OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: postfix sasl ... noch worthy mechs

From: Martin Fahrendorf (fahrendorfhelix-gmbh.net)
Date: Wed Apr 07 2004 - 02:53:11 CDT


Am Dienstag, 6. April 2004 23:55 schrieb Glenn Burkhardt:
> > Please turn on verbose logging in the Postfix smtp-client ("smtp
> > -vv" in master.cf) and show the smtp-handshake. Beginning from the
> > Server's Banner ending with your "MAIL FROM".
> >
> > And of course check if smtp_sasl_auth_enable is yes.
> >
> > ... means; 's that a request from the ISP's server which is not
> > answered by my postfix smtp client? Or is it my own postfix server
> > that says there is no authentication from my own mail? I just
> > wonder! Since this here is a single machine only, no network,
> > except the internet connection, is there realy a need for the
> > sasldb? Could that be a possible source for my problems?
>
> I've run into this problem, too. I want to be able have postfix use
> my ISP as an outgoing mail relay. So I have these entries in
> main.cf:
>
> relayhost = outgoing.verizon.net
> smtp_sasl_auth_enable = yes
> smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
> smtp_sasl_security_options =
>
> and I've made appropriate entries in the sasl_passwd file.
> The two references I've found for this are:
>
> http://www.porcupine.org/postfix-mirror/newdoc/SASL_README.html#clien
>t_sasl
> http://postfix.state-of-mind.de/patrick.koetter/smtpauth/smtp_auth_ma
>ilservers.html
>
> But the problem seems be tied up with the SASL libraries, and after
> several hours tonight I must give up for the day.
>
> My platform:
> Mandrake 9.2 (on Intel)
> Linux version 2.4.22-26mdk
> postfix-2.0.13-3mdk
> libsasl2-2.1.15-4mdk
> libsasl2-devel-2.1.15-4mdk
> cyrus-sasl-2.1.15-4mdk
>
> For Mandrake, the plugins for SASL are hidden in the "devel' rpm. So
> I have
>
> [rootDepotRd smtp]# ls /usr/lib/sasl2/
> libanonymous.a libdigestmd5.a liblogin.a libotp.a libsasldb.a
> libcrammd5.a libgssapiv2.a libntlm.a libplain.a libsrp.a

No, no, they are called libsasl2-plug-* (like libsasl2-plug-plain,
libsasl2-plug-login and so on).

Martin

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQBAc7NqBG198cnayKQRAk2tAKCT2MUPErk+vmZfAkyu8t6Bg8P+kgCgg3bE
TWV/rNtDG3I6uI3ht6NYsD8=
=K4+j
-----END PGP SIGNATURE-----