OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Issues with SMTP Authentication

From: Andreas Winkelmann (mlawinkelmann.de)
Date: Mon Jan 15 2007 - 06:54:00 CST


On Sunday 14 January 2007 22:42, Jason Williard wrote:

> I am in the process of setting up a Postfix mail server with SMTP
> authentication. While I have never had issues with this in the past,
> I am currently having problems getting it to work. When I send a
> message manually, I get the following:
>
> [rootserver postfix]# telnet localhost 25
> Trying 127.0.0.1...
> Connected to localhost.
> Escape character is '^]'.
> 220 server ESMTP
> ehlo localhost
> 250-server
> 250-PIPELINING
> 250-SIZE 10240000
> 250-ETRN
> 250-AUTH PLAIN LOGIN DIGEST-MD5
> 250-AUTH=PLAIN LOGIN DIGEST-MD5
> 250-ENHANCEDSTATUSCODES
> 250-8BITMIME
> 250 DSN
> AUTH PLAIN xxxxx
> 535 5.7.0 Error: authentication failed: bad protocol / cancel
>
> Postfix was compiled using CyrusSASL 2.1.19-5 on a Red Hat Enterprise
> 4 server. Cyrus came pre-installed via RPM. I have placed the
> following lines in my main.cf file to enable smtp auth:
>
> smtpd_sasl_auth_enable = yes
> broken_sasl_auth_clients = yes
> smtpd_recipient_restrictions =
> permit_sasl_authenticated,
> permit_mynetworks,
> ...
>
> As well, I have placed the following in /usr/lib/sasl2/smtpd.conf and
> turned saslauthd on.
>
> pwcheck_method: saslauthd
> mech_list: plain login digest-md5

Remove DIGEST-MD5 from here (saslauthd does not support it) and do the test
with a real MUA. The telnet-Test is only reasonable, if you know what you are
doing.

--
        Andreas