[postfix] kein mailversand mehr möglich nach update auf debian lenny


K

kse

New Member
Moin,
ich habe gestern mal das längst überfällige Update auf debain lenny auf meinem Server durchgeführt. Doch wie ich heute feststellen musste hat es wohl dazu geführt das ich nun keine mails mehr versenden kann. (was bis vor dem update auf lenny problemlos funktionierte.

Auf dem Server läuft aus den repos: postfix, sasl und zusätzlich confixx

Beim versenden einer Mail verhält sich der mailclient als sei ein falsches Passwort eingegeben worden.

in den logs ist dann folgendes zu finden:

Code: 
Jan 15 22:55:02 ds87-230-100-9 postfix/smtpd[23323]: warning: SASL authentication failure: Password verification failed
Ein testsaslauthd liefert mir bei dem user jedoch ein OK "Success." zurück.

Bei einem saslfinger ist jedoch auffällig das ein fehlender Eintrag in der main.cf von postfix angemerkt wird.
Code: 
web:/etc/postfix# saslfinger -chs
saslfinger - postfix Cyrus sasl configuration Fri Jan 15 22:59:05 CET 2010
version: 1.0.4
mode: client-side SMTP AUTH

-- basics --
Postfix: 2.5.5
System: Debian GNU/Linux 5.0 \n \l

-- smtp is linked to --
	libsasl2.so.2 => /usr/lib/libsasl2.so.2 (0xb7d59000)

-- active SMTP AUTH and TLS parameters for smtp --
relayhost = 
smtp_tls_session_cache_database = btree:${queue_directory}/smtp_scache


-- listing of /usr/lib/sasl2 --
total 728
drwxr-xr-x  2 root root  4096 2010-01-14 19:47 .
drwxr-xr-x 80 root root 57344 2010-01-14 19:58 ..
-rw-r--r--  1 root root 13476 2009-05-24 12:20 libanonymous.a
-rw-r--r--  1 root root   855 2009-05-24 12:20 libanonymous.la
-rw-r--r--  1 root root 13016 2009-05-24 12:20 libanonymous.so
-rw-r--r--  1 root root 13016 2009-05-24 12:20 libanonymous.so.2
-rw-r--r--  1 root root 13016 2009-05-24 12:20 libanonymous.so.2.0.22
-rw-r--r--  1 root root 15814 2009-05-24 12:20 libcrammd5.a
-rw-r--r--  1 root root   841 2009-05-24 12:20 libcrammd5.la
-rw-r--r--  1 root root 15352 2009-05-24 12:20 libcrammd5.so
-rw-r--r--  1 root root 15352 2009-05-24 12:20 libcrammd5.so.2
-rw-r--r--  1 root root 15352 2009-05-24 12:20 libcrammd5.so.2.0.22
-rw-r--r--  1 root root 46420 2009-05-24 12:20 libdigestmd5.a
-rw-r--r--  1 root root   864 2009-05-24 12:20 libdigestmd5.la
-rw-r--r--  1 root root 43500 2009-05-24 12:20 libdigestmd5.so
-rw-r--r--  1 root root 43500 2009-05-24 12:20 libdigestmd5.so.2
-rw-r--r--  1 root root 43500 2009-05-24 12:20 libdigestmd5.so.2.0.22
-rw-r--r--  1 root root 13650 2009-05-24 12:20 liblogin.a
-rw-r--r--  1 root root   835 2009-05-24 12:20 liblogin.la
-rw-r--r--  1 root root 13460 2009-05-24 12:20 liblogin.so
-rw-r--r--  1 root root 13460 2009-05-24 12:20 liblogin.so.2
-rw-r--r--  1 root root 13460 2009-05-24 12:20 liblogin.so.2.0.22
-rw-r--r--  1 root root 29076 2009-05-24 12:20 libntlm.a
-rw-r--r--  1 root root   829 2009-05-24 12:20 libntlm.la
-rw-r--r--  1 root root 28532 2009-05-24 12:20 libntlm.so
-rw-r--r--  1 root root 28532 2009-05-24 12:20 libntlm.so.2
-rw-r--r--  1 root root 28532 2009-05-24 12:20 libntlm.so.2.0.22
-rw-r--r--  1 root root 13970 2009-05-24 12:20 libplain.a
-rw-r--r--  1 root root   835 2009-05-24 12:20 libplain.la
-rw-r--r--  1 root root 14036 2009-05-24 12:20 libplain.so
-rw-r--r--  1 root root 14036 2009-05-24 12:20 libplain.so.2
-rw-r--r--  1 root root 14036 2009-05-24 12:20 libplain.so.2.0.22
-rw-r--r--  1 root root 21710 2009-05-24 12:20 libsasldb.a
-rw-r--r--  1 root root   866 2009-05-24 12:20 libsasldb.la
-rw-r--r--  1 root root 18080 2009-05-24 12:20 libsasldb.so
-rw-r--r--  1 root root 18080 2009-05-24 12:20 libsasldb.so.2
-rw-r--r--  1 root root 18080 2009-05-24 12:20 libsasldb.so.2.0.22

