From: Drew Tomlinson (drewmykitchentable.net)
Date: Mon Jul 21 2003 - 11:50:17 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

----- Original Message -----
From: "Hajimu UMEMOTO" <umemahoroba.org>
To: "Drew Tomlinson" <drewmykitchentable.net>
Cc: "Chris Boyd" <cboydgizmopartners.com>;
<freebsd-securityfreebsd.org>
Sent: Friday, July 18, 2003 1:57 PM
Subject: Re: ASMTP setup on 4.8

> Hi,
>
> >>>>> On Fri, 18 Jul 2003 13:26:56 -0700
> >>>>> "Drew Tomlinson" <drewmykitchentable.net> said:
>
> > Okay, I found the problem, and I've just committed the fix. Please
> > re-cvsup and try it.
>
> drew> Thanks!!!
>
> You are welcome.
>
> > drew> It's been a few weeks since I looked at it but I recall having
> drew> to create
> > drew> a /usr/local/lib/sasl2/smtpd.conf file. What should the
correct
> > drew> contents be?
> >
> > Though I have no experience with postfix, I heared that
> > /usr/local/lib/sasl2/smtpd.conf is for postfix. Are you using
> > sendmail? If so, it should be /usr/local/lib/sasl2/Sendmail.conf.
>
> drew> Yes, I'm using Postfix.
>
> I see. Is your postfix able to access /var/state/saslauthd? It
> should be:
>
> drwxrwx--- 2 cyrus mail 512 Jul 19 04:52 saslauthd

Yes, mine is like this and Postfix is a member of the mail group.

> Old cyrus-sasl2 port made the directory with wrong permission, and
> postfix couldn't access it. This problem was corrected. I believe
> postfix user belongs to mail group, so that postfix can access the
> directory.
>
> Oops, I didn't answer your question. If you want to use saslauthd for
> plain text password, the correct contents of smtpd.conf should be:
>
> pwcheck_method: saslauthd

I have this. /var/log/maillog shows:

Jul 21 09:34:38 blacklamb postfix/smtpd[66225]: warning: SASL
authentication failure: no user in db
Jul 21 09:34:38 blacklamb postfix/smtpd[66225]: warning: SASL
authentication failure: no secret in database

I have also tried "pwcheck_method: pam" but then /var/log/maillog shows:

Jul 21 09:38:34 blacklamb postfix/smtpd[66269]: warning: SASL
authentication problem: unknown password verifier
Jul 21 09:38:34 blacklamb postfix/smtpd[66269]: warning:
unknown[165.107.42.110]: SASL LOGIN authentication failed

Chris Boyd posted he had success by adding the following to
/etc/rc.conf:

sasl_saslauthd_enable="YES"
sasl_saslauthd_flags="-a getpwent"

Is this preferred over the script in /usr/local/etc/rc.d?

Still confused.

Thanks,

Drew

P.S. Thanks for fixing the man page. Looks good now!

_______________________________________________
freebsd-securityfreebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribefreebsd.org"

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]