@James, big thanks for the information I think your clarity about the
logging of the rhost and the redhat bug helped a bit.

To help get work completed on this bug I tried to reproduce this by
setting up a mail server using sasl using these steps [1]. I was then
able to telnet to it from a remote host and attempt to login. In
mail.log I got the following messages:

Jan 25 16:55:58 uvt-yakkety postfix/smtpd[3313]: connect from 
unknown[192.168.122.1]
Jan 25 16:56:13 uvt-yakkety postfix/smtpd[3313]: warning: 
unknown[192.168.122.1]: SASL login authentication failed: authentication failure

which show the remote host IP, however in auth.log I see:

Jan 25 16:56:12 uvt-yakkety saslauthd[3020]: pam_unix(smtp:auth): 
authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=  user=powersj
Jan 25 16:56:13 uvt-yakkety saslauthd[3020]: DEBUG: auth_pam: pam_authenticate 
failed: Authentication failure
Jan 25 16:56:13 uvt-yakkety saslauthd[3020]: do_auth         : auth failure: 
[user=powersj] [service=smtp] [realm=uvt-yakkety] [mech=pam] [reason=PAM auth 
error]

I believe this replicated the issue, can you confirm?

[1] https://wiki.debian.org/PostfixAndSASL

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1657897

Title:
  Failure to report rhosts

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/cyrus-sasl2/+bug/1657897/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to