Questions tagged [sasl]
Simple Authentication and Security Layer (SASL) is a framework for authentication and data security in Internet protocols.
242
questions
0
votes
0answers
22 views
How to permit SMTP authentication but don't permit system login?
I have set a postfix server that uses System user as email account.
Initially, I set to have:
usermod -L user1
But this prevents SMTP authentication in gmail. So I have this one instead
usermod -U ...
0
votes
1answer
13 views
postfix/sasl/pam (mysql) auth error
I've followed tutorial on http://flurdy.com/docs/postfix/ to set up an email server, and most of it works (after switching from Courier to Dovecot). Just not sending email through SMTP. Sending with ...
1
vote
0answers
35 views
Postfix Can't Receive Internet Email - warning: SASL: Connect to /var/spool/postfix/private/auth failed
Using CentOS 8, I've setup dovecot and postfix and tested that:
I can sign in as an authenticated user
Read email (IMAP)
Send email to the same/different account on the server
Send email outbound, to ...
1
vote
1answer
39 views
Trouble enabling mail_crypt in dovecot / SASL authentication failed
dovecot --version
2.3.4.1 (f79e8e7e4)
Ok, I tried to enable mail-crypt but it's being weird. I'm using https://doc.dovecot.org/configuration_manual/mail_crypt_plugin/#ec-key.
I ran:
cd $HOME
openssl ...
2
votes
1answer
132 views
Getting SENDMAIL (as a client) to use AUTH LOGIN
I am trying to use SENDMAIL (v8.15) on a Pi in my network to just forward mails to my SendGrid account. This is needed because my legacy webcams on my network cannot use the very long password ...
1
vote
2answers
65 views
Dovecot not authenticating clients in mail server with postfix cyrus(for sasl authentication) and dovecot in centos 7
As i have been building a mailserver i have another question in process that i haven't been able to find in google so i am expecting i will get a answer here
so The update is i have created a ...
0
votes
1answer
57 views
mysql not authenticating with cyrus for postfix athentication
So i have been building a mail server and i have setted up postfix and a database now what i want is that cyrus should authenticate my users of mail server from a database i have setted up a database ...
1
vote
3answers
351 views
Postfix + sasldb issue (solved as of Mar 2021)
PS(SOLVED: Solution for Alpine Linux as of Mar 2021, the fix in cyrus-sasl 2.1.27-r12 is in edge branch. 3.13 only has cyrus-sasl 2.1.27-r10.
PS: I know there are similar posts but they are very ...
0
votes
1answer
68 views
Postfix: How to malware & spam scan outgoing SMTP SASL auth users?
Although I have found two answers to this, I can't work out how to actually implement them, and at least one of them doesn't actually answer the question. So if anyone has any experience to share I'd ...
0
votes
1answer
43 views
Postfix SASL authentication via Dovecot - Can I use the SASL login name in my postfix sql queries?
I have a mailserver with postfix, dovecot and mysql running on Debian buster.
Everythings works fine so far, but I would like to setup a scenario where the login name for SASL auth is different from ...
0
votes
0answers
44 views
Demanding SASL authentication on port 25 rejects all of my incomming email
I am using this chunk of code inside /etc/postfix/master.cf to force people to securely "subimt" email through port 465 which uses protocol SMTPS. SMTPS supports mandatory TLS which I use to ...
0
votes
1answer
46 views
Postfix fails on incoming SMTP from remote MTAs for local delivery
I am transferring MTA to newer servers running Ubuntu 20.04 LTS. SMTPS is working well thus permitting clients to send mails after authentication. However, when sending mails from remote MTAs for ...
2
votes
1answer
302 views
configure saslauthd with PAM
I'm trying to configure saslauthd with PAM. I created a user test with password test using useradd and passwd and I checked that I can login with su - test.
[arch@vps-5220ce87 ~]$ systemctl status ...
0
votes
1answer
31 views
Using “postfix” user for “dovecot”
I set the Postfix so that my mailboxes (maildir format) for my virtual users are set like this:
┌───┐
│ # │ root > myserver > ~
└─┬─┘
└─> ls -l /var/mail/
total 4
drwxr-sr-x 5 postfix ...
0
votes
1answer
22 views
OpenLDAP cn=config database access blocked
I use OpenLDAP 2.4.54 with Alpine. Here is my ldap configuration
$ sudo slapcat -n0
dn: olcDatabase={-1}frontend,cn=config
objectClass: olcDatabaseConfig
objectClass: olcFrontendConfig
olcDatabase: {-...
0
votes
0answers
4k views
Why do I get “Server not found in Kerberos database” using testsaslauthd?
I'm trying to setup Kerberos auth over SASL using OpenLDAP. As I understand it, I need a host keytab in /etc/krb5.keytab from the KDC I'm using and then {SASL}user@realm in the given user's LDAP ...
