5 votes

avertissement : /usr/lib/postfix/smtpd : mauvaise commande de démarrage -- étranglement

Aujourd'hui, j'ai mis en place un serveur de messagerie avec un tutoriel allemand d'ici :

Maintenant, j'ai fini et j'ai besoin d'aide pour mes problèmes. Désolé pour le mauvais anglais - j'espère que mes informations vous aideront à m'aider ^^.

mail.log :

Nov 18 16:30:00 srv01 postfix/smtpd\[23275\]: connect from localhost\[::1\]
Nov 18 16:30:00 srv01 postfix/smtpd\[23275\]: warning: SASL: Connect to private/auth\_dovecot failed: No such file or directory
Nov 18 16:30:00 srv01 postfix/smtpd\[23275\]: fatal: no SASL authentication mechanisms
Nov 18 16:30:01 srv01 postfix/master\[15201\]: warning: process /usr/lib/postfix/smtpd pid 23275 exit status 1
Nov 18 16:30:01 srv01 postfix/master\[15201\]: warning: /usr/lib/postfix/smtpd: bad command startup -- throttling

mail.err :

Nov 18 16:30:00 srv01 postfix/smtpd\[23275\]: fatal: no SASL authentication mechanisms
Nov 18 16:39:07 srv01 postfix/postmap\[23556\]: fatal: open /etc/postfix/smtp\_auth: No such file or directory

postconf -n :

alias\_database = hash:/etc/aliases
alias\_maps = hash:/etc/aliases
append\_dot\_mydomain = no
biff = no
broken\_sasl\_auth\_clients = yes
config\_directory = /etc/postfix
disable\_vrfy\_command = yes
dovecot\_destination\_recipient\_limit = 1
html\_directory = /usr/share/doc/postfix/html
inet\_interfaces = all
mailbox\_size\_limit = 0
mydestination = localhost
myhostname = srv01.domain.de
mynetworks = 127.0.0.0/8 \[::ffff:127.0.0.0\]/104 \[::1\]/128
myorigin = /etc/mailname
proxy\_read\_maps = $local\_recipient\_maps $mydestination $virtual\_alias\_maps $virtual\_alias\_domains $virtual\_mailbox\_maps $virtual\_mailbox\_domains $relay\_recipient\_maps $relay\_domains $canonical\_maps $sender\_canonical\_maps $recipient\_canonical\_maps $relocated\_maps $transport\_maps $mynetworks $smtpd\_sender\_login\_maps
readme\_directory = /usr/share/doc/postfix
recipient\_delimiter = +
relayhost =
smtp\_tls\_cert\_file = /etc/postfix/sslcert/mailserver.crt
smtp\_tls\_key\_file = /etc/postfix/sslcert/mailserver.key
smtp\_tls\_security\_level = may
smtp\_tls\_session\_cache\_database = btree:${data\_directory}/smtp\_scache
smtpd\_banner = $myhostname
smtpd\_data\_restrictions = reject\_unauth\_pipelining permit
smtpd\_recipient\_restrictions = permit\_sasl\_authenticated permit\_mynetworks reject\_rbl\_client zen.spamhaus.org reject\_unauth\_destination
smtpd\_relay\_restrictions = permit\_mynetworks permit\_sasl\_authenticated defer\_unauth\_destination
smtpd\_sasl\_auth\_enable = yes
smtpd\_sasl\_authenticated\_header = yes
smtpd\_sasl\_path = private/auth\_dovecot
smtpd\_sasl\_type = dovecot
smtpd\_sender\_login\_maps = proxy:mysql:/etc/postfix/mysql\_sender\_login\_maps.cf
smtpd\_sender\_restrictions = reject\_authenticated\_sender\_login\_mismatch reject\_unknown\_sender\_domain permit\_sasl\_authenticated
smtpd\_tls\_cert\_file = /etc/postfix/sslcert/mailserver.crt
smtpd\_tls\_key\_file = /etc/postfix/sslcert/mailserver.key
smtpd\_tls\_mandatory\_protocols = !SSLv2, !SSLv3
smtpd\_tls\_session\_cache\_database = btree:${data\_directory}/smtpd\_scache
smtpd\_use\_tls = yes
tls\_high\_cipherlist = EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:+CAMELLIA256:+AES256:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!ECDSA:CAMELLIA256-SHA:AES256-SHA:CAMELLIA128-SHA:AES128-SHA
virtual\_alias\_maps = proxy:mysql:/etc/postfix/mysql\_virtual\_alias\_maps.cf
virtual\_gid\_maps = static:5000
virtual\_mailbox\_base = /var/vmail/
virtual\_mailbox\_domains = proxy:mysql:/etc/postfix/mysql\_virtual\_domains\_maps.cf
virtual\_mailbox\_maps = proxy:mysql:/etc/postfix/mysql\_virtual\_mailbox\_maps.cf
virtual\_minimum\_uid = 104
virtual\_transport = dovecot
virtual\_uid\_maps = static:5000

doveconf -n :

\# 2.2.13: /etc/dovecot/dovecot.conf
# OS: Linux 3.16.0-4-amd64 x86\_64 Debian 8.6 
auth\_mechanisms = plain login
listen = \*
log\_timestamp = "%Y-%m-%d %H:%M:%S "
namespace inbox {
  inbox = yes
  location = 
  mailbox Drafts {
    auto = subscribe
    special\_use = \\Drafts
  }
  mailbox Junk {
    auto = subscribe
    special\_use = \\Junk
  }
  mailbox Sent {
    auto = subscribe
    special\_use = \\Sent
  }
  mailbox Trash {
    auto = subscribe
    special\_use = \\Trash
  }
  prefix = 
  separator = .
}
passdb {
  args = /etc/dovecot/dovecot-mysql.conf
  driver = sql
}
protocols = imap
service auth {
  unix\_listener /var/spool/postfix/private/auth\_dovecot {
    group = postfix
    mode = 0660
    user = postfix
  }
  unix\_listener auth-master {
    mode = 0600
    user = vmail
  }
  user = root
}
ssl\_cert = 

postfix master.cf:

#
# Postfix master process configuration file.  For details on the format
# of the file, see the master(5) manual page (command: "man 5 master" or
# on-line: http://www.postfix.org/master.5.html).
#
# Do not forget to execute "postfix reload" after editing this file.
#
# ==========================================================================
# service type  private unpriv  chroot  wakeup  maxproc command + args
#               (yes)   (yes)   (yes)   (never) (100)
# ==========================================================================
smtp       inet  n       -       n       -       -       smtpd
#smtp      inet  n       -       -       -       1       postscreen
#smtpd     pass  -       -       -       -       -       smtpd
#dnsblog   unix  -       -       -       -       0       dnsblog
#tlsproxy  unix  -       -       -       -       0       tlsproxy
dovecot    unix  -       n       n       -       -       pipe
  flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/deliver -d ${recipient}
submission inet n       -       -       -       -       smtpd
  -o syslog\_name=postfix/submission
  -o smtpd\_enforce\_tls=yes
  -o smtpd\_tls\_security\_level=encrypt
  -o smtpd\_sasl\_auth\_enable=yes
  -o smtpd\_client\_restrictions=permit\_sasl\_authenticated,reject
#  -o smtpd\_reject\_unlisted\_recipient=no
#  -o smtpd\_client\_restrictions=$mua\_client\_restrictions
#  -o smtpd\_helo\_restrictions=$mua\_helo\_restrictions
#  -o smtpd\_sender\_restrictions=$mua\_sender\_restrictions
#  -o smtpd\_recipient\_restrictions=
#  -o smtpd\_relay\_restrictions=permit\_sasl\_authenticated,reject
#  -o milter\_macro\_daemon\_name=ORIGINATING
smtps     inet  n       -       -       -       -       smtpd
  -o syslog\_name=postfix/smtps
  -o smtpd\_tls\_wrappermode=yes
  -o smtpd\_sasl\_auth\_enable=yes
  -o smtpd\_client\_restrictions=permit\_sasl\_authenticated,reject
#  -o smtpd\_reject\_unlisted\_recipient=no
#  -o smtpd\_client\_restrictions=$mua\_client\_restrictions
#  -o smtpd\_helo\_restrictions=$mua\_helo\_restrictions
#  -o smtpd\_sender\_restrictions=$mua\_sender\_restrictions
#  -o smtpd\_recipient\_restrictions=
#  -o smtpd\_relay\_restrictions=permit\_sasl\_authenticated,reject
#  -o milter\_macro\_daemon\_name=ORIGINATING
#628       inet  n       -       -       -       -       qmqpd
pickup    unix  n       -       -       60      1       pickup
cleanup   unix  n       -       -       -       0       cleanup
qmgr      unix  n       -       n       300     1       qmgr
#qmgr     unix  n       -       n       300     1       oqmgr
tlsmgr    unix  -       -       -       1000?   1       tlsmgr
rewrite   unix  -       -       -       -       -       trivial-rewrite
bounce    unix  -       -       -       -       0       bounce
defer     unix  -       -       -       -       0       bounce
trace     unix  -       -       -       -       0       bounce
verify    unix  -       -       -       -       1       verify
flush     unix  n       -       -       1000?   0       flush
proxymap  unix  -       -       n       -       -       proxymap
proxywrite unix -       -       n       -       1       proxymap
smtp      unix  -       -       -       -       -       smtp
relay     unix  -       -       -       -       -       smtp
#       -o smtp\_helo\_timeout=5 -o smtp\_connect\_timeout=5
showq     unix  n       -       -       -       -       showq
error     unix  -       -       -       -       -       error
retry     unix  -       -       -       -       -       error
discard   unix  -       -       -       -       -       discard
local     unix  -       n       n       -       -       local
virtual   unix  -       n       n       -       -       virtual
lmtp      unix  -       -       -       -       -       lmtp
anvil     unix  -       -       -       -       1       anvil
scache    unix  -       -       -       -       1       scache
#
# ====================================================================
# Interfaces to non-Postfix software. Be sure to examine the manual
# pages of the non-Postfix software to find out what options it wants.
#
# Many of the following services use the Postfix pipe(8) delivery
# agent.  See the pipe(8) man page for information about ${recipient}
# and other message envelope options.
# ====================================================================
#
# maildrop. See the Postfix MAILDROP\_README file for details.
# Also specify in main.cf: maildrop\_destination\_recipient\_limit=1
#
maildrop  unix  -       n       n       -       -       pipe
  flags=DRhu user=vmail argv=/usr/bin/maildrop -d ${recipient}
#
# ====================================================================
#
# Recent Cyrus versions can use the existing "lmtp" master.cf entry.
#
# Specify in cyrus.conf:
#   lmtp    cmd="lmtpd -a" listen="localhost:lmtp" proto=tcp4
#
# Specify in main.cf one or more of the following:
#  mailbox\_transport = lmtp:inet:localhost
#  virtual\_transport = lmtp:inet:localhost
#
# ====================================================================
#
# Cyrus 2.1.5 (Amos Gouaux)
# Also specify in main.cf: cyrus\_destination\_recipient\_limit=1
#
#cyrus     unix  -       n       n       -       -       pipe
#  user=cyrus argv=/cyrus/bin/deliver -e -r ${sender} -m ${extension} ${user}
#
# ====================================================================
# Old example of delivery via Cyrus.
#
#old-cyrus unix  -       n       n       -       -       pipe
#  flags=R user=cyrus argv=/cyrus/bin/deliver -e -m ${extension} ${user}
#
# ====================================================================
#
# See the Postfix UUCP\_README file for configuration details.
#
uucp      unix  -       n       n       -       -       pipe
  flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
#
# Other external delivery methods.
#
ifmail    unix  -       n       n       -       -       pipe
  flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp     unix  -       n       n       -       -       pipe
  flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient
scalemail-backend unix  -   n   n   -   2   pipe
  flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${extension}
mailman   unix  -       n       n       -       -       pipe
  flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py
  ${nexthop} ${user}

0 votes

Avez-vous commencé Dovecot ? Si oui, cela crée-t-il /var/spool/postfix/private/auth_dovecot Prise de courant ? Veuillez montrer ls -l /var/spool/postfix/private

1voto

Areeb Soo Yasir Points 311

Je pense que Fedor a raison. Je n'ai jamais vu cette erreur que lorsque Dovecot était configuré comme authentificateur pour Postfix. Assurez-vous que Dovecot est en cours d'exécution et vérifiez /var/log/maillog pour tout problème.

Voir ci-dessous pour un serveur client que je viens de réparer et qui avait exactement les mêmes erreurs et messages :

Jul 3 22:12:17mailserver postfix/smtpd[6195] : fatal : pas de mécanisme d'authentification SASL Juil 3 22:12:18mailserver postfix/master[4881] : warning : processus /usr/libexec/postfix/smtpd pid 6195 exit status 1 Juil 3 22:12:18mailserver postfix/master[4881] : warning : /usr/libexec/postfix/smtpd : mauvaise commande de démarrage -- throttling

La solution ici était de s'assurer que Dovecot était démarré, en cours d'exécution et configuré correctement. Si vous avez récemment migré votre serveur de messagerie vers un nouveau système d'exploitation, cela crée beaucoup de complications, notamment avec Dovecot parfois.

Fuente: http://realtechtalk.com/postfix_errors_fatal_no_SASL_authentication_mechanisms_usrlibexecpostfixsmtpd_bad_command_startup_throttling_solution-2022-articles

SistemesEz.com

SystemesEZ est une communauté de sysadmins où vous pouvez résoudre vos problèmes et vos doutes. Vous pouvez consulter les questions des autres sysadmins, poser vos propres questions ou résoudre celles des autres.

Powered by:

X