Dotaz: Postfix sasl auth problem

[Michal]

Ahoj, mam nainstallovany postfix a mysql databazi s uzivatelema. Vse funguje, krome smtp prihlaseni. Hraju s s tim uz cely den a porad nevim co by mohlo byt spante. vypis z logu:

server postfix/smtpd[14613]: warning: unknown[93.91.48.134]: SASL LOGIN authentication failed: authentication failure 

Zde jsou konfiguracni soubory Main.cnf

# postfix config file

# uncomment for debugging if needed
#soft_bounce=yes

# postfix main
mail_owner = postfix
setgid_group = postdrop
delay_warning_time = 4

# postfix paths
html_directory = no
command_directory = /usr/sbin
daemon_directory = /usr/libexec/postfix
queue_directory = /var/spool/postfix
sendmail_path = /usr/sbin/sendmail.postfix
newaliases_path = /usr/bin/newaliases.postfix
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
sample_directory = /usr/share/doc/postfix-2.2.2/samples
readme_directory = /usr/share/doc/postfix-2.2.2/README_FILES

# network settings
inet_interfaces = all
mydomain = mydomain.com
myhostname = server.mydomain.com
myorigin = server.mydomain.com
mynetworks_style = subnet
mydestination = $myhostname,
localhost
relay_domains = $mydestination

# mail delivery
recipient_delimiter = +

# mappings
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
#local_recipient_maps =

# virtual setup
virtual_alias_maps = mysql:/etc/postfix/mysql-virtual_alias_maps.cf,
regexp:/etc/postfix/virtual_regexp
virtual_gid_maps = static:89
virtual_mailbox_base = /home/vmail
virtual_mailbox_domains = mysql:/etc/postfix/mysql-virtual_domains_maps.cf
virtual_minimum_uid = 89
virtual_transport = virtual
virtual_uid_maps = static:89

# debugging
debug_peer_level = 2
debugger_command =
PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin
xxgdb $daemon_directory/$process_name $process_id & sleep 5

# authentication
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain =
broken_sasl_auth_clients = yes
#smtpd_sasl_path = smtpd
smtpd_sasl_security_options = noanonymous
# tls config
smtp_use_tls = yes
smtpd_use_tls = yes
smtp_tls_note_starttls_offer = yes
smtpd_tls_key_file = /etc/postfix/ssl/smtpd.pem
smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.pem
smtpd_tls_CAfile = /etc/postfix/ssl/smtpd.pem
smtpd_tls_loglevel = 5
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
tls_random_source = dev:/dev/urandom

# rules restrictions
# smtpd_client_restrictions = reject_rbl_client sb1.spamhaus.org
smtpd_helo_restrictions = permit_sasl_authenticated,
permit_mynetworks,
reject_non_fqdn_hostname
smtpd_sender_restrictions = reject_non_fqdn_sender,
reject_unknown_sender_domain
smtpd_recipient_restrictions = permit_sasl_authenticated permit_mynetworks check_relay_domains
smtpd_helo_required = yes
unknown_local_recipient_reject_code = 550
disable_vrfy_command = yes
smtpd_data_restrictions = reject_unauth_pipelining

content_filter = amavis:[127.0.0.1]:10024
receive_override_options = no_address_mappings 

smtpd.conf

pwcheck_method: auxprop
mech_list: PLAIN LOGIN
auxprop_plugin: sql
sql_verbose: yes
sql_engine: mysql
sql_hostnames: localhost
sql_user: postfix
sql_passwd: password
sql_database: postfix
sql_select: select password from mailbox where username = '%u@%r'
log_level: 7 

A zde vypis ze saslfinger:

saslfinger - postfix Cyrus sasl configuration Sat Jan 2 07:37:35 MST 2010
version: 1.0.2
mode: server-side SMTP AUTH

-- basics --
Postfix: 2.5.6
System: Fedora release 11 (Leonidas)

-- smtpd is linked to --
libsasl2.so.2 => /usr/lib64/libsasl2.so.2 (0x00007f0290e2a000)

-- active SMTP AUTH and TLS parameters for smtpd --
broken_sasl_auth_clients = yes
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain =
smtpd_sasl_security_options = noanonymous
smtpd_tls_CAfile = /etc/postfix/ssl/smtpd.pem
smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.pem
smtpd_tls_key_file = /etc/postfix/ssl/smtpd.pem
smtpd_tls_loglevel = 5
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
smtpd_use_tls = yes


-- listing of /usr/lib64/sasl2 --
total 572
drwxr-xr-x. 2 root root 4096 2009-10-13 06:14 .
drwxr-xr-x. 146 root root 102400 2010-01-01 04:51 ..
-rwxr-xr-x. 1 root root 16312 2009-02-24 03:44 libanonymous.so
-rwxr-xr-x. 1 root root 16312 2009-02-24 03:44 libanonymous.so.2
-rwxr-xr-x. 1 root root 16312 2009-02-24 03:44 libanonymous.so.2.0.22
-rwxr-xr-x. 1 root root 19352 2009-02-24 03:44 libcrammd5.so
-rwxr-xr-x. 1 root root 19352 2009-02-24 03:44 libcrammd5.so.2
-rwxr-xr-x. 1 root root 19352 2009-02-24 03:44 libcrammd5.so.2.0.22
-rwxr-xr-x. 1 root root 49176 2009-02-24 03:44 libdigestmd5.so
-rwxr-xr-x. 1 root root 49176 2009-02-24 03:44 libdigestmd5.so.2
-rwxr-xr-x. 1 root root 49176 2009-02-24 03:44 libdigestmd5.so.2.0.22
-rwxr-xr-x. 1 root root 16952 2009-02-24 03:44 liblogin.so
-rwxr-xr-x. 1 root root 16952 2009-02-24 03:44 liblogin.so.2
-rwxr-xr-x. 1 root root 16952 2009-02-24 03:44 liblogin.so.2.0.22
-rwxr-xr-x. 1 root root 16856 2009-02-24 03:44 libplain.so
-rwxr-xr-x. 1 root root 16856 2009-02-24 03:44 libplain.so.2
-rwxr-xr-x. 1 root root 16856 2009-02-24 03:44 libplain.so.2.0.22
-rwxr-xr-x. 1 root root 22240 2009-02-24 03:44 libsasldb.so
-rwxr-xr-x. 1 root root 22240 2009-02-24 03:44 libsasldb.so.2
-rwxr-xr-x. 1 root root 22240 2009-02-24 03:44 libsasldb.so.2.0.22
-rw-r--r--. 1 root root 25 2009-02-25 21:22 Sendmail.conf
-rw-r--r-- 1 root root 297 2010-01-02 05:19 smtpd.conf

-- listing of /etc/sasl2 --
total 20
drwxr-xr-x. 2 root root 4096 2010-01-02 04:57 .
drwxr-xr-x. 129 root root 12288 2010-01-02 02:34 ..
-rw-r--r-- 1 root root 271 2010-01-02 05:19 smtpd.conf




-- content of /usr/lib64/sasl2/smtpd.conf --
pwcheck_method: auxprop
#pwcheck_method:saslauthd
mech_list: PLAIN LOGIN
auxprop_plugin: sql
sql_verbose: yes
sql_engine: mysql
sql_hostnames: localhost
sql_user: --- replaced ---
sql_passwd: --- replaced ---
sql_database: postfix
sql_select: select password from mailbox where username = '%u@%r'
log_level: 7


-- content of /etc/sasl2/smtpd.conf --
pwcheck_method: auxprop
mech_list: PLAIN LOGIN
auxprop_plugin: sql
sql_verbose: yes
sql_engine: mysql
sql_hostnames: localhost
sql_user: --- replaced ---
sql_passwd: --- replaced ---
sql_database: postfix
sql_select: select password from mailbox where username = '%u@%r'
log_level: 7



