On 1/23/2026 5:17 PM, John Fawcett via Postfix-users wrote:
After resolving a higher priority problem, I am back to this one. I've added the -v option but I'm not sure exactly what to look for. I do see something suspicious.On 23/01/2026 15:57, Dennis Putnam via Postfix-users wrote:This is a tried and tested functionality, so the likelihood is that there is something in your configuration or these files that has an error. It was not obvious to me from the data posted what that could be. One thing that looks wrong is that you have [email protected] in the sasl_passwd file but it's not in the sender_relay file, although I guess that's not the cause of authentication failures. It might be worth checking the files and getting someone who you can trust with the real contents to recheck them. If there is an authentication error, then the likelihood is that the credentials are wrong. I am also hoping that your key strings don't contain any : characters and in your testing you did the steps to update the .db files and reload postfix.On 1/23/2026 3:21 AM, John Fawcett via Postfix-users wrote:On 22/01/2026 21:07, Dennis Putnam via Postfix-users wrote:On 1/22/2026 1:19 PM, Wietse Venema via Postfix-users wrote:Dennis Putnam via Postfix-users:Hi John,Thanks for the reply. I thought I did what was documented but it does not work for me. Authentication fails. The same authentication worksif I don't use like originally posted: smtp_sender_dependent_authentication = yesI replied to that, and asked you to send "postconf -nf" output, instead of sending a very large main.cf file. Wietse _______________________________________________ Postfix-users mailing list -- [email protected] To unsubscribe send an email to [email protected]I didn't get that request. Here is the postconf -nf: alias_database = hash:/etc/postfix/aliases alias_maps = hash:/etc/postfix/aliases bounce_notice_recipient = dap command_directory = /usr/sbin compatibility_level = 3.6 daemon_directory = /usr/lib/postfix/sbin data_directory = /var/lib/postfix debug_peer_level = 2 debug_peer_list =debugger_command = PATH=/bin:/usr/bin:/usr/local/bin; (strace -p $process_id 2>&1 | logger -p mail.info) & sleep 5defer_transports =good_senders_only = check_sender_access hash:/etc/postfix/restricted_senders, permithtml_directory = no inet_interfaces = all inet_protocols = all local_recipient_maps = hash:/opt/mailman/mm/var/data/postfix_lmtp mail_owner = postfix mailq_path = /usr/bin/mailq.postfix manpage_directory = /usr/share/man message_size_limit = 51200000 mydestination = $myhostname, localhost.$mydomain, localhost mynetworks_style = host newaliases_path = /usr/bin/newaliases.postfix notify_classes = bounce owner_request_special = no queue_directory = /var/spool/postfix readme_directory = /usr/share/doc/postfix-2.10.1/README_FILES recipient_delimiter = + relay_domains = hash:/opt/mailman/mm/var/data/postfix_domains relayhost = [smtp.att.yahoo.com]:587 sample_directory = /usr/share/doc/postfix-2.10.1/samples sender_canonical_classes = envelope_sender, header_sender sender_dependent_relayhost_maps = hash:/etc/postfix/sender_relay sendmail_path = /usr/sbin/sendmail.postfix setgid_group = postdrop smtp_generic_maps = hash:/etc/postfix/generic smtp_header_checks = regexp:/etc/postfix/header_check smtp_helo_name = home.myisp.net smtp_sasl_auth_enable = yes smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd smtp_sasl_security_options = smtp_sender_dependent_authentication = yes smtp_tls_policy_maps = hash:/etc/postfix/tls_policy smtp_use_tls = yessmtpd_banner = $myhostname ESMTP $mail_name ($mail_version) (Ubuntu Linux)smtpd_relay_restrictions = permit_mynetworks, reject smtpd_restriction_classes = good_senders_only syslog_name = postfix transport_maps = hash:/opt/mailman/mm/var/data/postfix_lmtp unknown_local_recipient_reject_code = 550CAn you post the contents of /etc/postfix/sender_relay and /etc/postfix/sasl_passwd (you can obfuscate confidential info in a consistent way)John _______________________________________________ Postfix-users mailing list -- [email protected] To unsubscribe