Ubuntu Sendmail Gmail 中继验证=失败

2024-5-31 • tag-icon

我意识到关于这个主题有很多帖子，但几个小时后我仍然无法连接到 Gmail。

我注意到输出中没有DIGEST-MD5列出，这可能是一个问题吗？

任何想法都将不胜感激，谢谢。

测试输出-/usr/sbin/sendmail -Am -d60.5 -v -i -f EMAIL_FROM -- EMAIL_TO

替换：HOST、EMAIL_TO、EMAIL_FROM - 隐藏我的信息

map_lookup(host, gmail.com, %0=gmail.com) => gmail.com. (0)
map_lookup(host, gmail.com, %0=gmail.com) => gmail.com. (0)
map_lookup(host, hotmail.com, %0=hotmail.com) => hotmail.com. (0)
map_lookup(host, gmail.com, %0=gmail.com) => gmail.com. (0)
[email protected]... Connecting to smtp.gmail.com port 587 via relay...
220 smtp.gmail.com ESMTP c142sm62872634pfb.23 - gsmtp
>>> EHLO host.HOST.us
250-smtp.gmail.com at your service, [2604:880:a:6::49]
250-SIZE 35882577
250-8BITMIME
250-STARTTLS
250-ENHANCEDSTATUSCODES
250-PIPELINING
250-CHUNKING
250 SMTPUTF8
map_lookup(access, Try_TLS:smtp.gmail.com, %0=Try_TLS:smtp.gmail.com) => NOT FOUND (0)
map_lookup(access, Try_TLS:gmail.com, %0=Try_TLS:gmail.com) => NOT FOUND (0)
map_lookup(access, Try_TLS:com, %0=Try_TLS:com) => NOT FOUND (0)
map_lookup(access, Try_TLS:IPv6:2607:f8b0:400e:c04::6d, %0=Try_TLS:IPv6:2607:f8b0:400e:c04::6d) => NOT FOUND (0)
map_lookup(access, Try_TLS:IPv6:2607:f8b0:400e:c04, %0=Try_TLS:IPv6:2607:f8b0:400e:c04) => NOT FOUND (0)
map_lookup(access, Try_TLS:IPv6:2607:f8b0:400e, %0=Try_TLS:IPv6:2607:f8b0:400e) => NOT FOUND (0)
map_lookup(access, Try_TLS:IPv6:2607:f8b0, %0=Try_TLS:IPv6:2607:f8b0) => NOT FOUND (0)
map_lookup(access, Try_TLS:IPv6:2607, %0=Try_TLS:IPv6:2607) => NOT FOUND (0)
map_lookup(access, Try_TLS:IPv6, %0=Try_TLS:IPv6) => NOT FOUND (0)
map_lookup(access, Try_TLS:, %0=Try_TLS:) => NOT FOUND (0)
>>> STARTTLS
220 2.0.0 Ready to start TLS
map_lookup(macro, {TLS_Name}, %0={TLS_Name}, %1=smtp.gmail.com) =>  (0)
map_lookup(access, TLS_Srv:smtp.gmail.com, %0=TLS_Srv:smtp.gmail.com) => NOT FOUND (0)
map_lookup(access, TLS_Srv:gmail.com, %0=TLS_Srv:gmail.com) => NOT FOUND (0)
map_lookup(access, TLS_Srv:com, %0=TLS_Srv:com) => NOT FOUND (0)
map_lookup(access, TLS_Srv:IPv6:2607:f8b0:400e:c04::6d, %0=TLS_Srv:IPv6:2607:f8b0:400e:c04::6d) => NOT FOUND (0)
map_lookup(access, TLS_Srv:IPv6:2607:f8b0:400e:c04, %0=TLS_Srv:IPv6:2607:f8b0:400e:c04) => NOT FOUND (0)
map_lookup(access, TLS_Srv:IPv6:2607:f8b0:400e, %0=TLS_Srv:IPv6:2607:f8b0:400e) => NOT FOUND (0)
map_lookup(access, TLS_Srv:IPv6:2607:f8b0, %0=TLS_Srv:IPv6:2607:f8b0) => NOT FOUND (0)
map_lookup(access, TLS_Srv:IPv6:2607, %0=TLS_Srv:IPv6:2607) => NOT FOUND (0)
map_lookup(access, TLS_Srv:IPv6, %0=TLS_Srv:IPv6) => NOT FOUND (0)
map_lookup(access, TLS_Srv:, %0=TLS_Srv:) => NOT FOUND (0)
>>> EHLO host.HOST.us
250-smtp.gmail.com at your service, [2604:880:a:6::49]
250-SIZE 35882577
250-8BITMIME
250-AUTH LOGIN PLAIN XOAUTH2 PLAIN-CLIENTTOKEN OAUTHBEARER XOAUTH
250-ENHANCEDSTATUSCODES
250-PIPELINING
