Re: Mail relaying on postfix using the Jamm environemnt
"buzz lightyear" <[email protected]>
| Newsgroups | gmane.mail.jamm.user |
|---|---|
| Message-ID | <[email protected]> |
Hi Chris Again, thanks for writing out the howto. Very grateful. I followed your instructions - found one typo - the 'make makefiles' for postfix should have -DHAS_SSL instead of -DUSE_SSL I went to the postfix site and read one of the howtos to set up tls - this works as I can quite happily telnet to localhost on port 25, do a 'EHLO' and then 'STARTTLS' ... ie C: [[email protected]]# telnet mail.example.com 25 S: 220 mail.example.com ESMTP Postfix C: EHLO example.com S: 250-mail.example.com S: 250-PIPELINING S: 250-SIZE 10240000 S: 250-VRFY S: 250-ETRN S: 250-STARTTLS S: 250-XVERP S: 250 8BITMIME C: STARTTLS S: 220 Ready to start TLS ... but when it comes to using a mail client to relay via postfix I get an error ... using Outlook Express .. Unable to establish a SSL connection with the server. Account: 'example.com', Server: 'example.com', Protocol: SMTP, Server Response: '454 TLS not available due to temporary reason', Port: 25, Secure(SSL): Yes, Server Error: 454, Error Number: 0x800CCC7F .. looking at /var/log/syslog, I get the following (unhelpful) message: May 24 06:33:45 example.com postfix/smtpd[522]: [ID 197553 mail.info] starting TLS engine May 24 06:33:45 example.com postfix/smtpd[522]: [ID 197553 mail.info] connect from unknown[192.168.0.12] May 24 06:33:46 example.com postfix/smtpd[522]: [ID 197553 mail.info] disconnect from unknown[192.168.0.12] I'm not too sure what is happening here, whether it's a postfix config problem - ie, it's still checking for ip addresses, or a sasl problem in that it's falling over with the LDAP server. Incidently, I used the filter in the saslauthd.conf as you suggested, except without the smtpauth switch : ldap_filter: (&(ObjectClass=JammMailAccount)(mail=%u)(accountactive=TRUE)) .... my sasl2 version is 2.1.17, so this should be OK? Does any of this fire off any warning bells? The error message from Outlook doesn't make sense as TLS does work. Best Buzz _________________________________________________________________ Stay in touch with absent friends - get MSN Messenger http://www.msn.co.uk/messenger ------------------------------------------------------- This SF.Net email is sponsored by: Oracle 10g Get certified on the hottest thing ever to hit the market... Oracle 10g. Take an Oracle 10g class now, and we'll give you the exam FREE. http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click