I finally found the problem: Postfix is chrooted on Debian, that means that /etc/sasldb has to be copied to /var/spool/postfix/etc ! and now it works fine, great.
Thanks for your help anyway Guillermo, it made me keep going! Am Mittwoch, 13. November 2002 13:55 schrieb Pierre Burri: > Hi, > I'm trying (hard) to configure Postfix (Dist Woody, packages postfix and > postfix-tls) with an sasl authentification. But it doesn't seem to want to > work. I always get "535 Error: authentication failed" and "500 Error: bad > syntax". I'm using kmail as a client. Does someone have an idea where the > bug is? > Thanks a lot in advance. > Pierre > > Here is my File /etc/postfix/main.cf: > # > smtpd_recipient_restrictions = > permit_mynetworks, > permit_sasl_authenticated, > check_relay_domains, > reject > # > smtpd_sasl_auth_enable = yes > smtpd_sasl_security_options = > noanonymous, noplaintext > smtpd_sasl_local_domain = $myhostname > broken_sasl_auth_clients = yes > > and here is the output of sasldblistusers: > user: test realm: pluto.linux-age.com mech: DIGEST-MD5 > user: test realm: pluto.linux-age.com mech: PLAIN > user: test realm: pluto.linux-age.com mech: CRAM-MD5 > > > and here the log-file /var/log/mail.info: > > Nov 13 13:27:54 pluto postfix/smtpd[5639]: > > pD9E6A391.dip0.t-ipconnect.de[217.230.163.145]: 220 ESMTP Postfix > Nov 13 13:27:54 pluto postfix/smtpd[5639]: connect from > pD9E6A391.dip0.t-ipconnect.de[217.230.163.145] > Nov 13 13:27:54 pluto postfix/smtpd[5639]: watchdog_pat: 0x8066180 > Nov 13 13:27:54 pluto postfix/smtpd[5639]: vstream_fflush_some: fd 9 flush > 19 Nov 13 13:27:54 pluto postfix/smtpd[5639]: vstream_buf_get_ready: fd 9 > got 12 Nov 13 13:27:54 pluto postfix/smtpd[5639]: < > pD9E6A391.dip0.t-ipconnect.de[217.230.163.145]: EHLO venus > Nov 13 13:27:54 pluto postfix/smtpd[5639]: > > pD9E6A391.dip0.t-ipconnect.de[217.230.163.145]: 250-pluto.linux-age.com > Nov 13 13:27:54 pluto postfix/smtpd[5639]: > > pD9E6A391.dip0.t-ipconnect.de[217.230.163.145]: 250-PIPELINING > Nov 13 13:27:54 pluto postfix/smtpd[5639]: > > pD9E6A391.dip0.t-ipconnect.de[217.230.163.145]: 250-SIZE 10240000 > Nov 13 13:27:54 pluto postfix/smtpd[5639]: > > pD9E6A391.dip0.t-ipconnect.de[217.230.163.145]: 250-VRFY > Nov 13 13:27:54 pluto postfix/smtpd[5639]: > > pD9E6A391.dip0.t-ipconnect.de[217.230.163.145]: 250-ETRN > Nov 13 13:27:54 pluto postfix/smtpd[5639]: > > pD9E6A391.dip0.t-ipconnect.de[217.230.163.145]: 250-AUTH CRAM-MD5 > DIGEST-MD5 Nov 13 13:27:54 pluto postfix/smtpd[5639]: > > pD9E6A391.dip0.t-ipconnect.de[217.230.163.145]: 250-AUTH=CRAM-MD5 > DIGEST-MD5 Nov 13 13:27:54 pluto postfix/smtpd[5639]: > > pD9E6A391.dip0.t-ipconnect.de[217.230.163.145]: 250-XVERP > Nov 13 13:27:54 pluto postfix/smtpd[5639]: > > pD9E6A391.dip0.t-ipconnect.de[217.230.163.145]: 250 8BITMIME > Nov 13 13:27:54 pluto postfix/smtpd[5639]: watchdog_pat: 0x8066180 > Nov 13 13:27:54 pluto postfix/smtpd[5639]: vstream_fflush_some: fd 9 flush > 165 Nov 13 13:27:54 pluto postfix/smtpd[5639]: vstream_buf_get_ready: fd 9 > got 17 Nov 13 13:27:54 pluto postfix/smtpd[5639]: < > pD9E6A391.dip0.t-ipconnect.de[217.230.163.145]: AUTH DIGEST-MD5 > Nov 13 13:27:54 pluto postfix/smtpd[5639]: smtpd_sasl_authenticate: > sasl_method DIGEST-MD5 > Nov 13 13:27:54 pluto postfix/smtpd[5639]: smtpd_sasl_authenticate: uncoded > challenge: > realm="pluto.linux-age.com",nonce="Gi0J133LqyQzg3Q8HAzbRh1XvV5TuR/4aokmu7eW >lnE=",qop="auth,auth-int",charset=utf-8,algorithm=md5-sess Nov 13 13:27:54 > pluto postfix/smtpd[5639]: > > pD9E6A391.dip0.t-ipconnect.de[217.230.163.145]: 334 > cmVhbG09InBsdXRvLmxpbnV4LWFnZS5jb20iLG5vbmNlPSJHaTBKMTMzTHF5UXpnM1E4SEF6YlJ >oMVh2VjVUdVIvNGFva211N2VXbG5FPSIscW9wPSJhdXRoLGF1dGgtaW50IixjaGFyc2V0PXV0Zi0 >4LGFsZ29yaXRobT1tZDUtc2Vzcw== Nov 13 13:27:54 pluto postfix/smtpd[5639]: > vstream_fflush_some: fd 9 flush 186 Nov 13 13:27:54 pluto > postfix/smtpd[5639]: vstream_buf_get_ready: fd 9 got 310 Nov 13 13:27:54 > pluto postfix/smtpd[5639]: < > pD9E6A391.dip0.t-ipconnect.de[217.230.163.145]: > Y2hhcnNldD11dGYtOCx1c2VybmFtZT0idGVzdCIscmVhbG09InBsdXRvLmxpbnV4LWFnZS5jb20 >iLG5vbmNlPSJHaTBKMTMzTHF5UXpnM1E4SEF6YlJoMVh2VjVUdVIvNGFva211N2VXbG5FPSIsbmM >9MDAwMDAwMDEsY25vbmNlPSJNell3T0RFPSIsZGlnZXN0LXVyaT0ic210cC9wbHV0by5saW51eC1 >hZ2UuY29tIixyZXNwb25zZT0zODE1YjY4NjFkNTdjN2M1ZGNkNmYzNDQ1NmExOWI5NCxxb3A9YXV >0aA== Nov 13 13:27:54 pluto postfix/smtpd[5639]: smtpd_sasl_authenticate: > decoded response: > charset=utf-8,username="test",realm="pluto.linux-age.com",nonce="Gi0J133Lqy >Qzg3Q8HAzbRh1XvV5TuR/4aokmu7eWlnE=",nc=00000001,cnonce="MzYwODE=",digest-uri >="smtp/pluto.linux-age.com",response=3815b6861d57c7c5dcd6f34456a19b94,qop=au >th Nov 13 13:27:54 pluto postfix/smtpd[5639]: warning: > pD9E6A391.dip0.t-ipconnect.de[217.230.163.145]: SASL DIGEST-MD5 > authentication failed > Nov 13 13:27:54 pluto postfix/smtpd[5639]: > > pD9E6A391.dip0.t-ipconnect.de[217.230.163.145]: 535 Error: authentication > failed > Nov 13 13:27:59 pluto postfix/smtpd[5639]: watchdog_pat: 0x8066180 > Nov 13 13:27:59 pluto postfix/smtpd[5639]: vstream_fflush_some: fd 9 flush > 34 Nov 13 13:27:59 pluto postfix/smtpd[5639]: vstream_buf_get_ready: fd 9 > got 2 Nov 13 13:27:59 pluto postfix/smtpd[5639]: < > pD9E6A391.dip0.t-ipconnect.de[217.230.163.145]: > Nov 13 13:27:59 pluto postfix/smtpd[5639]: > > pD9E6A391.dip0.t-ipconnect.de[217.230.163.145]: 500 Error: bad syntax > Nov 13 13:28:04 pluto postfix/smtpd[5639]: watchdog_pat: 0x8066180 > Nov 13 13:28:04 pluto postfix/smtpd[5639]: vstream_fflush_some: fd 9 flush > 23 Nov 13 13:28:04 pluto postfix/smtpd[5639]: vstream_buf_get_ready: fd 9 > got 6 Nov 13 13:28:04 pluto postfix/smtpd[5639]: < > pD9E6A391.dip0.t-ipconnect.de[217.230.163.145]: QUIT > Nov 13 13:28:04 pluto postfix/smtpd[5639]: > > pD9E6A391.dip0.t-ipconnect.de[217.230.163.145]: 221 Bye -- My Sites: http://www.linux-age.com & http://www.globeall.de Tel. +49 (0)30 757 02 517 Fax: +49 (0)30 757 02 518 -- H�ufig gestellte Fragen und Antworten (FAQ): http://www.de.debian.org/debian-user-german-FAQ/ Zum AUSTRAGEN schicken Sie eine Mail an [EMAIL PROTECTED] mit dem Subject "unsubscribe". Probleme? Mail an [EMAIL PROTECTED] (engl)
