LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 03-20-2022, 11:32 PM   #1
lucmove
Senior Member
 
Registered: Aug 2005
Location: Brazil
Distribution: Debian
Posts: 1,433

Rep: Reputation: 110Reputation: 110
Broken SMTP authentication in Postfix/Debian


I am once again trying to install and configure Postfix. I am following a book, but the book isn't very helpful in the chapter about SASL. So I followed this page:

http://www.proulx.com/~bob/doc/HOWTO-Postfix-SASL.html

I made some progress with it. Postfix now responds on port 587 and I finally got "250-AUTH DIGEST-MD5 CRAM-MD5 NTLM" in the telnet conversation.

I configured claws mail with my login and password as provided by that page. But authentication failed. Here is claws' log:

Code:
[01:09:27] ESMTP> STARTTLS
[01:09:27] ESMTP< 220 2.0.0 Ready to start TLS
[01:09:27] ESMTP> EHLO luc.linux
[01:09:28] ESMTP< 250-server.domain.net
[01:09:28] ESMTP< 250-PIPELINING
[01:09:28] ESMTP< 250-SIZE 10240000
[01:09:28] ESMTP< 250-VRFY
[01:09:28] ESMTP< 250-ETRN
[01:09:28] ESMTP< 250-AUTH DIGEST-MD5 CRAM-MD5 NTLM
[01:09:28] ESMTP< 250-ENHANCEDSTATUSCODES
[01:09:28] ESMTP< 250-8BITMIME
[01:09:28] ESMTP< 250-DSN
[01:09:28] ESMTP< 250-SMTPUTF8
[01:09:28] ESMTP< 250 CHUNKING
[01:09:28] ESMTP> AUTH CRAM-MD5
[01:09:28] ESMTP< 334 PBUxMaYwSjI5Sy4zNxY4Njf3QHNlcnXlci80a1GiLm7ldD4=
[01:09:28] ESMTP< [Decoded: <516789247.3675428@server.domain.net>]
[01:09:28] ESMTP> [Encoded: mylogin f36a89cb51ae87a1gkale27ee9af1cfd]
[01:09:28] ESMTP> dVhlZmVja3luZ27haWztb3apbvRmMcllOPemQwU6YSO3NuUnO8JmQGUsNFLhE7FxMQCdXA==
[01:09:28] ESMTP< 535 5.7.8 Error: authentication failed: authentication failure
** error occurred on authentication
*** Authentication failed:
535 5.7.8 Error: authentication failed: authentication failure

(Note: the hashes are made up, I didn't paste the actual ones.)

Known problems:

1) I was expecting to use DIGEST-MD5, but that option is greyed out in claws, so I selected CRAM-MD5. Is that a problem?

2) There is a box that contains this:
Add etc/sasldb2 to FILES in /etc/init.d/postfix:

I didn't do that part because I couldn't figure out where that addition would go. If I understand it correctly, I am supposed to delete the first line and introduce the second, but I couldn't find the first line. Well, the page clearly predates Debian 5/Lenny (it says so right there) and I am running Debian 9/Stretch. That is, the page is outdated. Should I still take that step, and how exactly?

3) The following box, also containing diff editing notation, I didn't follow that one either because the lines to be changed do not exist.

I don't want to authenticate with pop3 or dovecot. I want smtp authentication to be entirely independent. That page says it is possible, so I just want to finish this configuration. Can someone here please help?

TIA
 
Old 03-21-2022, 01:27 AM   #2
descendant_command
Senior Member
 
Registered: Mar 2012
Posts: 1,876

Rep: Reputation: 643Reputation: 643Reputation: 643Reputation: 643Reputation: 643Reputation: 643
Maybe try the Debian wiki:
https://wiki.debian.org/PostfixAndSASL

You really should use dovecot though.
 
Old 03-21-2022, 09:15 AM   #3
lucmove
Senior Member
 
Registered: Aug 2005
Location: Brazil
Distribution: Debian
Posts: 1,433

Original Poster
Rep: Reputation: 110Reputation: 110
Quote:
Originally Posted by descendant_command View Post
Maybe try the Debian wiki:
https://wiki.debian.org/PostfixAndSASL

You really should use dovecot though.
I read that, it's an obvious source. But it's for plain login. I don't want plain login.
 
Old 03-21-2022, 02:25 PM   #4
descendant_command
Senior Member
 
Registered: Mar 2012
Posts: 1,876

Rep: Reputation: 643Reputation: 643Reputation: 643Reputation: 643Reputation: 643Reputation: 643
Quote:
Originally Posted by lucmove View Post
I read that, it's an obvious source. But it's for plain login. I don't want plain login.
So what DO you want?
And what mechanism are you using?
Where is your authentication data?
I'm assuming you've also read the obvious postfix documentation, which is quite comprehensive.
 
Old 03-21-2022, 03:16 PM   #5
lucmove
Senior Member
 
Registered: Aug 2005
Location: Brazil
Distribution: Debian
Posts: 1,433

Original Poster
Rep: Reputation: 110Reputation: 110
Quote:
Originally Posted by descendant_command View Post
So what DO you want?
And what mechanism are you using?
Where is your authentication data?
I'm assuming you've also read the obvious postfix documentation, which is quite comprehensive.
I said what I want in the original post.

I don't want to authenticate with pop3 or dovecot. I want smtp authentication to be entirely independent.

My authentication data can be seen in the MUA log I also pasted in the original post.

I've been reading Postfix documentation, an O'Reilly book and two "tutorial" pages. If it's supposed to be so easy, how come I had no replies?

Nobody really knows how to do these things. They are made too complicated so all recipes end up being broken.
 
Old 03-22-2022, 12:24 AM   #6
descendant_command
Senior Member
 
Registered: Mar 2012
Posts: 1,876

Rep: Reputation: 643Reputation: 643Reputation: 643Reputation: 643Reputation: 643Reputation: 643
Quote:
Originally Posted by lucmove View Post
I said what I want in the original post.

I don't want to authenticate with pop3 or dovecot. I want smtp authentication to be entirely independent.
Why?
Independent of what?
Quote:
My authentication data can be seen in the MUA log I also pasted in the original post.
No, that is just the client's session log.
Again, what authentication method are you trying to use?
saslauthd limits you to PLAIN or LOGIN so presumably you are using sql, sasldb or ldapdb - which is it?
Where is you user/pass data stored?
Quote:
I've been reading Postfix documentation, an O'Reilly book and two "tutorial" pages. If it's supposed to be so easy, how come I had no replies?
You clearly DID get a reply, no?
Quote:
Nobody really knows how to do these things. They are made too complicated so all recipes end up being broken.
Mail servers are complex systems, but a basic understanding of the concepts and a bit of reading comprehension is all you really need to be successful.

Last edited by descendant_command; 03-22-2022 at 12:30 AM.
 
  


Reply

Tags
postfix, smtp



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
SMTP newbie queries: #< #5.3.5 SMTP; 553 5.3.5 system config error> #SMTP# LYC Linux - Newbie 0 12-04-2014 12:45 AM
Debian postfix+courier MySql smtp authentication grabie2 Linux - Server 6 07-20-2012 02:02 PM
Postfix SMTP Authentication lasantha Linux - Server 0 10-26-2007 01:06 PM
postfix installation on suse with smtp authentication murattas Linux - Software 0 05-03-2005 11:16 AM
Postfix smtp authentication help dt23 Mandriva 1 09-28-2004 08:32 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 03:32 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration