15
votes
Accepted
Postfix error, SASL authentication failed; cannot authenticate to server, no mechanism available
In case you couldn't solve this error yet, my setup is 99% similar to yours except it uses Ubuntu, and I had all configured as per it but just pointing to GMAIL SMTP endpoint.
Do take a look at this ...
- 166
11
votes
Postfix error, SASL authentication failed; cannot authenticate to server, no mechanism available
Install the package cyrus-sasl-plain to provide the SASL PLAIN authentication method.
- 241k
10
votes
SASL LOGIN authentication failed: UGFzc3dvcmQ6 - Find the username
I was able to prevent this by setting up SSL and requiring auth attempts over SSL only with
smtpd_tls_auth_only = yes
This doesn't present the AUTH option to the remote client after EHLO and so the ...
- 1,144
9
votes
Accepted
Dovecot SMTPD Sasl auth error: fatal: no SASL authentication mechanisms
As you can see, there's no smtpd_sasl_path in our output of postconf -n
Why? The answer is easy. Because there's no smtpd_sasl_path set. Have a look at your first snippet: There's a typo in it. You ...
- 106
9
votes
SASL LOGIN authentication failed: UGFzc3dvcmQ6 - Find the username
There are at least two ways of finding the user name(s) being tried.
Logging SMTP transactions with Postfix
If you know which host(s) your strange connections are coming from, you can enable verbose ...
- 91
9
votes
SASL LOGIN authentication failed: UGFzc3dvcmQ6 - Find the username
If you have fail2ban installed you can enable sasl (or sometimes called postfix-sasl) in your jail.local (or jail.d) and that should make the annoyances go away.
## for me this is in /etc/fail2ban/...
- 368
7
votes
"503 5.5.1 Error: authentication not enabled" when trying to connect to my postfix server remotley
For enable SASL when receiving email via smtpd, you need to put this parameter
smtpd_sasl_auth_enable = yes
For enable SASL when sending email via smtp, you need to put this parameter
...
- 18.1k
6
votes
Postfix "SASL authentication failure: No worthy mechs found"
I have the error: SASL authentication failure: No worthy mechs found
with postfix running in a RaspberryPi3 (Debian 10 - Raspbian)
I fix installing the package libsasl2-modules
sudo apt update
sudo ...
6
votes
Postfix deny relay for some virtual users
This feature was available to postfix version 2.11.
You can use check_sasl_access parameter to enforce restrictions based on SASL username. Of course you need to put it above ...
- 18.1k
5
votes
Postfix "SASL authentication failure: No worthy mechs found"
(New user, can't post comment reply to sebix. Also removed all links.)
For modern installations (such as Ubuntu 16.04) that use Postfix as an SMTP client with SASL-auth to a remote server (e.g. like ...
- 151
5
votes
Accepted
searching for the correct way to compile postfix
buggy for configuring virtual mailboxes with Maildir protocol
I'm using Dovecot LMTP for delivery to Maildir boxes and don't have any problems.
I'd like to provide SMTP authentication access ...
- 176
5
votes
Accepted
How to get SASL authentication to work with DIGEST-MD5 for OpenLDAP?
My recipe is for OpenLDAP to check directly /etc/sasldb2.
First step: ensure the /etc/sasldb2 is owned by slapd user.
Next step: have slapd not to look for credentials in directory tree, which is ...
- 1,350
4
votes
Can't get SASL auxprop/sasldb working with postfix/Ubuntu 12.04
Another way to synchronize the sasldb2 file to postfix's default chroot jail is to add a hard link to it:
ln /etc/sasldb2 /var/spool/postfix/etc/
Note that a symlink wont work because symlinks cant ...
- 141
4
votes
"No worthy mechs found" when trying to relay email to Gmail using Postfix
sudo yum install cyrus-sasl cyrus-sasl-lib cyrus-sasl-plain
worked for me with Gmail relay setup (CentOS 7)
- 41
4
votes
Postfix "SASL authentication failure: No worthy mechs found"
this solved it for me (on centos 7 not default, was OK on older Centos versions)
yum install cyrus-sasl{,-plain}
service postfix restart
- 341
4
votes
Accepted
Dovecot says: "Requested CRAM-MD5 scheme, but we have only CRYPT" yet CRAM-MD5 is available
...I eventually figured out that the file ownership and permissions details have changed. And, I made a small error in the configuration files, too.
