[olug] Postfix/dovecot

Sam Flint harmonicnm7h at gmail.com
Tue Apr 16 01:58:54 UTC 2013


didn't work, postfix says:
smtpd_sasl_type = dovecot
smtpd_sasl_path = /home/vmail/auth
smtpd_sasl_auth_enable = yes
broken_sasl_auth_clients = yes
smtpd_sasl_authenticated_header = yes

dovecot says:
service auth {
  unix_listener /home/vmail/auth {
    group = postfix
    mode = 0660
    user = postfix
  }
  unix_listener auth-master {
    mode = 0600
    user = vmail
  }
  user = root
}

Sam


On Mon, Apr 15, 2013 at 8:37 PM, Lou Duchez <lou at paprikash.com> wrote:

> Reboot the server -- sometimes I find dovecot and postfix won't talk until
> you've done a reboot -- and after that, if there's still a problem, post
> the "smtpd_sasl_path" line from main.cf, plus the "service auth" section
> from dovecot.conf.
>
>
>
>  Apr 16 01:39:40 li455-174 postfix/smtpd[6411]: warning: SASL: Connect to
>> /home/vmail/auth failed: Permission denied
>> Apr 16 01:39:40 li455-174 postfix/smtpd[6411]: fatal: no SASL
>> authentication mechanisms
>> Apr 16 01:39:41 li455-174 postfix/master[6398]: warning: process
>> /usr/libexec/postfix/smtpd pid 6411 exit status 1
>> Apr 16 01:39:41 li455-174 postfix/master[6398]: warning:
>> /usr/libexec/postfix/smtpd: bad command startup -- throttling
>>
>>
>> \Log entries
>>
>>
>> On Mon, Apr 15, 2013 at 8:34 PM, Sam Flint <harmonicnm7h at gmail.com>
>> wrote:
>>
>>  messages still won't send, no server reply.
>>>
>>>
>>> On Mon, Apr 15, 2013 at 8:18 PM, Lou Duchez <lou at paprikash.com> wrote:
>>>
>>>  "smtpd_sasl_path = private/auth" ... two questions.
>>>>
>>>> 1) As you have it written that's a relative path, and that's not good.
>>>>   (Okay, that's not a question.)
>>>>
>>>> 2) Do you have a section in your dovecot.conf that looks like this?
>>>>
>>>> service auth {
>>>>    unix_listener /vmail/passwd {
>>>>      user = postfix
>>>>      group = postfix
>>>>      mode = 0660
>>>>    }
>>>>    user = vmail
>>>> }
>>>>
>>>> In my case, my Dovecot will create a socket at "/vmail/passwd" that
>>>> postfix can access to do its authentications.  Your "unix_listener"
>>>> parameter would need to specifiy "private/auth" (or whatever that needs
>>>> to
>>>> become so the path's not relative).  In your case, you might need to
>>>> change
>>>> the "user = vmail" to something like "user = dovecot".
>>>>
>>>>
>>>>   myhostname = mail.flintfam.org
>>>>
>>>>> mydomain = flintfam.org
>>>>> myorigin = $mydomain
>>>>> inet_interfaces = all
>>>>> inet_protocols = ipv4, ipv6
>>>>> mydestination = $myhostname, localhost, localhost.localdomain
>>>>> #mynetworks = 127.0.0.0/8
>>>>> mynetworks = all
>>>>> relay_domains = .com .org .net .info $mydestination
>>>>> home_mailbox = Maildir/
>>>>> message_size_limit = 30720000
>>>>> # virtual_alias_domains =
>>>>> virtual_alias_maps = proxy:mysql:/etc/postfix/**mysql**
>>>>> -virtual_forwardings.cf <http://mysql-virtual_**forwardings.cf<http://mysql-virtual_forwardings.cf>
>>>>> >,
>>>>> mysql:/etc/postfix/mysql-**vir**tual_email2email.cf<http://virtual_email2email.cf>
>>>>> <http://**mysql-virtual_email2email.cf<http://mysql-virtual_email2email.cf>
>>>>> >
>>>>> virtual_mailbox_domains = proxy:mysql:/etc/postfix/**mysql**
>>>>> -virtual_domains.cf <http://mysql-virtual_domains.**cf<http://mysql-virtual_domains.cf>
>>>>> >
>>>>> virtual_mailbox_maps = proxy:mysql:/etc/postfix/**mysql**
>>>>> -virtual_mailboxes.cf <http://mysql-virtual_**mailboxes.cf<http://mysql-virtual_mailboxes.cf>
>>>>> >
>>>>>
