"SASL CRAM-MD5 authentication failed: generic failure" Problem

dpunkturban · Jan 18th 2015

Guten Morgen,

gestern habe ich I-MSCP 1.2.0 auf einem neuen Server installiert. Funktionierte alles fehlerfrei und lief dann auch. Heute morgen machte ich einen Reboot und seitdem kann ich keine E-Mails mehr senden.

Mail.log sagt

Code

Jan 18 12:03:41 admin postfix/smtpd[3204]: warning: XXX: SASL CRAM-MD5 authentication failed: generic failure
Jan 18 12:03:42 admin postfix/smtpd[3204]: warning: XXX: SASL CRAM-MD5 authentication failed: generic failure

An der Config wurde noch nichts geändert.

Vielen Dank für Eure Hilfe

**Nuxwin** · Jan 18th 2015

Hello

Output of the following command please:

Shell-Script

# saslfinger -s

also

Make sure that you can locally connect to your MySQL server using the username and password from the /etc/postfix/sasl/smtpd.conf file

Code

mysql -u sasl_user -p<the_passworf>

dpunkturban · Jan 18th 2015

Hello

Code

saslfinger - postfix Cyrus sasl configuration Sun Jan 18 13:11:09 CET 2015
version: 1.0.4
mode: server-side SMTP AUTH
-- basics --
Postfix: 2.9.6
System: Debian GNU/Linux 7 \n \l
-- smtpd is linked to --
libsasl2.so.2 => /usr/lib/x86_64-linux-gnu/libsasl2.so.2 (0x00007fc00fe92000)
-- active SMTP AUTH and TLS parameters for smtpd --
broken_sasl_auth_clients = yes
smtpd_sasl_auth_enable = yes
smtpd_sasl_authenticated_header = yes
smtpd_sasl_path = smtpd
smtpd_sasl_security_options = noanonymous
smtpd_sasl_type = cyrus
smtpd_tls_auth_only = no
smtpd_tls_cert_file = /etc/imscp/imscp_services.pem
smtpd_tls_key_file = /etc/imscp/imscp_services.pem
smtpd_tls_loglevel = 0
smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3
smtpd_tls_protocols = !SSLv2, !SSLv3
smtpd_tls_received_header = yes
smtpd_tls_security_level = may
-- listing of /usr/lib/sasl2 --
total 16
drwxr-xr-x 2 root root 4096 Jan 17 12:25 .
drwxr-xr-x 52 root root 4096 Jan 17 16:56 ..
-rw-r--r-- 1 root root 4 Jan 17 12:25 berkeley_db.active
-rw-r--r-- 1 root root 4 Jun 9 2013 berkeley_db.txt
-- listing of /etc/postfix/sasl --
total 12
drwxr-xr-x 2 root root 4096 Jan 17 12:29 .
drwxr-xr-x 4 root root 4096 Jan 17 12:29 ..
-rw-r----- 1 root root 327 Jan 17 12:29 smtpd.conf
-- content of /etc/postfix/sasl/smtpd.conf --
pwcheck_method: auxprop
log_level: 2
mech_list: PLAIN LOGIN CRAM-MD5 DIGEST-MD5
auto_transition: yes
auxprop_plugin: sql
sql_engine: mysql
sql_hostnames: 127.0.0.1:3306
sql_database: imscp
sql_user: --- replaced ---
sql_passwd: --- replaced ---
sql_select: SELECT mail_pass FROM mail_users WHERE mail_addr = '%u@%r' AND status = 'ok'
-- content of /etc/postfix/sasl/smtpd.conf --
pwcheck_method: auxprop
log_level: 2
mech_list: PLAIN LOGIN CRAM-MD5 DIGEST-MD5
auto_transition: yes
auxprop_plugin: sql
sql_engine: mysql
sql_hostnames: 127.0.0.1:3306
sql_database: imscp
sql_user: --- replaced ---
sql_passwd: --- replaced ---
sql_select: SELECT mail_pass FROM mail_users WHERE mail_addr = '%u@%r' AND status = 'ok'
-- active services in /etc/postfix/master.cf --
# service type private unpriv chroot wakeup maxproc command + args
# (yes) (yes) (yes) (never) (100)
smtp inet n - - - - smtpd
submission inet n - - - - smtpd
-o smtpd_sasl_auth_enable=yes
-o smtpd_client_restrictions=permit_sasl_authenticated,reject
smtps inet n - - - - smtpd
-o smtpd_tls_wrappermode=yes
-o smtpd_sasl_auth_enable=yes
-o smtpd_client_restrictions=permit_sasl_authenticated,reject
pickup fifo n - - 60 1 pickup
cleanup unix n - - - 0 cleanup
qmgr fifo n - n 300 1 qmgr
tlsmgr unix - - - 1000? 1 tlsmgr
rewrite unix - - - - - trivial-rewrite
bounce unix - - - - 0 bounce
defer unix - - - - 0 bounce
trace unix - - - - 0 bounce
verify unix - - - - 1 verify
flush unix n - - 1000? 0 flush
proxymap unix - - n - - proxymap
proxywrite unix - - n - 1 proxymap
smtp unix - - - - - smtp
relay unix - - - - - smtp
-o smtp_fallback_relay=
showq unix n - - - - showq
error unix - - - - - error
retry unix - - - - - error
discard unix - - - - - discard
local unix - n n - - local
virtual unix - n n - - virtual
lmtp unix - - - - - lmtp
anvil unix - - - - 1 anvil
scache unix - - - - 1 scache
uucp unix - n n - - pipe
flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
ifmail unix - n n - - pipe
flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp unix - n n - - pipe
flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient
scalemail-backend unix - n n - 2 pipe
flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${extension}
mailman unix - n n - - pipe
flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py ${nexthop} ${user}
imscp-arpl unix - n n - - pipe
flags=O user=vmail:imscp argv=/var/www/imscp/engine/messenger/imscp-arpl-msgr $recipient
dovecot unix - n n - - pipe
flags=DRhu user=vmail:mail argv=/usr/lib/dovecot/deliver -f ${sender} -d ${recipient}
-- mechanisms on localhost --
250-AUTH PLAIN LOGIN CRAM-MD5 DIGEST-MD5
250-AUTH=PLAIN LOGIN CRAM-MD5 DIGEST-MD5
-- end of saslfinger output --

