Saslauth TLS

Frisch12 · Apr 7, 2010

Hi Leute,

Hab ein Probelm mit meinem Saslauth im Postfix.
Und zwar seitdem ich heute meine SSL Zertifikate geändert habe kann ich keine Mails mehr senden. Hier meine Postfix Konfiguration.
http://www.fricke-hosting.de/main.cf
und Hier das HowTo mitdem ich das gemacht habe:
http://www.howtoforge.com/virtual-users-domains-postfix-courier-mysql-squirrelmail-ubuntu-9.10

Weis jemand woran das liegt???

Gruß Frisch12

Thorsten · Apr 8, 2010

Hallo!
Gibt es denn eine aussagekräftige Fehlermeldung?

mfG
Thorsten

danton · Apr 8, 2010

Postfix nach dem Austausch der Zertifikate neu gestartet? Brauchst du evtl. noch ein Zwischenzertifikat (z.B. wenn das Zertifikat von StartSSL oder CACert ist)?

Frisch12 · Apr 8, 2010

Es gab kurz nach dem austausch der Zertifikate eine Fehlermeldung, dass etwas mit den TLS Zertifikaten nicht stimmen würde, wonach ich direkt die alten Zertifikate wieder reingeschmissen hab. Seitdem bekomme ich in der mail.warn solche Einträge:

Code:

Apr  7 18:13:57 server1 last message repeated 2 times
Apr  7 18:14:57 server1 postfix/smtpd[21561]: warning: dslb-088-068-169-060.pools.arcor-ip.net[88.68.169.60]: SASL LOGIN authentication failed: authentication failure

In der mail.log erhalte ich solche einträge:

Code:

Apr  7 18:15:02 server1 postfix/smtpd[21561]: > dslb-088-068-169-060.pools.arcor-ip.net[88.68.169.60]: 220 server1.fricke-hosting.de ESMTP Postfix (Ubuntu)
Apr  7 18:15:02 server1 postfix/smtpd[21561]: xsasl_cyrus_server_create: SASL service=smtp, realm=(null)
Apr  7 18:15:02 server1 postfix/smtpd[21561]: name_mask: noanonymous
Apr  7 18:15:02 server1 postfix/smtpd[21561]: watchdog_pat: 0x2addf4fd4b70
Apr  7 18:15:02 server1 postfix/smtpd[21561]: < dslb-088-068-169-060.pools.arcor-ip.net[88.68.169.60]: EHLO DennisPC
Apr  7 18:15:02 server1 postfix/smtpd[21561]: > dslb-088-068-169-060.pools.arcor-ip.net[88.68.169.60]: 250-server1.fricke-hosting.de
Apr  7 18:15:02 server1 postfix/smtpd[21561]: > dslb-088-068-169-060.pools.arcor-ip.net[88.68.169.60]: 250-PIPELINING
Apr  7 18:15:02 server1 postfix/smtpd[21561]: > dslb-088-068-169-060.pools.arcor-ip.net[88.68.169.60]: 250-SIZE 10240000
Apr  7 18:15:02 server1 postfix/smtpd[21561]: > dslb-088-068-169-060.pools.arcor-ip.net[88.68.169.60]: 250-VRFY
Apr  7 18:15:02 server1 postfix/smtpd[21561]: > dslb-088-068-169-060.pools.arcor-ip.net[88.68.169.60]: 250-ETRN
Apr  7 18:15:02 server1 postfix/smtpd[21561]: > dslb-088-068-169-060.pools.arcor-ip.net[88.68.169.60]: 250-AUTH PLAIN LOGIN
Apr  7 18:15:02 server1 postfix/smtpd[21561]: match_list_match: dslb-088-068-169-060.pools.arcor-ip.net: no match
Apr  7 18:15:02 server1 postfix/smtpd[21561]: match_list_match: 88.68.169.60: no match
Apr  7 18:15:02 server1 postfix/smtpd[21561]: > dslb-088-068-169-060.pools.arcor-ip.net[88.68.169.60]: 250-AUTH=PLAIN LOGIN
Apr  7 18:15:02 server1 postfix/smtpd[21561]: > dslb-088-068-169-060.pools.arcor-ip.net[88.68.169.60]: 250-ENHANCEDSTATUSCODES
Apr  7 18:15:02 server1 postfix/smtpd[21561]: > dslb-088-068-169-060.pools.arcor-ip.net[88.68.169.60]: 250-8BITMIME
Apr  7 18:15:02 server1 postfix/smtpd[21561]: > dslb-088-068-169-060.pools.arcor-ip.net[88.68.169.60]: 250 DSN
Apr  7 18:15:02 server1 postfix/smtpd[21561]: watchdog_pat: 0x2addf4fd4b70
Apr  7 18:15:02 server1 postfix/smtpd[21561]: < dslb-088-068-169-060.pools.arcor-ip.net[88.68.169.60]: AUTH LOGIN
Apr  7 18:15:02 server1 postfix/smtpd[21561]: xsasl_cyrus_server_first: sasl_method LOGIN
Apr  7 18:15:02 server1 postfix/smtpd[21561]: xsasl_cyrus_server_auth_response: uncoded server challenge: Username:
Apr  7 18:15:02 server1 postfix/smtpd[21561]: > dslb-088-068-169-060.pools.arcor-ip.net[88.68.169.60]: 334 VXNlcm5hbWU6
Apr  7 18:15:02 server1 postfix/smtpd[21561]: < dslb-088-068-169-060.pools.arcor-ip.net[88.68.169.60]: d2ViMF8x
Apr  7 18:15:02 server1 postfix/smtpd[21561]: xsasl_cyrus_server_next: decoded response: web0_1
Apr  7 18:15:02 server1 postfix/smtpd[21561]: xsasl_cyrus_server_auth_response: uncoded server challenge: Password:
Apr  7 18:15:02 server1 postfix/smtpd[21561]: > dslb-088-068-169-060.pools.arcor-ip.net[88.68.169.60]: 334 UGFzc3dvcmQ6
Apr  7 18:15:02 server1 postfix/smtpd[21561]: < dslb-088-068-169-060.pools.arcor-ip.net[88.68.169.60]: NSR5M0hqMi8=
Apr  7 18:15:02 server1 postfix/smtpd[21561]: xsasl_cyrus_server_next: decoded response: 5$y3Hj2/
Apr  7 18:15:02 server1 postfix/smtpd[21561]: warning: dslb-088-068-169-060.pools.arcor-ip.net[88.68.169.60]: SASL LOGIN authentication failed: authentication failure
Apr  7 18:15:02 server1 postfix/smtpd[21561]: > dslb-088-068-169-060.pools.arcor-ip.net[88.68.169.60]: 535 5.7.8 Error: authentication failed: authentication failure
Apr  7 18:15:02 server1 postfix/smtpd[21561]: watchdog_pat: 0x2addf4fd4b70
Apr  7 18:15:02 server1 postfix/smtpd[21561]: smtp_get: EOF
Apr  7 18:15:02 server1 postfix/smtpd[21561]: match_hostname: dslb-088-068-169-060.pools.arcor-ip.net ~? 127.0.0.0/8
Apr  7 18:15:02 server1 postfix/smtpd[21561]: match_hostaddr: 88.68.169.60 ~? 127.0.0.0/8
Apr  7 18:15:02 server1 postfix/smtpd[21561]: match_list_match: dslb-088-068-169-060.pools.arcor-ip.net: no match
Apr  7 18:15:02 server1 postfix/smtpd[21561]: match_list_match: 88.68.169.60: no match
Apr  7 18:15:02 server1 postfix/smtpd[21561]: send attr request = disconnect
Apr  7 18:15:02 server1 postfix/smtpd[21561]: send attr ident = smtp:88.68.169.60