250-CHUNKING
250 SMTPUTF8
map_lookup(authinfo, AuthInfo:smtp.gmail.com, %0=AuthInfo:smtp.gmail.com) => "U:root" "I:[email protected]" "P:ThePwd" "M:LOGIN PLAIN" (0)
>>> AUTH LOGIN
334 VXNlcm5hbWU6
>>> amNoYW1iZXJzLmRldkBnbWFpbC5jb20=
334 UGFzc3dvcmQ6
>>> R2F0b3JhZGUxMw==
534-5.7.14 <https://accounts.google.com/signin/continue?sarp=1&scc=1&plt=AKgnsbuS
534-5.7.14 Kjh2f9Ji2tN_QIHz37GgrtjUaZplTN6wTQCrTqS81MBGxZ_06YW_UStfTEeNrr22ojuR1m
534-5.7.14 hL5QeQZthDLzX_YFsm_CCKakd5IgiVSJR_q9P3oHWVG3vku1bZfyfjL-1H9W2asQNeSErX
534-5.7.14 TKklx2lrQouxJRfUDwjDKgEoRuNT2Sepk9ivzWTyAz8ts_Y6X7ZrZmKaTChYop6nA7UI8O
534-5.7.14 egJYhLam_mut3Dy7fdNcadDlFs6hM> Please log in via your web browser and
534-5.7.14 then try again.
534-5.7.14  Learn more at
534 5.7.14  https://support.google.com/mail/answer/78754 c142sm62872634pfb.23 - gsmtp
>>> AUTH PLAIN cm9vdABqY2hhbWJlcnMuZGV2QGdtYWlsLmNvbQBHYXRvcmFkZTEz
534-5.7.14 <https://accounts.google.com/signin/continue?sarp=1&scc=1&plt=AKgnsbtA
534-5.7.14 ZCJ1UdQ2ZBQLxWkMA8M5RLayX61Hbjuoqa-OwEBAynkDlLtuBK3e-UMiOCVnmhtoTLq0_O
534-5.7.14 KayzsmxccKQ8ak2jO5qzEdL6DuZh5KpkbUpIusonC-FpfGjq162R0gzQi1jKB-SmAkh3lG
534-5.7.14 ezDlPu5uxJXUQY3gGqmLD4DWBuTAscp5NheklEtCzg1dqbkkjBnXZlWdEyMLJrS20RKSU8
534-5.7.14 hcAKMtbvybC4BBchJlj7FH0Wpw4HA> Please log in via your web browser and
534-5.7.14 then try again.
534-5.7.14  Learn more at
534 5.7.14  https://support.google.com/mail/answer/78754 c142sm62872634pfb.23 - gsmtp
>>> MAIL From:<[email protected]> SIZE=77
530-5.5.1 Authentication Required. Learn more at
530 5.5.1  https://support.google.com/mail/?p=WantAuthError c142sm62872634pfb.23 - gsmtp
map_lookup(host, gmail.com, %0=gmail.com) => gmail.com. (0)
map_lookup(host, gmail.com, %0=gmail.com) => gmail.com. (0)
map_lookup(dequote, MAILER-DAEMON, %0=MAILER-DAEMON) => NOT FOUND (0)
map_lookup(host, gmail.com, %0=gmail.com) => gmail.com. (0)
map_lookup(host, hotmail.com, %0=hotmail.com) => hotmail.com. (0)
[email protected]... Using cached ESMTP connection to smtp.gmail.com via relay...
>>> RSET
250 2.1.5 Flushed c142sm62872634pfb.23 - gsmtp
>>> MAIL From:<>
530-5.5.1 Authentication Required. Learn more at
530 5.5.1  https://support.google.com/mail/?p=WantAuthError c142sm62872634pfb.23 - gsmtp
map_lookup(dequote, MAILER-DAEMON, %0=MAILER-DAEMON) => NOT FOUND (0)
map_lookup(dequote, postmaster, %0=postmaster) => NOT FOUND (0)
map_lookup(dequote, MAILER-DAEMON, %0=MAILER-DAEMON) => NOT FOUND (0)
map_lookup(host, gmail.com, %0=gmail.com) => gmail.com. (0)
map_lookup(dequote, MAILER-DAEMON, %0=MAILER-DAEMON) => NOT FOUND (0)
map_lookup(host, gmail.com, %0=gmail.com) => gmail.com. (0)
MAILER-DAEMON... Saved message in /var/lib/sendmail/dead.letter
Closing connection to smtp.gmail.com
>>> QUIT
221 2.0.0 closing connection c142sm62872634pfb.23 - gsmtp

