OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Postfix+SASL+PostgreSQL

From: Aaron Martinez (mlproficuous.com)
Date: Wed Mar 26 2008 - 18:21:51 CDT

Paul G. Allen wrote:
> Hello, I'm new to the list and have just recently started using Postfix.
>
> I posted this to a Linux mailing list, but have not received a
> response that has helped yet. I thought I'd try here.
>
>
>
> I'm having trouble configuring a new mail server to use SMTP AUTH and
> can't seem to find any decent documentation on it.
>
> I have no choice but to use PostgreSQL as the management system uses
> it. I have to use SMTP AUTH because the server is a relay for all
> hosted domains. Customers must be able to send mail using the server,
> but it must remain secure from being an open relay.
>
> I have compiled and installed Postfix with PostgreSQL and SASL
> support. I have compiled and installed Cyrus SASL with PostgreSQL
> support (at least I think I did that part correctly). When I try to
> send mail, I get this error in /var/log/maillog when my e-mail client
> attempts to authenticate:
>
> Mar 26 03:02:46 mail1 postfix/smtpd[10987]: connect from
> ip68-7-51-89.sd.sd.cox.net[68.7.51.89]
> Mar 26 03:03:11 mail1 postfix/smtpd[10987]: warning: SASL
> authentication failure: Password verification failed
> Mar 26 03:03:11 mail1 postfix/smtpd[10987]: warning:
> ip68-7-51-89.sd.sd.cox.net[68.7.51.89]: SASL PLAIN authentication
> failed: authentication failure
> Mar 26 03:03:12 mail1 postfix/smtpd[10987]: warning:
> ip68-7-51-89.sd.sd.cox.net[68.7.51.89]: SASL LOGIN authentication
> failed: authentication failure
>
> Does anyone know of any documentation covering this specific subject?
> Am I the only one on the planet trying to use Postfix+Cyrus
> SASL+PostgreSQL for SMTP AUTH?
>
> (Note: I have Postfix verifying virtual domains and addresses for
> incoming mail from the PostgreSQL database.)
>
> PGA
or you could also use the dovecot sasl implementation which is
drastically easier to set up.

Aaron