headers
anf | 1 Jul 2011 02:10

SMTP-AUTH problem with vchkpw

I tried to migrate my mail service (qmail+vpopmail+mysql) to the
64-bit Gentoo platform and almost succeeded, but SMTP-AUTH problem
blocked me.

Right now I have no multilib 64-bit hardened Gentoo system with
netqmail-1.06, vpopmail-5.4.30-r2, dovecot-2.0.13 and some other
stuff. Everything seems working fine, except SMTP-AUTH function.

My mailer on this new server shows me:

SEND  - connected to SMTP server
SEND  - authenticating (plain)...
SEND  - Server reports error. The response is: authentication failed (#5.7.1)
SEND  - authenticating (login)...
SEND  - Server reports error. The response is: authentication failed (#5.7.1)
SEND  - WARNING: there were no compatible authentication mechanisms detected

Here goes my config /var/qmail/control/conf-smtpd:
-----------------------------------------------------------------------
TCPSERVER_OPTS="${TCPSERVER_OPTS} -R"
QMAIL_SMTP_PRE="${QMAIL_SMTP_PRE} spamdyke -f /etc/spamdyke/spamdyke.conf"
QMAIL_SMTP_CHECKPASSWORD="/var/vpopmail/bin/vchkpw"
[[ -n "${QMAIL_SMTP_CHECKPASSWORD}" ]] && {
        [[ -z "${QMAIL_SMTP_POST}" ]] && QMAIL_SMTP_POST=/bin/true
        QMAIL_SMTP_POST="${QMAIL_SMTP_CHECKPASSWORD} ${QMAIL_SMTP_POST}"
}
-----------------------------------------------------------------------

mail control # ls -la /var/vpopmail/bin/vchkpw
-rws--x--x 1 root vpopmail 129128 Jul  1 02:18 /var/vpopmail/bin/vchkpw
(Continue reading)

Permalink | Reply | 10 comments |
headers
Rick Macdougall | 1 Jul 2011 15:13

Re: SMTP-AUTH problem with vchkpw

On 30/06/2011 8:10 PM, anf <at> ltmd.org wrote:
> I tried to migrate my mail service (qmail+vpopmail+mysql) to the
> 64-bit Gentoo platform and almost succeeded, but SMTP-AUTH problem
> blocked me.
>
> Right now I have no multilib 64-bit hardened Gentoo system with
> netqmail-1.06, vpopmail-5.4.30-r2, dovecot-2.0.13 and some other
> stuff. Everything seems working fine, except SMTP-AUTH function.
>
> My mailer on this new server shows me:
>
> SEND  - connected to SMTP server
> SEND  - authenticating (plain)...
> SEND  - Server reports error. The response is: authentication failed (#5.7.1)
> SEND  - authenticating (login)...
> SEND  - Server reports error. The response is: authentication failed (#5.7.1)
> SEND  - WARNING: there were no compatible authentication mechanisms detected
>
> Here goes my config /var/qmail/control/conf-smtpd:
> -----------------------------------------------------------------------
> TCPSERVER_OPTS="${TCPSERVER_OPTS} -R"
> QMAIL_SMTP_PRE="${QMAIL_SMTP_PRE} spamdyke -f /etc/spamdyke/spamdyke.conf"
> QMAIL_SMTP_CHECKPASSWORD="/var/vpopmail/bin/vchkpw"
> [[ -n "${QMAIL_SMTP_CHECKPASSWORD}" ]]&&  {
>          [[ -z "${QMAIL_SMTP_POST}" ]]&&  QMAIL_SMTP_POST=/bin/true
>          QMAIL_SMTP_POST="${QMAIL_SMTP_CHECKPASSWORD} ${QMAIL_SMTP_POST}"
> }
> -----------------------------------------------------------------------
>
(Continue reading)

Permalink | Reply | 9 comments |
headers
anf | 1 Jul 2011 18:54

Re: SMTP-AUTH problem with vchkpw

Hello Rick,

Friday, July 1, 2011, 16:13:45, Rick Macdougall wrote:
RM> On 30/06/2011 8:10 PM, anf <at> ltmd.org wrote:
>> I tried to migrate my mail service (qmail+vpopmail+mysql) to the
>> 64-bit Gentoo platform and almost succeeded, but SMTP-AUTH problem
>> blocked me.
>>
>> Right now I have no multilib 64-bit hardened Gentoo system with
>> netqmail-1.06, vpopmail-5.4.30-r2, dovecot-2.0.13 and some other
>> stuff. Everything seems working fine, except SMTP-AUTH function.
>>
>> My mailer on this new server shows me:
>>
>> SEND  - connected to SMTP server
>> SEND  - authenticating (plain)...
>> SEND  - Server reports error. The response is: authentication failed (#5.7.1)
>> SEND  - authenticating (login)...
>> SEND  - Server reports error. The response is: authentication failed (#5.7.1)
>> SEND  - WARNING: there were no compatible authentication mechanisms detected
>>
>> Here goes my config /var/qmail/control/conf-smtpd:
>> -----------------------------------------------------------------------
>> TCPSERVER_OPTS="${TCPSERVER_OPTS} -R"
>> QMAIL_SMTP_PRE="${QMAIL_SMTP_PRE} spamdyke -f /etc/spamdyke/spamdyke.conf"
>> QMAIL_SMTP_CHECKPASSWORD="/var/vpopmail/bin/vchkpw"
>> [[ -n "${QMAIL_SMTP_CHECKPASSWORD}" ]]&&  {
>>          [[ -z "${QMAIL_SMTP_POST}" ]]&&  QMAIL_SMTP_POST=/bin/true
>>          QMAIL_SMTP_POST="${QMAIL_SMTP_CHECKPASSWORD} ${QMAIL_SMTP_POST}"
>> }
(Continue reading)

