SMTP auth error

UCS - Univention Corporate Server
#1

Hi there…

recently, UCS is rejecting SMTP logins for users. Admin Account works.
Checked testsaslauthd, same here:

testsaslauthd successfully authenticates the Domain Admin user:

testsaslauthd -u adm -p *******
0: OK “Success.”

When I try to authenticate any other User, i get the following:

testsaslauthd -u test -p *******
0: NO “authentication failed”

this is the output of /var/log/auth.log:
Feb 4 16:02:24 ucs saslauthd[1444]: nss_ldap: reconnecting to LDAP server…
Feb 4 16:02:24 ucs saslauthd[1444]: nss_ldap: reconnected to LDAP server ldap://ucs.**.local:7389 after 1 attempt
Feb 4 16:02:24 ucs saslauthd[1444]: pam_access(imap:account): access denied for user test' from imap’
Feb 4 16:02:24 ucs saslauthd[1444]: DEBUG: auth_pam: pam_acct_mgmt failed: Permission denied
Feb 4 16:02:24 ucs saslauthd[1444]: : auth failure: [user=test] [service=imap] [realm=] [mech=pam] [reason=PAM acct error]

Now im searching for some hours, nothing found.
Im having another UCS Server installed and running, cant replicate this error.
This one is 3 years old, its updated to latest.
Kopano Webapp is working fine, IMAP worx, just the SMTP auth fails.

What am I doing wrong? (:

#2

I don’t have any experience with the error you are seeing so I am not sure this will be at all helpful, but if it were my server I’d do a snapshot or backup and then uninstall and reinstall mail services. I think that would be the quickest fix potentially. I’m sure it would take me many hours to dig into all the intricacies of how authentication is configured between the different services. It would probably take me less than an hour to try the reinstall.

#3

Hey, im on VMware, so I give it a try in the evening.
When I uninstall Postfix, its really throwing out a bunch of packets.
Hope my groupware config isnt lost^^

apt-get autoremove postfix
Reading package lists... Done
Building dependency tree       
Reading state information... Done
The following packages will be REMOVED:
  altermime amavisd-new bc bind9 bind9utils bsd-mailx catdoc cgroupfs-mount
  clamav clamav-base clamav-daemon clamav-freshclam clamdscan containerd
  db-util db5.3-util docker-compose docker.io dpt-i2o-raidutils emacs24
  emacs24-bin-common emacs24-common gcc gcc-6 gconf-service gconf2-common
  golang-docker-credential-helpers heimdal-kdc heimdal-servers ifplugd
  imagemagick-6-common kopano-backup kopano-common kopano-dagent
  kopano-gateway kopano-ical kopano-monitor kopano-python-utils kopano-search
  kopano-server kopano-server-packages kopano-spooler kopano-utils kopano4ucs
  libarchive-zip-perl libarchive13 libasan3 libasound2 libasound2-data
  libatomic1 libberkeleydb-perl libc-dev-bin libc6-dev libcc1-0 libcilkrts5
  libclamav9 libconvert-binhex-perl libconvert-tnef-perl libconvert-uulib-perl
  libcrypt-openssl-bignum-perl libcrypt-openssl-rsa-perl libdaemon0
  liberror-perl libfftw3-double3 libgcc-6-dev libgconf-2-4 libgd3 libgif7
  libio-multiplex-perl libio-stringy-perl libirs141 libitm1 libjson-c3
  libkcarchiver0 libkcarchivercore0 libkcoidc0 libkcpyplug0 libkcserver0
  libkdc2-heimdal libllvm3.8 liblqr-1-0 liblsan0 libltdl7 liblzo2-2 libm17n-0
  libmagickcore-6.q16-3 libmagickwand-6.q16-3 libmail-dkim-perl
  libmail-spf-perl libmcrypt4 libmime-tools-perl libmpx2 libnet-cidr-lite-perl
  libnet-cidr-perl libnet-dns-perl libnet-ip-perl libnet-patricia-perl
  libnet-server-perl libnetaddr-ip-perl libodbc1 libotf0
  libpam-univentionmailcyrus libpq5 libpython3.5 libs3-4 libsecret-1-0
  libsecret-common libsnmp-session-perl libsys-hostname-long-perl
  libtcmalloc-minimal4 libtfm1 libtsan0 libubsan0 libunix-syslog-perl libxft2
  libxml-dom-perl libxml-parser-perl libxml-perl libxml-regexp-perl
  linux-libc-dev m17n-db manpages-dev monitoring-plugins
  monitoring-plugins-basic monitoring-plugins-common
  monitoring-plugins-standard mrtg nagios-nrpe-server nfs-kernel-server ntp
  openbsd-inetd pass pax php-cgi php-krb5 php-ldap php-mcrypt php-memcache
  php7.0-ldap php7.0-mcrypt postfix postfix-ldap postfix-sqlite
  postgresql-client-9.6 postgresql-client-common python-genshi
  python-mimeparse python-pygresql python-reportlab python-reportlab-accel
  python-ruamel.ordereddict python-ruamel.yaml python-trml2pdf python-typing
  python-univention-appcenter-docker python-univention-directory-manager-rest
  python-univention-directory-manager-uvmm python-univention-directory-reports
  python-univention-pkgdb python-uritemplate python3-bsddb3
  python3-cached-property python3-chardet python3-dateutil python3-docker
  python3-dockerpty python3-dockerpycreds python3-docopt python3-jsonschema
  python3-kopano python3-kopano-search python3-kopano-utils python3-magic
  python3-mapi python3-pkg-resources python3-requests python3-texttable
  python3-tz python3-urllib3 python3-websocket python3-xapian python3-yaml
  re2c ripole runc sa-compile samba-common samba-common-bin sasl2-bin
  simplesamlphp slapd smbclient spamassassin spamc stunnel4 tree
  univention-antivir-mail univention-appcenter-docker univention-bind
  univention-directory-manager-rest univention-directory-notifier
  univention-directory-reports univention-docker univention-firewall
  univention-heimdal-kdc univention-ifplugd univention-ldap-acl-master
  univention-ldap-client univention-ldap-config univention-ldap-config-master
  univention-ldap-overlay-memberof univention-ldap-server
  univention-license-import univention-mail-postfix univention-maintenance
  univention-management-console-module-ipchange
  univention-management-console-module-udm univention-mariadb univention-mysql
  univention-nagios-client univention-nagios-common univention-newsid
  univention-nfs-server univention-pkgdb-tools univention-portal
  univention-role-common univention-role-server-common univention-saml
  univention-sasl univention-server-master univention-server-overview
  univention-spamassassin univention-virtual-machine-manager-schema
  update-inetd xsltproc
0 upgraded, 0 newly installed, 235 to remove and 0 not upgraded.
After this operation, 650 MB disk space will be freed.
#4

Going through UCS App Center would be the way I would have recommended. I’m not sure exactly how the packages are related to the apps, so I would have done it through App Center just to be safe.

#5

Oki thanks, I will check that…

#6

reinstalled postfix…
3-2-1-worx.

thx very much for Your help!

Mastodon