SASL PLAIN authentication failed - Kann wer helfen?

EPMS · Apr 25, 2008

Hallo Zusammen,
ich habe einen Suse 10.3 64Bit Server und möchte da einen Mailserver aufsetzen. Dafür habe ich postfix, courier saslauth installiert. Die User möchte ich nur über eine MySQL DB verwalten.
Über einen E-Mail Client kann ich mich in den Useraccount mittels POP3 und IMAP einloggen und E-Mails empfangen.
Leider kann ich keine Mails verschicken. Weder in die Welt noch an einen weiteren Account auf meinem Server.
In der /var/log/mail steht folgendes

Code:

Apr 25 19:19:20 openSUSE-103-64-LAMP postfix/smtpd[17208]: connect from e177251213.adsl.alicedsl.de[85.177.251.213]
Apr 25 19:19:22 openSUSE-103-64-LAMP postfix/smtpd[17208]: warning: SASL authentication failure: Password verification failed
Apr 25 19:19:22 openSUSE-103-64-LAMP postfix/smtpd[17208]: warning: e177251213.adsl.alicedsl.de[85.177.251.213]: SASL PLAIN authentication failed: authentication failure
Apr 25 19:19:23 openSUSE-103-64-LAMP postfix/smtpd[17208]: warning: e177251213.adsl.alicedsl.de[85.177.251.213]: SASL LOGIN authentication failed: authentication failure
Apr 25 19:19:35 openSUSE-103-64-LAMP postfix/smtpd[17208]: disconnect from e177251213.adsl.alicedsl.de[85.177.251.213]

saslfinger -s gibt folgendes aus

Code:

saslfinger - postfix Cyrus sasl configuration Fri Apr 25 19:27:03 CEST 2008
version: 1.0.2
mode: server-side SMTP AUTH

-- basics --
Postfix: 2.4.5
System:
Welcome to openSUSE 10.3 (X86-64) - Kernel \r (\l).

-- smtpd is linked to --
        libsasl2.so.2 => /usr/local/lib/libsasl2.so.2 (0x00002af811e48000)

-- active SMTP AUTH and TLS parameters for smtpd --
broken_sasl_auth_clients = yes
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain =
smtpd_sasl_security_options = noanonymous
smtpd_tls_CAfile = /etc/postfix/ssl/cacert.pem
smtpd_tls_auth_only = no
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s


-- listing of /usr/lib64/sasl2 --
total 308
drwxr-xr-x  2 root root  4096 Apr 25 18:24 .
drwxr-xr-x 31 root root 28672 Apr 25 18:24 ..
-rwxr-xr-x  1 root root 19008 Sep 21  2007 libanonymous.so
-rwxr-xr-x  1 root root 19008 Sep 21  2007 libanonymous.so.2
-rwxr-xr-x  1 root root 19008 Sep 21  2007 libanonymous.so.2.0.22
-rwxr-xr-x  1 root root 19032 Sep 21  2007 liblogin.so
-rwxr-xr-x  1 root root 19032 Sep 21  2007 liblogin.so.2
-rwxr-xr-x  1 root root 19032 Sep 21  2007 liblogin.so.2.0.22
-rwxr-xr-x  1 root root 23072 Sep 21  2007 libsasldb.so
-rwxr-xr-x  1 root root 23072 Sep 21  2007 libsasldb.so.2
-rwxr-xr-x  1 root root 23072 Sep 21  2007 libsasldb.so.2.0.22
-rwxr-xr-x  1 root root 27304 Sep 22  2007 libsql.so
-rwxr-xr-x  1 root root 27304 Sep 22  2007 libsql.so.2
-rwxr-xr-x  1 root root 27304 Sep 22  2007 libsql.so.2.0.22