Permalink | Reply | 8 comments |
headers
Rick Macdougall | 2 Jul 2011 15:59

Re: SMTP-AUTH problem with vchkpw

On 01/07/2011 12:54 PM, anf <at> ltmd.org wrote:
>
> User vpopmail realy exists. I also cannot find the
> difference between working x86 server configuration and the new
> amd64 one. I tried to reconfigure my system from no-multilib to
> multilib and to reemerge netqmail and vpopmail ebuilds, but still no
> success. :( Is there some way to debug that plain SMTP-AUTH to figure
> out what is really happening?
>

Hi,

You can use recordio (part of one of djb's packages) to log everything 
that happens within an smtp conversation.

http://cr.yp.to/ucspi-tcp/recordio.html

ie

/service/qmail-smtpd/run

#!/bin/sh
QMAILDUID=`id -u vpopmail`
NOFILESGID=`id -g vpopmail`
MAXSMTPD=`cat /var/qmail/control/concurrencyincoming`
exec /usr/local/bin/softlimit -m 12000000 \
     /usr/local/bin/tcpserver -v -h -R \
     -x /home/vpopmail/etc/tcp.smtp.cdb -c "$MAXSMTPD" \
     -u "$QMAILDUID" -g "$NOFILESGID" 0 smtp \
     /usr/local/bin/rblsmtpd -t 2 -b \
(Continue reading)

Permalink | Reply | 7 comments |
headers
anf | 3 Jul 2011 11:11

Re: SMTP-AUTH problem with vchkpw

Hello Rick,

Saturday, July 2, 2011, 16:59:09, Rick Macdougall wrote:
> User vpopmail realy exists. I also cannot find the
>> difference between working x86 server configuration and the new
>> amd64 one. I tried to reconfigure my system from no-multilib to
>> multilib and to reemerge netqmail and vpopmail ebuilds, but still no
>> success. :( Is there some way to debug that plain SMTP-AUTH to figure
>> out what is really happening?

RM> You can use recordio (part of one of djb's packages) to log everything
RM> that happens within an smtp conversation.

RM> http://cr.yp.to/ucspi-tcp/recordio.html

Thank you for your assistance, Rick. I tried to use that nice tool.
And here goes the result:

 <at> 400000004e1029d019fc59f4 22218 > 220 mail.domain.com ESMTP
 <at> 400000004e1029d035004684 22218 < EHLO [10.1.1.177]
 <at> 400000004e1029d035017b1c 22218 > 250-mail.domain.com
 <at> 400000004e1029d03501b1cc 22218 > 250-STARTTLS
 <at> 400000004e1029d03501e494 22218 > 250-PIPELINING
 <at> 400000004e1029d03502175c 22218 > 250-8BITMIME
 <at> 400000004e1029d03502463c 22218 > 250-SIZE 0
 <at> 400000004e1029d035027904 22218 > 250 AUTH LOGIN PLAIN
 <at> 400000004e1029d10834940c 22218 < AUTH PLAIN
 <at> 400000004e1029d108356ecc 22218 > 334
 <at> 400000004e1029d109252dcc 22218 < c2VuZGVyLmNvbXBhc3N3b3Jk
 <at> 400000004e1029d6092f863c 22218 > 535 authentication failed (#5.7.1)
(Continue reading)

Permalink | Reply | 6 comments |
headers
Rick Macdougall | 3 Jul 2011 16:15

Re: SMTP-AUTH problem with vchkpw

On 03/07/2011 5:11 AM, anf <at> ltmd.org wrote:
> Hello Rick,
>
> Saturday, July 2, 2011, 16:59:09, Rick Macdougall wrote:
>> User vpopmail realy exists. I also cannot find the
>>> difference between working x86 server configuration and the new
>>> amd64 one. I tried to reconfigure my system from no-multilib to
>>> multilib and to reemerge netqmail and vpopmail ebuilds, but still no
>>> success. :( Is there some way to debug that plain SMTP-AUTH to figure
>>> out what is really happening?
>
> RM>  You can use recordio (part of one of djb's packages) to log everything
> RM>  that happens within an smtp conversation.
>
> RM>  http://cr.yp.to/ucspi-tcp/recordio.html
>
> Thank you for your assistance, Rick. I tried to use that nice tool.
> And here goes the result:
>
>  <at> 400000004e1029d019fc59f4 22218>  220 mail.domain.com ESMTP
>  <at> 400000004e1029d035004684 22218<  EHLO [10.1.1.177]
>  <at> 400000004e1029d035017b1c 22218>  250-mail.domain.com
>  <at> 400000004e1029d03501b1cc 22218>  250-STARTTLS
>  <at> 400000004e1029d03501e494 22218>  250-PIPELINING
>  <at> 400000004e1029d03502175c 22218>  250-8BITMIME
>  <at> 400000004e1029d03502463c 22218>  250-SIZE 0
>  <at> 400000004e1029d035027904 22218>  250 AUTH LOGIN PLAIN
>  <at> 400000004e1029d10834940c 22218<  AUTH PLAIN
>  <at> 400000004e1029d108356ecc 22218>  334
>  <at> 400000004e1029d109252dcc 22218<  c2VuZGVyLmNvbXBhc3N3b3Jk
(Continue reading)

