Hi,
I’m trying to get authentication to work with opensmtpd, however I get the
message “authentication failed”. Below you can find the content of smtpd.conf,
smtp_users and /var/log/messages. The password has been encrypted with the
“smtpctl encrypt” command.
Can the issue be that the smtp_user table is read as "type=HASH” and the lookup
is done as “type=CREDENTIALS”?
Greetings,
Frank.
— smtpd.conf —
pki mail.example.com certificate "/etc/opensmtpd/ssl.crt"
pki mail.example.com key "/etc/opensmtpd/ssl.key"
# Interface to listen on any address (needed for failover)
listen on 0.0.0.0 secure auth smtp_users pki mail.example.com
# Userlist
table smtp_users file:/etc/opensmtpd/smtp_users
— smtp.conf —
— smtp_users—
test
$6$F1n7ZnzRfkPbGLjV$qBw5kvTo0dnJOA5dR7OCiF94gGK5yLOxtH9D2T4/.AAVGgfyyjdunh.RaXS6O0VHPPKriWurP/WgESa/dpfij1
— smtpd_users—
— /var/log/maillog—
Apr 24 13:02:08 localhost smtpd[17028]: e3f09084856c63f5 smtp event=connected
address=192.168.50.1 host=192.168.50.1
Apr 24 13:02:08 localhost smtpd[17028]: e3f09084856c63f5 smtp event=starttls
ciphers="version=TLSv1.2, cipher=ECDHE-RSA-AES256-GCM-SHA384, bits=256"
Apr 24 13:02:08 localhost smtpd[17028]: e3f09084856c63f5 smtp
event=authentication user=test result=permfail
Apr 24 13:02:09 localhost smtpd[17028]: smtp-in: Failed command on session
e3f09084856c63f5: "AUTH PLAIN (...)" => 535 Authentication failed
Apr 24 13:02:09 localhost smtpd[17028]: e3f09084856c63f5 smtp
event=authentication user=test result=permfail
Apr 24 13:02:10 localhost smtpd[17028]: smtp-in: Failed command on session
e3f09084856c63f5: "AUTH PLAIN (...)" => 535 Authentication failed
Apr 24 13:02:10 localhost smtpd[17028]: e3f09084856c63f5 smtp
event=authentication user=test result=permfail
Apr 24 13:02:11 localhost smtpd[17028]: smtp-in: Failed command on session
e3f09084856c63f5: "AUTH LOGIN (password)" => 535 Authentication failed
Apr 24 13:02:11 localhost smtpd[17028]: e3f09084856c63f5 smtp
event=authentication user=test result=permfail
Apr 24 13:02:11 localhost smtpd[17028]: smtp-in: Failed command on session
e3f09084856c63f5: "AUTH LOGIN (password)" => 535 Authentication failed
Apr 24 13:02:11 localhost smtpd[17028]: e3f09084856c63f5 smtp event=closed
reason=quit
— /var/log/maillog —
— smtp -dv -T all —
TABLE "smtp_users" type=HASH config="/etc/opensmtpd/tables/smtp_users"
"test" ->
"$6$F1n7ZnzRfkPbGLjV$qBw5kvTo0dnJOA5dR7OCiF94gGK5yLOxtH9D2T4/.AAVGgfyyjdunh.RaXS6O0VHPPKriWurP/WgESa/dpfij1"
mproc: lka -> pony: enabled
imsg: pony <- parent: IMSG_CONF_START (len=0)
imsg: pony <- parent: IMSG_CONF_END (len=0)
debug: smtp: listen on 127.0.0.1 port 10028 flags 0x400 pki "" ca ""
debug: smtp: listen on 0.0.0.0 port 25 flags 0x449 pki “mail.example.com" ca ""
debug: smtp: listen on 0.0.0.0 port 465 flags 0x44a pki “mail.example.com" ca ""
debug: pony: rsae_init
debug: pony: rsae_init
debug: smtp: will accept at most 2043 clients
imsg: ca <- parent: IMSG_CONF_START (len=0)
imsg: ca <- parent: IMSG_CONF_END (len=0)
debug: init private ssl-tree
mproc: ca -> pony: enabled
queue-backend: queue_envelope_walk() -> -1 (0000000000000000)
debug: queue: done loading queue into scheduler
debug: smtpd: scanning offline queue...
