From: Luc Brouard (mailing-listsslortar.net)
Date: Mon Feb 02 2004 - 05:46:55 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Mon, Feb 02, 2004 at 12:31:15PM +0100, Ralf Hildebrandt wrote:

Ralf,
> I'm desperate: From all the analysis I've done if found that

(don't be)

> /usr/lib/sasl2/smtpd.conf is being ignored -- no matter what I fill
> in, I'm being offered all mechs:
>
> This is a Debian/unstable system.

So I think you are running 2.0.18 now ...

>
> Feb 2 12:26:46 sbserv postfix/smtpd[29368]: connect from localhost[127.0.0.1]
> Feb 2 12:26:51 sbserv postfix/smtpd[29368]: warning: SASL authentication failure: Password verification failed
> Feb 2 12:26:51 sbserv postfix/smtpd[29368]: warning: localhost[127.0.0.1]: SASL PLAIN authentication failed
>
> The /usr/lib/sasl2/smtpd.conf:
> log_level: 3
> pwcheck_method: saslauthd
> mech_list: plain login

Seems all right (got the same)

>
> The authd:
> # ps -ef| grep sasl
> root 29132 1 0 12:26 ? 00:00:00 /usr/sbin/saslauthd -a shadow
> root 29133 29132 0 12:26 ? 00:00:00 /usr/sbin/saslauthd -a shadow
> root 29134 29132 0 12:26 ? 00:00:00 /usr/sbin/saslauthd -a shadow
> root 29135 29132 0 12:26 ? 00:00:00 /usr/sbin/saslauthd -a shadow
> root 29136 29132 0 12:26 ? 00:00:00 /usr/sbin/saslauthd -a shadow
>
> The socket:
>
> % lsof | grep saslauthd
> ...
> saslauthd 29135 root 4u REG 114,4 6 783411 /var/run/saslauthd/saslauthd.pid
> saslauthd 29135 root 5u unix 0xd1d410a0 58500200 /var/run/saslauthd/mux
> saslauthd 29135 root 6u REG 114,4 0 783410 /var/run/saslauthd/mux.accept
> saslauthd 29136 root cwd DIR 114,4 4096 783409 /var/run/saslauthd
>
> The perms:
>
> # ll /var/run/saslauthd/*
> srwxrwxrwx 1 root root 0 2004-02-02 12:26 /var/run/saslauthd/mux
> -rw------- 1 root root 0 2004-02-02 12:26 /var/run/saslauthd/mux.accept
> -rw------- 1 root root 6 2004-02-02 12:26 /var/run/saslauthd/saslauthd.pid
> # ll -d /var/run/saslauthd
> drwxr-xr-x 2 root sasl 4096 2004-02-02 12:26 /var/run/saslauthd

I did change the start script to put the socket INSIDE the chroot jail
which is by default on debian (as you know i guess)

>
> What daemon do I need to strace to find out why it's being ignored?
> This SASL stuff is such a piss-poor piece of undocumented, undebuggable junk.

I had issues, and I straced smtpd (checked the 3 daemons changed by
installing postfix-tls on debian)

It should read your conf file (smtpd tries to read
/usr/lib/sasl2/smtpd.conf and /etc/postfix/sasl/smtpd.conf)

I had the same issue as you but I don't remember exactly which step
corrected it (As I had to upgrade my testing postfix at that time from
1.1.11 to 2.0.16 from sid) to get it right (because of the user allways
having the realm attached to it). So I changed back and forth quite a
few times (and I lost my steps on my NT box (work) because of a crash !)

cheers

luc

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]