Apr  7 18:15:02 server1 postfix/smtpd[21561]: private/anvil: wanted attribute: status
Apr  7 18:15:02 server1 postfix/smtpd[21561]: input attribute name: status
Apr  7 18:15:02 server1 postfix/smtpd[21561]: input attribute value: 0
Apr  7 18:15:02 server1 postfix/smtpd[21561]: private/anvil: wanted attribute: (list terminator)
Apr  7 18:15:02 server1 postfix/smtpd[21561]: input attribute name: (end)
Apr  7 18:15:02 server1 postfix/smtpd[21561]: lost connection after AUTH from dslb-088-068-169-060.pools.arcor-ip.net[88.68.169.60]
Apr  7 18:15:02 server1 postfix/smtpd[21561]: disconnect from dslb-088-068-169-060.pools.arcor-ip.net[88.68.169.60]
Apr  7 18:15:02 server1 postfix/smtpd[21561]: master_notify: status 1
Apr  7 18:15:02 server1 postfix/smtpd[21561]: connection closed
Apr  7 18:15:02 server1 postfix/smtpd[21561]: watchdog_stop: 0x2addf4fd4b70
Apr  7 18:15:02 server1 postfix/smtpd[21561]: watchdog_start: 0x2addf4fd4b70
Apr  7 18:15:02 server1 postfix/smtpd[21561]: connection established
Apr  7 18:15:02 server1 postfix/smtpd[21561]: master_notify: status 0
Apr  7 18:15:02 server1 postfix/smtpd[21561]: name_mask: resource
Apr  7 18:15:02 server1 postfix/smtpd[21561]: name_mask: software
Apr  7 18:15:02 server1 postfix/smtpd[21561]: connect from dslb-088-068-169-060.pools.arcor-ip.net[88.68.169.60]
Apr  7 18:15:02 server1 postfix/smtpd[21561]: match_list_match: dslb-088-068-169-060.pools.arcor-ip.net: no match
Apr  7 18:15:02 server1 postfix/smtpd[21561]: match_list_match: 88.68.169.60: no match
Apr  7 18:15:02 server1 postfix/smtpd[21561]: match_list_match: dslb-088-068-169-060.pools.arcor-ip.net: no match
Apr  7 18:15:02 server1 postfix/smtpd[21561]: match_list_match: 88.68.169.60: no match
Apr  7 18:15:02 server1 postfix/smtpd[21561]: match_hostname: dslb-088-068-169-060.pools.arcor-ip.net ~? 127.0.0.0/8
Apr  7 18:15:02 server1 postfix/smtpd[21561]: match_hostaddr: 88.68.169.60 ~? 127.0.0.0/8
Apr  7 18:15:02 server1 postfix/smtpd[21561]: match_list_match: dslb-088-068-169-060.pools.arcor-ip.net: no match
Apr  7 18:15:02 server1 postfix/smtpd[21561]: match_list_match: 88.68.169.60: no match
Apr  7 18:15:02 server1 postfix/smtpd[21561]: send attr request = connect
Apr  7 18:15:02 server1 postfix/smtpd[21561]: send attr ident = smtp:88.68.169.60
Apr  7 18:15:02 server1 postfix/smtpd[21561]: private/anvil: wanted attribute: status
Apr  7 18:15:02 server1 postfix/smtpd[21561]: input attribute name: status
Apr  7 18:15:02 server1 postfix/smtpd[21561]: input attribute value: 0
Apr  7 18:15:02 server1 postfix/smtpd[21561]: private/anvil: wanted attribute: count
Apr  7 18:15:02 server1 postfix/smtpd[21561]: input attribute name: count
Apr  7 18:15:02 server1 postfix/smtpd[21561]: input attribute value: 1
Apr  7 18:15:02 server1 postfix/smtpd[21561]: private/anvil: wanted attribute: rate
Apr  7 18:15:02 server1 postfix/smtpd[21561]: input attribute name: rate
Apr  7 18:15:02 server1 postfix/smtpd[21561]: input attribute value: 7
Apr  7 18:15:02 server1 postfix/smtpd[21561]: private/anvil: wanted attribute: (list terminator)
Apr  7 18:15:02 server1 postfix/smtpd[21561]: input attribute name: (end)
Apr  7 18:15:02 server1 postfix/smtpd[21561]: > dslb-088-068-169-060.pools.arcor-ip.net[88.68.169.60]: 220 server1.fricke-hosting.de ESMTP Postfix (Ubuntu)
Apr  7 18:15:02 server1 postfix/smtpd[21561]: xsasl_cyrus_server_create: SASL service=smtp, realm=(null)
Apr  7 18:15:02 server1 postfix/smtpd[21561]: name_mask: noanonymous
Apr  7 18:15:02 server1 postfix/smtpd[21561]: watchdog_pat: 0x2addf4fd4b70
Apr  7 18:15:02 server1 postfix/smtpd[21561]: < dslb-088-068-169-060.pools.arcor-ip.net[88.68.169.60]: EHLO DennisPC
Apr  7 18:15:02 server1 postfix/smtpd[21561]: > dslb-088-068-169-060.pools.arcor-ip.net[88.68.169.60]: 250-server1.fricke-hosting.de
Apr  7 18:15:02 server1 postfix/smtpd[21561]: > dslb-088-068-169-060.pools.arcor-ip.net[88.68.169.60]: 250-PIPELINING
Apr  7 18:15:02 server1 postfix/smtpd[21561]: > dslb-088-068-169-060.pools.arcor-ip.net[88.68.169.60]: 250-SIZE 10240000
Apr  7 18:15:02 server1 postfix/smtpd[21561]: > dslb-088-068-169-060.pools.arcor-ip.net[88.68.169.60]: 250-VRFY
