Debian, Postfix und SMTP-Auth-Problem

[perlitz]

Hallo,

ich scheitere grade daran, auf debian postfix SMTP-Auth "beizubringen" . Unter SuSE stellt dies kein Problem dar (Cyrus-SASL2...)

Status: postfix-tls libsasl2-modules sasl2-bin sind installiert.

SMTP-Auth will jedoch nicht :roll: Leider sind die Dokus / Howtos meist für SuSE und nicht für Debian... Somit treffen die meisten angaben leider nicht zu :(

Ich komme nicht weiter, hat jemand nen Tipp für mich?

mail.log

Code: Select all

NOQUEUE: reject: RCPT from dslb.pools.arcor-ip.net[xxx.xxx.xxx.xxx]: 554 <test@test.de>: Relay access denied; from=<meine_email@meinedomain.de> to=<test@test.de> proto=ESMTP helo=<pc>

dpkg -l | grep postfix

Code: Select all

postfix        2.1.5-9        A high-performance mail transport agent
postfix-tls    2.1.5-9        TLS and SASL support for Postfix

dpkg -l | grep sas

Code: Select all

libsasl2       2.1.19-1.5     Authentication abstraction library
libsasl2-modul 2.1.19-1.5     Pluggable Authentication Modules for SASL
sasl2-bin      2.1.19-1.5     Programs for manipulating the SASL users dat
spamassassin   3.1.0a-2       Perl-based spam filter using text analysis
spamc          3.1.0a-2       Client for SpamAssassin spam filtering daemo

postconf -n

Code: Select all

alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
append_dot_mydomain = no
biff = no
broken_sasl_auth_clients = yes
config_directory = /etc/postfix
inet_interfaces = all
mailbox_command = procmail -a "$EXTENSION"
mailbox_size_limit = 0
mydestination = meinserver.de, 1234567.meinserver.de, localhost.meinserver.net, localhost
myhostname = 1234567.meinserver.de
mynetworks = 127.0.0.0/8
myorigin = /etc/mailname
recipient_delimiter = +
relayhost =
smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain = $myhostname
smtpd_sasl_security_options = noanonymous, noplaintext
smtpd_tls_auth_only = no

master.cf

Code: Select all

smtp      inet  n       -       -       -       -       smtpd
#submission inet n      -       -       -       -       smtpd
#       -o smtpd_etrn_restrictions=reject
#628      inet  n       -       -       -       -       qmqpd
pickup    fifo  n       -       -       60      1       pickup
cleanup   unix  n       -       -       -       0       cleanup
qmgr      fifo  n       -       -       300     1       qmgr
#qmgr     fifo  n       -       -       300     1       oqmgr
rewrite   unix  -       -       -       -       -       trivial-rewrite
bounce    unix  -       -       -       -       0       bounce
defer     unix  -       -       -       -       0       bounce
trace     unix  -       -       -       -       0       bounce
verify    unix  -       -       -       -       1       verify
flush     unix  n       -       -       1000?   0       flush
proxymap  unix  -       -       n       -       -       proxymap
smtp      unix  -       -       -       -       -       smtp
relay     unix  -       -       -       -       -       smtp
#       -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
showq     unix  n       -       -       -       -       showq
error     unix  -       -       -       -       -       error
local     unix  -       n       n       -       -       local
virtual   unix  -       n       n       -       -       virtual
lmtp      unix  -       -       n       -       -       lmtp
anvil     unix  -       -       n       -       1       anvil
#
# Interfaces to non-Postfix software. Be sure to examine the manual
# pages of the non-Postfix software to find out what options it wants.
#
# maildrop. See the Postfix MAILDROP_README file for details.
#
maildrop  unix  -       n       n       -       -       pipe
  flags=DRhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient}
uucp      unix  -       n       n       -       -       pipe
  flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
ifmail    unix  -       n       n       -       -       pipe
  flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp     unix  -       n       n       -       -       pipe
  flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -d -t$nexthop -f$sender $recipient
scalemail-backend unix  -       n       n       -       2       pipe
  flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${extension}

[perlitz]

Hallo,

ich springe hier noch ausm Fenster... Versuche schon über 12 Stunden auf nem debian smtp-auth mit Postfix hinzubekomen...

