Postfix не могу авторизоваться

Вот мой master.cf

#
# Postfix master process configuration file. For details on the format
# of the file, see the master(5) manual page (command: «man 5 master»).
#
# Do not forget to execute «postfix reload» after editing this file.
#
# ==========================================================================
# service type private unpriv chroot wakeup maxproc command + args
# (yes) (yes) (yes) (never) (100)
# ==========================================================================
smtp inet n - - - - smtpd
#submission inet n - - - - smtpd
# -o smtpd_tls_security_level=encrypt
# -o smtpd_sasl_auth_enable=yes
# -o smtpd_client_restrictions=permit_sasl_authenticated,reject
# -o milter_macro_daemon_name=ORIGINATING
#smtps inet n - - - - smtpd
# -o smtpd_tls_wrappermode=yes
# -o smtpd_sasl_auth_enable=yes
# -o smtpd_client_restrictions=permit_sasl_authenticated,reject
# -o milter_macro_daemon_name=ORIGINATING
#628 inet n - - - - qmqpd
pickup fifo n - - 60 1 pickup
cleanup unix n - - - 0 cleanup
qmgr fifo n - n 300 1 qmgr
#qmgr fifo n - - 300 1 oqmgr
tlsmgr unix - - - 1000? 1 tlsmgr
rewrite unix - - - - - trivial-rewrite
bounce unix - - - - 0 bounce
defer unix - - - - 0 bounce
trace unix - - - - 0 bounce
verify unix - - - - 1 verify
flush unix n - - 1000? 0 flush
proxymap unix - - n - - proxymap
proxywrite unix - - n - 1 proxymap
smtp unix - - - - - smtp
# When relaying mail as backup MX, disable fallback_relay to avoid MX loops
relay unix - - - - - smtp
-o smtp_fallback_relay=
#   -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
showq unix n - - - - showq
error unix - - - - - error
retry unix - - - - - error
discard unix - - - - - discard
local unix - n n - - local
virtual unix - n n - - virtual
lmtp unix - - - - - lmtp
anvil unix - - - - 1 anvil
scache unix - - - - 1 scache
#
# ====================================================================
# Interfaces to non-Postfix software. Be sure to examine the manual
# pages of the non-Postfix software to find out what options it wants.
#
# Many of the following services use the Postfix pipe(8) delivery
# agent. See the pipe(8) man page for information about ${recipient}
# and other message envelope options.
# ====================================================================
#
# maildrop. See the Postfix MAILDROP_README file for details.
# Also specify in main.cf: maildrop_destination_recipient_limit=1
#
maildrop unix - n n - - pipe
flags=DRhu user=vmail argv=/usr/bin/maildrop -d ${recipient}
#
# ====================================================================
#
# Recent Cyrus versions can use the existing «lmtp» master.cf entry.
#
# Specify in cyrus.conf:
# lmtp cmd=«lmtpd -a» listen=«localhost:lmtp» proto=tcp4
#
# Specify in main.cf one or more of the following:
# mailbox_transport = lmtp:inet:localhost
# virtual_transport = lmtp:inet:localhost
#
# ====================================================================
#
# Cyrus 2.1.5 (Amos Gouaux)
# Also specify in main.cf: cyrus_destination_recipient_limit=1
#
#cyrus unix - n n - - pipe
# user=cyrus argv=/cyrus/bin/deliver -e -r ${sender} -m ${extension} ${user}
#
# ====================================================================
# Old example of delivery via Cyrus.
#
#old-cyrus unix - n n - - pipe
# flags=R user=cyrus argv=/cyrus/bin/deliver -e -m ${extension} ${user}
#
# ====================================================================
#
# See the Postfix UUCP_README file for configuration details.
#
uucp unix - n n - - pipe
flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
#
# Other external delivery methods.
#
ifmail unix - n n - - pipe
flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp unix - n n - - pipe
flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient
scalemail-backend unix   -   n   n   -   2   pipe
flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${extension}
mailman unix - n n - - pipe
flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py
${nexthop} ${user}

# delivery through dovecot
dovecot unix - n n - - pipe
flags=DRhu user=mail:mail argv=/usr/lib/dovecot/deliver -d $(recipient)

