Hi there again,

Am Mittwoch, 5. Juni 2013, 01:08:09 schrieb Jan Kohnert:
> I have recently upgraded to 2.10.0 (gentoo) and now having some issues
> with relaying authenticated users. I'm using dovecot sasl and according
> to the logs auth works fine, but however postfix thinks I do not want to
> relay stuff from authenticated users anymore...

just downgraded to 2.9.5 (identical config) and it works like a charm:
----
Jun  5 01:19:02 b079 postfix/smtpd[15165]: Anonymous TLS connection 
established from 178-24-196-94-dynip.superkabel.de[178.24.196.94]: TLSv1.2 
with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
Jun  5 01:19:53 b079 postfix/smtpd[15165]: E6AA4CB9E1: client=178-24-196-94-
dynip.superkabel.de[178.24.196.94], sasl_method=plain, sasl_username=jan
----

The last line is never showing up in 2.10.0 (see log in OP).

postconf -n
----
alias_maps = hash:/etc/postfix/aliases, hash:/var/lib/mailman/data/aliases
allow_min_user = yes
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter = smtp-amavis:[127.0.0.1]:10024
daemon_directory = /usr/libexec/postfix
data_directory = /var/lib/postfix
debug_peer_level = 2
debugger_command = PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin ddd 
$daemon_directory/$process_name $process_id & sleep 5
dovecot_destination_recipient_limit = 1
html_directory = no
inet_protocols = all
local_destination_concurrency_limit = 2
mail_owner = postfix
mail_spool_directory = /var/spool/mail
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
message_size_limit = 15728600
mime_header_checks = pcre:/etc/postfix/mime_header_checks
mydestination = localhost.$mydomain, $mydomain, kohni.$mydomain, claudi.
$mydomain, kohni-mobil.$mydomain
mydomain = jankoh.mooo.com
myhostname = mail.the-pojs.de
mynetworks = 127.0.0.0/8 [::1]/128
myorigin = $mydomain
newaliases_path = /usr/bin/newaliases
queue_directory = /var/spool/postfix
readme_directory = no
sample_directory = /etc/postfix
sendmail_path = /usr/sbin/sendmail
setgid_group = postdrop
smtp_helo_name = the-pojs.de
smtp_tls_loglevel = 1
smtp_tls_session_cache_database = btree:/etc/postfix/smtp_scache
smtp_tls_session_cache_timeout = 3600s
smtp_use_tls = yes
smtpd_helo_required = yes
smtpd_recipient_restrictions = reject_non_fqdn_sender, 
reject_non_fqdn_recipient, reject_multi_recipient_bounce, permit_mynetworks, 
permit_sasl_authenticated, reject_unlisted_recipient, 
reject_unauth_destination, reject_unauth_pipelining, reject_invalid_hostname, 
reject_unknown_sender_domain, reject_rbl_client zen.spamhaus.org, 
check_policy_service inet:127.0.0.1:10030
smtpd_sasl_auth_enable = yes
smtpd_sasl_path = /var/run/dovecot/auth
smtpd_sasl_type = dovecot
smtpd_sender_login_maps = hash:/etc/postfix/sasl_sender
smtpd_sender_restrictions = reject_authenticated_sender_login_mismatch
smtpd_tls_CApath = /etc/ssl/certs
smtpd_tls_auth_only = yes
smtpd_tls_cert_file = /etc/postfix/cert.pem
smtpd_tls_key_file = /etc/postfix/cert.key
smtpd_tls_loglevel = 1
smtpd_use_tls = yes
soft_bounce = yes
unknown_local_recipient_reject_code = 550
virtual_alias_maps = hash:/etc/postfix/virtual
virtual_gid_maps = static:500
virtual_mailbox_base = /home/virtualmail
virtual_mailbox_domains = the-pojs.dyndns.org, the-pojs.de
virtual_mailbox_maps = ldap:/etc/postfix/virtual.cf
virtual_minimum_uid = 500
virtual_transport = dovecot
virtual_uid_maps = static:102
----

master for submission:
----
submission inet n       -       n       -       -       smtpd
  -o smtpd_tls_security_level=encrypt
  -o smtpd_sasl_auth_enable=yes
  -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject
  -o content_filter=smtp-amavis:[127.0.0.1]:10026
  -o milter_macro_daemon_name=ORIGINATING
----

So either I made a config error, or I found a bug, or the gentoo folks are 
doing something weird.

Any idea? For now I'll stay in 2.9.5…

-- 
MfG Jan

Reply via email to