OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: (solved) SASL problem (cannot connect to saslauthd server: no such file or directory)

From: Patrick Ben Koetter (pstate-of-mind.de)
Date: Fri Aug 26 2005 - 17:18:54 CDT


Read at the end...

* Alaor B. de Carvalho Neto <alaorfdc.br>:
> >>-- listing of /usr/lib/sasl2 --
> >>
> >>total 1062
> >>drwxr-xr-x 2 root root 1456 2005-08-24 19:51 .
> >>drwxr-xr-x 102 root root 45720 2005-08-22 20:48 ..
> >>-rw-r--r-- 1 root root 15644 2004-10-16 18:35 libanonymous.a
> >>-rw-r--r-- 1 root root 851 2004-10-16 18:35 libanonymous.la
> >>-rw-r--r-- 1 root root 19692 2004-10-16 18:35 libanonymous.so
> >>-rw-r--r-- 1 root root 19692 2004-10-16 18:35 libanonymous.so.2
> >>-rw-r--r-- 1 root root 19692 2004-10-16 18:35 libanonymous.so.2.0.19
> >>-rw-r--r-- 1 root root 19034 2004-10-16 18:35 libcrammd5.a
> >>-rw-r--r-- 1 root root 837 2004-10-16 18:34 libcrammd5.la
> >>-rw-r--r-- 1 root root 23080 2004-10-16 18:35 libcrammd5.so
> >>-rw-r--r-- 1 root root 23080 2004-10-16 18:35 libcrammd5.so.2
> >>-rw-r--r-- 1 root root 23080 2004-10-16 18:35 libcrammd5.so.2.0.19
> >>-rw-r--r-- 1 root root 55692 2004-10-16 18:35 libdigestmd5.a
> >>-rw-r--r-- 1 root root 860 2004-10-16 18:35 libdigestmd5.la
> >>-rw-r--r-- 1 root root 53196 2004-10-16 18:35 libdigestmd5.so
> >>-rw-r--r-- 1 root root 53196 2004-10-16 18:35 libdigestmd5.so.2
> >>-rw-r--r-- 1 root root 53196 2004-10-16 18:35 libdigestmd5.so.2.0.19
> >>-rw-r--r-- 1 root root 16054 2004-10-16 18:35 liblogin.a
> >>-rw-r--r-- 1 root root 831 2004-10-16 18:35 liblogin.la
> >>-rw-r--r-- 1 root root 20404 2004-10-16 18:35 liblogin.so
> >>-rw-r--r-- 1 root root 20404 2004-10-16 18:35 liblogin.so.2
> >>-rw-r--r-- 1 root root 20404 2004-10-16 18:35 liblogin.so.2.0.19
> >>-rw-r--r-- 1 root root 36084 2004-10-16 18:35 libntlm.a
> >>-rw-r--r-- 1 root root 825 2004-10-16 18:35 libntlm.la
> >>-rw-r--r-- 1 root root 38884 2004-10-16 18:35 libntlm.so
> >>-rw-r--r-- 1 root root 38884 2004-10-16 18:35 libntlm.so.2
> >>-rw-r--r-- 1 root root 38884 2004-10-16 18:35 libntlm.so.2.0.19
> >>-rw-r--r-- 1 root root 23134 2004-10-16 18:35 libotp.a
> >>-rw-r--r-- 1 root root 825 2004-10-16 18:35 libotp.la
> >>-rw-r--r-- 1 root root 51456 2004-10-16 18:35 libotp.so
> >>-rw-r--r-- 1 root root 51456 2004-10-16 18:35 libotp.so.2
> >>-rw-r--r-- 1 root root 51456 2004-10-16 18:35 libotp.so.2.0.19
> >>-rw-r--r-- 1 root root 16106 2004-10-16 18:35 libplain.a
> >>-rw-r--r-- 1 root root 831 2004-10-16 18:35 libplain.la
> >>-rw-r--r-- 1 root root 20400 2004-10-16 18:35 libplain.so
> >>-rw-r--r-- 1 root root 20400 2004-10-16 18:35 libplain.so.2
> >>-rw-r--r-- 1 root root 20400 2004-10-16 18:35 libplain.so.2.0.19
> >>-rw-r--r-- 1 root root 23492 2004-10-16 18:35 libsasldb.a
> >>-rw-r--r-- 1 root root 852 2004-10-16 18:34 libsasldb.la
> >>-rw-r--r-- 1 root root 26288 2004-10-16 18:35 libsasldb.so
> >>-rw-r--r-- 1 root root 26288 2004-10-16 18:35 libsasldb.so.2
> >>-rw-r--r-- 1 root root 26288 2004-10-16 18:35 libsasldb.so.2.0.19
> >>-rw-r--r-- 1 root root 50 2005-08-24 21:10 smtpd.conf
> >>-rw-r--r-- 1 root root 64 2005-08-24 19:48 smtpd.conf~
> >>
> >>-- listing of /usr/local/lib/sasl2 --
> >>total 5334
> >>drwxr-sr-x 2 root staff 800 2005-08-24 15:13 .
> >>drwxrwsr-x 5 root staff 264 2005-08-22 20:41 ..
> >>-rwxr-xr-x 1 root staff 708 2005-08-22 20:41 libanonymous.la
> >>-rwxr-xr-x 1 root staff 145179 2005-08-22 20:41 libanonymous.so
> >>-rwxr-xr-x 1 root staff 145179 2005-08-22 20:41 libanonymous.so.2