# Amavis -o receive_override_options=no_header_body_checks,no_unknown_recipient_checks
smtp-amavis unix - - - - 2 smtp
-o smtp_data_done_timeout=1200
-o smtp_send_xforward_command=yes
-o disable_dns_lookups=yes
-o max_use=20

127.0.0.1:10025 inet n - - - - smtpd

Вот мой dovecot.conf

base_dir =/var/run/dovecot/
protocols = imap pop3
listen =*
disable_plaintext_auth = no
shutdown_clients = yes
log_path =/var/log/dovecot.log
info_log_path =/var/log/dovecot.log
log_timestamp =«%Y-%m-%d %H:%M:%S »
login_dir =/var/run/dovecot/login
login_chroot = yes
login_user = dovecot
login_process_size =64
login_process_per_connection = yes
login_processes_count =3
login_max_processes_count =128
login_max_connections =256
login_greeting = Hell-o!.
login_log_format_elements = user=<%u> method=%m rip=%r lip=%l %c
login_log_format =%$:%s
mail_location = maildir:/var/mail/%d/%n
mail_privileged_group =mail
mail_access_groups =mail
first_valid_uid =7
first_valid_gid =7

protocol imap {
imap_client_workarounds = delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep
}

protocol pop3 {
pop3_uidl_format =%08Xu%08Xv
pop3_client_workarounds = outlook-no-nuls oe-ns-eoh
}

protocol managesieve {
sieve=~/.dovecot.sieve
sieve_storage=~/sieve
}

protocol lda {
postmaster_address = admin@domain.ru
mail_plugin_dir =/usr/lib/dovecot/modules/lda
auth_socket_path =/var/run/dovecot/auth-master
}

auth default{
mechanisms = plain login cram-md5

passdb sql {
args =/etc/dovecot/dovecot-sql.conf
}
userdb passwd {
}

userdb sql {
args =/etc/dovecot/dovecot-sql.conf
}

socket listen {
master {
path =/var/run/dovecot/auth-master
mode =0660
user = dovecot
group =mail
}
client {
path =/var/run/dovecot/auth-client
mode =0660
user = postfix
group = postfix
}
}
}

Люди скажите что не так? И почему dovecot не пишет логи?

>В /var/log/mail.log орет что не знает кто к нему коннектится и сбрасывает

Неправда. Не сбрасывает, а отваливается по таймауту, т.к. не было попыток логина. Чего ещё ты ожидал?

Люди скажите что не так?

Ты привёл кучу конфигов, но _ничего_ не сказал о проблеме. Именно это «не так». Если ты говоришь, что не можешь авторизоваться, приведи пример. Ты пытаешься через графическую программу? Через telnet? через openssl -s_client?

И почему dovecot не пишет логи?

А это Пушкин написал?

Nov 25 22:04:58 mydomen dovecot: pop3-login: Aborted login (no auth attempts): rip=192.168.0.11, lip=94.125.245.81

Неправда. Не сбрасывает, а отваливается по таймауту, т.к. не было попыток логина. Чего ещё ты ожидал?

Nov 25 22:43:59 it-centr dovecot: pop3-login: Aborted login (no auth attempts): rip=192.168.0.11, lip=188.133.223.9
Nov 25 22:44:47 it-centr dovecot: pop3-login: Aborted login (tried to use disabled plaintext auth): rip=192.168.0.11, lip=188.133.223.9

А почему это выскакивает когда я хочу авторизоваться?

Ты привёл кучу конфигов, но _ничего_ не сказал о проблеме. Именно это «не так». Если ты говоришь, что не можешь авторизоваться, приведи пример. Ты пытаешься через графическую программу? Через telnet? через openssl -s_client?

Я пытаюсь зайти через Evolution 2.28.3 Прием через POP3, отправка SMPT метод проверки подлинности PLAIN

А это Пушкин написал?

Это как понять. Простите если что не так.

авторизация на чём не работает? pop3? smtp? Попробуй авторизоваться в консольке и посмотри что в логах. А то о проблеме ты сказал а ни одной строчки из логов с проблемой не привёл.

При попытке конекта вручную POP3.

:~$ telnet 192.168.0.1 110
Trying 192.168.0.1...
Connected to 192.168.0.1.
Escape character is '^]'.
+OK Dovecot ready.
User admin
-ERR Plaintext authentication disallowed on non-secure (SSL/TLS) connections.

