localhost logins

[Joseph Tam]

> Jun 27 12:03:27 bubba dovecot: auth:
> ldap(SomeUser at MyDomain.com,127.0.0.1): invalid credentials
>
> The only other thing I can think of - Postfix runs on this server and
> uses Dovecot SASL.  Is it possible the Dovecot auth log line is caused
> by a Postfix connection attempt?

That would have been my first guess.  Why don't you actually try it
out (i.e. login in to SMTP with bad credentials) and see if the
mysterious log entry appears.

 	# Create bogus SMTP auth string
 	AUTH=`echo "\0user\0badpassword\c" | openssl enc -base64`

 	# SMTP session commands
 	echo "EHLO test.client.helo\nAUTH PLAIN $PW\nQUIT" >data

 	# Use whichever command your Postfix supports "250-AUTH PLAIN"
 	#	- if you greet pause, you'll have to enter data manually
 	netcat -C mailserver 25 <data
 	openssl s_client -crlf -quiet -starttls smtp -connect mailserver:25 <data
 	openssl s_client -crlf -quiet -starttls smtp -connect mailserver:587 <data
 	openssl s_client -crlf -quiet -connect mailserver:465 <data

Joseph Tam <jtam.home at gmail.com>