OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: smtpd_auth

From: Andreas Winkelmann (mlawinkelmann.de)
Date: Wed Apr 11 2007 - 10:39:42 CDT


On Wednesday 11 April 2007 14:01, Черкендов Александр Армаисович wrote:

> I'm tried to turn on AUTH but got errors

> Apr 11 15:32:54 sg postfix/master[29064]: warning: process
> /usr/lib/postfix/smtpd pid 31639 killed by signal 11

You build Postfix/Cyrus-SASL at your own? Check for Linux-DLL Hell.

Run ldd on smtpd and every Library which is linked against it. Then run ldd on
the Libraries. Check for Libraries with diffrent Versions. Maybe ldap, mysql,
sasl, (b)db, ... Only one version of a Library should be in this List.

The configuration is uninteresting, first correct this Signal 11.

Tell something about the Build and the System.

> my smtpd.conf
>
> log_level:5
> pwcheck_metod:auxprop

A missing "h" in _method:

> mech_list:PLAIN LOGIN CRAM-MD5 DIGEST-MD5
> sasldb_path: /etc/postfix/sasl/sasldb

> my postconf|grep sasl
> broken_sasl_auth_clients = no
> lmtp_sasl_auth_enable = no
> lmtp_sasl_mechanism_filter =
> lmtp_sasl_password_maps =
> lmtp_sasl_path =
> lmtp_sasl_security_options = noplaintext, noanonymous
> lmtp_sasl_tls_security_options = $lmtp_sasl_security_options
> lmtp_sasl_tls_verified_security_options = $lmtp_sasl_tls_security_options
> lmtp_sasl_type = cyrus
> smtp_sasl_auth_enable = no
> smtp_sasl_mechanism_filter =
> smtp_sasl_password_maps =
> smtp_sasl_path =
> smtp_sasl_security_options = noplaintext, noanonymous
> smtp_sasl_tls_security_options = $smtp_sasl_security_options
> smtp_sasl_tls_verified_security_options = $smtp_sasl_tls_security_options
> smtp_sasl_type = cyrus
> smtpd_sasl_auth_enable = yes
> smtpd_sasl_authenticated_header = no
> smtpd_sasl_exceptions_networks =
> smtpd_sasl_local_domain = sg.tgk-8.ru

Check if this Domain is in sasldb.

> smtpd_sasl_path = /etc/postfix/sasl:/usr/lib/sasl2
> smtpd_sasl_security_options = noanonymous
> smtpd_sasl_tls_security_options = $smtpd_sasl_security_options
> smtpd_sasl_type = cyrus
> What i did wrong??

--
        Andreas