Dotaz: Postfix + mysql - problem

[wr]

Nazdarek,
zkompiloval jsem Postfix 2.2.5 s podporou SASL, TSL a MySql. Pomoci ceskeho navodu na internetu (http://www.zdenda.com/howto/mailserver.html) se snazim to rozjet pod FC4. Pridal jsem virtualniho uzivatele, ale do logu mi to pise chybu:

Aug 16 15:08:45 localhost postfix/smtpd[12741]: connect from unknown[213.210.179.211]
Aug 16 15:09:17 localhost postfix/smtpd[12741]: warning: connect to mysql server localhost: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
Aug 16 15:09:17 localhost postfix/smtpd[12741]: fatal: mysql:/etc/postfix/mysql-recipient.cf: table lookup problem
Aug 16 17:09:18 localhost postfix/master[12169]: warning: process /usr/libexec/postfix/smtpd pid 12741 exit status 1
Aug 16 17:09:46 localhost postfix/smtpd[12742]: connect from unknown[192.168.0.1]
Aug 16 15:09:47 localhost postfix/smtpd[12742]: warning: connect to mysql server localhost: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
Aug 16 15:09:47 localhost postfix/smtpd[12742]: fatal: mysql:/etc/postfix/mysql-recipient.cf: table lookup problem
Aug 16 17:09:48 localhost postfix/master[12169]: warning: process /usr/libexec/postfix/smtpd pid 12742 exit status 1
Aug 16 17:09:48 localhost postfix/master[12169]: warning: /usr/libexec/postfix/smtpd: bad command startup -- throttling 

Pritom, by to melo fungovat, i hesla jsou spravne nastavene. Diky za jakoukoliv radu

Odpovědi

[Zdeněk Burda]

Aug 16 15:09:17 localhost postfix/smtpd[12741]: warning: connect to mysql server localhost: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)

Ahoj, seš si jistý, že /var/lib/mysql/mysql.sock existuje?

Zkus do konfigurace postfixe zadat místo localhost přímo ip adresu 127.0.0.1

[wr]

Vas clanek je SKVELI ! Opravdu skvela prace !
Jen je skoda, ze tam nebylo trosku vic o rucni kompilaci a nejaky priklad virtualniho uzivatele.
Po zmeni localhost na 127.0.0.1 mi to funguje z casti :)

Recipient address rejected: Relay access denied; from=mail odesilatele to=mail prijemce proto=SMTP helo=home

Kam bych mel napsat povoleni relaye ? Dekuji

[cooler]

neni to direktiva
recipient maps $relay_domains,
alebo
relay_domains = mysql:/etc/postfix/mysql_relay_domains.cf ?

[wr]

Hmm, a jak tedy v postfixu nastavit aby to pro prihlaseneho uzivatele odesilalo postu na jakoukoliv domenu ?
hmm divne ted mi to do logu pise toto: delivery temporarily suspended: transport is unavailable

[cooler]

ked myslis smtp authentifikaciu, tak na to pouzi Cyrus SASL ... ten podporuje aj mysql authentifikaciu a ma velmi jednoduchu konfiguraciu

[cooler]

aha, tak to mas :).
mas aj v main.cf:
smtpd_recipient_restrictions = permit_sasl_authenticated
?

[wr]

v /etc/postfix/main.cf mam:

smtpd_recipient_restrictions = check_recipient_access mysql:/etc/postfix/mysql-recipient.cf,
                               reject_unknown_sender_domain,
                               permit_mynetworks,
                               permit_sasl_authenticated,
                               check_relay_domains,
                               reject 

v /usr/lib/sasl2/smtpd.conf mam:

log_level: 3
sasl_pwcheck_method: auxprop 
sasl_auxprop_plugin: sql login plain crammd6 digestmd5
sql_engine: mysql
sql_hostnames: localhost
sql_database: postfix 
sql_user: UZIVATEL
sql_passwd: NEJAKYHESLO
sql_select: SELECT clear FROM postfix_users WHERE email = '%u@%r' 
sql_usessl: no
sql_verbose: yes 

do logu mi to pise hasky:

