Re: Problem with Postfix and SASL SMTP identification - SOLVED
I finally found the problem:
Postfix is chrooted on Debian, that means that /etc/sasldb has to be copied to
/var/spool/postfix/etc ! and now it works fine, great.
Thanks for your help anyway Guillermo, it made me keep going!
Am Mittwoch, 13. November 2002 13:55 schrieb Pierre Burri:
> Hi,
> I'm trying (hard) to configure Postfix (Dist Woody, packages postfix and
> postfix-tls) with an sasl authentification. But it doesn't seem to want to
> work. I always get "535 Error: authentication failed" and "500 Error: bad
> syntax". I'm using kmail as a client. Does someone have an idea where the
> bug is?
> Thanks a lot in advance.
> Pierre
>
> Here is my File /etc/postfix/main.cf:
> #
> smtpd_recipient_restrictions =
> permit_mynetworks,
> permit_sasl_authenticated,
> check_relay_domains,
> reject
> #
> smtpd_sasl_auth_enable = yes
> smtpd_sasl_security_options =
> noanonymous, noplaintext
> smtpd_sasl_local_domain = $myhostname
> broken_sasl_auth_clients = yes
>
> and here is the output of sasldblistusers:
> user: test realm: pluto.linux-age.com mech: DIGEST-MD5
> user: test realm: pluto.linux-age.com mech: PLAIN
> user: test realm: pluto.linux-age.com mech: CRAM-MD5
>
>
> and here the log-file /var/log/mail.info:
>
> Nov 13 13:27:54 pluto postfix/smtpd[5639]: >
> pD9E6A391.dip0.t-ipconnect.de[217.230.163.145]: 220 ESMTP Postfix
> Nov 13 13:27:54 pluto postfix/smtpd[5639]: connect from
> pD9E6A391.dip0.t-ipconnect.de[217.230.163.145]
> Nov 13 13:27:54 pluto postfix/smtpd[5639]: watchdog_pat: 0x8066180
> Nov 13 13:27:54 pluto postfix/smtpd[5639]: vstream_fflush_some: fd 9 flush
> 19 Nov 13 13:27:54 pluto postfix/smtpd[5639]: vstream_buf_get_ready: fd 9
> got 12 Nov 13 13:27:54 pluto postfix/smtpd[5639]: <
> pD9E6A391.dip0.t-ipconnect.de[217.230.163.145]: EHLO venus
> Nov 13 13:27:54 pluto postfix/smtpd[5639]: >
> pD9E6A391.dip0.t-ipconnect.de[217.230.163.145]: 250-pluto.linux-age.com
> Nov 13 13:27:54 pluto postfix/smtpd[5639]: >
> pD9E6A391.dip0.t-ipconnect.de[217.230.163.145]: 250-PIPELINING
> Nov 13 13:27:54 pluto postfix/smtpd[5639]: >
> pD9E6A391.dip0.t-ipconnect.de[217.230.163.145]: 250-SIZE 10240000
> Nov 13 13:27:54 pluto postfix/smtpd[5639]: >
> pD9E6A391.dip0.t-ipconnect.de[217.230.163.145]: 250-VRFY
> Nov 13 13:27:54 pluto postfix/smtpd[5639]: >
> pD9E6A391.dip0.t-ipconnect.de[217.230.163.145]: 250-ETRN
> Nov 13 13:27:54 pluto postfix/smtpd[5639]: >
> pD9E6A391.dip0.t-ipconnect.de[217.230.163.145]: 250-AUTH CRAM-MD5
> DIGEST-MD5 Nov 13 13:27:54 pluto postfix/smtpd[5639]: >
> pD9E6A391.dip0.t-ipconnect.de[217.230.163.145]: 250-AUTH=CRAM-MD5
> DIGEST-MD5 Nov 13 13:27:54 pluto postfix/smtpd[5639]: >
> pD9E6A391.dip0.t-ipconnect.de[217.230.163.145]: 250-XVERP
> Nov 13 13:27:54 pluto postfix/smtpd[5639]: >
> pD9E6A391.dip0.t-ipconnect.de[217.230.163.145]: 250 8BITMIME
> Nov 13 13:27:54 pluto postfix/smtpd[5639]: watchdog_pat: 0x8066180
> Nov 13 13:27:54 pluto postfix/smtpd[5639]: vstream_fflush_some: fd 9 flush
