Questions tagged [sasl]

37 questions
14
votes
1 answer

Postfix: disable authentication through port 25

When using Postfix and IMAP on a mailserver, at least 3 ports are usually opened 25 smtp : incoming emails from anybody (whole internet) 465 smtps : outgoing emails from authorized users (to the whole intenet) 993 imap : imap for authorized…
Martin Vegter
  • 69
  • 66
  • 195
  • 326
6
votes
1 answer

Postfix using OAuth2 authentication for relay host

I tried to set up postfix with Google as its relay host but failed miserably. Google switched to OAuth2 authentication and deprecated other authentication methods. This is why I tried to use the new OAuth2 authentication and not the old…
Andreas Matthias
  • 201
  • 1
  • 3
  • 5
5
votes
3 answers

Configuring mbsync with AuthMech XOAUTH2

I can't seem to figure out how to get mbsync to work with OAuth for Gmail because I can't get mbsync to find the xoauth2 sasl plugin on Ubuntu. I'm fairly confident that everything about my mbsync config for OAuth is working correctly (e.g. manually…
jackmac92
  • 51
  • 1
  • 5
4
votes
3 answers

Appending a pem to another

I found a blog that helped me relay postfix through smtp.gmail.com with SASL authentication. One of the steps was: cat /etc/ssl/certs/Thawte_Premium_Server_CA.pem | \ sudo tee -a /etc/postfix/smtp_cacert.pem When I read something…
Mike Pennington
  • 2,452
  • 4
  • 31
  • 40
3
votes
1 answer

Enabling SASL authentication mechanisms in openLDAP using OLC

All of the information that I have been able to find about enabling SASL mechanisms for openldap still use the slapd.conf method while all modern LDAP directories have elected to use OLC over a static file. Does anyone have information on how to add…
Andrew Meyer
  • 161
  • 1
  • 5
3
votes
0 answers

Postfix SMTP client won't authenticate with AUTH LOGIN

Log extract: 127.0.0.1[127.0.0.1]:11127: 250-AUTH LOGIN PLAIN maps_find: smtp_sasl_passwd: hash:/etc/postfix/sasl_passwd(0,lock|fold_fix): [127.0.0.1]:11127 = XXXX smtp_sasl_passwd_lookup: host `127.0.0.1' user `XXXXXX` pass `XXXXX` starting new…
flymike
  • 131
  • 1
  • 4
3
votes
2 answers

Why doesn't Postfix reject a specific client's connection attempts?

My SMTP server is being probed. It looks like a brute force attach on SASL, where they're going through a password dictionary. Having seen thousands of these lines in the log files Sep 18 14:09:52 xxx postfix/smtpd[7412]: connect from…
patschiboy
  • 133
  • 1
  • 5
2
votes
1 answer

SSH Authentication Mechanism

Doing a personal research project and I'm wondering: Why does SSH do its own mechanism negotiation rather than use SASL? At first I thought it might be to ensure confidentiality of the whole session, but looking at the wikipedia page it looks like…
Bratchley
  • 16,684
  • 13
  • 64
  • 103
2
votes
1 answer

Warning in the logs of Postfix: "restriction NNN ignored: no SASL support". But it does have SASL support

I have postfix + dovecot + pgsql. All has been working. Recently I've changed something in the config to combat spam. Now I see this in the logs: localhost postfix/smtpd[2299]: warning: restriction `reject_authenticated_sender_login_mismatch'…
nylypej
  • 239
  • 2
  • 9
2
votes
1 answer

zpool status hangs forever

Openindiana oi_151a7. zpool with 15x 1TB raidz3 + 2x 8 disk 2TB raidz2. Many disk operations such as zpool status, creating a new iscsi volume (using sbdadm) etc hangs. Using iostat (-xne) I can determine that two block devices have errors, one is…
3molo
  • 191
  • 1
  • 6
1
vote
2 answers

Is my connection to my Postfix server encrypted?

I would like to use my Thunderbird client to send mails trough my Postfix server running on port 25 (SMTP). I would like an authenticated and encrypted connection. I followed these…
YuGiOhJCJ
  • 113
  • 4
1
vote
3 answers

How is sendmail SMTP authentication logging controlled?

I get a ton of failed SMTP login attempts. I'd really like to defend against it, but the logging of those attempts is poor. I'm using sendmail 8.15, cyrus-sasl 2.1.26. The SASL setup is the simplest way, defaults all around, authenticating with…
Hack Saw
  • 1,004
  • 7
  • 14
1
vote
0 answers

SASL Authentication failure

Created an user with # adduser username The configuration file /etc/sysconfig/saslauthd: # Directory in which to place saslauthd's listening socket, pid file, and so # on. This directory must already exist. SOCKETDIR=/run/saslauthd # Mechanism…
Gotenks
  • 193
  • 1
  • 9
1
vote
1 answer

Cannot connect to SMTP server

I'm unable to establish a connection to my server's SMTP server, it gets closed immediately. telnet x.x.x.x 25 Trying x.x.x.x... Connected to xxxxxx.xxx. Escape character is '^]'. Connection closed by foreign host. Postfix's main.cf…
Gotenks
  • 193
  • 1
  • 9
1
vote
1 answer

SASL authentication failure: client response doesn't match what we generated

The following tutorial has been used to setup a virtual mail server: How to set up a mail server on a GNU / Linux system Everything works fine, though every time a message is being sent the following errors appear: mail postfix/smtpd[10569]:…
Ioannis
  • 21
  • 6
1
2 3