how cyrus-imapd works?dovecot-imap issue

rhinolt · 05-29-2019, 02:10 AM

ive setup a server with centos7+postfix+cyrus+roundcube+postfixadmin+mariadb

postfixadmin could add virtual mailbox in mariadb,and could send mail through telnet:25

Code:

telnet aaaa.bbbb.net 25
helo aaaa.bbbb.net
auth login
YmXXXXXXXX==
YmXXXX
mail from:bbb@aaaa.bbbb.net
rcpt to:iii@aaaa.bbbb.net
data

Subject:SMTP Auth Test 
 Hello, here is a test mail.
local
2
.
.334 UGFzc3dvcmQ6
235 2.7.0 Authentication successful
250 2.1.0 Ok
250 2.1.5 Ok
354 End data with <CR><LF>.<CR><LF>

250 2.0.0 Ok: queued as E5DA761D6B21

BUT i got failure with imap,both roundcube\telnet\thunderbird

Code:

telnet aaaa.bbbb.net 143
A login iii@aaaa.bbbb.net aaabbbccc A NO Login failed: authentication failure

also
/var/log/maillog:

Code:

May 29 15:11:45 localhost imap[32621]: badlogin: bbb.lan [10.10.1.1] PLAIN [SASL(-13): authentication failure: Password verification failed]

/var/log/message:

Code:

May 29 15:11:45 localhost saslauthd[2428]: do_auth         : auth failure: [user=aaa] [service=imap] [realm=aaaa.bbbb.net] [mech=pam] [reason=PAM auth error]

/var/log/secure:

Code:

May 29 15:11:43 localhost saslauthd[2428]: pam_unix(imap:auth): check pass; user unknown
May 29 15:11:43 localhost saslauthd[2428]: pam_unix(imap:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=

now i think its the cyrus-imap module issue,could someone help me pls?

scasey · 05-29-2019, 10:27 AM

Your telnet example is not sending mail, it's receiving it.

Code:

250 2.0.0 Ok: queued as E5DA761D6B21

is a message from your postfix server that it's accepted the mail you created when attached to port 25.

The other messages are pretty clear: The MUA clients (thunderbird, etc.) are not providing the proper authentication to connect to your MTA (postfix) to send mail.

It appears that you've configured your MTA to require authentication on port 25. That would be unusual. Port 25 is the port used to receive email and doesn't typically require authentication.

When you connect with IMAP, on port 143 usually, then authentication is required to both send and view received email.
When a Mail User Agent (MUA) like thunderbird connects to send mail, typically on port 587, authentication is also required.

I don't know postfix, but netstat -tnlp will show you if anything is listening on ports 143 or 587, and what program that is.

Code:

tcp        0      0 the.server.ip.address:143        0.0.0.0:*               LISTEN      15433/dovecot       
tcp        0      0 the.server.ip.address:25         0.0.0.0:*               LISTEN      2253/tcpserver      
tcp        0      0 the.server.ip.address:587        0.0.0.0:*               LISTEN      2265/tcpserver

I'm using qmail, so the listeners for ports 25 and 587 are tcpserver, which is a wrapper for qmail-smtpd. Yours will probably say postfix.

rhinolt · 05-30-2019, 07:56 AM

thanks for reply

but i dont remember set authentication on port 25,how to check that?

and also,problem could be on postfix or dovecot?or even saslauthd?