OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Postfix vs. Cyrus SASL once again

From: Andreas Winkelmann (mlawinkelmann.de)
Date: Sat Oct 08 2005 - 12:34:23 CDT


Am Saturday 08 October 2005 18:35 schrieb Michael Sperber:

> > Turn TLS off, while you test SMTP AUTH.
>
> Did that, no change.
>
> >> -- content of /usr/lib/sasl2/smtpd.conf --
> >> pwcheck_method: auxprop
> >> auxprop_plugin: ndbm
> >> loglevel: 7
> >
> > I've never heard of an "auxprop_plugin: ndbm" before and I don't see any
> > libndbm.* stuff in /usr/lib/sasl2/. What does it do? Where's the driver?
>
> It's a standard config option for Cyrus SASL---it uses the standard
> Unix dbm library, which is why there's no separate plugin. (As
> opposed to, say MySQL or Berkeley DB.)

ndbm is the Database-Format for sasldb. Your "auxprop_plugin" is "sasldb".

auxprop_plugin: sasldb

> As I said, the sample client and server from Cyrus SASL work, so I
> don't think it's related to the plugin.
>
> Reading the docs, I'm getting slightly confused over where to put a
> realm and where not.

Run "sasldblistusers", maybe it is called "sasldblistusers2". There will be
Lines like

usersomething: userPassword

So set "smtpd_sasl_local_domain" to "something". This is the realm. The
Authentication-Id is "user". For Plain then
"user\0user\0password" (base64-encoded). But best to test this with a real
MUA.

--
        Andreas