From: Patrick Ben Koetter (pstate-of-mind.de)
Date: Tue Jan 15 2008 - 04:55:41 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

* Jevos, Peter <Peter.Jevosoriflame.com>:
> Sorry for disturbing again with this vast topic but after 3 days
> struggeling and changing everything I have to write into this forum.
>
> I installed Cyrus-sasl-2.1.20:
>
> ./configure --enable-anon --enable-plain --enable-login --enable-sql
> --disable-krb4 --disable-otp --disable-cram --disable-digest
> --with-mysql=/usr/
> --without-pam --without-saslauthd --without-pwcheck
> --with-dblib=berkeley --with-bdb-libdir=/usr/lib64/
> --with-bdb-incdir=/usr/include/
> --with-openssl=/usr/share/ssl --with-plugindir=/usr/local/lib/sasl2
>
> And did ln -s /usr/local/lib/sasl2 /usr/lib/sasl2. So I can say that
> cyrus-sasl is installed correctly
> Then I installed postfix-2.2.9 with:
>
> make makefiles 'CCARGS=-DHAS_MYSQL -I/usr/include/mysql -DUSE_SASL_AUTH
> -DUSE_CYRUS_SASL -I/usr/local/include/sasl -I/usr/include'
> 'AUXLIBS=-L/usr/lib64/mysql -lmysqlclient -lz -lm -L/usr/local/lib
> -lsasl2 -L/usr/lib64/'
>
> When I try sasl test through telnet my error message is:
>
> Jan 15 11:01:30 mail2 postfix/smtpd[29690]: warning: SASL authentication
> failure: Couldn't find mech plain
> Jan 15 11:01:30 mail2 postfix/smtpd[29690]: warning:
> localhost[127.0.0.1]: SASL plain authentication failed
> Jan 15 11:01:32 mail2 postfix/smtpd[29690]: lost connection after AUTH
> from localhost[127.0.0.1]
>
> When I run saslfinger -s I get:
>
> -- basics --
> Postfix: 2.2.9
> System:
> Welcome to SUSE LINUX Enterprise Server 9 (x86_64) - Kernel \r (\l).
>
> -- smtpd is linked to --
> libsasl2.so.2 => /usr/lib64/libsasl2.so.2 (0x0000002a95a16000)
>
> -- active SMTP AUTH and TLS parameters for smtpd --
> broken_sasl_auth_clients = yes
> smtpd_sasl_auth_enable = yes
> smtpd_sasl_local_domain =
> smtpd_sasl_security_options = noanonymous
>
>
> -- listing of /usr/lib/sasl2 --
> total 16
> drwxr-xr-x 2 root root 4096 Jan 15 10:51 .
> drwxr-xr-x 21 root root 4096 Jan 15 10:05 ..
> drwxr-xr-x 2 root root 4096 Jan 15 10:50 sasl2
> -r-------- 1 postfix postfix 260 Jan 14 18:10 smtpd.conf

Your symlink from /usr/lib/sasl2 to /usr/local/lib/sasl2 did not work. Fix it.

> -- listing of /usr/local/lib/sasl2 --
> total 1316
> drwxr-xr-x 2 root root 4096 Jan 15 10:50 .
> drwxr-xr-x 4 root root 4096 Jan 15 10:50 ..
> -rwxr-xr-x 1 root root 713 Jan 15 10:50 libanonymous.la
> -rwxr-xr-x 1 root root 68307 Jan 15 10:50 libanonymous.so
> -rwxr-xr-x 1 root root 68307 Jan 15 10:50 libanonymous.so.2
> -rwxr-xr-x 1 root root 68307 Jan 15 10:50 libanonymous.so.2.0.20
> -rwxr-xr-x 1 root root 697 Jan 15 10:50 liblogin.la
> -rwxr-xr-x 1 root root 70029 Jan 15 10:50 liblogin.so
> -rwxr-xr-x 1 root root 70029 Jan 15 10:50 liblogin.so.2
> -rwxr-xr-x 1 root root 70029 Jan 15 10:50 liblogin.so.2.0.20
> -rwxr-xr-x 1 root root 697 Jan 15 10:50 libplain.la
> -rwxr-xr-x 1 root root 69915 Jan 15 10:50 libplain.so
> -rwxr-xr-x 1 root root 69915 Jan 15 10:50 libplain.so.2
> -rwxr-xr-x 1 root root 69915 Jan 15 10:50 libplain.so.2.0.20
> -rwxr-xr-x 1 root root 739 Jan 15 10:50 libsasldb.la
> -rwxr-xr-x 1 root root 113497 Jan 15 10:50 libsasldb.so
> -rwxr-xr-x 1 root root 113497 Jan 15 10:50 libsasldb.so.2
> -rwxr-xr-x 1 root root 113497 Jan 15 10:50 libsasldb.so.2.0.20
> -rwxr-xr-x 1 root root 703 Jan 15 10:50 libsql.la
> -rwxr-xr-x 1 root root 84678 Jan 15 10:50 libsql.so
> -rwxr-xr-x 1 root root 84678 Jan 15 10:50 libsql.so.2
> -rwxr-xr-x 1 root root 84678 Jan 15 10:50 libsql.so.2.0.20
> -r-------- 1 postfix postfix 260 Jan 14 18:10 smtpd.conf
>
> -- content of /usr/lib/sasl2/smtpd.conf --
> pweck_method: auxprop
> auxprop_plugin: sql
> mech_list: plain login
> log_level: 5
> sql_engine: mysql
> sql_hostnames: localhost
> sql_user: --- replaced ---
> sql_passwd: --- replaced ---
> sql_database: mail
> sql_select: select clear from postfix_users where email='%u%r' and
> access='Y'

Looks sane.

> -- content of /usr/local/lib/sasl2/smtpd.conf --
> pweck_method: auxprop
> auxprop_plugin: sql
> mech_list: plain login
> log_level: 5
> sql_engine: mysql
> sql_hostnames: localhost
> sql_user: --- replaced ---
> sql_passwd: --- replaced ---
> sql_database: mail
> sql_select: select clear from postfix_users where email='%u%r' and
> access='Y'
>
> -- active services in /etc/postfix/master.cf --
> # service type private unpriv chroot wakeup maxproc comman+ args
> # (yes) (yes) (yes) (never) (100)
> smtp inet n - n - - smtpd

Not chrooted. Good.

> -- mechanisms on localhost --
> 250-AUTH LOGIN
> 250-AUTH=LOGIN
>
>
> -- end of saslfinger output --
>
>
> I'm not using chroot.
> My guess is that problem has postfix cause it cannot recognize right
> libraries or somehting like that

smtpd tells libsasl to do auth. libsasl looks in /usr/lib/sasl2 and cannot
find a mechanism. Then things turn bad... ;)

prick

--
The Book of Postfix
<http://www.postfix-book.com>
saslfinger (debugging SMTP AUTH):
<http://postfix.state-of-mind.de/patrick.koetter/saslfinger/>

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]