From: Nestor A. Diaz L. (nestortiendalinux.com)
Date: Wed Jul 07 2004 - 11:18:12 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hello mollo,

If you want i have created the packages using backports.org and
cyrus-sasl.

cyrus-sasl have the patch for crypt passwords.
and postfix is compiled with support for cyrus-sasl2, be aware that the
packages have compiled against ssl, ldap, pgsql and mysql backports, so
you have to install this backports in order to install them.

You can download the packages from:

http://asterix.tiendalinux.com/debian/hosting

This are the list of packages:

libsasl2-dev_2.1.18-3.tiendalinux.com.1_i386.deb
libsasl2-modules-gssapi-heimdal_2.1.18-3.tiendalinux.com.1_i386.deb
libsasl2-modules-kerberos-heimdal_2.1.18-3.tiendalinux.com.1_i386.deb
libsasl2-modules-sql_2.1.18-3.tiendalinux.com.1_i386.deb
libsasl2-modules_2.1.18-3.tiendalinux.com.1_i386.deb
libsasl2_2.1.18-3.tiendalinux.com.1_i386.deb
postfix-dev_2.1.1-8_all.deb
postfix-doc_2.1.1-8_all.deb
postfix-ldap_2.1.1-8_i386.deb
postfix-mysql_2.1.1-8_i386.deb
postfix-pcre_2.1.1-8_i386.deb
postfix-pgsql_2.1.1-8_i386.deb
postfix-tls_2.1.1-8_i386.deb
postfix_2.1.1-8_i386.deb
sasl2-bin_2.1.18-3.tiendalinux.com.1_i386.deb

Basically you need to add this to main.cf

smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
smtpd_sasl_local_domain =
broken_sasl_auth_clients = yes

smtpd_recipient_restrictions = ..., permit_sasl_authenticated, ...

and in sasl/smtpd.conf you put the sasl configuration, which can vary
depending on the backend used, i use pgsql so it is more complex but using
unix password you left it to something like:

pwcheck_method: saslauthd
mech_list: plain

and be sure to active sasluthd in /etc/default/saslauthd

# This needs to be uncommented before saslauthd will be run automatically
START=yes

# You must specify the authentication mechanisms you wish to use.
# This defaults to "pam" for PAM support, but may also include
# "shadow" or "sasldb", like this:
# MECHANISMS="pam shadow"

MECHANISMS="shadow"

And that's all.

I have some others packages that i have to compile myself in order to
provide a full hosting service with postgresql, cyrus and postfix and i
hope to put them in a newer website http://hosting.tiendalinux.com/ soon
to be released with a recipe on how to set up this on a Debian Woody Box,
so check out in one week, for this moment use that url.

Thanks.

--
Nestor A. Diaz Lizarazo Tel. +57.1.6005490
Ingeniero de Sistemas y Comp. Cel. 315 8190760
nestortiendalinux.com http://soporte.tiendalinux.com

On Mon, 5 Jul 2004, mollo wrote:

> Hello,
>
> Is someone using the last Debian Backport 2.1.1 of Postfix had a running
> setup for authenticate SMTP Clients ?
>
> Would you send me a piece of setup ?
>
> Because the maintainer linked the last build against sasl (not sasl2) I
> suppose that create some specifics issues.
>
> Thats a lot,
> Mathieu
>
>
>
>
>
> --
>

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]