| Linode Forum https://forum.linode.com/ |
|
| Postfix SMTP not accepting authentication https://forum.linode.com/viewtopic.php?f=11&t=7665 |
Page 1 of 2 |
| Author: | Piki [ Wed Aug 31, 2011 7:00 pm ] |
| Post subject: | Postfix SMTP not accepting authentication |
Hi, I am working on setting up a mail server using Dovecot and Postfix on Debian Squeeze. So far I am able to connect to secure IMAP via Dovecot, and I am able to receive emails. However, I am unable to get Postfix to accept authentication for SMTP. My email client at home can make the connection initially, but then complains that the server doesn't support authentication and refuses to send messages. Here are the lines that show up in /var/log/mail.log when I try to send to send a message (my IP is replaced for security): Code: Aug 31 18:55:23 li283-45 postfix/smtpd[29732]: connect from pool-XXX-XXX-XXX-XXX.pitbpa.fios.verizon.net[XXX.XXX.XXX.XXX] I've tried doing a google search, and everything suggested stuff with my sasl settings in main.cf, none of which worked (though I did apt-get install all the needed sasl packages). My current /etc/postfix/main.cf: Code: # See /usr/share/postfix/main.cf.dist for a commented, more complete version |
|
| Author: | derfy [ Wed Aug 31, 2011 8:07 pm ] |
| Post subject: | |
Need more info. Follow the steps outlined here. Thanks! (Depending on how you're sending the mails, you may need to add the -v switch to the 'smtp' entry instead.) |
|
| Author: | Piki [ Mon Sep 05, 2011 12:28 pm ] |
| Post subject: | |
Nice long log entry for postfix with the "-v" option added.... Once again, I replaced my IP for security. Code: Sep 5 12:11:19 li283-45 postfix/smtpd[23608]: connection established There are a few references to a match list. Is this related to the "smtpd_recipient_restrictions" option near the end of my config? I want it to permit authenticated, which is there, but I can't authenticate. |
|
| Author: | Azathoth [ Mon Sep 05, 2011 1:00 pm ] |
| Post subject: | |
What does your dovecot.conf say about exporting authentication services? Is the path to private/auth correct? Is the postfix' user set correctly? Is the listening even enabled? |
|
| Author: | Piki [ Mon Sep 05, 2011 1:17 pm ] |
| Post subject: | |
From dovecot.conf, in the "auth default" section: Code: socket listen {This file exists, along with a bunch of other postfix stuff under /var/spool/postfix: Code: root@li283-45:~# ls /var/spool/postfix/ I have both a user and a group called postfix. What needs to be listening? Postfix and Dovecot both seem to be listening. |
|
| Author: | Azathoth [ Mon Sep 05, 2011 8:03 pm ] |
| Post subject: | |
How about auth mechanisms? Plain? Login? Set auth_verbose to yes and see if that says anything in dovecot's log file. |
|
| Author: | derfy [ Mon Sep 05, 2011 9:56 pm ] |
| Post subject: | |
You may also wish to snip Quote: Sep 5 12:11:19 li283-45 postfix/smtpd[23608]: < pool-XXX-XXX-XXX-XXX.pitbpa.fios.verizon.net[XXX.XXX.XXX.XXX]: AUTH PLAIN <text here> as it contains your login info.
|
|
| Author: | Piki [ Wed Sep 07, 2011 7:10 pm ] |
| Post subject: | |
derfy: I don't see my login info in that line? |
|
| Author: | Piki [ Wed Sep 07, 2011 7:24 pm ] |
| Post subject: | |
My system doesn't have a log dedicated to Dovecot, but Dovecot is dumping stuff into mail.log. The only addition to the log (after putting "auth_default = yes" in dovecot.conf and restarting that and Postfix) was Dovecot registering an IMAP connection, though my email client started checking for mail just after I click the send button. I can post the current mail.log, but I seriously doubt the extra Dovecot line would help.[/code] |
|
| Author: | bjl [ Wed Sep 07, 2011 7:52 pm ] |
| Post subject: | |
Piki wrote: derfy: I don't see my login info in that line?
derfy is correct. heck, even scrappy probably knows there's a base64 encoded string (with your username and password) on that line. |
|
| Author: | Piki [ Wed Sep 07, 2011 7:57 pm ] |
| Post subject: | |
I masked it with <snip>. Did I get the right thing? I'm no expert on encoding stuff. |
|
| Author: | bjl [ Wed Sep 07, 2011 10:36 pm ] |
| Post subject: | |
looks good. |
|
| Author: | skavoovie [ Fri Sep 09, 2011 9:04 am ] |
| Post subject: | |
Still having the issue? Post the output of Code: # postconf -n |
|
| Author: | Piki [ Sat Sep 10, 2011 8:38 pm ] |
| Post subject: | |
I am able to send email without authenticating with my username/password, but I still want it to require authentication. Here's the output: Code: root@li283-45:~# postconf -n |
|
| Author: | skavoovie [ Sun Sep 11, 2011 12:37 am ] |
| Post subject: | |
Is this the entire output? If so, two things jump out at me: 1. postconf -n doesn't reflect auth --- where is your "smtpd_sasl_auth_enabled = yes"? Postfix indicates that is not currently configured. Check your syntax, restart postfix and re-check with postconf -n again. 2. smtpd_recipient_restrictions -- you need to add "reject_unauth_destination" at the end of this configuration. Remove the deprecated "check_relay_domains" and replace it with "reject_unauth_destination". Postfix isn't going to support auth without these. Additionally, you may want to add "broken_sasl_auth_clients = yes" as an SASL option if you'll be using Outlook Express and/or certain versions of Exchange. Make those changes and test. If it still fails, post another copy of your postconf -n output. Alternatively you might want to use saslfinger to help you troubleshoot -- you'll want to test server-side with the -s argument: http://postfix.state-of-mind.de/patrick ... aslfinger/ |
|
| Page 1 of 2 | All times are UTC-04:00 |
| Powered by phpBB® Forum Software © phpBB Group http://www.phpbb.com/ |
|