| View previous topic :: View next topic |
| Author |
Message |
BeetleJuice
n00b
Joined: 29 Apr 2002
Posts: 67
Location: Austria
|
 Posted: Thu Mar 13, 2003 6:54 pm Post subject: Problems with postfix+smtp-auth and outlook |
 |
|
Hi, I got a problem sending mails over postfix-1.11 with smtp-auth enabled.
Sending mails works smooth when I use linux clients like balsa or evolution (because they use digest-md5 or cram-md5), but not with Outlook (Express).
I use cyrus-sasl-2.1.10-r2 with sasldb2 and saslauthd for authentication.
Thats my main.cf from postfix containing the sasl stuff:
| Code: |
smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, check_relay_domains ,reject_unauth_destination, reject
smtpd_client_restrictions = permit_mynetworks, permit_sasl_authenticated, check_relay_domains, reject_unauth_destination, reject
#smtpd_delay_reject = yes
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain = 127.0.0.1
smtpd_sasl_security_options = noanonymous
smtpd_tls_auth_only = no
smtp_sasl_auth_enable = yes
smtp_sasl_security_options = noanonymous
smtp_sasl_password_maps = hash:/etc/postfix/saslpass
broken_sasl_auth_clients=yes
|
/etc/sasl2/smtpd.conf containts
| Code: |
pwcheck_method: saslauthd
|
Since Outlook uses the LOGIN auth method I checked that:
| Code: |
EHLO localhost
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-AUTH LOGIN PLAIN OTP DIGEST-MD5 CRAM-MD5
250-AUTH=LOGIN PLAIN OTP DIGEST-MD5 CRAM-MD5
250-XVERP
250 8BITMIME
AUTH LOGIN
334 xxx
login
334 xxx
password
535 Error: authentication failed
|
For some reason the LOGIN auth method doesnt work, although sasl is compiled with login support.
mail.log says
| Code: |
Mar 13 19:42:14 www postfix/smtpd[32467]: warning: localhost[127.0.0.1]: SASL LOGIN authentication failed
|
Its the same with cyradm, cyradm --auth digest-md5 works fine, --auth login doesnt.
I hope someone can help me  |
|
| Back to top |
|
 |
BeetleJuice
n00b
Joined: 29 Apr 2002
Posts: 67
Location: Austria
|
| Posted: Fri Mar 21, 2003 12:42 pm Post subject: |
|
|
*bump*
 |
|
| Back to top |
|
|
MmmmJoel
Tux's lil' helper
Joined: 24 Jan 2003
Posts: 82
|
| Posted: Sat Mar 22, 2003 12:31 am Post subject: |
|
|
Maybe
| Code: |
broken_sasl_auth_clients = yes
|
will help you? From Gentoo's mail documentation on the web site:
| Quote: |
// The broken_sasl_auth_clients option and the login auth method
// are for outlook and outlook express only and are undocumented.
// Isn't having to hack software for stupid, broken, M$ BS great?
// smtpd_sasl_local_domain appends a domain name to clients using
// smtp-auth. Make sure it's blank or your user names will get
// mangled by postfix and be unable to auth.
|
|
|
| Back to top |
|
|
BeetleJuice
n00b
Joined: 29 Apr 2002
Posts: 67
Location: Austria
|
| Posted: Sat Mar 22, 2003 9:58 am Post subject: |
|
|
broken_sasl_auth_clients = yes is already in my main.cf
besides this is only a workaround for outlook 4.x, and im using outlook 6.
i read many howtos about sasl+postfix, but i dont find the errorr  |
|
| Back to top |
|
|
Wilhelm
Tux's lil' helper
Joined: 27 May 2003
Posts: 149
|
| Posted: Tue Mar 30, 2004 12:33 pm Post subject: |
|
|
try commenting out
smtpd_sasl_local_domain = 127.0.0.1
This caused authentication problems for me. |
|
| Back to top |
|
|
|
Networking & Security
