Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [sasl]

Simple Authentication and Security Layer (SASL) is a framework for authentication and data security in Internet protocols.

0
votes
1answer
20 views

Postfix How to send mail in behalf of an alias

I'm using postfix as a mail relay in a very simple setup, mostly with aliases, forwarding mails to GMail. My main goal with this is to minimize the need for mailboxes on my server. Let's assume I ...
0
votes
0answers
4 views

Sending mail unauthenticated with dovecot sasl activated

Here is a basic example of a telnet example to my server: [arch@myhost ~]$ telnet mydomain.com 25 Trying 192.168.1.25... Connected to mydomain.com. Escape character is '^]'. 220 mydomain.mydomain.com ...
0
votes
1answer
46 views

Unable to connect to port 993 for IMAP on Ubuntu server with Postfix/Dovecot/MySQL

Ubuntu 16.04.5 Apache2 MySQL Postfix w/MySQL Dovecot SASL2 UFW I am trying to install a working mail server and client on this machine. I followed this tutorial which allows authentication through ...
0
votes
1answer
21 views

Postfix / Thunderbird / Cyrus SASL2: Username Or Password Invalid

I'm quite certain that I've entered my password correctly; that Thunderbird regards it as incorrect is I expect due to a Postfix or Cyrus SASL misconfiguration. I am perpetually confused about eMail ...
0
votes
0answers
132 views

Multiple “SASL PLAIN authentication failed” errors

The mail server is working, but I have some misgivings if there is something wrong with the configuration. I could not reproduce the errors. Apparently the server itself tries to connect and fails (...
0
votes
0answers
118 views

Pass through authentication with LDAP and Kerberos

I have a SLES 12 server and installed and configured MIT KDC and openLDAP. I want to use pass through authentication in openLDAP so that the password is only stored in the KDC and I don't have to ...
1
vote
1answer
139 views

Using SASL from CentOS 7 Host to Authenticate to Active Directory

Trying to configure SASL on a CentOS 7 box to talk to an Active Directory installation. I've tried a couple different configurations that generate different errors. The latest: No worthy mechs found ...
0
votes
0answers
149 views

/var/spool/postfix/var/run/saslauthd does not exists and can't be created

I have configured postfix with s-nail by following this tutorial: https://www.digitalocean.com/community/tutorials/how-to-install-and-configure-postfix-on-ubuntu-16-04 Everything went smoothly and I'...
0
votes
0answers
159 views

Fetchmail / Postfix SASL Authentication Failed: No mechanism available to relayhost

I have read through the similar questions, but I think that they do not address the problem I have, which is with postfix acting as a client to a SMTP server. My system uses fetchmail to retrieve ...
0
votes
0answers
86 views

Kopano LDAP unable to login when username has special character

Ok, so I currently have a Kopano server working with Openldap to manage logins. The problem I currently have is that if I decide to define a user's login as his email, I can't send a message via ...
1
vote
1answer
152 views

Mail Server allow sending spam to hosted mailboxes

I got an issue on both of my servers (Postfix + Dovecot and one on Zimbra) My issue is some robots send spam without login to our hosted mailboxes using the same FROM/RCPT. It seems Google got the ...
0
votes
0answers
645 views

What is wrong with my SASL?

So the story goes: I have a score of CentOS 6.9 virtual machines, migrated to Microsoft's Azure cloud by VHD upload. Once deployed I found out that Azure doesn't allow to send out email directly from ...
0
votes
1answer
155 views

MySQL Authentication against OpenLDAP Failure

I'm trying to set up OpenLDAP authentication on a MySQL Commercial Server (5.7.21) I've followed all the steps described on MySQL web https://dev.mysql.com/doc/refman/5.7/en/ldap-pluggable-...
0
votes
1answer
896 views

fail2ban cannot set iptables rules

I have only a thin knowledge of both iptables and fail2ban, but my mail server has a lot of incoming connections that I want to get rid of. I have this config block in /etc/fail2ban/jail.conf [...
1
vote
0answers
436 views

Postfix: How to use reject_sender_login_mismatch when using MySQL virtual users?

I want to force senders to use an envelope sender address that's identical to the SASL login username. From the Postfix SASL README I see I should list, in the smtpd_sender_login_maps option, a hash ...
3
votes
0answers
148 views

Postfix: Enforce sender address for some users only

I am looking for an option to enforce an envelope sender address in postfix for selected users, only. E.g., I want to permit user1@example.com to send mails as user1@example.com, only, while all other ...
0
votes
1answer
212 views

Ubuntu Server - Postfix Issue

I have an issue receiving an email into my server here is what shows in the mail.log file: Nov 1 10:50:30 hoskin postfix/smtpd[20806]: warning: SASL: Connect to /var/spool/postfix/private/auth ...
2
votes
1answer
300 views

How to generate entries for different mechanisms with saslpasswd2?

