Problems with Outlook 2010 (beta) sending mails

[petzsch]

Hi,

some of my customers are reporting to me that they have problems sending mails via SMTP using the new Outlook 2010 beta version.

I've followed their sending attempts in the mail.log and found the following intresting lines:

Quote:Dec 6 23:47:37 15 postfix/smtpd[26120]: connect from dslb-088-075-172-211.pools.arcor-ip.net[88.75.172.211]
Dec 6 23:47:37 15 postfix/smtpd[26120]: warning: dslb-088-075-172-211.pools.arcor-ip.net[88.75.172.211]: SASL NTLM authentication aborted
Dec 6 23:47:37 15 postfix/smtpd[26120]: warning: SASL authentication failure: required parameters missing
Dec 6 23:47:37 15 postfix/master[20163]: warning: process /usr/lib/postfix/smtpd pid 26120 killed by signal 11
Dec 6 23:47:37 15 postfix/master[20163]: warning: /usr/lib/postfix/smtpd: bad command startup -- throttling

I've seen identically problems on different machines.
Trying Outlook 2010 myself, didn't bring me any further.

I've tried issuing a EHLO command to the smtp server by telnet and got the following:

Quote:220 15.kunden-server.org ESMTP ispCP 1.0.0 OMEGA Managed
EHLO localhost
250-15.kunden-server.org
250-PIPELINING
250-SIZE
250-VRFY
250-ETRN
250-AUTH NTLM LOGIN PLAIN DIGEST-MD5 CRAM-MD5
250-AUTH=NTLM LOGIN PLAIN DIGEST-MD5 CRAM-MD5
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN

I'm not shure why NTLM is at all beeing offered to the client. I guess Outook is just using the best mechanism itself supports, but it's not really working on my end.

No problems when using Thunderbird, Outlook Express, Outlook 2007 or the Horde Webmail. I hope you guys have a clue, what's causing this. I'd prefer getting it sorted out before office 2010 is released to the masses ;-)

[gOOvER]

Quote:No problems when using Thunderbird, Outlook Express, Outlook 2007 or the Horde Webmail.

So i see no problem of ispCP

Quote: I hope you guys have a clue, what's causing this.

2010 is a Beta. If you have these problems after release as stable, then we can talk about it. But we don't debug MS Beta Code

[petzsch]

I don't see a Problem with the M$-Code here.
When the Mailserver claims to support NTLM as authentication method than it is very well legitim for Outlook to make use of the strongest mechanism both sides support. I mean that's the whole point of "show me your mechanisms, and I'll show you mine"

Current point of my researching: It has something to do with SASL and the supported mechansims from that side. But I can't find the coresponding config file where those mechanisms are configured.
Thx for any useful hints

[kilburn]

IMHO you're right: if ispcp doesn't setup postfix's auth mechanisms right, it should be an ispcp-related thing. By the way, on a debian lenny system the mechs are configured in the following file (create it if it doesn't exist):

Code:

# cat /etc/postfix/sasl/smtpd.conf
mech_list: plain login

[mcgreen]

(12-07-2009 08:51 PM)kilburn Wrote:  IMHO you're right: if ispcp doesn't setup postfix's auth mechanisms right, it should be an ispcp-related thing. By the way, on a debian lenny system the mechs are configured in the following file (create it if it doesn't exist):

Code:

# cat /etc/postfix/sasl/smtpd.conf
mech_list: plain login

It works! Thanks a lot!!!

McGreen

(BTW, I must go through this forum to find out, how to install ISP on Ubuntu Server. I tried it a few months ago, but it didn't work. So I had to install vhcs2 again.)

[marcus]

I got the same problem with a customer, that he cant use outlook 2010 beta, because the test of the server goes wrong.

So if i understand this thread right,

creating the file /etc/postfix/sasl/smtpd.conf with:
mech_list: plain login

should perhaps fix this? - i have done that, but it didnt helps Did i miss something ?

thanks
marcus

[petzsch]

did you restart postfix?

[ShinZan]

(04-23-2010 10:17 PM)petzsch Wrote:  did you restart postfix?

I hate to resurrect an old thread but i said the same thing when beta customers asked me about the problem "Get off Beta Software!"

Well now the beta is over and i have 2010 myself and i have ispcp version 1.0 running debian etch.
and i get the same problem exactly. outlook 2007 no problem outlook 2010 gives me these errors:

Aug 16 12:21:55 debian postfix/smtpd[1094]: warning: unknown[x.x.x.170]: SASL NTLM authentication aborted
Aug 16 12:21:55 debian postfix/smtpd[1094]: warning: SASL authentication failure: required parameters missing

i created the file /etc/postfix/sasl/smtpd.conf
filled it with contents:
mech_list: plain login

saved closed and restarted postfix but no joy.

Code:

main.cf #sasl parameters
# SASL paramters
smtpd_sasl_auth_enable       = yes
smtpd_sasl_security_options  = noanonymous
smtpd_sasl_local_domain      =
broken_sasl_auth_clients     = yes

smtpd_helo_required          = yes

smtpd_helo_restrictions      = permit_mynetworks,
                               permit_sasl_authenticated,
                               reject_invalid_helo_hostname,
                               reject_non_fqdn_helo_hostname

smtpd_sender_restrictions    = reject_non_fqdn_sender,
                               reject_unknown_sender_domain,
                               permit_mynetworks,
                               permit_sasl_authenticated

smtpd_recipient_restrictions = reject_non_fqdn_recipient,
                               reject_unknown_recipient_domain,
                               permit_mynetworks,
                               permit_sasl_authenticated,
                               reject_unauth_destination,
                               reject_unlisted_recipient,
                               check_policy_service inet:127.0.0.1:12525,
                               check_policy_service inet:127.0.0.1:60000,
                               permit

smtpd_data_restrictions      = reject_multi_recipient_bounce,
                               reject_unauth_pipelining

[HenrikS]

(12-07-2009 11:51 AM)gOOvER Wrote:  2010 is a Beta. If you have these problems after release as stable, then we can talk about it. But we don't debug MS Beta Code

I have the full version installed (No beta) still the same problem and only on ispcp ... not on other panels.... so it is ispcp related.

So i hope someone has a fix for this.

[petzsch]

Well the fix is described here: Hope to see the fix in one of the coming ISPcp releases :-)