Keiner nen Tipp?

Zur Zeit stehe ich hier:
mail.log

Code: Select all

warning: SASL authentication failure: cannot connect to saslauthd server: No such file or directory

main.cf

Code: Select all

smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
smtpd_sasl_local_domain =
broken_sasl_auth_clients = yes
smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination

master.cf

Code: Select all

smtp      inet  n       -       -       -       -       smtpd
#submission inet n      -       -       -       -       smtpd
#       -o smtpd_etrn_restrictions=reject
#628      inet  n       -       -       -       -       qmqpd
pickup    fifo  n       -       -       60      1       pickup
cleanup   unix  n       -       -       -       0       cleanup
qmgr      fifo  n       -       -       300     1       qmgr
#qmgr     fifo  n       -       -       300     1       oqmgr
rewrite   unix  -       -       -       -       -       trivial-rewrite
bounce    unix  -       -       -       -       0       bounce
defer     unix  -       -       -       -       0       bounce
trace     unix  -       -       -       -       0       bounce
verify    unix  -       -       -       -       1       verify
flush     unix  n       -       -       1000?   0       flush
proxymap  unix  -       -       n       -       -       proxymap
smtp      unix  -       -       -       -       -       smtp
relay     unix  -       -       -       -       -       smtp
#       -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
showq     unix  n       -       -       -       -       showq
error     unix  -       -       -       -       -       error
local     unix  -       n       n       -       -       local
virtual   unix  -       n       n       -       -       virtual
lmtp      unix  -       -       n       -       -       lmtp
anvil     unix  -       -       n       -       1       anvil
#
# Interfaces to non-Postfix software. Be sure to examine the manual
# pages of the non-Postfix software to find out what options it wants.
#
# maildrop. See the Postfix MAILDROP_README file for details.
#
maildrop  unix  -       n       n       -       -       pipe
  flags=DRhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient}
uucp      unix  -       n       n       -       -       pipe
  flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
ifmail    unix  -       n       n       -       -       pipe
  flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp     unix  -       n       n       -       -       pipe
  flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -d -t$nexthop -f$sender $recipient
scalemail-backend unix  -       n       n       -       2       pipe
  flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${extension}

/etc/default/saslauthd

Code: Select all

START=yes
MECHANISMS="pam"

/etc/postfix/sasl/smtpd.conf

Code: Select all

pwcheck_method: saslauthd
mech_list: PLAIN LOGIN
saslauthd_path: /var/run/saslauthd/mux
autotransition: true

[perlitz]

ach ja

Code: Select all

/etc/postfix/sasl# ps aux | grep sas
root      1166  0.0  0.1  6552 1580 ?        Ss   19:25   0:00 /usr/sbin/saslauthd -a pam
root      1167  0.0  0.1  6552 1580 ?        S    19:25   0:00 /usr/sbin/saslauthd -a pam
root      1168  0.0  0.1  6552 1580 ?        S    19:25   0:00 /usr/sbin/saslauthd -a pam
root      1169  0.0  0.1  6552 1580 ?        S    19:25   0:00 /usr/sbin/saslauthd -a pam
root      1170  0.0  0.1  6552 1580 ?        S    19:25   0:00 /usr/sbin/saslauthd -a pam

[captaincrunch]

cat /etc/default/saslauthd:

# This needs to be uncommented before saslauthd will be run automatically
START=yes

# You must specify the authentication mechanisms you wish to use.
# This defaults to "pam" for PAM support, but may also include
# "shadow" or "sasldb", like this:
# MECHANISMS="pam shadow"

MECHANISMS="pam"
PARAMS="-m /var/spool/postfix/var/run/saslauthd"
PWDIR="/var/spool/postfix/var/run/saslauthd"
PIDFILE="/var/spool/postfix/var/run/${NAME}/saslauthd.pid"

[perlitz]

unglaublich, ich habs ;)

die /etc/pam.d/ war "durcheinander" mit dieser

Code: Select all

auth required /lib/security/pam_unix_auth.so
account required /lib/security/pam_unix_acct.so
password required /lib/security/pam_unix_passwd.so
session required /lib/security/pam_unix_session.so

gehts jetzt 8)

Thanx