On 2021-01-17 18:08, Tom Sommer wrote:
On 2021-01-17 17:29, Wietse Venema wrote:
On 2021-01-17 14:22, Wietse Venema wrote:
>> I just observed Postfix not picking up changes in the SASL auth
>> backend,
>> is there some kind of cache involved here?
>
> There is no such thing in Postfix. Also not in the Postfix Dovcecot
> client.
Curious, and it couldn't be connection cache/reuse or something?
Your Postfix SMTP server logs would contain one smtpd 'connect'
event with multiple smtpd "QUEUEID: client=name[address]" events.
That's basically what I see. A few connect-events and a ton of
"sasl_username" client-events. So the same connection is being reused
by the client to just keep the connection open and send mails,
bypassing any password changes or account deletion. Is there some way
to prevent this? Perhaps have the connection die after 10 seconds,
forcing a re-auth?
Jan 17 06:45:23 asmtp postfix/smtpd[25435]: connect from
ip192.ip-51-77-20.eu[51.77.20.192]
....
Jan 17 06:53:47 asmtp postfix/smtpd[25435]: disconnect from
ip192.ip-51-77-20.eu[51.77.20.192] ehlo=2 starttls=1 auth=1 mail=52
rcpt=52 data=51 commands=159