Вывод майл.лог
dovecot: pop3-login: Aborted login (tried to use disabled plaintext auth): rip=192.168.0.11, lip=192.168.0.1
Nov 26 00:37:29 it-centr postfix/scache[5294]: statistics: start interval Nov 26 00:34:07
Nov 26 00:37:29 it-centr postfix/scache[5294]: statistics: domain lookup hits=21 miss=2 success=91%
Nov 26 00:37:29 it-centr postfix/scache[5294]: statistics: address lookup hits=0 miss=2 success=0%
Nov 26 00:37:29 it-centr postfix/scache[5294]: statistics: max simultaneous domains=1 addresses=1 connection=2
Nov 26 00:37:36 it-centr dovecot: pop3-login: Aborted login (tried to use disabled plaintext auth): rip=192.168.0.11, lip=192.168.0.1


При попытке конекта вручную SMTP.

telnet 192.168.0.1 25
Trying 192.168.0.1...
Connected to 192.168.0.1.
Escape character is '^]'.
220 mydomain.ru ESMTP Mail Server
helo mail.rambler.ru
250 mydomain.ru
mail from: <admin@rambler.ru>
250 2.1.0 Ok
rcpt to: <admin@mydomain.ru>
250 2.1.5 Ok
data
354 End data with <CR><LF>.<CR><LF>
test test tesssssst
.
250 2.0.0 Ok: queued as E24DA220BC5
quit
221 2.0.0 Bye
Connection closed by foreign host.

И майл.лог

postfix/smtpd[5473]: 27754220C08: client=localhost[127.0.0.1]
Nov 26 00:42:53 mydomain postfix/cleanup[5457]: 27754220C08: message-id=<20101125184222.49191220C06@mydomain.ru>
Nov 26 00:42:53 mydomain postfix/qmgr[2401]: 27754220C08: from=<admin@rambler.ru>, size=3815, nrcpt=1 (queue active)
Nov 26 00:42:53 mydomain amavis[5322]: (05322-04) Passed CLEAN, LOCAL [127.0.0.1] [127.0.0.1] <admin@rambler.ru> -> <admin@mydomain.ru>, Message-ID: <20101125184222.49191220C06@mydomain.ru>, mail_id: iMWDWPrEJOXH, Hits: 0.767, size: 3396, queued_as: 27754220C08, 3976 ms
Nov 26 00:42:53 mydomain.ru postfix/smtp[5469]: 2ECEF220C06: to=<admin@mydomain.ru>, relay=127.0.0.1[127.0.0.1]:10024, delay=4, delays=0.07/0/0/4, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=05322-04, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 27754220C08)
Nov 26 00:42:53 it-centr postfix/qmgr[2401]: 2ECEF220C06: removed



Что делать? POP3 вручную проверить не получается.

Что делать?

Включить вот это:

-ERR Plaintext authentication disallowed on non-secure (SSL/TLS) connections.

Я отрубил disable_plaintext_auth = no, поставил disable_plaintext_auth = yes. А он все равно требует ERR Plaintext authentication disallowed on non-secure (SSL/TLS) connections. Где она еще может быть?

Даже закоментировал и сервер пергрузил. Все равно спрашивает.

Добавил ssl_disable = yes и не помогает.

Раскомментируй обратно и /etc/init.d/dovecot restart

Коннекся и смотри логи tail -f /var/log/mail.log

Сделал уже. Все тоже самое. Чудеса какие-то.

ох, хз. ну тогда используй openssl s_client

вообще, да, лучше не использовать plaintext вообще.

>вообще, да, лучше не использовать plaintext вообще.

Спасибо. Уже понял :)

Так все же как отключить эту проверку?

