Questions tagged [sasl]
Simple Authentication and Security Layer (SASL) is a framework for authentication and data security in Internet protocols.
259
questions
0
votes
0
answers
26
views
postfix secure & insecure connections
I have configured postfix SMTP server for mail sending only with below configurations, I've used cyrus-sasl to authenticate with openLDAP, I want to achieve SMTP port 25 to use insecure connections ...
- 101
0
votes
0
answers
37
views
Why am I getting Sasl errors when trying to authenticate to SES with Postifx?
I am getting these two errors in my mail logs:
Aug 25 22:51:23 ns1 postfix/smtpd[246267]: warning: unknown[94.156.102.101]: SASL LOGIN authentication failed: authentication failure
Aug 25 22:55:22 ns1 ...
0
votes
0
answers
13
views
OpenLDAP + GSSAPI/Kerberos SASL
I have OpenLDAP 2.5 configured with GSSAPI and Kerberos set up and working. By working I mean I can bind and search when I have a ticket. My question is can I do a bind when I don't have a ticket? Can ...
0
votes
0
answers
29
views
SASL authorisation and hostname to access the server
I have a working postfix mail server. It is registered under two DNS names: mail.xxxx.de and xxxx.no-ip.org. I use SASL via dovecot for relay authorisation. It works flawless when the client uses the ...
- 1
0
votes
1
answer
195
views
535 5.7.8 Error: authentication failed: UGFzc3dvcmQ6
I have Postfix installed on a Fedora 38 box with the following:
$ grep smtp_ main.cf
smtp_sasl_auth_enable = yes
smtp_sasl_type = cyrus
smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
...
- 159
0
votes
1
answer
195
views
Why is my client server unable to send emails over port 587 while a telnet connection to my mail server is possible?
Host cannot send mail over relay host with port 587.
I have two servers. One mail server and one server that uses the mail server as a relay host.
The client server should send over Port 587.
A telnet ...
1
vote
1
answer
63
views
NetBSD + openLDAP + SASL
I try to set up a connection to a openLDAP server running on NetBSD 10 via TLS and SASL. When I try ldapsreach -Y EXTERNAL
I get
ldapsearch: not compiled with SASL support
and
ldd /usr/bin/ldapsearch
...
- 61
0
votes
0
answers
79
views
SASL Authentication - Why is it taking so long to login to the authentication server?
I can't describe it properly, but I have a Thunderbird mail client, I use it to receive and send mail through a user I created and an available domain. I use IMAP and POP3 services there, I also have ...
0
votes
0
answers
97
views
Postfix/Dovecot - Initial Configuration - Can Send, Can't Receive - No Error Message
My configuration allowed me to both send and receive email. I followed a guide on configuring SASL for Postfix/Dovecot. Once done, I again cannot receive email, with the exception of users on the same ...
0
votes
0
answers
530
views
openLDAP / Sasl - ldap_sasl_interactive_bind_s: Local error (-2)
I configure openldap with sasl bind.
Trying connect:
# ldapsearch -v -H ldaps:// -Y PLAIN -U [email protected]
But getting error:
ldap_sasl_interactive_bind_s: Local error (-2)
I create a config ...
- 1
0
votes
0
answers
149
views
Postfix: Rewrite header FROM sender based on sasl login username
Lets say I got a sasl login user called myloginuser. The user owns the domain: example.org and has set up following email address: [email protected]
myloginuser is authenticated and wants to send an ...
- 101
0
votes
1
answer
1k
views
Fail2Ban - Posfix-SASL not working
i have a problem that my fail2ban will not ban sasl authentications against my postfix.
This is an example log entry from /var/log/syslog:
Jul 31 13:42:21 v50428 postfix/smtps/smtpd[635398]: warning: ...
