You should get AUTH after you STARTTLS.
Bill
On 9/3/2012 5:10 AM, tseveendorj wrote:> Hello,
>
> I'm trying to configure postfix + Dovecot SASL for user authenticated
> mail relay.
>
> I set following configuration on postfix
>
> queue_directory = /var/spool/postfix
> smtpd_sasl_auth_enable = yes
> smtpd_sasl_type = dovecot
> smtpd_sasl_path = private/auth
> smtpd_sasl_authenticated_header = yes
> smtpd_sasl_security_options = noanonymous
> smtpd_sasl_local_domain = $myhostname
> broken_sasl_auth_clients = yes
> smtpd_recipient_restrictions = reject_unknown_sender_domain,
> reject_unknown_recipient_domain, reject_unauth_pipelining,
> permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination
>
> Following are dovecot -n
>
> # 2.0.19: /etc/dovecot/dovecot.conf
> # OS: Linux 3.2.0-29-generic x86_64 Ubuntu 12.04.1 LTS
> auth_mechanisms = plain login digest-md5
> base_dir = /var/run/dovecot/
> mail_location = maildir:~/Maildir
> managesieve_notify_capability = mailto
> managesieve_sieve_capability = fileinto reject envelope
> encoded-character vacation subaddress comparator-i;ascii-numeric
> relational regex imap4flags copy include variables body enotify
> environment mailbox date ihave
> passdb {
> driver = pam
> }
> plugin {
> sieve = ~/.dovecot.sieve
> sieve_dir = ~/sieve
> }
> protocols = imap pop3 sieve
> service auth {
> unix_listener /var/spool/postfix/private/auth {
> group = postfix
> mode = 0660
> user = postfix
> }
> unix_listener /var/spool/postfix/private/dovecot-auth {
> group = postfix
> mode = 0660
> user = postfix
> }
> }
> ssl_cert = </etc/ssl/certs/dovecot.pem
> ssl_cipher_list =
> ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM
> ssl_key = </etc/ssl/private/dovecot.pem
> userdb {
> driver = passwd
> }
> protocol imap {
> imap_client_workarounds = delay-newmail
> mail_max_userip_connections = 10
> }
> protocol pop3 {
> mail_max_userip_connections = 10
> pop3_client_workarounds = outlook-no-nuls oe-ns-eoh
> }
> protocol lda {
> deliver_log_format = msgid=%m: %$
> mail_plugins = sieve
> postmaster_address = postmaster
> quota_full_tempfail = yes
> rejection_reason = Your message to <%t> was automatically
rejected:%n%r
>
>
>
> when I see telnet localhost 25
>
> eberx at beastie:/etc/dovecot/conf.d$ telnet localhost 25
> Trying 127.0.0.1...
> Connected to localhost.
> Escape character is '^]'.
> 220 beastie ESMTP Postfix (Ubuntu)
> ehlo beastie
> 250-beastie
> 250-PIPELINING
> 250-SIZE 10240000
> 250-VRFY
> 250-ETRN
> 250-STARTTLS
> 250-ENHANCEDSTATUSCODES
> 250-8BITMIME
> 250 DSN
> quit
> 221 2.0.0 Bye
> Connection closed by foreign host.
>
> there is no 250-AUTH
>
> How do I fix this ?