>>>>> virtual_mailbox_base = /home/vmail
>>>>> virtual_uid_maps = static:5000
>>>>> virtual_gid_maps = static:5000
>>>>> smtpd_sasl_type = dovecot
>>>>> smtpd_sasl_path = private/auth
>>>>> smtpd_sasl_auth_enable = yes
>>>>> broken_sasl_auth_clients = yes
>>>>> smtpd_sasl_authenticated_****header = yes
>>>>>
>>>>> smtpd_recipient_restrictions = permit_mynetworks,
>>>>> permit_sasl_authenticated, reject_unauth_destination, permit
>>>>> smtpd_use_tls = yes
>>>>> smtpd_tls_cert_file = /etc/pki/dovecot/certs/****dovecot.pem
>>>>> smtpd_tls_key_file = /etc/pki/dovecot/private/****dovecot.pem
>>>>>
>>>>> virtual_create_maildirsize = yes
>>>>> virtual_maildir_extended = yes
>>>>> proxy_read_maps = $local_recipient_maps $mydestination
>>>>> $virtual_alias_maps
>>>>> $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains
>>>>> $relay_recipient_maps $relay_domains $canonical_maps
>>>>> $sender_canonical_maps
>>>>> $recipient_canonical_maps $relocated_maps $transport_maps $mynetworks
>>>>> $virtual_mailbox_limit_maps
>>>>> virtual_transport = dovecot
>>>>> dovecot_destination_recipient_****limit = 1
>>>>>
>>>>>
>>>>>
>>>>> On Mon, Apr 15, 2013 at 7:23 PM, Lou Duchez <lou at paprikash.com> wrote:
>>>>>
>>>>>   Let's see yer main.cf.
>>>>>
>>>>>>
>>>>>>    none related to dovecot, just that it isn't allowed to relay
>>>>>>
>>>>>>  On Mon, Apr 15, 2013 at 7:21 PM, Lou Duchez <lou at paprikash.com>
>>>>>>> wrote:
>>>>>>>
>>>>>>>    What are the messages you're getting now?
>>>>>>>
>>>>>>>      I just did an en passant replacement of the conf with the
>>>>>>>> output of
>>>>>>>>
>>>>>>>>   dovecot
>>>>>>>>
>>>>>>>>> -n.  Now what about postfix and sending
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> On Mon, Apr 15, 2013 at 6:39 PM, Lou Duchez <lou at paprikash.com>
>>>>>>>>> wrote:
>>>>>>>>>
>>>>>>>>>     It's giving you all kinds of warnings, why not act on them?
>>>>>>>>>  It's
>>>>>>>>> more or
>>>>>>>>>
>>>>>>>>>   less telling you what to fix.
>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>>      Does anyone have any ideas?
>>>>>>>>>>
>>>>>>>>>>    On Sun, Apr 14, 2013 at 4:45 PM, Sam Flint <
>>>>>>>>>> harmonicnm7h at gmail.com>
>>>>>>>>>>
>>>>>>>>>>  wrote:
>>>>>>>>>>>
>>>>>>>>>>>      Well, for postfix, it now accepts email, but when it sends
>>>>>>>>>>> it
>>>>>>>>>>> through
>>>>>>>>>>>
>>>>>>>>>>>    dovecot, dovecot complains, and the email won't go through.
>>>>>>>>>>>  Log
>>>>>>>>>>>
>>>>>>>>>>>  entry:
>>>>>>>>>>>>
>>>>>>>>>>>>               Apr 14 19:22:32 li455-174 postfix/qmgr[24423]:
>>>>>>>>>>>> 2C4B69382:
>>>>>>>>>>>>               from=<harmonicnm7h at gmail.com>, size=1911, nrcpt=1
>>>>>>>>>>>> (queue
>>>>>>>>>>>>               active)
>>>>>>>>>>>>               Apr 14 19:22:32 li455-174 postfix/pipe[32234]:
>>>>>>>>>>>> 2C4B69382:
>>>>>>>>>>>>               to=<swflint at flintfam.org>, relay=dovecot,
>>>>>>>>>>>> delay=433995,
>>>>>>>>>>>>               delays=433994/0.04/0/0.11, dsn=4.3.0,
>>>>>>>>>>>> status=deferred
>>>>>>>>>>>>               (temporary failure. Command output: doveconf:
>>>>>>>>>>>> Warning:
>>>>>>>>>>>> NOTE:
>>>>>>>>>>>>               You can get a new clean config file with: doveconf
>>>>>>>>>>>> -n >
>>>>>>>>>>>>               dovecot-new.conf doveconf: Warning: Obsolete
>>>>>>>>>>>> setting
>>>>>>>>>>>> in
>>>>>>>>>>>>               /etc/dovecot/dovecot.conf:25: add auth_ prefix to
>>>>>>>>>>>> all
>>>>>>>>>>>> settings
>>>>>>>>>>>>               inside auth {} and remove the auth {} section
