OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: Postfix SMTP AUTH sasl authentication fails
From: Liviu Daia (Liviu.Daiaimar.ro)
Date: Fri Jun 16 2000 - 13:58:24 CDT

On 16 June 2000, Marek Habersack <grendelvip.net.pl> wrote:
> ** On Jun 15, Darren Nickerson scribbled:
> >
> > >>>>> On Thu, 15 Jun 2000, "Marek" == Marek Habersack wrote:
> >
> > +> Interesting. The strange thing is that I can get this to
> > +> work just fine on another box with the same versions of
> > +> postfix/sasl/Eudora . . . it's redhat-6.2 though, versus the
> > +> 6.1 I cannot get working (I recompiled the .src.rpm on each box
> > +> before installing, just to be sure).
> >
> > Marek> Hmm... then we have some clue. I use the latest Debian
> > Marek> (woody) which uses glibc 2.1.3 - RH 6.2 uses the same
> > Marek> AFAIK. If it is so, then we might have a suspect - glibc6.
> >
> > Here's a debug log of the successful authentication.
> [snip]
> > On both machines, sasldb is in active use for authenticating IMAP
> > sessions, and works just fine for that.
> >
> > Help? Aside from building up a new 6.2 box, there must be SOMETHING
> > I can do to troubleshoot this authentication failure?
>
> Below are two debug logs of unsuccessfull authentications using
> CRAM-MD5 (first from the Pegasus Mail, second from Eudora PRO). The
> postfix system is:
>
> - Debian Woody
> - postfix snapshot 20000531
> - glibc 2.1.3-6
> - cyrus-sasl 1.5.21 (but tested also on 1.5.17)
>
> The only authentication that always fails here is the CRAM-MD5 one...
[...]

    When you migrated the config files to the new machine, did you
create sasldb from scratch, with saslpasswd, or did you copy it from the
old machine? What's the output of sasldblistusers?

    Regards,

    Liviu Daia 

-- 
Dr. Liviu Daia               e-mail:   Liviu.Daiaimar.ro
Institute of Mathematics     web page: http://www.imar.ro/~daia
of the Romanian Academy      PGP key:  http://www.imar.ro/~daia/daia.asc