Logging problems

[Andreas Winkelmann]

On Sunday 07 January 2007 14:16, Herbert Muller wrote:

> > Cyrus-SASL's "loglevel" Setting is in relation to Postfix useless.
> > Did you restart or at least reload syslogd?
>
> Yes, syslogd was restarted.

Ok.

> > Oh and Postfix does not log to auth.*. Maybe you see something from
> > saslauthd.
>
> It may also be saslauthd who produces the messages. But, by the way, it can
> be defined in the configuration file of syslogd, which messages are written
> into auth.log. Or did I misunderstand that.

Applications use various Syslog-Facilities. Postfix uses $syslog_facility, per 
Default "mail". "auth" is a diffrent facility. You can filter in your 
syslog-Configuration for that facilities.

> Actually I do not know exactly who produces messages like
>
> Jan  7 13:59:25 szse postfix/smtpd[8786]: warning:
> pD95F72E4.dip.t-dialin.net[217.95.114.228]: SASL LOGIN authentication
> failed Jan  7 13:59:25 szse postfix/smtpd[8786]: >
> pD95F72E4.dip.t-dialin.net[217.95.114.228]: 535 Error: authentication
> failed
>
> But the problem is I do also not know, how to solve the problem which
> causes the messages.

> > Show your configuration, "postconf -n", smtpd.conf, master.cf.
>
> Ok, here comes my configuration:
> I'm using Microsoft Outlook as client.
>
> postconf -n:
>
> append_dot_mydomain = yes
> biff = no
> broken_sasl_auth_clients = yes
> command_directory = /usr/sbin
> config_directory = /etc/postfix
> daemon_directory = /usr/lib/postfix
> disable_vrfy_command = yes
> inet_interfaces = all
> mailbox_size_limit = 0
> mydestination = localhost.localdomain, localhost
> myhostname = clients.your-server.de
> mynetworks = 127.0.0.0/8
> recipient_delimiter = +
> setgid_group = postdrop
> smtpd_banner = $myhostname ESMTP $mail_name
> smtpd_delay_reject = yes
> smtpd_helo_required = yes
> smtpd_recipient_restrictions = permit_mynetworks,
> permit_sasl_authenticated, reject_unauth_destination, warn_if_reject,
> reject_unknown_client,
> reject_unknown_hostname, check_relay_domains
> smtpd_sasl_auth_enable = yes
> smtpd_sasl_local_domain =
> smtpd_sasl_security_options = noanonymous
> smtpd_tls_cert_file = /etc/postfix/smtpd.cert
> smtpd_tls_key_file = /etc/postfix/smtpd.key
> smtpd_use_tls = yes
> strict_rfc821_envelopes = yes
> virtual_alias_domains = virtual_alias_maps
> virtual_alias_maps = mysql:/etc/postfix/mysql-virtual_forwardings.cf
> mysql:/etc/postfix/mysql-virtual_email2email.cf
> virtual_gid_maps = static:5000
> virtual_mailbox_base = /home/vmail
> virtual_mailbox_domains = mysql:/etc/postfix/mysql-virtual_domains.cf
> virtual_mailbox_maps = mysql:/etc/postfix/mysql-virtual_mailboxes.cf
> virtual_uid_maps = static:5000
>
>
> smtpd.conf:
>
> pwcheck_method: auxprop
> auxprop_plugin: sql
> mech_list: plain login cram-md5 digest-md5
> sql_engine: mysql
> sql_hostnames: 127.0.0.1
> sql_user: user
> sql_password: password
> sql_database: database
> sql_select: select password from users where email='%u@%r'
> log_level: 7

Ok, is the sql-Auxprop Plugin (libsql.*) installed? Best to check that.

In which Directory is the smtpd.conf? Which OS is that?

In the Log of your previous Mail is nothing to see from libsql, either your 
smtpd.conf is in the wrong Directory, or the Plugin is not installed.

MySQL does listen on an inet-Socket? (AFAIR Port 3306)?

Hmm, Passwords are unencrypted in your SQL-DB?

> master.cf:
>
> # Postfix master process configuration file.  Each logical line
> # describes how a Postfix daemon program should be run.
> #
> #
> ==========================================================================
> # service type  private unpriv  chroot  wakeup  maxproc command + args #   
>            (yes)   (yes)   (yes)   (never) (100)
> #
> ==========================================================================
> smtp      inet  n       -       -       -       -       smtpd -v

The smtpd runs chroot()ed, but because of the inet-Socket of mySQL, this does 
not matter.

> #submission inet n      -       -       -       -       smtpd
> #       -o smtpd_etrn_restrictions=reject
> #628      inet  n       -       -       -       -       qmqpd
> pickup    fifo  n       -       -       60      1       pickup
> cleanup   unix  n       -       -       -       0       cleanup
> qmgr      fifo  n       -       -       300     1       qmgr
> #qmgr     fifo  n       -       -       300     1       oqmgr
> rewrite   unix  -       -       -       -       -       trivial-rewrite
> bounce    unix  -       -       -       -       0       bounce
> defer     unix  -       -       -       -       0       bounce
> trace     unix  -       -       -       -       0       bounce
> verify    unix  -       -       -       -       1       verify
> flush     unix  n       -       -       1000?   0       flush
> proxymap  unix  -       -       n       -       -       proxymap
> smtp      unix  -       -       -       -       -       smtp
> relay     unix  -       -       -       -       -       smtp
> #       -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
> showq     unix  n       -       -       -       -       showq
> error     unix  -       -       -       -       -       error
> local     unix  -       n       n       -       -       local
> virtual   unix  -       n       n       -       -       virtual
> lmtp      unix  -       -       n       -       -       lmtp
> anvil     unix  -       -       n       -       1       anvil
> #
> # Interfaces to non-Postfix software. Be sure to examine the manual
> # pages of the non-Postfix software to find out what options it wants.
> #
> # maildrop. See the Postfix MAILDROP_README file for details.
> #
> maildrop  unix  -       n       n       -       -       pipe
>   flags=DRhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient}
> uucp      unix  -       n       n       -       -       pipe
>   flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail
> ($recipient)
> ifmail    unix  -       n       n       -       -       pipe
>   flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
> bsmtp     unix  -       n       n       -       -       pipe
>   flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -d -t$nexthop -f$sender
> $recipient
> scalemail-backend unix  -       n       n       -       2       pipe
>   flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store
> ${nexthop} ${user} ${extension}
>
> # only used by postfix-tls
> #tlsmgr   fifo  -       -       n       300     1       tlsmgr
> #smtps    inet  n       -       n       -       -       smtpd -o
> smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes
> #587      inet  n       -       n       -       -       smtpd -o
> smtpd_enforce_tls=yes -o smtpd_sasl_auth_enable=yes

-- 
	Andreas