>>>>>>>>>>>> completely
>>>>>>>>>>>>               doveconf: Warning: Obsolete setting in
>>>>>>>>>>>>               /etc/dovecot/dovecot.conf:26: auth_user has been
>>>>>>>>>>>> replaced by
>>>>>>>>>>>>               service auth { user } doveconf: Warning: Obsolete
>>>>>>>>>>>> setting in
>>>>>>>>>>>>               /etc/dovecot/dovecot.conf:28: passdb  {} has been
>>>>>>>>>>>> replaced
>>>>>>>>>>>> by
>>>>>>>>>>>>               passdb { driver= } doveconf: Warning: Obsolete
>>>>>>>>>>>> setting in
>>>>>>>>>>>>               /etc/dovecot/dovecot.conf:33: userdb  {} has been
>>>>>>>>>>>> replaced
>>>>>>>>>>>> by
>>>>>>>>>>>>               userdb { driver= } Can't open log file
>>>>>>>>>>>>               /home/vmail/dovecot-deliver.**********log:
>>>>>>>>>>>> Permission
>>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>> denied )
>>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>>               Apr 14 19:22:32 li455-174 postfix/qmgr[24423]:
>>>>>>>>>>>> 2C4B69382:
>>>>>>>>>>>>               from=<harmonicnm7h at gmail.com>, status=expired,
>>>>>>>>>>>> returnedto
>>>>>>>>>>>>               sender
>>>>>>>>>>>>
>>>>>>>>>>>> Postfix also refuses to send email out, error in webmail app is:
>>>>>>>>>>>>
>>>>>>>>>>>>              Transaction failed
>>>>>>>>>>>>              554 5.7.1 <harmonicnm7h at gmail.com>: Relay access
>>>>>>>>>>>> denied
>>>>>>>>>>>>
>>>>>>>>>>>> Log has:
>>>>>>>>>>>>
>>>>>>>>>>>>              Apr 14 21:49:12 li455-174 postfix/smtpd[32585]:
>>>>>>>>>>>> connect
>>>>>>>>>>>> from
>>>>>>>>>>>>              localhost[::1]
>>>>>>>>>>>>              Apr 14 21:49:12 li455-174 postfix/smtpd[32585]:
>>>>>>>>>>>> NOQUEUE:
>>>>>>>>>>>> reject:
>>>>>>>>>>>>              RCPT from localhost[::1]: 554 5.7.1 <
>>>>>>>>>>>> harmonicnm7h at gmail.com
>>>>>>>>>>>>
>>>>>>>>>>>>   :
>>>>>>>>>>>>
>>>>>>>>>>>>>               Relay access denied; from=<swflint at flintfam.org>
>>>>>>>>>>>>>
>>>>>>>>>>>>              to=<harmonicnm7h at gmail.com> proto=ESMTP helo=<
>>>>>>>>>>>> flintfam.org>
>>>>>>>>>>>>              Apr 14 21:49:12 li455-174 postfix/smtpd[32585]:
>>>>>>>>>>>> lost
>>>>>>>>>>>> connection
>>>>>>>>>>>>              after RCPT from localhost[::1]
>>>>>>>>>>>>              Apr 14 21:49:12 li455-174 postfix/smtpd[32585]:
>>>>>>>>>>>> disconnect
>>>>>>>>>>>> from
>>>>>>>>>>>> localhost[::1]
>>>>>>>>>>>>
>>>>>>>>>>>> Thanks,
>>>>>>>>>>>> Sam
>>>>>>>>>>>>
>>>>>>>>>>>> --
>>>>>>>>>>>> Sam Flint
>>>>>>>>>>>> Happy Hacking!
>>>>>>>>>>>> swflint at flintfam.org
>>>>>>>>>>>> flintfam.org/~swflint
>>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>>      ______________________________**********_________________
>>>>>>>>>>>>
>>>>>>>>>>>>  OLUG mailing list
>>>>>>>>>>>
>>>>>>>>>> OLUG at olug.org
>>>>>>>>>> https://lists.olug.org/**********mailman/listinfo/olug<https://lists.olug.org/********mailman/listinfo/olug>
>>>>>>>>>> <https:/**/lists.olug.org/******mailman/**listinfo/olug<https://lists.olug.org/******mailman/listinfo/olug>
>>>>>>>>>> >
>>>>>>>>>> <https://**lists.olug.org/******mailman/**listinfo/olug<http://lists.olug.org/****mailman/**listinfo/olug>
>>>>>>>>>> <https:**//lists.olug.org/****mailman/**listinfo/olug<https://lists.olug.org/****mailman/listinfo/olug>
>>>>>>>>>> >
>>>>>>>>>> <https://**lists.olug.org/******mailman/**listinfo/olug<http://lists.olug.org/****mailman/**listinfo/olug>
>>>>>>>>>> <http:/**/lists.olug.org/**mailman/****listinfo/olug<http://lists.olug.org/**mailman/**listinfo/olug>
>>>>>>>>>> >
