David Ballano wrote:
> Hello people,
>
> I have some questions for you,
>
> I configured postfix with virtual domains and unix accounts, also I
> configured sasl2 with pam (saslauthd) and tls with my own keys.
>
> all seems to work, but there are some questions I can't find.
>
>
> - where can I see what type of mech I'am using to authenticate? I
> think is plain but..
>   

http://www.postfix.org/DEBUG_README.html#mail and grab saslfinger to
help debug.
> also when I sent an email to  my server (unix account ) I can see that (
> using outlook to send an email to my server.)
>
> Sep 22 13:51:55 orion postfix/smtpd[9636]: connect from unknown[84.78.228.193]
> Sep 22 13:51:55 orion postfix/smtpd[9636]: setting up TLS connection
> from unknown[84.78.228.193]
> Sep 22 13:51:56 orion postfix/smtpd[9636]: TLS connection established
> from unknown[84.78.228.193]: TLSv1 with cipher RC4-MD5 (128/128 bits)
> Sep 22 13:51:57 orion postfix/smtpd[9636]: warning: SASL
> authentication failure: incorrect NTLM response
> Sep 22 13:51:57 orion postfix/smtpd[9636]: warning:
> unknown[84.78.228.193]: SASL NTLM authentication failed:
> authentication failure
> Sep 22 13:51:58 orion postfix/smtpd[9636]: 1D38F27B8089:
> client=unknown[84.78.228.193], sasl_method=NTLM,
> [EMAIL PROTECTED]
> Sep 22 13:51:58 orion postfix/cleanup[9643]: 1D38F27B8089:
> message-id=<[EMAIL PROTECTED]>
> Sep 22 13:51:58 orion postfix/qmgr[30190]: 1D38F27B8089:
> from=<[EMAIL PROTECTED]>, size=1532, nrcpt=1 (queue active)
> Sep 22 13:51:58 orion postfix/local[9644]: 1D38F27B8089:
> to=<[EMAIL PROTECTED]>, orig_to=<[EMAIL PROTECTED]>,
> relay=local, delay=0.92, delays=0.92/0/0/0.01, dsn=2.0.0, status=sent
> (delivered to mailbox)
> Sep 22 13:51:58 orion postfix/qmgr[30190]: 1D38F27B8089: removed
> Sep 22 13:51:59 orion postfix/smtpd[9636]: disconnect from
> unknown[84.78.228.193]
>
> there are some things that I can't understand
>
> warning: unknown[84.78.228.193]: SASL NTLM authentication failed:
> authentication failure
>
> why failed? but it works.
>   

This means the AUTH failed but the client passed another restriction
(most likely was an authorized destination).
> 1D38F27B8089: to=<[EMAIL PROTECTED]>,
> orig_to=<[EMAIL PROTECTED]>, relay=local, delay=0.92,
> delays=0.92/0/0/0.01, dsn=2.0.0, status=sent (delivered to mailbox)
>
> why "to:" is diferent from "orig_to", is because the account is local??
>
> is all of that normal?
>   

This is because a (virtual_|)alias_maps match was found.
> smtpd_banner = $myhostname ESMTP (Microsoft Exchange)
>   

Why lie? No one will ever care.

Brian

Reply via email to