[Dovecot] Postfix, Dovecot SASL and Entourage smtps authentication fails.

Mart Pirita mart at e-positive.ee
Wed Apr 15 12:33:43 EEST 2009


Tere.

Recently just migrated from Sendmail 8.14.3 to Postfix 2.5.6 and
switched from Cyrus-sasl 2.1.22 to Dovecot 1.1.13 sasl, all are compiled
from source and I have used Dovecot for a long time, since alpha versions.

Everything worked well for Outlook Express, Outlook and Thunderbird
clients, but Microsoft Entourage 2004 or 2008 clients smtps fails -
"Authentication failed because Entourage doesn't support any of the
available authentication methods."

Similar case like -
http://archives.neohapsis.com/archives/postfix/2008-09/thread.html#145

I tried everything, the config is like described in Postfix and Dovecot
sites - http://wiki.dovecot.org/HowTo/PostfixAndDovecotSASL

I also tried in main.cf smtpd_sasl_security_options =forward_secrecy
like described in
http://www.postfix.org/postconf.5.html#smtpd_sasl_security_options

But none helped.

So I switched back to Cyrus-sasl and Entourage works well like before
with sendmail.

I started to search what may be the reason, and seems with Dovecot sasl
Postfix wont advertise needed stuff in ehlo:

With Cyrus:

telnet localhost 25
Trying 127.0.0.1...
Connected to localdomain.localhost.
Escape character is '^]'.
220 my.host.ee ESMTP
EHLO example.com
250-my.host.ee
250-PIPELINING
250-SIZE
250-ETRN
250-STARTTLS
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN
starttls
220 2.0.0 Ready to start TLS

With dovecot:
telnet localhost 25
Trying 127.0.0.1...
Connected to localdomain.localhost.
Escape character is '^]'.
220 my.host.ee ESMTP
EHLO example.com
starttls
220 2.0.0 Ready to start TLS


Setting with Cyrus in main.cf smtpd_tls_auth_only = no gives even more
but still nothing with Dovecot:

telnet localhost 25
Trying 127.0.0.1...
Connected to localdomain.localhost.
Escape character is '^]'.
220 my.host.eeESMTP
EHLO example.com
250-my.host.ee
250-PIPELINING
250-SIZE
250-ETRN
250-STARTTLS
250-AUTH PLAIN LOGIN
250-AUTH=PLAIN LOGIN
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN

So is this a Entourage or Dovecot or Postfix bug? I really like to drop
the Cyrus and use only Dovecot sasl.

Any hint is welcome.

-- 
Mart



More information about the dovecot mailing list