-- listing of /usr/lib/sasl2 --
total 188
drwxr-xr-x  2 root root  4096 Apr 22 16:27 .
drwxr-xr-x 32 root root 12288 Apr 25 09:46 ..
-rwxr-xr-x  1 root root 14088 Sep 22  2007 libanonymous.so
-rwxr-xr-x  1 root root 14088 Sep 22  2007 libanonymous.so.2
-rwxr-xr-x  1 root root 14088 Sep 22  2007 libanonymous.so.2.0.22
-rwxr-xr-x  1 root root 14084 Sep 22  2007 liblogin.so
-rwxr-xr-x  1 root root 14084 Sep 22  2007 liblogin.so.2
-rwxr-xr-x  1 root root 14084 Sep 22  2007 liblogin.so.2.0.22
-rwxr-xr-x  1 root root 22228 Sep 22  2007 libsasldb.so
-rwxr-xr-x  1 root root 22228 Sep 22  2007 libsasldb.so.2
-rwxr-xr-x  1 root root 22228 Sep 22  2007 libsasldb.so.2.0.22
drwxr-xr-x  2 root root  4096 Apr 25 19:03 sasl2

-- listing of /usr/local/lib/sasl2 --
total 1364
drwxr-xr-x 2 root root      4096 Apr 25 19:03 .
drwxr-xr-x 3 root root      4096 Apr 22 16:25 ..
-rwxr-xr-x 1 root root       715 Apr 22 16:25 libanonymous.la
-rwxr-xr-x 1 root root     70289 Apr 22 16:25 libanonymous.so
-rwxr-xr-x 1 root root     70289 Apr 22 16:25 libanonymous.so.2
-rwxr-xr-x 1 root root     70289 Apr 22 16:25 libanonymous.so.2.0.22
-rwxr-xr-x 1 root root       699 Apr 22 16:25 liblogin.la
-rwxr-xr-x 1 root root     71443 Apr 22 16:25 liblogin.so
-rwxr-xr-x 1 root root     71443 Apr 22 16:25 liblogin.so.2
-rwxr-xr-x 1 root root     71443 Apr 22 16:25 liblogin.so.2.0.22
-rwxr-xr-x 1 root root       699 Apr 22 16:25 libplain.la
-rwxr-xr-x 1 root root     71377 Apr 22 16:25 libplain.so
-rwxr-xr-x 1 root root     71377 Apr 22 16:25 libplain.so.2
-rwxr-xr-x 1 root root     71377 Apr 22 16:25 libplain.so.2.0.22
-rwxr-xr-x 1 root root       734 Apr 22 16:25 libsasldb.la
-rwxr-xr-x 1 root root    122695 Apr 22 16:25 libsasldb.so
-rwxr-xr-x 1 root root    122695 Apr 22 16:25 libsasldb.so.2
-rwxr-xr-x 1 root root    122695 Apr 22 16:25 libsasldb.so.2.0.22
-rwxr-xr-x 1 root root       714 Apr 22 16:25 libsql.la
-rwxr-xr-x 1 root root     89884 Apr 22 16:25 libsql.so
-rwxr-xr-x 1 root root     89884 Apr 22 16:25 libsql.so.2
-rwxr-xr-x 1 root root     89884 Apr 22 16:25 libsql.so.2.0.22
-rw-r----- 1 root postfix    260 Apr 25 18:36 smtpd.conf

-- listing of /etc/sasl2 --
total 20
drwxr-xr-x  2 root root    4096 Apr 25 18:36 .
drwxr-xr-x 68 root root    4096 Apr 25 18:24 ..
-rw-r-----  1 root postfix  260 Apr 25 18:36 smtpd.conf
-rw-------  1 root root      49 Dec 19 13:30 smtpd.conf.old
-rw-------  1 root root      49 Apr 24 16:18 smtpd.conf.rpmsave




-- content of /usr/local/lib/sasl2/smtpd.conf --
pwcheck_method: auxprop
auxprop_plugin: sql
mech_list: plain login cram-md5 digest-md5
sql_engine: mysql
sql_hostnames: localhost
sql_user: --- replaced ---
sql_passwd: --- replaced ---
sql_database: postfix
sql_select: select password from mailbox where email='%u@%r'