发送邮件- 仅显示我所改变的内容

MAILER_DEFINITIONS
dnl#
define(`SMART_HOST',`smtp.gmail.com')dnl
define(`RELAY_MAILER_ARGS', `TCP $h 587')dnl
define(`ESMTP_MAILER_ARGS', `TCP $h 587')dnl
define(`confAUTH_MECHANISMS', `EXTERNAL DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl
TRUST_AUTH_MECH(`EXTERNAL DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl
dnl#
FEATURE(`authinfo',`hash /etc/mail/auth/auth-info.db')dnl
dnl#
define(`CERT_DIR', `MAIL_SETTINGS_DIR`'certs')dnl
define(`confCACERT_PATH', `CERT_DIR')dnl
define(`confCACERT', `CERT_DIR/ca-cert.crt')dnl
define(`confSERVER_KEY', `CERT_DIR/sendmail.pem')dnl
define(`confSERVER_CERT', `CERT_DIR/sendmail.pem')dnl
define(`confCLIENT_CERT', `CERT_DIR/sendmail.pem')dnl
define(`confCLIENT_KEY', `CERT_DIR/sendmail.pem')dnl
dnl #
define(`confAUTH_OPTIONS', `A p y')dnl
MAILER(`local')dnl
MAILER(`smtp')dnl

安装脚本

#!/bin/bash

cd /etc/mail

echo
echo

if [ ! -d "/etc/mail/auth" ]; then
  /bin/mkdir /etc/mail/auth
fi

rm -rf /var/spool/mqueue/*
rm -rf /var/spool/mqueue-client/*
rm -rf /etc/mail/certs


if [ ! -d "/etc/mail/certs" ]; then
    echo "CERT"
    echo

    /bin/mkdir /etc/mail/certs
    cd /etc/mail/certs

    /usr/bin/openssl req \
        -x509 -nodes -days 365 -sha384 \
        -subj '/C=US/ST=California/L=Westminster/CN=host.DOMAIN.us' \
        -newkey rsa:2048 -keyout ca-cert.pem -out ca-cert.crt

    /usr/bin/openssl req \
        -x509 -nodes -days 365 -sha384 \
        -subj '/C=US/ST=California/L=Westminster/CN=host.DOMAIN.us' \
        -newkey rsa:2048 -keyout sendmail.pem -out sendmail.pem

    /bin/cat /srv/scripts/ca-google.txt >> ./ca-cert.crt

    /bin/chmod 0600 ./*

    cd /etc/mail

    echo
fi



echo "AuthInfo:smtp.gmail.com  \"U:root\" \"I:[email protected]\" \"P:ThePwd\" " > ./auth/auth-info
echo "AuthInfo: \"U:root\" \"I:[email protected]\" \"P:ThePwd\" " >> ./auth/auth-info
/usr/sbin/makemap hash ./auth/auth-info.db < ./auth/auth-info
/bin/chmod 0600 ./auth/*

