IMAP works, but no SMTP (for sending mail)

[benjamin200 at arcor.de]

Hello,

Domain server.linux-world.site
Accountuser: 10001
Passwort: test

###########################
In 64-bit-based-code this should be MTAwMDEAMTAwMDEAdGVzdA==

root at server benjamin # printf 'MTAwMDEAMTAwMDEAdGVzdA==' | mimencode -u ; echo
1000110001test
root at server benjamin #
###########################



Here some detailed login debugging:
root at server sasl2 # testsaslauthd -u 10001 -p test -s smtp
0: OK "Success."
root at server sasl2 #

Log:
Feb 16 13:17:29 server saslauthd[8527]: rel_accept_lock : released accept lock
Feb 16 13:17:29 server saslauthd[8528]: get_accept_lock : acquired accept lock
Feb 16 13:17:29 server saslauthd[8527]: insert into log (msg, user, host, pid, time) values('AUTH SUCCESSFUL', '10001', '', '8527', NOW())
Feb 16 13:17:29 server saslauthd[8527]: do_auth         : auth success: [user=10001] [service=smtp] [realm=] [mech=pam]
Feb 16 13:17:29 server saslauthd[8527]: do_request      : response: OK



root at server sasl2 # testsaslauthd -u 10001 -p test -s imap
0: OK "Success."
root at server sasl2 #

Log:
Feb 16 13:18:08 server saslauthd[8528]: rel_accept_lock : released accept lock
Feb 16 13:18:08 server saslauthd[8529]: get_accept_lock : acquired accept lock
Feb 16 13:18:08 server saslauthd[8528]: insert into log (msg, user, host, pid, time) values('AUTH SUCCESSFUL', '10001', '', '8528', NOW())
Feb 16 13:18:08 server saslauthd[8528]: do_auth         : auth success: [user=10001] [service=imap] [realm=] [mech=pam]
Feb 16 13:18:08 server saslauthd[8528]: do_request      : response: OK



If I now use a mail-client, or get direct on the server, using telnet and try to authenticate myself with the 64-bit-based code “MTAwMDEAMTAwMDEAdGVzdA==” I get no always an failed login.

My /usr/lib/sasl2/smtpd.conf have the following include:
pwcheck_method: saslauthd

My /etc/pam.d/smtp & pop & imap sieve have the following include:
auth sufficient pam_mysql.so user=mailadmin passwd=geheim host=localhost db=mail table=accountuser usercolumn=username passwd$

account required pam_mysql.so user=mailadmin passwd=geheim host=localhost db=mail table=accountuser usercolumn=username passw$


Ok, now I try to connect using telnet:

root at server sasl2 # telnet localhost 25
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
220 server.linux-world.site ESMTP Postfix
ehlo bla
250-server.linux-world.site
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-AUTH CRAM-MD5 DIGEST-MD5 LOGIN PLAIN NTLM
250-AUTH=CRAM-MD5 DIGEST-MD5 LOGIN PLAIN NTLM
250 8BITMIME
AUTH PLAIN MTAwMDEAMTAwMDEAdGVzdA==
535 Error: authentication failed



Log (telnet session and authentication error):
Feb 16 13:26:34 server postfix/smtpd[8833]: < localhost[127.0.0.1]: ehlo bla
Feb 16 13:26:34 server postfix/smtpd[8833]: > localhost[127.0.0.1]: 250-server.linux-world.site
Feb 16 13:26:34 server postfix/smtpd[8833]: > localhost[127.0.0.1]: 250-PIPELINING
Feb 16 13:26:34 server postfix/smtpd[8833]: > localhost[127.0.0.1]: 250-SIZE 10240000
Feb 16 13:26:34 server postfix/smtpd[8833]: > localhost[127.0.0.1]: 250-VRFY
Feb 16 13:26:34 server postfix/smtpd[8833]: > localhost[127.0.0.1]: 250-ETRN
Feb 16 13:26:34 server postfix/smtpd[8833]: > localhost[127.0.0.1]: 250-AUTH CRAM-MD5 DIGEST-MD5 LOGIN PLAIN NTLM
Feb 16 13:26:34 server postfix/smtpd[8833]: > localhost[127.0.0.1]: 250-AUTH=CRAM-MD5 DIGEST-MD5 LOGIN PLAIN NTLM
Feb 16 13:26:34 server postfix/smtpd[8833]: match_list_match: localhost: no match
Feb 16 13:26:34 server postfix/smtpd[8833]: match_list_match: 127.0.0.1: no match
Feb 16 13:26:34 server postfix/smtpd[8833]: > localhost[127.0.0.1]: 250 8BITMIME
Feb 16 13:26:34 server postfix/smtpd[8833]: watchdog_pat: 0x80a9b78
Feb 16 13:26:53 server postfix/smtpd[8833]: < localhost[127.0.0.1]: AUTH PLAIN MTAwMDEAMTAwMDEAdGVzdA==
Feb 16 13:26:53 server postfix/smtpd[8833]: smtpd_sasl_authenticate: sasl_method PLAIN, init_response MTAwMDEAMTAwMDEAdGVzdA==
Feb 16 13:26:53 server postfix/smtpd[8833]: smtpd_sasl_authenticate: decoded initial response 10001
Feb 16 13:26:53 server postfix/smtpd[8833]: warning: SASL authentication failure: Could not open /etc/sasl2/sasldb2: gdbm_errno=3
Feb 16 13:26:53 server postfix/smtpd[8833]: warning: SASL authentication failure: Could not open /etc/sasl2/sasldb2: gdbm_errno=3
Feb 16 13:26:53 server postfix/smtpd[8833]: warning: SASL authentication failure: Password verification failed
Feb 16 13:26:53 server postfix/smtpd[8833]: warning: localhost[127.0.0.1]: SASL PLAIN authentication failed
Feb 16 13:26:53 server postfix/smtpd[8833]: > localhost[127.0.0.1]: 535 Error: authentication failed
Feb 16 13:26:53 server postfix/smtpd[8833]: watchdog_pat: 0x80a9b78



Any suggestion how to solve this issue? Should I post some more information for debug – what does you need?


Thanks,
Benjamin





> benjamin200 at arcor.de wrote:
> > Feb 15 10:49:24 server postfix/smtpd[23837]: sql_select option missing
> [...]
> > sql_select: select password from accountuser where username='%u@%r'
> 
> I guess your config line is somehow wrong. :)
> 
> > But I get always the same errors. It doesn’t work. Could you help.
> > Should I give you more information – what does you need?
> 
> I don't have experience with mysql auth, I use sasldb2. I think reading
> details on the sql auxprop plugin and the sql_engine mysql may reveal
> how this string is supposed to be, or googling after other howtos may be
> a first step.
> 
> > P.S:
> > Saslauth works:
> >
> > root at server sasl2 # testsaslauthd -u 10001 -p test
> > 0: OK "Success."
> > root at server sasl2 #
> 
> I may be wrong, but it then should work with the first version with
> pwcheck_method: saslauthd or at least give different log output.
> 
> Yours, Uwe
> 
> -- 
> Uwe Menges, PGP Key ID 0x29F2841F
> Encrypted e-mail preferred, see [http://gnupg.org] or [http://pgpi.org]
> ---
> Cyrus Home Page: http://asg.web.cmu.edu/cyrus
> Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
> 

Arcor-DSL: die echte Flatrate für alle Bandbreiten. Jetzt ohne Einrichtungspreis
einsteigen oder wechseln. Arcor-DSL ist in vielen Anschlussgebieten verfügbar.
http://www.arcor.de/home/redir.php/emf-dsl-1


---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html