Problem with Postfix after domain migration

[MarioP]

Hi all,

Recently I had to recreate a domain for one of our customers due to some issues with httpd and nginx, website was down and it would've taken too long to investigate and resolve. So I renamed the old domain and created the correct domain again, copied over the web data and got the websites up and running again.

Next, I moved the maildirs from Postfix under the correct domain, I changed the domain reference in the PSA database via phpmyadmin and modified the virtual.db and vmailbox.db files under /var/spool/postfix/plesk to reflect the new domain for the mail users and the correct Maildir paths. After doing this, I changed all user's passwords through Plesk's Mail tab on the correct domain and restarted postfix.

Once this was done, the users were able to log into their mailboxes from their email clients and retrieve emails. However, sending is another issue. I can see in the logs the following message:

Mar 8 10:49:59 webserver postfix/smtpd[22568]: warning: SASL authentication failure: realm changed: authentication aborted
Mar 8 10:49:59 webserver postfix/smtpd[22568]: warning: my_isp_hostname[my_isp_ipaddr]: SASL DIGEST-MD5 authentication failed: authentication failure
Mar 8 10:49:59 webserver postfix/smtpd[22568]: E05378404A8: client=my_isp_hostname[my_isp_ipaddr], sasl_method=LOGIN, sasl_username=user@domain.com

xxx.xxx.xxx.xxx host said: 550-Please turn on SMTP Authentication in your mail client, or login to the 550-IMAP/POP3 server before sending your message. mail.domain.com 550-(webserver.domain.com) [xxx.xxx.xxx.xxx]:55867 is not permitted to 550 relay through this server without authentication.

I have made sure that this particular account that I'm using for testing has SMTP authentication enabled and Outlook configures the account correctly. I think this issue is caused by whatever password store being used for postfix, doesn't match the passwords I gave the mailboxes via the Plesk panel. This could be the passwd.db file under the spool folder, however I have no idea how to edit it or modify the passwords.

So my question is, where does Plesk and postfix check for password match when an email is being sent and how can I change those values to match their IMAP passwords on the psa DB?

Thanks in advance for all the help

 

[MarioP]

Nobody has any idea about this?

I've been investigating further and I went into the passwd.db file with SQLite3 but the passwords are encrypted with AES128 so I can't tell if they match the ones in the DB. How can unencrypt them using the passwd_db_key file?