OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Jan-Hendrik Heuing (jhnetfielders.de)
Date: Tue Jul 02 2002 - 12:47:21 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    He !

    I still get these berkley-messages, and I have no idea why. Suggestions ?

    Jul 1 23:40:08 mail2 postfix/smtpd[1116]: warning: SASL authentication problem: unable to open Berkeley db /etc/sasldb2: No such file or directory
    Jul 1 23:40:08 mail2 postfix/smtpd[1116]: warning: SASL authentication problem: unable to open Berkeley db /etc/sasldb2: No such file or directory
    Jul 1 23:40:08 mail2 postfix/smtpd[1116]: warning: SASL authentication failure: Password verification failed
    Jul 1 23:40:08 mail2 postfix/smtpd[1116]: warning: mail1.domain.com[10.0.114.136]: SASL PLAIN authentication failed
    Jul 1 23:40:08 mail2 postfix/smtpd[1116]: > mail1.domain.com[10.0.114.136]: 535 Error: authentication failed

    This is realy strange. I would just be sooo happy if I get it to run at some point :-)

    any more ideas ? I know I am annoying... But I worked thought anything (as I think so, maybe I missed something).

    jhh
    -----Ursprüngliche Nachricht-----
    Von: Simon Loader [mailto:simonsurf.org.uk]
    Gesendet: Montag, 1. Juli 2002 22:52
    An: Jan-Hendrik Heuing
    Cc: cyrus-sasllists.andrew.cmu.edu
    Betreff: Re: AW: unkown password verifier [no name]

    > A short example of a working conf-file with mysql and sasl2 would be enough, the docs didn't help, and experimenting with the values didn't help either. Tips ? Example ? Docs ?

    OK here a copy and paste of the doc and Ill add an example at the
    end. I must change my website when I get a spare 5 minutes.

    Mysql auxprop options

      mysql_user: (username to login as)
      mysql_passwd: (password to use)
      mysql_hostnames: (comma separated host list)
      mysql_database: (database to connect to)
      mysql_statement: (select statement to use)
      mysql_verbose: (if it exists will print select statement to syslog)

       The select statement used in the option mysql_statement is parsed
     for 3 place holders %u %r and %p they are replaced with username
     realm and property required respectively.

      e.g

        mysql_statement: select %p from user_table where username = %u and
    realm = %r

      would produce a statement like this :-

         select userPassword from user_table where username = simon and
    realm = madoka.surf.org.uk

       WARNING: DO NOT PUT QUOTES ROUND THE STATEMENT
                 BUT DO PUT ' AROUND THE %u etc.

    Presuming username is simon, the sasl application is trying to
     authenticate a realm is not used therefore is the name of the server.

       %u is the username the user logged in as
       %p is the property requested this could technically be anything
         but sasl authentication will try userPassword and
         cmusaslsecretMECHNAME (where MECHNAME is the name of a mechanism).

       %r is the realm which could be the kerbros realm, the FQDN of the
         computer the sasl app is on or what ever is after the on a
    username.
            (read the realm documentation)

    All substitutions do not have to be used this is the test
       select that I used "select password from auth where username = '%u'"

    and a working example :-

    sasl_pwcheck_method: auxprop
    sasl_mysql_user: if I had hammer
    sasl_mysql_passwd: Id hammer in the mouring
    sasl_mysql_hostnames: mysqldddd.surf.org.uk
    sasl_mysql_database: authentic
    sasl_mysql_statement: select password from auth where username = '%u%r'
    #sasl_mysql_verbose: yes <---- good 4 testing

    -- 
    Simon Loader
    

    - To unsubscribe, send mail to majordomopostfix.org with content (not subject): unsubscribe postfix-users