Questions tagged [sasl]
Simple Authentication and Security Layer (SASL) is a framework for authentication and data security in Internet protocols.
0
votes
1answer
20 views
Postfix How to send mail in behalf of an alias
I'm using postfix as a mail relay in a very simple setup, mostly with aliases, forwarding mails to GMail.
My main goal with this is to minimize the need for mailboxes on my server.
Let's assume I ...
0
votes
0answers
4 views
Sending mail unauthenticated with dovecot sasl activated
Here is a basic example of a telnet example to my server:
[arch@myhost ~]$ telnet mydomain.com 25
Trying 192.168.1.25...
Connected to mydomain.com.
Escape character is '^]'.
220 mydomain.mydomain.com ...
0
votes
1answer
46 views
Unable to connect to port 993 for IMAP on Ubuntu server with Postfix/Dovecot/MySQL
Ubuntu 16.04.5
Apache2
MySQL
Postfix w/MySQL
Dovecot
SASL2
UFW
I am trying to install a working mail server and client on this machine. I followed this tutorial which allows authentication through ...
0
votes
1answer
21 views
Postfix / Thunderbird / Cyrus SASL2: Username Or Password Invalid
I'm quite certain that I've entered my password correctly; that Thunderbird regards it as incorrect is I expect due to a Postfix or Cyrus SASL misconfiguration.
I am perpetually confused about eMail ...
0
votes
0answers
132 views
Multiple “SASL PLAIN authentication failed” errors
The mail server is working, but I have some misgivings if there is something wrong with the configuration.
I could not reproduce the errors. Apparently the server itself tries to connect and fails (...
0
votes
0answers
118 views
Pass through authentication with LDAP and Kerberos
I have a SLES 12 server and installed and configured MIT KDC and openLDAP. I want to use pass through authentication in openLDAP so that the password is only stored in the KDC and I don't have to ...
1
vote
1answer
139 views
Using SASL from CentOS 7 Host to Authenticate to Active Directory
Trying to configure SASL on a CentOS 7 box to talk to an Active Directory installation. I've tried a couple different configurations that generate different errors. The latest:
No worthy mechs found
...
0
votes
0answers
149 views
/var/spool/postfix/var/run/saslauthd does not exists and can't be created
I have configured postfix with s-nail by following this tutorial:
https://www.digitalocean.com/community/tutorials/how-to-install-and-configure-postfix-on-ubuntu-16-04
Everything went smoothly and I'...
0
votes
0answers
159 views
Fetchmail / Postfix SASL Authentication Failed: No mechanism available to relayhost
I have read through the similar questions, but I think that they do not address the problem I have, which is with postfix acting as a client to a SMTP server.
My system uses fetchmail to retrieve ...
0
votes
0answers
86 views
Kopano LDAP unable to login when username has special character
Ok, so I currently have a Kopano server working with Openldap to manage logins. The problem I currently have is that if I decide to define a user's login as his email, I can't send a message via ...
1
vote
1answer
152 views
Mail Server allow sending spam to hosted mailboxes
I got an issue on both of my servers (Postfix + Dovecot and one on Zimbra)
My issue is some robots send spam without login to our hosted mailboxes using the same FROM/RCPT.
It seems Google got the ...
0
votes
0answers
645 views
What is wrong with my SASL?
So the story goes: I have a score of CentOS 6.9 virtual machines, migrated to Microsoft's Azure cloud by VHD upload. Once deployed I found out that Azure doesn't allow to send out email directly from ...
0
votes
1answer
155 views
MySQL Authentication against OpenLDAP Failure
I'm trying to set up OpenLDAP authentication on a MySQL Commercial Server (5.7.21)
I've followed all the steps described on MySQL web https://dev.mysql.com/doc/refman/5.7/en/ldap-pluggable-...
0
votes
1answer
896 views
fail2ban cannot set iptables rules
I have only a thin knowledge of both iptables and fail2ban, but my mail server has a lot of incoming connections that I want to get rid of.
I have this config block in /etc/fail2ban/jail.conf
[...
1
vote
0answers
436 views
Postfix: How to use reject_sender_login_mismatch when using MySQL virtual users?
I want to force senders to use an envelope sender address that's identical to the SASL login username. From the Postfix SASL README I see I should list, in the smtpd_sender_login_maps option, a hash ...
3
votes
0answers
148 views
Postfix: Enforce sender address for some users only
I am looking for an option to enforce an envelope sender address in postfix for selected users, only. E.g., I want to permit user1@example.com to send mails as user1@example.com, only, while all other ...
0
votes
1answer
212 views
Ubuntu Server - Postfix Issue
I have an issue receiving an email into my server here is what shows in the mail.log file:
Nov 1 10:50:30 hoskin postfix/smtpd[20806]: warning: SASL: Connect to /var/spool/postfix/private/auth ...