Нет, всё таки ты что-то не так делаешь. Какой дистрибутив? Дай вывод:

dovecot -a

postconf -n

В ЛОРКОДЕ

 code bash 

# dovecot -a

# 1.2.12: /etc/dovecot/dovecot.conf
# OS: Linux 2.6.35-22-server x86_64
base_dir: /var/run/dovecot
log_path:
info_log_path:
log_timestamp: %Y-%m-%d %H:%M:%S
syslog_facility: mail
protocols: imap pop3 imaps pop3s managesieve
listen: *
ssl_listen:
ssl: yes
ssl_ca_file:
ssl_cert_file: /etc/ssl/certs/ssl-mail.pem
ssl_key_file: /etc/ssl/private/ssl-mail.key
ssl_key_password:
ssl_parameters_regenerate: 168
ssl_cipher_list: ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM
ssl_cert_username_field: commonName
ssl_verify_client_cert: no
disable_plaintext_auth: yes
verbose_ssl: no
shutdown_clients: yes
nfs_check: yes
version_ignore: no
login_dir: /var/run/dovecot/login
login_executable(default): /usr/lib/dovecot/imap-login
login_executable(imap): /usr/lib/dovecot/imap-login
login_executable(pop3): /usr/lib/dovecot/pop3-login
login_executable(managesieve): /usr/lib/dovecot/managesieve-login
login_user: dovecot
login_greeting: Dovecot ready.
login_log_format_elements: user=<%u> method=%m rip=%r lip=%l %c
login_log_format: %$: %s
login_process_per_connection: yes
login_chroot: yes
login_trusted_networks:
login_process_size: 64
login_processes_count: 3
login_max_processes_count: 128
login_max_connections: 256
valid_chroot_dirs:
mail_chroot:
max_mail_processes: 512
mail_max_userip_connections: 10
verbose_proctitle: no
first_valid_uid: 500
last_valid_uid: 0
first_valid_gid: 1
last_valid_gid: 0
mail_access_groups:
mail_privileged_group: mail
mail_uid:
mail_gid:
mail_location: maildir:~/Maildir
mail_cache_fields:
mail_never_cache_fields: imap.envelope
mail_cache_min_mail_count: 0
mailbox_idle_check_interval: 30
mail_debug: no
mail_full_filesystem_access: no
mail_max_keyword_length: 50
mail_save_crlf: no
mmap_disable: no
dotlock_use_excl: yes
fsync_disable: no
mail_nfs_storage: no
mail_nfs_index: no
mailbox_list_index_disable: yes
lock_method: fcntl
maildir_stat_dirs: no
maildir_copy_with_hardlinks: yes
maildir_copy_preserve_filename: no
maildir_very_dirty_syncs: no
mbox_read_locks: fcntl
mbox_write_locks: fcntl dotlock
mbox_lock_timeout: 300
mbox_dotlock_change_timeout: 120
mbox_min_index_size: 0
mbox_dirty_syncs: yes
mbox_very_dirty_syncs: no
mbox_lazy_writes: yes
dbox_rotate_size: 2048
dbox_rotate_min_size: 16
dbox_rotate_days: 1
mail_drop_priv_before_exec: no
mail_executable(default): /usr/lib/dovecot/imap
mail_executable(imap): /usr/lib/dovecot/imap
mail_executable(pop3): /usr/lib/dovecot/pop3
mail_executable(managesieve): /usr/lib/dovecot/managesieve
mail_process_size: 256
mail_plugins:
mail_plugin_dir(default): /usr/lib/dovecot/modules/imap
mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap
mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3
mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve
mail_log_prefix: %Us(%u):
mail_log_max_lines_per_sec: 10
imap_max_line_length: 65536
imap_capability:
imap_client_workarounds(default): outlook-idle delay-newmail
imap_client_workarounds(imap): outlook-idle delay-newmail
imap_client_workarounds(pop3):
imap_client_workarounds(managesieve):
imap_logout_format: bytes=%i/%o
imap_id_send:
imap_id_log:
imap_idle_notify_interval: 120
pop3_no_flag_updates: no
pop3_enable_last: no
pop3_reuse_xuidl: no
pop3_save_uidl: no
pop3_lock_session: no
pop3_uidl_format: %08Xu%08Xv
pop3_client_workarounds(default):
pop3_client_workarounds(imap):
pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh
pop3_client_workarounds(managesieve):
pop3_logout_format: top=%t/%p, retr=%r/%b, del=%d/%m, size=%s
dict_db_config:
dict_process_count: 1
managesieve_max_line_length: 65536
managesieve_logout_format: bytes=%i/%o
managesieve_implementation_string: dovecot
lda:
postmaster_address: postmaster
mail_plugins: sieve
quota_full_tempfail: yes
deliver_log_format: msgid=%m: %$
rejection_reason: Your message to <%t> was automatically rejected:%n%r
auth default:
mechanisms: plain login
realms:
default_realm:
cache_size: 0
cache_ttl: 3600
cache_negative_ttl: 3600
executable: /usr/lib/dovecot/dovecot-auth
user: root
chroot:
username_chars: abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@
username_translation:
username_format:
master_user_separator:
anonymous_username: anonymous
krb5_keytab:
gssapi_hostname:
winbind_helper_path: /usr/bin/ntlm_auth
failure_delay: 2
verbose: no
debug: no
debug_passwords: no
ssl_require_client_cert: no
ssl_username_from_cert: no
use_winbind: no
count: 1
worker_max_count: 30
process_size: 256
passdb:
driver: pam
args:
deny: no
pass: no
master: no
userdb:
driver: passwd
args:
socket:
type: listen
client:
path: /var/spool/postfix/private/dovecot-auth
mode: 432
user: postfix
group: postfix
plugin:
sieve: ~/.dovecot.sieve
sieve_dir: ~/sieve