0
votes
0answers
168 views
Postfix & SASL authentication failure
I want to enable SASL authentication under Debian Buster. For this I follow these instructions: https://wiki.debian.org/PostfixAndSASL
This all works fine, but after each restart Debian "forgets&...
0
votes
0answers
45 views
Postfix SMTP Auth failed
im running postfix but i cant get smtp to work
imap works without any issues with ssl
now when i want to send an email i get authentication failed
here is the log
Aug 21 04:59:55 server imapd: ...
0
votes
1answer
193 views
Postfix + SASL SQLite gives auxprop error on CentOS 7
I am receiving an unknown password verifier(s) auxprop error when trying to use SQLite for SASL authentication in Postfix on CentOS 7. It seems that the SQLite SQL engine is not found.
Contents of /...
0
votes
2answers
183 views
Can't determine the principal used to LDAP syncrepl GSSAPI
I've configured two openldap fully functional in HA (syncrepl mode provider - slave).
After testing that simple bind syncrepl works flawlessly, I'm trying to deploy from scratch using only GSSAPI to ...
1
vote
0answers
344 views
Authenticating Apache HTTPServer 2.4.x with mod_auth_gssapi using Microsoft Active directory
I'm looking for below configurations for GSSAPI authentication with Apache 2.4 for Active directory:
1. How to configure Apache HTTPServer 2.4.x with mod_auth_gssapi using Microsoft Active directory? ...
0
votes
0answers
195 views
Getting postfix to log to a file on docker
I have created a docker image based on Ubuntu 20.04 with postfix and dovecot. I also installed syslog-ng in hope to solve my problem, but it didn't work.
Thing is, I want to use fail2ban to prevent ...
3
votes
2answers
6k views
Postfix error, SASL authentication failed; cannot authenticate to server, no mechanism available
I would like to set up postfix relay to my website hosting SMTP server, from my home server. It's Centos 7, set up using dynamic IP and dynamic DNS. Because of limited space in my hosting site, I ...
2
votes
1answer
300 views
Postfix warning: SASL: Connect to /var/spool/postfix/private/auth failed: No such file or directory
I have searched, and failed to find an answer and I am out of ideas. I just do not know enough about postfix and dovecot to parse the configs or understand what may be causing this error.
warning: ...
0
votes
1answer
531 views
Dovecot: Username character disallowed by auth_username_chars: 0x0a
I'm trying to set up a postfix+dovecot server to use GNU Mailman for creating a mailing list server, however I'm currently stuck at setting up SASL authentication using dovecot. It seems to add a ...
0
votes
1answer
395 views
How to setup SASL Proxy Authorization with an OpenLDAP server on Debian
For Kerberos Authentication together with SASL/GSSAPI Authorization on client devices I need Proxy Authorization on an OpenLDAP server running on Raspberry Pi with Debian/Raspbian Buster. I tried to ...
0
votes
1answer
674 views
Can't telnet to Postfix SMTP server after adding smtpd_sasl_auth_enable option
I have the Postfix SMTP server installed on my CentOS 7 machine on port 25.
To test that it's working, I connect to it using telnet, like this:
# telnet localhost 25
and the result is:
Trying ::1....
1
vote
0answers
16 views
SASL not blocking non authenticated user sending email to itself
My email server is working fine except that still allows anyone to send email from a my@email.pt to my@email.pt.
I eanbled in /etc/postfix/main.cf
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/...
0
votes
1answer
510 views
Postfix How to send mail in behalf of an alias
I'm using postfix as a mail relay in a very simple setup, mostly with aliases, forwarding mails to GMail.
My main goal with this is to minimize the need for mailboxes on my server.
Let's assume I ...
0
votes
1answer
2k views
Unable to connect to port 993 for IMAP on Ubuntu server with Postfix/Dovecot/MySQL
Ubuntu 16.04.5
Apache2
MySQL
Postfix w/MySQL
Dovecot
SASL2
UFW
I am trying to install a working mail server and client on this machine. I followed this tutorial which allows authentication through ...
0
votes
1answer
414 views
Postfix / Thunderbird / Cyrus SASL2: Username Or Password Invalid
I'm quite certain that I've entered my password correctly; that Thunderbird regards it as incorrect is I expect due to a Postfix or Cyrus SASL misconfiguration.
I am perpetually confused about eMail ...
0
votes
0answers
393 views
Pass through authentication with LDAP and Kerberos
I have a SLES 12 server and installed and configured MIT KDC and openLDAP. I want to use pass through authentication in openLDAP so that the password is only stored in the KDC and I don't have to ...