Aug 16 21:54:06 localhost postfix/qmgr[20680]: 42C232A01FF: from=mail odesilatele, size=928, nrcpt=1 (queue active)
Aug 16 21:54:06 localhost postfix/qmgr[20680]: warning: connect to transport smtp: Connection refused
Aug 16 21:54:06 localhost postfix/qmgr[20680]: F011A2A08D3: from=mail odesilatele, size=816, nrcpt=1 (queue active)
Aug 16 21:54:06 localhost postfix/qmgr[20680]: F011A2A08D3: to=mail prijemce, relay=none, delay=4384, status=deferred (delivery temporarily suspended: transport is unavailable)
Aug 16 21:54:11 localhost postfix/smtpd[20705]: connect from unknown[192.168.0.1]
Aug 16 19:54:11 localhost postfix/smtpd[20705]: warning: SASL authentication problem: unable to open Berkeley db /etc/sasldb2: Bad file descriptor
Aug 16 19:54:11 localhost postfix/smtpd[20705]: warning: SASL authentication problem: unable to open Berkeley db /etc/sasldb2: Bad file descriptor
Aug 16 19:54:11 localhost postfix/smtpd[20705]: warning: unknown[192.168.0.1]: SASL LOGIN authentication failed
Aug 16 19:54:11 localhost postfix/smtpd[20705]: lost connection after AUTH from unknown[192.168.0.1]
Aug 16 19:54:11 localhost postfix/smtpd[20705]: disconnect from unknown[192.168.0.1] 

[wr]

zapomnel jsem dodat, ze hesla pridavam: saslpasswd2 -c UZIVATEL.
ALe rad bych SASL predelal na mysql, coz se mi nedari :(

[Zdeněk Burda]

Podle logu to vypadá, že se vůbec o komunikaci s MySQL nesnaží. V Debianu je pro SQL podporu potřeba donstalovat balíček libsasl2-modules-sql, není to ve fedoře podobné? Taky bych zkusil natavit sasl_auxprop_plugin pouze na sql.

[cooler]

bezi ti smtp v chroot, alebo nie ?

[Zdeněk Burda]

zkus do tabulky postfix_access zapsat: source: domena.cz
access: OK
type: recipient
do postfix_transport: domain: domena.cz
destination: local (nebo virtual, maildrop, proste kam to pak leze...)
predpokladam, ze v v potfix_users mas toho uzivatele zapsaneho... Zapni si ukecanej rezim v mysql (tak aby se do logu psal kompletni sql dotaz) a sleduj na co presne se postfix pri dorucovani emailu pta, z toho ti pak bude jasne co kam mas zapsat...

[Kamorek]

Ahoj Zdenku, vyuzil bych tohoto dotazu a ptam se taky, i kdyz uz jsem kdysi toto ema resil a nikdo se neozval.:

(postupoval jsem taky dle vyse uvedeneho navodu) MAM FC3, postfix,mysql,dovecot a nevim, jak nastavit

1)dovecot

2)smtpd.conf jsem nenasel a nevim, jak pridat uzivatele do db mysql (kdyz si otevru tabulku user pres webmina, nevim, jak doplnit heslo, jelikoz to ma byt nejak kodovany.

Sorry, za stupidni dotazy, na HOWTO postfix .org jsou taky jen MANy pro Courier.

Zatim mi komplet beha postfix bez mysql bez problemu, ale mysql mi pripada jako lepsi reseni. Dik za radu, nebo odkaz.

