nico/www.nico.schottelius.org
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

import blog article

Browse source 
from http://nico.schottelius.org/notizbuch-blog/archive/2008/10/07/solution-for-postfix-with-postgres-sasl-error-authentication-failed-authentication-failure

Signed-off-by: Nico Schottelius <nico@ikn.schottelius.org>
This commit is contained in:
Nico Schottelius 2009-09-04 10:40:58 +02:00
parent 37e5eb04b4
commit ee4a1f1c30
1 changed files with 67 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

67
blog/postfix-postgres-sasl-error-authentication-failed-authentication-failure.mdwn Normal file
View file

@ -0,0 +1,67 @@
[[!meta title="Solution for Postfix with Postgres: SASL error: authentication failed: authentication failure"]]
[[!meta date="2008-10-07"]]
It took me some hours to find the origin of the error,
so I'll documentate some hints here for you.
I am running postfix with postgresql on Debian.
But it should apply more or less to MySQL and FreeBSD and other OS, too.
Some error messages you may have seen:
Oct 7 18:01:38 tee postfix/smtpd[7741]: warning: SASL authentication failure: no secret in database
Oct 7 18:01:38 tee postfix/smtpd[7741]: warning: ikn.inf.ethz.ch[129.132.130.3]: SASL DIGEST-MD5 authentication failed: authentication failure
or on the client side postfix:
Oct 7 17:56:39 ikn postfix/smtp[30807]: 777134113A: to=<nicosc@inf.ethz.ch>, relay=mx3.schottelius.org[77.109.138.221]:25, delay=0.08, delays=0.02/0/0.06/0, dsn=4.7.8, status=deferred (SASL authentication failed; server mx3.schottelius.org[77.109.138.221] said: 535 5.7.8 Error: authentication failed: authentication failure)
Some hints and at the end my final solution:
* make sure postfx can connect to the postgresql database
* check one, two and three times that ***pg_hba.conf*** is right
* try to login manually via psql
* check postgresql logs, raise debuglevels,
add ***log_connections = on*** and ***log_statement = 'all'***
* make sure you do not have whitespaces at the end of
***/etc/postfix/sasl/smtpd.conf*** (that was my problem here, due to copy and paste!)
* You are missing ***sasl/smtpd.conf***, if you get the following infamous error (i.e. cyrus-sasl has no config found):
warning: SASL authentication problem: unable to open Berkeley db /etc/sasldb2: No such file or directory
For reference, here are the important parts of my working configuration:
***main.cf:***
smtp_use_tls = yes
smtp_tls_note_starttls_offer = yes
smtpd_use_tls=yes
smtpd_tls_cert_file=/etc/ssl/mx3.schottelius.org.crt
smtpd_tls_key_file=/etc/ssl/mx3.schottelius.org.key
smtpd_sasl_auth_enable = yes
smtpd_sasl2_auth_enable = yes
smtpd_sasl_security_options = noanonymous
broken_sasl_auth_clients = no
smtpd_tls_auth_only = yes
#smtpd_sasl_path = smtpd # not needed
smtpd_client_restrictions = permit_mynetworks
permit_sasl_authenticated
***sasl/smtpd.conf:***
pwcheck_method: auxprop
auxprop_plugin: sql
mech_list: plain login cram-md5 digest-md5
sql_engine: pgsql
sql_hostnames: 127.0.0.1
sql_user: postfix
sql_passwd: thepassword
sql_database: mail
sql_select: select password from mailboxes where name='%u' and domain='%r' and smtp_enabled=1
[[!tag unix net]]