# postconf -n

alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
append_dot_mydomain = no
biff = no
bounce_queue_lifetime = 4d
config_directory = /etc/postfix
content_filter = smtp-amavis:[127.0.0.1]:10024
inet_interfaces = all
inet_protocols = ipv4
mailbox_command = /usr/lib/dovecot/deliver
mailbox_transport = dovecot
maximal_backoff_time = 5h
maximal_queue_lifetime = 4d
message_size_limit = 10240000
minimal_backoff_time = 3h
mydestination = $myhostname, localhost, localhost.$myhostname, localhost.$mydomain
mydomain = mydomen.ru
myhostname = mydomen.ru
mynetworks = 127.0.0.0/8, 192.168.0.0/24
myorigin = $mydomain
queue_run_delay = 30m
readme_directory = no
recipient_delimiter = +
smtp_data_done_timeout = 10m
smtp_data_init_timeout = 2m
smtp_data_xfer_timeout = 3m
smtp_helo_name = $myhostname
smtp_mail_timeout = 5m
smtp_rcpt_timeout = 5m
smtpd_banner = $myhostname ESMTP Mail Server
smtpd_starttls_timeout = 5m
smtpd_timeout = 5m
virtual_alias_maps = proxy:mysql:/etc/postfix/mysql_virtual_alias_maps.cf
virtual_mailbox_base = /var/mail
virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql_virtual_domains_maps.cf
virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql_virtual_mailbox_maps.cf
virtual_transport = dovecot

Дистриб Ubuntu server 10.10

disable_plaintext_auth: yes

Ковыряй настройки Evolution на предмет SSL/TLS

Сделать disable_plaintext_auth = yes, проверить что всё работать и юзать TLS/SSL.

т.е. = no

Да в том то яи беда что я уже сделал disable_plaintext_auth = yes, а он все равно требует проверку.


#telnet 192.168.0.1 110
Trying 192.168.0.1...
Connected to 192.168.0.1.
Escape character is '^]'.
+OK Dovecot ready.
user admin@mydomen.ru
-ERR Plaintext authentication disallowed on non-secure (SSL/TLS) connections.

А до этого было disable_plaintext_auth = no. И тоже не работало.

Не верю! Disable_plaintext_auth = no, рестратр демона и вывод dovecot -a сюда.