- 21
1
vote
3
answers
528
views
Postfix with Dovecot on Ubuntu 20.04 postfix/mail fatal: no sasl authentication mechanisms
Here's the output of doveconf -n:
# 2.3.7.2 (3c910f64b): /etc/dovecot/dovecot.conf
# Pigeonhole version 0.5.7.2 ()
# OS: Linux 5.17.5-x86_64-linode154 x86_64 Ubuntu 20.04.4 LTS
# Hostname: mail....
- 11
2
votes
0
answers
238
views
Postfix SASL error: warning: unknown[xxx.xxx.xxx.xxx]: SASL LOGIN authentication failed: authentication failure
My use case is to use my own mail server to send emails from CCTV NVRs to overcome the daily limits imposed by GMail. The NVR has an option to setup authentication. The config worked for whitelisted ...
0
votes
1
answer
187
views
Postfix / Dovecot SASL authentication only working on primary domain
I have had a postfix server running flawlessly for three months now. Users log in to the server in their respective mail clients by connecting to mail.mydomain.com (with SSL) and there's never been ...
- 11
0
votes
1
answer
893
views
Can PAM be used with Postfix and Dovecot SASL?
I have set up Postfix to use Dovecot SASL with PAM and Unix users, and Dovecot LDA (LMTP) for local mailbox storage. After some testing, turns out incoming mail gets declined with the reason:
Error: ...
- 133
1
vote
1
answer
234
views
How does SASL know to read config from /etc/postfix/sasl?
I've set up Postfix to authenticate with SASL on a Ubuntu based system. I've done this by following along with some recipes, but mostly readying a lot of the docs.
One bit that works, but which I don'...
- 478
0
votes
1
answer
907
views
Postfix: reject_sender_login_mismatch not working
I want to use the following configuration for Postfix:
smtpd_relay_restrictions = permit_mynetworks reject_sender_login_mismatch permit_sasl_authenticated defer_unauth_destination, ...
- 247
2
votes
1
answer
1k
views
Postfix sasl_password file and MX resolution
Thanks to @AlexD idea, we'll implement the following transport table in order to simulate a IP failover using the DNS MX resolution (postfix 3.3)
Relay for 2 domains, exemple[12].com
exemple1.com ...
- 5,556
0
votes
2
answers
826
views
How does Sendmail figure out where SASL is listening?
I'm trying to get SMTP-AUTH working on a Mint Linux 20.2 machine, and I'm having trouble getting authentication to happen. I have installed Cyrus sasl2, and apparently configured it properly - ...
- 991
1
vote
0
answers
2k
views
Postfix unable to authenticate with Microsoft Exchange (No credentials were supplied)
I want to setup postfix on my nagios server to relay emails to our Microsoft Exchange server and I am running into issues with authenticating with Microsoft Exchange.
Specifically I am getting this ...
- 285
0
votes
1
answer
1k
views
postfix/sasl/pam (mysql) auth error
I've followed tutorial on http://flurdy.com/docs/postfix/ to set up an email server, and most of it works (after switching from Courier to Dovecot). Just not sending email through SMTP. Sending with ...
- 337
1
vote
0
answers
290
views
Postfix Can't Receive Internet Email - warning: SASL: Connect to /var/spool/postfix/private/auth failed
Using CentOS 8, I've setup dovecot and postfix and tested that:
I can sign in as an authenticated user
Read email (IMAP)
Send email to the same/different account on the server
Send email outbound, to ...
- 161
1
vote
1
answer
202
views
Trouble enabling mail_crypt in dovecot / SASL authentication failed
dovecot --version
2.3.4.1 (f79e8e7e4)
Ok, I tried to enable mail-crypt but it's being weird. I'm using https://doc.dovecot.org/configuration_manual/mail_crypt_plugin/#ec-key.
I ran:
cd $HOME
openssl ...
- 151
3
votes
1
answer
3k
views
Getting SENDMAIL (as a client) to use AUTH LOGIN
I am trying to use SENDMAIL (v8.15) on a Pi in my network to just forward mails to my SendGrid account. This is needed because my legacy webcams on my network cannot use the very long password ...