Display More

**Nuxwin** · Jan 18th 2015

I'm unable to confirm the problem:

Code

Jan 18 13:30:24 wheezy postfix/smtpd[14954]: connect from unknown[192.168.5.100]
Jan 18 13:30:24 wheezy postfix/smtpd[14954]: EF6191A68D0: client=unknown[192.168.5.100], sasl_method=CRAM-MD5, sasl_username=nuxwin@domain1.tld
Jan 18 13:30:24 wheezy postfix/cleanup[15024]: EF6191A68D0: message-id=<54BBA6C8.8000402@domain1.tld>
Jan 18 13:30:25 wheezy postfix/qmgr[3757]: EF6191A68D0: from=<nuxwin@domain1.tld>, size=747, nrcpt=1 (queue active)
Jan 18 13:30:25 wheezy postfix/smtpd[14954]: disconnect from unknown[192.168.5.100]
Jan 18 13:30:25 wheezy dovecot: lda(nuxwin@domain1.tld): msgid=<54BBA6C8.8000402@domain1.tld>: saved mail to INBOX
Jan 18 13:30:25 wheezy postfix/pipe[15026]: EF6191A68D0: to=<nuxwin@domain1.tld>, relay=dovecot, delay=0.21, delays=0.14/0.01/0/0.06, dsn=2.0.0, status=sent (delivered via dovecot service)
Jan 18 13:30:25 wheezy postfix/qmgr[3757]: EF6191A68D0: removed

Are you sure your MySQL server is running correctly?
Are you sure you can connect (locally) to your MySQL server using the username/password from /etc/postfix/sasl/smtpd.conf ?

My testing environment

lsb_release output

saslfinger output

root@wheezy:/# saslfinger -s
saslfinger - postfix Cyrus sasl configuration Sun Jan 18 13:34:39 CET 2015
version: 1.0.4
mode: server-side SMTP AUTH

-- basics --
Postfix: 2.9.6
System: Debian GNU/Linux 7 \n \l

-- smtpd is linked to --
libsasl2.so.2 => /usr/lib/x86_64-linux-gnu/libsasl2.so.2 (0x00007f43caf0b000)