Apr  7 18:15:02 server1 postfix/smtpd[21561]: > dslb-088-068-169-060.pools.arcor-ip.net[88.68.169.60]: 250-ETRN
Apr  7 18:15:02 server1 postfix/smtpd[21561]: > dslb-088-068-169-060.pools.arcor-ip.net[88.68.169.60]: 250-AUTH PLAIN LOGIN
Apr  7 18:15:02 server1 postfix/smtpd[21561]: match_list_match: dslb-088-068-169-060.pools.arcor-ip.net: no match
Apr  7 18:15:02 server1 postfix/smtpd[21561]: match_list_match: 88.68.169.60: no match
Apr  7 18:15:02 server1 postfix/smtpd[21561]: > dslb-088-068-169-060.pools.arcor-ip.net[88.68.169.60]: 250-AUTH=PLAIN LOGIN
Apr  7 18:15:02 server1 postfix/smtpd[21561]: > dslb-088-068-169-060.pools.arcor-ip.net[88.68.169.60]: 250-ENHANCEDSTATUSCODES
Apr  7 18:15:02 server1 postfix/smtpd[21561]: > dslb-088-068-169-060.pools.arcor-ip.net[88.68.169.60]: 250-8BITMIME
Apr  7 18:15:02 server1 postfix/smtpd[21561]: > dslb-088-068-169-060.pools.arcor-ip.net[88.68.169.60]: 250 DSN
Apr  7 18:15:02 server1 postfix/smtpd[21561]: watchdog_pat: 0x2addf4fd4b70
Apr  7 18:15:02 server1 postfix/smtpd[21561]: < dslb-088-068-169-060.pools.arcor-ip.net[88.68.169.60]: AUTH LOGIN
Apr  7 18:15:02 server1 postfix/smtpd[21561]: xsasl_cyrus_server_first: sasl_method LOGIN
Apr  7 18:15:02 server1 postfix/smtpd[21561]: xsasl_cyrus_server_auth_response: uncoded server challenge: Username:
Apr  7 18:15:02 server1 postfix/smtpd[21561]: > dslb-088-068-169-060.pools.arcor-ip.net[88.68.169.60]: 334 ************
Apr  7 18:15:02 server1 postfix/smtpd[21561]: < dslb-088-068-169-060.pools.arcor-ip.net[88.68.169.60]: ********
Apr  7 18:15:02 server1 postfix/smtpd[21561]: xsasl_cyrus_server_next: decoded response: ******
Apr  7 18:15:02 server1 postfix/smtpd[21561]: xsasl_cyrus_server_auth_response: uncoded server challenge: Password:
Apr  7 18:15:02 server1 postfix/smtpd[21561]: > dslb-088-068-169-060.pools.arcor-ip.net[88.68.169.60]: 334 ************
Apr  7 18:15:02 server1 postfix/smtpd[21561]: < dslb-088-068-169-060.pools.arcor-ip.net[88.68.169.60]: ************
Apr  7 18:15:02 server1 postfix/smtpd[21561]: xsasl_cyrus_server_next: decoded response: ********
Apr  7 18:15:02 server1 postfix/smtpd[21561]: warning: dslb-088-068-169-060.pools.arcor-ip.net[88.68.169.60]: SASL LOGIN authentication failed: authentication failure
Apr  7 18:15:02 server1 postfix/smtpd[21561]: > dslb-088-068-169-060.pools.arcor-ip.net[88.68.169.60]: 535 5.7.8 Error: authentication failed: authentication failure
Apr  7 18:15:02 server1 postfix/smtpd[21561]: watchdog_pat: 0x2addf4fd4b70
Apr  7 18:15:02 server1 postfix/smtpd[21561]: smtp_get: EOF
Apr  7 18:15:02 server1 postfix/smtpd[21561]: match_hostname: dslb-088-068-169-060.pools.arcor-ip.net ~? 127.0.0.0/8
Apr  7 18:15:02 server1 postfix/smtpd[21561]: match_hostaddr: 88.68.169.60 ~? 127.0.0.0/8
Apr  7 18:15:02 server1 postfix/smtpd[21561]: match_list_match: dslb-088-068-169-060.pools.arcor-ip.net: no match
Apr  7 18:15:02 server1 postfix/smtpd[21561]: match_list_match: 88.68.169.60: no match
Apr  7 18:15:02 server1 postfix/smtpd[21561]: send attr request = disconnect
Apr  7 18:15:02 server1 postfix/smtpd[21561]: send attr ident = smtp:88.68.169.60
Apr  7 18:15:02 server1 postfix/smtpd[21561]: private/anvil: wanted attribute: status
Apr  7 18:15:02 server1 postfix/smtpd[21561]: input attribute name: status
Apr  7 18:15:02 server1 postfix/smtpd[21561]: input attribute value: 0
Apr  7 18:15:02 server1 postfix/smtpd[21561]: private/anvil: wanted attribute: (list terminator)
Apr  7 18:15:02 server1 postfix/smtpd[21561]: input attribute name: (end)
Apr  7 18:15:02 server1 postfix/smtpd[21561]: lost connection after AUTH from dslb-088-068-169-060.pools.arcor-ip.net[88.68.169.60]
Apr  7 18:15:02 server1 postfix/smtpd[21561]: disconnect from dslb-088-068-169-060.pools.arcor-ip.net[88.68.169.60]
Apr  7 18:15:02 server1 postfix/smtpd[21561]: master_notify: status 1
Apr  7 18:15:02 server1 postfix/smtpd[21561]: connection closed
Apr  7 18:15:02 server1 postfix/smtpd[21561]: watchdog_stop: 0x2addf4fd4b70
Apr  7 18:15:02 server1 postfix/smtpd[21561]: watchdog_start: 0x2addf4fd4b70