2
votes
1answer
300 views
How to generate entries for different mechanisms with saslpasswd2?
I'm struggling to create the satisfactory set of records in sasldb2.db. If I use the regular
saslpasswd2 -c user
I get exactly one record, according to sasldblistusers2:
user@my.example.com: ...
0
votes
1answer
145 views
Postfix and dovecot. TLS not available
I've been trying to setup a send only SMTP server with postfix and dovecot, on Ubuntu 16.04. The problem I'm having is that when trying to send an email I get the message back.
4.7.0 TLS not ...
0
votes
1answer
413 views
Zentyal 5: SASL credentials could not be processed
I want to ask you for help and point me how i can fix my mistake without reinstalling the whole system.
So...
There was Zentyal 4, and after upgrading to Zentyal 5 I got some errors.
One of them ...
1
vote
1answer
1k views
Need help creating LDAP Server that syncs users from 3 separate AD Controllers
Hopefully I can get some help here as I have really been beating my head against the ol' keyboard over here.
So, here's the situation.
We recently migrated end users from an onsite Exchange server ...
3
votes
2answers
1k views
Dovecot SASL auth not working
Like said, Dovecot auth fails when i try to connect with Thunderbird. Incoming and outgoing mail works fine.
I used e.g. this tutorial (and many more) as a reference: https://serverfault.com/...
0
votes
1answer
490 views
How to setup TLS for postfix? Should I use SASL with dovecot?
I need to setup TLS/SSL for postfix, so I can send mail from my iphone via my smtp mailserver (or else i will get relay access denied messages).
From what I understand this is one way:
https://www....
2
votes
1answer
620 views
postfix not working correctly after system upgrade (no SASL authentication mechanism)
I had a working postfix/dovecot configuration running on a Ubuntu Server machine 14.04 LTS. Then I made a upgrade to 16.04.2 using do-release-upgrade. Everything seemed to work besides my mail service....
6
votes
3answers
2k views
Add GSSAPI to OpenLdap in supportedSASLMechanisms
I'm looking how to add the GSSAPI support into my OpenLDAP ?
Current setup
MIT Kerberos V + OpenLDAP
Kerberos bind to openldap
Able to issue kerberos tickets to my users (with kinit exampluser)
Able ...
1
vote
1answer
379 views
Postfix + Dovecot login fail only in Imap
sorry in advance because Im sure the problem is stupid, but after two days trying different configurations from Google and Serverfault it still not working. Im Newbie in Postfix/Dovecot
After ...
1
vote
1answer
396 views
Postfix SMTP sender access restrictions
The issue:
Couple of days ago we faced spam attack from external IP that was using a real external domain to send around 7k email to different external domains like yahoo, hotmail, gmail ....etc, ...
3
votes
1answer
7k views
warning: /usr/lib/postfix/smtpd: bad command startup — throttling
today i set up a mailserver with a german tutorial from here:
Now i'm done and need help with my issues. Sry for bad english - i hope my informations help u to help me ^^
mail.log:
Nov 18 16:30:00 ...
0
votes
1answer
484 views
SMTP-SASL authentification doesn't work
I created another thread previously, where I reported about the problem that I wasn't able to get saslauthd starting up at all:
SMTP authentification: saslauthd won't start
I now re-installed a ...
3
votes
1answer
173 views
How to check if Postfix was compiled with support for Dovecot SASL?
The Dovecot instructions state:
Since version 2.3, Postfix supports SMTP AUTH through Dovecot SASL as
introduced in the Dovecot 1.0 series. If using Postfix obtained from a
binary (such as a ....
2
votes
0answers
486 views
SMTP authentification: saslauthd won't start
I've set up a mailserver, which is working fine, but now I wanted to add SMTP authentification using SASL. However, trying to start saslauthd (my system is Ubuntu 16.04) doesn't work, but I don't get ...
1
vote
1answer
662 views
Postfix SASL allow SMTP Authentication and relay messages
I am trying to set my SMTP server so it allows only SMTP authenticated users to send emails but the actual sending is done via Mailjet.
I am running on Ubuntu 14.04 LTS and Postfix version is ...
1
vote
0answers
415 views
ldap_bind: Invalid credentials (49) when configuring Pass-Trough authentication with SASL in OpenLDAP with AD
I'm using ubuntu 14.04 and OpenLDAP-2.4.40. I have synchronized Active Directory users in OpenLDAP using LSC utility. Now I want to do the authentications on the OpenLDAP part and will use the AD ...
4
votes
1answer
2k views
SASL auth to LDAP behind HAPROXY with name mismatches
My kerberos domain in MYEXAMPLE.ORG, but servers are located in the dmz-int.example.org dns zone.