1
vote
1answer
762 views
Using SASL from CentOS 7 Host to Authenticate to Active Directory
Trying to configure SASL on a CentOS 7 box to talk to an Active Directory installation. I've tried a couple different configurations that generate different errors. The latest:
No worthy mechs found
...
0
votes
1answer
253 views
Kopano LDAP unable to login when username has special character
Ok, so I currently have a Kopano server working with Openldap to manage logins. The problem I currently have is that if I decide to define a user's login as his email, I can't send a message via ...
1
vote
1answer
222 views
Mail Server allow sending spam to hosted mailboxes
I got an issue on both of my servers (Postfix + Dovecot and one on Zimbra)
My issue is some robots send spam without login to our hosted mailboxes using the same FROM/RCPT.
It seems Google got the ...
0
votes
1answer
2k views
What is wrong with my SASL?
So the story goes: I have a score of CentOS 6.9 virtual machines, migrated to Microsoft's Azure cloud by VHD upload. Once deployed I found out that Azure doesn't allow to send out email directly from ...
0
votes
1answer
378 views
MySQL Authentication against OpenLDAP Failure
I'm trying to set up OpenLDAP authentication on a MySQL Commercial Server (5.7.21)
I've followed all the steps described on MySQL web https://dev.mysql.com/doc/refman/5.7/en/ldap-pluggable-...
1
vote
1answer
3k views
fail2ban cannot set iptables rules
I have only a thin knowledge of both iptables and fail2ban, but my mail server has a lot of incoming connections that I want to get rid of.
I have this config block in /etc/fail2ban/jail.conf
[...
1
vote
0answers
747 views
Postfix: How to use reject_sender_login_mismatch when using MySQL virtual users?
I want to force senders to use an envelope sender address that's identical to the SASL login username. From the Postfix SASL README I see I should list, in the smtpd_sender_login_maps option, a hash ...
3
votes
0answers
310 views
Postfix: Enforce sender address for some users only
I am looking for an option to enforce an envelope sender address in postfix for selected users, only. E.g., I want to permit user1@example.com to send mails as user1@example.com, only, while all other ...
0
votes
1answer
436 views
Ubuntu Server - Postfix Issue
I have an issue receiving an email into my server here is what shows in the mail.log file:
Nov 1 10:50:30 hoskin postfix/smtpd[20806]: warning: SASL: Connect to /var/spool/postfix/private/auth ...
2
votes
1answer
1k views
How to generate entries for different mechanisms with saslpasswd2?
I'm struggling to create the satisfactory set of records in sasldb2.db. If I use the regular
saslpasswd2 -c user
I get exactly one record, according to sasldblistusers2:
user@my.example.com: ...
0
votes
1answer
387 views
Postfix and dovecot. TLS not available
I've been trying to setup a send only SMTP server with postfix and dovecot, on Ubuntu 16.04. The problem I'm having is that when trying to send an email I get the message back.
4.7.0 TLS not ...
0
votes
1answer
1k views
Zentyal 5: SASL credentials could not be processed
I want to ask you for help and point me how i can fix my mistake without reinstalling the whole system.
So...
There was Zentyal 4, and after upgrading to Zentyal 5 I got some errors.
One of them ...
1
vote
1answer
1k views
Need help creating LDAP Server that syncs users from 3 separate AD Controllers
Hopefully I can get some help here as I have really been beating my head against the ol' keyboard over here.
So, here's the situation.
We recently migrated end users from an onsite Exchange server ...
3
votes
2answers
3k views
Dovecot SASL auth not working
Like said, Dovecot auth fails when i try to connect with Thunderbird. Incoming and outgoing mail works fine.
I used e.g. this tutorial (and many more) as a reference: https://serverfault.com/...
0
votes
1answer
770 views
How to setup TLS for postfix? Should I use SASL with dovecot?
I need to setup TLS/SSL for postfix, so I can send mail from my iphone via my smtp mailserver (or else i will get relay access denied messages).
From what I understand this is one way:
https://www....
2
votes
1answer
2k views
postfix not working correctly after system upgrade (no SASL authentication mechanism)
I had a working postfix/dovecot configuration running on a Ubuntu Server machine 14.04 LTS. Then I made a upgrade to 16.04.2 using do-release-upgrade. Everything seemed to work besides my mail service....
9
votes
3answers
6k views
Add GSSAPI to OpenLdap in supportedSASLMechanisms
I'm looking how to add the GSSAPI support into my OpenLDAP ?
Current setup
MIT Kerberos V + OpenLDAP
Kerberos bind to openldap
Able to issue kerberos tickets to my users (with kinit exampluser)
Able ...
1
vote
1answer
793 views
Postfix + Dovecot login fail only in Imap
sorry in advance because Im sure the problem is stupid, but after two days trying different configurations from Google and Serverfault it still not working. Im Newbie in Postfix/Dovecot
After ...
