The "AUTH PLAIN" works also.  When I telnet into the server the "RCPT" command 
works, but not with openssl s_client.  It's not a big deal.  I am just really 
happy to find out that I can test this now.  I think my certificate is ok too, 
so I don't know why I get "RENEGOTIATING" and the other info.

James

> On Nov 30, 2017, at 2:27 PM, Fazzina, Angelo <angelo.fazz...@uconn.edu> wrote:
> 
> ....And, if you wanna get more detailed this is all I do to test accounts.
> 
> 
> RAN     pamtester smtp ssl_test authenticate
>        to test ability to authenticate with account ssl_test  (it worked)
> RAN     testsaslauthd -s smtp -u ssl_test -p <password>
>        to test Saslauthd  (it worked)
> RAN     python -c 'import base64,sys; u,p=sys.argv[1:3]; print 
> base64.encodestring("%s\x00%s\x00%s" % (u,u,p))' ssl_test <password>
>        to create hash  (it worked)
> RAN     openssl s_client -connect 137.99.203.233:465
>        helo uconn.edu
>        AUTH PLAIN  <insert hash from python command>
> 
> 
> 
> 
> -ANGELO FAZZINA
> 
> UITS Service Manager:
> Spam and Virus Prevention
> Mass Mailing
> G Suite/Gmail
> 
> ang...@uconn.edu
> University of Connecticut,  UITS, SSG, Server Systems
> 860-486-9075
> 
> 
> -----Original Message-----
> From: owner-postfix-us...@postfix.org 
> [mailto:owner-postfix-us...@postfix.org] On Behalf Of Fazzina, Angelo
> Sent: Thursday, November 30, 2017 4:25 PM
> To: James Reynolds <reyno...@biology.utah.edu>; Postfix users 
> <postfix-users@postfix.org>
> Subject: RE: smtpd_sasl_auth_enable is true but sasl support is not compiled 
> in (postfix-gento)
> 
> Mine that I use to test
> 
> openssl s_client -connect massmail.uconn.edu:465
> 
> openssl s_client -starttls smtp -connect massmail.uconn.edu:587
> 
> telnet is just for port 25   YMMV.
> 
> -ANGELO FAZZINA
> 
> UITS Service Manager:
> Spam and Virus Prevention
> Mass Mailing
> G Suite/Gmail
> 
> ang...@uconn.edu
> University of Connecticut,  UITS, SSG, Server Systems
> 860-486-9075
> 
> 
> -----Original Message-----
> From: owner-postfix-us...@postfix.org 
> [mailto:owner-postfix-us...@postfix.org] On Behalf Of James Reynolds
> Sent: Thursday, November 30, 2017 4:21 PM
> To: Postfix users <postfix-users@postfix.org>
> Subject: Re: smtpd_sasl_auth_enable is true but sasl support is not compiled 
> in (postfix-gento)
> 
> I have never heard of using openssl s_client instead of telnet so I tried to 
> figure out how to use it.  I could connect to my server with the following.
> 
>       openssl s_client -connect 10.0.1.1:25  -starttls smtp
> 
> And I can do "HELO" and "MAIL FROM:" but when I try to enter "RCPT TO:" I 
> just get this output and I can't go further.
> 
>       RENEGOTIATING
>       depth=3 /C=SE/O=AddTrust AB/OU=AddTrust External TTP 
> Network/CN=AddTrust External CA Root
>       verify error:num=19:self signed certificate in certificate chain
>       verify return:0
> 
> Do you know what is going on?  Maybe my certificate on my server is 
> misconfigured and I didn't even know it?...
> 
> James
> 
> 
>> On Nov 30, 2017, at 1:55 PM, Benny Pedersen <m...@junc.eu> wrote:
>> 
>> Yuri Ferreira skrev den 2017-11-30 17:49:
>> 
>>> someone help-me ?
>> 
>> to get more help:
>> 
>> postconf -nf
>> postconf -Mf
>> 
>> on pastebin with a link to maillist
>> 
>> you should stop using telnet to test ssl, use openssl s_client ... to 
>> replace it
>> 
>> man openssl
>> 
>> if you see AUTH on port 25 yoy maked a mistake, but if you see STARTTLS it 
>> works as best it could
>> 
>> enable smtpd_sasl on port 587 and 465, i know some will hit me now, but 
>> clients sometimes need port 465 depending on clients
> 

Reply via email to