Your message dated Sun, 17 Feb 2019 03:42:14 -0500
with message-id <9815470.qloMzHaid9@kitterma-e6430>
and subject line Re: Bug#739636: postfix: Exagerated error on authentication
server connexion issue
has caused the Debian Bug report #739636,
regarding postfix: Exagerated error on authentication server connexion issue
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
739636: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=739636
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: postfix
Version: 2.9.6-2
Severity: important
Hello,
We are letting our users relay mail through our postfix server. They are
authenticated through a dovecot server, which itself connects to an SQL
database. The issue is that when e.g. upgrading dovecot or mysql, the
authentication server fails temporarily, but that is translated by
postfix into a permanent error: for instance,
Feb 20 18:22:41 toccata postfix/smtpd[2465]: warning: unknown[12.216.224.110]:
SASL PLAIN authentication failed: Connection lost to authentication server
Feb 20 18:22:42 toccata postfix/smtpd[2465]: NOQUEUE: reject: RCPT from
unknown[12.216.224.110]: 554 5.7.1 <unknown[12.216.224.110]>: Client host
rejected: Access denied; from=<[email protected]>
to=<[email protected]> proto=ESMTP helo=<type.ipv6>
The sender mail sender thus gets
2014-02-20 18:22:41 1WGXKO-0004P4-7z plain authenticator failed
H=toccata.ens-lyon.org [140.77.166.68] 535 5.7.8 Error: authentication failed:
Connection lost to authentication server
2014-02-20 18:22:42 1WGXKO-0004P4-7z ** [email protected] R=smarthost
T=remote_smtp_smarthost: SMTP error from remote mail server after RCPT
TO:<[email protected]>: host toccata.ens-lyon.org [140.77.166.68]: 554
5.7.1 <unknown[12.216.224.110]>: Client host rejected: Access denied
And the user thus get an "authentication failed" bounce, which they most
often don't understand or even see, and the original mail is thus lost.
Due to this issue, we always have to shutdown postfix before upgrading
dovecot or mysql, otherwise mails get lost.
Shouldn't postfix use a temporary error code in that case?
Samuel
-- System Information:
Debian Release: jessie/sid
APT prefers testing
APT policy: (990, 'testing'), (500, 'unstable'), (500, 'stable'), (1,
'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 3.13.0 (SMP w/8 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
--
Samuel
Les roots ne sont plus ce qu'ils étaient...Maintenant il sont dioxinés,
c'est de la m... ! Avant on les élevaient avec du bon unix mais ça été
remplacé par des farines industrielles nouvelles technologies (NT).
-+- JdK in NPC : Exigez un root élevé sous la mère ! -+-
--- End Message ---
--- Begin Message ---
On Tue, 23 May 2017 09:52:14 +0200 Samuel Thibault <[email protected]>
wrote:
> Scott Kitterman, on mar. 23 mai 2017 01:25:06 -0400, wrote:
> > > Feb 20 18:22:41 toccata postfix/smtpd[2465]: warning:
> > unknown[12.216.224.110]: SASL PLAIN authentication failed: Connection lost
to
> > authentication server
> >
> > How would postfix know an authentication failure is temporary?
>
> Well, perhaps it's sasl which needs to be able to report differently to
> postfix, then.
>
> > Also, in this case do MUAs treat temporary and permanent errors
> > differently (if they don't this doesn't matter)?
>
> Yes.
I don't think this is a postfix bug, so closing.
Scott K
--- End Message ---
