OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Postfix and Cyrus-SASL Problem

From: Andreas Winkelmann (mlawinkelmann.de)
Date: Fri Oct 12 2007 - 10:53:50 CDT


On Friday 12 October 2007 17:29, neji hyuga wrote:

> Hi, I installed Postfix and cyrus-sasl-1.5.28 in Solaris 10 SPARC. I
> installed 1.5.28 cyrus-sasl version because thats works and the 2.1.22
> didnt work. My problem y that i cant get that postfix authenticate and i
> get these messages in /var/adm/messages log:
>
> postfix/smtpd[29106]: [ID 947731 mail.warning] warning:
> xsasl_cyrus_server_get_mechanism_list: no applicable SASL mechanisms
> postfix/smtpd[29106]: [ID 947731 mail.crit] fatal: no SASL authentication
> mechanisms
> postfix/master[21644]: [ID 947731 mail.warning] warning: process
> /usr/libexec/postfix/smtpd pid 29106 exit status 1
> postfix/master[21644]: [ID 947731 mail.warning] warning:
> /usr/libexec/postfix/smtpd: bad command startup -- throttling
>
> this is my /etc/postfix/main.cf

# postconf -n

> allow_percent_hack = yes
> append_at_myorigin = yes
> append_dot_mydomain = yes
> empty_address_recipient = MAILER-DAEMON
> masquerade_classes = envelope_sender, header_sender, header_recipient
> masquerade_domains = $mydomain
> masquerade_exceptions = root,mailer-daemon
> smtpd_sasl_path=smtpd
> smtp_sasl_auth_enable = yes
> smtp_sasl_password_maps = dbm:/etc/postfix/saslpass
> smtpd_recipient_restrictions = permit_sasl_authenticated,
> permit_mynetworks, reject_unauth_destination
> smtpd_sasl_auth_enable = yes
> swap_bangpath = yes
> broken_sasl_auth_clients = yes
>
> smtpd_use_tls = yes
> smtpd_tls_key_file = /etc/postfix/mail.mitla.dcaa.unam.mx.key
> smtpd_tls_cert_file = /etc/postfix/mail.mitla.dcaa.unam.mx.crt
>
> smtpd_helo_required = yes
>
> this is /usr/local/sasl/smtpd.conf

The Path looks strange. I am missing the /lib/ Part. And did you create the
link from /usr/local/lib/sasl to /usr/lib/sasl ?

> pwcheck_method: saslauthd

Show the output of "saslfinger -s".

http://postfix.state-of-mind.de/patrick.koetter/saslfinger/

--
        Andreas