SASL PLAIN authentication failed

[Paul Howarth]

Stu@ Murray-Smith wrote:
> On 11/8/06, Paul Howarth <paul at city-fan.org> wrote:
>> Stu@ Murray-Smith wrote:
>> > Hi list
>> >
>> > Implementing DRP, and like a bicycle... too tired :-)
>> >
>> > Fresh install of:
>> > FC4
>> > Postfix-2.2.2
>> > Cyrus-IMAP-2.2.12
>> > web-cyradm-0.5.4-1
>> >
>> > as per:
>> >
>> > 
>> http://www.campworld.net/thewiki/pmwiki.php/LinuxServers/FC4VirtMailServer 
>>
>> >
>> > The server is stand alone internet server. I can SMTP email from the
>> > server via Squirrelmail (on server), but not via an email client (off
>> > server).
>> >
>> > 'tail -f /var/log/maillog' shows:
>> >
>> > warning: dsl-aaa-bbb-ccc.xxx-adsl.tld[aaa.bbb.ccc.ddd]: SASL PLAIN
>> > authentication failed
>> >
>> > '/usr/sbin/postconf -n' shows:
>> >
>> > alias_database = hash:/etc/aliases
>> > alias_maps = hash:/etc/aliases
>> > broken_sasl_auth_clients = yes
>> > command_directory = /usr/sbin
>> > config_directory = /etc/postfix
>> > daemon_directory = /usr/libexec/postfix
>> > debug_peer_level = 2
>> > delay_warning_time = 4h
>> > html_directory = no
>> > inet_interfaces = all
>> > local_transport = cyrus
>> > mail_owner = postfix
>> > mailbox_transport = cyrus
>> > mailq_path = /usr/bin/mailq.postfix
>> > manpage_directory = /usr/share/man
>> > mydestination =
>> > $myhostname,    localhost.$mydomain,    localhost,
>> > mysql:/etc/postfix/mysql-mydestination.cf
>> > mydomain = d0main.tld
>> > myhostname = h0st.d0main.tld
>> > mynetworks = 127.0.0.0/8,       192.168.1.0/28, xxx.yyy.zzz.0/28
>> > myorigin = $myhostname
>> > newaliases_path = /usr/bin/newaliases.postfix
>> > queue_directory = /var/spool/postfix
>> > readme_directory = /usr/share/doc/postfix-2.2.2/README_FILES
>> > recipient_delimiter = +
>> > relay_domains = $mydestination
>> > sample_directory = /usr/share/doc/postfix-2.2.2/samples
>> > sender_canonical_maps = mysql:/etc/postfix/mysql-canonical.cf
>> > sendmail_path = /usr/sbin/sendmail.postfix
>> > setgid_group = postdrop
>> > smtpd_client_restrictions =
>> > smtpd_helo_restrictions =
>> > smtpd_recipient_restrictions =
>> > reject_non_fqdn_sender, reject_non_fqdn_recipient,
>> > reject_unknown_sender_domain,   reject_unknown_recipient_domain,
>> > permit_mynetworks,      permit_sasl_authenticated,
>> > reject_unauth_destination,      reject_unauth_pipelining,
>> > reject_invalid_hostname,        reject_non_fqdn_hostname,
>> > reject_rbl_client       cbl.abuseat.org reject_rbl_client
>> > dul.dnsbl.sorbs.net     reject_rbl_client       sbl.spamhaus.org
>> > reject_rbl_client       list.dsbl.org   reject_rbl_client
>> > relays.ordb.org reject_rbl_client       opm.blitzed.org
>> > reject_rhsbl_sender     dsn.rfc-ignorant.org    permit
>> > smtpd_sasl_auth_enable = yes
>> > smtpd_sasl_local_domain =
>> > smtpd_sasl_security_options = noanonymous
>> > smtpd_sender_restrictions =
>> > transport_maps =
>> > mysql:/etc/postfix/mysql-transport.cf,
>> > regexp:/etc/postfix/transport_regexp
>> > unknown_local_recipient_reject_code = 550
>> > virtual_alias_maps =
>> > mysql:/etc/postfix/mysql-virtual.cf,    
>> regexp:/etc/postfix/virtual_regexp
>> >
>> > Any insight appreciated :-)
>>
>> Perhaps you need to install the cyrus-sasl-plain package?
> 
> Hi Paul
> 
> Would changing MTAs by running '/usr/sbin/alternatives --config mta'
> have changed auth'ing methods?

Well each MTA may do AUTH in its own way, so possibly yes. I only have 
experience with sendmail so I can't offer any suggestions for fixing 
postfix.

Paul.