OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Postfix-2.3-20051229/Cyrus SASL & smtpd: bad command startup -- throttling

From: Patrick Ben Koetter (pstate-of-mind.de)
Date: Tue Jan 03 2006 - 11:23:24 CST


* Rob Tanner <rtannerlinfield.edu>:
> Hi,
>
> I've build Postfix (postfix-2.3-20051229) to interface both with Cyrus
> SASL and LDAP on Fedora Core 4 using the distro's libraries. To wit:
>
> make makefiles CCARGS="-I/usr/include -DHAS_LDAP -DUSE_SASL_AUTH
> -DUSE_CYRUS_SASL" \
> AUXLIBS="-L/usr/lib -lldap -L/usr/lib -llber -L/usr/lib -lsasl2"
>
> Postfix builds and installs without error and as long as Cyrus SASL is
> unconfigured in main.cf, everything else works. LDAP is used
> extensively for aliasing , relay recipient tables, etc, and that's all
> working fine. When Cyrus SASL is configured in, I get the following
> errors in the maillog and the port 25 connection simply hangs:
>
> warning: process /usr/libexec/postfix/smtpd pid 19415 killed by signal 11
> warning: /usr/libexec/postfix/smtpd: bad command startup -- throttling
>
> Here are the config particulars:
>
> In /usr/lib/sasl2/smtpd.conf:
>
> pwcheck_method: saslauthd
> mech_list: plain
>
> In /etc/saslauthd.conf:
>
> ldap_servers: ldap://ldap.linfield.edu/
> ldap_search_base: ou=people,o=linfield.edu
> ldap_auth_method: bind
>
> In /etc/postfix/main.cf:
>
> smtpd_sasl_application_name = smtpd
> smtpd_sasl_auth_enable = yes
> smtpd_sasl_local_domain =
> smtpd_sasl_security_options =
> broken_sasl_auth_clients = yes
>
> I can successfully validate the saslauthd config using the utility
> testsaslauthd, so I know that's not the problem. Other than that, I'm
> lost. Any ideas?

FC ships with two versions of SASL: Cyrus-SASL.1.x and Cyrus-SASL.2.x. Both
versions install a sasl.h file. Move the 1.5.28 sasl.h file (look inside the
file) out of the way while you build Postfix...

prick

--
The Book of Postfix
<http://www.postfix-book.com>
saslfinger (debugging SMTP AUTH):
<http://postfix.state-of-mind.de/patrick.koetter/saslfinger/>