Author Topic: SMTP error: 503 authentication not enabled for a specific computer  (Read 8239 times)

Talkless

  • Zen Apprentice
  • *
  • Posts: 12
  • Karma: +0/-0
    • View Profile
SMTP error: 503 authentication not enabled for a specific computer
« on: September 23, 2011, 12:31:26 pm »
Hello,

Zentyal 2.0.23 here.

I have problem sending emails using SMTP authentication. Zentyal is in the same network as client machines, i.e:
Zentyal: 192.168.0.2
Client1: 192.168.0.50
Client2: 192.168.0.51

Here is example using nc.exe in Windows XP on Client2 machine:
Quote
nc OUR_HOSTNAME.lt 25
220 zentyal ESMTP Postfix (Ubuntu)
EHLO OUR_HOSTNAME.lt
250-zentyal
250-PIPELINING
250-SIZE
250-ETRN
250-STARTTLS
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN
AUTH LOGIN
503 5.5.1 Error: authentication not enabled

Meanwhile in mail.log:
Quote
Sep 23 11:26:52 zentyal postfix/smtpd[8013]: lost connection after AUTH from ISP_SUBDOMAIN.splius.lt[OUR_EXTERNAL_IP]
Sep 23 11:26:52 zentyal postfix/smtpd[8013]: disconnect from ISP_SUBDOMAIN.splius.lt[OUR_EXTERNAL_IP]

But I can send email using nc.exe and without AUTH LOGIN the from same Client2 machine:
Quote
220 zentyal ESMTP Postfix (Ubuntu)
EHLO OUR_HOSTNAME.lt
250-zentyal
250-PIPELINING
250-SIZE
250-ETRN
250-STARTTLS
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN
MAIL FROM: <test@OUR_HOSTNAME.lt>
250 2.1.0 Ok
RCPT TO: <info@OUR_HOSTNAME.lt>
250 2.1.5 Ok
DATA
354 End data with <CR><LF>.<CR><LF>
test test

.
250 2.0.0 Ok: queued as 121B965477
QUIT
221 2.0.0 Bye


Now funny thing is, that authentication is allowed from other (Client1) machine:
Quote
220 zentyal ESMTP Postfix (Ubuntu)
EHLO OUR_HOSTNAME.lt
250-zentyal
250-PIPELINING
250-SIZE
250-ETRN
250-AUTH PLAIN LOGIN
250-AUTH=PLAIN LOGIN
250-ENHANCEDSTATUSCODES
250-8BITMIME
250-DSN
250 STARTTLS
AUTH LOGIN
334 VXNlcm5hbWU6
...

And mail.log:
Quote
Sep 23 11:36:20 zentyal postfix/smtpd[8202]: connect from ISP_SUBDOMAIN.splius.lt[OUR_EXTERNAL_IP]
Sep 23 11:36:20 zentyal postfix/smtpd[8202]: setting up TLS connection from ISP_SUBDOMAIN.splius.lt[OUR_EXTERNAL_IP]
Sep 23 11:36:20 zentyal postfix/smtpd[8202]: Anonymous TLS connection established from ISP_SUBDOMAIN.splius.lt[OUR_EXTERNAL_IP]: TLSv1 with cipher D
HE-RSA-AES256-SHA (256/256 bits)

SMTP server output is different then in was for Client2 machine...

main.cf or anything else is not changed manually.

That's quite strange, and I have no clue where to start.

I appreciate your help!



jsalamero

  • Zentyal Staff
  • Zen Hero
  • *****
  • Posts: 1419
  • Karma: +45/-1
    • View Profile
Re: SMTP error: 503 authentication not enabled for a specific computer
« Reply #1 on: September 29, 2011, 11:48:52 pm »
What do you have en allowed relay objects?

Talkless

  • Zen Apprentice
  • *
  • Posts: 12
  • Karma: +0/-0
    • View Profile
Re: SMTP error: 503 authentication not enabled for a specific computer
« Reply #2 on: October 03, 2011, 01:51:04 pm »
I'm sorry, I did not understood your question.

Talkless

  • Zen Apprentice
  • *
  • Posts: 12
  • Karma: +0/-0
    • View Profile
Re: SMTP error: 503 authentication not enabled for a specific computer
« Reply #3 on: March 07, 2012, 03:37:02 pm »
It looks like some application is injecting "HELLO computer_hostname" and "STARTTLS" sequence into stream, allowing authentication through 25 port. If I am correct, Zentyal mail server does not allow AUTH PLAIN TEXT, unless it's after STARTTLS...

That's why AUTH LOGIN works in some computers (though that mystery app is currently unknown), but not on other...

Joeg1484

  • Zen Monk
  • **
  • Posts: 68
  • Karma: +2/-0
    • View Profile
Re: SMTP error: 503 authentication not enabled for a specific computer
« Reply #4 on: February 26, 2013, 04:52:03 am »
I might be having the same problem...

Thunderbird sends mail file, but KMail does not...

Get the following:

Feb 25 20:24:16 wolfserver postfix/smtpd[25142]: warning: unknown[192.168.0.1]: SASL LOGIN authentication failed: Invalid authentication mechanism
Feb 25 20:24:16 wolfserver postfix/smtpd[25142]: lost connection after AUTH from unknown[192.168.0.1]

Any ideas?

Joe