Re: Postfix smtpd's saslauthd setting

* Jack Twilley <jmt@twilley.org> [041006 07:12]:
> That software doesn't seem to work for FreeBSD. It seems to be
> Linux-only. It also requires bash, which isn't installed on that
> particular machine, but I fixed that. Here's the output:
>
> --begin saslfinger output--
> $ bash ./saslfinger -s -c
> saslfinger - postfix Cyrus sasl configuration Tue Oct 5 20:20:10 PDT 2004
> version: 0.9.4
> mode: server-side SMTP AUTH
>
> -- basics --
> Postfix: 2.1.4
>
> -- smtpd is linked to --
> libsasl2.so.2 => /usr/local/lib/libsasl2.so.2 (0x280b0000)
>
> -- active SMTP AUTH parameters for smtpd --
> broken_sasl_auth_clients = yes
> smtpd_sasl_auth_enable = yes
> smtpd_sasl_local_domain = twilley.org
> smtpd_sasl_security_options = noanonymous
>
> Could not find any valid Cyrus SASL directories.
> Cyrus SASL is required to setup SMTP AUTH!
> --end saslfinger output--
>
> In the section of the message that you cut, I mentioned that both
> subsystems were set the same. The Cyrus imapd configuration file is
> in /usr/local/etc/imapd.conf. The pwcheck_method line in that file is
> set to saslauthd. Is there anything else I can tell you?

Where's the Cyrus-SASL.2.x library directory located?
In this directory there should be a smtpd.conf to configure Postfix's
smtpd daemon's SASL settings. You should have something like this:

pwcheck_method: auxprop
mech_list: PLAIN LOGIN CRAM-MD5 DIGEST-MD5
auxprop_plugin: sasldb


In master.cf make sure smtpd is not running chrooted (for the
beginning). Turn up logging verbosity for smtpd as well while you debug.

Use "server" and "client" from the SASL sources to test your smtpd.conf
configuration before you turn to Postfix and test SMTP AUTH.

If you aren't sure that smtpd.conf is located in the right directory,
limit the mech_list to e.g. LOGIN, reload Postfix and telnet to Postfix.
After a EHLO it should only announce what you defined in mech_list.
Otherwise if announces all the mechs SASL can find, which is the default
and indicates that smtpd.conf wasn't found...

p@rick

--
I take the freedom to ignore offlist messages. Open Source software
requires open access to information that tells all of us how to run it.
Don't deprive the community of that!

SMTP AUTH howto & debug utility (saslfinger):
<http://postfix.state-of-mind.de/patrick.koetter/>