Hello all i have postfix running with dovecot-sasl and mysql as a backend.
It all runs good.
I run into trouble as where outlook 2003 fails to authenticate when
sending e-mail.
I have thunderbird outlook2007 and 2003 clients.
The tunderbird and 2007 clients are working OK, the outlook2003 client
get the relay access denied message.
In the postfix log i see it is not initiating sasl
they all use pop
i use dovecot 1.0.13
this is my posfix part of sasl
smtpd_sasl_auth_enable = yes
smtpd_sasl_exceptions_networks = $mynetworks
broken_sasl_auth_clients = yes
smtpd_recipient_restrictions = permit_mynetworks,
permit_sasl_authenticated,
reject_unauth_destination
permit
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth
and this is my dovecot sasl part
# dovecot SASL
socket listen {
client {
# Assuming the default Postfix $queue_directory setting
path = /var/spool/postfix/private/auth
mode = 0660
# Assuming the default Postfix user and group
user = postfix
group = postfix
}
}
Am i doing something wrong?
I guess if it is not configured right outlook 2007 and thunderbird will
fail also!
regards,
Johan Hendriks
Hi!
I have a similar configuration - and run into the same problem before
two weeks.
As I remember I expanded the following line in dovecot.conf:
-->
mechanisms = plain login
<--
It works for me and hopefully it is the correct solution (even if I am
no dovecot-expert).
Kind regards,
Jens
Johan Hendriks schrieb:> Hello all i have postfix running with dovecot-sasl and mysql as a backend.
> It all runs good.
>
> I run into trouble as where outlook 2003 fails to authenticate when
> sending e-mail.
> I have thunderbird outlook2007 and 2003 clients.
> The tunderbird and 2007 clients are working OK, the outlook2003 client
> get the relay access denied message.
> In the postfix log i see it is not initiating sasl
>
> they all use pop
>
> i use dovecot 1.0.13
> this is my posfix part of sasl
>
> smtpd_sasl_auth_enable = yes
> smtpd_sasl_exceptions_networks = $mynetworks
> broken_sasl_auth_clients = yes
> smtpd_recipient_restrictions = permit_mynetworks,
> permit_sasl_authenticated,
> reject_unauth_destination
> permit
> smtpd_sasl_type = dovecot
> smtpd_sasl_path = private/auth
>
> and this is my dovecot sasl part
> # dovecot SASL
> socket listen {
> client {
> # Assuming the default Postfix $queue_directory setting
> path = /var/spool/postfix/private/auth
> mode = 0660
> # Assuming the default Postfix user and group
> user = postfix
> group = postfix
> }
> }
>
> Am i doing something wrong?
> I guess if it is not configured right outlook 2007 and thunderbird will
> fail also!
>
> regards,
> Johan Hendriks
>
>
>
>
>
Thank you so much that was it! I just migrated from one server to another and that line did not made it in the new dovecot.conf file. Well i need to use diff more. Thanks again Jens Meyer schreef:> Hi! > > I have a similar configuration - and run into the same problem before > two weeks. > > As I remember I expanded the following line in dovecot.conf: > --> > mechanisms = plain login > <-- > > It works for me and hopefully it is the correct solution (even if I am > no dovecot-expert). > > Kind regards, > > Jens > > Johan Hendriks schrieb: >> Hello all i have postfix running with dovecot-sasl and mysql as a >> backend. >> It all runs good. >> >> I run into trouble as where outlook 2003 fails to authenticate when >> sending e-mail. >> I have thunderbird outlook2007 and 2003 clients. >> The tunderbird and 2007 clients are working OK, the outlook2003 >> client get the relay access denied message. >> In the postfix log i see it is not initiating sasl >> >> they all use pop >> >> i use dovecot 1.0.13 >> this is my posfix part of sasl >> >> smtpd_sasl_auth_enable = yes >> smtpd_sasl_exceptions_networks = $mynetworks >> broken_sasl_auth_clients = yes >> smtpd_recipient_restrictions = permit_mynetworks, >> permit_sasl_authenticated, >> reject_unauth_destination >> permit >> smtpd_sasl_type = dovecot >> smtpd_sasl_path = private/auth >> >> and this is my dovecot sasl part >> # dovecot SASL >> socket listen { >> client { >> # Assuming the default Postfix $queue_directory setting >> path = /var/spool/postfix/private/auth >> mode = 0660 >> # Assuming the default Postfix user and group >> user = postfix >> group = postfix >> } >> } >> >> Am i doing something wrong? >> I guess if it is not configured right outlook 2007 and thunderbird >> will fail also! >> >> regards, >> Johan Hendriks >> >> >> >> >> > >
On Wed, 12 Mar 2008 16:24:11 +0100
Johan Hendriks <j.hendriks at schavemaker.com> wrote:
{snip}
> this is my posfix part of sasl
>
> smtpd_sasl_auth_enable = yes
> smtpd_sasl_exceptions_networks = $mynetworks
> broken_sasl_auth_clients = yes
> smtpd_recipient_restrictions = permit_mynetworks,
> permit_sasl_authenticated,
> reject_unauth_destination
> permit
^^^^^^
Are you sure about the last 'permit'. You are potentially making
yourself an open relay. I would suggest 'reject' as the correct action.
You might want to inquire on the Postfix forum for more info.
{snip}
--
Gerard
gerard at seibercom.net
Winning isn't everything. It's the only thing.
Vince Lombardi
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 195 bytes
Desc: not available
URL:
<http://dovecot.org/pipermail/dovecot/attachments/20080312/431092fc/attachment-0002.bin>
Gerard schreef:> On Wed, 12 Mar 2008 16:24:11 +0100 > Johan Hendriks <j.hendriks at schavemaker.com> wrote: > > {snip} > > >> this is my posfix part of sasl >> >> smtpd_sasl_auth_enable = yes >> smtpd_sasl_exceptions_networks = $mynetworks >> broken_sasl_auth_clients = yes >> smtpd_recipient_restrictions = permit_mynetworks, >> permit_sasl_authenticated, >> reject_unauth_destination >> permit >> > ^^^^^^ > Are you sure about the last 'permit'. You are potentially making > yourself an open relay. I would suggest 'reject' as the correct action. > > You might want to inquire on the Postfix forum for more info. > > {snip} > > >Thanks after the merge i started to test a lot of things because outlook2003 did not work so i added that one to try out, Left that one in, it is out now thanks guys for the good help regards, Johan