OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: mdk 2005 postfix sasl failures

From: Andreas Winkelmann (mlawinkelmann.de)
Date: Sat May 20 2006 - 06:46:19 CDT


Am Monday 15 May 2006 15:22 schrieb Patrick Ben Koetter:

> This should do it:
>
> #/etc/sasl2/smtpd.conf
> pwcheck_method: auxprop
> auxprop_plugin: sasldb
> # sasldb allows also shared-secret-mechs like GSSAPI and DIGEST-MD5
> mech_list: LOGIN PLAIN GSSAPI DIGEST-MD5

s/GSSAPI/CRAM-MD5/g ;-)

> Besides that, Postfix smtpd-daemon must not be running chrooted, when you
> put the sasldb database outside of /var/spool/postfix.

I think this is the Problem. The OP should check for chroot. Either copy
sasldb to the chroot, or switch it off.

http://www.postfix.org/DEBUG_README.html#no_chroot

--
        Andreas