path = /home/vmail/dovecot-deliver.log 
  auth_socket_path = /var/run/dovecot/auth-master 
  postmaster_address = andrey@dracon753.ru 
   mail_plugins = sieve 
  global_script_path = /home/vmail/globalsieverc 
} 
auth_verbose = yes 
auth_debug = yes 
auth_debug_passwords = yes 
auth default { 
  mechanisms = plain login 
  passdb pam { 
  } 
  passdb sql { 
    args = /etc/dovecot/dovecot-sql.conf 
  } 
  userdb passwd { 
  } 
  userdb static { 
    args = uid=5000 gid=5000 home=/home/vmail/%d/%n allow_all_users=yes 
  } 
  user = root 
  socket listen { 
    master { 
      path = /var/run/dovecot/auth-master 
      mode = 0600 
      user = vmail 
    } 
    client { 
      path = /var/spool/postfix/private/auth 
      mode = 0660 
      user = postfix 
      group = postfix 
    } 
  } 
} 
dict { 
} 
plugin { 
} 
################### 
dovecot-sql.conf 
################### 

driver = mysql 
connect = host=127.0.0.1 dbname=mail user=mailadmin password=123759 
default_pass_scheme = PLAIN-MD5 
password_query = SELECT email as user, password FROM users WHERE email='%u'; 
root@posts:/etc/dovecot# 


логи Код:

2011-05-23 10:45:57 auth-worker(default): Info: pam(andrey,192.168.4.25): lookup service=dovecot 
2011-05-23 10:45:57 auth-worker(default): Info: pam(andrey,192.168.4.25): #1/1 style=1 msg=Password: 
2011-05-23 10:45:59 auth-worker(default): Info: pam(andrey,192.168.4.25): pam_authenticate() failed: Authentication failure (password mismatch?) (given password: dr759123) 
2011-05-23 10:45:59 auth-worker(default): Info: sql(andrey,192.168.4.25): query: SELECT email as user, password FROM users WHERE email='andrey'; 
2011-05-23 10:45:59 auth-worker(default): Info: sql(andrey,192.168.4.25): unknown user 
2011-05-23 10:46:01 auth(default): Info: client out: FAIL       1       user=andrey 
2011-05-23 10:46:30 pop3-login: Info: Aborted login (auth failed, 1 attempts): user=<andrey>, method=PLAIN, rip=192.168.4.25, lip=192.168.4.25, secured

# See /usr/share/postfix/main.cf.dist for a commented, more complete version


# Debian specific:  Specifying a file name will cause the first
# line of that file to be used as the name.  The Debian default
# is /etc/mailname.
#myorigin = /etc/mailname

smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
biff = no

# appending .domain is the MUA's job.
append_dot_mydomain = no

# Uncomment the next line to generate "delayed mail" warnings
#delay_warning_time = 4h

readme_directory = no

# TLS parameters
smtpd_tls_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem
smtpd_tls_key_file=/etc/ssl/private/ssl-cert-snakeoil.key
smtpd_use_tls=yes
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache

# See /usr/share/doc/postfix/TLS_README.gz in the postfix-doc package for
# information on enabling SSL in the smtp client.

myhostname = posts.dracon753.ru
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
myorigin = /etc/mailname
mydestination = localhost
relayhost =
mynetworks = 127.0.0.0/8
mailbox_command = procmail -a "$EXTENSION"
mailbox_size_limit = 0
recipient_delimiter = +
inet_interfaces = all
virtual_alias_domains =
virtual_alias_maps = hash:/etc/postfix/aliases, proxy:mysql:/etc/postfix/mysql-forwards.cf, mysql:/etc/postfix/mysql-email.cf
virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql-domains.cf
virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql-mailboxes.cf
virtual_mailbox_base = /home/vmail
virtual_uid_maps = static:5000
virtual_gid_maps = static:5000


