Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 21 Sep 2009 14:48:02 +0200
From:      =?iso-8859-1?Q?Peter_Ankerst=E5l?= <peter@pean.org>
To:        freebsd-questions@freebsd.org
Subject:   Postfix and SASL.
Message-ID:  <07F315BB-E542-4135-8ECE-2EDD0C0A42E8@pean.org>

next in thread | raw e-mail | index | archive | help
I just upgraded one of my machines to FreeBSD 8-RC1.

# uname -srmi
FreeBSD 8.0-RC1 amd64 GENERIC

postfix-2.4.11,1
cyrus-sasl-2.1.23
courier-authlib-base-0.62.4
courier-authlib-mysql-0.62.4

Inside a jail Im running a mailserver (postfix). After the upgrade =20
smtp-auth with SASL2 and authdaemond doesnt work.

 =46rom postfix main.cf:

smtpd_sasl_auth_enable =3D yes
smtpd_sasl_authenticated_header =3D yes
smtpd_sasl_application_name =3D smtpd
broken_sasl_auth_clients =3D yes

smtpd_recipient_restrictions =3D
             reject_invalid_hostname,
             reject_unknown_recipient_domain,
             reject_unauth_pipelining,
             permit_mynetworks,
             permit_sasl_authenticated,
             reject_unauth_destination,
             permit
---

smtpd.conf:

pwcheck_method: authdaemond
log_level: 4
mech_list: PLAIN LOGIN
authdaemond_path: /var/run/authdaemond/socket
---

ls -ld  /var/run/authdaemond/
drwxr-xr-x  2 courier  courier  5 Sep 21 14:23 /var/run/authdaemond/

sockstat |grep authdaemon
root     authdaemon 46562 5  stream /var/run/authdaemond/socket.tmp
root     authdaemon 46562 6  stream -> /tmp/mysql.sock
root     authdaemon 46561 5  stream /var/run/authdaemond/socket.tmp
root     authdaemon 46561 6  stream -> /tmp/mysql.sock
root     authdaemon 46560 5  stream /var/run/authdaemond/socket.tmp
root     authdaemon 46560 6  stream -> /tmp/mysql.sock
root     authdaemon 46559 5  stream /var/run/authdaemond/socket.tmp
root     authdaemon 46559 6  stream -> /tmp/mysql.sock
root     authdaemon 46558 5  stream /var/run/authdaemond/socket.tmp
root     authdaemon 46558 6  stream -> /tmp/mysql.sock
root     authdaemon 46557 5  stream /var/run/authdaemond/socket.tmp


authdaemond is working properly. IMAP still uses it for auth and works =20=

fine.

and from maillog:

Sep 21 14:41:48 system authdaemond: Authenticated: sysusername=3D<null>, =
=20
sysuserid=3D125, sysgroupid=3D125, homedir=3D/usr/maildirs, =
address=3Dpeter@pean.org=20
, fullname=3DPeter Ankerst=E5l, maildir=3Dpeter@pean.org/, quota=3D51200, =
=20
options=3D<null>
Sep 21 14:41:48 system postfix/smtpd[47155]: warning: SASL =20
authentication failure: could not verify password
Sep 21 14:41:48 system postfix/smtpd[47155]: warning: SASL =20
authentication failure: Password verification failed
Sep 21 14:41:48 system postfix/smtpd[47155]: warning: hostname.tld: =20
SASL PLAIN authentication failed: generic failure
Sep 21 14:41:48 system postfix/smtpd[47155]: lost connection after =20
AUTH from hostname.tld
Sep 21 14:41:48 system postfix/smtpd[47155]: disconnect from =20
hostname.tld

Could anyone see the problem? This setup has been working on a 7.2-=20
RELEASE machine for months.

--
Peter Ankerst=E5l
peter@pean.org
http://www.pean.org/




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?07F315BB-E542-4135-8ECE-2EDD0C0A42E8>