debug: smtpd: offline scanning done
debug: smtp: new client on listener: 0x23ca250
smtp: 0x23bbf60: connected to listener 0x23ca250 [hostname=mail.example.com,
port=25, tag=]
mproc: pony -> lka: allocating 128
mproc: pony -> lka : 34 IMSG_SMTP_DNS_PTR
mproc: pony -> control: allocating 128
mproc: pony -> control : 47 IMSG_STAT_INCREMENT
mproc: pony -> control : 53 IMSG_STAT_INCREMENT
imsg: lka <- pony: IMSG_SMTP_DNS_PTR (len=34)
imsg: control <- pony: IMSG_STAT_INCREMENT (len=47)
ramstat: increment: smtp.session
ramstat: smtp.session (0x9fc641): 0 -> 1
imsg: control <- pony: IMSG_STAT_INCREMENT (len=53)
ramstat: increment: smtp.session.inet4
ramstat: smtp.session.inet4 (0x9fc641): 0 -> 1
mproc: lka -> pony: allocating 128
mproc: lka -> pony : 28 IMSG_SMTP_DNS_PTR
imsg: pony <- lka: IMSG_SMTP_DNS_PTR (len=28)
smtp: 0x23bbf60: STATE_NEW -> STATE_CONNECTED
89080c4f60136a5e smtp event=connected address=192.168.50.1 host=192.168.50.1
filter: new query QUERY_CONNECT
filter: filter_drain_query 89080c5060380f52[QUERY_CONNECT=192.168.50.221 <->
192.168.50.1(192.168.50.1),filter_session@0x23bbba0[datalen=0,eom=(nil),ofile=(nil)]]
filter: filter_end_query 89080c5060380f52[QUERY_CONNECT=192.168.50.221 <->
192.168.50.1(192.168.50.1),filter_session@0x23bbba0[datalen=0,eom=(nil),ofile=(nil)]]
filter: query 89080c5060380f52 done: status=FILTER_OK code=0 response="(null)"
smtp: 0x23bbf60: >>> 220 mail.example.com ESMTP OpenSMTPD
smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W ib=0 ob=0>
smtp: 0x23bbf60: IO_DATAIN <io:0x23bbfa8 fd=19 to=300000 fl=R ib=21 ob=0>
smtp: 0x23bbf60: <<< EHLO [192.168.50.1]
filter: new query QUERY_HELO
filter: filter_drain_query
89080c511256b740[QUERY_HELO=[192.168.50.1],filter_session@0x23bbba0[datalen=0,eom=(nil),ofile=(nil)]]
filter: filter_end_query
89080c511256b740[QUERY_HELO=[192.168.50.1],filter_session@0x23bbba0[datalen=0,eom=(nil),ofile=(nil)]]
filter: query 89080c511256b740 done: status=FILTER_OK code=0 response="(null)"
smtp: 0x23bbf60: STATE_CONNECTED -> STATE_HELO
smtp: 0x23bbf60: >>> 250-mail.example.com Hello [192.168.50.1] [192.168.50.1],
pleased to meet you
smtp: 0x23bbf60: >>> 250-8BITMIME
smtp: 0x23bbf60: >>> 250-ENHANCEDSTATUSCODES
smtp: 0x23bbf60: >>> 250-SIZE 36700160
smtp: 0x23bbf60: >>> 250-DSN
smtp: 0x23bbf60: >>> 250-STARTTLS
smtp: 0x23bbf60: >>> 250 HELP
smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W ib=0 ob=0>
smtp: 0x23bbf60: IO_DATAIN <io:0x23bbfa8 fd=19 to=300000 fl=R ib=10 ob=0>
smtp: 0x23bbf60: <<< STARTTLS
smtp: 0x23bbf60: >>> 220 2.0.0: Ready to start TLS
smtp: 0x23bbf60: STATE_HELO -> STATE_TLS
smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W ib=0 ob=0>
mproc: pony -> lka : 80 IMSG_SMTP_TLS_INIT
imsg: lka <- pony: IMSG_SMTP_TLS_INIT (len=80)
debug: lka: looking up pki “mail.example.com"
mproc: lka -> pony : 1561 IMSG_SMTP_TLS_INIT
imsg: pony <- lka: IMSG_SMTP_TLS_INIT (len=1561)
debug: session_start_ssl: switching to SSL
debug: pony: rsae_priv_enc
mproc: pony -> ca: allocating 128
mproc: pony -> ca : 117 IMSG_CA_PRIVENC (flush)
imsg: ca <- pony: IMSG_CA_PRIVENC (len=117)