>>>>>>>>>> <https:**//lists.olug.org/****mailman/**listinfo/olug<http://lists.olug.org/**mailman/**listinfo/olug>
>>>>>>>>>> <https:**//lists.olug.org/**mailman/**listinfo/olug<https://lists.olug.org/**mailman/listinfo/olug>
>>>>>>>>>> >
>>>>>>>>>> <https://**lists.olug.org/******mailman/**listinfo/olug<http://lists.olug.org/****mailman/**listinfo/olug>
>>>>>>>>>> <http:/**/lists.olug.org/**mailman/****listinfo/olug<http://lists.olug.org/**mailman/**listinfo/olug>
>>>>>>>>>> >
>>>>>>>>>> <http:/**/lists.olug.org/**mailman/****listinfo/olug<http://lists.olug.org/mailman/****listinfo/olug>
>>>>>>>>>> <http**://lists.olug.org/mailman/****listinfo/olug<http://lists.olug.org/mailman/**listinfo/olug>
>>>>>>>>>> >
>>>>>>>>>> <https:**//lists.olug.org/****mailman/**listinfo/olug<http://lists.olug.org/**mailman/**listinfo/olug>
>>>>>>>>>> <http:/**/lists.olug.org/mailman/****listinfo/olug<http://lists.olug.org/mailman/**listinfo/olug>
>>>>>>>>>> >
>>>>>>>>>>
>>>>>>>>>> <https:**//lists.olug.org/**mailman/**listinfo/olug<http://lists.olug.org/mailman/**listinfo/olug>
>>>>>>>>>> <https:**//lists.olug.org/mailman/**listinfo/olug<https://lists.olug.org/mailman/listinfo/olug>
>>>>>>>>>> >
>>>>>>>>>>     ______________________________********_________________
>>>>>>>>>>
>>>>>>>>> OLUG mailing list
>>>>>>>> OLUG at olug.org
>>>>>>>> https://lists.olug.org/********mailman/listinfo/olug<https://lists.olug.org/******mailman/listinfo/olug>
>>>>>>>> <https://**lists.olug.org/****mailman/**listinfo/olug<https://lists.olug.org/****mailman/listinfo/olug>
>>>>>>>> >
>>>>>>>> <https://**lists.olug.org/****mailman/**listinfo/olug<http://lists.olug.org/**mailman/**listinfo/olug>
>>>>>>>> <https:**//lists.olug.org/**mailman/**listinfo/olug<https://lists.olug.org/**mailman/listinfo/olug>
>>>>>>>> >
>>>>>>>> <https://**lists.olug.org/****mailman/**listinfo/olug<http://lists.olug.org/**mailman/**listinfo/olug>
>>>>>>>> <http:/**/lists.olug.org/mailman/****listinfo/olug<http://lists.olug.org/mailman/**listinfo/olug>
>>>>>>>> >
>>>>>>>> <https:**//lists.olug.org/**mailman/**listinfo/olug<http://lists.olug.org/mailman/**listinfo/olug>
>>>>>>>> <https:**//lists.olug.org/mailman/**listinfo/olug<https://lists.olug.org/mailman/listinfo/olug>
>>>>>>>> >
>>>>>>>>
>>>>>>>>    ______________________________******_________________
>>>>>>>
>>>>>> OLUG mailing list
>>>>>> OLUG at olug.org
>>>>>> https://lists.olug.org/******mailman/listinfo/olug<https://lists.olug.org/****mailman/listinfo/olug>
>>>>>> <https://**lists.olug.org/**mailman/**listinfo/olug<https://lists.olug.org/**mailman/listinfo/olug>
>>>>>> >
>>>>>> <https://**lists.olug.org/**mailman/**listinfo/olug<http://lists.olug.org/mailman/**listinfo/olug>
>>>>>> <https:**//lists.olug.org/mailman/**listinfo/olug<https://lists.olug.org/mailman/listinfo/olug>
>>>>>> >
>>>>>>
>>>>>>
>>>>>  ______________________________****_________________
>>>> OLUG mailing list
>>>> OLUG at olug.org
>>>> https://lists.olug.org/****mailman/listinfo/olug<https://lists.olug.org/**mailman/listinfo/olug>
>>>> <https://**lists.olug.org/mailman/**listinfo/olug<https://lists.olug.org/mailman/listinfo/olug>
>>>> >
>>>>
>>>>
>>>
>>> --
>>> Sam Flint
>>> flintfam.org/~swflint
>>>
>>>
>>
>>
> ______________________________**_________________
> OLUG mailing list
> OLUG at olug.org
> https://lists.olug.org/**mailman/listinfo/olug<https://lists.olug.org/mailman/listinfo/olug>
>



-- 
Sam Flint
flintfam.org/~swflint



More information about the OLUG mailing list