Just a guess, but are you using App passwords for GMail? It's possible
Gmail is enforcing some 2FA/MFA or otherwise some kind of "enhanced"
authentication.
Even if you aren't using 2FA, it might be worth giving a shot.
Chris.
On 2019-01-14 11:00 a.m., Michael wrote:
On 1/14/19 8:30 AM, John Stoffel wrote:
Michael> I have been using postfix on a local machine for a few years
Michael> to act as a relay for my domain to send email out through
Michael> gmail.
Michael> This has worked well enough, but I noticed recently that I
Michael> had some email queued up and was not getting emails out any
Michael> longer.
Michael> In my mailog, I am seeing these errors:
Michael> Jan 14 08:16:18 deathstar postfix/smtp[16142]: 8CBF11E12B5:
Michael> to=<michael@my.domain>,
relay=smtp.gmail.com[173.194.203.108]:587,
Michael> delay=58297, delays=58297/0.05/0.71/0, dsn=4.7.0,
status=deferred (SASL
Michael> authentication failed; cannot authenticate to server
Michael> smtp.gmail.com[173.194.203.108]: invalid parameter supplied)
It looks to me like your gmail password has changed. Have you
confirmed that your settings are correct and that the
username/password still work?
Michael> I have googled a lot, but I am not finding anything that
matches this
Michael> error message. I am not sure also what might have changed
to cause
Michael> this. Not sure if Google changed something or a package
update broke
Michael> something, etc.
Michael> This is in Fedora 29, x86_64, postfix-3.3.1, and
Michael> cyrus-sasl-lib-2.1.27-0.3rc7.
Michael> output of postconf
Michael> alias_database = hash:/etc/aliases
Michael> alias_maps = hash:/etc/aliases
Michael> command_directory = /usr/sbin
Michael> compatibility_level = 2
Michael> daemon_directory = /usr/libexec/postfix
Michael> data_directory = /var/lib/postfix
Michael> debug_peer_level = 2
Michael> debugger_command =
PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin ddd
Michael> $daemon_directory/$process_name $process_id & sleep 5
Michael> html_directory = no
Michael> inet_interfaces = localhost, $myhostname
Michael> inet_protocols = ipv4
Michael> mail_owner = postfix
Michael> mailq_path = /usr/bin/mailq.postfix
Michael> manpage_directory = /usr/share/man
Michael> meta_directory = /etc/postfix
Michael> mydestination = $myhostname, localhost.$mydomain, localhost
Michael> mydomain = my.domain
Michael> myhostname = deathstar.my.domain
Michael> mynetworks = 192.168.0.0/16, 127.0.0.0/8
Michael> newaliases_path = /usr/bin/newaliases.postfix
Michael> queue_directory = /var/spool/postfix
Michael> readme_directory = /usr/share/doc/postfix/README_FILES
Michael> relayhost = [smtp.gmail.com]:587
Michael> sample_directory = /usr/share/doc/postfix/samples
Michael> sendmail_path = /usr/sbin/sendmail.postfix
Michael> setgid_group = postdrop
Michael> shlib_directory = /usr/lib64/postfix
Michael> smtp_sasl_auth_enable = yes
Michael> smtp_sasl_password_maps = hash:/etc/postfix/sasl/passwd
Michael> smtp_sasl_security_options = noanonymous
Michael> smtp_tls_CAfile = /root/.acme.sh/my.domain/my.domain.cer
Michael> smtp_use_tls = yes
Michael> unknown_local_recipient_reject_code = 550
Michael> Any thoughts on what the error means and what I might need
to change?
Double check your gmail access outside of postfix, and make sure the
password/username matches in your /etc/postfix/sasl/password file.
Thanks John,
I thought this might be the case as well. I reset the password the
account password and also re-setup the application password on the
gmail account for postfix (in my my sasl password file). That didn't
seem to make a difference. Is there an easy way to test the app
password on google?
Michael
