Package: postfix
Version: 2.3.4-1

Recently, GSSAPI authentication to my Postfix server stopped working:

Nov 21 19:56:39 tor postfix/smtpd[19940]: warning: SASL authentication failure: 
GSSAPI Error: An invalid name was supplied (Hostname cannot be canonicalized)
Nov 21 19:56:39 tor postfix/smtpd[19940]: warning: fis.lat[192.168.179.246]: 
SASL GSSAPI authentication failed: generic failure

It had been working successfully for maybe two years. I finally tracked
the problem down to Postfix using the wrong FQDN. The server's FQDN is
tor.lat, but Postfix was using tor.localdomain.

There is mention in the Postfix HISTORY:

20050513

        Workaround: Postfix now uses "localdomain" as the default
        domain name when $myhostname is not in "host.domain" form.
        Files: global/mail_params.[hc].

I don't set myhostname in main.cf. Postfix used to successfully get
myhostname from the resolver or from /etc/mailname. I confirmed that
`hostname --fqdn` still reports tor.lat, and /etc/mailname still
contains tor.lat, but Postfix now uses tor.localdomain.

I found bug #26784 regarding Postfix using /etc/mailname. I think
Postfix should use /etc/mailname for myhostname since the mailname man
page says it is:

       The file contains only one line describing the fully  qualified  domain
       name that the program wishing to get the mail name should use (that is,
       everything after the @).

If I am wrong, I still think Postfix should use the resolver to set
myhostname to the FQDN.

Thanks, Jack

Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to