mproc: ca -> pony: allocating 128
mproc: ca -> pony: realloc 128 -> 512
mproc: ca -> pony : 279 IMSG_CA_PRIVENC
imsg: pony <- ca: IMSG_CA_PRIVENC (len=279)
smtp: 0x23bbf60: IO_TLSREADY <io:0x23bbfa8 fd=19 to=300000 fl=R
ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=0 ob=0>
89080c4f60136a5e smtp event=starttls ciphers="version=TLSv1.2,
cipher=ECDHE-RSA-AES256-GCM-SHA384, bits=256"
mproc: pony -> control : 43 IMSG_STAT_INCREMENT
smtp: 0x23bbf60: STATE_TLS -> STATE_HELO
imsg: control <- pony: IMSG_STAT_INCREMENT (len=43)
ramstat: increment: smtp.tls
ramstat: smtp.tls (0x9fc641): 0 -> 1
smtp: 0x23bbf60: IO_DATAIN <io:0x23bbfa8 fd=19 to=300000 fl=R
ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=21 ob=0>
smtp: 0x23bbf60: <<< EHLO [192.168.50.1]
filter: new query QUERY_HELO
filter: filter_drain_query
89080c5241573d1b[QUERY_HELO=[192.168.50.1],filter_session@0x23bbba0[datalen=0,eom=(nil),ofile=(nil)]]
filter: filter_end_query
89080c5241573d1b[QUERY_HELO=[192.168.50.1],filter_session@0x23bbba0[datalen=0,eom=(nil),ofile=(nil)]]
filter: query 89080c5241573d1b done: status=FILTER_OK code=0 response="(null)"
smtp: 0x23bbf60: STATE_HELO -> STATE_HELO
smtp: 0x23bbf60: >>> 250-mail.example.com Hello [192.168.50.1] [192.168.50.1],
pleased to meet you
smtp: 0x23bbf60: >>> 250-8BITMIME
smtp: 0x23bbf60: >>> 250-ENHANCEDSTATUSCODES
smtp: 0x23bbf60: >>> 250-SIZE 36700160
smtp: 0x23bbf60: >>> 250-DSN
smtp: 0x23bbf60: >>> 250-AUTH PLAIN LOGIN
smtp: 0x23bbf60: >>> 250 HELP
smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W
ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=0 ob=0>
smtp: 0x23bbf60: IO_DATAIN <io:0x23bbfa8 fd=19 to=300000 fl=R
ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=33 ob=0>
smtp: 0x23bbf60: <<< AUTH PLAIN dGVzdAB0ZXN0AHRlc3Q=
smtp: 0x23bbf60: STATE_HELO -> STATE_AUTH_INIT
mproc: pony -> lka : 34 IMSG_SMTP_AUTHENTICATE
imsg: lka <- pony: IMSG_SMTP_AUTHENTICATE (len=34)
debug: lka: authenticating for <dynamic:0>:test
lookup: lookup "test" as CREDENTIALS in table static:<dynamic:0> -> 0
mproc: lka -> pony : 14 IMSG_SMTP_AUTHENTICATE
imsg: pony <- lka: IMSG_SMTP_AUTHENTICATE (len=14)
89080c4f60136a5e smtp event=authentication user=test result=permfail
smtp: timing-attack protection triggered, will defer answer for 94418
microseconds
smtp: 0x23bbf60: >>> 535 Authentication failed
smtp-in: Failed command on session 89080c4f60136a5e: "AUTH PLAIN (...)" => 535
Authentication failed
smtp: 0x23bbf60: STATE_AUTH_INIT -> STATE_HELO
smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W
ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=0 ob=0>
smtp: 0x23bbf60: IO_DATAIN <io:0x23bbfa8 fd=19 to=300000 fl=R
ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=29 ob=0>
smtp: 0x23bbf60: <<< AUTH PLAIN AHRlc3QAdGVzdA==
smtp: 0x23bbf60: STATE_HELO -> STATE_AUTH_INIT
mproc: pony -> lka : 34 IMSG_SMTP_AUTHENTICATE
imsg: lka <- pony: IMSG_SMTP_AUTHENTICATE (len=34)
debug: lka: authenticating for <dynamic:0>:test
lookup: lookup "test" as CREDENTIALS in table static:<dynamic:0> -> 0
mproc: lka -> pony : 14 IMSG_SMTP_AUTHENTICATE
