Olivier,

Thanks for the reply.

Seems you had issue with your passwd file.

I'm faily sure the format of the file is not the issue. To clarify, with:

-rw-r----- 1 root opensmtpd  314 Aug 15 16:58 passwd

the server is working perfectly. With

-rw-r----- 1 root mail_auth  314 Aug 15 16:58 passwd

the smtpd daemon fails to start with the previously described error. The only difference is the group owner of the file. The opensmtpd user is a member of both groups.

1) does the opensmtpd users can read your file ?

Yes, within a shell session there is no problem reading with either ownership.

_ did you fill properly this file ?
--> For the creds table file; put the user name in the 1st column and the
password hash in the 2nd column

That is not the format I'm using. I'm using the table-passwd extension, e.g.:

user:pass_hash:uid:gid:fullname:home:shell

and within smtpd.conf:

table creds passwd:/etc/mail/passwd

but again the file itself is working fine under certain conditions as described above.

2) Seems you are running Jessie, debian propose an official package. did you
install opensmtpd from apt tool ?

Yes, I'm running the official jessie-backports package (which is based on 5.7.3p2 portable).

May I suggest in first to test a simple local MTA configuration and in
second step to create virtual or local user with authentication file ? (to
test the base configuration)

Well, my configuration is working as expected under the group permissions described above. For the sake of completeness, I will append my full smtpd.conf at the end (comments welcome).

Thanks again for your reply,
Jeremy

#smtpd.conf (actual domain replaced):

ext_if="eth0"
int_if="127.0.0.1"
myhostname="somehost.net"

pki $myhostname certificate "/etc/ssl/local/somehost.net.crt"
pki $myhostname key "/etc/ssl/local/somehost.net.key"

table aliases file:/etc/aliases
table creds passwd:/etc/mail/passwd
table virt_users file:/etc/mail/virt_users

listen on $ext_if port 25 tag MTA tls pki $myhostname
listen on $ext_if port 587 tag Submit tls-require pki $myhostname auth <creds>
listen on $int_if port 10025 tag Filtered

# Outside mail destined for here is filtered through amavis
accept tagged Filtered for any userbase <creds> deliver to mda 
"/usr/lib/dovecot/dovecot-lda -f %{sender} -d %{dest}"
accept tagged MTA from ! local for domain $myhostname recipient <virt_users> relay via 
"lmtp://127.0.0.1:10024"

# Outside authenticated mail (looks local) is relayed. Truly local mail # is either delivered or relayed based on recipient. ORDER MATTERS!
accept from local tagged Submit for any relay
accept from local for domain $myhostname alias <aliases> deliver to maildir
accept from local for any relay


--
You received this mail because you are subscribed to [email protected]
To unsubscribe, send a mail to: [email protected]

Reply via email to