Postfix authentication failed

Issues related to applications and software problems
Post Reply
altiris
Posts: 334
Joined: 2013/05/31 01:27:50

Postfix authentication failed

Post by altiris » 2015/07/04 22:47:46

Tried

Code: Select all

openssl s_client -connect mail.mydomain.com:25 -starttls smtp
and

Code: Select all

openssl s_client -connect mail.mydomain.com:587 -starttls smtp
followed by EHLO mail.mydomain.com and then doing

Code: Select all

AUTH PLAIN mynamehere
and I got

Code: Select all

535 5.7.8 Error: authentication failed:
So obviously something is going wrong in here. My settings in postfix when I ran those two commands above are here: http://pastebin.com/zTL3rQuc and incase this is useful, my master.cf is here: http://pastebin.com/WJ1H0Aef (I have some things from amavsid in here)

nicodemus
Posts: 22
Joined: 2014/07/14 18:20:01

Re: Postfix authentication failed

Post by nicodemus » 2015/07/05 10:12:10

I can't guarantee that this will work, but I just tested something with my Postfix installation which allows me to authenticate successfully:

Obtain the Base64 encoded username/password using:

Code: Select all

perl -MMIME::Base64 -e 'print encode_base64("\000MY_USERNAME\000MY_PASSWORD")'
then:

Code: Select all

openssl s_client -starttls smtp -crlf -connect 127.0.0.1:587
it reported <CONNECTED 00000003> almost immediately then a few seconds later displayed all the certificate details, then:

Code: Select all

AUTH PLAIN <Base64 encoded username/password>
Good luck!

altiris
Posts: 334
Joined: 2013/05/31 01:27:50

Re: Postfix authentication failed

Post by altiris » 2015/07/07 01:00:18

nicodemus wrote:I can't guarantee that this will work, but I just tested something with my Postfix installation which allows me to authenticate successfully:

Obtain the Base64 encoded username/password using:

Code: Select all

perl -MMIME::Base64 -e 'print encode_base64("\000MY_USERNAME\000MY_PASSWORD")'
then:

Code: Select all

openssl s_client -starttls smtp -crlf -connect 127.0.0.1:587
it reported <CONNECTED 00000003> almost immediately then a few seconds later displayed all the certificate details, then:

Code: Select all

AUTH PLAIN <Base64 encoded username/password>
Good luck!
Tried that and I got a

Code: Select all

235 2.7.0 Authentication successful
so at least that is working. I have tried using gnutls-cli following here http://www.kamailio.org/wiki/tutorials/ ... -debugging , and I get this (for anyone else that wishes to help)

Code: Select all

- The hostname in the certificate matches 'mail.mydomain.com'.
- Peer's certificate is NOT trusted
- Version: TLS1.1
- Key Exchange: DHE-RSA
- Cipher: AES-128-CBC
- MAC: SHA1
- Compression: NULL
*** Verifying server certificate failed...

Post Reply