imsg: pony <- lka: IMSG_SMTP_AUTHENTICATE (len=14)
89080c4f60136a5e smtp event=authentication user=test result=permfail
smtp: timing-attack protection triggered, will defer answer for 721976
microseconds
smtp: 0x23bbf60: >>> 535 Authentication failed
smtp-in: Failed command on session 89080c4f60136a5e: "AUTH PLAIN (...)" => 535
Authentication failed
smtp: 0x23bbf60: STATE_AUTH_INIT -> STATE_HELO
smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W
ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=0 ob=0>
smtp: 0x23bbf60: IO_DATAIN <io:0x23bbfa8 fd=19 to=300000 fl=R
ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=12 ob=0>
smtp: 0x23bbf60: <<< AUTH LOGIN
smtp: 0x23bbf60: STATE_HELO -> STATE_AUTH_USERNAME
smtp: 0x23bbf60: >>> 334 VXNlcm5hbWU6
smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W
ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=0 ob=0>
smtp: 0x23bbf60: IO_DATAIN <io:0x23bbfa8 fd=19 to=300000 fl=R
ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=10 ob=0>
smtp: 0x23bbf60: <<< dGVzdA==
smtp: 0x23bbf60: STATE_AUTH_USERNAME -> STATE_AUTH_PASSWORD
smtp: 0x23bbf60: >>> 334 UGFzc3dvcmQ6
smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W
ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=0 ob=0>
smtp: 0x23bbf60: IO_DATAIN <io:0x23bbfa8 fd=19 to=300000 fl=R
ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=10 ob=0>
smtp: 0x23bbf60: <<< dGVzdA==
mproc: pony -> lka : 34 IMSG_SMTP_AUTHENTICATE
imsg: lka <- pony: IMSG_SMTP_AUTHENTICATE (len=34)
debug: lka: authenticating for <dynamic:0>:test
lookup: lookup "test" as CREDENTIALS in table static:<dynamic:0> -> 0
mproc: lka -> pony : 14 IMSG_SMTP_AUTHENTICATE
imsg: pony <- lka: IMSG_SMTP_AUTHENTICATE (len=14)
89080c4f60136a5e smtp event=authentication user=test result=permfail
smtp: timing-attack protection triggered, will defer answer for 326218
microseconds
smtp: 0x23bbf60: >>> 535 Authentication failed
smtp-in: Failed command on session 89080c4f60136a5e: "AUTH LOGIN (password)" =>
535 Authentication failed
smtp: 0x23bbf60: STATE_AUTH_PASSWORD -> STATE_HELO
smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W
ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=0 ob=0>
smtp: 0x23bbf60: IO_DATAIN <io:0x23bbfa8 fd=19 to=300000 fl=R
ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=12 ob=0>
smtp: 0x23bbf60: <<< AUTH LOGIN
smtp: 0x23bbf60: STATE_HELO -> STATE_AUTH_USERNAME
smtp: 0x23bbf60: >>> 334 VXNlcm5hbWU6
smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W
ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=0 ob=0>
smtp: 0x23bbf60: IO_DATAIN <io:0x23bbfa8 fd=19 to=300000 fl=R
ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=10 ob=0>
smtp: 0x23bbf60: <<< dGVzdA==
smtp: 0x23bbf60: STATE_AUTH_USERNAME -> STATE_AUTH_PASSWORD
smtp: 0x23bbf60: >>> 334 UGFzc3dvcmQ6
smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W
ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=0 ob=0>
smtp: 0x23bbf60: IO_DATAIN <io:0x23bbfa8 fd=19 to=300000 fl=R
ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=10 ob=0>
