I am trying to enable user authentication on breezy Ubuntu using Postfix, dovecot, sasl, and tls. I followed the instructions on the "perfect breezy isp" setup howto for postfix, sasl and tls. but when I telnet into port 25, I do not get a complete connection. I get STARTTLS, but I do not get the AUTH line. When I check my logs (/var/log/syslog) I find a line that says it cannot find the smtpd.key file (which is there) and that there is a TLS library problem. I really would like to get this going. I have been working on this for a couple of days, with no success on my own, so I am appealing for help if someone has the time.
What's in your mail log? Also make sure you follow the tutorial as close as possible as I know that Postfix SMTP-AUTH and TLS is working afterwards.
sasl and tls problems This comes from the mail log (/var/log/mail.log) immediately after one of the other users try to login. ===== Aug 5 09:22:49 livingsky postfix/anvil[29411]: statistics: max connection rate 1/60s for (smtp:216.40.36.59) at Aug 5 09:19 :25 Aug 5 09:22:49 livingsky postfix/anvil[29411]: statistics: max connection count 1 for (smtp:216.40.36.59) at Aug 5 09:19:25 Aug 5 09:22:49 livingsky postfix/anvil[29411]: statistics: max cache size 1 at Aug 5 09:19:25 Aug 5 09:22:50 livingsky postfix/smtpd[29460]: warning: cannot get private key from file /etc/postifx/ssl/smtpd.key Aug 5 09:22:50 livingsky postfix/smtpd[29460]: warning: TLS library problem: 29460:error:02001002:system library:fopen:No su ch file or directory:bss_file.c:278:fopen('/etc/postifx/ssl/smtpd.key','r'): Aug 5 09:22:50 livingsky postfix/smtpd[29460]: warning: TLS library problem: 29460:error:20074002:BIO routines:FILE_CTRL:sys tem lib:bss_file.c:280: Aug 5 09:22:50 livingsky postfix/smtpd[29460]: warning: TLS library problem: 29460:error:140B0002:SSL routines:SSL_CTX_use_P rivateKey_file:system lib:ssl_rsa.c:693: Aug 5 09:22:50 livingsky postfix/smtpd[29460]: cannot load RSA certificate and key data Aug 5 09:22:51 livingsky postfix/smtpd[29460]: connect from c1m31.emaildefenseservice.com[216.40.36.64] Aug 5 09:22:51 livingsky postfix/smtpd[29460]: warning: support for restriction "check_relay_domains" will be removed from P ostfix; use "reject_unauth_destination" instead ===== I checked to make sure that the file that is being referred to (/etc/postfix/ssl/smtpd.key) is there but I don't know what the 'r' refers to in that same reference. (fopen('/etc/postifx/ssl/smtpd.key','r') The permissions on the files in that directory are -rw-r--r-- 1 root root 1123 2006-08-04 10:18 cacert.pem -rw-r--r-- 1 root root 963 2006-08-04 10:18 cakey.pem -rw-r--r-- 1 root root 891 2006-08-04 09:56 smtpd.crt -rw-r--r-- 1 root root 672 2006-08-04 09:55 smtpd.csr -rw-r--r-- 1 root root 887 2006-08-04 09:56 smtpd.key -rw-r--r-- 1 postfix postfix 2201 2006-07-28 09:31 smtpd.pem and the smtpd.key only includes the private key. And I followed the steps of the how-to by cutting and pasting to make sure that my fingers didn't slip while I was following the process. I have gone over each step twice.
I guess you entered some invalid information when you created the TLS certs and were asked some questions. Please create those certs again and try to accept the default answers.
