Re: Paramètrage de Postfix : SASL + relayhost
Merci pour vos réponses,
j'essaye donc maintenant de paramétrer le relay avec une
authentification SASL... mais ça ne marche pas encore.
Sans debug, j'obtiens le message :
relay=smtp.orange.fr[193.252.23.129], delay=1, status=deferred
(Authentication failed: SASL authentication failed; server
smtp.orange.fr[193.252.23.129] said: 535 Error: authentication failed)
Voilà ce que j'ai dans mon main.cf :
# SASL SUPPORT FOR SERVERS
#
# The following options set parameters needed by Postfix to enable
# Cyrus-SASL support for authentication of mail servers.
#
smtp_sasl_auth_enable = yes
smtp_sasl_password_maps = hash:/etc/postfix/sasl_password
smtp_sasl_security_options = noanonymous
smtp_sasl_mechanism_filter = !gssapi, !external, static:all
debug_peer_list = smtp.orange.fr
debug_peer_level = 5
Ainsi qu'un fichier /etc/postfix/sasl_password avec dedans :
smtp.orange.fr user_de_messagerie:pass_de_messagerie
[smtp.orange.fr] user_de_messagerie:pass_de_messagerie
et bien sûr le hash avec postmap hash:/etc/postfix/sasl_password
Maintenant, le log détaillé de la tentative de connexion :
< smtp.orange.fr[193.252.23.129]: 220 mwinf7001.orange.net ESMTP
**************************
Nov 18 11:49:50 tige postfix/smtp[8239]: >
smtp.orange.fr[193.252.23.129]: EHLO axege.net
Nov 18 11:49:50 tige postfix/smtp[8239]: vstream_fflush_some: fd 13 flush 16
Nov 18 11:49:50 tige postfix/smtp[8239]: vstream_buf_get_ready: fd 13
got 118
Nov 18 11:49:50 tige postfix/smtp[8239]: <
smtp.orange.fr[193.252.23.129]: 250-mwinf7001.orange.net
Nov 18 11:49:50 tige postfix/smtp[8239]: <
smtp.orange.fr[193.252.23.129]: 250-PIPELINING
Nov 18 11:49:50 tige postfix/smtp[8239]: <
smtp.orange.fr[193.252.23.129]: 250-SIZE 4508880
Nov 18 11:49:50 tige postfix/smtp[8239]: <
smtp.orange.fr[193.252.23.129]: 250-AUTH PLAIN LOGIN
Nov 18 11:49:50 tige postfix/smtp[8239]: <
smtp.orange.fr[193.252.23.129]: 250-AUTH=PLAIN LOGIN
Nov 18 11:49:50 tige postfix/smtp[8239]: <
smtp.orange.fr[193.252.23.129]: 250 8BITMIME
Nov 18 11:49:50 tige postfix/smtp[8239]: match_string: PLAIN ~? gssapi
Nov 18 11:49:50 tige postfix/smtp[8239]: match_string: PLAIN ~? external
Nov 18 11:49:50 tige postfix/smtp[8239]: match_string: PLAIN ~?
static:all(0,100)
Nov 18 11:49:50 tige postfix/smtp[8239]: dict_lookup: plain = all
Nov 18 11:49:50 tige postfix/smtp[8239]: match_string: LOGIN ~? gssapi
Nov 18 11:49:50 tige postfix/smtp[8239]: match_string: LOGIN ~? external
Nov 18 11:49:50 tige postfix/smtp[8239]: match_string: LOGIN ~?
static:all(0,100)
Nov 18 11:49:50 tige postfix/smtp[8239]: dict_lookup: login = all
Nov 18 11:49:50 tige postfix/smtp[8239]: match_string: PLAIN ~? gssapi
Nov 18 11:49:50 tige postfix/smtp[8239]: match_string: PLAIN ~? external
Nov 18 11:49:50 tige postfix/smtp[8239]: match_string: PLAIN ~?
static:all(0,100)
Nov 18 11:49:50 tige postfix/smtp[8239]: dict_lookup: plain = all
Nov 18 11:49:50 tige postfix/smtp[8239]: match_string: LOGIN ~? gssapi
Nov 18 11:49:50 tige postfix/smtp[8239]: match_string: LOGIN ~? external
Nov 18 11:49:50 tige postfix/smtp[8239]: match_string: LOGIN ~?