smtp: 0x23bbf60: <<< dGVzdA==
mproc: pony -> lka : 34 IMSG_SMTP_AUTHENTICATE
imsg: lka <- pony: IMSG_SMTP_AUTHENTICATE (len=34)
debug: lka: authenticating for <dynamic:0>:test
lookup: lookup "test" as CREDENTIALS in table static:<dynamic:0> -> 0
mproc: lka -> pony : 14 IMSG_SMTP_AUTHENTICATE
imsg: pony <- lka: IMSG_SMTP_AUTHENTICATE (len=14)
89080c4f60136a5e smtp event=authentication user=test result=permfail
smtp: timing-attack protection triggered, will defer answer for 808887
microseconds
smtp: 0x23bbf60: >>> 535 Authentication failed
smtp-in: Failed command on session 89080c4f60136a5e: "AUTH LOGIN (password)" =>
535 Authentication failed
smtp: 0x23bbf60: STATE_AUTH_PASSWORD -> STATE_HELO
smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W
ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=0 ob=0>
smtp: 0x23bbf60: IO_DATAIN <io:0x23bbfa8 fd=19 to=300000 fl=R
ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=6 ob=0>
smtp: 0x23bbf60: <<< QUIT
smtp: 0x23bbf60: >>> 221 2.0.0: Bye
smtp: 0x23bbf60: STATE_HELO -> STATE_QUIT
smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W
ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=0 ob=0>
89080c4f60136a5e smtp event=closed reason=quit
debug: smtp: 0x23bbf60: deleting session: done
mproc: pony -> control : 43 IMSG_STAT_DECREMENT
mproc: pony -> control : 47 IMSG_STAT_DECREMENT
imsg: control <- pony: IMSG_STAT_DECREMENT (len=43)
ramstat: decrement: smtp.tls
ramstat: smtp.tls (0x9fc641): 1 -> 0
imsg: control <- pony: IMSG_STAT_DECREMENT (len=47)
ramstat: decrement: smtp.session
ramstat: smtp.session (0x9fc641): 1 -> 0
debug: smtp: new client on listener: 0x23ca250
smtp: 0x23bbf60: connected to listener 0x23ca250 [hostname=mail.example.com,
port=25, tag=]
mproc: pony -> lka : 34 IMSG_SMTP_DNS_PTR
mproc: pony -> control : 47 IMSG_STAT_INCREMENT
mproc: pony -> control : 53 IMSG_STAT_INCREMENT
imsg: lka <- pony: IMSG_SMTP_DNS_PTR (len=34)
imsg: control <- pony: IMSG_STAT_INCREMENT (len=47)
ramstat: increment: smtp.session
ramstat: smtp.session (0x9fc641): 0 -> 1
imsg: control <- pony: IMSG_STAT_INCREMENT (len=53)
ramstat: increment: smtp.session.inet4
ramstat: smtp.session.inet4 (0x9fc641): 1 -> 2
mproc: lka -> pony : 28 IMSG_SMTP_DNS_PTR
imsg: pony <- lka: IMSG_SMTP_DNS_PTR (len=28)
smtp: 0x23bbf60: STATE_NEW -> STATE_CONNECTED
89080c53206010b1 smtp event=connected address=192.168.50.1 host=192.168.50.1
filter: new query QUERY_CONNECT
filter: filter_drain_query 89080c54c5f8c4c4[QUERY_CONNECT=192.168.50.221 <->
192.168.50.1(192.168.50.1),filter_session@0x23c0e40[datalen=0,eom=(nil),ofile=(nil)]]
filter: filter_end_query 89080c54c5f8c4c4[QUERY_CONNECT=192.168.50.221 <->
192.168.50.1(192.168.50.1),filter_session@0x23c0e40[datalen=0,eom=(nil),ofile=(nil)]]
filter: query 89080c54c5f8c4c4 done: status=FILTER_OK code=0 response="(null)"
smtp: 0x23bbf60: >>> 220 mail.example.com ESMTP OpenSMTPD
smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W ib=0 ob=0>
smtp: 0x23bbf60: IO_DATAIN <io:0x23bbfa8 fd=19 to=300000 fl=R ib=21 ob=0>
smtp: 0x23bbf60: <<< EHLO [192.168.50.1]
filter: new query QUERY_HELO
