OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: cyrus-sasl + mysql auth isn't working

From: Aaron Gallagher (habnabitgmail.com)
Date: Tue Nov 29 2005 - 02:30:16 CST


On Nov 29, 2005, at 12:22 AM, Patrick Ben Koetter wrote:
> Add "saslauthd_path: /usr/lib/sasl2/mux" to smtpd.conf, reload
> Postfix and try
> again.
I've done that and it still isn't working. Here's the logfiles:

Nov 29 00:25:32 mazer postfix/smtpd[4620]: connect from
209-209-113-34.stk.inreach.net[209.209.113.34]
Nov 29 00:25:32 mazer postfix/smtpd[4620]: warning: SASL
authentication failure: cannot connect to saslauthd server: No such
file or directory
Nov 29 00:25:32 mazer postfix/smtpd[4620]: warning: SASL
authentication failure: Password verification failed
Nov 29 00:25:32 mazer postfix/smtpd[4620]: warning:
209-209-113-34.stk.inreach.net[209.209.113.34]: SASL PLAIN
authentication failed
Nov 29 00:25:32 mazer postfix/smtpd[4620]: lost connection after AUTH
from 209-209-113-34.stk.inreach.net[209.209.113.34]
Nov 29 00:25:32 mazer postfix/smtpd[4620]: disconnect from
209-209-113-34.stk.inreach.net[209.209.113.34]

And here's the new version of saslfinger's output:

saslfinger - postfix Cyrus sasl configuration Tue Nov 29 00:29:20 PST
2005
version: 1.0
mode: server-side SMTP AUTH

-- basics --
Postfix: 2.1.5
System: Gentoo Base System version 1.6.13

-- smtpd is linked to --
         libsasl2.so.2 => /usr/local/lib/libsasl2.so.2 (0x0fada000)

-- active SMTP AUTH and TLS parameters for smtpd --
broken_sasl_auth_clients = yes
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain =
smtpd_sasl_security_options = noanonymous

-- listing of /usr/lib/sasl2 --
total 936
drwxr-xr-x 2 root root 4096 Nov 29 00:25 .
drwxr-xr-x 46 root root 28672 Nov 23 14:41 ..
-rwxr-xr-x 1 root root 695 Oct 23 21:26 libanonymous.la
-rwxr-xr-x 1 root root 20028 Oct 23 21:26 libanonymous.so
-rwxr-xr-x 1 root root 20028 Oct 23 21:26 libanonymous.so.2
-rwxr-xr-x 1 root root 20028 Oct 23 21:26 libanonymous.so.2.0.20
-rwxr-xr-x 1 root root 683 Oct 23 21:26 libcrammd5.la
-rwxr-xr-x 1 root root 22696 Oct 23 21:26 libcrammd5.so
-rwxr-xr-x 1 root root 22696 Oct 23 21:26 libcrammd5.so.2
-rwxr-xr-x 1 root root 22696 Oct 23 21:26 libcrammd5.so.2.0.20
-rwxr-xr-x 1 root root 713 Oct 23 21:26 libdigestmd5.la
-rwxr-xr-x 1 root root 56080 Oct 23 21:26 libdigestmd5.so
-rwxr-xr-x 1 root root 56080 Oct 23 21:26 libdigestmd5.so.2
-rwxr-xr-x 1 root root 56080 Oct 23 21:26 libdigestmd5.so.2.0.20
-rwxr-xr-x 1 root root 749 Oct 23 21:26 libgssapiv2.la
-rwxr-xr-x 1 root root 32240 Oct 23 21:26 libgssapiv2.so
-rwxr-xr-x 1 root root 32240 Oct 23 21:26 libgssapiv2.so.2
-rwxr-xr-x 1 root root 32240 Oct 23 21:26 libgssapiv2.so.2.0.20
-rwxr-xr-x 1 root root 679 Oct 23 21:26 liblogin.la
-rwxr-xr-x 1 root root 20776 Oct 23 21:26 liblogin.so
-rwxr-xr-x 1 root root 20776 Oct 23 21:26 liblogin.so.2
-rwxr-xr-x 1 root root 20776 Oct 23 21:26 liblogin.so.2.0.20
-rwxr-xr-x 1 root root 674 Oct 23 21:26 libntlm.la
-rwxr-xr-x 1 root root 39312 Oct 23 21:26 libntlm.so
-rwxr-xr-x 1 root root 39312 Oct 23 21:26 libntlm.so.2
-rwxr-xr-x 1 root root 39312 Oct 23 21:26 libntlm.so.2.0.20
-rwxr-xr-x 1 root root 679 Oct 23 21:26 libplain.la
-rwxr-xr-x 1 root root 20904 Oct 23 21:26 libplain.so
-rwxr-xr-x 1 root root 20904 Oct 23 21:26 libplain.so.2
-rwxr-xr-x 1 root root 20904 Oct 23 21:26 libplain.so.2.0.20
-rwxr-xr-x 1 root root 702 Oct 23 21:26 libsasldb.la
-rwxr-xr-x 1 root root 26848 Oct 23 21:26 libsasldb.so
-rwxr-xr-x 1 root root 26848 Oct 23 21:26 libsasldb.so.2
-rwxr-xr-x 1 root root 26848 Oct 23 21:26 libsasldb.so.2.0.20
-rwxr-xr-x 1 root root 690 Oct 23 21:26 libsql.la
-rwxr-xr-x 1 root root 26916 Oct 23 21:26 libsql.so
-rwxr-xr-x 1 root root 26916 Oct 23 21:26 libsql.so.2
-rwxr-xr-x 1 root root 26916 Oct 23 21:26 libsql.so.2.0.20
-rw-r--r-- 1 root root 93 Nov 29 00:10 saslauthd
-rw-r--r-- 1 root root 12332 Nov 29 00:10 sasldb2
-rw-r--r-- 1 root root 83 Nov 29 00:25 smtpd.conf
-rw-r--r-- 1 root root 48 Nov 4 12:31 smtpd.conf~

-- listing of /var/lib/sasl2 --
total 12
drwxr-xr-x 2 root root 4096 Nov 29 00:07 .
drwxr-xr-x 19 root root 4096 Nov 18 10:31 ..
-rw-r--r-- 1 root root 0 Oct 23 21:26 .keep
srwxrwxrwx 1 root root 0 Nov 29 00:07 mux
-rw------- 1 root root 0 Nov 29 00:07 mux.accept
-rw------- 1 root root 5 Nov 29 00:07 saslauthd.pid

-- listing of /etc/sasl2 --
total 32
drwxr-xr-x 2 root root 4096 Nov 29 00:06 .
drwxr-xr-x 58 root root 4096 Nov 28 22:50 ..
-rw-r--r-- 1 root root 0 Oct 23 21:26 .keep
-rw-r--r-- 1 root root 93 Sep 5 21:10 saslauthd
-rw-r--r-- 1 root postdrop 12332 Oct 23 21:26 sasldb2
-rw-r--r-- 1 root root 48 Sep 5 21:10 smtpd.conf~

-- content of /usr/lib/sasl2/smtpd.conf --
mech_list: PLAIN LOGIN
pwcheck_method: saslauthd
saslauthd_path: /usr/lib/sasl2/mux

-- active services in /etc/postfix/master.cf --
# service type private unpriv chroot wakeup maxproc command + args
# (yes) (yes) (yes) (never) (100)
smtp inet n - n - - smtpd
smtps inet n - n - - smtpd
   -o smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes
pickup fifo n - n 60 1 pickup
cleanup unix n - n - 0 cleanup
qmgr fifo n - n 300 1 qmgr
rewrite unix - - n - - trivial-rewrite
bounce unix - - n - 0 bounce
defer unix - - n - 0 bounce
trace unix - - n - 0 bounce
verify unix - - n - 1 verify
flush unix n - n 1000? 0 flush
proxymap unix - - n - - proxymap
smtp unix - - n - - smtp
relay unix - - n - - smtp
showq unix n - n - - showq
error unix - - n - - error
local unix - n n - - local
virtual unix - n n - - virtual
lmtp unix - - n - - lmtp
anvil unix - - n - 1 anvil
maildrop unix - n n - - pipe
   flags=DRhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient}
old-cyrus unix - n n - - pipe
   flags=R user=cyrus argv=/cyrus/bin/deliver -e -m ${extension} ${user}
cyrus unix - n n - - pipe
   user=cyrus argv=/cyrus/bin/deliver -e -r ${sender} -m ${extension}
${user}
uucp unix - n n - - pipe
   flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail
($recipient)
ifmail unix - n n - - pipe
   flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp unix - n n - - pipe
   flags=Fq. user=foo argv=/usr/local/sbin/bsmtp -f $sender $nexthop
$recipient

-- mechanisms on localhost --
250-AUTH LOGIN PLAIN
250-AUTH=LOGIN PLAIN

-- end of saslfinger output --

Aaron Gallagher
<habnabitgmail.com>