求助:postfix+sasl2+mysql+extman+extmail的SMTP认证通不过

loveme99

求助:postfix+sasl2+mysql+extman+extmail的SMTP认证通不过
验证提示 535 错误
可以收信,不可以发信 webmail可以发
如果说SQL模块错误,POP3验证又没事哦,真是奇怪,我的smtp认证是用的daemond
daemond运行是正常的
日志里明明有提示密码验证已经通过,为什么又出错呢

maillog

1. Jan 20 08:25:45 www postfix/smtpd[28535]: connect from unknown[119.145.251.18]
   
2. Jan 20 08:25:45 www authdaemond: Authenticated: sysusername=<null>, sysuserid=1003, sysgroupid=1003, homedir=/var/mail/zs-taili.cn/sam, address=sam@zs-taili.cn, fullname=sam, maildir=/var/mail/zs-taili.cn/sam/Maildir/, quota=524288000S, options=disableimap=0,disablepop3=0,disablewebmail=0
   
3. Jan 20 08:25:45 www postfix/smtpd[28535]: warning: SASL authentication failure: could not verify password
   
4. Jan 20 08:25:45 www authdaemond: Authenticated: clearpasswd=test, passwd=$1$daGMb0Yk$dzf/LtnIl38yETXh21D5K1
   
5. Jan 20 08:25:45 www postfix/smtpd[28535]: warning: unknown[119.145.251.18]: SASL LOGIN authentication failed: generic failure
   
6. Jan 20 08:25:45 www postfix/smtpd[28535]: lost connection after AUTH from unknown[119.145.251.18]
   
7. Jan 20 08:25:45 www postfix/smtpd[28535]: disconnect from unknown[119.145.251.18]
   

复制代码

auth.log

1. 
   
2. Jan 20 08:25:45 www postfix/smtpd[28535]: sql_select option missing
   
3. Jan 20 08:25:45 www postfix/smtpd[28535]: auxpropfunc error no mechanism available
   

复制代码

debug.log

1. 
   
2. Jan 20 08:25:45 www postfix/smtpd[28535]: _sasl_plugin_load failed on sasl_auxprop_plug_init for plugin: sql
   
3. Jan 20 08:25:45 www authdaemond: received auth request, service=smtp, authtype=login
   
4. Jan 20 08:25:45 www authdaemond: authmysql: trying this module
   
5. Jan 20 08:25:45 www authdaemond: authmysqllib: connected. Versions: header 50089, client 50089, server 50089
   
6. Jan 20 08:25:45 www authdaemond: SQL query: SELECT username, password, clearpwd, uidnumber, gidnumber, CONCAT('/var/mail/',homedir), CONCAT('/var/mail/',maildir), quota, name, CONCAT("disableimap=",disableimap,",disablepop3=",disablepop3,",disablewebmail=",disablewebmail) FROM mailbox WHERE username = 'sam@zs-taili.cn'  AND (active='1')
   
7. Jan 20 08:25:45 www authdaemond: password matches successfully
   
8. Jan 20 08:25:45 www authdaemond: authmysql: sysusername=<null>, sysuserid=1003, sysgroupid=1003, homedir=/var/mail/zs-taili.cn/sam, address=sam@zs-taili.cn, fullname=sam, maildir=/var/mail/zs-taili.cn/sam/Maildir/, quota=524288000S, options=disableimap=0,disablepop3=0,disablewebmail=0
   
9. Jan 20 08:25:45 www authdaemond: authmysql: clearpasswd=<null>, passwd=$1$daGMb0Yk$dzf/LtnIl38yETXh21D5K1
   

复制代码

smtpd.conf

1. 
   
2. pwcheck_method: authdaemond
   
3. log_level: 8
   
4. mech_list: plain login
   
5. authdaemond_path:/var/run/authdaemond/socket
   
6. 
   
7. #pwcheck_method: auxprop
   
8. auxprop_plugin: sql
   
9. allowanonymouslogin: no
   
10. allowplaintext: yes
    
11. mech_list: PLAIN LOGIN
    
12. srp_mda: md5
    
13. password_format: crypt
    
14. 
    
15. sql_engine: mysql
    
16. sql_hostnames: localhost
    
17. sql_user: tlmail
    
18. sql_passwd: tlmail
    
19. sql_database: tlmail
    
20. sql_select: select password from mailbox where username='%u@%r' and active='1'
    
21. 
    

复制代码

iheaing

感觉是 smtpd.conf 文件的配置问题。你看一下：http://pieps.org/cyrus

Jan 20 08:25:45 www postfix/smtpd[28535]: sql_select option missing

select password from mailbox where username='%u@%r' and active='1' 我没用过 Extmail，它有 mailbox 这个表有 有 username/password这字段？

[ 本帖最后由 iheaing 于 2010-1-20 11:59 编辑 ]

scyzxp

很明显是smtpd.conf的问题。

1. 
   