I'm struggling to create the satisfactory set of records in sasldb2.db. If I use the regular saslpasswd2 -c user I get exactly one record, according to sasldblistusers2: user@my.example.com: ...
0
votes
1answer
145 views

Postfix and dovecot. TLS not available

I've been trying to setup a send only SMTP server with postfix and dovecot, on Ubuntu 16.04. The problem I'm having is that when trying to send an email I get the message back. 4.7.0 TLS not ...
0
votes
1answer
413 views

Zentyal 5: SASL credentials could not be processed

I want to ask you for help and point me how i can fix my mistake without reinstalling the whole system. So... There was Zentyal 4, and after upgrading to Zentyal 5 I got some errors. One of them ...
1
vote
1answer
1k views

Need help creating LDAP Server that syncs users from 3 separate AD Controllers

Hopefully I can get some help here as I have really been beating my head against the ol' keyboard over here. So, here's the situation. We recently migrated end users from an onsite Exchange server ...
3
votes
2answers
1k views

Dovecot SASL auth not working

Like said, Dovecot auth fails when i try to connect with Thunderbird. Incoming and outgoing mail works fine. I used e.g. this tutorial (and many more) as a reference: https://serverfault.com/...
0
votes
1answer
490 views

How to setup TLS for postfix? Should I use SASL with dovecot?

I need to setup TLS/SSL for postfix, so I can send mail from my iphone via my smtp mailserver (or else i will get relay access denied messages). From what I understand this is one way: https://www....
2
votes
1answer
620 views

postfix not working correctly after system upgrade (no SASL authentication mechanism)

I had a working postfix/dovecot configuration running on a Ubuntu Server machine 14.04 LTS. Then I made a upgrade to 16.04.2 using do-release-upgrade. Everything seemed to work besides my mail service....
6
votes
3answers
2k views

Add GSSAPI to OpenLdap in supportedSASLMechanisms

I'm looking how to add the GSSAPI support into my OpenLDAP ? Current setup MIT Kerberos V + OpenLDAP Kerberos bind to openldap Able to issue kerberos tickets to my users (with kinit exampluser) Able ...
1
vote
1answer
379 views

Postfix + Dovecot login fail only in Imap

sorry in advance because Im sure the problem is stupid, but after two days trying different configurations from Google and Serverfault it still not working. Im Newbie in Postfix/Dovecot After ...
1
vote
1answer
396 views

Postfix SMTP sender access restrictions

The issue: Couple of days ago we faced spam attack from external IP that was using a real external domain to send around 7k email to different external domains like yahoo, hotmail, gmail ....etc, ...
3
votes
1answer
7k views

warning: /usr/lib/postfix/smtpd: bad command startup — throttling

today i set up a mailserver with a german tutorial from here: Now i'm done and need help with my issues. Sry for bad english - i hope my informations help u to help me ^^ mail.log: Nov 18 16:30:00 ...
0
votes
1answer
484 views

SMTP-SASL authentification doesn't work

I created another thread previously, where I reported about the problem that I wasn't able to get saslauthd starting up at all: SMTP authentification: saslauthd won't start I now re-installed a ...
3
votes
1answer
173 views

How to check if Postfix was compiled with support for Dovecot SASL?

The Dovecot instructions state: Since version 2.3, Postfix supports SMTP AUTH through Dovecot SASL as introduced in the Dovecot 1.0 series. If using Postfix obtained from a binary (such as a ....
2
votes
0answers
486 views

SMTP authentification: saslauthd won't start

I've set up a mailserver, which is working fine, but now I wanted to add SMTP authentification using SASL. However, trying to start saslauthd (my system is Ubuntu 16.04) doesn't work, but I don't get ...
1
vote
1answer
662 views

Postfix SASL allow SMTP Authentication and relay messages

I am trying to set my SMTP server so it allows only SMTP authenticated users to send emails but the actual sending is done via Mailjet. I am running on Ubuntu 14.04 LTS and Postfix version is ...
1
vote
0answers
415 views

ldap_bind: Invalid credentials (49) when configuring Pass-Trough authentication with SASL in OpenLDAP with AD

I'm using ubuntu 14.04 and OpenLDAP-2.4.40. I have synchronized Active Directory users in OpenLDAP using LSC utility. Now I want to do the authentications on the OpenLDAP part and will use the AD ...
4
votes
1answer
2k views

SASL auth to LDAP behind HAPROXY with name mismatches

My kerberos domain in MYEXAMPLE.ORG, but servers are located in the dmz-int.example.org dns zone. LDAP server is b1.dmz-int.example.org; its keytab include: udo ktutil -k /etc/krb5.keytab list /etc/...
1
vote
1answer
166 views

Why does svnserve still ask for password via svn+ssh when sasl is used?

