Skip to main content
21 votes
Accepted

Postfix error, SASL authentication failed; cannot authenticate to server, no mechanism available

In case you couldn't solve this error yet, my setup is 99% similar to yours except it uses Ubuntu, and I had all configured as per it but just pointing to GMAIL SMTP endpoint. Do take a look at this ...
Marcos Soutullo's user avatar
13 votes

Postfix error, SASL authentication failed; cannot authenticate to server, no mechanism available

Install the package cyrus-sasl-plain to provide the SASL PLAIN authentication method.
Michael Hampton's user avatar
10 votes

SASL LOGIN authentication failed: UGFzc3dvcmQ6 - Find the username

There are at least two ways of finding the user name(s) being tried. Logging SMTP transactions with Postfix If you know which host(s) your strange connections are coming from, you can enable verbose ...
pesco's user avatar
  • 101
10 votes

SASL LOGIN authentication failed: UGFzc3dvcmQ6 - Find the username

If you have fail2ban installed you can enable sasl (or sometimes called postfix-sasl) in your jail.local (or jail.d) and that should make the annoyances go away. ## for me this is in /etc/fail2ban/...
Jay M's user avatar
  • 398
10 votes

SASL LOGIN authentication failed: UGFzc3dvcmQ6 - Find the username

I was able to prevent this by setting up SSL and requiring auth attempts over SSL only with smtpd_tls_auth_only = yes This doesn't present the AUTH option to the remote client after EHLO and so the ...
Chloe's user avatar
  • 1,174
9 votes

Postfix "SASL authentication failure: No worthy mechs found"

I have the error: SASL authentication failure: No worthy mechs found with postfix running in a RaspberryPi3 (Debian 10 - Raspbian) I fix installing the package libsasl2-modules sudo apt update sudo ...
Robson Caldas's user avatar
6 votes

Postfix "SASL authentication failure: No worthy mechs found"

(New user, can't post comment reply to sebix. Also removed all links.) For modern installations (such as Ubuntu 16.04) that use Postfix as an SMTP client with SASL-auth to a remote server (e.g. like ...
Noel Maersk's user avatar
4 votes

Postfix "SASL authentication failure: No worthy mechs found"

this solved it for me (on centos 7 not default, was OK on older Centos versions) yum install cyrus-sasl{,-plain} service postfix restart
zzapper's user avatar
  • 341
4 votes

"No worthy mechs found" when trying to relay email to Gmail using Postfix

sudo yum install cyrus-sasl cyrus-sasl-lib cyrus-sasl-plain worked for me with Gmail relay setup (CentOS 7)
pla's user avatar
  • 41
4 votes

Can't get SASL auxprop/sasldb working with postfix/Ubuntu 12.04

Another way to synchronize the sasldb2 file to postfix's default chroot jail is to add a hard link to it: ln /etc/sasldb2 /var/spool/postfix/etc/ Note that a symlink wont work because symlinks cant ...
Josh's user avatar
  • 141
4 votes

Postfix warning: SASL: Connect to /var/spool/postfix/private/auth failed: No such file or directory

In some distros, like Debian, postfix runs in a chroot by default. Chroot changes the apparent root directory, so postfix won't see your filesystem as you do. This is why it doesn't see /var/spool/...
blee's user avatar
  • 245
4 votes
Accepted

Getting SENDMAIL (as a client) to use AUTH LOGIN

Besides sasl2-bin, there is a need to also install libsasl2-modules. I found detailed instructions at http://memoryslipping.blogspot.com/p/sendmail.html.
Old Geezer's user avatar
3 votes
Accepted

postfix not working correctly after system upgrade (no SASL authentication mechanism)

I found the problem. The problem was that I used smtpd_sasl_security_options = noanonymous,noplaintext but didn't set smtpd_tls_auth_only = yes so plaintext connections got refused instantly. ...
C0dR's user avatar
  • 81
3 votes

SASL auth to LDAP behind HAPROXY with name mismatches

You'll want ignore_acceptor_hostname = true in either [libdefaults] or the appropriate subsection of [appdefaults]. ignore_acceptor_hostname When accepting GSSAPI or krb5 security contexts for ...
84104's user avatar
  • 13.1k
3 votes

"No worthy mechs found" when trying to relay email to Gmail using Postfix

I was getting this issue(tail -f /var/log/mailog): to=<[email protected]>, relay=smtp.sendgrid.net[169.45.113.201]:587, delay=0.3, delays=0.05/0.07/0.16/0.02, dsn=5.0.0, status=bounced (host ...
Usman Ali Maan's user avatar
2 votes

Postfix: how to use simple file for SASL authentication?