-- content of /etc/sasl2/smtpd.conf --
pwcheck_method: auxprop
auxprop_plugin: sql
mech_list: plain login cram-md5 digest-md5
sql_engine: mysql
sql_hostnames: localhost
sql_user: --- replaced ---
sql_passwd: --- replaced ---
sql_database: postfix
sql_select: select password from mailbox where email='%u@%r'


-- active services in /etc/postfix/master.cf --
# service type  private unpriv  chroot  wakeup  maxproc command + args
#               (yes)   (yes)   (yes)   (never) (100)
smtp      inet  n       -       n       -       -       smtpd
pickup    fifo  n       -       n       60      1       pickup
cleanup   unix  n       -       n       -       0       cleanup
qmgr      fifo  n       -       n       300     1       qmgr
rewrite   unix  -       -       n       -       -       trivial-rewrite
bounce    unix  -       -       n       -       0       bounce
defer     unix  -       -       n       -       0       bounce
trace     unix  -       -       n       -       0       bounce
verify    unix  -       -       n       -       1       verify
flush     unix  n       -       n       1000?   0       flush
proxymap  unix  -       -       n       -       -       proxymap
smtp      unix  -       -       n       -       -       smtp
relay     unix  -       -       n       -       -       smtp
        -o fallback_relay=
showq     unix  n       -       n       -       -       showq
error     unix  -       -       n       -       -       error
discard   unix  -       -       n       -       -       discard
local     unix  -       n       n       -       -       local
virtual   unix  -       n       n       -       -       virtual
lmtp      unix  -       -       n       -       -       lmtp
anvil     unix  -       -       n       -       1       anvil
scache    unix  -       -       n       -       1       scache
maildrop  unix  -       n       n       -       -       pipe
  flags=DRhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient}
cyrus     unix  -       n       n       -       -       pipe
  user=cyrus argv=/usr/lib/cyrus/bin/deliver -e -r ${sender} -m ${extension} ${user}
uucp      unix  -       n       n       -       -       pipe
  flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
ifmail    unix  -       n       n       -       -       pipe
  flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp     unix  -       n       n       -       -       pipe
  flags=Fq. user=foo argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient
procmail  unix  -       n       n       -       -       pipe
  flags=R user=nobody argv=/usr/bin/procmail -t -m /etc/procmailrc ${sender} ${recipient}
retry     unix  -       -       n       -       -       error

-- mechanisms on localhost --
250-AUTH LOGIN PLAIN
250-AUTH=LOGIN PLAIN
-- end of saslfinger output --

Da postfix im chroot läuft, habe ich folgendes ausgeführt

mkdir /var/spool/postfix/etc/pam.d
cp -p /etc/pam.d/smtp /var/spool/postfix/etc/pam.d/
mkdir -p /var/spool/postfix/var/run
cd /var/run
mv saslauthd/ /var/spool/postfix/var/run
ln -s /var/spool/postfix/var/run/saslauthd/ saslauthd
#Da es vereinzelt Probleme gab noch sicherheitshalber die Rechte setzten:
chown -R postfix /var/spool/postfix/var/run/saslauthd

Ich habe schon in google gesucht und finde nichts mehr, was ich noch probieren könnte. Kann mir jemand helfen? Soll ich noch weitere configs posten?

Im voraus vielen Dank.

Roger Wilco · Apr 25, 2008

Aktiviere das Query Log deines mysqld und sieh nach, welche Abfragen von deinem Postfix kommen.

EPMS · Apr 25, 2008

Das habe ich schon gemacht. Die Query habe ich dann über PHPMyAdmin ausprobiert und es liefert das richtige Ergebniss. Also scheint das richtig zu sein.

SASL PLAIN authentication failed - Kann wer helfen?

EPMS

Registered User

Roger Wilco

Active Member

EPMS

Registered User

We value your privacy