Die einträge in der mail.log und mail.info sind identisch.

Habe Postfix immer neu gestartet. Weis nicht ob ich eins brauche aber mit meinen Selbstgenerierten hat es vorher auch schon super funktioniert.

Gruß Frisch12

danton · Apr 8, 2010

Mit Cyrus kenne ich mich nicht aus, das sieht mir aber nicht nach einem Problem mit deinen SSL-Zertifikaten im Postfix aus. Hast du auch das SASL man neu gestartet und danach dann Postfix?

Frisch12 · Apr 8, 2010

Ja habe ich gemacht.

Gruß Frisch12

Frisch12 · Apr 8, 2010

Okay jetzt habe ich kurzer hand meinen ganzen server neu installiert jetzt bekomme ich die Fehlermeldung:

warning: SASL authentication failure: cannot connect to saslauthd server: No such file or directory

hab aber alles schon dreifach gecheckt. Weis jemand weiter???
Gruß Frisch12

Thorsten · Apr 9, 2010

Hallo!
saslauthd läuft auch? Ansonsten ist http://www.huschi.net/search.html?search=saslauth&submit=Go&action=search eine gute Anlaufstelle zur Problemanalyse.

mfG
Thorsten

Frisch12 · Apr 9, 2010

Ja Saslauthd läuft. Danke für den link.

Gruß Frisch12

Saslauth TLS

Frisch12

New Member

Thorsten

SSF Facilitymanagement

danton

Debian User

Frisch12

New Member

danton

Debian User

Frisch12

New Member

Frisch12

New Member

Thorsten

SSF Facilitymanagement

Frisch12

New Member