Questions tagged [sasl]

Simple Authentication and Security Layer (SASL) is a framework for authentication and data security in Internet protocols.

Filter by
Sorted by
Tagged with
0 votes
1 answer
39 views

Postfix / Dovecot SASL authentication only working on primary domain

I have had a postfix server running flawlessly for three months now. Users log in to the server in their respective mail clients by connecting to mail.mydomain.com (with SSL) and there's never been ...
user avatar
0 votes
1 answer
78 views

Can PAM be used with Postfix and Dovecot SASL?

I have set up Postfix to use Dovecot SASL with PAM and Unix users, and Dovecot LDA (LMTP) for local mailbox storage. After some testing, turns out incoming mail gets declined with the reason: Error: ...
user avatar
0 votes
0 answers
36 views

Proxy authentication in cyrus with SASL and kerberos

I am trying to enable proxy authentication in cyrus + SASL, i.e authenticating as the admin user cyrus but with the access rights of any other user, e.g. peter (as described here). I am trying with ...
user avatar
  • 101
1 vote
1 answer
27 views

How does SASL know to read config from /etc/postfix/sasl?

I've set up Postfix to authenticate with SASL on a Ubuntu based system. I've done this by following along with some recipes, but mostly readying a lot of the docs. One bit that works, but which I don'...
user avatar
  • 448
0 votes
0 answers
215 views

SASL PLAIN authentication failed: bad protocol / cancel

I try to configure postfix relay in kubernetes on Alpine using saslauthd. Dockerfile: FROM alpine:3.15 RUN apk update && \ apk add --no-cache postfix \ libsasl \ cyrus-sasl \ ...
user avatar
  • 1
0 votes
1 answer
112 views

Postfix: reject_sender_login_mismatch not working

I want to use the following configuration for Postfix: smtpd_relay_restrictions = permit_mynetworks reject_sender_login_mismatch permit_sasl_authenticated defer_unauth_destination, ...
user avatar
  • 239
2 votes
1 answer
180 views

Postfix sasl_password file and MX resolution

Thanks to @AlexD idea, we'll implement the following transport table in order to simulate a IP failover using the DNS MX resolution (postfix 3.3) Relay for 2 domains, exemple[12].com exemple1.com ...
user avatar
  • 5,378
0 votes
2 answers
161 views

How does Sendmail figure out where SASL is listening?

I'm trying to get SMTP-AUTH working on a Mint Linux 20.2 machine, and I'm having trouble getting authentication to happen. I have installed Cyrus sasl2, and apparently configured it properly - ...
user avatar
  • 353
1 vote
0 answers
322 views

Postfix unable to authenticate with Microsoft Exchange (No credentials were supplied)

I want to setup postfix on my nagios server to relay emails to our Microsoft Exchange server and I am running into issues with authenticating with Microsoft Exchange. Specifically I am getting this ...
user avatar
  • 285
0 votes
1 answer
486 views

postfix/sasl/pam (mysql) auth error

I've followed tutorial on http://flurdy.com/docs/postfix/ to set up an email server, and most of it works (after switching from Courier to Dovecot). Just not sending email through SMTP. Sending with ...
user avatar
  • 335
1 vote
0 answers
149 views

Postfix Can't Receive Internet Email - warning: SASL: Connect to /var/spool/postfix/private/auth failed

Using CentOS 8, I've setup dovecot and postfix and tested that: I can sign in as an authenticated user Read email (IMAP) Send email to the same/different account on the server Send email outbound, to ...
user avatar
1 vote
1 answer
115 views

Trouble enabling mail_crypt in dovecot / SASL authentication failed

dovecot --version 2.3.4.1 (f79e8e7e4) Ok, I tried to enable mail-crypt but it's being weird. I'm using https://doc.dovecot.org/configuration_manual/mail_crypt_plugin/#ec-key. I ran: cd $HOME openssl ...
user avatar
2 votes
1 answer
1k views

Getting SENDMAIL (as a client) to use AUTH LOGIN

I am trying to use SENDMAIL (v8.15) on a Pi in my network to just forward mails to my SendGrid account. This is needed because my legacy webcams on my network cannot use the very long password ...
user avatar
1 vote
2 answers
459 views

Dovecot not authenticating clients in mail server with postfix cyrus(for sasl authentication) and dovecot in centos 7

As i have been building a mailserver i have another question in process that i haven't been able to find in google so i am expecting i will get a answer here so The update is i have created a ...
user avatar
0 votes
1 answer
133 views

mysql not authenticating with cyrus for postfix athentication

So i have been building a mail server and i have setted up postfix and a database now what i want is that cyrus should authenticate my users of mail server from a database i have setted up a database ...
user avatar
1 vote
3 answers
1k views

Postfix + sasldb issue (solved as of Mar 2021)

PS(SOLVED: Solution for Alpine Linux as of Mar 2021, the fix in cyrus-sasl 2.1.27-r12 is in edge branch. 3.13 only has cyrus-sasl 2.1.27-r10. PS: I know there are similar posts but they are very ...
user avatar
  • 3,557
0 votes
1 answer
254 views

Postfix: How to malware & spam scan outgoing SMTP SASL auth users?

