OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Postfix client SASL reports "No worthy mechs found"

From: Patrick Ben Koetter (pstate-of-mind.de)
Date: Wed Jun 01 2005 - 18:20:31 CDT


Can you send output from "saslfinger -c"? The URL to saslfinger is in my
signature.

prick

* infoshortestpath.org <infoshortestpath.org>:
> I'm having what appears to be a rather common problem with the Postfix
> client and SASL authentication to the relay host. I am using Postfix
> v2.2.3 with libsasl v2.0.20 on Slackware 10.
>
> Everything compiled ok, and I can use SASL auth in the Postfix server
> so that I can send authenticated SMTP from my mail client so I'm
> guessing it's not a compilation problem. I compiled libsasl with
> support for LOGIN and PLAIN and liblogin.so and libplain.so exist as
> a result.
>
> I placed the following in my main.cf:
>
> smtp_sasl_auth_enable = yes
> smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
> smtp_sasl_security_options =
>
> and I placed:
>
> [my.upstream.relay.com] username:password
>
> in /etc/postfix/sasl_passwd. I have checked, manually, that my
> upstream relay accepts my username and password and it does.
>
> When Postfix tried to relay mail through my upstream host, however, it
> reports:
>
> "cannot SASL authenticate to server ... no mechanism available".
>
> I turned on debug for that particular host and from what I saw
> everything looked ok - it found an entry in sasl_passwd for the host,
> it reported that it was going to use the correct username and
> password, it reported that it was going to connect to the correct
> host, it reported that the host supported LOGIN and PLAIN methods but
> then reports:
>
> "warning: SASL authentication failure: No worthy mechs found"
>
> When looking into this problem a few mailing list posts reported that
> under the RPM-based Linux distributions one should install the
> liblogin-plugin and libplain-plugin packages. Of course, being on
> Slackware I don't have RPMs to play with and, as far as I was aware,
> I had correctly compiled in support for these method anyway.
>
> Does anyone have any suggestions?
>
> Thanks,
>
> --
> Sean Kelly
>

--
The Book of Postfix
<http://www.postfix-book.com>
SMTP AUTH debug utility:
<http://postfix.state-of-mind.de/patrick.koetter/saslfinger/>