-- listing of /etc/postfix/sasl --
total 12
drwxr-xr-x 2 root root 4096 2010-01-15 20:58 .
drwxr-xr-x 3 root root 4096 2010-01-15 22:58 ..
-rw-r--r-- 1 root root  108 2006-01-05 17:59 smtpd.conf


Cannot find the smtp_sasl_password_maps parameter in main.cf.
Client-side SMTP AUTH cannot work without this parameter!

Die Frage jedoch ist wieso hat es bisher unter etch ohne smtp_sasl_password_maps funktioniert, und wie muss ich diese variable angeben damit hier eine funktionsfähige Zusammenarbeit mit Confixx3 gelingt?

ein paar weitere configs:

/etc/postfix/sasl/smtp.conf
Code: 
pwcheck_method: saslauthd
mech_list: PLAIN LOGIN
saslauthd_path: /var/run/saslauthd/mux
autotransition:true

/etc/default/saslauthd
Code: 
mech_list: PLAIN LOGIN
saslauthd_path: /var/run/saslauthd/mux
autotransition:true
ds87-230-100-9:/etc/postfix# cat /etc/default/saslauthd
#
# Settings for saslauthd daemon
#

# Should saslauthd run automatically on startup? (default: no)
START=yes


NAME="saslauthd"

mount --bind /var/run/saslauthd/ /var/spool/postfix/var/run/saslauthd/
# Which authentication mechanisms should saslauthd use? (default: pam)
#
# Available options in this Debian package:
# getpwent  -- use the getpwent() library function
# kerberos5 -- use Kerberos 5
# pam       -- use PAM
# rimap     -- use a remote IMAP server
# shadow    -- use the local shadow password file
# sasldb    -- use the local sasldb database file
# ldap      -- use LDAP (configuration is in /etc/saslauthd.conf)
#
# Only one option may be used at a time. See the saslauthd man page
# for more information.
#
# Example: MECHANISMS="pam"
MECHANISMS="pam"

# Additional options for this mechanism. (default: none)
# See the saslauthd man page for information about mech-specific options.
MECH_OPTIONS=""

# How many saslauthd processes should we run? (default: 5)
# A value of 0 will fork a new process for each connection.
THREADS=5

# Other options (default: -c)
# See the saslauthd man page for information about these options.
#
# Example for postfix users: "-c -m /var/spool/postfix/var/run/saslauthd"
#  Note: See /usr/share/doc/sasl2-bin/README.Debian
OPTIONS="-c -r -m /var/run/saslauthd"

/etc/postfix/main.cf
Code: 
smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
biff = no

# appending .domain is the MUA's job.
append_dot_mydomain = no

# Uncomment the next line to generate "delayed mail" warnings
#delay_warning_time = 4h

# TLS parameters
smtpd_tls_cert_file=/etc/ssl/certs/ssl-cert.pem
smtpd_tls_key_file=/etc/ssl/private/ssl-cert.key
smtpd_use_tls=yes
smtpd_tls_session_cache_database = btree:${queue_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${queue_directory}/smtp_scache

# See /usr/share/doc/postfix/TLS_README.gz in the postfix-doc package for
# information on enabling SSL in the smtp client.

myhostname = mydomain.de
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
myorigin = /etc/mailname
mydestination = mydomain.de, localhost
relayhost = 
mynetworks = 127.0.0.0/8
mailbox_command = procmail -a "$EXTENSION"
mailbox_size_limit = 0
recipient_delimiter = +
inet_interfaces = all

### CONFIXX POSTFIX ENTRY ###

virtual_maps = hash:/etc/postfix/confixx_virtualUsers, hash:/etc/postfix/confixx_localDomains

### /CONFIXX POSTFIX ENTRY ###


smtpd_sasl_local_domain = $myhostname
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
broken_sasl_auth_clients = yes
smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination, check_policy_service inet:127.0.0.1:60000
smtpd_client_restrictions = permit_sasl_authenticated, reject_rbl_client ix.dnsbl.manitu.net, reject_rbl_client list.dsbl.org, reject_rbl_client bl.spamcop.net, reject_rbl_client sbl-xbl.spamhaus.org, reject_rbl_client psbl.surriel.com
hopcount_limit = 40000
message_size_limit = 30720000

ich hoffe hier kann mir jemand weiterhelfen wie ich dieses problem beseitigt bekomme.
 
Last edited by a moderator:
You must log in or register to reply here.

Back
Top