OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: /usr/lib/sasl2 failed to open directory

From: Mark Edwards (markantsclimbtree.com)
Date: Sun May 27 2007 - 17:00:12 CDT


On May 27, 2007, at 2:36 PM, Wietse Venema wrote:

>
>> * postfix tries to access /usr/lib/sasl2 because the Ubuntu package
>> is compiled with cyrus-sasl support
>
> Correction: libsasl tries to access /usr/lib/sasl2.
> =======
>
> Postfix could not care less where libsasl keeps its files.

Why is libsasl involved at all if the following are true:

lmtp_sasl_auth_enable = no
smtpd_sasl_auth_enable = yes
smtp_sasl_auth_enable = no
smtpd_sasl_type = dovecot

>> 2) Why does postfix insist on bothering with /usr/lib/sasl2 when I
>> have smtpd_sasl_type = dovecot? Is there a way to configure postfix
>> so it ignores cyrus-sasl, even though its compiled to support it?
>
> Perhaps because you configured SMTP_sasl_xxx instead of
> SMTPD_sasl_xxx?

I don't believe so. Here are the relevant sections of my .cf files:

main.cf:

lmtp_sasl_auth_enable = no
smtpd_sasl_auth_enable = no
smtp_sasl_auth_enable = no
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth
broken_sasl_auth_clients = yes
lmtp_sasl_auth_enable = no

smtpd_recipient_restrictions =
         permit_mynetworks,
         permit_sasl_authenticated,
         reject_unauth_destination,
         check_policy_service inet:127.0.0.1:60000,
         permit_auth_destination,
         reject

master.cf:

smtp inet n - - - 20 smtpd
         -o smtpd_proxy_filter=127.0.0.1:10024
         -o smtpd_client_connection_count_limit=10
submission inet n - - - 20 smtpd
         -o smtpd_enforce_tls=yes
         -o smtpd_sasl_auth_enable=yes
         -o smtpd_client_restrictions=permit_sasl_authenticated,reject
         -o smtpd_client_connection_count_limit=10
         -o smtpd_etrn_restrictions=reject
         -o content_filter=smtp-amavis:[127.0.0.1]:10024
         -o receive_override_options=no_address_mappings
smtps inet n - - - 20 smtpd
         -o smtpd_client_connection_count_limit=10
         -o smtpd_tls_wrappermode=yes
         -o smtpd_sasl_auth_enable=yes
         -o smtpd_client_restrictions=permit_sasl_authenticated,reject
         -o content_filter=smtp-amavis:[127.0.0.1]:10024
         -o receive_override_options=no_address_mappings