Re: smtp_sasl_auth_enable Being Ignored

2014-01-30 Thread Viktor Dukhovni
On Thu, Jan 30, 2014 at 09:51:30AM -0500, Dennis Putnam wrote: > relayhost = [smtp.att.yahoo.com]:587 > smtp_tls_policy_maps = hash:/etc/postfix/tls_policy > > In case it is needed here is the content of tls_policy: > > in.mailjet.com may > smtp.att.yahoo.com:587 encrypt It is rather sad that

Re: smtp_sasl_auth_enable Being Ignored

2014-01-30 Thread Noel Jones
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 1/30/2014 8:51 AM, Dennis Putnam wrote: > On 1/30/2014 9:34 AM, Noel Jones wrote: >> >>> I changed the level to 2. I am not seeing what you suggest >>> but there is one additional line initializing TLS engine. >>> Here is the output: >> >> >> ...

Re: smtp_sasl_auth_enable Being Ignored

2014-01-30 Thread Dennis Putnam
On 1/30/2014 9:59 AM, li...@rhsoft.net wrote: > > Am 30.01.2014 15:51, schrieb Dennis Putnam: >> Thanks for your patience but why wouldn't the working server also be failing >> if TLS was indeed screwed up? > because he does not force TLS > >> Here is the postconf -n output: > snipped > >> In case

Re: smtp_sasl_auth_enable Being Ignored

2014-01-30 Thread li...@rhsoft.net
Am 30.01.2014 15:59, schrieb li...@rhsoft.net: > Am 30.01.2014 15:51, schrieb Dennis Putnam: >> Thanks for your patience but why wouldn't the working server also be failing >> if TLS was indeed screwed up? > > because he does not force TLS > >> Here is the postconf -n output: > > snipped > >

Re: smtp_sasl_auth_enable Being Ignored

2014-01-30 Thread Noel Jones
On 1/30/2014 8:59 AM, li...@rhsoft.net wrote: > > > Am 30.01.2014 15:51, schrieb Dennis Putnam: >> Thanks for your patience but why wouldn't the working server also be failing >> if TLS was indeed screwed up? > > because he does not force TLS > >> Here is the postconf -n output: > > snipped >

Re: smtp_sasl_auth_enable Being Ignored

2014-01-30 Thread li...@rhsoft.net
Am 30.01.2014 15:51, schrieb Dennis Putnam: > Thanks for your patience but why wouldn't the working server also be failing > if TLS was indeed screwed up? because he does not force TLS > Here is the postconf -n output: snipped > In case it is needed here is the content of tls_policy: > > in

Re: smtp_sasl_auth_enable Being Ignored

2014-01-30 Thread Dennis Putnam
On 1/30/2014 9:34 AM, Noel Jones wrote: > > > I changed the level to 2. I am not seeing what you suggest but > > there is one additional line initializing TLS engine. Here is > > the output: > > > ... useless debug output deleted > > > > To repeat my previous question, is there no way to force a >

Re: smtp_sasl_auth_enable Being Ignored

2014-01-30 Thread Wietse Venema
smtp.att.yahoo.com[98.139.221.42]:587: 220 smtp.att.yahoo.com ESMTP ready smtp.att.yahoo.com[98.139.221.42]:587: EHLO home.bellsouth.net smtp.att.yahoo.com[98.139.221.42]:587: 250-smtp.att.yahoo.com smtp.att.yahoo.com[98.139.221.42]:587: 250-PIPELINING smtp.att.yahoo.com[98.139.221.42]:587: 25

Re: smtp_sasl_auth_enable Being Ignored

2014-01-30 Thread Noel Jones
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 1/30/2014 8:18 AM, Dennis Putnam wrote: > On 1/30/2014 9:10 AM, li...@rhsoft.net wrote: >> >> Am 30.01.2014 15:00, schrieb Dennis Putnam: >>> I changed the loglevel to 1. I am not sure where or what I >>> am supposed to see but the normal maillog c

Re: smtp_sasl_auth_enable Being Ignored

2014-01-30 Thread Dennis Putnam
On 1/30/2014 9:10 AM, li...@rhsoft.net wrote: > > Am 30.01.2014 15:00, schrieb Dennis Putnam: >> I changed the loglevel to 1. I am not sure where or what I am supposed >> to see but the normal maillog contained nothing different. > lines like while connect to the destination > > Jan 27 19:16:17 mai

