Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 11 Feb 2002 14:06:50 -0500
From:      Joel Dinel <dinjo@touchtunes.com>
To:        "[ 0ver ]" <joanpau.desola@es.tiscali.com>
Cc:        freebsd-questions@FreeBSD.ORG
Subject:   Re: problems with POSTFIX and SASL
Message-ID:  <20020211140650.A1670@sunder.touchtunes.com>
In-Reply-To: <019401c1b326$05c91d40$ba00a8c0@0ver>; from joanpau.desola@es.tiscali.com on Mon, Feb 11, 2002 at 07:00:42PM %2B0100
References:  <019401c1b326$05c91d40$ba00a8c0@0ver>

next in thread | previous in thread | raw e-mail | index | archive | help
Edit /etc/group, and add the 'postfix' user to the 'cyrus' group like so :

cyrus:*:60:daemon,postfix

I had the *exact* same problem 2 weeks ago. This solved it. If you look at the
default permissions for /var/pwcheck :

drwxrwx---   2 cyrus    cyrus         512 Feb  9 07:59 pwcheck/

Postfix can't access this folder, thus cannot authenticate with SASL. I
considered emailing the Curys-SASL port maintainer about this, but I'm just
too lazy :)

Hope this solves your problem.

On Mon, Feb 11, 2002 at 07:00:42PM +0100, [ 0ver ] wrote:
> From: "[ 0ver ]" <joanpau.desola@es.tiscali.com>
> To: <freebsd-questions@FreeBSD.ORG>
> Subject: problems with POSTFIX and SASL
> Date: Mon, 11 Feb 2002 19:00:42 +0100
> X-Mailer: Microsoft Outlook Express 5.00.2919.6700
> 
> 
>    Hi, I need heeeelp!
> 
> 
> 
>    I'm having problems configuring an authenticated smtp using
>    postfix+sasl.
> 
>    I'm trying it on a FreeBSD 4.5 box and that's what I've done till now:
> 
> 
> 
>    - I've installed cyrus-sasl port using DB3 option.
> 
>    - I've installed postfix with SASL and DB3 options. Then I've executed
>    make replace on /usr/ports/mail/postfix to replace sendmail.
> 
>    - I've created the file /usr/local/lib/sasl/smtpd with the following
>    line --> pwcheck: sasldb
> 
>    - I've added this in /usr/local/etc/postfix/main.cf :
> 
>            broken_sasl_auth_clients = yes
> 
>            smtpd_sasl_auth_enable = yes
> 
> 
> 
>    I've created a test user using  "saslpasswd -c -a smtpd test" and
>    that's what I get when I list users using sasldblistusers:
> 
> 
> 
>    user: test realm: test.int mech: PLAIN
>    user: test realm: test.int mech: CRAM-MD5
>    user: test realm: test.int mech: PLAIN-APOP
>    user: test realm: test.int mech: DIGEST-MD5
> 
> 
> 
>    The smtp response to an ehlo <hostname> is :
> 
>    250-PIPELINING
>    250-SIZE 10240000
>    250-ETRN
>    250-AUTH LOGIN PLAIN KERBEROS_V4 DIGEST-MD5 CRAM-MD5
>    250-AUTH=LOGIN PLAIN KERBEROS_V4 DIGEST-MD5 CRAM-MD5
>    250 8BITMIME
> 
> 
> 
> 
> 
>    The result is that smtp isn't authenticating and generates de
>    following errors in /var/log/maillog:
> 
>    warning: unknown [192.168.0.222]: SASL LOGIN authentication failed.
> 
> 
> 
>    Using debug_peer_level=1 in main.cf,  I've checked that the login and
>    pass passed in PLAIN format arrives ok but generates an SASL auth
>    error.
> 
> 
> 
>    I've done the same things on a FreeBSD 4.4 and all works ok, why not
>    in a 4.5?
> 
> 
> 
>    I expect someone could help me.
> 
> 
> 
>    Thanks!
> 
> 
> 
>    0ver
---end quoted text---

-- 
Joel Dinel
System Administrator
TouchTunes Digital Jukebox, Inc.
GnuPG key : http://darkhost.mine.nu:81/~joel/misc/mykey.asc

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020211140650.A1670>