virtual_transport = dovecot

protocols = imap imaps pop3 pop3s
disable_plaintext_auth = no
log_timestamp = "%Y-%m-%d %H:%M:%S "
mail_location = maildir:/home/vmail/%d/%n/Maildir
namespace private {
   separator = 
   prefix = INBOX
   inbox = yes
}
mail_privileged_group = mail
protocol imap {
}
protocol pop3 {
  pop3_uidl_format = %08Xu%08Xv
}
protocol managesieve {
}
auth default {
  mechanisms = plain login
  passdb pam {
  }
  passdb sql {
    args = /etc/dovecot/dovecot-sql.conf
  }
  userdb passwd {
  }
  userdb static {
    args = uid=5000 gid=5000 home=/home/vmail/%d/%n allow_all_users=yes
  }
  user = root
  socket listen {
    master {
      path = /var/run/dovecot/auth-master
      mode = 0600
      user = vmail
    }
    client {
      path = /var/spool/postfix/private/auth
      mode = 0660
      user = postfix
      group = postfix
    }
  }
}
dict {
}
plugin {
}
root@posts:/home/test/rab/pravconfig#

ay 17 07:54:36 posts dovecot: Dovecot v1.2.15 starting up (core dumps disabled)
May 17 07:54:36 posts dovecot: auth-worker(default): mysql: Connected to 127.0.0.1 (mail)
May 17 07:54:37 posts dovecot: auth(default): new auth connection: pid=2930
May 17 07:54:37 posts dovecot: auth(default): new auth connection: pid=2931
May 17 07:54:37 posts dovecot: auth(default): new auth connection: pid=2928
May 17 07:54:37 posts dovecot: auth(default): new auth connection: pid=2929
May 17 07:54:37 posts dovecot: auth(default): new auth connection: pid=2933
May 17 07:54:37 posts dovecot: auth(default): new auth connection: pid=2932
May 17 07:55:14 posts dovecot: dovecot: Killed with signal 15 (by pid=2944 uid=0 code=kill)

# /etc/ntp.conf, configuration for ntpd; see ntp.conf(5) for help

driftfile /var/lib/ntp/ntp.drift


# Enable this if you want statistics to be logged.
#statsdir /var/log/ntpstats/

statistics loopstats peerstats clockstats
filegen loopstats file loopstats type day enable
filegen peerstats file peerstats type day enable
filegen clockstats file clockstats type day enable


# You do need to talk to an NTP server or two (or three).
#server ntp.your-provider.example                                                                                                                                
                                                                                                                                                                 
# pool.ntp.org maps to about 1000 low-stratum NTP servers.  Your server will                                                                                     
# pick a different set every time it starts up.  Please consider joining the
# pool: <http://www.pool.ntp.org/join.html>
#server 0.debian.pool.ntp.org iburst
#server 1.debian.pool.ntp.org iburst
#server 2.debian.pool.ntp.org iburst
server 192.168.3.249


# Access control configuration; see /usr/share/doc/ntp-doc/html/accopt.html for
# details.  The web page <http://support.ntp.org/bin/view/Support/AccessRestrictions>
# might also be helpful.
#
# Note that "restrict" applies to both servers and clients, so a configuration
# that might be intended to block requests from certain clients could also end
# up blocking replies from your own upstream servers.

# By default, exchange time with everybody, but don't allow configuration.
restrict -4 default kod notrap nomodify nopeer noquery
restrict -6 default kod notrap nomodify nopeer noquery

# Local users may interrogate the ntp server more closely.
restrict 127.0.0.1
restrict ::1
restrict 192.168.3.249  noquery notrap

# Clients from this (example!) subnet have unlimited access, but only if
# cryptographically authenticated.
restrict 192.168.4.0 mask 255.255.255.0 notrust


# If you want to provide time to your local subnet, change the next line.
# (Again, the address is an example only.)
#broadcast 192.168.123.255

# If you want to listen to time broadcasts on your local subnet, de-comment the
# next lines.  Please do this only if you trust everybody on the network!
#disable auth
#broadcastclient

