[Dovecot] dovecot sasl + postfix issue

[Bill Shirley]

You should get AUTH after you STARTTLS.

Bill


On 9/3/2012 5:10 AM, tseveendorj wrote:
> Hello,
>
> I'm trying to configure postfix + Dovecot SASL for user authenticated 
> mail relay.
>
> I set following configuration on postfix
>
> queue_directory = /var/spool/postfix
> smtpd_sasl_auth_enable = yes
> smtpd_sasl_type = dovecot
> smtpd_sasl_path = private/auth
> smtpd_sasl_authenticated_header = yes
> smtpd_sasl_security_options = noanonymous
> smtpd_sasl_local_domain = $myhostname
> broken_sasl_auth_clients = yes
> smtpd_recipient_restrictions = reject_unknown_sender_domain, 
> reject_unknown_recipient_domain, reject_unauth_pipelining, 
> permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination
>
> Following are dovecot -n
>
> # 2.0.19: /etc/dovecot/dovecot.conf
> # OS: Linux 3.2.0-29-generic x86_64 Ubuntu 12.04.1 LTS
> auth_mechanisms = plain login digest-md5
> base_dir = /var/run/dovecot/
> mail_location = maildir:~/Maildir
> managesieve_notify_capability = mailto
> managesieve_sieve_capability = fileinto reject envelope 
> encoded-character vacation subaddress comparator-i;ascii-numeric 
> relational regex imap4flags copy include variables body enotify 
> environment mailbox date ihave
> passdb {
>   driver = pam
> }
> plugin {
>   sieve = ~/.dovecot.sieve
>   sieve_dir = ~/sieve
> }
> protocols = imap pop3 sieve
> service auth {
>   unix_listener /var/spool/postfix/private/auth {
>     group = postfix
>     mode = 0660
>     user = postfix
>   }
>   unix_listener /var/spool/postfix/private/dovecot-auth {
>     group = postfix
>     mode = 0660
>     user = postfix
>   }
> }
> ssl_cert = </etc/ssl/certs/dovecot.pem
> ssl_cipher_list = 
> ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM
> ssl_key = </etc/ssl/private/dovecot.pem
> userdb {
>   driver = passwd
> }
> protocol imap {
>   imap_client_workarounds = delay-newmail
>   mail_max_userip_connections = 10
> }
> protocol pop3 {
>   mail_max_userip_connections = 10
>   pop3_client_workarounds = outlook-no-nuls oe-ns-eoh
> }
> protocol lda {
>   deliver_log_format = msgid=%m: %$
>   mail_plugins = sieve
>   postmaster_address = postmaster
>   quota_full_tempfail = yes
>   rejection_reason = Your message to <%t> was automatically rejected:%n%r
>
>
>
> when I see telnet localhost 25
>
> eberx at beastie:/etc/dovecot/conf.d$ telnet localhost 25
> Trying 127.0.0.1...
> Connected to localhost.
> Escape character is '^]'.
> 220 beastie ESMTP Postfix (Ubuntu)
> ehlo beastie
> 250-beastie
> 250-PIPELINING
> 250-SIZE 10240000
> 250-VRFY
> 250-ETRN
> 250-STARTTLS
> 250-ENHANCEDSTATUSCODES
> 250-8BITMIME
> 250 DSN
> quit
> 221 2.0.0 Bye
> Connection closed by foreign host.
>
> there is no 250-AUTH
>
> How do I fix this ?