[11352]: smtp_stream_setup: maxtime=300 enable_deadline=0
[11352]: < server.xxx[1.2.3.4]:587: 220 server.xxx HISP ESMTP ready
[11352]: > server.xxx[1.2.3.4]:587: EHLO myserver.local
[11352]: < server.xxx[1.2.3.4]:587: 250-Nice to meet you.
[11352]: < server.xxx[1.2.3.4]:587: 250 STARTTLS
[11352]: server features: 0x1011 size 0
[11352]: smtp_stream_setup: maxtime=300 enable_deadline=0
[11352]: > server.xxx[1.2.3.4]:587: STARTTLS
[11352]: < server.xxx[1.2.3.4]:587: 220 Ready to start TLS
[11352]: send attr request = seed
[11352]: send attr size = 32
[11352]: private/tlsmgr: wanted attribute: status
[11352]: input attribute name: status
[11352]: input attribute value: 0
[11352]: private/tlsmgr: wanted attribute: seed
[11352]: input attribute name: seed
[11352]: input attribute value: L5NaTAMuczSbMUIHmKz752zCSoTohuQoHE3loiXLKlU=
[11352]: private/tlsmgr: wanted attribute: (list terminator)
[11352]: input attribute name: (end)
[11352]: smtp_stream_setup: maxtime=300 enable_deadline=0
[11352]: > server.xxx[1.2.3.4]:587: EHLO myserver.local
[11352]: < server.xxx[1.2.3.4]:587: 250-Nice to meet you.
[11352]: < server.xxx[1.2.3.4]:587: 250 AUTH PLAIN DIGEST-MD5
[11352]: server features: 0x1021 size 0
[11352]: maps_find: smtp_sasl_passwd: server.xxx: not found
[11352]: maps_find: smtp_sasl_passwd: hash:/etc/postfix-ica-scc/sasl_password(0,lock|fold_fix): [server.xxx]:587 = user53:3Pvy1DHHtN
[11352]: smtp_sasl_passwd_lookup: host `server.xxx' user `user53' pass `3Pvy1DHHtN'
[11352]: starting new SASL client
[11352]: smtp_sasl_authenticate: server.xxx[1.2.3.4]:587: SASL mechanisms PLAIN DIGEST-MD5
[11352]: > server.xxx[1.2.3.4]:587: AUTH DIGEST-MD5
[11352]: < server.xxx[1.2.3.4]:587: 334 cmVhbG09ImRlZmF1bHQiLG5vbmNlPSI4U3dDdjl4amVwNjljRUcwS2NvQTZiaDZUNU1LOWJnNDhuMUljTDZsIixjaGFyc2V0
[11352]: xsasl_cyrus_client_next: decoded challenge: realm="default",nonce="8SwCv9xjep69cEG0KcoA6bh6T5MK9bg48n1IcL6l",charset=utf-8,algorithm=md5-sess
[11352]: SASL authentication debug: DIGEST-MD5 client step 2
[11352]: warning: SASL authentication failure: Server doesn't support "no layer"
[11352]: connect to subsystem private/defer
[11352]: send attr nrequest = 0
[11352]: send attr flags = 0
[11352]: send attr queue_id = DFC0A57F1F
[11352]: send attr original_recipient = joe@test.foo
[11352]: send attr recipient = joe@test.foo
[11352]: send attr offset = 669
[11352]: send attr dsn_orig_rcpt = rfc822;joe@test.foo
[11352]: send attr notify_flags = 0
[11352]: send attr status = 4.7.0
[11352]: send attr diag_type = x-sasl
[11352]: send attr diag_text = generic failure
[11352]: send attr mta_type =
[11352]: send attr mta_mname =
[11352]: send attr action = delayed
[11352]: send attr reason = SASL authentication failed; cannot authenticate to server server.xxx[1.2.3.4]: generic failure
[11352]: private/defer socket: wanted attribute: status
[11352]: input attribute name: status
[11352]: input attribute value: 0
[11352]: private/defer socket: wanted attribute: (list terminator)
[11352]: input attribute name: (end)
[11352]: DFC0A57F1F: to=<joe@test.foo>, relay=server.xxx[1.2.3.4]:587, delay=3.3, delays=0.06/0.01/3.2/0, dsn=4.7.0, status=deferred (SASL authentication failed; cannot authenticate to server server.xxx[1.2.3.4]: generic failure)
[11352]: flush_add: site test.foo id DFC0A57F1F
[11352]: match_hostname: test.foo ~? myserver.local
[11352]: match_hostname: test.foo ~? myserver.local.icadev.local
[11352]: match_hostname: test.foo ~? localhost.icadev.local
[11352]: match_hostname: test.foo ~? localhost
[11352]: match_list_match: test.foo: no match
[11352]: flush_add: site test.foo id DFC0A57F1F status 4
[11352]: smtp_stream_setup: maxtime=300 enable_deadline=0
[11352]: > server.xxx[1.2.3.4]:587: QUIT
[11352]: name_mask: resource
[11352]: name_mask: software
[11352]: disposing SASL state information

smtpd_tls_security_level = may
smtpd_tls_cert_file = /etc/postfix-ica-scc/server.pem
smtpd_tls_key_file  = /etc/postfix-ica-scc/server.key
smtpd_tls_ciphers   = high

# require TLS encryption on outgoing smtp connections
smtp_tls_security_level = encrypt

# Any mail that is not to be delivered locally will be relayed.
# The brackets indicate that this is a hostname, not an MX domain.
relayhost = [server.xxx]:587
smtp_sasl_auth_enable = yes
smtp_sasl_password_maps = hash:/etc/postfix-ica-scc/sasl_password
smtpd_sasl_tls_security_options =
smtp_sasl_security_options =

[server.xxx]:587    user53:3Pvy1DHHtN