# See /usr/share/postfix/main.cf.dist for a commented, more complete version


# Debian specific:  Specifying a file name will cause the first
# line of that file to be used as the name.  The Debian default
# is /etc/mailname.
#myorigin = /etc/mailname

smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
biff = no

# appending .domain is the MUA's job.
append_dot_mydomain = no

# Uncomment the next line to generate "delayed mail" warnings
#delay_warning_time = 4h

readme_directory = no

# TLS parameters
smtpd_tls_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem
smtpd_tls_key_file=/etc/ssl/private/ssl-cert-snakeoil.key
smtpd_use_tls=yes
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache

# See /usr/share/doc/postfix/TLS_README.gz in the postfix-doc package for
# information on enabling SSL in the smtp client.

myhostname = posts.dracon753.ru
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
myorigin = /etc/mailname
mydestination =
relayhost =
mynetworks = 127.0.0.0/8
mailbox_command = procmail -a "$EXTENSION"
mailbox_size_limit = 0
recipient_delimiter = +
inet_interfaces = all
virtual_alias_domains =
virtual_alias_maps = proxy:mysql:/etc/postfix/mysql-forwards.cf, mysql:/etc/postfix/mysql-email.cf
virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql-domains.cf
virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql-mailboxes.cf
virtual_mailbox_base = /home/vmail
virtual_uid_maps = static:5000
virtual_gid_maps = static:5000

#!/bin/bash
#этот модуль позволяет работать с ftp в пассивном режиме
#modprobe nf_conntrack_ftp
#очистка цепочек
iptables -F INPUT
iptables -F FORWARD
iptables -F OUTPUT
iptables -t nat -F PREROUTING
iptables -t nat -F POSTROUTING
iptables -t mangle -F

#Запрет всего
iptables -P INPUT DROP
iptables -P OUTPUT DROP
iptables -P FORWARD DROP

#включение логов iptables
#префиксы сообщений iptables 
#iptables -A INPUT -p tcp  -j LOG --log-prefix "input tcp"
#iptables -A INPUT -p icmp -j LOG --log-prefix "input icmp"
#логи входящих tcp udp icmp
#iptables -A INPUT -j LOG --log-level 4


#разрешаем все входящие пакеты на интрефейс замыкания на себя иначе ничего не работает 
iptables -A INPUT -i lo -j ACCEPT
iptables -A OUTPUT -o lo -j ACCEPT 
#РАЗРЕШЕНЫ ТОЛЬКО ВХОДЯЩИЕ СОЗДАННЫЕ НАШИМИ ИСХОДЯЩИМИ
iptables -A INPUT -p TCP -m state --state ESTABLISHED,RELATED -j ACCEPT 
iptables -A INPUT -p UDP -m state --state ESTABLISHED,RELATED -j ACCEPT
#разрешаем любые входящие и исходящие по icmp
iptables -A INPUT -p icmp -j ACCEPT

iptables -A OUTPUT -p icmp -j ACCEPT
#разрешаем подключение по  ssh INPUT разрешаем для того чтобы было можно конектится с любой тачки посети  
iptables -A INPUT -p tcp --dport 22 -j ACCEPT
iptables -A OUTPUT -p tcp --dport 22 -j ACCEPT

oot@test1:/etc# cat /etc/crontab
# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do.

SHELL=/bin/sh
#Добавил адрес куда должна идти результаты работы 
MAILTO=root@test1.local
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin

# m h dom mon dow user  command
17 *    * * *   root    cd / && run-parts --report /etc/cron.hourly
25 6    * * *   root    test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6    * * 7   root    test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6    1 * *   root    test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
#

Стандарт SATA не предусматривает горячую замену активного устройства (используемого Операционной Системой) (вплоть до SATA Revision 3.x), дополнительно подключенные диски отключать нужно постепенно — питание, шлейф, а подключать в обратном порядке — шлейф, питание.

cat /proc/mdstat

root@test1:~# cat /proc/mdstat
Personalities : [linear] [multipath] [raid0] [raid1] [raid6] [raid5] [raid4] [raid10] 

md127 : active (auto-read-only) raid1 sdd1[1]
      5830527 blocks super 1.2 [2/1] [_U]
      
md0 : active raid1 sde1[2] sdc1[0]
      5830527 blocks super 1.2 [2/2] [UU]