- 397
1
vote
2
answers
708
views
Dovecot not authenticating clients in mail server with postfix cyrus(for sasl authentication) and dovecot in centos 7
As i have been building a mailserver i have another question in process that i haven't been able to find in google so i am expecting i will get a answer here
so The update is i have created a ...
- 23
0
votes
1
answer
278
views
mysql not authenticating with cyrus for postfix athentication
So i have been building a mail server and i have setted up postfix and a database now what i want is that cyrus should authenticate my users of mail server from a database i have setted up a database ...
- 23
1
vote
3
answers
3k
views
Postfix + sasldb issue (solved as of Mar 2021)
PS(SOLVED: Solution for Alpine Linux as of Mar 2021, the fix in cyrus-sasl 2.1.27-r12 is in edge branch. 3.13 only has cyrus-sasl 2.1.27-r10.
PS: I know there are similar posts but they are very ...
- 3,667
0
votes
1
answer
585
views
Postfix: How to malware & spam scan outgoing SMTP SASL auth users?
Although I have found two answers to this, I can't work out how to actually implement them, and at least one of them doesn't actually answer the question. So if anyone has any experience to share I'd ...
- 472
0
votes
1
answer
237
views
Postfix SASL authentication via Dovecot - Can I use the SASL login name in my postfix sql queries?
I have a mailserver with postfix, dovecot and mysql running on Debian buster.
Everythings works fine so far, but I would like to setup a scenario where the login name for SASL auth is different from ...
- 36
0
votes
0
answers
223
views
Demanding SASL authentication on port 25 rejects all of my incomming email
I am using this chunk of code inside /etc/postfix/master.cf to force people to securely "subimt" email through port 465 which uses protocol SMTPS. SMTPS supports mandatory TLS which I use to ...
- 363
0
votes
2
answers
566
views
Postfix fails on incoming SMTP from remote MTAs for local delivery
I am transferring MTA to newer servers running Ubuntu 20.04 LTS. SMTPS is working well thus permitting clients to send mails after authentication. However, when sending mails from remote MTAs for ...
- 202
3
votes
1
answer
2k
views
configure saslauthd with PAM
I'm trying to configure saslauthd with PAM. I created a user test with password test using useradd and passwd and I checked that I can login with su - test.
[arch@vps-5220ce87 ~]$ systemctl status ...
- 151
0
votes
1
answer
69
views
Using "postfix" user for "dovecot"
I set the Postfix so that my mailboxes (maildir format) for my virtual users are set like this:
┌───┐
│ # │ root > myserver > ~
└─┬─┘
└─> ls -l /var/mail/
total 4
drwxr-sr-x 5 postfix ...
- 363
0
votes
1
answer
632
views
OpenLDAP cn=config database access blocked
I use OpenLDAP 2.4.54 with Alpine. Here is my ldap configuration
$ sudo slapcat -n0
dn: olcDatabase={-1}frontend,cn=config
objectClass: olcDatabaseConfig
objectClass: olcFrontendConfig
olcDatabase: {-...
- 195
1
vote
1
answer
13k
views
Why do I get "Server not found in Kerberos database" using testsaslauthd?
I'm trying to setup Kerberos auth over SASL using OpenLDAP. As I understand it, I need a host keytab in /etc/krb5.keytab from the KDC I'm using and then {SASL}user@realm in the given user's LDAP ...
- 3,714
0
votes
1
answer
558
views
Postfix + SASL SQLite gives auxprop error on CentOS 7
I am receiving an unknown password verifier(s) auxprop error when trying to use SQLite for SASL authentication in Postfix on CentOS 7. It seems that the SQLite SQL engine is not found.
Contents of /...
- 1,445
0
votes
2
answers
487
views
Can't determine the principal used to LDAP syncrepl GSSAPI
I've configured two openldap fully functional in HA (syncrepl mode provider - slave).