send an email to [email protected]sender_relay [email protected] [smtp.gmail.com]:587 [email protected] [smtp.gmail.com]:587 [email protected] [smtp.gmail.com]:587 [email protected] [smtp.gmail.com]:587 sasl_passwd # authentications for mailman3 [smtp.gmail.com]:587 [email protected]:keystring #[email protected] [email protected]:keystring#[email protected] [email protected]:anotherkeystring# default authentication [smtp.myisp.com]:587 [email protected]:differentkeystringNote that the first entry is what I have now to get it partially working. The commented strings are what I tried that does not work and gets the authentication error.Also, not sure if it is relevant, but maybe worth checking the contents of file /etc/postfix/tls_policy to see if it has some entries about these domains.It may be time for more debugging info. You could always add a -v parameter to the smtp service in master.cf that will give you more verbose info (so long as this is a server where you can safely do this kind of debugging)smtp unix - - n - - smtp -vThat will certainly show the smtp session including which user is being used for authentication and the result.John _______________________________________________ Postfix-users mailing list -- [email protected] To unsubscribe send an email to [email protected]
2026-02-03T14:48:59.408005-05:00 dap002 postfix/smtpd[142495]: >>> CHECKING Recipient address VALIDATION MAPS <<< 2026-02-03T14:48:59.408056-05:00 dap002 postfix/smtpd[142495]: ctable_locate: leave existing entry key [email protected][email protected] 2026-02-03T14:48:59.408110-05:00 dap002 postfix/smtpd[142495]: maps_find: recipient_canonical_maps: [email protected]: not found 2026-02-03T14:48:59.408167-05:00 dap002 postfix/smtpd[142495]: match_string: mydestination: gmail.com ~? dap002.localdomain 2026-02-03T14:48:59.408224-05:00 dap002 postfix/smtpd[142495]: match_string: mydestination: gmail.com ~? localhost.localdomain 2026-02-03T14:48:59.408275-05:00 dap002 postfix/smtpd[142495]: match_string: mydestination: gmail.com ~? localhost 2026-02-03T14:48:59.408327-05:00 dap002 postfix/smtpd[142495]: match_list_match: gmail.com: no match 2026-02-03T14:48:59.408379-05:00 dap002 postfix/smtpd[142495]: maps_find: recipient_canonical_maps: @gmail.com: not found 2026-02-03T14:48:59.408435-05:00 dap002 postfix/smtpd[142495]: mail_addr_find: [email protected] -> (not found) 2026-02-03T14:48:59.408492-05:00 dap002 postfix/smtpd[142495]: maps_find: canonical_maps: [email protected]: not found 2026-02-03T14:48:59.408555-05:00 dap002 postfix/smtpd[142495]: match_string: mydestination: gmail.com ~? dap002.localdomain 2026-02-03T14:48:59.408607-05:00 dap002 postfix/smtpd[142495]: match_string: mydestination: gmail.com ~? localhost.localdomain 2026-02-03T14:48:59.408659-05:00 dap002 postfix/smtpd[142495]: match_string: mydestination: gmail.com ~? localhost 2026-02-03T14:48:59.408719-05:00 dap002 postfix/smtpd[142495]: match_list_match: gmail.com: no match 2026-02-03T14:48:59.408767-05:00 dap002 postfix/smtpd[142495]: maps_find: canonical_maps: @gmail.com: not found 2026-02-03T14:48:59.408823-05:00 dap002 postfix/smtpd[142495]: mail_addr_find: [email protected] -> (not found) 2026-02-03T14:48:59.408875-05:00 dap002 postfix/smtpd[142495]: maps_find: virtual_alias_maps: [email protected]: not found 2026-02-03T14:48:59.408939-05:00 dap002 postfix/smtpd[142495]: match_string: mydestination: gmail.com ~? dap002.localdomain 2026-02-03T14:48:59.408994-05:00 dap002 postfix/smtpd[142495]: match_string: mydestination: gmail.com ~? localhost.localdomain 2026-02-03T14:48:59.409045-05:00 dap002 postfix/smtpd[142495]: match_string: mydestination: gmail.com ~? localhost 2026-02-03T14:48:59.409095-05:00 dap002 postfix/smtpd[142495]: match_list_match: gmail.com: no match 2026-02-03T14:48:59.409149-05:00 dap002 postfix/smtpd[142495]: maps_find: virtual_alias_maps: @gmail.com: not found 2026-02-03T14:48:59.409200-05:00 dap002 postfix/smtpd[142495]: mail_addr_find: [email protected] -> (not found) 2026-02-03T14:48:59.409259-05:00 dap002 postfix/smtpd[142495]: before input_transp_cleanup: cleanup flags = enable_header_body_filter enable_automatic_bcc
