Re: Postfix, TLS and SASL difficulties on OpenBSD

--On Monday, May 10, 2004 23:21 +0200 Andreas Winkelmann
<ml@awinkelmann.de> wrote:

> Am Montag, 10. Mai 2004 22:51 schrieb Ed Vazquez:
>
>> [snip]
>>
>> > Please show one of the *.la-files in the Plugin-Directory.
>>
>> # more /usr/local/lib/sasl2/libplain.la
>> # libplain.la - a libtool library file
>> # Generated by ltmain.sh - GNU libtool 1.3.5 (1.385.2.206
>> 2000/05/27 11:12:27)
>> #
>> # Please DO NOT delete this file!
>> # It is necessary for linking the library.
>>
>> # The name that we can dlopen(3).
>
>> dlname=''
>
> This is your Problem. There should be the Name of the
> Shared-Object-File, but it is empty. Maybe there goes
> something wrong with libtool. Please try to build it first
> with almost default-options.
>
> Maybe it is a try worth to fill here the libname in.
>
> dlname='libplain.a'
>
> And try to start Postfix/smtpd again.
>
>> # Names of this library.
>> library_names=''
>>
>> # The name of the static archive.
>> old_library='libplain.a'
>>
>> # Libraries that this one depends upon.
>> dependency_libs=' -L/usr/local/lib -L/usr/lib -lresolv
>> -lresolv'
>>
>> # Version information for libplain.
>> current=2
>> age=0
>> revision=18
>>
>> # Is this an already installed library?
>> installed=yes
>>
>> # Directory that this library needs to be installed in:
>> libdir='/usr/lib/sasl2'
>>
>> > And the Build-Commands for sasl.
>>
>> ./configure --sysconfdir=/etc/cyrus-sasl --localstatedir=/var
>> --infodir=/usr/share/info --mandir=/usr/share/man
>> --enable-dependency-tracking --enable-gssapi=/usr
>> --with-login --with-dblib=gdbm --with-saslauthd=/var/sasl2
>> --with-staticsasl CPPFLAGS="-I/usr/include/kerberosV"
>
> Is there a special reason, why you build it with
> --with-staticsasl?
>
> We had the same Problem here with an AIX-Installation.

Found the issue.

OpenBSD is _not_ a GNU-ish system. By that, certain things are
missing such as GNU-ld and GNU-libtool. Since Cyrus-SASL is
developed on a Linux/GNU system, this can cause issues if folks
a lot brighter than me don't figure out how to remove the
GNU-ism's and make the system more POSIX compatible.

I had to drop back to SASL version 2.1.13 which is patched for
OpenBSD, but it now works fully, both with and without TLS and
with and without CHROOT environment.

I even got IMAP-SSL and POP3-SSL to log in without errors,
though I still have something broken in the config (docs are
even harder to find for Courier than they are for Cyrus) since
even though the system users have $HOME/Maildir directories
with active mail, no mail can be seen from
fetchmail/mutt/pine/sylpheed/etc. on non-local machines.

If anyone can volunteer help in tweaking Courier-IMAP/POP3 now
that SASL/TLS has been solved (with _lots_ of help from Mr.
Koetter and Mr. Winklemann) I certainly won't object.

OTOH, that may be more appropriate for the Courier lists...

--
Ed Vazquez

Pleasure and joy are deceptive