Re: smtp_sasl_auth_enable Being Ignored

2014-01-30 Thread li...@rhsoft.net
Am 30.01.2014 15:00, schrieb Dennis Putnam: > On 1/30/2014 8:49 AM, li...@rhsoft.net wrote: >> Am 30.01.2014 14:30, schrieb Dennis Putnam: >>> On 1/29/2014 9:17 PM, Viktor Dukhovni wrote: On Wed, Jan 29, 2014 at 08:20:44PM -0500, Dennis Putnam wrote: >> The only other thing that com

Re: smtp_sasl_auth_enable Being Ignored

2014-01-30 Thread Dennis Putnam
On 1/30/2014 8:49 AM, li...@rhsoft.net wrote: > Am 30.01.2014 14:30, schrieb Dennis Putnam: >> On 1/29/2014 9:17 PM, Viktor Dukhovni wrote: >>> On Wed, Jan 29, 2014 at 08:20:44PM -0500, Dennis Putnam wrote: >>> > The only other thing that comes to mind is that your "upgrade" may > have inst

Re: smtp_sasl_auth_enable Being Ignored

2014-01-30 Thread li...@rhsoft.net
Am 30.01.2014 14:30, schrieb Dennis Putnam: > On 1/29/2014 9:17 PM, Viktor Dukhovni wrote: >> On Wed, Jan 29, 2014 at 08:20:44PM -0500, Dennis Putnam wrote: >> The only other thing that comes to mind is that your "upgrade" may have installed a version of Postfix with no TLS support. Then

Re: smtp_sasl_auth_enable Being Ignored

2014-01-30 Thread Dennis Putnam
On 1/29/2014 10:32 PM, Viktor Dukhovni wrote: > On Wed, Jan 29, 2014 at 09:42:00PM -0500, Wietse Venema wrote: > >>> If postconf(1) is the same version of Postfix as smtp(8), then you >>> check with "postconf smtp_tls_loglevel". This parameter is not >>> defined when TLS support is not available.

Re: smtp_sasl_auth_enable Being Ignored

2014-01-30 Thread Dennis Putnam
On 1/29/2014 9:42 PM, Wietse Venema wrote: > Viktor Dukhovni: >> On Wed, Jan 29, 2014 at 08:20:44PM -0500, Dennis Putnam wrote: >> The only other thing that comes to mind is that your "upgrade" may have installed a version of Postfix with no TLS support. Then none of these settings

Re: smtp_sasl_auth_enable Being Ignored

2014-01-30 Thread Dennis Putnam
On 1/29/2014 9:17 PM, Viktor Dukhovni wrote: > On Wed, Jan 29, 2014 at 08:20:44PM -0500, Dennis Putnam wrote: > >>> The only other thing that comes to mind is that your "upgrade" may >>> have installed a version of Postfix with no TLS support. Then none >>> of these settings matter. >> Hmmm. I had

Re: smtp_sasl_auth_enable Being Ignored

2014-01-30 Thread LuKreme
On 29 Jan 2014, at 15:57 , li...@rhsoft.net wrote: > in mordern setups only port 587 (submission) should be used for > send authenticated mails and if someone can do that (we can't > because too many client configurations out of control) someone > could disable authentication on port 25 completly

Re: smtp_sasl_auth_enable Being Ignored

2014-01-30 Thread Wietse Venema
Viktor Dukhovni: > On Wed, Jan 29, 2014 at 09:42:00PM -0500, Wietse Venema wrote: > > > > If postconf(1) is the same version of Postfix as smtp(8), then you > > > check with "postconf smtp_tls_loglevel". This parameter is not > > > defined when TLS support is not available. > > > > All TLS (and

Re: smtp_sasl_auth_enable Being Ignored

2014-01-30 Thread li...@rhsoft.net
> On 2014-01-30 00:08, Noel Jones wrote: >> 250-8 BITMIME > > should it not be 8BITMIME? ask yahoo, it's their server

Re: smtp_sasl_auth_enable Being Ignored

2014-01-29 Thread Benny Pedersen
On 2014-01-30 00:08, Noel Jones wrote: 250-8 BITMIME should it not be 8BITMIME ?

