Dotaz: SMTP autorizace dovecot

[dobraczek]

Prosim poradite nekdo, uz si vazne nevim rady. Kde by mohla byt chyba, co mam skontrolovat, nebo upravit.

Telnet:

myserver:~# telnet localhost 25
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
220 Vitejte na mail serveru XXX.
EHLO test
250-mail.domain.cz
250-PIPELINING
250-SIZE 20480000
250-VRFY
250-ETRN
250-STARTTLS
250-AUTH PLAIN LOGIN CRAM-MD5 DIGEST-MD5
250-AUTH=PLAIN LOGIN CRAM-MD5 DIGEST-MD5
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN
AUTH PLAIN AHRlc3QAdGVzdHBhc3M=
535 5.7.8 Error: authentication failed:

/etc/postfix/main.cf

.
.
.
virtual_mailbox_domains = /etc/postfix/virtual_domains
virtual_mailbox_base = /var/www/mail
virtual_mailbox_maps = hash:/etc/postfix/virtual
virtual_alias_maps = hash:/etc/postfix/virtual_alias
virtual_uid_maps = static:106
virtual_gid_maps = static:108
.
.
.
broken_sasl_auth_clients = yes
smtp_sasl_auth_enable = no

smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain =
smtpd_sasl_security_options = noanonymous
.
.
.

/etc/dovecot/dovecot.conf

protocols = pop3 imap
ssl_disable = yes
disable_plaintext_auth = no
mail_location = maildir:/var/www/mail/%u
pop3_uidl_format = %08Xu%08Xv

first_valid_uid = 106
first_valid_gid = 108
last_valid_uid = 106
last_valid_gid = 108

auth_verbose = yes
auth default {
  #mechanisms = plain
  mechanisms = plain login cram-md5 digest-md5

  passdb passwd-file {
    args = /etc/postfix/passwd
  }
  userdb static {
    args = uid=106 gid=108
  }

  socket listen {
    client {
      path = /var/spool/postfix/private/auth
      mode = 0660
      user = postfix
      group = postfix
    }
  }
}

/etc/postfix/passwd

user@domena.cz:{PLAIN}heslo

postconf -a
cyrus
dovecot

Odpovědi

[NN]

Skus AUTH PLAIN dGVzdAB0ZXN0AHRlc3RwYXNz

(test test testpass)

NN

[dobraczek]

535 5.7.8 Error: authentication failed:

Pri pokusu stahnout data do offline klienta prez imap s overovanim SMTP to take hlasi chybu.

Zpravu nelze odeslat, protoze jeden z prijemcu byl serverem odmitnut. Adresa odmitnuteho prijemce je xxx@xxx.xx. Predmet 'test', Ucet: 'domena.cz', Server: 'server.cz', Protokol: SMTP, Odezva server: '554 5.7.1 xxx(IP): Client host rejected: Acces denied', Port: 25, ....... Cislo chyby: 0x800CCC79

Log na serveru:

Oct 20 16:35:59 ideas-server postfix/smtpd[8450]: warning: restriction `permit_sasl_authenticated' after `reject' is ignored
Oct 20 16:35:59 ideas-server postfix/smtpd[8450]: warning: restriction `permit_sasl_authenticated' after `reject' is ignored
Oct 20 16:35:59 ideas-server postfix/smtpd[8450]: warning: restriction `permit_sasl_authenticated' after `reject' is ignored
Oct 20 16:50:50 ideas-server postfix/smtpd[9288]: warning: dict_nis_init: NIS domain name not set - NIS lookups disabled
Oct 20 16:51:03 ideas-server postfix/smtpd[9301]: warning: dict_nis_init: NIS domain name not set - NIS lookups disabled
Oct 20 16:51:03 ideas-server postfix/smtpd[9302]: warning: dict_nis_init: NIS domain name not set - NIS lookups disabled
Oct 20 16:51:04 ideas-server postfix/smtpd[9301]: warning: restriction `permit_sasl_authenticated' after `reject' is ignored
Oct 20 16:51:04 ideas-server postfix/smtpd[9302]: warning: restriction `permit_sasl_authenticated' after `reject' is ignored
Oct 20 16:51:04 ideas-server postfix/smtpd[9288]: warning: localhost[127.0.0.1]: SASL PLAIN authentication failed:
Oct 20 16:55:27 ideas-server postfix/smtpd[9546]: warning: dict_nis_init: NIS domain name not set - NIS lookups disabled
Oct 20 16:55:27 ideas-server postfix/smtpd[9546]: warning: restriction `permit_sasl_authenticated' after `reject' is ignored
Oct 20 16:55:45 ideas-server postfix/smtpd[9546]: warning: restriction `permit_sasl_authenticated' after `reject' is ignored
Oct 20 17:00:00 ideas-server postfix/smtpd[9801]: warning: dict_nis_init: NIS domain name not set - NIS lookups disabled
Oct 20 17:00:00 ideas-server postfix/smtpd[9801]: warning: restriction `permit_sasl_authenticated' after `reject' is ignored
Oct 20 17:00:04 ideas-server postfix/smtpd[9801]: warning: restriction `permit_sasl_authenticated' after `reject' is ignored
Oct 20 17:00:05 ideas-server postfix/smtpd[9801]: warning: restriction `permit_sasl_authenticated' after `reject' is ignored
Oct 20 17:00:06 ideas-server postfix/smtpd[9801]: warning: restriction `permit_sasl_authenticated' after `reject' is ignored
Oct 20 17:00:08 ideas-server postfix/smtpd[9801]: warning: restriction `permit_sasl_authenticated' after `reject' is ignored
Oct 20 17:00:09 ideas-server postfix/smtpd[9801]: warning: restriction `permit_sasl_authenticated' after `reject' is ignored

[svaca]

No ja myslim, ze je to v tom logu naprosto jasne napsany ne ?

Co mas v : smtpd_sender_restrictions ?

[dobraczek]

Jejda, mel jsem to zakomentovane. Dik jsem vul. Uz to jede

smtpd_sender_restrictions =
  reject_rhsbl_client dsn.rfc-ignorant.org
  reject_invalid_hostname
  reject_non_fqdn_sender
  reject_unknown_sender_domain
  permit_sasl_authenticated
  permit_mynetworks