Hello Viktor,

again, thanks very much for your help


See below, with the critical additional detail you present now (and
sadly did not know to present before), there's more to be done.


The problem here is, that the annoucement of CRAM-MD5 is false. While it
still does work for older accounts, it does not any more not for newly
created or somehow modified older ones.

BINGO!  The server is advertising CRAM-MD5, and unless you filter it out
SASL will attempt to use that instead of plain.  Therefore, in the
proposed "master.cf" entry you also need:

     -o { smtp_sasl_mechanism_filter = plain }


Well, I did not before my last post. Doing telnet style mail communication with TLS came up during my try to fixing this this.

However, smtp_sasl_mechanism = plain

did not work either, but "login" made my day.

See: https://www.postfix.org/postconf.5.html#smtp_sasl_mechanism_filter

Thanks, I misread this one, I have misunderstood the sasl mechanisms as in password, gssapi.. I guess I'll never understand sasl.

So probably, to answer your initial question, I do suppose I have been
using cram-md5 until now. Now I need to force (not just admit) plain
and, unless I have missed something, the smtp_tls* settings are not enough.

Correct, see above.  Ideally you'd have known to share this new
information, but if you had known it to be important, you might
have solved the problem without outside help, or been close to
doing so...

No, I just did not know before

Anyway, thanks again for your help, highly appreciated!

Ede

_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to