Package: postfix
Version: 3.10.5-1~deb13u1
Justification: Breaks upgrades from bookworm
Followup-For: Bug #561807
X-Debbugs-Cc: [email protected]
Control: severity grave
Dear Maintainer,
* What led up to the situation?
After upgrading from bookworm to trixie postfix authentication started failing.
* What exactly did you do (or not do) that was effective (or
ineffective)?
Upgrade postfix from bookworm to trixie
* What was the outcome of this action?
sasl authentication with ldap backend was broken.
mail.log only showed connection was broken
2026-02-28T05:55:26.327940-08:00 comms-staging postfix/submission/smtpd[2086]:
connect from unknown[106.222.210.148]
2026-02-28T05:55:34.607009-08:00 comms-staging postfix/submission/smtpd[2086]:
NOQUEUE: lost connection after EHLO from unknown[106.222.210.148]
2026-02-28T05:55:34.607273-08:00 comms-staging postfix/submission/smtpd[2086]:
disconnect from unknown[106.222.210.148] ehlo=2 starttls=1 commands=3
and msmtp showed
$ msmtp -a [email protected] -t <smtp_test.txt
password for praveen at comms-staging.domain.tld:
msmtp: GNU SASL: Error authenticating user
msmtp: could not send mail (account [email protected] from
/home/pravi/.msmtprc)
* What outcome did you expect instead?
postfix should continue working with saslauthd.
Then I compared postconf output from a freshly installed postfix on another
system and found
It had cyrus_sasl_config_path = /etc/postfix/sasl
Adding this to main.cf fixed the issue. Since this breaks upgrades, this should
be documented in the NEWS file (until bookworm this was not required).
-- System Information:
Debian Release: forky/sid
APT prefers unstable
APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 6.18.15+deb14-amd64 (SMP w/8 CPU threads; PREEMPT)
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages postfix depends on:
ii adduser 3.154
ii debconf [debconf-2.0] 1.5.92
ii init-system-helpers 1.69
ii libc6 2.42-13
ii libdb5.3t64 5.3.28+dfsg2-11
ii libicu76 76.1-4+b1
ii libnsl2 1.3.0-3+b4
ii libsasl2-2 2.1.28+dfsg1-10
ii libssl3t64 3.5.5-1
pn libtlsrpt0 <none>
ii netbase 6.5
Versions of packages postfix recommends:
ii ca-certificates 20260223
ii python3 3.13.9-3
ii ssl-cert 1.1.3
Versions of packages postfix suggests:
ii bsd-mailx [mail-reader] 8.1.2-0.20220412cvs-1.1
ii evolution [mail-reader] 3.56.2-8
ii libsasl2-modules 2.1.28+dfsg1-10
ii mutt [mail-reader] 2.2.13-1+b1
pn postfix-cdb <none>
pn postfix-doc <none>
pn postfix-ldap <none>
pn postfix-lmdb <none>
pn postfix-mongodb <none>
pn postfix-mta-sts-resolver <none>
pn postfix-mysql <none>
pn postfix-pcre <none>
pn postfix-pgsql <none>
pn postfix-sqlite <none>
pn procmail <none>
ii systemd-resolved [resolvconf] 260~rc1-2
ii thunderbird [mail-reader] 1:140.8.0esr-1
pn ufw <none>