2. pwcheck_method: authdaemond
   
3. log_level: 8
   
4. mech_list: plain login
   
5. authdaemond_path:/var/run/authdaemond/socket
   

复制代码

试试改成这个。

loveme99

改了还是一样不行,最开始是没有下面一段的

loveme99

我也希望是smtpd.conf问题啊,
从debug.log来看,auth是已经通过了的,为什么到了maillog里,就变成密码不匹配了呢?

scyzxp

改好后提供认证日志。

loveme99

改过后的日志

maillog

1. 
   
2. Jan 20 14:24:19 www postfix/smtpd[49062]: connect from unknown[119.145.251.18]
   
3. Jan 20 14:24:19 www authdaemond: Authenticated: sysusername=<null>, sysuserid=1003, sysgroupid=1003, homedir=/var/mail/zs-taili.cn/sam, address=sam@zs-taili.cn, fullname=sam, maildir=/var/mail/zs-taili.cn/sam/Maildir/, quota=524288000S, options=<null>
   
4. Jan 20 14:24:19 www authdaemond: Authenticated: clearpasswd=test, passwd=$1$5g9XL$7eg2pKICZw3fZuvvMYROP/
   
5. Jan 20 14:24:19 www postfix/smtpd[49062]: warning: SASL authentication failure: could not verify password
   
6. Jan 20 14:24:19 www postfix/smtpd[49062]: warning: unknown[119.145.251.18]: SASL LOGIN authentication failed: generic failure
   
7. Jan 20 14:24:19 www postfix/smtpd[49062]: lost connection after AUTH from unknown[119.145.251.18]
   
8. Jan 20 14:24:19 www postfix/smtpd[49062]: disconnect from unknown[119.145.251.18]
   

复制代码

debug.log

1. 
   
2. Jan 20 14:24:19 www postfix/smtpd[49062]: _sasl_plugin_load failed on sasl_auxprop_plug_init for plugin: sql
   
3. Jan 20 14:24:19 www authdaemond: received auth request, service=smtp, authtype=login
   
4. Jan 20 14:24:19 www authdaemond: authmysql: trying this module
   
5. Jan 20 14:24:19 www authdaemond: authmysqllib: connected. Versions: header 50089, client 50089, server 50089
   
6. Jan 20 14:24:19 www authdaemond: SQL query: SELECT username,password,"",uidnumber,gidnumber,CONCAT('/var/mail/',homedir),CONCAT('/var/mail/',maildir), quota, name FROM mailbox WHERE username = 'sam@zs-taili.cn'
   
7. Jan 20 14:24:19 www authdaemond: password matches successfully
   
8. Jan 20 14:24:19 www authdaemond: authmysql: sysusername=<null>, sysuserid=1003, sysgroupid=1003, homedir=/var/mail/zs-taili.cn/sam, address=sam@zs-taili.cn, fullname=sam, maildir=/var/mail/zs-taili.cn/sam/Maildir/, quota=524288000S, options=<null>
   
9. Jan 20 14:24:19 www authdaemond: authmysql: clearpasswd=<null>, passwd=$1$5g9XL$7eg2pKICZw3fZuvvMYROP/
   

复制代码

auth.log

1. 
   
2. 
   
3. Jan 20 14:24:19 www postfix/smtpd[49062]: sql_select option missing
   
4. Jan 20 14:24:19 www postfix/smtpd[49062]: auxpropfunc error no mechanism available
   

复制代码

smtpd.conf

1. 
   
2. pwcheck_method: authdaemond
   
3. log_level: 8
   
4. mech_list: plain login
   
5. authdaemond_path:/var/run/authdaemond/socket
   

复制代码

[ 本帖最后由 loveme99 于 2010-1-20 14:35 编辑 ]

scyzxp

/var/run/authdaemond/socket
这个文件有？

loveme99

有啊,

1. 
   
2. www# ls /var/run/authdaemond/socket
   
3. /var/run/authdaemond/socket
   

复制代码

loveme99

我贴出我的 main.cf吧

1. 
   
2. #queue_directory = /var/spool/postfix
   
3. command_directory = /usr/local/sbin
   
4. #daemon_directory = /usr/local/libexec/postfix
   
5. 
   
6. #data_directory = /var/db/postfix
   
7. 
   
8. #mail_owner = postfix
   
9. #default_privs = nobody
   
10. 
    
11. #relay_domains = $mydestination
    
12. 
    
13. debug_peer_level = 2
    
14. sendmail_path = /usr/local/sbin/sendmail
    
15. 
    
16. newaliases_path = /usr/local/bin/newaliases
    
17. mailq_path = /usr/local/bin/mailq
    
18. 
    
19. #setgid_group = maildrop
    
20. 
    
21. #html_directory = /usr/local/share/doc/postfix
    
22. #manpage_directory = /usr/local/man
    
23. #sample_directory = /usr/local/etc/postfix
    
24. #readme_directory = /usr/local/share/doc/postfix
    
25. 
    
26. 
    
27. #--------------ADD END------------------------
    
28. 
    
29. ########################BASE#################
    
30. bounce_template_file = /usr/local/etc/postfix/bounce.cf
    
31. 
    
32. myhostname = tailigo.com
    
33. smtp_helo_name = $myhostname
    
34. 
    
35. local_transport = maildrop
    
36. mailbox_transport = maildrop
    
37. 
    
38. virtual_mailbox_base = /var/mail
    
39. 
    
40. #alias_maps       = hash:/usr/local/etc/postfix/aliases
    
41. #Alias_database         = hash:/usr/local/etc/postfix/aliases
    
42. 
    
43. ####################MYSQL###################
    
44. mydestination     =   mysql:/usr/local/etc/postfix/mysql-mydest.cf
    
45. virtual_transport_maps     = mysql:/usr/local/etc/postfix/mysql-transport.cf
    
46. virtual_alias_maps       = mysql:/usr/local/etc/postfix/mysql-alias.cf
    
47. virtual_alias_domains = $virtual_alias_maps
    
48. recipient_bcc_maps = mysql:/usr/local/etc/postfix/mysql-autobbc-in.cf
    
49. sender_bcc_maps = mysql:/usr/local/etc/postfix/mysql-autobbc-out.cf
    
50. virtual_mailbox_domains = mysql:/usr/local/etc/postfix/mysql-virtual-mailbox-domains.cf
    
51. virtual_mailbox_maps = mysql:/usr/local/etc/postfix/mysql-virtual-mailbox-maps.cf
    
52. local_recipient_maps = $virtual_mailbox_maps
    
53. virtual_uid_maps     = mysql:/usr/local/etc/postfix/mysql-virtual-uid.cf
    
54. virtual_gid_maps     = mysql:/usr/local/etc/postfix/mysql-virtual-gid.cf
    
55. 
    
56. 
    
57. #####################Quota#######################
    
58. virtual_create_maildirsize = yes
    
59. virtual_mailbox_extended = yes
    
60. virtual_mailbox_limit_maps = mysql:/usr/local/etc/postfix/mysql-virtual-quota.cf
    
61. virtual_mailbox_limit_override = yes
    
62. virtual_maildir_limit_message = Sorry, the user's maildir has overdrawn his diskspace quota, please try again later.
    
63. virtual_overquota_bounce = yes
    
64. 
    
65. 
    
66. ##########################SASL###################
    
67. #smtpd_sender_login_maps = mysql:/usr/local/etc/postfix/mysql-smtplogin.cf
    
68. #smtpd_reject_unlisted_sender = yes
    
69. smtpd_sasl_auth_enable     = yes
    
70. smtpd_sasl_security_options = noanonymous
    
71. broken_sasl_auth_clients   = yes
    
72. smtpd_delay_reject = yes
    
73. smtpd_sasl_local_domain = ''
    
74. 
    
75. 
    
76. #smtpd_peername_lookup = no
    
77. #smtpd_proxy_timeout = 180s
    
78. smtpd_recipient_restrictions =
    
79.     permit_mynetworks,
    
80. #    check_client_access mysql:/usr/local/etc/postfix/mysql-access.cf,
    
81.     permit_sasl_authenticated,
    
82.     reject_non_fqdn_hostname,
    
83.     reject_non_fqdn_sender,
    
84.     reject_non_fqdn_recipient,
    
85.     reject_unknown_recipient_domain,
    
86.     reject_unknown_sender_domain,
    
87. #    reject_unauth_pipelining,
    
88.     reject_unauth_destination,
    
89. #    reject_rbl_client cblless.anti-spam.org.cn,
    
90. #    permit
    
91. smtpd_client_restrictions = permit_sasl_authenticated
    
92. #smtp_etrn_restrictions = permit_mynetworks,reject
    
93. 
    
94. default_destination_recipient_limit = 1
    
95. local_destination_concurrency_limit = 1
    
96. maildrop_destination_recipient_limit = 1
    
97. #smtpd_error_sleep_time = 0
    
98. #smtpd_soft_error_limit = 10
    
99. #smtpd_hard_error_limit = 20
    
100. #default_process_limit = 500
     
101. 
     
102. message_size_limit = 41943040
     
103. 
     
104. smtpd_recipient_limit = 10
     
105. bounce_queue_lifetime = 12h
     
106. maximal_queue_lifetime = 24h
     
107. 
     
108. smtpd_helo_required = yes
     
109. strict_rfc821_envelopes = yes
     
110. 
     

复制代码