Just clarifying a few things, Creating an account in sasldb: % saslpasswd2 -c -u fqdn username Testing authentication: % testsaslauthd -u username -p password (note: the username is not followed ...
いちにち's user avatar
2 votes

Dovecot SMTPD Sasl auth error: fatal: no SASL authentication mechanisms

Had the same error, different issue. Had to edit /etc/dovecot/conf.d/10-master.conf and uncomment unix_listener and add the user and group lines. service auth { unix_listener /var/spool/postfix/...
Bluebaron's user avatar
  • 149
2 votes
Accepted

Postfix + SASL using wrong query to authenticate

There two common methods to use postfix SASL with MySQL: Using saslauthd service combined with pam_mysql Using sasl auxprop with sql plugin Unfortunately, the second method has serious security ...
masegaloeh's user avatar
  • 18.4k
2 votes

Postfix: Unverified Client host rejected / SASL Logged In

Winning suggestion came from Twitter / @CBallou: https://twitter.com/cballou/status/727593905399734273 DNS PTR issue. Test removing check_reverse_client_hostname_access I removed it, mail passed. ...
Ciordia9's user avatar
2 votes

Problems with 'adcli join' command: "invalid parameter supplied" and "unable to find a callback"

It turned out in this case to be a problem with the OpenLDAP configuration. In /etc/openldap/ldap.conf I had a line: sasl_secprops minssf=0,maxssf=0 This line doesn't break machines that are already ...
shearn89's user avatar
  • 3,552
2 votes
Accepted

SASL: How to delete all mech entries from a user?

As a last resort, you could try modifying the underlying Berkeley DB database directly. This should only be done with extreme caution: test on a non-production system first, and have a current backup. ...
Tom Shaw's user avatar
  • 3,762
2 votes
Accepted

How to check if Postfix was compiled with support for Dovecot SASL?

The postconf(1) man page (which you should read) explains: -a List the available SASL server plug-in types. The SASL plug-in type is selected with the smtpd_sasl_type ...
Michael Hampton's user avatar
2 votes
Accepted

Add GSSAPI to OpenLdap in supportedSASLMechanisms

SOLVED I was missing SASL_MECH GSSAPI and SASL_REAM in /etc/ldap/ldap.conf [Tue Feb 28 13:48 root:ldap] [~] # cat /etc/ldap/ldap.conf # # LDAP Defaults # # See ldap.conf(5) for details # This file ...
Tolsadus's user avatar
  • 1,193
2 votes
Accepted

How to setup TLS for postfix? Should I use SASL with dovecot?

Both? Dovecot and Postfix are different things, you can encrypt your MTA traffic with TLS, and have your dovecot connections handled and authenticated using SASL. It's not a case of one or the other, ...
Joe Brailsford's user avatar
2 votes

Dovecot SASL auth not working

All the parameters for submission are still commented out: submission inet n - - - - smtpd # -o syslog_name=postfix/submission # -o smtpd_tls_security_level=encrypt # ...
Esa Jokinen's user avatar
  • 50.3k
2 votes
Accepted

How to generate entries for different mechanisms with saslpasswd2?

I've managed to get it working with the following: /etc/mail/sendmail.mc has the following set: define(`confLOG_LEVEL', `13')dnl define(`confAUTH_OPTIONS', `A')dnl TRUST_AUTH_MECH(`DIGEST-MD5 CRAM-...
bodgit's user avatar
  • 4,791
2 votes

fail2ban cannot set iptables rules

In order to ban multiple ports, your banaction needs to be set to iptables-multiport. This is the default, but you apparently have it set to something else based on the log output you've shown. Try ...
Michael Hampton's user avatar
2 votes

Mail Server allow sending spam to hosted mailboxes

The issue you most likely have is that the to address matches so the email is accepted - this is not a relaying problem, and is a very common setup. One way - maybe the easiest and best way depending ...
davidgo's user avatar
  • 6,342
2 votes

Can't telnet to Postfix SMTP server after adding smtpd_sasl_auth_enable option

I found the problem so I guess I'll answer my own question. The SASL library was missing the component cyrus-sasl-plain. I installed it with yum install cyrus-sasl-plain and problem solved. More ...
GetFree's user avatar
  • 1,552

Only top scored, non community-wiki answers of a minimum length are eligible