OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: CRAM-MD5 SASL2 ignores smtpd.conf?

From: Andreas Winkelmann (mlawinkelmann.de)
Date: Sun Jun 04 2006 - 00:36:02 CDT

Am Sunday 04 June 2006 06:53 schrieb Brian A. Seklecki:

> When Postfix calls the SASL2 library function call / routines for a
> CRAM-MD5 authentication attempt, is $PREFIX/lib/sasl2/${appname}.conf not
> honored in the way it would be with PLAIN or LOGIN mechanisms?
>
> I think so, or there's something *very* wrong with the FreeBSD sasl2-authd
> Port.
>
> I'm attempting:
>
> CRAM-MD5 -> Postfix -> SASL-2.1.22 -> saslauthd-> PAM

saslauthd does not support Shared-Secret Mechanisms (CRAM-MD5, DIGEST-MD5).
The Library knows that and uses "pwcheck_method: auxprop" instead. Call it a
fallback.

If you insist on saslauthd, add "mech_list: plain login" to your smtpd.conf.

--
        Andreas