I have svnserve configured to run from inetd and svnserve.conf set to use sasl for authentication. This is so I could allow access to some repositories by users who do not have system-wide accounts ...
0
votes
1answer
1k views

Problems with 'adcli join' command: “invalid parameter supplied” and “unable to find a callback”

I am seeing problems when using adcli to join a RHEL7 machine to a Windows domain: couldn't connect to local.net domain: couldn't authenticate to active directory: SASL( -7): invalid parameter ...
1
vote
1answer
777 views

SASL: How to delete all mech entries from a user?

I have a problem with my SASL database. sasldblistusers2 shows following entries: myuser@example.com: cmusaslsecretCRAM-MD5 myuser@example.com: cmusaslsecretPLAIN myuser@example.com: userPassword I ...
1
vote
1answer
169 views

Postfix multi instance with separate SASLDB for each instance

I configured postfix with multiple instances (postmulti), each instance has your own IP address and it´s working great, but I need each instance uses it´s own sasldb2 file to authenticate users. The ...
1
vote
1answer
161 views

How to ensure encrypted OpenLDAP sessions using SASL/GSSAPI

I am running OpenLDAP 2.4 on a Debian jessie system. Clients typically connect to this LDAP server over port 389 using SASL/GSSAPI with our Kerberos infrastructure. When a client connects using SASL/...
1
vote
1answer
1k views

Posfix: SASL authentication failed (unbuntu/office 365)

I'm unable to get postfix to work with our office 365 mail. here's the main.cf file: smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu) biff = no append_dot_mydomain = no readme_directory = no ...
0
votes
1answer
94 views

How to restrict SMTP login to its own address in sasldb2? [duplicate]

I'm using sasldb2 (without saslauthd) for SMTP authentication with Postfix. To create a new user, I run saslpasswd2 -u example.com mail which creates a login mail@example.com. However, using these ...
2
votes
0answers
2k views

Dovecot/Postfix mail server SASL: Connect to private/auth failed

Trying to get this mail sever up has eaten up a good chunk of 2 days and I've made some headway but this specific error has persisted throughout. I'm using a Debian server with Postfix + Dovecot + ...
2
votes
1answer
782 views

Postfix + SASL using wrong query to authenticate

I recently set up postfix + dovecot on a aws ec2 instance following this guide: http://flurdy.com/docs/postfix/#config-secure-auth Currently I'm stuck with SASL. The SQL query doesn't seem to be ...
3
votes
1answer
272 views

PAM vs /etc/shadow in Dovecot SASL configuration - Security differences?

I set up a server with Postfix SMTP auth through Dovecot SASL. However, it was not possible to get the PAM authentification working as standard out of the box. So more by chance, I changed it to ...
0
votes
1answer
622 views

Postfix: Unverified Client host rejected / SASL Logged In

Running Ubuntu, iRedMail, Mysql, Amavis, Spamassassin, Dovecot, Postfix Recently had some unauthorized usage of a postfix server internally from a malware deprecated staging server. I worked on ...
2
votes
1answer
539 views

Bad search filter - postfix, OpenLDAP, Saslauthd

I am trying to setup a mail server on Debian Jessie and have come across a problem that's doing my head in. When trying to access OpenLDAP through saslauthd via the command testsaslauthd -u user1 -p ...
2
votes
1answer
165 views

NO [ALERT] Unexpected response from remote authentication server

is what I see when I run testsaslauthd inside an strace socket(PF_LOCAL, SOCK_STREAM, 0) = 3 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/saslauthd/mux"}, 110) = 0 writev(3, [{"\0\34a....
0
votes
1answer
78 views

ubuntu - Postfix mail sent from server not logged in mail.log or phpmail.log

I am having server which hosts 70-80 websites and also using relay server for smtp using postfix using mysql database for domain and email boxes. I have also activated the phpmail.log for sendmail. ...
1
vote
1answer
160 views

saslauthd running in segfault after some time

I'm using postfix with courier and mysql for authentication. Lately I have some segmentation faults, which causes sasl deamon to crash. It seems, the have something to do with dictionary attacks on ...
0
votes
1answer
136 views

sasl_username does not appear in my maillog logfile

I've got some servers that do not log the user when processing mail. Packages involved are postfix 2:2.11.5-centos5.15072015 and cyrus-sasl-2.1.22-7.el5_8.1.x86_64 There is no sasl_username on the ...