OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Aragorn Moser (aragornenpleinforme.com)
Date: Mon Oct 01 2001 - 17:32:50 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

                    It's clear that SASL could solve all of our problems. After
    stepping through and (apparently) compiling (cyrus) SASL support into
    Postfix we continue to get this error msg. in the maillog (Redhat 7.1).

                            fatal: no SASL authentication mechanisms

                    Here are more details

                    Any assistance would be appreciated.

                    Aragorn!

                    [rootmoon sbin]# ./postconf -n
                    alias_database = hash:/etc/postfix/aliases
                    alias_maps = hash:/etc/postfix/aliases
                    canonical_maps = hash:/etc/postfix/canonical
                    command_directory = /usr/sbin
                    daemon_directory = /usr/libexec/postfix
                    debug_peer_level = 2
                    inet_interfaces = all
                    mail_owner = postfix
                    masquerade_domains = $mydomain
                    mydestination = $myhostname, localhost.$mydomain $mydomain,
    domain2.org, domain3.com
                    mydomain = thedomain.com
                    myhostname = moon.thedomain.com
                    myorigin = $mydomain
                    queue_directory = /var/spool/postfix
                    smtpd_delay_reject = yes
                    smtpd_recipient_restrictions = permit_sasl_authenticated,
    reject
                    smtpd_sasl_auth_enable = yes
                    smtpd_sasl_local_domain = $myhostname
                    smtpd_sasl_security_options = noanonymous, noplaintext
                    virtual_maps = hash:/etc/postfix/virtual

                    [rootmoon sbin]# tail /var/log/maillog
                    Oct 1 03:00:31 moon postfix/master[1589]: warning:
    /usr/libexec/postfix/smtpd:
                    bad command startup -- throttling
                    Oct 1 03:01:04 moon postfix-script: refreshing the Postfix
    mail system
                    Oct 1 03:01:04 moon postfix/master[1589]: reload
    configuration
                    Oct 1 03:01:31 moon postfix/smtpd[1816]: connect from X
                    Oct 1 03:01:35 moon postfix/smtpd[1816]: disconnect from X
                    Oct 1 03:01:48 moon postfix-script: refreshing the Postfix
    mail system
                    Oct 1 03:01:48 moon postfix/master[1589]: reload
    configuration
                    Oct 1 03:01:52 moon postfix/smtpd[1828]: fatal: no SASL
    authentication mechanis
                    ms
                    Oct 1 03:01:53 moon postfix/master[1589]: warning: process
    /usr/libexec/postfix
                    /smtpd pid 1828 exit status 1
                    Oct 1 03:01:53 moon postfix/master[1589]: warning:
    /usr/libexec/postfix/smtpd:
                    bad command startup -- throttling

                    [rootmoon sbin]# /usr/local/sbin/sasldblistusers
                    user: user realm: postconf -h myhostname mech: CRAM-MD5
                    user: user realm: postconf -h myhostname mech: PLAIN
                    user: user realm: postconf -h myhostname mech: DIGEST-MD5

                    [rootmoon sbin]# ls -al /etc/sasldb
                    -rw-rw---- 1 root postfix 12288 Oct 1 02:14
    /etc/sasldb

                    [rootmoon sbin]# ls -al /usr/lib/sasl
                    lrwxrwxrwx 1 root root 20 Oct 1 01:17
    /usr/lib/sasl -> /usr/local/lib/sasl/

                    [rootmoon sbin]# cat /usr/local/lib/sasl/smtpd.cf
                    pwcheck_method: sasldb

                    [rootmoon sbin]# !978
                    /usr/sbin/saslpasswd -c -u thedomain theuser
                    Password:
                    Again (for verification):
                    saslpasswd: generic failure
                    [rootmoon sbin]# /usr/sbin/saslpasswd -c -u thedomain
    theuser
                    Password:
                    Again (for verification):
                    [rootmoon sbin]# /usr/sbin/sasldblistusers
                    can't open /etc/sasldb

                    after some amount of waiting:
                    [rootmoon sbin]# /usr/sbin/sasldblistusers
                    user: theuser realm: thedomain mech: CRAM-MD5
                    user: theuser realm: thedomain mech: PLAIN
                    user: theuser realm: thedomain mech: DIGEST-MD5

                    compiled SASL
                            ./configure --enable-login

                    Makefiles for Postfix
                            make makefiles CCARGS="-DUSE_SASL_AUTH
    -I/usr/local/include" \
                            AUXLIBS="-L/usr/local/lib -lsasl"

                    # service type private unpriv chroot wakeup maxproc
    command + args
                    # (yes) (yes) (yes) (never) (50)
                    #
    ==========================================================================
                    smtp inet n - n - -
    smtpd
                    #smtp inet n - y - -
    smtpd -o smtpd_sasl_auth
                    _enable=yes
                    pickup fifo n n n 60 1
    pickup
                    cleanup unix - - n - 0
    cleanup
                    qmgr fifo n - n 300 1 qmgr
                    #qmgr fifo n - n 300 1
    nqmgr
                    rewrite unix - - n - -
    trivial-rewrite
                    bounce unix - - n - 0
    bounce
                    defer unix - - n - 0
    bounce
                    flush unix - - n 1000? 0
    flush
                    smtp unix - - n - - smtp
                    showq unix n - n - -
    showq
                    error unix - - n - -
    error
                    local unix - n n - -
    local
                    virtual unix - n n - -
    virtual
                    lmtp unix - - n - - lmtp
                    cyrus unix - n n - - pipe
                        flags=R user=cyrus argv=/cyrus/bin/deliver -e -m
    ${extension} ${user}
                    uucp unix - n n - - pipe
                        flags=F user=uucp argv=uux -r -n -z -a$sender -
    $nexthop!rmail ($recipient)
                    ifmail unix - n n - - pipe
                        flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop
    ($recipient)
                    bsmtp unix - n n - - pipe
                        flags=F. user=foo argv=/usr/local/sbin/bsmtp -f $sender
    $nexthop $recipient


    -
    To unsubscribe, send mail to majordomopostfix.org with content
    (not subject): unsubscribe postfix-users