> >>-rwxr-xr-x 1 root staff 145179 2005-08-22 20:41 libanonymous.so.2.0.21
> >>-rwxr-xr-x 1 root staff 696 2005-08-22 20:41 libcrammd5.la
> >>-rwxr-xr-x 1 root staff 147479 2005-08-22 20:41 libcrammd5.so
> >>-rwxr-xr-x 1 root staff 147479 2005-08-22 20:41 libcrammd5.so.2
> >>-rwxr-xr-x 1 root staff 147479 2005-08-22 20:41 libcrammd5.so.2.0.21
> >>-rwxr-xr-x 1 root staff 726 2005-08-22 20:41 libdigestmd5.la
> >>-rwxr-xr-x 1 root staff 449208 2005-08-22 20:41 libdigestmd5.so
> >>-rwxr-xr-x 1 root staff 449208 2005-08-22 20:41 libdigestmd5.so.2
> >>-rwxr-xr-x 1 root staff 449208 2005-08-22 20:41 libdigestmd5.so.2.0.21
> >>-rwxr-xr-x 1 root staff 681 2005-08-22 20:41 libotp.la
> >>-rwxr-xr-x 1 root staff 913732 2005-08-22 20:41 libotp.so
> >>-rwxr-xr-x 1 root staff 913732 2005-08-22 20:41 libotp.so.2
> >>-rwxr-xr-x 1 root staff 913732 2005-08-22 20:41 libotp.so.2.0.21
> >>-rwxr-xr-x 1 root staff 692 2005-08-22 20:41 libplain.la
> >>-rwxr-xr-x 1 root staff 141241 2005-08-22 20:41 libplain.so
> >>-rwxr-xr-x 1 root staff 141241 2005-08-22 20:41 libplain.so.2
> >>-rwxr-xr-x 1 root staff 141241 2005-08-22 20:41 libplain.so.2.0.21
> >>-rw-r--r-- 1 root staff 70 2005-08-24 15:13 smtpd.conf
> >>-rw-r--r-- 1 root staff 69 2005-08-24 15:13 smtpd.conf~
> >>
> >>-- content of /usr/lib/sasl2/smtpd.conf --
> >>pwcheck_method: saslauthd
> >>mech_list: PLAIN LOGIN
> >
> >Are you using Postfix from a Debian package? Then move smtpd.conf to
> >/etc/postfix/sasl/smtpd.conf.
> >
> >>-- active services in /etc/postfix/master.cf --
> >># service type private unpriv chroot wakeup maxproc command + args
> >># (yes) (yes) (yes) (never) (100)
> >>smtp inet n - n - - smtpd
> >>
> >OK.
> >
> >>-- mechanisms on localhost --
> >>250-AUTH LOGIN PLAIN
> >>250-AUTH=LOGIN PLAIN
> >>
> >>-- end of saslfinger output --
> >>---------------------------------------------------------------------------------------------------------------------
> >>
> >>I don't have testsaslauthd in my system.
> >
> >It's part of a Debian package, but I don't know which.
> >
> >prick
> >
> I'm not using from a debian package, I've installed fro mthe source.
>
> Thankz, cya []'s regards

You didn't tell, that you also have two different installations of
Cyrus-SASL.2.x. Fix that. Which should it be? You can go with both packages,
but you need to make sure, that Postfix will find SASL in /usr/lib/sasl2 - a
symlink to /usr/local/lib/sasl2 does it too.

Then, if you start saslauthd from an init-script, check with "ps" which
runtime parameters have been given by the init-script. Stop saslauthd, start
it with the same parameters and additionally (!) the "-d" command line option.

If saslauthd can't access the directory (it will note in the debug output)
make it accessible to saslauthd.

If it works at once, just note the path after the -m command line option. If
there is no "-m /path" do as follows:

# saslauthd -d -a shadow

Then note the run_path value in the debig output; it should be the path.

Whatever you get as path. It's the directory where saslauthd will create the
socket. Postfix must be able to access this directory. If it can't,
authentication will never work.

If you have fixed the sasl mix and verified the path thing check
authencication. If it doesn't work, send saslfinger output again.

prick

--
The Book of Postfix
<http://www.postfix-book.com>
saslfinger (debugging SMTP AUTH):
<http://postfix.state-of-mind.de/patrick.koetter/saslfinger/>