LDAP server is b1.dmz-int.example.org; its keytab include:
udo ktutil -k /etc/krb5.keytab list
/etc/...
1
vote
1answer
166 views
Why does svnserve still ask for password via svn+ssh when sasl is used?
I have svnserve configured to run from inetd and svnserve.conf set to use sasl for authentication. This is so I could allow access to some repositories by users who do not have system-wide accounts ...
0
votes
1answer
1k views
Problems with 'adcli join' command: “invalid parameter supplied” and “unable to find a callback”
I am seeing problems when using adcli to join a RHEL7 machine to a Windows domain:
couldn't connect to local.net domain: couldn't authenticate to active directory: SASL( -7): invalid parameter ...
1
vote
1answer
777 views
SASL: How to delete all mech entries from a user?
I have a problem with my SASL database.
sasldblistusers2 shows following entries:
myuser@example.com: cmusaslsecretCRAM-MD5
myuser@example.com: cmusaslsecretPLAIN
myuser@example.com: userPassword
I ...
1
vote
1answer
169 views
Postfix multi instance with separate SASLDB for each instance
I configured postfix with multiple instances (postmulti), each instance has your own IP address and it´s working great, but I need each instance uses it´s own sasldb2 file to authenticate users.
The ...
1
vote
1answer
161 views
How to ensure encrypted OpenLDAP sessions using SASL/GSSAPI
I am running OpenLDAP 2.4 on a Debian jessie system. Clients typically connect to this LDAP server over port 389 using SASL/GSSAPI with our Kerberos infrastructure.
When a client connects using SASL/...
1
vote
1answer
1k views
Posfix: SASL authentication failed (unbuntu/office 365)
I'm unable to get postfix to work with our office 365 mail.
here's the main.cf file:
smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu)
biff = no
append_dot_mydomain = no
readme_directory = no
...
0
votes
1answer
94 views
How to restrict SMTP login to its own address in sasldb2? [duplicate]
I'm using sasldb2 (without saslauthd) for SMTP authentication with Postfix. To create a new user, I run saslpasswd2 -u example.com mail which creates a login mail@example.com. However, using these ...
2
votes
0answers
2k views
Dovecot/Postfix mail server SASL: Connect to private/auth failed
Trying to get this mail sever up has eaten up a good chunk of 2 days and I've made some headway but this specific error has persisted throughout. I'm using a Debian server with Postfix + Dovecot + ...
2
votes
1answer
782 views
Postfix + SASL using wrong query to authenticate
I recently set up postfix + dovecot on a aws ec2 instance following this guide: http://flurdy.com/docs/postfix/#config-secure-auth
Currently I'm stuck with SASL.
The SQL query doesn't seem to be ...
3
votes
1answer
272 views
PAM vs /etc/shadow in Dovecot SASL configuration - Security differences?
I set up a server with Postfix SMTP auth through Dovecot SASL. However, it was not possible to get the PAM authentification working as standard out of the box.
So more by chance, I changed it to ...
0
votes
1answer
622 views
Postfix: Unverified Client host rejected / SASL Logged In
Running Ubuntu, iRedMail, Mysql, Amavis, Spamassassin, Dovecot, Postfix
Recently had some unauthorized usage of a postfix server internally from a malware deprecated staging server. I worked on ...
2
votes
1answer
539 views
Bad search filter - postfix, OpenLDAP, Saslauthd
I am trying to setup a mail server on Debian Jessie and have come across a problem that's doing my head in.
When trying to access OpenLDAP through saslauthd via the command
testsaslauthd -u user1 -p ...
2
votes
1answer
165 views
NO [ALERT] Unexpected response from remote authentication server
is what I see when I run testsaslauthd inside an strace
socket(PF_LOCAL, SOCK_STREAM, 0) = 3
connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/saslauthd/mux"}, 110) = 0
writev(3, [{"\0\34a....
0
votes
1answer
78 views
ubuntu - Postfix mail sent from server not logged in mail.log or phpmail.log
I am having server which hosts 70-80 websites and also using relay server for smtp using postfix using mysql database for domain and email boxes.
I have also activated the phpmail.log for sendmail.
...
1
vote
1answer
160 views
saslauthd running in segfault after some time
I'm using postfix with courier and mysql for authentication.
Lately I have some segmentation faults, which causes sasl deamon to crash. It seems, the have something to do with dictionary attacks on ...
0
votes
1answer
136 views
sasl_username does not appear in my maillog logfile
I've got some servers that do not log the user when processing mail.
Packages involved are postfix 2:2.11.5-centos5.15072015 and cyrus-sasl-2.1.22-7.el5_8.1.x86_64
There is no sasl_username on the ...