filter: filter_drain_query
89080c55d1adf67a[QUERY_HELO=[192.168.50.1],filter_session@0x23c0e40[datalen=0,eom=(nil),ofile=(nil)]]
filter: filter_end_query
89080c55d1adf67a[QUERY_HELO=[192.168.50.1],filter_session@0x23c0e40[datalen=0,eom=(nil),ofile=(nil)]]
filter: query 89080c55d1adf67a done: status=FILTER_OK code=0 response="(null)"
smtp: 0x23bbf60: STATE_CONNECTED -> STATE_HELO
smtp: 0x23bbf60: >>> 250-mail.example.com Hello [192.168.50.1] [192.168.50.1],
pleased to meet you
smtp: 0x23bbf60: >>> 250-8BITMIME
smtp: 0x23bbf60: >>> 250-ENHANCEDSTATUSCODES
smtp: 0x23bbf60: >>> 250-SIZE 36700160
smtp: 0x23bbf60: >>> 250-DSN
smtp: 0x23bbf60: >>> 250-STARTTLS
smtp: 0x23bbf60: >>> 250 HELP
smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W ib=0 ob=0>
smtp: 0x23bbf60: IO_DATAIN <io:0x23bbfa8 fd=19 to=300000 fl=R ib=10 ob=0>
smtp: 0x23bbf60: <<< STARTTLS
smtp: 0x23bbf60: >>> 220 2.0.0: Ready to start TLS
smtp: 0x23bbf60: STATE_HELO -> STATE_TLS
smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W ib=0 ob=0>
mproc: pony -> lka : 80 IMSG_SMTP_TLS_INIT
imsg: lka <- pony: IMSG_SMTP_TLS_INIT (len=80)
debug: lka: looking up pki “mail.example.com"
mproc: lka -> pony : 1561 IMSG_SMTP_TLS_INIT
imsg: pony <- lka: IMSG_SMTP_TLS_INIT (len=1561)
debug: session_start_ssl: switching to SSL
debug: pony: rsae_priv_enc
mproc: pony -> ca : 117 IMSG_CA_PRIVENC (flush)
imsg: ca <- pony: IMSG_CA_PRIVENC (len=117)
mproc: ca -> pony : 279 IMSG_CA_PRIVENC
imsg: pony <- ca: IMSG_CA_PRIVENC (len=279)
smtp: 0x23bbf60: IO_TLSREADY <io:0x23bbfa8 fd=19 to=300000 fl=R
ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=0 ob=0>
89080c53206010b1 smtp event=starttls ciphers="version=TLSv1.2,
cipher=ECDHE-RSA-AES256-GCM-SHA384, bits=256"
mproc: pony -> control : 43 IMSG_STAT_INCREMENT
smtp: 0x23bbf60: STATE_TLS -> STATE_HELO
imsg: control <- pony: IMSG_STAT_INCREMENT (len=43)
ramstat: increment: smtp.tls
ramstat: smtp.tls (0x9fc641): 0 -> 1
smtp: 0x23bbf60: IO_DATAIN <io:0x23bbfa8 fd=19 to=300000 fl=R
ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=21 ob=0>
smtp: 0x23bbf60: <<< EHLO [192.168.50.1]
filter: new query QUERY_HELO
filter: filter_drain_query
89080c565ceef4ba[QUERY_HELO=[192.168.50.1],filter_session@0x23c0e40[datalen=0,eom=(nil),ofile=(nil)]]
filter: filter_end_query
89080c565ceef4ba[QUERY_HELO=[192.168.50.1],filter_session@0x23c0e40[datalen=0,eom=(nil),ofile=(nil)]]
filter: query 89080c565ceef4ba done: status=FILTER_OK code=0 response="(null)"
smtp: 0x23bbf60: STATE_HELO -> STATE_HELO
smtp: 0x23bbf60: >>> 250-mail.example.com Hello [192.168.50.1] [192.168.50.1],
pleased to meet you
smtp: 0x23bbf60: >>> 250-8BITMIME
smtp: 0x23bbf60: >>> 250-ENHANCEDSTATUSCODES
smtp: 0x23bbf60: >>> 250-SIZE 36700160
smtp: 0x23bbf60: >>> 250-DSN
smtp: 0x23bbf60: >>> 250-AUTH PLAIN LOGIN
smtp: 0x23bbf60: >>> 250 HELP
smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W
ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=0 ob=0>
smtp: 0x23bbf60: IO_DATAIN <io:0x23bbfa8 fd=19 to=300000 fl=R
ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=33 ob=0>
