Problem with SMTP from certain clients - possibly courier auth issue

    Good day


    In summary, I suspect accounts are not being authenticated properly, on the system. I can't say for sure, because I am getting differing results, and I'm not sure how to verify this. I need help in getting clients to authenticate properly.


    Now, the background :


    I have recently migrated from IspCP to i-MSCP.


    The migration is compete, and I have ironed out most small issues. However, some clients are reporting issues with SMTP from certain clients (in particular, from iPads). I am convinced the issue is on the iPad. However, the same devices were able to connect prior to upgrade, so this problem appeared after the upgrade, telling me that something might have changed on the server.


    For example, yesterday, the client reported that at a wifi hotspot, her laptop was sending with the same SMTP address as the iPad, but the iPad was not sending.


    I studied the logs.


    Here is an example of a failed smtp connection. It appears she is using "SSL / NTLM" setting on the iPad, but it is failing :


    Quote

    Dec 3 18:36:46 cheech postfix/smtpd[21356]: connect from 41-133-83-64.dsl.mweb.co.za[41.133.83.64]
    Dec 3 18:36:46 cheech postfix/smtpd[21356]: warning: 41-133-83-64.dsl.mweb.co.za[41.133.83.64]: SASL NTLM authentication failed: authentication failure
    Dec 3 18:36:46 cheech postfix/smtpd[21356]: CC61C8902A7: client=41-133-83-64.dsl.mweb.co.za[41.133.83.64], sasl_method=DIGEST-MD5, sasl_username=hanna@herdomain.com


    I was able to connect from another iPad (another source network) using "NO SSL Password" settings on the ipad that works


    Quote

    Dec 4 10:04:10 cheech postfix/smtpd[1634]: connect from 105-236-32-133.access.mtnbusiness.co.za[105.236.32.133]
    Dec 4 10:04:10 cheech postfix/smtpd[1634]: DA6FC8902A9: client=105-236-32-133.access.mtnbusiness.co.za[105.236.32.133], sasl_method=PLAIN, sasl_username=herma@herdomain.com
    Dec 4 10:04:10 cheech postfix/cleanup[1635]: DA6FC8902A9: message-id=<BE7EDD2C-EC58-4362-8611-31F6D5A65ABD@herdomain.com>
    Dec 4 10:04:10 cheech postfix/qmgr[20780]: DA6FC8902A9: from=<herma@herdomain.com>, size=638, nrcpt=1 (queue active)
    Dec 4 10:04:11 cheech postfix/pipe[1636]: DA6FC8902A9: to=<pradesh@mydomain.com>, relay=maildrop, delay=0.18, delays=0.1/0.07/0/0.02, dsn=2.0.0, status=sent (delivered via maildrop service)
    Dec 4 10:04:11 cheech postfix/qmgr[20780]: DA6FC8902A9: removed



    And here is an example of "Plain / Encrypted password " settings from thunderbird that works.


    ec 4 07:25:05 cheech postfix/smtpd[29439]: connect from mail.mydomain.com[141.204.194.132]
    Dec 4 07:25:05 cheech postfix/smtpd[29439]: B05038902A0: client=mail.mydomain.com[141.204.194.132], sasl_method=DIGEST-MD5, sasl_username=pradesh@mydomain.com
    Dec 4 07:25:05 cheech postfix/smtpd[29439]: disconnect from mail.mydomain.com[141.204.194.132]



    It gets confusing for me , because a connection test fails from the server itself, as can be seen below, with the corresponding logs ( encoded data is changed



    So, as you can see, my results are varying, so I'm not sure where the failure could be occuring.


    Thank you for your time.


    regards
    Pradesh

    Quote from krok


    looks like SASL problem, what system do you use ?
    see -> http://forum.i-mscp.net/Thread…entication?highlight=sasl


    Thank you krok. You are spot on about the issue being a SASL one.


    I did try the fix you suggested, without success.


    I have made some progress in diagnosing the issue. In desperation, last night, I removed and re-installed postfix and courier.

    The problem seems to be that SSL is not being supported for IMAP and SMTP, and this seems to be related to a missing or incorrect certificate file. POP with SSL seems ok though.


    I will investigate further and let you know what the staus is.


    Thank you for your time and attention.
    Pradesh