Postfix - Mysql - SSL - error

[f-do]

Hi There,

i have a litte problem if i want to send a e-mail over ssl, here is my config:

master.cf

tlsmgr    unix  -       -       -       1000?   1       tlsmgr
smtps     inet  n       -       y       -       -       smtpd -o smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes

only if i want to sent it over ssl this error i get in the mail.log

May 19 21:44:44 fdo-s2 postfix/smtpd[18942]: connect from 188-195-140-169-dynip.superkabel.de[188.195.140.169]
May 19 21:44:44 fdo-s2 postfix/smtpd[18942]: setting up TLS connection from 188-195-140-169-dynip.superkabel.de[188.195.140.169]
May 19 21:44:45 fdo-s2 postfix/smtpd[18942]: Anonymous TLS connection established from 188-195-140-169-dynip.superkabel.de[188.195.140.169]: TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)
May 19 21:44:45 fdo-s2 postfix/smtpd[18942]: warning: mysql:/etc/postfix/client_access.cf: table lookup problem
May 19 21:44:45 fdo-s2 postfix/smtpd[18942]: NOQUEUE: reject: RCPT from 188-195-140-169-dynip.superkabel.de[188.195.140.169]: 451 4.3.5 <188-195-140-169-dynip.superkabel.de[188.195.140.169]>: Client host rejected: Server configuration error; from=<flo@codefact.de> to=<flo@f-do.de> proto=ESMTP helo=<Florians-MacBook-Pro.local>
May 19 21:44:46 fdo-s2 postfix/smtpd[18942]: disconnect from 188-195-140-169-dynip.superkabel.de[188.195.140.169]

the client_access.cf:

hosts = unix:/var/run/mysqld/mysqld.sock
user = mail
password = xxx
dbname = mail
query = SELECT action FROM access WHERE client != '' && action != '' && client = '%s' && active = 1;

The Table access is empty.

SO can you help me?

Thanks...

[falko]

Can Postfix access /var/run/mysqld/mysqld.sock? If it's running chrooted, it might not be able to do so.

[f-do]

Hi,

the permission is:
srwxrwxrwx 1 mysql mysql 0 May 14 17:32 mysqld.sock

So but this is only then when i want to sent a mail over TLS/SSL - without that it runs perfektliy - so i think the postfix has the permission - all the data are on the mysql.

Or runs postfix on a diffrent user on TSL/SSL?

[falko]

Do you have other *.cf files in /etc/postfix/ that access your database? Do they use sockets as well, or do they use TCP (127.0.0.1 and port 3306)?

[f-do]

fdo-s2:/etc/postfix# ls -1 *.cf
autorespond.cf
client_access.cf
dynamicmaps.cf
greylist.cf
main.cf
master.cf
spamfilter.cf
virtual_alias_domains.cf
virtual_alias_maps.cf
virtual_mailbox_domains.cf
virtual_mailbox_maps.cf

They do all connect through the socket...

[falko]

Can you post the contents of virtual_alias_domains.cf, for example, so that I can do a comparison? Do you have problems with the other cf files as well, or is client_access.cf the only one that is making problems?

[f-do]

Hi,

here is the virtual_alias_domains.cf:

hosts = unix:/var/run/mysqld/mysqld.sock
user = mail
password = xxx
dbname = mail
query = SELECT domain_name FROM domains WHERE domain_name != '' && domain_name = '%s' && alias_domain = 1 && active = 1;


I have only the problem with the client_access.cf and after the error in the log is the connection closed... With( Server configuration error