OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Cyrus SASL + Postfix

From: Andreas Winkelmann (mlawinkelmann.de)
Date: Sat Jan 14 2006 - 02:14:57 CST


Am Monday 09 January 2006 19:39 schrieb Asaf Shakarchi:

> I'm trying to setup postfix with cyrus-sasl using saslauthd,

> using 'testsaslauthd -u testdomain.com -p secret' I get an authentication
> success and everything seems to work fine,

Which version of Cyrus-SASL do you use? If it is >= 2.1.17, then saslauthd has
to be started with "-r" in case of Usernames with "domain".

> as expected, AUTH IS only PLAIN, continuing by trying to authenticate with:
>
> AUTH PLAIN ci1jby1pbAByLmNvLmlsAQ==

> (Encrypted by the following command
>
> perl -MMIME::Base64 -e 'print
> encode_base64("rmoo.co.il\0rmoo.co.il\0secret");'
> )

$ echo "ci1jby1pbAByLmNvLmlsAQ=="|mimencode -u|hex
0000 72 2d 63 6f 2d 69 6c 00 72 2e 63 6f 2e 69 6c 01 r-co-il. r.co.il.

Look at it and think of your Input-String.

> On the log file, I see:
>
> Jan 9 20:28:26 [postfix/smtpd] warning: SASL authentication failure: Can
> only find author/en (no password)

If you are unsure with Building the Base64-String, use a real MUA to test. Or
sampla-server/client in the Cyrus-SASL Package.

--
        Andreas