# dovecot -a
# 1.2.12: /etc/dovecot/dovecot.conf
# OS: Linux 2.6.35-22-server x86_64 Ubuntu 10.10 ext4
base_dir: /var/run/dovecot/
log_path: /var/log/dovecot.log
info_log_path: /var/log/dovecot.log
log_timestamp: %Y-%m-%d %H:%M:%S
syslog_facility: mail
protocols: imap pop3
listen: *
ssl_listen:
ssl: yes
ssl_ca_file:
ssl_cert_file: /etc/ssl/certs/dovecot.pem
ssl_key_file: /etc/ssl/private/dovecot.pem
ssl_key_password:
ssl_parameters_regenerate: 168
ssl_cipher_list:
ssl_cert_username_field: commonName
ssl_verify_client_cert: no
disable_plaintext_auth: no
verbose_ssl: no
shutdown_clients: yes
nfs_check: yes
version_ignore: no
login_dir: /var/run/dovecot/login
login_executable(default): /usr/lib/dovecot/imap-login
login_executable(imap): /usr/lib/dovecot/imap-login
login_executable(pop3): /usr/lib/dovecot/pop3-login
login_user: dovecot
login_greeting: Hell-o!.
login_log_format_elements: user=<%u> method=%m rip=%r lip=%l %c
login_log_format: %$:%s
login_process_per_connection: yes
login_chroot: yes
login_trusted_networks:
login_process_size: 64
login_processes_count: 3
login_max_processes_count: 128
login_max_connections: 256
valid_chroot_dirs:
mail_chroot:
max_mail_processes: 512
mail_max_userip_connections: 10
verbose_proctitle: no
first_valid_uid: 7
last_valid_uid: 0
first_valid_gid: 7
last_valid_gid: 0
mail_access_groups: mail
mail_privileged_group: mail
mail_uid:
mail_gid:
mail_location: maildir:/var/mail/%d/%n
mail_cache_fields:
mail_never_cache_fields: imap.envelope
mail_cache_min_mail_count: 0
mailbox_idle_check_interval: 30
mail_debug: no
mail_full_filesystem_access: no
mail_max_keyword_length: 50
mail_save_crlf: no
mmap_disable: no
dotlock_use_excl: yes
fsync_disable: no
mail_nfs_storage: no
mail_nfs_index: no
mailbox_list_index_disable: yes
lock_method: fcntl
maildir_stat_dirs: no
maildir_copy_with_hardlinks: yes
maildir_copy_preserve_filename: no
maildir_very_dirty_syncs: no
mbox_read_locks: fcntl
mbox_write_locks: fcntl dotlock
mbox_lock_timeout: 300
mbox_dotlock_change_timeout: 120
mbox_min_index_size: 0
mbox_dirty_syncs: yes
mbox_very_dirty_syncs: no
mbox_lazy_writes: yes
dbox_rotate_size: 2048
dbox_rotate_min_size: 16
dbox_rotate_days: 1
mail_drop_priv_before_exec: no
mail_executable(default): /usr/lib/dovecot/imap
mail_executable(imap): /usr/lib/dovecot/imap
mail_executable(pop3): /usr/lib/dovecot/pop3
mail_process_size: 256
mail_plugins:
mail_plugin_dir(default): /usr/lib/dovecot/modules/imap
mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap
mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3
mail_log_prefix: %Us(%u):
mail_log_max_lines_per_sec: 10
imap_max_line_length: 65536
imap_capability:
imap_client_workarounds(default): delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep
imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep
imap_client_workarounds(pop3):
imap_logout_format: bytes=%i/%o
imap_id_send:
imap_id_log:
imap_idle_notify_interval: 120
pop3_no_flag_updates: no
pop3_enable_last: no
pop3_reuse_xuidl: no
pop3_save_uidl: no
pop3_lock_session: no
pop3_uidl_format: %08Xu%08Xv
pop3_client_workarounds(default):
pop3_client_workarounds(imap):
pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh
pop3_logout_format: top=%t/%p, retr=%r/%b, del=%d/%m, size=%s
dict_db_config:
dict_process_count: 1
managesieve_max_line_length: 65536
managesieve_logout_format: bytes=%i/%o
managesieve_implementation_string: dovecot
lda:
postmaster_address: admin@it-centr.net
mail_plugin_dir: /usr/lib/dovecot/modules/lda
auth_socket_path: /var/run/dovecot/auth-master
auth default:
mechanisms: plain
realms:
default_realm:
cache_size: 0
cache_ttl: 3600
cache_negative_ttl: 3600
executable: /usr/lib/dovecot/dovecot-auth
user: root
chroot:
username_chars: abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@
username_translation:
username_format:
master_user_separator:
anonymous_username: anonymous
krb5_keytab:
gssapi_hostname:
winbind_helper_path: /usr/bin/ntlm_auth
failure_delay: 2
verbose: no
debug: no
debug_passwords: no
ssl_require_client_cert: no
ssl_username_from_cert: no
use_winbind: no
count: 1
worker_max_count: 30
process_size: 256
passdb:
driver: pam
args:
deny: no
pass: no
master: no
passdb:
driver: sql
args: /etc/dovecot/dovecot-sql.conf
deny: no
pass: no
master: no
userdb:
driver: passwd
args:
userdb:
driver: sql
args: /etc/dovecot/dovecot-sql.conf
socket:
type: listen
client:
path: /var/run/dovecot/auth-client
mode: 432
user: postfix
group: postfix
master:
path: /var/run/dovecot/auth-master
mode: 432
user: dovecot
group: mail

Ну логи во время коннекта же.

Решил переделать конфиг довекота. Теперь пишет:


“2010-11-30 23:35:18 ”dovecot: Info: Dovecot v1.2.12 starting up (core dumps disabled)
“2010-11-30 23:35:18 ”auth(default): Error: Error in configuration file /etc/dovecot/dovecot-sql.conf line 7: Expecting '='
“2010-11-30 23:35:18 ”dovecot: Error: child 3984 (auth) returned error 89 (Fatal failure)
“2010-11-30 23:35:18 ”dovecot: Fatal: Auth process died too early - shutting down


Ругается на dovecot-sql.conf. Вот и сам dovecot-sql.conf

driver = mysql
connect = host=localhost dbname=mail user=mail password=mail
default_pass_scheme = MD5
# Получение mailbox
user_query = SELECT '/var/vmail/%d/%n' as home, 'maildir:/var/vmail/%d/%n' as mail, 150 AS uid, 8 AS

gid, concat('dirsize:storage =', quota) AS quota FROM mailbox WHERE username = '%u' AND active = '1'
# Получение password
password_query = SELECT username as user, password, '/var/vmail/%d/%n' as userdb_home,

'maildir:/var/vmail/%d/%n' as userdb_mail, 150 as userdb_uid, 8 as userdb_gid FROM mailbox WHERE

Что-то не пойму на какое = он ругается.

## Dovecot configuration file
#
base_dir = /var/run/dovecot/
log_path =/var/log/dovecot.log
info_log_path =/var/log/dovecot.log
disable_plaintext_auth = no
#
protocols = imap pop3
#
protocol imap {
listen = *:143
}
protocol pop3 {
listen = *:110
}
#
log_timestamp = “%Y-%m-%d %H:%M:%S ”
syslog_facility = mail

mail_location = maildir:/var/vmail/%d/%u
#
mail_privileged_group = mail
mail_debug = no
first_valid_uid = 150
last_valid_uid = 150
maildir_copy_with_hardlinks = yes
#
auth_verbose = yes
#
protocol imap {
login_executable = /usr/lib/dovecot/imap-login
mail_executable = /usr/lib/dovecot/imap
imap_max_line_length = 65536
}
protocol pop3 {
login_executable = /usr/lib/dovecot/pop3-login
mail_executable = /usr/lib/dovecot/pop3
pop3_uidl_format = %08Xu%08Xv
}
protocol lda {
postmaster_address = postmaster@domain
sendmail_path = /usr/lib/sendmail
auth_socket_path = /var/run/dovecot/auth-master
}
#
auth_verbose = no
auth_debug = no
auth_debug_passwords = no
#
auth default {
mechanisms = plain login
passdb sql {
args = /etc/dovecot/dovecot-sql.conf
}
userdb sql {
args = /etc/dovecot/dovecot-sql.conf
}
user = nobody
socket listen {
master {
path = /var/run/dovecot/auth-master
mode = 0660
user = vmail
group = mail
}
client {
path = /var/spool/postfix/private/auth
mode = 0660
user = postfix
group = postfix
}
}
}


Что на сей раз не так?

Стоп тут разобрался. тут просто с переносом строк проблема была.
Но есть и другая проблема. Почта уходит но не приходит. postfix/local[5614]: 879BA2200FC: to=<mailuser@moydomen.ru>, relay=local, delay=0.18, delays=0.13/0.01/0/0.05, dsn=5.1.1, status=bounced (unknown user: «mailuser»)

Как это так. Куда копнуть?

unknown user: «mailuser»)

Это я понял. Куда копать что бы понять почему юсер анноун? Может у меня косяк в main.cf?


