Do you need to make any changes in /usr/lib/sasl2/smtpd.conf?
Prentice
Shelley Waltz wrote:
I am running cyrus-sasl-2.1.17-1(Simon's rpms) with cyrus-imapd-2.2.3(Simon's rpms) and have authentication using saslauthd -ldap with mechanism plain with STARTTLS working fine.
I am now tring to do the same with Postfix-2.0.18 such that it will relay if authenticated using SMTP AUTH. Even though saslauthd is started using "saslauthd -ldap", it appears as though postfix tries to get the password from sasldb ...
Mar 4 10:05:21 chipmunk postfix/postfix-script: starting the Postfix mail system
Mar 4 10:05:21 chipmunk postfix/master[12079]: daemon started -- version 2.0.18
Mar 4 10:05:42 chipmunk imaps[11950]: accepted connection
Mar 4 10:05:42 chipmunk imaps[11950]: TLS server engine: cannot load CA data
Mar 4 10:05:48 chipmunk imaps[11950]: mystore: starting txn 2147483665
Mar 4 10:05:48 chipmunk imaps[11950]: mystore: committing txn 2147483665
Mar 4 10:05:48 chipmunk imaps[11950]: starttls: SSLv3 with cipher RC4-MD5 (128/128 bits new) no authentication
Mar 4 10:05:54 chipmunk imaps[11950]: login: raven.cabm.rutgers.edu [192.76.178.8] shelley plain+TLS User logged in
Mar 4 10:05:54 chipmunk imaps[11950]: seen_db: user shelley opened /usr/cyrus/imap/user/s/shelley.seen
Mar 4 10:05:54 chipmunk imaps[11950]: open: user shelley opened INBOX
Mar 4 10:05:56 chipmunk master[8912]: process 11801 exited, status 0
Mar 4 10:05:56 chipmunk master[12085]: about to exec /usr/lib/cyrus-imapd/imapd
Mar 4 10:05:56 chipmunk imaps[12085]: executed
Mar 4 10:06:29 chipmunk postfix/smtpd[12086]: connect from raven.cabm.rutgers.edu[192.76.178.8]
Mar 4 10:06:29 chipmunk postfix/smtpd[12086]: warning: SASL authentication problem: unable to open Berkeley db /etc/sasldb2: No such file or directory
Mar 4 10:06:29 chipmunk postfix/smtpd[12086]: warning: SASL authentication problem: unable to open Berkeley db /etc/sasldb2: No such file or directory
Mar 4 10:06:29 chipmunk postfix/smtpd[12086]: warning: SASL authentication failure: Password verification failed
Mar 4 10:06:29 chipmunk postfix/smtpd[12086]: warning: raven.cabm.rutgers.edu[192.76.178.8]: SASL PLAIN authentication failed
Mar 4 10:06:53 chipmunk postfix/smtpd[12086]: warning: SASL authentication problem: unable to open Berkeley db /etc/sasldb2: No such file or directory
Mar 4 10:06:53 chipmunk last message repeated 3 times
Mar 4 10:06:53 chipmunk postfix/smtpd[12086]: warning: SASL authentication failure: Password verification failed
Mar 4 10:06:53 chipmunk postfix/smtpd[12086]: warning: raven.cabm.rutgers.edu[192.76.178.8]: SASL PLAIN authentication failed
If I then create a /usr/lib/sasl2/smtpd.conf file with the following: pwcheck_method : saslauthd
the result is the following ...
Mar 4 10:11:17 chipmunk postfix/master[12149]: daemon started -- version 2.0.18
Mar 4 10:11:48 chipmunk imaps[12085]: accepted connection
Mar 4 10:11:48 chipmunk imaps[12085]: TLS server engine: cannot load CA data
Mar 4 10:11:53 chipmunk imaps[12085]: mystore: starting txn 2147483667
Mar 4 10:11:53 chipmunk imaps[12085]: mystore: committing txn 2147483667
Mar 4 10:11:53 chipmunk imaps[12085]: starttls: SSLv3 with cipher RC4-MD5 (128/128 bits new) no authentication
Mar 4 10:11:59 chipmunk imaps[12085]: login: raven.cabm.rutgers.edu [192.76.178.8] shelley plain+TLS User logged in
Mar 4 10:11:59 chipmunk imaps[12085]: seen_db: user shelley opened /usr/cyrus/imap/user/s/shelley.seen
Mar 4 10:11:59 chipmunk imaps[12085]: open: user shelley opened INBOX
Mar 4 10:12:18 chipmunk postfix/smtpd[12155]: fatal: SASL per-process initialization failed
Mar 4 10:12:19 chipmunk postfix/master[12149]: warning: process /usr/libexec/postfix/smtpd pid 12155 exit status 1
Mar 4 10:12:19 chipmunk postfix/master[12149]: warning: /usr/libexec/postfix/smtpd: bad command startup -- throttling
Mar 4 10:12:41 chipmunk master[8912]: process 11950 exited, status 0
What is necessary in the configuration to get this to work. Below are my config files.
[EMAIL PROTECTED] sasl2]# more /etc/saslauthd.conf ldap_servers: ldap://localhost/ ldap_search_base: dc=cabm.rutgers,dc=edu ldap_bind_dn: cn=chipmunk,dc=cabm.rutgers,dc=edu ldap_bind_pw: xxxxxx ldap_version: 3 #ldap_timeout: 5 #ldap_timelimit: 5 ldap_restart: yes ldap_scope: sub ldap_search_base: dc=cabm.rutgers,dc=edu ldap_auth_method: bind #ldap_filter: (|(uid=%u)(mail=%u)(alias=%u)) ldap_filter: (uid=%u) ldap_debug: 9 ldap_verbose: 1 ldap_ssl: no
postfix/main.cf # sasl auth config broken_sasl_auth_clients = yes smtpd_sasl_auth_enable = yes smtpd_sasl_security_options =
Shelley Waltz
--- Home Page: http://asg.web.cmu.edu/cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
-- Prentice Bisbal Computer System Administrator Protein Data Bank Rutgers University --- Home Page: http://asg.web.cmu.edu/cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
