PDA

View Full Version : postfix SASL problem


Abe
16th August 2006, 14:31
Now I'm synchronizing the web for days, but only got headache and no hint to solve my problem...

I followed your advises in "The Perfect Setup - Debian Sarge" and installed ISPconfig. At the moment everything seems to work fine, except of postfix.

courier is running, I can login an recieve emails, but I cant login to postfix and send mails.

see my /var/log/mail.log:
Aug 16 12:50:44 debian-web courierpop3login: Connection, ip=[::ffff:217.86.162.133]
Aug 16 12:50:44 debian-web courierpop3login: LOGIN, user=web6_xxx, ip=[::ffff:217.86.162.133]
Aug 16 12:50:44 debian-web courierpop3login: LOGOUT, user=web6_xxx, ip=[::ffff:217.86.162.133], top=0, retr=0, time=0
Aug 16 12:50:44 debian-web postfix/smtpd[12348]: connect from debian-web.domain.tld[217.86.162.133]
Aug 16 12:50:47 debian-web postfix/smtpd[12348]: warning: debian-web.domain.tld[217.86.162.133]: SASL LOGIN authentication failed
Aug 16 12:50:47 debian-web postfix/smtpd[12348]: lost connection after AUTH from debian-web.domain.tld[217.86.162.133]
Aug 16 12:50:47 debian-web postfix/smtpd[12348]: disconnect from debian-web.domain.tld[217.86.162.133]

May be it helps to solve my problem:
the output of postconf -n is:
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
append_dot_mydomain = no
biff = no
broken_sasl_auth_clients = yes
config_directory = /etc/postfix
inet_interfaces = all
mailbox_command = procmail -a "$EXTENSION"
mailbox_size_limit = 0
mydestination = /etc/postfix/local-host-names
myhostname = debian-web.domain.tld
mynetworks = 127.0.0.0/8 192.168.0.0/24
myorigin = /etc/mailname
recipient_delimiter = +
relayhost =
smtp_tls_note_starttls_offer = yes
smtp_use_tls = yes
smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
smtpd_recipient_restrictions = permit_sasl_authenticated,permit_mynetworks,reject _unauth_destination
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain = $myhostname
smtpd_sasl_security_options = noanonymous
smtpd_tls_CAfile = /etc/postfix/ssl/cacert.pem
smtpd_tls_auth_only = no
smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.crt
smtpd_tls_key_file = /etc/postfix/ssl/smtpd.key
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
smtpd_use_tls = yes
tls_random_source = dev:/dev/urandom


The file /etc/postfix/virtusertable seems to be ok:
xxx@domain.tld web6_xxx
web6_xxx@domain.tld web6_xxx

but the saslauthentification fails:
the output of "testsaslauthd -u web6_xxx -p yyy -s smtp" is:
connect() : No such file or directory

Any Ideas? I don't have any more.
Thanks,
Arnt Below

sjau
16th August 2006, 14:53
In the main.cf I hove this here:


smtpd_sasl_auth_enable = yes
broken_sasl_auth_clients = yes
smtpd_sasl_security_options = noanonymous

before the smtpd_recipient_restrictions.
Maybe that helps?

Abe
16th August 2006, 15:06
It's the same in my main.cf
I posted the output of "postconf -n" so the advises are sorted alphanumerical.
Here you have a copy of my main.cf:
# See /usr/share/postfix/main.cf.dist for a commented, more complete version

smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
biff = no

# appending .domain is the MUA's job.
append_dot_mydomain = no

# Uncomment the next line to generate "delayed mail" warnings
#delay_warning_time = 4h

myhostname = debian-web.domain.tld
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
myorigin = /etc/mailname
mydestination = debian-web.domain.tld, localhost.domain.tld, domain.tld, localhost
relayhost =
mynetworks = 127.0.0.0/8 192.168.0.0/24
mailbox_command = procmail -a "$EXTENSION"
mailbox_size_limit = 0
recipient_delimiter = +
inet_interfaces = all
smtpd_sasl_local_domain = $myhostname
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
broken_sasl_auth_clients = yes
smtpd_recipient_restrictions = permit_sasl_authenticated,permit_mynetworks,reject _unauth_destination
smtpd_tls_auth_only = no
smtp_use_tls = yes
smtpd_use_tls = yes
smtp_tls_note_starttls_offer = yes
smtpd_tls_key_file = /etc/postfix/ssl/smtpd.key
smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.crt
smtpd_tls_CAfile = /etc/postfix/ssl/cacert.pem
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
tls_random_source = dev:/dev/urandom

virtual_maps = hash:/etc/postfix/virtusertable

mydestination = /etc/postfix/local-host-names

Thank for your reply.

sjau
16th August 2006, 15:10
Is sasl actually installed?

Abe
16th August 2006, 15:16
Yes it is.
Specifying the socket path the sasl-authentification works:
"testsaslauthd -u web6_xxx -p yyy -f /var/spool/postfix/var/run/saslauthd/mux -s smtp" gives back:
0: OK "Success."

sjau
16th August 2006, 15:19
then I can't help you :) I only have little knowledge about linux and stuff ^^

Abe
16th August 2006, 15:23
don't worry about, it's the same to me.

sjau
16th August 2006, 15:25
if you need immediate help you may want to use IRC.

Server: irc.freenode.org
Channel: #postfix

f3w (if he is in there) helped me in the past to fix my problems ^^

falko
17th August 2006, 17:39
Did you use the correct username and password?
What's the output of netstat -tap and ps aux|grep saslauthd?

jimmy
17th August 2006, 18:30
You also might want to check to make sure that users email directory exists.
connect() : No such file or directory

Abe
18th August 2006, 18:53
I set up a complete new & clean system.
Everything is running w/o any problems...

thanks to all of you, who tried to help me.