Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
Virtual Mail Postfix SMTP TTLS
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
MooktaKiNG
Guru
Guru


Joined: 11 Nov 2002
Posts: 326
Location: London, UK

PostPosted: Wed Nov 17, 2004 4:34 am    Post subject: Virtual Mail Postfix SMTP TTLS Reply with quote

I have gone through the http://www.gentoo.org/doc/en/virt-mail-howto.xml

Its seems everything working as they should be.

There is one problem though.

When i telnet i get this:
Code:

mail root # telnet localhost 25
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
220 mail.mooktakim.com ESMTP Postfix
EHLO mooktakim.com
250-mail.mooktakim.com
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-STARTTLS
250 8BITMIME


It misses out the AUTH parts.

WHen i want to send outisde the server using thunderbird with TLS turned on. Only the virtual users are allowed to send email.
I can't seem to get any of the local users send email. I tried "usernamer" and "username@domain". It doesn't work.

I made some modification to the pam imap file, i didn't delete the follwing line as was suggested in the howto:
Code:

auth       required     pam_nologin.so
auth       required     pam_stack.so service=system-auth
account    required     pam_stack.so service=system-auth
session    required     pam_stack.so service=system-auth


I only did that becuase this seems to allow me to login using local users, without having to add @domain in the username. This i do want.
The virtual emails do work fine, i have to use username@virtualdomain to login.

i tied doing the same, leaving what wa ther before, in the smtp file. but that didn't work.

The other weird thing is: testsaslauthd -u username -p password
works fine for localuser. but when i try "virtual@domain.com" it fails. I expected it to be the other way around since the SMTP send doesn't work.

Also how much will i have to change to use crypt in the passwords for MySQL?

Here's the log for sending email:
Code:

Nov 17 04:31:31 mail postfix/smtpd[21875]: 0000 14 03 01 00 01 01 16 03|01 00 30 96 c5 4d 0a 79  ........ ..0..M.y
Nov 17 04:31:31 mail postfix/smtpd[21875]: 0010 41 10 c7 69 34 47 d6 d7|24 a0 f1 52 ad 1a 8c 84  A..i4G.. $..R....
Nov 17 04:31:31 mail postfix/smtpd[21875]: 0020 ef df 85 fe aa 34 a7 b9|0e 63 15 b6 81 16 1e fb  .....4.. .c......
Nov 17 04:31:31 mail postfix/smtpd[21875]: 0030 a3 87 77 f7 db dd 20 a0|34 14 cc     ..w... . 4..
Nov 17 04:31:31 mail postfix/smtpd[21875]: SSL_accept:SSLv3 flush data
Nov 17 04:31:31 mail postfix/smtpd[21875]: TLS connection established from gw.ubs.victoriahall.com[217.12.147.6]: TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)
Nov 17 04:31:32 mail postfix/smtpd[21875]: warning: SASL authentication failure: Password verification failed
Nov 17 04:31:32 mail postfix/smtpd[21875]: warning: gw.ubs.victoriahall.com[217.12.147.6]: SASL PLAIN authentication failed
Nov 17 04:31:33 mail spamd[15568]: clean message (0.7/5.0) for mma:500 in 21.2 seconds, 1578 bytes.
Nov 17 04:31:33 mail spamd[15568]: result: .  0 - AWL,BAYES_40,X_MESSAGE_INFO scantime=21.2,size=1578,mid=<419AD1BC.1050208@mooktakim.com>,bayes=0.353867955982973,autolearn=no
Nov 17 04:31:33 mail postfix/smtpd[21875]: warning: gw.ubs.victoriahall.com[217.12.147.6]: SASL LOGIN authentication failed
Nov 17 04:31:36 mail postfix/smtpd[21875]: warning: SASL authentication failure: Password verification failed
Nov 17 04:31:36 mail postfix/smtpd[21875]: warning: gw.ubs.victoriahall.com[217.12.147.6]: SASL PLAIN authentication failed
Nov 17 04:31:37 mail postfix/smtpd[21875]: warning: gw.ubs.victoriahall.com[217.12.147.6]: SASL LOGIN authentication failed
Nov 17 04:31:37 mail spamd[16306]: connection from localhost [127.0.0.1] at port 3932
Nov 17 04:31:38 mail spamd[16306]: info: setuid to mma succeeded
Nov 17 04:31:39 mail postfix/smtpd[21875]: warning: SASL authentication failure: Password verification failed
Nov 17 04:31:39 mail postfix/smtpd[21875]: warning: gw.ubs.victoriahall.com[217.12.147.6]: SASL PLAIN authentication failed
Nov 17 04:31:39 mail postfix/smtpd[21875]: warning: gw.ubs.victoriahall.com[217.12.147.6]: SASL LOGIN authentication failed
Nov 17 04:31:41 mail postfix/smtpd[21875]: warning: SASL authentication failure: Password verification failed
Nov 17 04:31:41 mail postfix/smtpd[21875]: warning: gw.ubs.victoriahall.com[217.12.147.6]: SASL PLAIN authentication failed
Nov 17 04:31:42 mail postfix/smtpd[21875]: warning: gw.ubs.victoriahall.com[217.12.147.6]: SASL LOGIN authentication failed
Nov 17 04:31:44 mail postfix/smtpd[21875]: warning: SASL authentication failure: Password verification failed
Nov 17 04:31:44 mail postfix/smtpd[21875]: warning: gw.ubs.victoriahall.com[217.12.147.6]: SASL PLAIN authentication failed
Nov 17 04:31:44 mail postfix/smtpd[21875]: warning: gw.ubs.victoriahall.com[217.12.147.6]: SASL LOGIN authentication failed
Nov 17 04:31:47 mail spamd[16306]: processing message <419AD1BC.1050208@mooktakim.com> for mma:500.
Nov 17 04:31:47 mail postfix/smtpd[21875]: lost connection after AUTH from gw.ubs.victoriahall.com[217.12.147.6]
Nov 17 04:31:47 mail postfix/smtpd[21875]: disconnect from gw.ubs.victoriahall.com[217.12.147.6]


