OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
(SMTP AUTH) I'm going insaine...

From: Mike (mikelinux.dustsmoke.com)
Date: Sun Nov 02 2003 - 23:22:30 CST


I've been going mad trying to figure out how to get smtp auth working for
my laptop when I'm away from 'mynetworks' All I can seem to get it doing
is asking me for password over and over. I should say that I've only used
rpm's packaged with redhat 9, I havn't compiled anything new. Is it at all
possible to keep it this way? Any ideas where I should start looking to
get this working?

this has been my guide thus far;
http://postfix.state-of-mind.de/patrick.koetter/smtpauth/index.html

thank you, here is what I have right now;

##### POSTFIX 1.1.12 ####################
----- main.cf ---------------------------
queue_directory = /var/spool/postfix
command_directory = /usr/sbin
myhostname = mail.mydomain.com
mydomain = mydomain.com
mydestination = $myhostname, localhost.$mydomain, $mydomain

alias_maps = hash:/etc/postfix/aliases
alias_database = hash:/etc/postfix/aliases
mail_spool_directory = /var/spool/mail
mailbox_command = /usr/bin/procmail
debug_peer_level = 2
debugger_command =
         PATH=/usr/bin:/usr/X11R6/bin
         xxgdb $daemon_directory/$process_name $process_id & sleep 5
sendmail_path = /usr/sbin/sendmail.postfix
newaliases_path = /usr/bin/newaliases.postfix
mailq_path = /usr/bin/mailq.postfix
setgid_group = postdrop
manpage_directory = /usr/share/man
sample_directory = /usr/share/doc/postfix-1.1.12/samples
readme_directory = /usr/share/doc/postfix-1.1.12/README_FILES
virtual_maps = hash:/etc/postfix/virtual
masquerade_domains = $mydomain

smtpd_recipient_restrictions =
   permit_sasl_authenticated,
   permit_mynetworks,
   check_relay_domains

smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
smtpd_sasl_local_domain = $myhostname
broken_sasl_auth_clients = yes

smtpd_use_tls = yes
smtpd_tls_auth_only = yes
smtpd_tls_key_file = /etc/postfix/newreq.pem
smtpd_tls_cert_file = /etc/postfix/newcert.pem
smtpd_tls_CAfile = /etc/postfix/cacert.pem
smtpd_tls_loglevel = 3
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
tls_random_source = dev:/dev/urandom

---- telnet response -------------------------
(with smtpd_tls_auth_only = yes commented out)

telnet mail.mydomain.com 25

220 mail.mydomain.com ESMTP Postfix
EHLO mail.mydomain.com
250-mail.mydomain.com
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-STARTTLS
250-AUTH GSSAPI PLAIN LOGIN DIGEST-MD5 CRAM-MD5
250-AUTH=GSSAPI PLAIN LOGIN DIGEST-MD5 CRAM-MD5
250-XVERP
250 8BITMIME
STARTTLS
220 Ready to start TLS

##### CYRUS SASL INSTALLED ####################
saslauthd -v
saslauthd 2.1.10

###### CYRUS SASL CONFIG #############
------ sasl/smtpd.conf -------------------
pwcheck_method: sasldb

------ sasldblistusers -------------------
user: smtptest realm: mail.mydomain.com mech: PLAIN
user: smtptest realm: mail.mydomain.com mech: CRAM-MD5
user: smtptest realm: mail.mydomain.com mech: DIGEST-MD5

---- ls -all /etc/sasldb -----------------------
-rw------- 1 postfix root 12658 Nov 2 21:28 sasldb

###### CYRUS SASL2 CONFIG ############
------ sasl2/smtpd.conf ------------------
pwcheck_method: auxprop

------ sasldblistusers -------------------
smtptestmail.mydomain.com: userPassword

------ ls -all /etc/sasldb2 -------------------
-rw-r----- 1 postfix root 12288 Nov 2 21:27 sasldb2