Package: postfix Version: 2.3.4-1 Recently, GSSAPI authentication to my Postfix server stopped working:
Nov 21 19:56:39 tor postfix/smtpd[19940]: warning: SASL authentication failure: GSSAPI Error: An invalid name was supplied (Hostname cannot be canonicalized) Nov 21 19:56:39 tor postfix/smtpd[19940]: warning: fis.lat[192.168.179.246]: SASL GSSAPI authentication failed: generic failure It had been working successfully for maybe two years. I finally tracked the problem down to Postfix using the wrong FQDN. The server's FQDN is tor.lat, but Postfix was using tor.localdomain. There is mention in the Postfix HISTORY: 20050513 Workaround: Postfix now uses "localdomain" as the default domain name when $myhostname is not in "host.domain" form. Files: global/mail_params.[hc]. I don't set myhostname in main.cf. Postfix used to successfully get myhostname from the resolver or from /etc/mailname. I confirmed that `hostname --fqdn` still reports tor.lat, and /etc/mailname still contains tor.lat, but Postfix now uses tor.localdomain. I found bug #26784 regarding Postfix using /etc/mailname. I think Postfix should use /etc/mailname for myhostname since the mailname man page says it is: The file contains only one line describing the fully qualified domain name that the program wishing to get the mail name should use (that is, everything after the @). If I am wrong, I still think Postfix should use the resolver to set myhostname to the FQDN. Thanks, Jack
signature.asc
Description: This is a digitally signed message part