Permalink | Reply | 5 comments |
headers
Tom Collins | 8 Jul 2011 18:17
Gravatar

OT: Dovecot for POP3?

Many of us have switched from Courier to Dovecot for IMAP, I'm wondering if others have also switched from
qmail-pop3d to Dovecot for your POP server.

I have a client who insists on using POP and leaving lots of messages (~4000) in his inbox.  That's starting to
cause problems with qmail-pop3d.

I'm thinking that switching to Dovecot might solve that problem.

Thoughts?

-Tom

!DSPAM:4e172d9a32711168372950!
Permalink | Reply | 4 comments |
headers
Itamar Reis Peixoto | 8 Jul 2011 18:21
Picon

Re: OT: Dovecot for POP3?

On Fri, Jul 8, 2011 at 1:17 PM, Tom Collins <tom <at> tomlogic.com> wrote:
> Many of us have switched from Courier to Dovecot for IMAP, I'm wondering if others have also switched from
qmail-pop3d to Dovecot for your POP server.
>
> I have a client who insists on using POP and leaving lots of messages (~4000) in his inbox.  That's
starting to cause problems with qmail-pop3d.
>
> I'm thinking that switching to Dovecot might solve that problem.
>
> Thoughts?
>
> -Tom

dovecot is already packaged for almost linux distros, fedora, centos,
debian, redhat enterprise, and others.

qmail for me is dead, I recommend inter7 to port vpopmail to postfix.

--

-- 
------------

Itamar Reis Peixoto
msn, google talk: itamar <at> ispbrasil.com.br
+55 11 4063 5033 (FIXO SP)
+55 34 9158 9329 (TIM)
+55 34 8806 3989 (OI)
+55 34 3221 8599 (FIXO MG)

!DSPAM:4e172e9732711562226842!
(Continue reading)

Permalink | Reply | 0 comments |
headers
Sérgio Rosa | 8 Jul 2011 18:31
Picon
Favicon

Re: OT: Dovecot for POP3?

I'm using Dovecot for imap/pop3 and zero issues with it.

The maildirs are on a nfs server and a client has nothing less than 1G
(about 6K messages) of mail on his inbox.

I'm very satisfied with Dovecot.

Hope that this feedback helps.
Sérgio Rosa

On Fri, 2011-07-08 at 09:17 -0700, Tom Collins wrote:
> Many of us have switched from Courier to Dovecot for IMAP, I'm wondering if others have also switched from
qmail-pop3d to Dovecot for your POP server.
> 
> I have a client who insists on using POP and leaving lots of messages (~4000) in his inbox.  That's starting
to cause problems with qmail-pop3d.
> 
> I'm thinking that switching to Dovecot might solve that problem.
> 
> Thoughts?
> 
> -Tom
> 
> 
> 
> 
> 

!DSPAM:4e1730f132719083015067!
(Continue reading)

Permalink | Reply | 1 comment |
headers
clay | 9 Jul 2011 01:02
Picon

Re: OT: Dovecot for POP3?

Just make sure nobody is using smtp after pop as a means to send 
emails. You need qpop3d for this as far as I remember. Also I'm not sure 
that the vadduser -n flag  works with Dovecot. I'd check that if you use 
it as well.
I force all of my users to use SMTP auth on the submission port so it 
doesn't bother me. Other than that I love Dovecot because it never gives 
me issues after installation. Was using Courier for years and got tired 
of the authdaemon issues.

//Clay

On Fri, 08 Jul 2011 17:31:37 +0100, Sérgio Rosa wrote:
> I'm using Dovecot for imap/pop3 and zero issues with it.
>
> The maildirs are on a nfs server and a client has nothing less than 
> 1G
> (about 6K messages) of mail on his inbox.
>
> I'm very satisfied with Dovecot.
>
> Hope that this feedback helps.
> Sérgio Rosa
>
> On Fri, 2011-07-08 at 09:17 -0700, Tom Collins wrote:
>> Many of us have switched from Courier to Dovecot for IMAP, I'm 
>> wondering if others have also switched from qmail-pop3d to Dovecot for 
>> your POP server.
>>
>> I have a client who insists on using POP and leaving lots of 
>> messages (~4000) in his inbox.  That's starting to cause problems with
(Continue reading)

Permalink | Reply | 0 comments |

Gmane