Re: smtp_sasl_auth_enable Being Ignored

2014-01-29 Thread Viktor Dukhovni
On Wed, Jan 29, 2014 at 09:42:00PM -0500, Wietse Venema wrote: > > If postconf(1) is the same version of Postfix as smtp(8), then you > > check with "postconf smtp_tls_loglevel". This parameter is not > > defined when TLS support is not available. > > All TLS (and SASL) parameters are defined wh

Re: smtp_sasl_auth_enable Being Ignored

2014-01-29 Thread Wietse Venema
Viktor Dukhovni: > On Wed, Jan 29, 2014 at 08:20:44PM -0500, Dennis Putnam wrote: > > > > The only other thing that comes to mind is that your "upgrade" may > > > have installed a version of Postfix with no TLS support. Then none > > > of these settings matter. > > > > Hmmm. I hadn't thought of t

Re: smtp_sasl_auth_enable Being Ignored

2014-01-29 Thread Viktor Dukhovni
On Wed, Jan 29, 2014 at 08:20:44PM -0500, Dennis Putnam wrote: > > The only other thing that comes to mind is that your "upgrade" may > > have installed a version of Postfix with no TLS support. Then none > > of these settings matter. > > Hmmm. I hadn't thought of that. How do I check? If postco

Re: smtp_sasl_auth_enable Being Ignored

2014-01-29 Thread Dennis Putnam
On 1/29/2014 7:41 PM, Viktor Dukhovni wrote: > On Wed, Jan 29, 2014 at 07:14:34PM -0500, Dennis Putnam wrote: > >> Thanks again for the reply but no joy. I have been using port 587 for a >> couple of years until this recent problem. The only difference is I had >> my tls_policy set like this: > Not

Re: smtp_sasl_auth_enable Being Ignored

2014-01-29 Thread Viktor Dukhovni
On Wed, Jan 29, 2014 at 07:14:34PM -0500, Dennis Putnam wrote: > Thanks again for the reply but no joy. I have been using port 587 for a > couple of years until this recent problem. The only difference is I had > my tls_policy set like this: Not "no joy", rather failure to execute correctly. Wha

Re: smtp_sasl_auth_enable Being Ignored

2014-01-29 Thread Dennis Putnam
On 1/29/2014 6:22 PM, Viktor Dukhovni wrote: > On Wed, Jan 29, 2014 at 05:58:15PM -0500, Dennis Putnam wrote: > >> TLS is indeed set via >> >> $ postconf -n smtp_tls_policy_maps >> smtp_tls_policy_maps = hash:/etc/postfix/tls_policy >> >> The entry in that file is set to: >> >> smtp.att.yahoo.com

Re: smtp_sasl_auth_enable Being Ignored

2014-01-29 Thread Viktor Dukhovni
On Wed, Jan 29, 2014 at 05:58:15PM -0500, Dennis Putnam wrote: > TLS is indeed set via > > $ postconf -n smtp_tls_policy_maps > smtp_tls_policy_maps = hash:/etc/postfix/tls_policy > > The entry in that file is set to: > > smtp.att.yahoo.com may Your original message reports problems with

Re: smtp_sasl_auth_enable Being Ignored

2014-01-29 Thread Noel Jones
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 1/29/2014 4:44 PM, Dennis Putnam wrote: > On 1/29/2014 4:22 PM, li...@rhsoft.net wrote: >> >> Am 29.01.2014 22:14, schrieb Dennis Putnam: >>> I have made yet another discovery. Perhaps this is the >>> problem. When the EHLO command is send, should

Re: smtp_sasl_auth_enable Being Ignored

2014-01-29 Thread li...@rhsoft.net
Am 29.01.2014 23:58, schrieb Dennis Putnam: > Thanks for the reply. Keep in mind this is not a new installation. This > has been working until recently and still works for servers requiring > authentication other then smtp.att.yahoo.com. Clearly something must > have changed for that particular s

Re: smtp_sasl_auth_enable Being Ignored

2014-01-29 Thread Dennis Putnam
On 1/29/2014 4:55 PM, Viktor Dukhovni wrote: > On Wed, Jan 29, 2014 at 04:14:16PM -0500, Dennis Putnam wrote: > >> I have made yet another discovery. Perhaps this is the problem. When the >> EHLO command is send, should there not be the line: >> >> 250-AUTH LOGIN DIGEST-MD5 CRAM-MD5 PLAIN > To repe

Re: smtp_sasl_auth_enable Being Ignored

2014-01-29 Thread li...@rhsoft.net
Am 29.01.2014 23:44, schrieb Dennis Putnam: > On 1/29/2014 4:22 PM, li...@rhsoft.net wrote: >> >> Am 29.01.2014 22:14, schrieb Dennis Putnam: >>> I have made yet another discovery. Perhaps this is the problem. When the >>> EHLO command is send, should there not be the line: >> to the destination s

