OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Postfix + saslauthd + mysql

From: Truong Tan Son (sonttfcv.fujitsu.com)
Date: Sat Dec 03 2005 - 21:08:51 CST


Newbie wrote:

> Hi,
>
> I'm got into a problem with my postfix when I wanted to add user authentification to send mail.
>
> I got to the point where I have a compiled postfix that doesn't work when my "smtpd_sasl_auth_enable" is activated.
> He dosen't answers on port 25 and i get some " warning : process killed by signal 11 "
>
> I compiled postfix that way :
>
> make -f Makefile.init makefiles \
> CCARGS="-DUSE_SASL_AUTH -I/usr/local/include/sasl -DHAS_MYSQL -I/usr/local/mysql/include" \
> AUXLIBS="-L/usr/local/lib -R/usr/local/lib -lsasl2 -L/usr/local/mysql/lib -lmysqlclient -lz -lm"
>

try to test:

make makefiles
CCARGS="-DHAS_MYSQL -I/usr/local/mysql/include/mysql -DHAS_SSL -DUSE_SASL_AUTH -I/usr/local/include/sasl -I/usr/local/ssl/include"
AUXLIBS="-L/usr/local/mysql/lib/mysql -lmysqlclient -lz -lm -L/usr/local/ssl/lib -L/usr/local/lib -R/usr/local/lib -lsasl2 -lssl -lcrypto"

> and here is my main.cf
>
> queue_directory = /var/spool/postfix
> command_directory = /usr/sbin
> daemon_directory = /usr/libexec/postfix
> mail_owner = postfix
> mydomain = [removed]
> myorigin = $mydomain
> mydestination = $myhostname, localhost.$mydomain, localhost, mysql:/etc/postfix/
> mysql_virt_domain.cf
> local_transport=virtual
> unknown_local_recipient_reject_code = 450
> relay_domains = $mydestination
>
> virtual_alias_maps=mysql:/etc/postfix/mysql_virt_alias.cf
> virtual_mailbox_maps=mysql:/etc/postfix/mysql_virt.cf
> virtual_uid_maps=static:101
> virtual_gid_maps=static:101
> virtual_mailbox_base = /var/mailhomedir
> #virutal_map = mysql:/etc/postfix/virtual.cf
> smtpd_sasl_auth_enable = yes
> broken_sasl_auth_clients = yes
> smtpd_recipient_restrictions =
> reject_unauth_destination,
> permit_mynetworks,
> permit_sasl_authenticated
> # reject_non_fqdn_hostname,
> # reject_non_fqdn_sender,
> # reject_non_fqdn_recipient,
> # reject_unauth_destination,
> # reject_unauth_pipelining,
> # reject_invalid_hostname
>
> smtpd_sasl_local_domain =
> smtpd_sasl_security_options = noanonymous
> smtpd_tls_auth_only = no
> smtpd_banner = $myhostname ESMTP $mail_name
> sendmail_path = /usr/sbin/sendmail
> newaliases_path = /usr/bin/newaliases
> mailq_path = /usr/bin/mailq
> setgid_group = postdrop
> html_directory = no
> manpage_directory = /usr/local/man
> sample_directory = /etc/postfix
> readme_directory = no
>
> Just to explain my choice, I'm also using dovecot+mysql to manage my users. Now I would like to use the same database to auth my
> incoming mail users. I was going to use pam_mysql to do that, but never went to the point where my postfix works fine with auth ..
>
> Did I missed something ?
>
> Regards.
>
> Yet Another Newbie.
>