> 165 Nov 13 13:27:54 pluto postfix/smtpd[5639]: vstream_buf_get_ready: fd 9
> got 17 Nov 13 13:27:54 pluto postfix/smtpd[5639]: <
> pD9E6A391.dip0.t-ipconnect.de[217.230.163.145]: AUTH DIGEST-MD5
> Nov 13 13:27:54 pluto postfix/smtpd[5639]: smtpd_sasl_authenticate:
> sasl_method DIGEST-MD5
> Nov 13 13:27:54 pluto postfix/smtpd[5639]: smtpd_sasl_authenticate: uncoded
> challenge:
> realm="pluto.linux-age.com",nonce="Gi0J133LqyQzg3Q8HAzbRh1XvV5TuR/4aokmu7eW
>lnE=",qop="auth,auth-int",charset=utf-8,algorithm=md5-sess Nov 13 13:27:54
> pluto postfix/smtpd[5639]: >
> pD9E6A391.dip0.t-ipconnect.de[217.230.163.145]: 334
> cmVhbG09InBsdXRvLmxpbnV4LWFnZS5jb20iLG5vbmNlPSJHaTBKMTMzTHF5UXpnM1E4SEF6YlJ
>oMVh2VjVUdVIvNGFva211N2VXbG5FPSIscW9wPSJhdXRoLGF1dGgtaW50IixjaGFyc2V0PXV0Zi0
>4LGFsZ29yaXRobT1tZDUtc2Vzcw== Nov 13 13:27:54 pluto postfix/smtpd[5639]:
> vstream_fflush_some: fd 9 flush 186 Nov 13 13:27:54 pluto
> postfix/smtpd[5639]: vstream_buf_get_ready: fd 9 got 310 Nov 13 13:27:54
> pluto postfix/smtpd[5639]: <
> pD9E6A391.dip0.t-ipconnect.de[217.230.163.145]:
> Y2hhcnNldD11dGYtOCx1c2VybmFtZT0idGVzdCIscmVhbG09InBsdXRvLmxpbnV4LWFnZS5jb20
>iLG5vbmNlPSJHaTBKMTMzTHF5UXpnM1E4SEF6YlJoMVh2VjVUdVIvNGFva211N2VXbG5FPSIsbmM
>9MDAwMDAwMDEsY25vbmNlPSJNell3T0RFPSIsZGlnZXN0LXVyaT0ic210cC9wbHV0by5saW51eC1
>hZ2UuY29tIixyZXNwb25zZT0zODE1YjY4NjFkNTdjN2M1ZGNkNmYzNDQ1NmExOWI5NCxxb3A9YXV
>0aA== Nov 13 13:27:54 pluto postfix/smtpd[5639]: smtpd_sasl_authenticate:
> decoded response:
> charset=utf-8,username="test",realm="pluto.linux-age.com",nonce="Gi0J133Lqy
>Qzg3Q8HAzbRh1XvV5TuR/4aokmu7eWlnE=",nc=00000001,cnonce="MzYwODE=",digest-uri
>="smtp/pluto.linux-age.com",response=3815b6861d57c7c5dcd6f34456a19b94,qop=au
>th Nov 13 13:27:54 pluto postfix/smtpd[5639]: warning:
> pD9E6A391.dip0.t-ipconnect.de[217.230.163.145]: SASL DIGEST-MD5
> authentication failed
> Nov 13 13:27:54 pluto postfix/smtpd[5639]: >
> pD9E6A391.dip0.t-ipconnect.de[217.230.163.145]: 535 Error: authentication
> failed
> Nov 13 13:27:59 pluto postfix/smtpd[5639]: watchdog_pat: 0x8066180
> Nov 13 13:27:59 pluto postfix/smtpd[5639]: vstream_fflush_some: fd 9 flush
> 34 Nov 13 13:27:59 pluto postfix/smtpd[5639]: vstream_buf_get_ready: fd 9
> got 2 Nov 13 13:27:59 pluto postfix/smtpd[5639]: <
> pD9E6A391.dip0.t-ipconnect.de[217.230.163.145]:
> Nov 13 13:27:59 pluto postfix/smtpd[5639]: >
> pD9E6A391.dip0.t-ipconnect.de[217.230.163.145]: 500 Error: bad syntax
> Nov 13 13:28:04 pluto postfix/smtpd[5639]: watchdog_pat: 0x8066180
> Nov 13 13:28:04 pluto postfix/smtpd[5639]: vstream_fflush_some: fd 9 flush
> 23 Nov 13 13:28:04 pluto postfix/smtpd[5639]: vstream_buf_get_ready: fd 9
> got 6 Nov 13 13:28:04 pluto postfix/smtpd[5639]: <
> pD9E6A391.dip0.t-ipconnect.de[217.230.163.145]: QUIT
> Nov 13 13:28:04 pluto postfix/smtpd[5639]: >
> pD9E6A391.dip0.t-ipconnect.de[217.230.163.145]: 221 Bye
--
My Sites: http://www.linux-age.com & http://www.globeall.de
Tel. +49 (0)30 757 02 517
Fax: +49 (0)30 757 02 518
Reply to: