Re: smtp authentication

----- Original Message -----
From: "Patrick Ben Koetter" <p@state-of-mind.de>
To: <postfix-users@postfix.org>
Sent: Wednesday, November 10, 2004 2:41 PM
Subject: Re: smtp authentication


> * Ralf Hildebrandt <Ralf.Hildebrandt@charite.de> [041110 20:36]:
> > * Daniel Kollmer <decoy@tni.org>:
> >
> > > > /etc/postfix/main.cf:
> > > > smtpd_recipient_restrictions =
> > > > permit_mynetworks permit_sasl_authenticated ...
> > >
> > > IMHO you have to put this under smtp_client_restrictions and/or
> > > smtp_sender_restrictions
> >
> > Not at all.
> >
> > > > /usr/local/lib/sasl2/smtpd.conf:
> > > > pwcheck_method: pwcheck
> >
> > SASL2? Has no pwcheck
>
> It used to have a pwcheck daemon that was deprecated when
Cyrus-SASL.1.x
> became Cyrus-SASL.2.x. But let's don't speculate. Either we have
debug
> data or we spend the next days guessing...
>
> p@rick

Thanks to all those who responded. I installed saslfinger and was able
to correct several problems myself, but it is still not working. The
current output from saslfinger:

************************************************** ************
version: 0.9.8
mode: server-side SMTP AUTH

-- basics --
Postfix: 1.1.11
System: Xandros Desktop 2.5 Business \s on \l

-- smtpd is linked to --
libsasl2.so.2 => /usr/lib/libsasl2.so.2 (0x40147000)

-- active SMTP AUTH and TLS parameters for smtpd --
smtpd_sasl_auth_enable = yes


-- listing of /usr/lib/sasl2 --
total 615
drwxr-xr-x 2 root root 1280 2004-11-05 17:36 .
drwxr-xr-x 87 root root 37704 2004-11-10 18:38 ..
-rw-r--r-- 1 root root 752 2003-03-16 16:38
libanonymous.la
-rw-r--r-- 1 root root 10864 2003-03-16 16:38
libanonymous.so
-rw-r--r-- 1 root root 10864 2003-03-16 16:38
libanonymous.so.2
-rw-r--r-- 1 root root 10864 2003-03-16 16:38
libanonymous.so.2.0.12
-rw-r--r-- 1 root root 738 2003-03-16 16:38
libcrammd5.la
-rw-r--r-- 1 root root 13832 2003-03-16 16:38
libcrammd5.so
-rw-r--r-- 1 root root 13832 2003-03-16 16:38
libcrammd5.so.2
-rw-r--r-- 1 root root 13832 2003-03-16 16:38
libcrammd5.so.2.0.12
-rw-r--r-- 1 root root 761 2003-03-16 16:38
libdigestmd5.la
-rw-r--r-- 1 root root 38904 2003-03-16 16:38
libdigestmd5.so
-rw-r--r-- 1 root root 38904 2003-03-16 16:38
libdigestmd5.so.2
-rw-r--r-- 1 root root 38904 2003-03-16 16:38
libdigestmd5.so.2.0.12
-rw-r--r-- 1 root root 732 2003-03-16 16:38 liblogin.la
-rw-r--r-- 1 root root 11260 2003-03-16 16:38 liblogin.so
-rw-r--r-- 1 root root 11260 2003-03-16 16:38
liblogin.so.2
-rw-r--r-- 1 root root 11260 2003-03-16 16:38
liblogin.so.2.0.12
-rw-r--r-- 1 root root 784 2003-03-16 16:38 libmysql.la
-rw-r--r-- 1 root root 12552 2003-03-16 16:38 libmysql.so
-rw-r--r-- 1 root root 12552 2003-03-16 16:38
libmysql.so.2
-rw-r--r-- 1 root root 12552 2003-03-16 16:38
libmysql.so.2.0.12
-rw-r--r-- 1 root root 726 2003-03-16 16:38 libntlm.la
-rw-r--r-- 1 root root 16208 2003-03-16 16:38 libntlm.so
-rw-r--r-- 1 root root 16208 2003-03-16 16:38
libntlm.so.2
-rw-r--r-- 1 root root 16208 2003-03-16 16:38
libntlm.so.2.0.12
-rw-r--r-- 1 root root 726 2003-03-16 16:38 libotp.la
-rw-r--r-- 1 root root 39116 2003-03-16 16:38 libotp.so
-rw-r--r-- 1 root root 39116 2003-03-16 16:38 libotp.so.2
-rw-r--r-- 1 root root 39116 2003-03-16 16:38
libotp.so.2.0.12
-rw-r--r-- 1 root root 732 2003-03-16 16:38 libplain.la
-rw-r--r-- 1 root root 11232 2003-03-16 16:38 libplain.so
-rw-r--r-- 1 root root 11232 2003-03-16 16:38
libplain.so.2
-rw-r--r-- 1 root root 11232 2003-03-16 16:38
libplain.so.2.0.12
-rw-r--r-- 1 root root 740 2003-03-16 16:38
libsasldb.la
-rw-r--r-- 1 root root 13756 2003-03-16 16:38
libsasldb.so
-rw-r--r-- 1 root root 13756 2003-03-16 16:38
libsasldb.so.2
-rw-r--r-- 1 root root 13756 2003-03-16 16:38
libsasldb.so.2.0.12


-- mechanisms on localhost --
250-AUTH CRAM-MD5 DIGEST-MD5 LOGIN PLAIN NTLM



-- content of /etc/postfix/sasl/smtpd.conf --
pwcheck_method: pwcheck


-- active services in /etc/postfix/master.cf --
# service type private unpriv chroot wakeup maxproc command + args
# (yes) (yes) (yes) (never) (50)
smtp inet n - n - - smtpd -v
pickup fifo n - - 60 1 pickup
cleanup unix n - - - 0 cleanup
qmgr fifo n - - 300 1 nqmgr
rewrite unix - - - - - trivial-rewrite
bounce unix - - - - 0 bounce
defer unix - - - - 0 bounce
flush unix n - - 1000? 0 flush
smtp unix - - - - - smtp
showq unix n - - - - showq
error unix - - - - - error
local unix - n n - - local
virtual unix - n n - - virtual
lmtp unix - - n - - lmtp
cyrus unix - n n - - pipe
flags=R user=cyrus argv=/usr/sbin/cyrdeliver -e -m ${extension}
${user}
uucp unix - n n - - pipe
flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail
($recipient)
ifmail unix - n n - - pipe
flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp unix - n n - - pipe
flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -d -t$nexthop
-f$sender $recipient
scalemail-backend unix - n n - 2 pipe
flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store
${nexthop} ${user} ${extension}

-- end of saslfinger output --
************************************************** **


The error message in mail.warning is simply "verification failed: Host
not found."

I can guess at two possibilities for the error: (1) I created
smtpd.conf and added the line "pwcheck_method: pwcheck." Some people
on the list indicated that this doesn't exist for sasl2, but I don't
know what other options there are. (2) I did not comment out the line
"mailbox_transport: cyrus" from /etc/postfix/main.cf. If I do this,
will mail still be delivered to cyrus? Obviously I don't care about
the outgoing mail, but I still want to retain my imap server.

Thanks again. All assistance gratefully accepted.

=====
Sincerely,
Derek

__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com