Although I have found two answers to this, I can't work out how to actually implement them, and at least one of them doesn't actually answer the question. So if anyone has any experience to share I'd ...
user avatar
0 votes
1 answer
91 views

Postfix SASL authentication via Dovecot - Can I use the SASL login name in my postfix sql queries?

I have a mailserver with postfix, dovecot and mysql running on Debian buster. Everythings works fine so far, but I would like to setup a scenario where the login name for SASL auth is different from ...
user avatar
  • 36
0 votes
0 answers
63 views

Demanding SASL authentication on port 25 rejects all of my incomming email

I am using this chunk of code inside /etc/postfix/master.cf to force people to securely "subimt" email through port 465 which uses protocol SMTPS. SMTPS supports mandatory TLS which I use to ...
user avatar
  • 317
0 votes
2 answers
226 views

Postfix fails on incoming SMTP from remote MTAs for local delivery

I am transferring MTA to newer servers running Ubuntu 20.04 LTS. SMTPS is working well thus permitting clients to send mails after authentication. However, when sending mails from remote MTAs for ...
user avatar
3 votes
1 answer
1k views

configure saslauthd with PAM

I'm trying to configure saslauthd with PAM. I created a user test with password test using useradd and passwd and I checked that I can login with su - test. [arch@vps-5220ce87 ~]$ systemctl status ...
user avatar
  • 151
0 votes
1 answer
49 views

Using "postfix" user for "dovecot"

I set the Postfix so that my mailboxes (maildir format) for my virtual users are set like this: ┌───┐ │ # │ root > myserver > ~ └─┬─┘ └─> ls -l /var/mail/ total 4 drwxr-sr-x 5 postfix ...
user avatar
  • 317
0 votes
1 answer
101 views

OpenLDAP cn=config database access blocked

I use OpenLDAP 2.4.54 with Alpine. Here is my ldap configuration $ sudo slapcat -n0 dn: olcDatabase={-1}frontend,cn=config objectClass: olcDatabaseConfig objectClass: olcFrontendConfig olcDatabase: {-...
user avatar
  • 145
0 votes
0 answers
9k views

Why do I get "Server not found in Kerberos database" using testsaslauthd?

I'm trying to setup Kerberos auth over SASL using OpenLDAP. As I understand it, I need a host keytab in /etc/krb5.keytab from the KDC I'm using and then {SASL}user@realm in the given user's LDAP ...
user avatar
  • 3,434
0 votes
0 answers
401 views

Postfix & SASL authentication failure

I want to enable SASL authentication under Debian Buster. For this I follow these instructions: https://wiki.debian.org/PostfixAndSASL This all works fine, but after each restart Debian "forgets&...
user avatar
0 votes
0 answers
89 views

Postfix SMTP Auth failed

im running postfix but i cant get smtp to work imap works without any issues with ssl now when i want to send an email i get authentication failed here is the log Aug 21 04:59:55 server imapd: ...
user avatar
  • 1
0 votes
1 answer
343 views

Postfix + SASL SQLite gives auxprop error on CentOS 7

I am receiving an unknown password verifier(s) auxprop error when trying to use SQLite for SASL authentication in Postfix on CentOS 7. It seems that the SQLite SQL engine is not found. Contents of /...
user avatar
  • 1,375
0 votes
2 answers
306 views

Can't determine the principal used to LDAP syncrepl GSSAPI

I've configured two openldap fully functional in HA (syncrepl mode provider - slave). After testing that simple bind syncrepl works flawlessly, I'm trying to deploy from scratch using only GSSAPI to ...
user avatar
  • 25
1 vote
1 answer
2k views

Authenticating Apache HTTPServer 2.4.x with mod_auth_gssapi using Microsoft Active directory

I'm looking for below configurations for GSSAPI authentication with Apache 2.4 for Active directory: 1. How to configure Apache HTTPServer 2.4.x with mod_auth_gssapi using Microsoft Active directory? ...
user avatar
0 votes
0 answers
336 views

Getting postfix to log to a file on docker

I have created a docker image based on Ubuntu 20.04 with postfix and dovecot. I also installed syslog-ng in hope to solve my problem, but it didn't work. Thing is, I want to use fail2ban to prevent ...
user avatar
6 votes
2 answers
14k views

Postfix error, SASL authentication failed; cannot authenticate to server, no mechanism available

I would like to set up postfix relay to my website hosting SMTP server, from my home server. It's Centos 7, set up using dynamic IP and dynamic DNS. Because of limited space in my hosting site, I ...
user avatar
5 votes
1 answer
928 views

Postfix warning: SASL: Connect to /var/spool/postfix/private/auth failed: No such file or directory

I have searched, and failed to find an answer and I am out of ideas. I just do not know enough about postfix and dovecot to parse the configs or understand what may be causing this error. warning: ...
user avatar
0 votes
1 answer
870 views

Dovecot: Username character disallowed by auth_username_chars: 0x0a

I'm trying to set up a postfix+dovecot server to use GNU Mailman for creating a mailing list server, however I'm currently stuck at setting up SASL authentication using dovecot. It seems to add a ...
user avatar
0 votes
1 answer
826 views