[wr]

na internetu jsou krasny navody jak nastavit dovetcot pres mysql. Chvili mi to trvalo, nez jsem na to prisel. U FC3 je u dovecotu podpora mysql zapnuta, a pokud ne, neda se nic delat a musis kompilovat.
/etc/dovecot.conf jsem pridal ( zmenil ) radky

auth_userdb = mysql /etc/dovecot-mysql.conf
auth_passdb = mysql /etc/dovecot-mysql.conf
default_mail_env = mbox:~/mail/:INBOX=/var/spool/mail/%u

/etc/dovecot-mysql.conf

#TABULKA PRO MYSQL
# CREATE TABLE users (
#     userid VARCHAR(128) NOT NULL,
#     password VARCHAR(64) NOT NULL,
#     home VARCHAR(256) NOT NULL,
#     uid INTEGER NOT NULL,
#     gid INTEGER NOT NULL,
#     active CHAR(1) DEFAULT 'Y' NOT NULL
# );

db_host = localhost
db_port = 3306
db_unix_socket = /var/lib/mysql/mysql.sock
db = DATABAZE
db_user = UZIVATEL
db_passwd = TAJNEHESLO
db_client_flags = 0

# Default password scheme.
#
# Currently supported schemes include PLAIN, PLAIN-MD5, DIGEST-MD5, and CRYPT.
#
default_pass_scheme = crypt

# Query to retrieve the password.
#
# The query should return one row, one column. If more than one row or column
# is returned, authentication will automatically fail.
#
# Available substitutions:
#   %u = entire userid
#   %n = user part of user@domain
#   %d = domain part of user@domain
#
# Example:
#   password_query = SELECT password FROM users WHERE userid = '%n' AND domain = '%d'
#   password_query = SELECT password FROM users WHERE userid = '%u' AND active = 'Y'
#
#password_query = SELECT password FROM users WHERE userid = '%u'
password_query = SELECT password FROM users WHERE userid = '%u' AND active = 'Y'

# Query to retrieve the user information.
#
# The query must return only one row. The columns to return are:
#   home - Home directory
#   mail - MAIL environment
#   system_user - System user name (for initgroups())
#   uid - System UID
#   gid - System GID
#
# Either home or mail is required. uid and gid are required. If more than one
# row is returned or there's missing fields, login will automatically fail.
#
# Examples
#   user_query = SELECT home, uid, gid FROM users WHERE userid = '%n' AND domain = '%d'
#   user_query = SELECT dir AS home, user AS uid, group AS gid FROM users where userid = '%u'
#user_query = SELECT home, 91 AS uid, 91 AS gid FROM users WHERE userid = '%u'
#
#user_query = SELECT home, uid, gid FROM users WHERE userid = '%u' 

[Zdeněk Burda]

Ahoj,

dovecot s mysql tu zrovna nikde nemám, koukal jsi se na google případně do dokumentace? Na čem jsi se zasekl?

Uživatele zakládám pomocí jednoduchého skriptíku, heslo generuju pomocí mkpasswd --hash=md5 heslo (GNU mkpasswd 4.7.5).

[Kamorek]

OK. Dik, sekl jsem s tim pred 3 tydny, pac mi to neslo a tato diskuse me opet dodala silu se na to mrknout. V patek to rozjedu znovu a kdyztak toto vlakno jeste ozivim konkretnimi dotazy. Dikec

[jm]

Durazne bych doporucil prostudovat dokumentaci, jinak ten server za chvili skonci na seznam open relays a pak si te posty asi moc neposles.

[wr]

nene, open relay to neni v zadnem pripade, vyzaduje to kontolu uzivatelu pres sasl a mysql. Jen ten transport nejak vazne :)

[wr]

Bohuzel, i pres vsechnu snahu nemuzu porad rozjet SASL pres mysql.

[Zdenek]

Mas v master.cf povoleny sasl?

smtps inet n - n - - smtpd -o smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes

[wr]

samozrejme, delal jsem to presne podle manualu

[holy]

podarilo se ti to rozchodit? resim stejny problem a nikdo mi nechce poradit

[......]

1) nikdo za to není placený aby ti radil
2) asi to nikdo neví, když ti něradí
3) nezakládej si tu 50 dotazů, nic tím nevyřešíš

[jiri.b]

sasl neumi mluvit se zasifrovanyma heslama mysql - je na to patch viz http://high5.net/howto/

j.