OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: sasl auth pam

From: Agri (agridesnol.ru)
Date: Mon Apr 21 2003 - 09:53:21 CDT


> /usr/sbin/postconf -n
alias_database = hash:/etc/mail/aliases
alias_maps = hash:/etc/mail/aliases
allow_mail_to_commands = alias
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter = lmtp:localhost:10025
daemon_directory = /usr/libexec/postfix
debug_peer_level = 2
local_recipient_maps = unix:passwd.byname $alias_maps
mail_owner = mail
mail_spool_directory = /var/spool/mail
mailbox_size_limit = 0
mailq_path = /usr/bin/mailq
manpage_directory = /usr/man
mydomain = desnol.ru
myhostname = desnol.ru
mynetworks = 127.0.0.0/8, 217.150.58.11/32, 217.150.59.17/32, 80.82.171.179/32, 62.213.83.130/32, 80.82.190.249/32, 193.124.127.152/32, 212.26.225.205/32
newaliases_path = /usr/bin/newaliases
prepend_delivered_header = file, forward
queue_directory = /var/spool/postfix
readme_directory = no
sample_directory = /etc/postfix
sendmail_path = /usr/sbin/sendmail
setgid_group = postdrop
smtpd_banner = $myhostname ESMTP
smtpd_tls_cert_file = /etc/cert.pem
smtpd_tls_key_file = /etc/key.pem
smtpd_tls_received_header = yes
smtpd_use_tls = yes
tls_daemon_random_source = dev:/dev/random
unknown_local_recipient_reject_code = 550

i have two log files mail.info and mail.other
from syslog.conf

mail.=info -/usr/var/log/mail.info
mail.*;mail.!=info -/usr/var/log/mail.other

here is attemp to authenticate via smtp (also using starttls)
mail.info:

Apr 21 16:28:30 desnol postfix/smtpd[9394]: connect from rwr-desnol.nirvana.ipct.ru[217.150.59.17]
Apr 21 16:28:30 desnol postfix/smtpd[9394]: TLS connection established from rwr-desnol.nirvana.ipct.ru[217.150.59.17]: TLSv1 with cipher EDH-RSA-DES-CBC3-SHA (168/168 bits)
Apr 21 16:28:33 desnol smtpd[9394]: disconnect from rwr-desnol.nirvana.ipct.ru[217.150.59.17]

mail.other:
Apr 21 16:28:32 desnol smtpd[9394]: warning: rwr-desnol.nirvana.ipct.ru[217.150.59.17]: SASL LOGIN authentication failed

another log (all other messages):
Apr 21 16:28:30 desnol postfix/smtpd[9394]: unable to open Berkeley db /etc/sasldb: No such file or directory
Apr 21 16:28:30 desnol postfix/smtpd[9394]: unable to open Berkeley db /etc/sasldb: No such file or directory
Apr 21 16:28:30 desnol smtp(pam_unix)[9394]: authentication failure; logname= uid=8 euid=8 tty= ruser= rhost= user=agri

Agri

On Mon, 21 Apr 2003 14:19:03 +0200
"Patrick Ben Koetter" <pstate-of-mind.de> wrote:

> > anything else?
>
> Yes :) There's more conf relvant that meets the eye at first. Provide
> output of "postconf -n" and send some maillog containing error messages.
>
> prick
>
>