-- active SMTP AUTH and TLS parameters for smtpd --
broken_sasl_auth_clients = yes
smtpd_sasl_auth_enable = yes
smtpd_sasl_authenticated_header = yes
smtpd_sasl_path = smtpd
smtpd_sasl_security_options = noanonymous
smtpd_sasl_type = cyrus
smtpd_tls_auth_only = no
smtpd_tls_cert_file = /etc/imscp/imscp_services.pem
smtpd_tls_key_file = /etc/imscp/imscp_services.pem
smtpd_tls_loglevel = 0
smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3
smtpd_tls_protocols = !SSLv2, !SSLv3
smtpd_tls_received_header = yes
smtpd_tls_security_level = may

-- listing of /usr/lib/sasl2 --
total 16
drwxr-xr-x 2 root root 4096 Jan 1 14:03 .
drwxr-xr-x 48 root root 4096 Jan 14 00:21 ..
-rw-r--r-- 1 root root 4 Jan 1 14:03 berkeley_db.active
-rw-r--r-- 1 root root 4 Jun 9 2013 berkeley_db.txt

-- listing of /etc/postfix/sasl --
total 12
drwxr-xr-x 2 root root 4096 Jan 1 14:06 .
drwxr-xr-x 4 root root 4096 Jan 18 06:17 ..
-rw-r----- 1 root root 327 Jan 18 06:17 smtpd.conf

-- content of /etc/postfix/sasl/smtpd.conf --
pwcheck_method: auxprop
log_level: 2
mech_list: PLAIN LOGIN CRAM-MD5 DIGEST-MD5
auto_transition: yes
auxprop_plugin: sql
sql_engine: mysql
sql_hostnames: 127.0.0.1:3306
sql_database: imscp
sql_user: --- replaced ---
sql_passwd: --- replaced ---
sql_select: SELECT mail_pass FROM mail_users WHERE mail_addr = '%u@%r' AND status = 'ok'

-- active services in /etc/postfix/master.cf --
# service type private unpriv chroot wakeup maxproc command + args
# (yes) (yes) (yes) (never) (100)
smtp inet n - - - - smtpd
submission inet n - - - - smtpd
-o smtpd_sasl_auth_enable=yes
-o smtpd_client_restrictions=permit_sasl_authenticated,reject
smtps inet n - - - - smtpd
-o smtpd_tls_wrappermode=yes
-o smtpd_sasl_auth_enable=yes
-o smtpd_client_restrictions=permit_sasl_authenticated,reject
pickup fifo n - - 60 1 pickup
cleanup unix n - - - 0 cleanup
qmgr fifo n - n 300 1 qmgr
tlsmgr unix - - - 1000? 1 tlsmgr
rewrite unix - - - - - trivial-rewrite
bounce unix - - - - 0 bounce
defer unix - - - - 0 bounce
trace unix - - - - 0 bounce
verify unix - - - - 1 verify
flush unix n - - 1000? 0 flush
proxymap unix - - n - - proxymap
proxywrite unix - - n - 1 proxymap
smtp unix - - - - - smtp
relay unix - - - - - smtp
-o smtp_fallback_relay=
showq unix n - - - - showq
error unix - - - - - error
retry unix - - - - - error
discard unix - - - - - discard
local unix - n n - - local
virtual unix - n n - - virtual
lmtp unix - - - - - lmtp
anvil unix - - - - 1 anvil
scache unix - - - - 1 scache
uucp unix - n n - - pipe
flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
ifmail unix - n n - - pipe
flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp unix - n n - - pipe
flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient
scalemail-backend unix - n n - 2 pipe
flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${extension}
mailman unix - n n - - pipe
flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py ${nexthop} ${user}

imscp-arpl unix - n n - - pipe
flags=O user=vmail:imscp argv=/var/www/imscp/engine/messenger/imscp-arpl-msgr $recipient

dovecot unix - n n - - pipe
flags=DRhu user=vmail:mail argv=/usr/lib/dovecot/deliver -f ${sender} -d ${recipient}

-- mechanisms on localhost --
250-AUTH PLAIN LOGIN CRAM-MD5 DIGEST-MD5
250-AUTH=PLAIN LOGIN CRAM-MD5 DIGEST-MD5

-- end of saslfinger output --

saslpluginviewer output

Message received

Client info ( smtp server configuration

dpunkturban · Jan 18th 2015

yes, mysql works.

hmm.. second reboot and SASL works.. zombie process or something that blocked the system?

thanks for your help

"SASL CRAM-MD5 authentication failed: generic failure" Problem

Share

Daily visitors