OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Again troubles with postfix and cyrus-sasl

From: Jevos, Peter (Peter.Jevosoriflame.com)
Date: Tue Jan 15 2008 - 04:17:33 CST


Sorry for disturbing again with this vast topic but after 3 days
struggeling and changing everything I have to write into this forum.

I installed Cyrus-sasl-2.1.20:

./configure --enable-anon --enable-plain --enable-login --enable-sql
--disable-krb4 --disable-otp --disable-cram --disable-digest
--with-mysql=/usr/
 --without-pam --without-saslauthd --without-pwcheck
--with-dblib=berkeley --with-bdb-libdir=/usr/lib64/
--with-bdb-incdir=/usr/include/
--with-openssl=/usr/share/ssl --with-plugindir=/usr/local/lib/sasl2

And did ln -s /usr/local/lib/sasl2 /usr/lib/sasl2. So I can say that
cyrus-sasl is installed correctly
Then I installed postfix-2.2.9 with:

make makefiles 'CCARGS=-DHAS_MYSQL -I/usr/include/mysql -DUSE_SASL_AUTH
-DUSE_CYRUS_SASL -I/usr/local/include/sasl -I/usr/include'
'AUXLIBS=-L/usr/lib64/mysql -lmysqlclient -lz -lm -L/usr/local/lib
-lsasl2 -L/usr/lib64/'

When I try sasl test through telnet my error message is:

Jan 15 11:01:30 mail2 postfix/smtpd[29690]: warning: SASL authentication
failure: Couldn't find mech plain
Jan 15 11:01:30 mail2 postfix/smtpd[29690]: warning:
localhost[127.0.0.1]: SASL plain authentication failed
Jan 15 11:01:32 mail2 postfix/smtpd[29690]: lost connection after AUTH
from localhost[127.0.0.1]

When I run saslfinger -s I get:

-- basics --
Postfix: 2.2.9
System:
Welcome to SUSE LINUX Enterprise Server 9 (x86_64) - Kernel \r (\l).

-- smtpd is linked to --
        libsasl2.so.2 => /usr/lib64/libsasl2.so.2 (0x0000002a95a16000)

-- active SMTP AUTH and TLS parameters for smtpd --
broken_sasl_auth_clients = yes
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain =
smtpd_sasl_security_options = noanonymous

-- listing of /usr/lib/sasl2 --
total 16
drwxr-xr-x 2 root root 4096 Jan 15 10:51 .
drwxr-xr-x 21 root root 4096 Jan 15 10:05 ..
drwxr-xr-x 2 root root 4096 Jan 15 10:50 sasl2
-r-------- 1 postfix postfix 260 Jan 14 18:10 smtpd.conf

-- listing of /usr/local/lib/sasl2 --
total 1316
drwxr-xr-x 2 root root 4096 Jan 15 10:50 .
drwxr-xr-x 4 root root 4096 Jan 15 10:50 ..
-rwxr-xr-x 1 root root 713 Jan 15 10:50 libanonymous.la
-rwxr-xr-x 1 root root 68307 Jan 15 10:50 libanonymous.so
-rwxr-xr-x 1 root root 68307 Jan 15 10:50 libanonymous.so.2
-rwxr-xr-x 1 root root 68307 Jan 15 10:50 libanonymous.so.2.0.20
-rwxr-xr-x 1 root root 697 Jan 15 10:50 liblogin.la
-rwxr-xr-x 1 root root 70029 Jan 15 10:50 liblogin.so
-rwxr-xr-x 1 root root 70029 Jan 15 10:50 liblogin.so.2
-rwxr-xr-x 1 root root 70029 Jan 15 10:50 liblogin.so.2.0.20
-rwxr-xr-x 1 root root 697 Jan 15 10:50 libplain.la
-rwxr-xr-x 1 root root 69915 Jan 15 10:50 libplain.so
-rwxr-xr-x 1 root root 69915 Jan 15 10:50 libplain.so.2
-rwxr-xr-x 1 root root 69915 Jan 15 10:50 libplain.so.2.0.20
-rwxr-xr-x 1 root root 739 Jan 15 10:50 libsasldb.la
-rwxr-xr-x 1 root root 113497 Jan 15 10:50 libsasldb.so
-rwxr-xr-x 1 root root 113497 Jan 15 10:50 libsasldb.so.2
-rwxr-xr-x 1 root root 113497 Jan 15 10:50 libsasldb.so.2.0.20
-rwxr-xr-x 1 root root 703 Jan 15 10:50 libsql.la
-rwxr-xr-x 1 root root 84678 Jan 15 10:50 libsql.so
-rwxr-xr-x 1 root root 84678 Jan 15 10:50 libsql.so.2
-rwxr-xr-x 1 root root 84678 Jan 15 10:50 libsql.so.2.0.20
-r-------- 1 postfix postfix 260 Jan 14 18:10 smtpd.conf

-- content of /usr/lib/sasl2/smtpd.conf --
pweck_method: auxprop
auxprop_plugin: sql
mech_list: plain login
log_level: 5
sql_engine: mysql
sql_hostnames: localhost
sql_user: --- replaced ---
sql_passwd: --- replaced ---
sql_database: mail
sql_select: select clear from postfix_users where email='%u%r' and
access='Y'

-- content of /usr/local/lib/sasl2/smtpd.conf --
pweck_method: auxprop
auxprop_plugin: sql
mech_list: plain login
log_level: 5
sql_engine: mysql
sql_hostnames: localhost
sql_user: --- replaced ---
sql_passwd: --- replaced ---
sql_database: mail
sql_select: select clear from postfix_users where email='%u%r' and
access='Y'

-- active services in /etc/postfix/master.cf --
# service type private unpriv chroot wakeup maxproc comman+ args
# (yes) (yes) (yes) (never) (100)
smtp inet n - n - - smtpd
pickup fifo n - n 60 1 pickup
cleanup unix n - n - 0 cleanup
qmgr fifo n - n 300 1 qmgr
tlsmgr unix - - n 1000? 1 tlsmgr
rewrite unix - - n - - trivial-rewrite
bounce unix - - n - 0 bounce
defer unix - - n - 0 bounce
trace unix - - n - 0 bounce
verify unix - - n - 1 verify
flush unix n - n 1000? 0 flush
proxymap unix - - n - - proxymap
smtp unix - - n - - smtp
relay unix - - n - - smtp
        -o fallback_relay=
showq unix n - n - - showq
error unix - - n - - error
discard unix - - n - - discard
local unix - n n - - local
virtual unix - n n - - virtual
lmtp unix - - n - - lmtp
anvil unix - - n - 1 anvil
scache unix - - n - 1 scache
maildrop unix - n n - - pipe
  flags=R user=vmail argv=/usr/local/bin/maildrop -w 90 -d ${recipient}
old-cyrus unix - n n - - pipe
  flags=R user=cyrus argv=/cyrus/bin/deliver -e -m ${extension} ${user}
cyrus unix - n n - - pipe
  user=cyrus argv=/cyrus/bin/deliver -e -r ${sender} -m ${extension}
${user}
uucp unix - n n - - pipe
  flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail
($recipient)
ifmail unix - n n - - pipe
  flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp unix - n n - - pipe
  flags=Fq. user=foo argv=/usr/local/sbin/bsmtp -f $sender $nexthop
$recipient
smtp-amavis unix - - n - 10 smtp
            -o smtp_data_done_timeout=1200
            -o smtp_send_xforward_command=yes
            -o disable_dns_lookups=yes
127.0.0.1:10025 inet n - n - - smtpd
            -o content_filter=
            -o local_recipient_maps=
            -o relay_recipient_maps=
            -o smtpd_restriction_classes=
            -o smtpd_delay_reject=no
            -o smtpd_client_restrictions=permit_mynetworks,reject
            -o smtpd_helo_restrictions=
            -o smtpd_sender_restrictions=
            -o smtpd_recipient_restrictions=permit_mynetworks,reject
            -o smtpd_data_restrictions=reject_unauth_pipelining
            -o smtpd_end_of_data_restrictions=
            -o mynetworks=127.0.0.0/8
            -o strict_rfc821_envelopes=yes
            -o smtpd_error_sleep_time=0
            -o smtpd_soft_error_limit=1001
            -o smtpd_hard_error_limit=1000
            -o smtpd_client_connection_count_limit=0
            -o smtpd_client_connection_rate_limit=0
            -o receive_override_options=no_header_body_checks

-- mechanisms on localhost --
250-AUTH LOGIN
250-AUTH=LOGIN

-- end of saslfinger output --

I'm not using chroot.
My guess is that problem has postfix cause it cannot recognize right
libraries or somehting like that

Thanks a lot

Pet