Postfix 2.5.5 + SASL ==> Nothing!!

Francillo
2013-02-07
2013-02-07
  • Francillo

    Francillo - 2013-02-07

    Hi,
    I try to make Postfix 2.5.5 + SASL (cyrus) working together on a Suse distro.
    I've tried and read all the way to do it accross the web! But in fact, nothing happens. Nothing in logs, saslauthd is never called, no auth check.
    Here are the relevant conf samples:
    /etc/sasl2/smtpd.conf:
    pwcheck_method: saslauthd
    mech_list: PLAIN LOGIN

    main.cf:
    smtpd_recipient_restrictions = permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination
    smtp_sasl_auth_enable = yes
    smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
    smtpd_sasl_type = cyrus
    smtpd_sasl_security_options = noanonymous
    smtpd_sasl_authenticated_header = yes
    smtpd_use_tls = no
    smtp_use_tls = no

    And telnet response for check:
    220 smtp.piloteo.fr ESMTP Postfix
    EHLO test.com
    250-smtp.piloteo.fr
    250-PIPELINING
    250-SIZE 10240000
    250-VRFY
    250-ETRN
    250-ENHANCEDSTATUSCODES
    250-8BITMIME
    250 DSN

    ==> No AUTH capability
    ==> Nothing in log, not even an error

    Any sugestion would be appreciated!

    Francillo

     
    Last edit: Francillo 2013-02-07
    • Christian Boltz

      Christian Boltz - 2013-02-07

      /etc/sasl2/smtpd.conf:
      pwcheck_method: saslauthd
      mech_list: PLAIN LOGIN

      Assuming you are using PostfixAdmin (why else would you ask here? ;-)
      you'll need to use a smtpd.conf like this:

      pwcheck_method: auxprop
      auxprop_plugin: sql
      mech_list: plain login cram-md5 digest-md5
      sql_engine: mysql
      sql_hostnames: 127.0.0.1
      sql_user: mail-postfix
      sql_passwd: topsecret
      sql_database: mail
      sql_select: select password from mailbox where username='%u@%r'

      BTW: in openSUSE 12.2 using saslautd with mysql is broken (known and
      reported bug) - the best workaround is to switch to dovecot for
      authentification (and also as pop3/imap server ;-)

       

Log in to post a comment.