Found error Found it! If you look at the error messages in /var/log/syslog it says that it couldn't find a file in /etc/postifx/.... That would be because there is no file in /etc/postifx, it is in /etc/postfix/... Thanks for your help anyway.
postfix/smtp/imap/tls problem - Starting again Hi Ok, since the last time I posted here, my hard drive failed and I had to re-install my system (backup was not pulled off machine yet). I have Ubuntu, Postfix, Courier (imap and pop3), tls, and would like to install spamassassin and clamav as well, but first have to solve a little problem. I have users (two of them) who can login to the sytem from an external ip, but they cannot send from there. I can't even get an internal relay going if I use the external server address in their mail client. Again, they can retrieve mail, but cannot send. I thought that I had it all setup the way it was before, I even followed (by cut and paste) the perfect setup for Dapper, so have no idea what is wrong nor how to find it. I have perused days worth of mail and various other sources in my search throughout the internet to try and solve this myself, but find that I have to now come to you and whisper loudly HELP! (please)
smtp-auth problems This is what it says in my /var/log/mail.log Oct 3 15:47:01 localhost pop3d-ssl: LOGOUT, user=bob, ip=[::ffff:192.168.1.101], top=0, retr=0, time=0 Oct 3 15:51:25 localhost postfix/smtpd[27297]: connect from unknown[142.165.92.129] Oct 3 15:51:27 localhost postfix/smtpd[27297]: disconnect from unknown[142.165.92.129] Oct 3 15:51:28 localhost imapd-ssl: Connection, ip=[::ffff:142.165.92.129] Oct 3 15:51:31 localhost imapd-ssl: LOGIN, user=glydiate, ip=[::ffff:142.165.92.129], protocol=IMAP Oct 3 15:51:32 localhost imapd-ssl: Unexpected SSL connection shutdown. Oct 3 15:51:32 localhost imapd-ssl: DISCONNECTED, user=glydiate, ip=[::ffff:142.165.92.129], headers=0, body=0, time=1, starttls=1 Oct 3 15:51:33 localhost imapd-ssl: Connection, ip=[::ffff:142.165.92.129] Oct 3 15:51:33 localhost imapd-ssl: LOGIN, user=glydiate, ip=[::ffff:142.165.92.129], protocol=IMAP Oct 3 15:51:35 localhost imapd-ssl: Unexpected SSL connection shutdown. Oct 3 15:51:35 localhost imapd-ssl: DISCONNECTED, user=glydiate, ip=[::ffff:142.165.92.129], headers=0, body=0, time=2, starttls=1 This shows two instances, there were four tries with the same messages. Bob
smtp-auth problems Please note that in the above message, the outside address she is trying to send from is 142.165.92.129, internal messages go fine, and are still imap.
This is about fetching emails (IMAP), but you have problems with sending. Please post another log excerpt.
smtp-auth problems Sorry, I thought I included the two lines that showed the smtp attempt to connect. She tried four times, and this is all that it had in the logs for each of those four times. This is from the /var/log/mail.log. I could find no other reference (except for the same lines in syslog) in any other log file. I am not sure how to get more information into/out of the logs for postfix. I could not find a loglevel instruction to get more debug type information. Oct 3 15:52:47 localhost postfix/smtpd[27297]: connect from regnsk03d030101129.dial.sasknet.sk.ca[142.165.92.129] Oct 3 15:52:48 localhost postfix/smtpd[27297]: disconnect from regnsk03d030101129.dial.sasknet.sk.ca[142.165.92.129] Bob
Please post the output of Code: telnet localhost 25 ehlo localhost Are you sure you followed the "Perfect Setup" as close as possible? MAybe it's a good idea to redo the Postfix/saslauthd part.
smtp-auth problems command one root@fish:/home/bob# telnet localhost 25 Trying 127.0.0.1... Connected to localhost.localdomain. Escape character is '^]'. 220 livingsky.net ESMTP Postfix (Ubuntu) command two ehlo localhost 250-livingsky.net 250-PIPELINING 250-SIZE 10240000 250-VRFY 250-ETRN 250-STARTTLS 250-AUTH PLAIN LOGIN 250-AUTH=PLAIN LOGIN 250 8BITMIME Following the how-to was a cut & paste job, except for where I had to change a value (e.g. password). I will try to find some time today to redo the perfect setup, and will let you know. Bob
Maybe there's still a small typo somewhere, or you accidentally left out a few characters when you copied something... Anyway, the telnet output is ok.
