OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Alexander Keller (kelleristac.de)
Date: Fri Feb 16 2001 - 02:07:29 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On 15 Feb 2001, Amos Gouaux wrote:

    > >>>>> On Thu, 15 Feb 2001 14:58:23 +0100 (MET),
    > >>>>> Alexander Keller <kelleristac.de> (ak) writes:
    >
    > ak> I am using the postfix-snapshot 20010204. I try to deliver
    > ak> mail with lmtp to a cyrus 2.0.11 server running on another machine. It
    > ak> seems, that postfix is not trying to authenticate also I think I used the
    > ak> right parameters acording to the LMTP_README.
    >
    > I haven't tinkered with it long enough to be certain I'm not doing
    > something stupid, but I have to admit I've run into similar
    > difficult with the LMTP-AUTH. I'm going to fiddle some more with
    > that.
    >
    > However, with 2.0.11 you can technically get around the LMTP-AUTH
    > requirement if so desired, just make sure that either you bind your

    Thanks for the snipped off explanation, I already have tried a similar
    solution with iptables and a switched off authentication on the cyrus
    side. But I want to understand in addition, why the lmtp authentication
    does not work as I (may be mis-?) understand it.

    Looking at the debug-output ofthe postfix lmtp process I can find:

    Feb 15 15:30:18 sposa5 postfix/lmtp[2905]:
    < localhost[127.0.0.1]: 220 sposa5.istac.de LMTP Cyrus v2.0.11 ready

    Feb 15 15:30:18 sposa5 postfix/lmtp[2905]:
    > localhost[127.0.0.1]: LHLO sposa7.istac.de

    Feb 15 15:30:18 sposa5 postfix/lmtp[2905]:
    < localhost[127.0.0.1]: 250-sposa5.istac.de

    Feb 15 15:30:18 sposa5 postfix/lmtp[2905]:
    < localhost[127.0.0.1]: 250-8BITMIME

    Feb 15 15:30:18 sposa5 postfix/lmtp[2905]:
    < localhost[127.0.0.1]: 250-IGNOREQUOTA

    Feb 15 15:30:18 sposa5 postfix/lmtp[2905]:
    < localhost[127.0.0.1]: 250-ENHANCEDSTATUSCODES

    Feb 15 15:30:19 sposa5 postfix/lmtp[2905]:
    < localhost[127.0.0.1]: 250 PIPELINING

    Feb 15 15:30:19 sposa5 postfix/lmtp[2905]: server features: 0x6

    Feb 15 15:30:19 sposa5 postfix/lmtp[2905]: Using LMTP PIPELINING, send
    buffer size is 4096

    Feb 15 15:30:19 sposa5 postfix/lmtp[2905]:
    > localhost[127.0.0.1]: MAIL FROM:<kelleristac.de>

    Feb 15 15:30:19 sposa5 postfix/lmtp[2905]:
    > localhost[127.0.0.1]: RCPT TO:<testusersposa7.istac.de>

    Feb 15 15:30:19 sposa5 postfix/lmtp[2905]:
    > localhost[127.0.0.1]: DATA

    Feb 15 15:30:19 sposa5 postfix/lmtp[2905]:
    < localhost[127.0.0.1]: 530 Authentication required

    Feb 15 15:30:19 sposa5 postfix/lmtp[2905]: connect to subsystem
    private/bounce
    Feb

    I do not know any details about the lmtp protocol, but as I understand the
    above conversation, the cyrus lmtp server is advertising some of it's
    features, but does not tell the postfix lmtp client to authenticate. Since
    I do not know if this is necessary, may be I have a cyrus problem
    here?? Where should postfix know, that it should authenticate??

    Thanks,
            Alexander