OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
smtp_sasl_password_maps

From: Anne Wilson (cannewilsongooglemail.com)
Date: Wed Mar 19 2008 - 06:42:15 CDT


I am trying to access imap resources on a dovecot server from other boxes on
my LAN. On the server everything appears to be functioning properly, and the
groupware resources are seen. On the client boxes, however, all is not well.

On the server I have added sections to dovecot.conf and postfix main.cf as
described in HowTo/PostfixAndDovecotSASL. They say:

in dovecot.conf:
auth default {
  mechanisms = plain login
        passdb pam {
        }
        userdb passwd {
        }
        socket listen {
                client {
                path = /var/spool/postfix/private.auth
                mode = 0660
                user = postfix
                group = postfix
                }
        }
}
 and in postfix's main.cf

smtp_sasl_type = dovecot
smtp_sasl_path = private/auth
smtp_sasl_auth_enable = yes
smtp_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated,
reject_unauth_destination

In KMail, on the client, I first tried plain test login, and when that failed
I used 'See what the server supports' and set it to TLS + clear text. I
don't appear to be getting a rejection, but the resources are not being read.

/var/log/maillog shows these lines

Mar 17 13:35:52 borg2 postfix/smtp[24339]: fatal: specify a password table via
the `smtp_sasl_password_maps' configuration parameter
Mar 17 13:35:53 borg2 postfix/master[2843]: warning:
process /usr/libexec/postfix/smtp pid 24339 exit status 1
Mar 17 13:35:53 borg2 postfix/master[2843]:
warning: /usr/libexec/postfix/smtp: bad command startup -- throttling

Clearly the problem is with the smtp_sasl_password_maps, but I'm unsure how to
deal with this. Ideally I just want it to use login names and passwords, but
I'll set this up if necessary. Do I set up a plain text file with the
groupware details and then run a hash command?

Will this have any effect on the other, plain imap, account? IOW, should I
add myself to that map?

I have plain imap running under dovecot without a problem. I'm not really
clear just how postfix fits into this new scenario.

Anne