Re: smtp_sasl_auth_enable Being Ignored

2014-01-29 Thread Dennis Putnam
On 1/29/2014 4:22 PM, li...@rhsoft.net wrote: > > Am 29.01.2014 22:14, schrieb Dennis Putnam: >> I have made yet another discovery. Perhaps this is the problem. When the >> EHLO command is send, should there not be the line: > to the destination server i assume > >> 250-AUTH LOGIN DIGEST-MD5 CRAM-M

Re: smtp_sasl_auth_enable Being Ignored

2014-01-29 Thread Viktor Dukhovni
On Wed, Jan 29, 2014 at 04:14:16PM -0500, Dennis Putnam wrote: > I have made yet another discovery. Perhaps this is the problem. When the > EHLO command is send, should there not be the line: > > 250-AUTH LOGIN DIGEST-MD5 CRAM-MD5 PLAIN To repeat what I posted previously: Save everyone some

Re: smtp_sasl_auth_enable Being Ignored

2014-01-29 Thread Noel Jones
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 1/29/2014 3:14 PM, Dennis Putnam wrote: > On 1/29/2014 9:35 AM, Dennis Putnam wrote: >> On 1/29/2014 8:49 AM, Dennis Putnam wrote: >>> On 1/28/2014 9:44 PM, Viktor Dukhovni wrote: On Tue, Jan 28, 2014 at 09:15:02PM -0500, Dennis Putnam wr

Re: smtp_sasl_auth_enable Being Ignored

2014-01-29 Thread li...@rhsoft.net
Am 29.01.2014 22:14, schrieb Dennis Putnam: > I have made yet another discovery. Perhaps this is the problem. When the > EHLO command is send, should there not be the line: to the destination server i assume > 250-AUTH LOGIN DIGEST-MD5 CRAM-MD5 PLAIN > > Is that not what triggers the sasl auth

Re: smtp_sasl_auth_enable Being Ignored

2014-01-29 Thread Dennis Putnam
On 1/29/2014 9:35 AM, Dennis Putnam wrote: > On 1/29/2014 8:49 AM, Dennis Putnam wrote: >> On 1/28/2014 9:44 PM, Viktor Dukhovni wrote: >>> On Tue, Jan 28, 2014 at 09:15:02PM -0500, Dennis Putnam wrote: >>> The following is in my main.cf. smtp_sasl_auth_enable = yes smtp_sasl_pa

Re: smtp_sasl_auth_enable Being Ignored

2014-01-29 Thread Viktor Dukhovni
On Wed, Jan 29, 2014 at 08:49:25AM -0500, Dennis Putnam wrote: > > You have not set "smtp_sasl_auth_enable = yes", and perhaps other > > required settings are not in fact set as intended. > > Thanks for the reply. I did not thing to use -n as normally I use -d. That's rather useless in this cont

Re: smtp_sasl_auth_enable Being Ignored

2014-01-29 Thread Dennis Putnam
On 1/29/2014 8:49 AM, Dennis Putnam wrote: > On 1/28/2014 9:44 PM, Viktor Dukhovni wrote: >> On Tue, Jan 28, 2014 at 09:15:02PM -0500, Dennis Putnam wrote: >> >>> The following is in my main.cf. >>> >>> smtp_sasl_auth_enable = yes >>> smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd >>> smtp

Re: smtp_sasl_auth_enable Being Ignored

2014-01-29 Thread Dennis Putnam
On 1/28/2014 9:44 PM, Viktor Dukhovni wrote: > On Tue, Jan 28, 2014 at 09:15:02PM -0500, Dennis Putnam wrote: > >> The following is in my main.cf. >> >> smtp_sasl_auth_enable = yes >> smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd >> smtp_sasl_security_options = > You might think so, but t

Re: smtp_sasl_auth_enable Being Ignored

2014-01-28 Thread Viktor Dukhovni
On Tue, Jan 28, 2014 at 09:15:02PM -0500, Dennis Putnam wrote: > The following is in my main.cf. > > smtp_sasl_auth_enable = yes > smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd > smtp_sasl_security_options = You might think so, but that does not make it so. > However, when I run postc

smtp_sasl_auth_enable Being Ignored

2014-01-28 Thread Dennis Putnam
My authentication has recently stopped working (at least it appears to me there is no attempt to authenticate). The problem appears to be that the sasl parameters are being ignored. The following is in my main.cf. smtp_sasl_auth_enable = yes smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd