postfix sasl + imap

mrtnmueller · May 10, 2010

hi,

nach einigen vergeblichen versuchen mit der courier-mta unter lucid hab ich jetzt postfix installiert und bin soweit, dass es mail annimmt und ich per courier-pop und imap auf die postfächer zugreifen kann. einzig der versand per smtp klappt noch nicht... hier brauche ich laut vielen tutorials SASL auth

ok, das also installiert und auf imap umgestellt (will ja die gleichen konten nutzen wie beim empfang) und in /etc/postfix/sasl die smtp.conf angelegt

Code:

pwcheck_method: saslauthd
mech_list: PLAIN LOGIN
saslauthd_path: /var/run/saslauthd
autotransition: true

zudem die main.cf um folgende zeilen ergänzt:

Code:

virtual_mailbox_domains = the-enlightened.de 
virtual_mailbox_base = /home/vmail
virtual_mailbox_maps = hash:/etc/postfix/vmailbox
virtual_minimum_uid = 100
virtual_uid_maps = static:1006
virtual_gid_maps = static:1001
virtual_alias_maps = hash:/etc/postfix/virtual
smtpd_sasl_type = cyrus
smtpd_sasl_path = smtpd
smtpd_sasl_auth_enable = yes
broken_sasl_auth_clients = yes
smtpd_sasl_security_options = noanonymous
smtpd_sasl_tls_security_options = $smtpd_sasl_security_options
smtpd_sasl_local_domain = $myhostname

danach neu geladen (beide dienste) aber ich bekomme wenn ich auth login oder auth plain probiere immer nur den folgenden fehler ins log (und so ähnlich als anzeige):

Code:

india896 postfix/smtpd[32624]: warning: port-92-195-*-*.dynamic.qsc.de[92.195.*.*]: SASL LOGIN authentication failed: bad protocol / cancel

saslfinger -s gibt folgendes aus:

Code:

india896:/etc/postfix# saslfinger -s
saslfinger - postfix Cyrus sasl configuration Mo 10. Mai 11:59:58 CEST 2010
version: 1.0.4
mode: server-side SMTP AUTH

-- basics --
Postfix: 2.7.0
System: Ubuntu 10.04 LTS \n \l

-- smtpd is linked to --
        libsasl2.so.2 => /usr/lib/libsasl2.so.2 (0x00007ff0255d5000)

-- active SMTP AUTH and TLS parameters for smtpd --
broken_sasl_auth_clients = yes
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain = $myhostname
smtpd_sasl_path = smtpd
smtpd_sasl_security_options = noanonymous
smtpd_sasl_tls_security_options = $smtpd_sasl_security_options
smtpd_sasl_type = cyrus
smtpd_tls_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem
smtpd_tls_key_file = /etc/ssl/private/ssl-cert-snakeoil.key
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtpd_use_tls = yes


-- listing of /usr/lib64/sasl2 --
total 912
drwxr-xr-x   2 root root  4096 2010-05-10 11:15 .
drwxr-xr-x 124 root root 45056 2010-05-10 11:48 ..
-rw-r--r--   1 root root 20092 2010-03-31 11:30 libanonymous.a
-rw-r--r--   1 root root   990 2010-03-31 11:30 libanonymous.la
-rw-r--r--   1 root root 18528 2010-03-31 11:30 libanonymous.so
-rw-r--r--   1 root root 18528 2010-03-31 11:30 libanonymous.so.2
-rw-r--r--   1 root root 18528 2010-03-31 11:30 libanonymous.so.2.0.23
-rw-r--r--   1 root root 23802 2010-03-31 11:30 libcrammd5.a
-rw-r--r--   1 root root   976 2010-03-31 11:30 libcrammd5.la
-rw-r--r--   1 root root 22624 2010-03-31 11:30 libcrammd5.so
-rw-r--r--   1 root root 22624 2010-03-31 11:30 libcrammd5.so.2
-rw-r--r--   1 root root 22624 2010-03-31 11:30 libcrammd5.so.2.0.23
-rw-r--r--   1 root root 65912 2010-03-31 11:30 libdigestmd5.a
-rw-r--r--   1 root root   999 2010-03-31 11:30 libdigestmd5.la
-rw-r--r--   1 root root 51752 2010-03-31 11:30 libdigestmd5.so
-rw-r--r--   1 root root 51752 2010-03-31 11:30 libdigestmd5.so.2
-rw-r--r--   1 root root 51752 2010-03-31 11:30 libdigestmd5.so.2.0.23
-rw-r--r--   1 root root 20590 2010-03-31 11:30 liblogin.a
-rw-r--r--   1 root root   970 2010-03-31 11:30 liblogin.la
-rw-r--r--   1 root root 18520 2010-03-31 11:30 liblogin.so
-rw-r--r--   1 root root 18520 2010-03-31 11:30 liblogin.so.2
-rw-r--r--   1 root root 18520 2010-03-31 11:30 liblogin.so.2.0.23
-rw-r--r--   1 root root 42012 2010-03-31 11:30 libntlm.a
-rw-r--r--   1 root root   964 2010-03-31 11:30 libntlm.la
-rw-r--r--   1 root root 34904 2010-03-31 11:30 libntlm.so
-rw-r--r--   1 root root 34904 2010-03-31 11:30 libntlm.so.2
-rw-r--r--   1 root root 34904 2010-03-31 11:30 libntlm.so.2.0.23
-rw-r--r--   1 root root 20454 2010-03-31 11:30 libplain.a
-rw-r--r--   1 root root   970 2010-03-31 11:30 libplain.la
-rw-r--r--   1 root root 18520 2010-03-31 11:30 libplain.so
-rw-r--r--   1 root root 18520 2010-03-31 11:30 libplain.so.2
-rw-r--r--   1 root root 18520 2010-03-31 11:30 libplain.so.2.0.23
-rw-r--r--   1 root root 30332 2010-03-31 11:30 libsasldb.a
-rw-r--r--   1 root root  1001 2010-03-31 11:30 libsasldb.la
-rw-r--r--   1 root root 22464 2010-03-31 11:30 libsasldb.so
-rw-r--r--   1 root root 22464 2010-03-31 11:30 libsasldb.so.2
-rw-r--r--   1 root root 22464 2010-03-31 11:30 libsasldb.so.2.0.23

-- listing of /usr/lib/sasl2 --
total 912
drwxr-xr-x   2 root root  4096 2010-05-10 11:15 .
drwxr-xr-x 124 root root 45056 2010-05-10 11:48 ..
-rw-r--r--   1 root root 20092 2010-03-31 11:30 libanonymous.a
-rw-r--r--   1 root root   990 2010-03-31 11:30 libanonymous.la
-rw-r--r--   1 root root 18528 2010-03-31 11:30 libanonymous.so
-rw-r--r--   1 root root 18528 2010-03-31 11:30 libanonymous.so.2
-rw-r--r--   1 root root 18528 2010-03-31 11:30 libanonymous.so.2.0.23
-rw-r--r--   1 root root 23802 2010-03-31 11:30 libcrammd5.a
-rw-r--r--   1 root root   976 2010-03-31 11:30 libcrammd5.la
-rw-r--r--   1 root root 22624 2010-03-31 11:30 libcrammd5.so
-rw-r--r--   1 root root 22624 2010-03-31 11:30 libcrammd5.so.2
-rw-r--r--   1 root root 22624 2010-03-31 11:30 libcrammd5.so.2.0.23
-rw-r--r--   1 root root 65912 2010-03-31 11:30 libdigestmd5.a
-rw-r--r--   1 root root   999 2010-03-31 11:30 libdigestmd5.la
-rw-r--r--   1 root root 51752 2010-03-31 11:30 libdigestmd5.so
-rw-r--r--   1 root root 51752 2010-03-31 11:30 libdigestmd5.so.2
-rw-r--r--   1 root root 51752 2010-03-31 11:30 libdigestmd5.so.2.0.23
-rw-r--r--   1 root root 20590 2010-03-31 11:30 liblogin.a
-rw-r--r--   1 root root   970 2010-03-31 11:30 liblogin.la
-rw-r--r--   1 root root 18520 2010-03-31 11:30 liblogin.so
-rw-r--r--   1 root root 18520 2010-03-31 11:30 liblogin.so.2
-rw-r--r--   1 root root 18520 2010-03-31 11:30 liblogin.so.2.0.23
-rw-r--r--   1 root root 42012 2010-03-31 11:30 libntlm.a
-rw-r--r--   1 root root   964 2010-03-31 11:30 libntlm.la
-rw-r--r--   1 root root 34904 2010-03-31 11:30 libntlm.so
-rw-r--r--   1 root root 34904 2010-03-31 11:30 libntlm.so.2
-rw-r--r--   1 root root 34904 2010-03-31 11:30 libntlm.so.2.0.23
-rw-r--r--   1 root root 20454 2010-03-31 11:30 libplain.a
-rw-r--r--   1 root root   970 2010-03-31 11:30 libplain.la
-rw-r--r--   1 root root 18520 2010-03-31 11:30 libplain.so
-rw-r--r--   1 root root 18520 2010-03-31 11:30 libplain.so.2
-rw-r--r--   1 root root 18520 2010-03-31 11:30 libplain.so.2.0.23
-rw-r--r--   1 root root 30332 2010-03-31 11:30 libsasldb.a
-rw-r--r--   1 root root  1001 2010-03-31 11:30 libsasldb.la
-rw-r--r--   1 root root 22464 2010-03-31 11:30 libsasldb.so
-rw-r--r--   1 root root 22464 2010-03-31 11:30 libsasldb.so.2
-rw-r--r--   1 root root 22464 2010-03-31 11:30 libsasldb.so.2.0.23

-- listing of /etc/postfix/sasl --
total 12
drwxr-xr-x 2 root root 4096 2010-05-10 10:51 .
drwxr-xr-x 3 root root 4096 2010-05-09 18:08 ..
-rw-r--r-- 1 root root  106 2010-05-10 11:55 smtpd.conf




-- content of /etc/postfix/sasl/smtpd.conf --
pwcheck_method: saslauthd
mech_list: PLAIN LOGIN
saslauthd_path: /var/run/saslauthd
autotransition: true


-- content of /etc/postfix/sasl/smtpd.conf --
pwcheck_method: saslauthd
mech_list: PLAIN LOGIN
saslauthd_path: /var/run/saslauthd
autotransition: true



-- active services in /etc/postfix/master.cf --
# service type  private unpriv  chroot  wakeup  maxproc command + args
#               (yes)   (yes)   (yes)   (never) (100)
smtp      inet  n       -       -       -       -       smtpd
pickup    fifo  n       -       -       60      1       pickup
cleanup   unix  n       -       -       -       0       cleanup
qmgr      fifo  n       -       n       300     1       qmgr
tlsmgr    unix  -       -       -       1000?   1       tlsmgr
rewrite   unix  -       -       -       -       -       trivial-rewrite
bounce    unix  -       -       -       -       0       bounce
defer     unix  -       -       -       -       0       bounce
trace     unix  -       -       -       -       0       bounce
verify    unix  -       -       -       -       1       verify
flush     unix  n       -       -       1000?   0       flush
proxymap  unix  -       -       n       -       -       proxymap
proxywrite unix -       -       n       -       1       proxymap
smtp      unix  -       -       -       -       -       smtp
relay     unix  -       -       -       -       -       smtp
        -o smtp_fallback_relay=
showq     unix  n       -       -       -       -       showq
error     unix  -       -       -       -       -       error
retry     unix  -       -       -       -       -       error
discard   unix  -       -       -       -       -       discard
local     unix  -       n       n       -       -       local
virtual   unix  -       n       n       -       -       virtual
lmtp      unix  -       -       -       -       -       lmtp
anvil     unix  -       -       -       -       1       anvil
scache    unix  -       -       -       -       1       scache
maildrop  unix  -       n       n       -       -       pipe
  flags=DRhu user=vmail argv=/usr/bin/maildrop -d ${recipient}
uucp      unix  -       n       n       -       -       pipe
  flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
ifmail    unix  -       n       n       -       -       pipe
  flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp     unix  -       n       n       -       -       pipe
  flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient
scalemail-backend unix  -       n       n       -       2       pipe
  flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${extension}
mailman   unix  -       n       n       -       -       pipe
  flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py
  ${nexthop} ${user}

-- mechanisms on localhost --
250-AUTH PLAIN LOGIN
250-AUTH=PLAIN LOGIN

-- end of saslfinger output --

ich weiß ehrlich gesagt nicht mehr wo der fehler noch liegen soll...

danke schonmal im voraus für alle antworten.
Martin.

Roger Wilco · May 10, 2010

Tu dir einen Gefallen und installiere Dovecot IMAP. Dieser bringt, neben vielen anderen praktischen Dingen, auch eine eigene SASL-Implementierung mit, die sich ziemlich stressfrei mit Postfix benutzen lässt.

postfix sasl + imap

mrtnmueller

New Member

Roger Wilco

Active Member

We value your privacy