On 2024-06-16 at 21:54:34 UTC-0400 (Sun, 16 Jun 2024 20:54:34 -0500)
Paul Schmehl via Postfix-users <paul.schm...@gmail.com>
is rumored to have said:

I’m seeing this error in the roundcube logs:

[16-Jun-2024 20:28:58 -0500]: <n142glqv> SMTP Error: Authentication failure: mail.stovebolt.com
PIPELINING
SIZE 900000000
VRFY
ETRN
STARTTLS
ENHANCEDSTATUSCODES
8BITMIME
DSN
SMTPUTF8
CHUNKING

That is the response to RC's EHLO command. It is a list of supported SMTP extensions.

(Code: 250) in /var/www/html/webmail/program/lib/Roundcube/rcube.php on line 1794 (POST /webmail/?_task=mail&_unlock=loading1718587737852&_framed=1&_action=send) [16-Jun-2024 20:34:16 -0500]: <n142glqv> PHP Error: SMTP server does not support authentication

RC is correct in saying that the server does not support authentication, because there is no AUTH line in that list.

This is proper because if you support PLAIN or LOGIN mechanisms, AUTH should only be offered after TLS has been started. So RC should be giving a STARTTLS command here, but it is not.

Configure Roundcube to use TLS and your problem should be solved.



(POST /webmail/?_task=mail&_unlock=loading1718588056454&_framed=1&_action=send) [16-Jun-2024 20:34:16 -0500]: <n142glqv> SMTP Error: Authentication failure: mail.stovebolt.com
PIPELINING
SIZE 900000000
VRFY
ETRN
STARTTLS
ENHANCEDSTATUSCODES
8BITMIME
DSN
SMTPUTF8
CHUNKING (Code: 250) in /var/www/html/webmail/program/lib/Roundcube/rcube.php on line 1794 (POST /webmail/?_task=mail&_unlock=loading1718588056454&_framed=1&_action=send)

The odd thing is, I don’t see any connection attempts at all in the mail logs. However, this log entry has me wondering. PHP Error: SMTP server does not support authentication

Should postfix be announcing that it accepts AUTH LOGIN?

Not on an insecure unencrypted session. After starting TLS, a second EHLO is sent and that will include AUTH.


--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo@toad.social and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to