/bin/cp /srv/scripts/sendmail.mc /etc/mail/sendmail.mc
/bin/cp /srv/scripts/sendmail.mc /usr/share/sendmail/cf/debian/sendmail.mc
/usr/bin/m4 sendmail.mc > sendmail.cf
#/usr/bin/make -C /etc/mail
/bin/sh /etc/init.d/sendmail restart

echo
echo

CA-Google.txt

日志输出

Nov 24 19:44:45 host sendmail[14916]: uAP0ijkb014916: [email protected], size=77, class=0, nrcpts=1, msgid=<[email protected]>, relay=root@localhost
Nov 24 19:44:45 host sendmail[14916]: STARTTLS=client, relay=smtp.gmail.com, version=TLSv1/SSLv3, verify=FAIL, cipher=ECDHE-RSA-AES128-GCM-SHA256, bits=128/128
Nov 24 19:44:46 host sendmail[14916]: uAP0ijkb014916: [email protected], [email protected] (0/0), delay=00:00:01, xdelay=00:00:01, mailer=relay, pri=30077, relay=smtp.gmail.com [IPv6:2607:f8b0:400e:c04::6d], dsn=5.0.0, stat=Service unavailable
Nov 24 19:44:46 host sendmail[14916]: uAP0ijkb014916: uAP0ijkc014916: DSN: Service unavailable
Nov 24 19:44:46 host sendmail[14916]: uAP0ijkc014916: [email protected], delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30000, relay=smtp.gmail.com, dsn=5.0.0, stat=Service unavailable
Nov 24 19:44:46 host sendmail[14916]: uAP0ijkc014916: to=MAILER-DAEMON, delay=00:00:00, mailer=local, pri=30000, dsn=5.1.1, stat=User unknown
Nov 24 19:44:46 host sendmail[14916]: uAP0ijkc014916: to=postmaster, delay=00:00:00, mailer=local, pri=30000, dsn=5.1.1, stat=User unknown
Nov 24 19:44:46 host sendmail[14916]: uAP0ijkc014916: uAP0ijkd014916: return to sender: User unknown
Nov 24 19:44:46 host sendmail[14916]: uAP0ijkd014916: to=MAILER-DAEMON, delay=00:00:00, mailer=local, pri=0, dsn=5.1.1, stat=User unknown
Nov 24 19:44:46 host sendmail[14916]: uAP0ijkc014916: Saved message in /var/lib/sendmail/dead.letter
Nov 24 19:45:01 host sendmail[14940]: uAP0j1VI014940: from=root, size=261, class=0, nrcpts=1, msgid=<[email protected]>, relay=root@localhost
Nov 24 19:45:01 host sendmail[14946]: uAP0j12W014946: from=root, size=264, class=0, nrcpts=1, msgid=<[email protected]>, relay=root@localhost

致谢：

https://www.madboa.com/geek/openssl/#key-removepass

https://linuxconfig.org/configuring-gmail-as-sendmail-email-relay

编辑：

我将脚本更新为正确的脚本。

在 Andrzej 添加有关检查 ca 证书的建议后，我找到了 gmail ca 证书并将其添加进去。

接下来安杰伊 (Andrzej) 建议删除" M: LOGIN PLAIN "，然后就这样了。echo "AuthInfo:smtp.gmail.com \"U:root\" \"I:[email protected]\" \"P:ThePwd\" " > ./auth/auth-info

再次感谢，这真是令人沮丧。

答案1

您的问题似乎是由谷歌“改进”的安全性引起的。

1) 确保您已在 Google 帐户设置中允许“安全性较低的应用程序”。2
) 通过网络浏览器登录您的 Google 帐户并检查 Google 的“安全警告”。Google“安全检查”有时会产生“误报”。

验证=失败

Debian/Ubuntu 检查：您是否安装了 ca-certificates 包？
https://launchpad.net/ubuntu/+source/ca-certificates

答案1

验证=失败

相关内容