After testing that simple bind syncrepl works flawlessly, I'm trying to deploy from scratch using only GSSAPI to ...
- 35
1
vote
1
answer
8k
views
Authenticating Apache HTTPServer 2.4.x with mod_auth_gssapi using Microsoft Active directory
I'm looking for below configurations for GSSAPI authentication with Apache 2.4 for Active directory:
1. How to configure Apache HTTPServer 2.4.x with mod_auth_gssapi using Microsoft Active directory? ...
- 131
0
votes
0
answers
669
views
Getting postfix to log to a file on docker
I have created a docker image based on Ubuntu 20.04 with postfix and dovecot. I also installed syslog-ng in hope to solve my problem, but it didn't work.
Thing is, I want to use fail2ban to prevent ...
- 200
8
votes
2
answers
24k
views
Postfix error, SASL authentication failed; cannot authenticate to server, no mechanism available
I would like to set up postfix relay to my website hosting SMTP server, from my home server. It's Centos 7, set up using dynamic IP and dynamic DNS. Because of limited space in my hosting site, I ...
7
votes
1
answer
2k
views
Postfix warning: SASL: Connect to /var/spool/postfix/private/auth failed: No such file or directory
I have searched, and failed to find an answer and I am out of ideas. I just do not know enough about postfix and dovecot to parse the configs or understand what may be causing this error.
warning: ...
- 71
0
votes
1
answer
1k
views
Dovecot: Username character disallowed by auth_username_chars: 0x0a
I'm trying to set up a postfix+dovecot server to use GNU Mailman for creating a mailing list server, however I'm currently stuck at setting up SASL authentication using dovecot. It seems to add a ...
user450390
0
votes
1
answer
1k
views
How to setup SASL Proxy Authorization with an OpenLDAP server on Debian
For Kerberos Authentication together with SASL/GSSAPI Authorization on client devices I need Proxy Authorization on an OpenLDAP server running on Raspberry Pi with Debian/Raspbian Buster. I tried to ...
- 435
1
vote
1
answer
2k
views
Can't telnet to Postfix SMTP server after adding smtpd_sasl_auth_enable option
I have the Postfix SMTP server installed on my CentOS 7 machine on port 25.
To test that it's working, I connect to it using telnet, like this:
# telnet localhost 25
and the result is:
Trying ::1....
- 1,510
1
vote
0
answers
25
views
SASL not blocking non authenticated user sending email to itself
My email server is working fine except that still allows anyone to send email from a [email protected] to [email protected].
I eanbled in /etc/postfix/main.cf
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/...
- 169
0
votes
1
answer
842
views
Postfix How to send mail in behalf of an alias
I'm using postfix as a mail relay in a very simple setup, mostly with aliases, forwarding mails to GMail.
My main goal with this is to minimize the need for mailboxes on my server.
Let's assume I ...
- 101
0
votes
1
answer
4k
views
Unable to connect to port 993 for IMAP on Ubuntu server with Postfix/Dovecot/MySQL
Ubuntu 16.04.5
Apache2
MySQL
Postfix w/MySQL
Dovecot
SASL2
UFW
I am trying to install a working mail server and client on this machine. I followed this tutorial which allows authentication through ...
- 101
0
votes
1
answer
624
views
Postfix / Thunderbird / Cyrus SASL2: Username Or Password Invalid
I'm quite certain that I've entered my password correctly; that Thunderbird regards it as incorrect is I expect due to a Postfix or Cyrus SASL misconfiguration.
I am perpetually confused about eMail ...
- 101
0
votes
0
answers
617
views
Pass through authentication with LDAP and Kerberos
I have a SLES 12 server and installed and configured MIT KDC and openLDAP. I want to use pass through authentication in openLDAP so that the password is only stored in the KDC and I don't have to ...
- 123