OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Upgrade from Sarge to Etch Has Broken my Postfix

From: Patrick Ben Koetter (pstate-of-mind.de)
Date: Tue Apr 01 2008 - 17:49:03 CDT

* Patrick Ben Koetter <pstate-of-mind.de>:
> > -- mechanisms on smtp.patriot.net --
>
> Here's should be some output from a telnet session to your relayhost.
> The question is what they are offering and if any of their mechanisms matches
> one in your set of SASL mechs.
>
> Can you telnet to their server? All I get is this:
>
> $ telnet smtp.patriot.net 587
> EHLO gw.state-of-mind.de
> 554 jefferson.patriot.net ESMTP not accepting messages
> 250-jefferson.patriot.net Hello gw.state-of-mind.de [62.245.202.194], pleased to meet you
> 250 ENHANCEDSTATUSCODES
> QUIT
>
> If you get that too, then truly no mechanism is available and that would
> match your error message:
>
> (SASL authentication failed; cannot authenticate to server
> smtp.patriot.net[209.249.176.3]: no mechanism available)
>
> Interestingly I couldn't find the string "no mechanism available" in the
> Postfix 2.5.1 code. My guess is, its Cyrus SASL complaining about the absence
> of SASL mechs. At least src/smtp/smtp_sasl_glue.c lets me think its Cyrus
> SASL. But that's pure speculation; I can't program and can't read code well
> either. ;)

Further research in lib/common.c of Cyrus SASL indicates that "no mechanism
available" is an error message in case of SASL_NOMECH.

I think your relayhost does not offer SMTP AUTH to your (and my) host.

However if you set smtp.patriot.net as relayhost and if you provide SMTP AUTH
credentials in a sasl map, Postfix will try to authenticate.

Sure, you set the correct relayhost? Did they change the setup and you think
its your configuration because you udpated at the same time?

We need telnet output from your host to smtp.patriot.net to find out if it
offers AUTH to your host.

prick

--
The Book of Postfix
<http://www.postfix-book.com>
saslfinger (debugging SMTP AUTH):
<http://postfix.state-of-mind.de/patrick.koetter/saslfinger/>