[Postfixbuch-users] Postfix SASL

[Silvio Siefke]

Hallo,


ich habe Postfix auf meinen FreeBSD Server mit Dovecot Auth installiert.

Leider möchte SASL Auth nicht wirklich arbeiten.


#postconf -a
dovecot

# postconf -n
alias_maps = hash:/etc/aliases
allow_percent_hack = no
biff = no
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter = amavisfeed:[127.0.0.1]:10024
daemon_directory = /usr/libexec/postfix
data_directory = /var/db/postfix
disable_vrfy_command = yes
home_mailbox = Maildir/
html_directory = /usr/share/doc/postfix
mail_owner = postfix
mailbox_size_limit = 102400000
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
masquerade_exceptions = root
message_size_limit = 20480000
mydestination = $myhostname, localhost
mydomain = silviosiefke.de
myhostname = hetzner.silviosiefke.de
mynetworks = 127.0.0.0/8
newaliases_path = /usr/bin/newaliases
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/postfix
recipient_delimiter = +
sample_directory = /etc/postfix
sendmail_path = /usr/sbin/sendmail
setgid_group = maildrop
smtp_tls_note_starttls_offer = yes
smtp_use_tls = no
smtpd_client_restrictions =
permit_mynetworks,
permit_sasl_authenticated,
reject_unknown_reverse_client_hostname,
permit
smtpd_data_restrictions =
permit_mynetworks,
permit_sasl_authenticated,
reject_unauth_pipelining,
permit
smtpd_delay_reject = yes
smtpd_helo_required = yes
smtpd_helo_restrictions =
permit_mynetworks,
permit_sasl_authenticated,
reject_invalid_helo_hostname,
reject_non_fqdn_helo_hostname,
permit
smtpd_recipient_restrictions =
permit_mynetworks,
permit_sasl_authenticated,
reject_non_fqdn_recipient,
reject_unknown_recipient_domain,
reject_unauth_destination,
reject_rbl_client bl.spamcop.net,
reject_rbl_client sbl-xbl.spamhaus.org,
permit
smtpd_sasl_auth_enable = yes
smtpd_sasl_path = private/auth
smtpd_sasl_type = dovecot
smtpd_sender_restrictions =
permit_mynetworks,
permit_sasl_authenticated,
reject_non_fqdn_sender,
reject_unknown_sender_domain,
permit
smtpd_tls_cert_file = /etc/postfix/ssl/smtp.pem
smtpd_tls_key_file = /etc/postfix/ssl/smtp.pem
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
smtpd_use_tls = no
soft_bounce = yes
tls_random_source = dev:/dev/urandom
unknown_local_recipient_reject_code = 550
virtual_alias_maps =
proxy:mysql:/etc/postfix/mysql/mysql_virtual_alias_maps.cf
virtual_gid_maps = static:125
virtual_mailbox_base = /home/vmail
virtual_mailbox_domains =
proxy:mysql:/etc/postfix/mysql/mysql_virtual_domains_maps.cf
virtual_mailbox_maps =
proxy:mysql:/etc/postfix/mysql/mysql_virtual_mailbox_maps.cf
virtual_minimum_uid = 125
virtual_transport = virtual
virtual_uid_maps = static:125


<dovecot.conf>
base_dir = /var/run/dovecot/
protocols = imap imaps pop3s
disable_plaintext_auth = no
log_timestamp = "%Y-%m-%d %H:%M:%S "
mail_debug = yes
mail_location = maildir:/home/vmail/%d/%n
mail_access_groups = mail
first_valid_uid = 125
first_valid_gid = 125
log_path = /var/log/dovecot/dovecot.log
info_log_path = /var/log/dovecot/dovecot-info.log
ssl = yes
ssl_cert_file = /etc/postfix/ssl/mail_silviosiefke_de.crt
ssl_key_file = /etc/postfix/ssl/mail_silviosiefke_de.key
protocol imap {
}
protocol pop3 {
  pop3_uidl_format = %08Xu%08Xv
}
protocol lda {
   postmaster_address = hostmaster at silviosiefke.de
}
auth default {
  mechanisms = digest-md5 plain login
  passdb sql {
    args = /usr/local/etc/dovecot-db.conf
  }
  userdb sql {
    args = /usr/local/etc/dovecot-db.conf
  }
  user = root

  socket listen {

master {
      path = /var/run/dovecot/auth-master
      mode = 0600
      user = postfix
      #group = vmail
    }
client {
      path = /var/spool/postfix/private/auth
      mode = 0660
      user = postfix
      group = postfix
    }
  }
}

driver = mysql
connect = dbname=postifx user= host=localhost password=
default_pass_scheme = MD5-CRYPT
password_query = SELECT password FROM mailbox WHERE username = '%u'
user_query = SELECT maildir, 125 AS uid, 125 AS gid FROM mailbox WHERE
username  = '%u'


Logeintrag:
Sep 25 23:23:55 hetzner postfix/smtpd[86111]: connect from
unknown[194.77.0.23]
Sep 25 23:23:57 hetzner postfix/smtpd[86111]: warning:
unknown[194.77.0.23]: SASL PLAIN authentication failed:
Sep 25 23:23:59 hetzner postfix/smtpd[86111]: warning:
unknown[194.77.0.23]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 25 23:24:01 hetzner postfix/smtpd[86111]: disconnect from
unknown[194.77.0.23]



Hat jemand Rat?



MFG
Silvio