Another weird thing is its doing PLAIN and then LOGIN, whats that about? weird.

Overall, i want both local and virtual users to work side by side.
one reason this is becuase this server was a normal email server, adn not a virtual one before i converted it.

Thanks in advance
_________________
http://www.mooktakim.com
Athlon XP 2001, Giga-Byte GA-7VRXP MB, 640Mb DDR RAM 333MHz, MSI Geforce 4800SE 128Mb DDR, 40x12x48 Liteon CDRW drive, Flower Cooler, ADSL Router
Back to top
View user's profile Send private message
Paulten
Apprentice
Apprentice


Joined: 28 Mar 2003
Posts: 257
Location: Sykkylven, Norway

PostPosted: Wed Nov 17, 2004 10:49 am    Post subject: Reply with quote

Can SASL use two different pwcheck_method's? I don't think so.

For encrypted mysql password I used
http://www.viperstrike.com/~lopaka/sysadmin/cyrus-sasl-mysql-encrypt/
_________________
Homepage : http://paul.kde.no Jabber ID : tenfjord@jabber.org
"Dei levde som dyr. Dei verken røykte eller drakk" -Ukjent
Back to top
View user's profile Send private message
MooktaKiNG
Guru
Guru


Joined: 11 Nov 2002
Posts: 326
Location: London, UK

PostPosted: Wed Nov 17, 2004 11:47 am    Post subject: Reply with quote

Does anyone know why telnet doesn't show the AUTH parts, as it shows in the howto.
_________________
http://www.mooktakim.com
Athlon XP 2001, Giga-Byte GA-7VRXP MB, 640Mb DDR RAM 333MHz, MSI Geforce 4800SE 128Mb DDR, 40x12x48 Liteon CDRW drive, Flower Cooler, ADSL Router
Back to top
View user's profile Send private message
Paulten
Apprentice
Apprentice


Joined: 28 Mar 2003
Posts: 257
Location: Sykkylven, Norway

PostPosted: Wed Nov 17, 2004 11:57 am    Post subject: Reply with quote

Did you enabled sasl in your main.cf? I haven't read gentoo's postfix guide...


smtpd_sasl_auth_enable = yes
smtpd_sasl2_auth_enable = yes
smtpd_sasl_security_options = noanonymous
broken_sasl_auth_clients = yes
smtpd_sasl_local_domain =
_________________
Homepage : http://paul.kde.no Jabber ID : tenfjord@jabber.org
"Dei levde som dyr. Dei verken røykte eller drakk" -Ukjent
Back to top
View user's profile Send private message
MooktaKiNG
Guru
Guru


Joined: 11 Nov 2002
Posts: 326
Location: London, UK

PostPosted: Wed Nov 17, 2004 3:00 pm    Post subject: Reply with quote

I have all those options
_________________
http://www.mooktakim.com
Athlon XP 2001, Giga-Byte GA-7VRXP MB, 640Mb DDR RAM 333MHz, MSI Geforce 4800SE 128Mb DDR, 40x12x48 Liteon CDRW drive, Flower Cooler, ADSL Router
Back to top
View user's profile Send private message
dalamarian
n00b
n00b


Joined: 08 May 2003
Posts: 30

PostPosted: Tue Dec 28, 2004 2:11 pm    Post subject: Reply with quote

I am having the same issue of auth not showing up when telnetting in. Any ideas?
Back to top
View user's profile Send private message
Paulten
Apprentice
Apprentice


Joined: 28 Mar 2003
Posts: 257
Location: Sykkylven, Norway

PostPosted: Wed Dec 29, 2004 10:56 am    Post subject: Reply with quote

And you are sure you compiled postfix with SASL support?
Code:
equery uses postfix

_________________
Homepage : http://paul.kde.no Jabber ID : tenfjord@jabber.org
"Dei levde som dyr. Dei verken røykte eller drakk" -Ukjent
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum