[POSTFIX] erreur "chdir(/var/spool/vmail) failed"

[bouxroute]

Hello !

J'ai un problème sur l'authentification SASL de postfix... une bonne âme pour m'aider ? ;-)


Pour tester l'authentification SASL, je lance la commande:

Code :

1
2
3
#testsaslauthd -u user@mondomaine.com -p mon_password_non_crypté
0: NO "authentication failed"

Résultat des logs:

Code :

1
2
3
4
5
6
==> /var/log/auth.log <==
Feb  3 01:46:31 localhost saslauthd[32249]: (pam_unix) check pass; user unknown
Feb  3 01:46:31 localhost saslauthd[32249]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=
Feb  3 01:46:33 localhost saslauthd[32249]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module
Feb  3 01:46:33 localhost saslauthd[32249]: do_auth         : auth failure: [user=user@mondomaine.fr] [service=imap] [realm=] [mech=pam] [reason=PAM auth error]

En testant la récupération du courrier depuis Thunderbird ( configuré avec TLS activé ), celui ci répond "Temporary problem, please try again". Sur les logs du serveur:

Code :

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
==> /var/log/mail.log <==
Feb  3 02:04:55 localhost courierpop3login: Connection, ip=[::ffff:82.244.225.202]
Feb  3 02:04:55 localhost authdaemond: received auth request, service=pop3, authtype=login
Feb  3 02:04:55 localhost authdaemond: authmysql: trying this module
Feb  3 02:04:55 localhost authdaemond: authmysqllib: connected. Versions: header 50032, client 50032, server 50032
Feb  3 02:04:55 localhost authdaemond: SQL query: SELECT username, password, "", 103, 105, "/var/spool/vmail", CONCAT(SUBSTRING_INDEX(username,'@',-1),'/',SUBSTRING_INDEX(username,'@',1),'/') , "", name, "" FROM mailbox WHERE username = 'user@mondomaine.fr'
Feb  3 02:04:55 localhost authdaemond: password matches successfully
Feb  3 02:04:55 localhost authdaemond: authmysql: sysusername=<null>, sysuserid=103, sysgroupid=105, homedir=/var/spool/vmail, address=user@mondomaine.fr, fullname=Prenom Nom, maildir=mondomaine.fr/prenom.nom/, quota=<null>, options=<null>
Feb  3 02:04:55 localhost authdaemond: authmysql: clearpasswd=<null>, passwd=zlxc3e8je1Yo2
Feb  3 02:04:55 localhost authdaemond: Authenticated: sysusername=<null>, sysuserid=103, sysgroupid=105, homedir=/var/spool/vmail, address=user@mondomaine.fr, fullname=Prenom Nom, maildir=mondomaine.fr/prenom.nom/, quota=<null>, options=<null>
Feb  3 02:04:55 localhost authdaemond: Authenticated: clearpasswd=Mon_Password_en_clair, passwd=zlxc3e8je1Yo2
Feb  3 02:04:55 localhost courierpop3login: user@mondomaine.fr: chdir(/var/spool/vmail) failed!!
Feb  3 02:04:55 localhost courierpop3login: error: Permission denied
Feb  3 02:04:55 localhost courierpop3login: LOGIN FAILED, user=user@mondomaine.fr, ip=[::ffff:82.244.225.202]
Feb  3 02:04:55 localhost courierpop3login: authentication error: Permission denied

==> /var/log/mysql.log <==
100203  2:04:55   12672 Connect     postfix@localhost on
                  12672 Init DB     postfix
                  12672 Query       SELECT username, password, "", 103, 105, "/var/spool/vmail", CONCAT(SUBSTRING_INDEX(username,'@',-1),'/',SUBSTRING_INDEX(username,'@',1),'/') , "", name, "" FROM mailbox WHERE username = 'user@mondomaine.fr'

Un test pour contrôler la bonne initialisation de postfix:

Code :

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
# telnet 127.0.0.1 25
Trying 127.0.0.1...
Connected to 127.0.0.1.
Escape character is '^]'.
220 localhost ESMTP Postfix (Debian/GNU)
EHLO domaine.com
250-localhost
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-STARTTLS
250-AUTH LOGIN PLAIN
250-AUTH=LOGIN PLAIN
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN
quit
221 2.0.0 Bye
Connection closed by foreign host.
dagobah:~#

Voici ma conf:


Distrib: Debian 4.0


Postfix (résultat de "postconf -n"):

Code :

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
 
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
append_dot_mydomain = no
biff = no
broken_sasl_auth_clients = yes
config_directory = /etc/postfix
inet_interfaces = all
mailbox_command = procmail -a "$EXTENSION"
mailbox_size_limit = 0
mydestination = mail.mondomaine.fr, localhost, localhost.localdomain, localhost
myhostname = localhost
mynetworks = 127.0.0.0/8
myorigin = /etc/mailname
recipient_delimiter = +
relayhost =
smtp_tls_session_cache_database = btree:${queue_directory}/smtp_scache
smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
smtpd_recipient_restrictions = permit_mynetworks,  permit_sasl_authenticated,  reject_non_fqdn_hostname,  reject_non_fqdn_sender,  reject_non_fqdn_recipient,    reject_unauth_destination,  reject_unauth_pipelining,     reject_invalid_hostname,  reject_rbl_client list.dsbl.org,  reject_rbl_client bl.spamcop.net,  reject_rbl_client sbl-xbl.spamhaus.org
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain = $myhostname
smtpd_sasl_security_options = noanonymous
smtpd_tls_cert_file = /etc/postfix/smtpd.cert
smtpd_tls_key_file = /etc/postfix/smtpd.key
smtpd_tls_session_cache_database = btree:${queue_directory}/smtpd_scache
smtpd_use_tls = yes
virtual_alias_maps = mysql:/etc/postfix/mysql_virtual_alias_maps.cf
virtual_gid_maps = static:20001
virtual_mailbox_base = /var/spool/vmail/
virtual_mailbox_domains = mysql:/etc/postfix/mysql_virtual_domains_maps.cf
virtual_mailbox_limit = 51200000
virtual_mailbox_maps = mysql:/etc/postfix/mysql_virtual_mailbox_maps.cf
virtual_minimum_uid = 20001
virtual_transport = virtual
virtual_uid_maps = static:20001

/etc/postfix/sasl/smtpd.conf

Code :

1
2
3
 
pwcheck_method: saslauthd
mech_list: login plain

/etc/pam.d/smtp

Code :

1
2
3
 
auth       required     pam_mysql.so user=postfix passwd=XXXXXXX host=127.0.0.1 db=postfix table=mailbox usercolumn=username passwdcolumn=password crypt=1
account    sufficient   pam_mysql.so user=postfix passwd=XXXXXXX host=127.0.0.1 db=postfix table=mailbox usercolumn=username passwdcolumn=password crypt=1

/etc/courier/authdeamonrc

Code :

1
2
3
4
5
6
7
8
 
authmodulelist="authmysql"
authmodulelistorig="authuserdb authpam authpgsql authldap authmysql authcustom authpipe"
daemons=5
authdaemonvar=/var/run/courier/authdaemon
DEBUG_LOGIN=2
DEFAULTOPTIONS=""
LOGGEROPTS=""

/etc/courier/authmysqlrc

Code :

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
 
MYSQL_SERVER            127.0.0.1
MYSQL_USERNAME          postfix
MYSQL_PASSWORD          XXXXXX
#MYSQL_SOCKET           /var/lib/mysql/mysql.sock
MYSQL_PORT              0
MYSQL_OPT               0
MYSQL_DATABASE          postfix
MYSQL_USER_TABLE        mailbox
MYSQL_CRYPT_PWFIELD     password
MYSQL_UID_FIELD         103
MYSQL_GID_FIELD         105
MYSQL_LOGIN_FIELD       username
MYSQL_HOME_FIELD        "/var/spool/vmail/"
MYSQL_NAME_FIELD        name
MYSQL_MAILDIR_FIELD     CONCAT(SUBSTRING_INDEX(username,'@',-1),'/',SUBSTRING_INDEX(username,'@',1),'/')

/etc/default/saslauthd

Code :

1
2
3
4
5
 
START=yes
MECHANISMS="pam"
THREADS=5
OPTIONS="-c -r -m /var/spool/postfix/var/run/saslauthd"

/etc/postfix/sasl/smtpd.conf

Code :

1
2
3
 
pwcheck_method: saslauthd
mech_list: login plain

Les requêtes mysql s'exécutent correctement, mais voici néanmoins la structure de la table "mailbox":

Code :

1
2
3
4
5
6
7
8
9
10
11
12
 
CREATE TABLE `mailbox` (
  `username` varchar(255) NOT NULL default '',
  `password` varchar(255) NOT NULL default '',
  `name` varchar(255) NOT NULL default '',
  `quota` int(10) NOT NULL default '0',
  `domain` varchar(255) NOT NULL default '',
  `created` datetime NOT NULL default '0000-00-00 00:00:00',
  `modified` datetime NOT NULL default '0000-00-00 00:00:00',
  `active` tinyint(1) NOT NULL default '1',
  PRIMARY KEY  (`username`)
) ENGINE=MyISAM DEFAULT CHARSET=latin1 COMMENT='Postfix Admin - Virtual Mailboxes';

D'avance merci !

[dahtah]

Salut,
A première vue, change les permissions et/ou owner sur le répertoire en question.

[bouxroute]

Voici le contenu de /var/spool, avec les droits. A priori je vois rien qui cloche... Quelqu'un peut-il comparer avec sa propre config svp ?

Code :

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
monserveur:/var/spool# ls -lR
.:
total 12
drwxr-xr-x  3 postfix postfix 4096 2007-04-10 11:45 cron
lrwxrwxrwx  1 postfix postfix    7 2009-11-05 19:04 mail -> ../mail
drwxr-xr-x 20 postfix postfix 4096 2010-01-22 08:07 postfix
drwxrwx---  3 vmail   vmail   4096 2010-02-03 02:44 vmail

./cron:
total 4
drwx-wx--T 2 postfix postfix 4096 2010-01-08 17:13 crontabs

./cron/crontabs:
total 4
-rw------- 1 postfix postfix 273 2010-01-08 17:13 root

./postfix:
total 92
drwx------ 2 postfix postfix 4096 2010-02-03 02:02 active
drwx------ 2 postfix postfix 4096 2010-01-22 07:33 bounce
drwx------ 2 postfix postfix 4096 2010-01-22 07:33 corrupt
drwx------ 2 postfix postfix 4096 2010-01-22 07:33 defer
drwx------ 2 postfix postfix 4096 2010-01-22 07:33 deferred
drwxr-xr-x 2 postfix postfix 4096 2010-02-03 16:28 etc
drwx------ 2 postfix postfix 4096 2010-01-22 07:33 flush
drwx------ 2 postfix postfix 4096 2010-01-22 07:33 hold
drwx------ 2 postfix postfix 4096 2010-02-03 02:02 incoming
drwxr-xr-x 2 postfix postfix 4096 2010-02-03 16:28 lib
drwx-wx--T 2 postfix postfix 4096 2010-01-22 07:33 maildrop
drwxr-xr-x 2 postfix postfix 4096 2010-01-22 08:32 pid
drwx------ 2 postfix postfix 4096 2010-02-03 16:28 private
-rw------- 1 postfix postfix 1024 2010-02-03 16:27 prng_exch
drwx--s--- 2 postfix postfix 4096 2010-02-03 16:28 public
drwx------ 2 postfix postfix 4096 2010-01-22 07:33 saved
-rw------- 1 postfix postfix 8192 2010-02-03 16:27 smtpd_scache.db
-rw------- 1 postfix postfix 8192 2010-02-03 16:27 smtp_scache.db
drwx------ 2 postfix postfix 4096 2010-01-22 07:33 trace
drwxr-xr-x 3 postfix postfix 4096 2010-01-22 07:33 usr
drwxr-xr-x 3 postfix postfix 4096 2010-01-22 08:07 var

./postfix/active:
total 0

./postfix/bounce:
total 0

./postfix/corrupt:
total 0

./postfix/defer:
total 0

./postfix/deferred:
total 0

./postfix/etc:
total 36
-rw-r--r-- 1 root root   494 2010-02-03 16:28 hosts
-rw-r--r-- 1 root root  1082 2010-02-03 16:28 localtime
-rw-r--r-- 1 root root   475 2010-02-03 16:28 nsswitch.conf
-rw-r--r-- 1 root root    71 2010-02-03 16:28 resolv.conf
-rw-r--r-- 1 root root 18274 2010-02-03 16:28 services

