dovecot and postfix discrepancy in logins

Discussion in 'ISPConfig 3 Priority Support' started by Turgut Kalfaoglu, Feb 22, 2025.

  1. Turgut Kalfaoglu

    Turgut Kalfaoglu Member HowtoForge Supporter

    Hi. I just noticed that I can telnet to port 110 and login with some password.
    but I can't do it with the same credentials with postfix!
    I must have some configuration wrong. My aim was to provide ssl,tls,plain logins to both dovecot and postfix, so that even iphone users can connect to the system :)

    I tried this:
    Code:
    $ swaks --to [email protected] --server mail.kalfaoglu.net:587 [email protected] --auth-password=T@2uU318111
    === Trying mail.kalfaoglu.net:587...
    === Connected to mail.kalfaoglu.net.
    <-  220 latte.kalfaoglu.net ESMTP Postfix
    -> EHLO somelaptop
    <-  250-mail.kalfaoglu.net
    <-  250-PIPELINING
    <-  250-SIZE
    <-  250-ETRN
    <-  250-STARTTLS
    <-  250-AUTH PLAIN LOGIN DIGEST-MD5
    <-  250-AUTH=PLAIN LOGIN DIGEST-MD5
    <-  250-ENHANCEDSTATUSCODES
    <-  250-8BITMIME
    <-  250-DSN
    <-  250 CHUNKING
    -> AUTH DIGEST-MD5
    <-  334 cmVhbG09IiIsbm9uY2U9Ikdqaa223123kE9PSIscW9wPSJhdXRoIixjaGFyc2V0PSJ1dGYtOCIsYWxnb3JpdGhtPSJtZDUtc2VzcyI=
    Use of uninitialized value in numeric eq (==) at /usr/share/perl5/vendor_perl/Authen/SASL/Perl/DIGEST_MD5.pm line 244.
    -> Y2hhcnNldD11dGYtOCxjbm9uY2U9IjAzYTU2YzM3NDMG09IiIscmVzcG9uc2U9ZTc4MDNjZmY5ZjZjOWNlYWNmODY2ZDdkNDhlNjNjZDYsdXNlcm5hbWU9InR1cmd1dEBrYWxmYW9nbHUuY29tIg==
    <** 535 5.7.8 Error: authentication failed: (reason unavailable)
    -> AUTH LOGIN
    <-  334 VXNlcm56
    -> dHV11thbGZhb2dsdS5jb20=
    <-  334 UGFz44333mQ6
    -> VEAydVVr3333enQ=
    <** 535 5.7.8 Error: authentication failed: (reason unavailable)
    -> AUTH PLAIN AHR1cmd1dEBrYWxmYWHHYEYETWGWVVR1p6a3p0
    <** 454 4.7.0 Temporary authentication failure: Connection lost to authentication server
    *** No authentication type succeeded
    -> QUIT
    <-  221 2.0.0 Bye
    === Connection closed with remote host.
    
    PS: Some stuff edited..
     
    Last edited: Feb 22, 2025
  2. Turgut Kalfaoglu

    Turgut Kalfaoglu Member HowtoForge Supporter

    Btw, here is my postconf output
     

    Attached Files:

  3. till

    till Super Moderator Staff Member ISPConfig Developer

    In a default ISPConfig setup, postfix uses Dovecot for authentication and Dovecot then queries the mail_user table to verify the password. This works well with all mail clients, incl. Apple clients, and it also provides TLS-secured connections by default. I guess your problem might be that you enabled the DIGEST-MD5 auth method, which will not work when you use securely one-way hashed passwords like ISPConfig does. You do not need DIGEST-MD5 for Apple clients, they work fine with PLIAN and LOGIN.
     
    Turgut Kalfaoglu likes this.
  4. Turgut Kalfaoglu

    Turgut Kalfaoglu Member HowtoForge Supporter

    Many thanks -- I disabled the DIGEST stuff and left PLAIN and LOGIN. Now it works fine..
     
    till likes this.

Share This Page