Apple Event: May 7th at 7 am PT

Newsroom Update

Beginning in May, a special Today at Apple series titled “Made for Business” will offer small business owners and entrepreneurs free opportunities to learn how Apple products and services can support their growth and success. Learn more >

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

SASL authentication failure: No worthy mechs found

If you are trying to relay your smtp to another server, and recieving the error message above, please read on.


I take no credit for this. I simply coppied and pasted. I hope apple decides to add this as a feature.


The default policy is stricter than that of the Postfix SMTP server - plaintext mechanisms are not allowed (nor is any anonymous mechanism):

/etc/postfix/main.cf: smtp_sasl_security_options = noplaintext, noanonymous

This default policy, which allows no plaintext passwords, leads to authentication failures if the remote server only offers plaintext authentication mechanisms (the SMTP server announces "

AUTH PLAIN LOGIN
"). In such cases the SMTP client will log the following error message:

SASL authentication failure: No worthy mechs found

Note

This same error message will also be logged when the

libplain.so
or
liblogin.so
modules are not installed in the
/usr/lib/sasl2
directory.

The insecure approach is to lower the security standards and permit plaintext authentication mechanisms:

/etc/postfix/main.cf: smtp_sasl_security_options = noanonymous

You can find everything and more at this URL:

http://www.postfix.org/SASL_README.html#client_sasl_policy

Mac mini, Mac OS X (10.7.1)

Posted on Sep 22, 2011 9:57 PM

Reply
2 replies

SASL authentication failure: No worthy mechs found

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.