How to setup SASL Proxy Authorization with an OpenLDAP server on Debian

For Kerberos Authentication together with SASL/GSSAPI Authorization on client devices I need Proxy Authorization on an OpenLDAP server running on Raspberry Pi with Debian/Raspbian Buster. I tried to ...
user avatar
  • 396
1 vote
1 answer
1k views

Can't telnet to Postfix SMTP server after adding smtpd_sasl_auth_enable option

I have the Postfix SMTP server installed on my CentOS 7 machine on port 25. To test that it's working, I connect to it using telnet, like this: # telnet localhost 25 and the result is: Trying ::1....
user avatar
  • 1,440
1 vote
0 answers
19 views

SASL not blocking non authenticated user sending email to itself

My email server is working fine except that still allows anyone to send email from a my@email.pt to my@email.pt. I eanbled in /etc/postfix/main.cf smtpd_sasl_type = dovecot smtpd_sasl_path = private/...
user avatar
  • 159
0 votes
1 answer
650 views

Postfix How to send mail in behalf of an alias

I'm using postfix as a mail relay in a very simple setup, mostly with aliases, forwarding mails to GMail. My main goal with this is to minimize the need for mailboxes on my server. Let's assume I ...
user avatar
  • 101
0 votes
1 answer
3k views

Unable to connect to port 993 for IMAP on Ubuntu server with Postfix/Dovecot/MySQL

Ubuntu 16.04.5 Apache2 MySQL Postfix w/MySQL Dovecot SASL2 UFW I am trying to install a working mail server and client on this machine. I followed this tutorial which allows authentication through ...
user avatar
  • 101
0 votes
1 answer
520 views

Postfix / Thunderbird / Cyrus SASL2: Username Or Password Invalid

I'm quite certain that I've entered my password correctly; that Thunderbird regards it as incorrect is I expect due to a Postfix or Cyrus SASL misconfiguration. I am perpetually confused about eMail ...
user avatar
0 votes
0 answers
517 views

Pass through authentication with LDAP and Kerberos

I have a SLES 12 server and installed and configured MIT KDC and openLDAP. I want to use pass through authentication in openLDAP so that the password is only stored in the KDC and I don't have to ...
user avatar
  • 123
1 vote
1 answer
1k views

Using SASL from CentOS 7 Host to Authenticate to Active Directory

Trying to configure SASL on a CentOS 7 box to talk to an Active Directory installation. I've tried a couple different configurations that generate different errors. The latest: No worthy mechs found ...
user avatar
  • 131
0 votes
1 answer
346 views

Kopano LDAP unable to login when username has special character

Ok, so I currently have a Kopano server working with Openldap to manage logins. The problem I currently have is that if I decide to define a user's login as his email, I can't send a message via ...
user avatar
1 vote
1 answer
248 views

Mail Server allow sending spam to hosted mailboxes

I got an issue on both of my servers (Postfix + Dovecot and one on Zimbra) My issue is some robots send spam without login to our hosted mailboxes using the same FROM/RCPT. It seems Google got the ...
user avatar
  • 197
0 votes
1 answer
2k views

What is wrong with my SASL?

So the story goes: I have a score of CentOS 6.9 virtual machines, migrated to Microsoft's Azure cloud by VHD upload. Once deployed I found out that Azure doesn't allow to send out email directly from ...
user avatar
  • 130
0 votes
1 answer
426 views

MySQL Authentication against OpenLDAP Failure

I'm trying to set up OpenLDAP authentication on a MySQL Commercial Server (5.7.21) I've followed all the steps described on MySQL web https://dev.mysql.com/doc/refman/5.7/en/ldap-pluggable-...
user avatar
  • 322
1 vote
1 answer
3k views

fail2ban cannot set iptables rules

I have only a thin knowledge of both iptables and fail2ban, but my mail server has a lot of incoming connections that I want to get rid of. I have this config block in /etc/fail2ban/jail.conf [...
user avatar
1 vote
0 answers
848 views

Postfix: How to use reject_sender_login_mismatch when using MySQL virtual users?

I want to force senders to use an envelope sender address that's identical to the SASL login username. From the Postfix SASL README I see I should list, in the smtpd_sender_login_maps option, a hash ...
user avatar
  • 670
3 votes
0 answers
389 views

Postfix: Enforce sender address for some users only

I am looking for an option to enforce an envelope sender address in postfix for selected users, only. E.g., I want to permit user1@example.com to send mails as user1@example.com, only, while all other ...
user avatar
  • 61
0 votes
1 answer
553 views

Ubuntu Server - Postfix Issue

I have an issue receiving an email into my server here is what shows in the mail.log file: Nov 1 10:50:30 hoskin postfix/smtpd[20806]: warning: SASL: Connect to /var/spool/postfix/private/auth ...
user avatar
2 votes
1 answer
2k views

How to generate entries for different mechanisms with saslpasswd2?

I'm struggling to create the satisfactory set of records in sasldb2.db. If I use the regular saslpasswd2 -c user I get exactly one record, according to sasldblistusers2: user@my.example.com: ...
user avatar
  • 2,242

1
2 3 4 5