enable_address_mapping enable_milters2026-02-03T14:48:59.409316-05:00 dap002 postfix/smtpd[142495]: after input_transp_cleanup: cleanup flags = enable_header_body_filter enable_automatic_bcc e
nable_address_mapping2026-02-03T14:48:59.409370-05:00 dap002 postfix/smtpd[142495]: name_mask: sendmail 2026-02-03T14:48:59.409422-05:00 dap002 postfix/smtpd[142495]: name_mask: verify 2026-02-03T14:48:59.409474-05:00 dap002 postfix/smtpd[142495]: connect to subsystem public/cleanup 2026-02-03T14:48:59.409525-05:00 dap002 postfix/smtpd[142495]: public/cleanup socket: wanted attribute: protocol 2026-02-03T14:48:59.409576-05:00 dap002 postfix/smtpd[142495]: input attribute name: protocol 2026-02-03T14:48:59.409634-05:00 dap002 postfix/smtpd[142495]: input attribute value: cleanup_protocol 2026-02-03T14:48:59.409687-05:00 dap002 postfix/smtpd[142495]: public/cleanup socket: wanted attribute: queue_id 2026-02-03T14:48:59.409743-05:00 dap002 postfix/smtpd[142495]: input attribute name: queue_id 2026-02-03T14:48:59.409795-05:00 dap002 postfix/smtpd[142495]: input attribute value: 613D4500071 2026-02-03T14:48:59.409852-05:00 dap002 postfix/smtpd[142495]: public/cleanup socket: wanted attribute: (list terminator) 2026-02-03T14:48:59.409919-05:00 dap002 postfix/smtpd[142495]: input attribute name: (end) 2026-02-03T14:48:59.409974-05:00 dap002 postfix/smtpd[142495]: send attr flags = 178 2026-02-03T14:48:59.410024-05:00 dap002 postfix/smtpd[142495]: 613D4500071: client=localhost[127.0.0.1] 2026-02-03T14:48:59.410080-05:00 dap002 postfix/smtpd[142495]: > localhost[127.0.0.1]: 250 2.1.5 Ok 2026-02-03T14:48:59.410141-05:00 dap002 postfix/smtpd[142495]: smtp_stream_setup: maxtime=300 enable_deadline=0 min_data_rate=0 2026-02-03T14:48:59.410194-05:00 dap002 postfix/smtpd[142495]: < localhost[127.0.0.1]: DATA 2026-02-03T14:48:59.410247-05:00 dap002 postfix/smtpd[142495]: > localhost[127.0.0.1]: 354 End data with <CR><LF>.<CR><LF> 2026-02-03T14:48:59.410304-05:00 dap002 postfix/smtpd[142495]: smtp_stream_setup: maxtime=300 enable_deadline=0 min_data_rate=500 2026-02-03T14:48:59.440977-05:00 dap002 postfix/cleanup[142497]: 613D4500071: message-id=<[email protected]> 2026-02-03T14:48:59.500228-05:00 dap002 postfix/smtpd[142495]: public/cleanup socket: wanted attribute: status 2026-02-03T14:48:59.500408-05:00 dap002 postfix/smtpd[142495]: input attribute name: status 2026-02-03T14:48:59.500508-05:00 dap002 postfix/smtpd[142495]: input attribute value: 0 2026-02-03T14:48:59.500676-05:00 dap002 postfix/smtpd[142495]: public/cleanup socket: wanted attribute: reason 2026-02-03T14:48:59.500779-05:00 dap002 postfix/smtpd[142495]: input attribute name: reason 2026-02-03T14:48:59.500886-05:00 dap002 postfix/smtpd[142495]: input attribute value: (end) 2026-02-03T14:48:59.501030-05:00 dap002 postfix/smtpd[142495]: public/cleanup socket: wanted attribute: (list terminator) 2026-02-03T14:48:59.501182-05:00 dap002 postfix/smtpd[142495]: input attribute name: (end) 2026-02-03T14:48:59.501267-05:00 dap002 postfix/smtpd[142495]: > localhost[127.0.0.1]: 250 2.0.0 Ok: queued as 613D4500071 2026-02-03T14:48:59.501355-05:00 dap002 postfix/smtpd[142495]: smtp_stream_setup: maxtime=300 enable_deadline=0 min_data_rate=0 2026-02-03T14:48:59.501857-05:00 dap002 postfix/qmgr[141637]: 613D4500071: from=<[email protected]>, size=10492, nrcpt=1 (queue active) 2026-02-03T14:48:59.584843-05:00 dap002 postfix/lmtp[142498]: 613D4500071: to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:8024, delay=0.2, delays=0.
11/0.02/0/0.06, dsn=2.0.0, status=sent (250 Ok)2026-02-03T14:48:59.587038-05:00 dap002 postfix/qmgr[141637]: 613D4500071: removed
The lines that say [email protected] not found are suspicious. Where is it looking and expecting to find that address and is that potentially the cause of the problem?
OpenPGP_signature.asc
Description: OpenPGP digital signature
_______________________________________________ Postfix-users mailing list -- [email protected] To unsubscribe send an email to [email protected]
