Questions tagged [sasl]

Simple Authentication and Security Layer (SASL) is a framework for authentication and data security in Internet protocols.

259 questions
1
vote
3 answers

CentOS 7 ec2 smtpd - Client host rejected: Access denied

I've been trying to figure this out for hours and can't quite wrap my head around it. I have a mail server on an ec2 instance running CentOS7 that has postfix, courier (authlib and imap), sasl, amavisd, spamassassin and roundcube configured on it.…
Karl Viiburg
  • 185
  • 1
  • 3
  • 7
1
vote
1 answer

Postfix sasl/tls username password ubuntu14.04 only sender

Anybody can suggest me a good tutorial to configure postfix as a secure smtp. I've installed it by this command sudo apt-get install mail-stack-delivery but I can't use it. In particular I haven't a domain but I've a direct ip and I would use my…
Claudio Pomo
  • 113
  • 5
1
vote
0 answers

Postfix + Saslauthd + Kerberos 5 + CentOS 7 not working

I've almost got saslauthd checking against Kerberos but seeing some last issues on CentOS 7. When postfix talks to saslauthd, it sends a lowercased domain and it's not corrected. I tried to fix things in /etc/krb5.conf using [domain_realms] but…
1
vote
2 answers

Postfix cannot authenticate against SASL

My system is Debian 7 aka Wheezy with postfix, courier, and mysql installed. Courier works well and if I issue testsaslauthd -u user@domain -p password -f /var/spool/postfix/var/run/saslauthd/mux -s smtp I get a 0: OK "Success." However, if I get…
Michael Kremser
  • 108
  • 1
  • 3
  • 11
1
vote
1 answer

Postfix selectively enforce TLS

I am running postfix in Debian Wheezy as my MTA. I currently have it configured to require secure connections for SMTP. In main.cf I have: smtpd_tls_auth_only = yes smtpd_tls_security_level = encrypt And then in master.cf, I have: smtp inet …
Aaron A
  • 239
  • 2
  • 14
1
vote
0 answers

Diagnose SASL LOGIN authentication failure with postfix and sasldb

I am trying to configure a Postfix SMTP server on my personal machine (ubuntu server) using sasldb2. So far what I have set up works well with the test command: testsaslauthd (however it may be worth noticing that I have to do a chmod+x on…
user3484865
  • 27
  • 1
  • 3
1
vote
1 answer

How to check if my postfix was compiled with sasl support?

I keep reading everywhere that postfix must be compiled with sasl support to be able to use the sasl authentication. I already have postfix instances running (Centos 6.4 and Fedora 18 machines). They were installed using the package manager…
John Smith Optional
  • 502
  • 2
  • 9
  • 18
1
vote
2 answers

Upgrading to Debian 7: Postfix Auth fails

I'm upgrading various Debian 6 servers to Debian 7. There are a few minor issues, but this one is a show stopper. On Debian, Postfix runs in a chrooted environment. That environment is setup correctly (it was working perfectly on Debian6). I only…
1
vote
1 answer

Postfix (MySQL): Encrypted passwords does not work

Update: I've tried to insert the password in plain text in the DB. That works, and I'm now able to send mail as well. I tried setting up the whole thing (using the guide mentioned) again, but with the same result. Any ideas? Original question: Just…
Index
  • 121
  • 2
  • 8
1
vote
1 answer

generic failure for SASL LOGIN

few years ago I've set up my server using this guide: http://flurdy.com/docs/postfix/ at that time machine was running ubuntu 8.04 LTS, recently I've updated machine to 12.04 LTS but can't force SASL to work, so atm sending mail is only possible…
Piotr Tkaczyk
  • 11
  • 1
  • 5
1
vote
1 answer

Postfix allows own domains to be sent without asking for logins

Postfix issue, (I asked this yesterday and manged to delete my own post instead of editing it sorry for that) I use Postfix+SASL I got these settings in main.cf: smtpd_sasl_security_options = noanonymous broken_sasl_auth_clients =…
Marf
  • 11
  • 2
1
vote
1 answer

Removing "noplaintext" from Postfix conf due to lack of CRAM-MD5 support in clients. Is that insecure?

I have enabled TLS support in POSTFIX and authentication is delegated to Dovecot which offers "plain login cram-md5" methods. The SASL section in my Postfix conf had smtpd_sasl_local_domain = smtpd_sasl_auth_enable = yes smtpd_sasl_security_options…
Gurunandan Bhat
  • 247
  • 3
  • 8
1
vote
2 answers

Dovecot Not Receiving Mail From Outside Servers

After a long and hard battle, I was able to configure postfix to send mail to outside domains. Now the problem is receiving them from outside domains. I use the pop3 protocol with dovecot, and it seems to work pretty well (except for this problem).…
Ian
  • 139
  • 3
  • 9
1
vote
2 answers

What is the exact meaning of "SASL authentication failure: incorrect digest response"

I followed Flurdy's how-to for setting up a mail server on ubuntu. I can receive mails and use squirrelmail to read and send emails. However, I can't send emails through my server using my email client (thunderbird). The mail.log shows: "SASL…
Sascha
  • 121
  • 1
  • 2
  • 5
1
vote
1 answer

cyrus-imapd is not work with sasldb2, but postfix work

centos6 64 bits: when i use pop3 for access cyrus-imapd: S: +OK li557-53 Cyrus POP3 v2.3.16-Fedora-RPM-2.3.16-6.el6_2.5 server ready <3176565056.1354071404@li557-53> C: USER abc@myabc.com S: +OK Name is a valid mailbox C: PASS abcabc S: -ERR [AUTH]…