static:all(0,100)
Nov 18 11:49:50 tige postfix/smtp[8239]: dict_lookup: login = all
Nov 18 11:49:50 tige postfix/smtp[8239]: server features: 0x102f size
4508880
Nov 18 11:49:50 tige postfix/smtp[8239]: Using ESMTP PIPELINING, TCP
send buffer size is 4096
Nov 18 11:49:50 tige postfix/smtp[8239]: maps_find: smtp_sasl_passwd:
hash:/etc/postfix/sasl_password(0,100): smtp.orange.fr =
user_de_messagerie:pass_de_messagerie
Nov 18 11:49:50 tige postfix/smtp[8239]: smtp_sasl_passwd_lookup: host
`smtp.orange.fr' user `user_de_messagerie' pass `pass_de_messagerie'
Nov 18 11:49:50 tige postfix/smtp[8239]: starting new SASL client
Nov 18 11:49:50 tige postfix/smtp[8239]: name_mask: noanonymous
Nov 18 11:49:50 tige postfix/smtp[8239]: smtp_sasl_authenticate:
smtp.orange.fr[193.252.23.129]: SASL mechanisms PLAIN LOGIN
Nov 18 11:49:50 tige postfix/smtp[8239]: smtp_sasl_get_user:
user_de_messagerie
Nov 18 11:49:50 tige postfix/smtp[8239]: smtp_sasl_get_user:
user_de_messagerie
Nov 18 11:49:50 tige postfix/smtp[8239]: smtp_sasl_get_passwd:
pass_de_messagerie
Nov 18 11:49:50 tige postfix/smtp[8239]: smtp_sasl_authenticate:
smtp.orange.fr[193.252.23.129]: uncoded initial reply: user_de_messagerie
Nov 18 11:49:50 tige postfix/smtp[8239]: >
smtp.orange.fr[193.252.23.129]: AUTH PLAIN YXhlZ2UAYXhlZ2UAcjJrdXZxYQ==
Nov 18 11:49:50 tige postfix/smtp[8239]: vstream_fflush_some: fd 13 flush 41
Nov 18 11:49:50 tige postfix/smtp[8239]: vstream_buf_get_ready: fd 13 got 34
Nov 18 11:49:50 tige postfix/smtp[8239]: <
smtp.orange.fr[193.252.23.129]: 535 Error: authentication failed
Nov 18 11:49:50 tige postfix/smtp[8239]: connect to subsystem private/defer
Nov 18 11:49:50 tige postfix/smtp[8239]: send attr nrequest = 0
Nov 18 11:49:50 tige postfix/smtp[8239]: send attr flags = 0
Nov 18 11:49:50 tige postfix/smtp[8239]: send attr queue_id = 58B9CE3DFB
Nov 18 11:49:50 tige postfix/smtp[8239]: send attr original_recipient =
alci@mecadu.org
Nov 18 11:49:50 tige postfix/smtp[8239]: send attr recipient =
alci@mecadu.org
Nov 18 11:49:50 tige postfix/smtp[8239]: send attr offset = 261
Nov 18 11:49:50 tige postfix/smtp[8239]: send attr status = 4.0.0
Nov 18 11:49:50 tige postfix/smtp[8239]: send attr action = delayed
Nov 18 11:49:50 tige postfix/smtp[8239]: send attr reason =
Authentication failed: SASL authentication failed; server
smtp.orange.fr[193.252.23.129] said: 535 Error: authentication failed
Nov 18 11:49:50 tige postfix/smtp[8239]: private/defer socket: wanted
attribute: status
Nov 18 11:49:50 tige postfix/smtp[8239]: vstream_fflush_some: fd 14
flush 275
Nov 18 11:49:50 tige postfix/smtp[8239]: vstream_buf_get_ready: fd 14 got 10
Nov 18 11:49:50 tige postfix/smtp[8239]: input attribute name: status
Nov 18 11:49:50 tige postfix/smtp[8239]: input attribute value: 0
Nov 18 11:49:50 tige postfix/smtp[8239]: private/defer socket: wanted
attribute: (list terminator)
Nov 18 11:49:50 tige postfix/smtp[8239]: input attribute name: (end)
Nov 18 11:49:50 tige postfix/smtp[8239]: 58B9CE3DFB:
to=<alci@mecadu.org>, relay=smtp.orange.fr[193.252.23.129], delay=0,
status=deferred (Authentication failed: SASL authentication failed;
server smtp.orange.fr[193.252.23.129] said: 535 Error: authentication
failed)
Je vois bien un message d'erreur du serveur orange, qui dit, vers le
milieu : "uncoded initial reply : user_de_messagerie"
mais je ne comprends pas le problème...
Quelqu'un sait lire ce log ou a une idée ?
Reply to: