can't send mail using sasl (remote network)

[skullbolix]

hello everyone,
I've installed Zimbra 3.0.1 on a Fedora Core 4 machine (minimal install). I have created 5 users and 2 domains (both have MX records). Everything is working great except the mta sasl authentication. I am using Thunderbird to connect to my mail server (66.x.x.x) from my home (69.x.x.x). I have my Thunderbird smtp settings set to use TLS with my login being my full e-mail address. When I try to send an e-mail, Thunderbird asks me for my password, but it fails (actually it keeps asking for the password).

On my Zimbra server I get this in the logs (bean is the name of my server):

Mar 23 22:32:37 bean postfix/smtpd[26905]: initializing the server-side TLS engine
Mar 23 22:32:37 bean postfix/smtpd[26905]: connect from my.host.name[69.x.x.x]
Mar 23 22:32:37 bean postfix/smtpd[26905]: setting up TLS connection from my.host.name[69.x.x.x]
Mar 23 22:32:37 bean postfix/smtpd[26905]: SSL_accept:before/accept initialization
Mar 23 22:32:37 bean postfix/smtpd[26905]: read from 0852E3D0 [0853A858] (11 bytes => -1 (0xFFFFFFFF))
Mar 23 22:32:37 bean postfix/smtpd[26905]: SSL_accept:error in SSLv2/v3 read client hello A
Mar 23 22:32:37 bean postfix/smtpd[26905]: read from 0852E3D0 [0853A858] (11 bytes => 11 (0xB))
Mar 23 22:32:37 bean postfix/smtpd[26905]: 0000 16 03 01 00 53 01 00 00|4f 03 01                 ....S... O..
Mar 23 22:32:37 bean postfix/smtpd[26905]: read from 0852E3D0 [0853A863] (77 bytes => -1 (0xFFFFFFFF))
Mar 23 22:32:37 bean postfix/smtpd[26905]: SSL_accept:error in SSLv3 read client hello B
Mar 23 22:32:37 bean postfix/smtpd[26905]: SSL_accept:error in SSLv3 read client hello B
Mar 23 22:32:37 bean postfix/smtpd[26905]: read from 0852E3D0 [0853A863] (77 bytes => 77 (0x4D))

*snip* bunch of hexidecimal cert info *snip*

Mar 23 22:32:37 bean postfix/smtpd[26905]: SSL_accept:SSLv3 flush data
Mar 23 22:32:37 bean postfix/smtpd[26905]: TLS connection established from my.host.name[69.x.x.x]: TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)
Mar 23 22:32:40 bean postfix/smtpd[26905]: warning: SASL authentication failure: Password verification failed
Mar 23 22:32:40 bean postfix/smtpd[26905]: warning: my.host.name[69.x.x.x]: SASL PLAIN authentication failed
Mar 23 22:32:41 bean postfix/smtpd[26905]: warning: my.host.name[69.x.x.x]: SASL LOGIN authentication failed
Mar 23 22:32:45 bean postfix/smtpd[26905]: lost connection after AUTH from my.host.name[69.x.x.x]
Mar 23 22:32:45 bean postfix/smtpd[26905]: disconnect from my.host.name[69.x.x.x]

I've tried every possible solution I was able to find on the forums and the wiki with no luck. I have recreated my ssl certs several times (the 'random state' error threw me off for a while).

Here is my mta config :



Any help will be greatly appreciated.

Terry Wood

Edit : When I try testsaslauthd -u me@my.domain -p secret, i get connect() : No such file or directory. And when I try testsaslauthd -u me@my.domain -p secret -f /opt/zimbra/cyrus-sasl-2.1.21.ZIMBRA/state/mux, i get 0: NO "authentication failed".

[skullbolix]

Checking my error logs, I noticed that sasl was doing a certificate check. I had set zimbra_cert_check to on in the saslauthd.conf.in trying to get this thing to work. I set it back to off, restarted sasl and now my testsaslauthd is succeeding. I'll do a real test when I go home later today. I changed so many things, I'm not sure what got it going.

I currently run my own "hand rolled" e-mail system using postfix, postgresql, amavisd, clamd, and spamassassin. I built this about 2 years ago and got stuck on the sasl / postgresql authentication (never could get it to work). Hopefully this fixes the problem and people will be able to send mail from their e-mail clients when they are on the road.

[skullbolix]

It works now. Thanks for letting me talk to myself on your forums.

[bobby]

np. thanks for posting your successful resolution.