./postfix/flush:
total 0

./postfix/hold:
total 0

./postfix/incoming:
total 0

./postfix/lib:
total 180
-rw-r--r-- 1 root root 26332 2009-01-17 12:58 libnss_compat-2.3.6.so
lrwxrwxrwx 1 root root    22 2010-02-03 16:28 libnss_compat.so.2 -> libnss_compat-2.3.6.so
-rw-r--r-- 1 root root 17840 2009-01-17 12:58 libnss_dns-2.3.6.so
lrwxrwxrwx 1 root root    19 2010-02-03 16:28 libnss_dns.so.2 -> libnss_dns-2.3.6.so
-rw-r--r-- 1 root root 34276 2009-01-17 12:58 libnss_files-2.3.6.so
lrwxrwxrwx 1 root root    21 2010-02-03 16:28 libnss_files.so.2 -> libnss_files-2.3.6.so
-rw-r--r-- 1 root root 17856 2009-01-17 12:58 libnss_hesiod-2.3.6.so
lrwxrwxrwx 1 root root    22 2010-02-03 16:28 libnss_hesiod.so.2 -> libnss_hesiod-2.3.6.so
-rw-r--r-- 1 root root 34320 2009-01-17 12:58 libnss_nis-2.3.6.so
-rw-r--r-- 1 root root 38340 2009-01-17 12:58 libnss_nisplus-2.3.6.so
lrwxrwxrwx 1 root root    23 2010-02-03 16:28 libnss_nisplus.so.2 -> libnss_nisplus-2.3.6.so
lrwxrwxrwx 1 root root    19 2010-02-03 16:28 libnss_nis.so.2 -> libnss_nis-2.3.6.so

./postfix/maildrop:
total 0

./postfix/pid:
total 4
-rw------- 1 postfix postfix  0 2010-01-22 07:33 inet.smtp
-rw------- 1 postfix postfix 17 2010-02-03 16:28 master.pid
-rw------- 1 postfix postfix  0 2010-01-22 08:32 unix.cleanup
-rw------- 1 postfix postfix  0 2010-01-22 08:32 unix.virtual

./postfix/private:
total 0
srw-rw-rw- 1 postfix postfix 0 2010-02-03 16:28 anvil
srw-rw-rw- 1 postfix postfix 0 2010-02-03 16:28 bounce
srw-rw-rw- 1 postfix postfix 0 2010-02-03 16:28 bsmtp
srw-rw-rw- 1 postfix postfix 0 2010-02-03 16:28 defer
srw-rw-rw- 1 postfix postfix 0 2010-02-03 16:28 discard
srw-rw-rw- 1 postfix postfix 0 2010-02-03 16:28 error
srw-rw-rw- 1 postfix postfix 0 2010-02-03 16:28 ifmail
srw-rw-rw- 1 postfix postfix 0 2010-02-03 16:28 lmtp
srw-rw-rw- 1 postfix postfix 0 2010-02-03 16:28 local
srw-rw-rw- 1 postfix postfix 0 2010-02-03 16:28 maildrop
srw-rw-rw- 1 postfix postfix 0 2010-02-03 16:28 mailman
srw-rw-rw- 1 postfix postfix 0 2010-02-03 16:28 proxymap
srw-rw-rw- 1 postfix postfix 0 2010-02-03 16:28 relay
srw-rw-rw- 1 postfix postfix 0 2010-02-03 16:28 rewrite
srw-rw-rw- 1 postfix postfix 0 2010-02-03 16:28 scache
srw-rw-rw- 1 postfix postfix 0 2010-02-03 16:28 scalemail-backend
srw-rw-rw- 1 postfix postfix 0 2010-02-03 16:28 smtp
srw-rw-rw- 1 postfix postfix 0 2010-02-03 16:28 tlsmgr
srw-rw-rw- 1 postfix postfix 0 2010-02-03 16:28 trace
srw-rw-rw- 1 postfix postfix 0 2010-02-03 16:28 uucp
srw-rw-rw- 1 postfix postfix 0 2010-02-03 16:28 verify
srw-rw-rw- 1 postfix postfix 0 2010-02-03 16:28 virtual

./postfix/public:
total 0
srw-rw-rw- 1 postfix postfix 0 2010-02-03 16:28 cleanup
srw-rw-rw- 1 postfix postfix 0 2010-02-03 16:28 flush
prw--w--w- 1 postfix postfix 0 2010-02-03 16:28 pickup
prw--w--w- 1 postfix postfix 0 2010-02-03 16:28 qmgr
srw-rw-rw- 1 postfix postfix 0 2010-02-03 16:28 showq

./postfix/saved:
total 0

./postfix/trace:
total 0

./postfix/usr:
total 4
drwxr-xr-x 3 postfix postfix 4096 2010-01-22 07:33 lib

./postfix/usr/lib:
total 4
drwxr-xr-x 2 postfix postfix 4096 2010-02-03 16:28 zoneinfo

./postfix/usr/lib/zoneinfo:
total 0
lrwxrwxrwx 1 root root 14 2010-02-03 16:28 localtime -> /etc/localtime

./postfix/var:
total 4
drwxr-xr-x 5 postfix postfix 4096 2010-01-22 08:16 run

./postfix/var/run:
total 12
drwxr-xr-x 3 postfix postfix 4096 2010-01-22 08:08 courier
drwxr-xr-x 2 postfix postfix 4096 2010-01-22 08:08 mysqld
drwx--x--- 2 postfix postfix 4096 2010-02-03 16:28 saslauthd

./postfix/var/run/courier:
total 4
drwxr-xr-x 2 postfix postfix 4096 2010-01-22 08:08 authdaemon

./postfix/var/run/courier/authdaemon:
total 0
lrwxrwxrwx 1 postfix postfix 34 2010-01-22 08:08 socket -> /var/run/courier/authdaemon/socket

./postfix/var/run/mysqld:
total 0
lrwxrwxrwx 1 postfix postfix 27 2010-01-22 08:08 mysqld.sock -> /var/run/mysqld/mysqld.sock

./postfix/var/run/saslauthd:
total 932
-rw------- 1 root    root         0 2010-02-03 16:28 cache.flock
-rw------- 1 root    root    945152 2010-02-03 16:28 cache.mmap
srwxrwxrwx 1 root    root         0 2010-02-03 16:28 mux
-rw------- 1 root    root         0 2010-02-03 16:28 mux.accept
lrwxrwxrwx 1 postfix postfix     36 2010-01-22 08:17 saslauthd -> /var/spool/postfix/var/run/saslauthd
-rw------- 1 root    root         5 2010-02-03 16:28 saslauthd.pid

./vmail:
total 4
drwxrw---- 3 vmail vmail 4096 2010-02-03 01:54 mondomaine.fr

./vmail/mondomaine.fr:
total 4
drwxrw---- 5 vmail vmail 4096 2010-02-03 02:44 prenom.nom

./vmail/mondomaine.fr/prenom.nom:
total 12
drwxrw---- 2 vmail vmail 4096 2010-02-03 01:54 cur
drwxrw---- 2 vmail vmail 4096 2010-02-03 02:02 new
drwxrw---- 2 vmail vmail 4096 2010-02-03 02:02 tmp

./vmail/mondomaine.fr/prenom.nom/cur:
total 0

./vmail/mondomaine.fr/prenom.nom/new:
total 8
-rw-rw---- 1 vmail vmail 2093 2010-02-03 01:54 1265158492.V802Ibee00eM892612.dagobah
-rw-rw---- 1 vmail vmail 2088 2010-02-03 02:02 1265158977.V802Ibee005M143556.dagobah

./vmail/mondomaine.fr/prenom.nom/tmp:
total 0

à tout hasard, une partie du fichier /etc/passwd:

Code :

1
2
3
4
 
mysql:x:103:105:MySQL Server,,,:/var/lib/mysql:/bin/false
vmail:x:20001:20001::/var/spool/vmail:/bin/sh
postfix:x:107:108::/var/spool/postfix:/bin/false

[dahtah]

Salut,
J'ai pas de postfix sous la main, donc juste à vue de nez, Postfix doit pas appartenir au groupe vmail ? Et ce groupe doit pas avoir les droits en écriture sur /var/spool/vmail ?
C'est peut-être une connerie, mais ça coute pas grand chose d'essayer.
L'erreur classique, c'est de pas avoir créer les répertoires dans vmail avant d'interroger la boîte, mais je vois que c'est pas ton cas.
Bon courage.

[bouxroute]

merci de vos réponses... J'ai eu beau bricoler les droits une centaine de fois, rien à faire... Du coup,

Code :

apt-get --purge remove <tout le bazar lié au serveur mail>

, et réinstallation complète du MTA et des ses composants.

Et voilà le problème réglé. Un peu frustrant, mais bon.


Encore merci pour votre aide.