As many software packages do, the new scheme ...
- 1,202
4
votes
postfix error: 535 5.7.8 Error: authentication failed: authentication failure
You need to know the differences between smtpd and smtp in Postfix. In short, smtpd is the SMTP server that receive the email and smtp is the SMTP client that send the email.
Based on the article ...
- 18.1k
4
votes
Accepted
Postfix - sender dependent relaying for multiple domains
In an effort to get a fresh perspective on this problem, I started to configure a similar relayhost setup on another server and it was during that process that I finally traced what the source of the ...
- 461
4
votes
Postfix warning: SASL: Connect to /var/spool/postfix/private/auth failed: No such file or directory
In some distros, like Debian, postfix runs in a chroot by default. Chroot changes the apparent root directory, so postfix won't see your filesystem as you do. This is why it doesn't see /var/spool/...
- 235
3
votes
Accepted
SASL PLAIN authenticating with primary domain, but not with virtual domain
Sorry for misleading comment above. When you use sasldb, then you doesn't need saslauthd running. So you can safely remove it from startup script. You should run saslauthd when you do password ...
- 18.1k
3
votes
Postfix: SASL authentication failure: cannot connect to saslauthd server: Permission denied
You could also try to add postfix user to sasl group.
- 221
3
votes
postfix permit_sasl_authenticated in smtpd_client_restrictions for submission on 587
It's simply a clean way of overriding main.cf since usually smtpd_client_restrictions in main.cf isn't used, which is the same as saying by default it is set to smtpd_client_restrictions = permit.
...
- 31
3
votes
Postfix deny relay for some virtual users
Some workaround for postfix < 2.11
The author suggested that you need combination of reject_sender_login_mismatch and check_sender_access.
Parameter reject_sender_login_mismatch will reject if ...
- 18.1k
3
votes
How to force Postfix SMTP to use AUTH (SASL?) and reject anonymous connections?
Ok, it seems, i have to also add this:
smtpd_delay_reject = yes
smtpd_client_restrictions = permit_sasl_authenticated, reject
as stated here:
http://www.postfix.org/postconf.5.html under ...
- 189
3
votes
Accepted
Dovecot reports no SASL authentication mechanisms
Your postfix haven't access to the auth-daemon socket because of different uid and strict permissions. The easiest way is to change permissions to the 666 (rw-rw-rw-) and check whether the auth become ...
- 6,904
3
votes
Accepted
What is a saslpasswd2 domain?
Some documentation is more verbose [1]:
-u domain (default: system FQDN hostname)
Use domain to set user domain property (realm).
SASL can be used for authenticating users with different realms (...
- 9,465
3
votes
Dovecot doesn't create /var/spool/postfix/private/auth
To answer your questions:
The socket gets made by running dovecot. It is dovecot that offers a service to postfix, so dovecot should create it. It should get made as soon as dovecot starts. If there ...
- 149
3
votes
How to get SASL authentication to work with DIGEST-MD5 for OpenLDAP?
The CRAM-MD5 and DIGEST-MD5 methods are impossible with "pwcheck_method: saslauthd". They needs plain, unencrypted passwords in a LDAP directory itself.
- 3,488
3
votes
SASL auth to LDAP behind HAPROXY with name mismatches
You'll want ignore_acceptor_hostname = true in either [libdefaults] or the appropriate subsection of [appdefaults].
ignore_acceptor_hostname
When accepting GSSAPI or krb5 security contexts for ...
- 12.8k
3
votes
Accepted
postfix not working correctly after system upgrade (no SASL authentication mechanism)
I found the problem.
The problem was that I used
smtpd_sasl_security_options = noanonymous,noplaintext
but didn't set smtpd_tls_auth_only = yes so plaintext connections got refused instantly.
...
- 151
Only top scored, non community-wiki answers of a minimum length are eligible