# See /usr/share/postfix/main.cf.dist for a commented, more complete version

# Debian specific: Specifying a file name will cause the first
# line of that file to be used as the name. The Debian default
# is /etc/mailname.
#myorigin = /etc/mailname

smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu)
biff = no

# appending .domain is the MUA’s job.
append_dot_mydomain = no
# Uncomment the next line to generate «delayed mail» warnings
#delay_warning_time = 4h
readme_directory = no
# TLS parameters
smtpd_tls_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem
smtpd_tls_key_file=/etc/ssl/private/ssl-cert-snakeoil.key
smtpd_use_tls=yes
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
# See /usr/share/doc/postfix/TLS_README.gz in the postfix-doc package for
# information on enabling SSL in the smtp client.

alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases


mydomain = moydomen.ru
myhostname = moydomen.ru
myorigin =$mydomain
mydestination =localhost, $myhostname, $mydomain
mynetworks = 127.0.0.0/8, 192.168.0.0/24
smtp_helo_name=$myhostname
smtpd_banner =$myhostname ESMTP Mail Server
inet_protocols = ipv4
inet_interfaces = all
mailbox_size_limit = 0



# Virtual mailbox settings
virtual_mailbox_domains = proxy:mysql:$config_directory/mysql_virtual_domains_maps.cf
#virtual_mailbox_domains = mysql:$config_directory/mysql_virtual_domains_maps.cf
virtual_mailbox_base = /var/vmail
virtual_mailbox_maps = proxy:mysql:$config_directory/mysql_virtual_mailbox_maps.cf
#virtual_mailbox_maps = mysql:$config_directory/mysql_virtual_mailbox_maps.cf
virtual_alias_maps = proxy:mysql:$config_directory/mysql_virtual_alias_maps.cf
#virtual_alias_maps = mysql:$config_directory/mysql_virtual_alias_maps.cf
virtual_minimum_uid = 150
virtual_uid_maps = static:150
virtual_gid_maps = static:8
virtual_transport = dovecot
dovecot_destination_recipient_limit = 1

# SASL Authentication
smtpd_sasl_auth_enable = yes
smtpd_sasl_exceptions_networks = $mynetworks
smtpd_sasl_security_options = noanonymous
broken_sasl_auth_clients = yes
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth

smtpd_reject_unlisted_sender = yes
smtpd_reject_unlisted_recipient = yes
disable_vrfy_command = yes
smtpd_helo_restrictions = permit_mynetworks,permit_sasl_authenticated
smtpd_sender_restrictions = permit_mynetworks,permit_sasl_authenticated
#smtpd_recipient_restrictions =permit_mynetworks,permit_sasl_authenticated

Копать в сторону виртуальных почтовых ящиков и создания таковый в mysql, в частности.

Ящики создаются это точно. Может где косяк в настройках виртуальных ящиков?

# Virtual mailbox settings
virtual_mailbox_domains = proxy:mysql:$config_directory/mysql_virtual_domains_maps.cf
#virtual_mailbox_domains = mysql:$config_directory/mysql_virtual_domains_maps.cf
virtual_mailbox_base = /var/vmail
virtual_mailbox_maps = proxy:mysql:$config_directory/mysql_virtual_mailbox_maps.cf
#virtual_mailbox_maps = mysql:$config_directory/mysql_virtual_mailbox_maps.cf
virtual_alias_maps = proxy:mysql:$config_directory/mysql_virtual_alias_maps.cf
#virtual_alias_maps = mysql:$config_directory/mysql_virtual_alias_maps.cf
virtual_minimum_uid = 150
virtual_uid_maps = static:150
virtual_gid_maps = static:8
virtual_transport = dovecot
dovecot_destination_recipient_limit = 1


Как проверить что postfix конектится к базе?
В записях типа virtual_mailbox_domains = proxy:mysql:$config_directory/mysql_virtual_domains_maps.cf
Нужна ли запись (proxy:) и что она означает?

А обязательно пользователей в систему добавлять. Просто я добавил пользователя и ошибка исчезла. Правда почта все равно не приходит.

Для устранения этой оибки -ERR Plaintext authentication disallowed on non-secure (SSL/TLS) connections. а точнее говоря это не ошибка а так оно и должно быть, вобщем разреши свою сеть в dovecot.conf login_trusted_networks = 1.2.3.0/24 или login_trusted_networks = 0.0.0.0/0 для всех. ну и disable_plaintext_auth = yes соотвецтвенно.