-- active services in /etc/postfix/master.cf --
# service type private unpriv chroot wakeup maxproc command + args
# (yes) (yes) (yes) (never) (100)
smtp inet n - n - - smtpd
pickup fifo n - n 60 1 pickup
cleanup unix n - n - 0 cleanup
qmgr fifo n - n 300 1 qmgr
tlsmgr unix - - n 1000? 1 tlsmgr
rewrite unix - - n - - trivial-rewrite
bounce unix - - n - 0 bounce
defer unix - - n - 0 bounce
trace unix - - n - 0 bounce
verify unix - - n - 1 verify
flush unix n - n 1000? 0 flush
proxymap unix - - n - - proxymap
proxywrite unix - - n - 1 proxymap
smtp unix - - n - - smtp
relay unix - - n - - smtp
-o smtp_fallback_relay=
showq unix n - n - - showq
error unix - - n - - error
retry unix - - n - - error
discard unix - - n - - discard
local unix - n n - - local
virtual unix - n n - - virtual
lmtp unix - - n - - lmtp
anvil unix - - n - 1 anvil
scache unix - - n - 1 scache
maildrop unix - n n - - pipe
flags=DRhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient}
old-cyrus unix - n n - - pipe
flags=R user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -m ${extension} ${user}
cyrus unix - n n - - pipe
user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -r ${sender} -m ${extension} ${user}
uucp unix - n n - - pipe
flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
ifmail unix - n n - - pipe
flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp unix - n n - - pipe
flags=Fq. user=bsmtp argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient

amavis unix - - - - 2 smtp
-o smtp_data_done_timeout=1200
-o smtp_send_xforward_command=yes

127.0.0.1:10025 inet n - - - - smtpd
-o content_filter=
-o local_recipient_maps=
-o relay_recipient_maps=
-o smtpd_restriction_classes=
-o smtpd_client_restrictions=
-o smtpd_helo_restrictions=
-o smtpd_sender_restrictions=
-o smtpd_recipient_restrictions=permit_mynetworks,reject
-o mynetworks=127.0.0.0/8
-o strict_rfc821_envelopes=yes
-o receive_override_options=no_unknown_recipient_checks,no_header_body_checks
-o smtpd_bind_address=127.0.0.1

-- mechanisms on localhost --
250-AUTH PLAIN LOGIN
250-AUTH=PLAIN LOGIN


-- end of saslfinger output -- 

Poradite nekdo, co muze byt spatne? Dekuji

Odpovědi

[the.max]

Pouzivat chces Dovecot, nebo Cyrus? Mozna te tohle nekam nasmeruje.

[pupu]

Neverim tomu, ze to je jedina hlaska, ktera se v logu na tohle tema vyskytuje. Muj osobni odhad je, ze vubec nemas nainstalovanou podporu MySQL pro SASL, ale vzhledem k tomu, ze jsem takovou konfiguraci nikdy nepouzil, nedokazu rict, jak to zkontrolovat. Nemluve o tom, ze jsem nezaznamenal verzi tveho operacniho systemu... Zkus pridat '-v' do volani smtpd v master.cf, treba bude trochu sdilnejsi.

[the.max]

Ja tam vidim, ze pouziva fedoru 11

[pupu]

Pravda. Asi budu muset toho ocare zase navstivit... 11ku jeste nemam a prave se chystam na ni prejit, takze to mozna i docela brzo vyzkousim. Na druhou stranu pri letmem zagoogleni jsem nasel pouze varianty se SASL do MySQL pres PAM, takze je otazka, jak moc ta zakladni varianta funguje. Jestli se k tomu dneska dostanu, dam vedet.

[Opičák]

http://www.zdenda.com/mailserver-postfix-imap-maildrop-mysql

[Michal]

Tak nakonec se mi sasl podarilo zprovozni, ale vyskytl se jeste jeden problem, kdyz poslu mail na server, ulozi se spravne do adresare, ale nejni videt pres webmail, ani ho to nestahne pres pop3 Vytvori se napriklad soubor /home/vmail/afrikboutik.com/rblegair@afrikboutik.com/new/1262508520.V803I181023M547545.server.xxxx.com s mailem, ale nejde videt pres imap, ani pop.

[the.max]

jsi si jisty, ze imap/pop si saha do stejneho adresare, kde mas ulozeny ten mail?