From: Andreas Winkelmann (mlawinkelmann.de)
Date: Fri Jun 16 2006 - 05:39:43 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Am Thursday 15 June 2006 18:41 schrieb Lonely Wolf:

> > > Show postconf -n | egrep "(sasl|tls)"
>
> postconf -n | egrep "(sasl|tls)"

At least "broken_sasl_auth_clients = yes" is missing. Outlook ignores
AUTH-Lines wihout "=".

> smtp_tls_session_cache_database = btree:${queue_directory}/smtp_scache
> smtpd_recipient_restrictions = permit_sasl_authenticated
> permit_mynetworks
> reject_unauth_destination
> smtpd_sasl_auth_enable = yes
> smtpd_sasl_security_options = noanonymous, noplaintext
> smtpd_tls_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem
> smtpd_tls_key_file = /etc/ssl/private/ssl-cert-snakeoil.key
> smtpd_tls_loglevel = 2
> smtpd_tls_session_cache_database = btree:${queue_directory}/smtpd_scache
> smtpd_use_tls = yes

smtpd_sasl_tls_security_options = noanonymous

And install the Cyrus-SASL "LOGIN" Mechanism.

> >> >> Jun 14 01:09:58 mailserver postfix/smtpd[12386]: match_list_match:
> >> >> hostxxx-poolxxx: no match
> >> >> Jun 14 01:09:58 mailserver postfix/smtpd[12386]: match_list_match:
> >> >> 1.2.3.4: no match
> > >
> > > This could be an sasl error...
> > > Show your sasl2 smtpd.conf!
>
> #cat smtpd.conf
> pwcheck_method:sasldb

For Cyrus-SASL v2 this is wrong. But you will see warnings about that in your
Log.

Use

pwcheck_method: auxprop
auxprop_plugin: sasldb

instead.

--
        Andreas

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]