smtp: 0x23bbf60: <<< AUTH PLAIN dGVzdAB0ZXN0AHRlc3Q=
smtp: 0x23bbf60: STATE_HELO -> STATE_AUTH_INIT
mproc: pony -> lka : 34 IMSG_SMTP_AUTHENTICATE
imsg: lka <- pony: IMSG_SMTP_AUTHENTICATE (len=34)
debug: lka: authenticating for <dynamic:0>:test
lookup: lookup "test" as CREDENTIALS in table static:<dynamic:0> -> 0
mproc: lka -> pony : 14 IMSG_SMTP_AUTHENTICATE
imsg: pony <- lka: IMSG_SMTP_AUTHENTICATE (len=14)
89080c53206010b1 smtp event=authentication user=test result=permfail
smtp: timing-attack protection triggered, will defer answer for 319717
microseconds
smtp: 0x23bbf60: >>> 535 Authentication failed
smtp-in: Failed command on session 89080c53206010b1: "AUTH PLAIN (...)" => 535
Authentication failed
smtp: 0x23bbf60: STATE_AUTH_INIT -> STATE_HELO
smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W
ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=0 ob=0>
smtp: 0x23bbf60: IO_DATAIN <io:0x23bbfa8 fd=19 to=300000 fl=R
ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=29 ob=0>
smtp: 0x23bbf60: <<< AUTH PLAIN AHRlc3QAdGVzdA==
smtp: 0x23bbf60: STATE_HELO -> STATE_AUTH_INIT
mproc: pony -> lka : 34 IMSG_SMTP_AUTHENTICATE
imsg: lka <- pony: IMSG_SMTP_AUTHENTICATE (len=34)
debug: lka: authenticating for <dynamic:0>:test
lookup: lookup "test" as CREDENTIALS in table static:<dynamic:0> -> 0
mproc: lka -> pony : 14 IMSG_SMTP_AUTHENTICATE
imsg: pony <- lka: IMSG_SMTP_AUTHENTICATE (len=14)
89080c53206010b1 smtp event=authentication user=test result=permfail
smtp: timing-attack protection triggered, will defer answer for 821413
microseconds
smtp: 0x23bbf60: >>> 535 Authentication failed
smtp-in: Failed command on session 89080c53206010b1: "AUTH PLAIN (...)" => 535
Authentication failed
smtp: 0x23bbf60: STATE_AUTH_INIT -> STATE_HELO
smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W
ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=0 ob=0>
smtp: 0x23bbf60: IO_DATAIN <io:0x23bbfa8 fd=19 to=300000 fl=R
ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=12 ob=0>
smtp: 0x23bbf60: <<< AUTH LOGIN
smtp: 0x23bbf60: STATE_HELO -> STATE_AUTH_USERNAME
smtp: 0x23bbf60: >>> 334 VXNlcm5hbWU6
smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W
ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=0 ob=0>
smtp: 0x23bbf60: IO_DATAIN <io:0x23bbfa8 fd=19 to=300000 fl=R
ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=10 ob=0>
smtp: 0x23bbf60: <<< dGVzdA==
smtp: 0x23bbf60: STATE_AUTH_USERNAME -> STATE_AUTH_PASSWORD
smtp: 0x23bbf60: >>> 334 UGFzc3dvcmQ6
smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W
ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=0 ob=0>
smtp: 0x23bbf60: IO_DATAIN <io:0x23bbfa8 fd=19 to=300000 fl=R
ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=10 ob=0>
smtp: 0x23bbf60: <<< dGVzdA==
mproc: pony -> lka : 34 IMSG_SMTP_AUTHENTICATE
imsg: lka <- pony: IMSG_SMTP_AUTHENTICATE (len=34)
debug: lka: authenticating for <dynamic:0>:test
lookup: lookup "test" as CREDENTIALS in table static:<dynamic:0> -> 0
mproc: lka -> pony : 14 IMSG_SMTP_AUTHENTICATE
imsg: pony <- lka: IMSG_SMTP_AUTHENTICATE (len=14)
89080c53206010b1 smtp event=authentication user=test result=permfail
smtp: timing-attack protection triggered, will defer answer for 858737
microseconds
smtp: 0x23bbf60: >>> 535 Authentication failed
smtp-in: Failed command on session 89080c53206010b1: "AUTH LOGIN (password)" =>
535 Authentication failed
smtp: 0x23bbf60: STATE_AUTH_PASSWORD -> STATE_HELO
smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W
ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=0 ob=0>
smtp: 0x23bbf60: IO_DATAIN <io:0x23bbfa8 fd=19 to=300000 fl=R
ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=12 ob=0>
smtp: 0x23bbf60: <<< AUTH LOGIN
smtp: 0x23bbf60: STATE_HELO -> STATE_AUTH_USERNAME
smtp: 0x23bbf60: >>> 334 VXNlcm5hbWU6
smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W
ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=0 ob=0>
smtp: 0x23bbf60: IO_DATAIN <io:0x23bbfa8 fd=19 to=300000 fl=R
ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=10 ob=0>
smtp: 0x23bbf60: <<< dGVzdA==
smtp: 0x23bbf60: STATE_AUTH_USERNAME -> STATE_AUTH_PASSWORD
smtp: 0x23bbf60: >>> 334 UGFzc3dvcmQ6
smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W
ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=0 ob=0>
smtp: 0x23bbf60: IO_DATAIN <io:0x23bbfa8 fd=19 to=300000 fl=R
ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=10 ob=0>
smtp: 0x23bbf60: <<< dGVzdA==
mproc: pony -> lka : 34 IMSG_SMTP_AUTHENTICATE
imsg: lka <- pony: IMSG_SMTP_AUTHENTICATE (len=34)
debug: lka: authenticating for <dynamic:0>:test
lookup: lookup "test" as CREDENTIALS in table static:<dynamic:0> -> 0
mproc: lka -> pony : 14 IMSG_SMTP_AUTHENTICATE
imsg: pony <- lka: IMSG_SMTP_AUTHENTICATE (len=14)
89080c53206010b1 smtp event=authentication user=test result=permfail
smtp: timing-attack protection triggered, will defer answer for 853048
microseconds
smtp: 0x23bbf60: >>> 535 Authentication failed
smtp-in: Failed command on session 89080c53206010b1: "AUTH LOGIN (password)" =>
535 Authentication failed
smtp: 0x23bbf60: STATE_AUTH_PASSWORD -> STATE_HELO
smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W
ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=0 ob=0>
smtp: 0x23bbf60: IO_DATAIN <io:0x23bbfa8 fd=19 to=300000 fl=R
ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=6 ob=0>
smtp: 0x23bbf60: <<< QUIT
smtp: 0x23bbf60: >>> 221 2.0.0: Bye
smtp: 0x23bbf60: STATE_HELO -> STATE_QUIT
smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W
ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=0 ob=0>
89080c53206010b1 smtp event=closed reason=quit
debug: smtp: 0x23bbf60: deleting session: done
mproc: pony -> control : 43 IMSG_STAT_DECREMENT
mproc: pony -> control : 47 IMSG_STAT_DECREMENT
imsg: control <- pony: IMSG_STAT_DECREMENT (len=43)
ramstat: decrement: smtp.tls
ramstat: smtp.tls (0x9fc641): 1 -> 0
imsg: control <- pony: IMSG_STAT_DECREMENT (len=47)
ramstat: decrement: smtp.session
ramstat: smtp.session (0x9fc641): 1 -> 0
— smtpd -dv -T all —
--
You received this mail because you are subscribed to misc@opensmtpd.org
To unsubscribe, send a mail to: misc+unsubscr...@opensmtpd.org
