From owner-freebsd-questions@FreeBSD.ORG Sat Mar 15 23:48:51 2014 Return-Path: Delivered-To: freebsd-questions@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id CEC01DFD for ; Sat, 15 Mar 2014 23:48:51 +0000 (UTC) Received: from blu0-omc2-s20.blu0.hotmail.com (blu0-omc2-s20.blu0.hotmail.com [65.55.111.95]) by mx1.freebsd.org (Postfix) with ESMTP id 92897275 for ; Sat, 15 Mar 2014 23:48:51 +0000 (UTC) Received: from BLU0-SMTP273 ([65.55.111.72]) by blu0-omc2-s20.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Sat, 15 Mar 2014 16:47:45 -0700 X-TMN: [OfTb4/XteDvci3BgrXMVf/AAdi4lkxGr] X-Originating-Email: [drew@mykitchentable.net] Message-ID: Received: from [127.0.0.1] ([69.62.167.70]) by BLU0-SMTP273.phx.gbl over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675); Sat, 15 Mar 2014 16:47:42 -0700 Date: Sat, 15 Mar 2014 16:47:41 -0700 From: Drew Tomlinson User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.3.0 MIME-Version: 1.0 To: Charles Swiger Subject: Re: Help with SMTP AUTH References: In-Reply-To: X-Antivirus: avast! (VPS 140315-1, 03/15/2014), Outbound message X-Antivirus-Status: Clean X-OriginalArrivalTime: 15 Mar 2014 23:47:42.0577 (UTC) FILETIME=[F4FA6E10:01CF40A8] Sender: Content-Type: text/plain; charset="ISO-8859-1"; format=flowed Content-Transfer-Encoding: 7bit X-Content-Filtered-By: Mailman/MimeDel 2.1.17 Cc: FreeBSD - X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 15 Mar 2014 23:48:52 -0000 On 3/15/2014 11:30 AM, Charles Swiger wrote: > Hi-- > > On Mar 15, 2014, at 11:10 AM, Drew Tomlinson wrote: >> I'm wondering if Postfix is even attempting to query saslauthd. I'm not sure how to tell. Should I see something in my maillog? This is all I see in my log when testing: >> >> Mar 15 10:56:38 blacklamb postfix/smtpd[85529]: connect from unknown[X.X.X.X] >> Mar 15 10:56:39 blacklamb postfix/smtpd[85529]: Anonymous TLS connection established from unknown[X.X.X.X]: TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits) >> Mar 15 10:56:39 blacklamb postfix/smtpd[85529]: NOQUEUE: reject: RCPT from unkno >> wn[X.X.X.X]: 454 4.7.1 .com>: Relay access denied; from= to=.com> proto=ESMTP helo=<[127.0.0.1]> >> >> Any help on where to begin to solve this would be appreciated. > The log messages imply that the client didn't try to perform SMTP AUTH before trying to send the message. > Or you've obfuscated the logs to an extent such that the issue can't be debugged reliably, take your pick. Thank you for your reply. I did not obfuscate the logs beyond email and IP addresses. That was the entire session between a test client and postfix so I pick the former. :) Another poster suggested my master.cf contain: -o smtpd_sasl_auth_enable=yes This was commented out. Since enabling, it appears postfix now offers SMTP_AUTH: Mar 15 16:38:40 blacklamb postfix/smtpd[86502]: connect from unknown[x.x.x.x] Mar 15 16:38:41 blacklamb postfix/smtpd[86502]: Anonymous TLS connection established from unknown[x.x.x.x]: TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits) Mar 15 16:38:41 blacklamb postfix/smtpd[86502]: warning: SASL authentication failure: no user in db Mar 15 16:38:41 blacklamb postfix/smtpd[86502]: warning: SASL authentication failure: no user in db Mar 15 16:38:41 blacklamb postfix/smtpd[86502]: warning: SASL authentication failure: Password verification failed Mar 15 16:38:41 blacklamb postfix/smtpd[86502]: warning: unknown[x.x.x.x]: SASL PLAIN authentication failed: authentication failure Mar 15 16:38:41 blacklamb postfix/smtpd[86502]: warning: SASL authentication failure: no user in db Mar 15 16:38:41 blacklamb postfix/smtpd[86502]: warning: SASL authentication failure: no user in db Mar 15 16:38:41 blacklamb postfix/smtpd[86502]: warning: unknown[x.x.x.x]: SASL LOGIN authentication failed: authentication failure Mar 15 16:38:44 blacklamb postfix/smtpd[86502]: disconnect from unknown[x.x.x.x] So now I'm wondering if postfix is trying to authenticate directly and bypassing saslauthd? I'm trying to use saslauthd to use the system logins via PAM. My smtpd.conf file contains: # cat /usr/local/lib/sasl2/smtpd.conf pwcheck_method: saslauthd mech_list: PLAIN LOGIN log_level: 9 These are all the lines that contain "*sasl*" in my config : # grep sasl main.cf smtp_sasl_auth_enable = yes smtp_sasl_security_options = noanonymous smtpd_sasl_path = /usr/local/lib/sasl2/smtpd smtp_sasl_password_maps = hash:/usr/local/etc/postfix/sasl_passwd smtp_sasl_mechanism_filter = !CRAM-MD5,!DIGEST-MD5, static:all smtp_sasl_type = cyrus smtpd_sasl_local_domain = broken_sasl_auth_clients = yes smtpd_recipient_restrictions = permit_sasl_authenticated, Thanks, Drew -- Like card tricks? Visit The Alchemist's Warehouse to learn card magic secrets for free! http://alchemistswarehouse.com