Gentoo Archives: gentoo-security

From: Joe Strusz <jstrusz@×××××.com>
To: gentoo-security@l.g.o
Subject: Fwd: Re: [gentoo-security] postfix and SASL
Date: Wed, 05 Oct 2005 14:48:41
Message-Id: 6.2.3.4.0.20051005093632.01c6da48@op.oxpub.com
1 What the hell? >> /etc/sysconfig ???
2
3
4 Anyways.. i have those option set in /etc/conf.d/saslauthd and
5 /etc/sasl2/smtpd.conf
6
7
8 still no go
9
10 keeps popping up the damn box
11
12 ill keep pulling my hair out until this is working... youd think this
13 problem would be documented... somewhere
14
15 again, i've scavenged the forums, over and over again, and even
16 googled... im about to say the hell with it, and just make it a damn
17 open relay.
18
19
20 >X-Original-To: jstrusz@×××××.com
21 >Delivered-To: jstrusz@×××××.com
22 >Delivered-To: <gentoo-security@l.g.o>
23 >Date: Wed, 5 Oct 2005 16:32:03 +0200 (CEST)
24 >Subject: Re: [gentoo-security] postfix and SASL
25 >From: "Joerg Mertin" <smurphy@××××××.org>
26 >To: gentoo-security@l.g.o
27 >User-Agent: SquirrelMail/1.4.4
28 >List-Post: <mailto:gentoo-security@l.g.o>
29 >List-Help: <mailto:gentoo-security+help@g.o>
30 >List-Unsubscribe: <mailto:gentoo-security+unsubscribe@g.o>
31 >List-Subscribe: <mailto:gentoo-security+subscribe@g.o>
32 >List-Id: Gentoo Linux mail <gentoo-security.gentoo.org>
33 >X-BeenThere: gentoo-security@g.o
34 >Reply-To: gentoo-security@l.g.o
35 >X-Virus-Scanned: ClamAV scanned @ Stargate
36 >X-MIME-Autoconverted: from quoted-printable to 8bit by
37 >robin.gentoo.org id j95ENo1G014303
38 >X-Virus-Scanned: This message was scanned for viruses by ClamAV.
39 >X-Spam-Status: No, hits=-2.599 tagged_above=-100 required=6.5 tests=AWL,
40 > BAYES_00
41 >X-Spam-Level:
42 >
43 >Hmmm, mine loos like this:
44 >$ cat cat /etc/postfix/sasl/smtpd.conf
45 >pwcheck_method: saslauthd
46 >mech_list: plain login
47 >
48 >also -
49 >$ cat /etc/sysconfig/saslauthd
50 ># $Id: saslauthd.sysconfig,v 1.1 2001/05/02 10:55:48 wiget Exp $
51 ># Authentications mechanism (for list see saslauthd -v)
52 >SASL_AUTHMECH=pam
53 >
54 ># Hostname for remote IMAP server (if rimap auth mech is used)
55 ># Ldap configuration file (if ldap auth mech is used)
56 >SASL_MECH_OPTIONS=
57 >
58 ># Extra options (for list see saslauthd -h)
59 >SASLAUTHD_OPTS=
60 >
61 >I remember having had a glithc with some named-pipe files - e.g.
62 >communication between postfix and saslauthd using different paths for
63 >communication.
64 >
65 >
66 ><quote who="Joe Strusz">
67 > > How would i go about clearing out all the SASL config files, and
68 > > reemerging it?
69 > >
70 > > I tried deleted the /etc/sasl2/smtpd.conf
71 > >
72 > > then i ran emerge -C cyrus-sasl; emerge cyrus-sasl
73 > >
74 > > yet it didn't replace any config files...
75 > >
76 > >
77 > >
78 > >>X-Original-To: jstrusz@×××××.com
79 > >>Delivered-To: jstrusz@×××××.com
80 > >>Delivered-To: <gentoo-security@l.g.o>
81 > >>X-Mailer: QUALCOMM Windows Eudora Version 6.2.3.4
82 > >>Date: Wed, 05 Oct 2005 09:05:33 -0500
83 > >>To: gentoo-security@l.g.o
84 > >>From: Joe Strusz <jstrusz@×××××.com>
85 > >>Subject: Fwd: Re: Fwd: Re: [gentoo-security] postfix and SASL
86 > >>List-Post: <mailto:gentoo-security@l.g.o>
87 > >>List-Help: <mailto:gentoo-security+help@g.o>
88 > >>List-Unsubscribe: <mailto:gentoo-security+unsubscribe@g.o>
89 > >>List-Subscribe: <mailto:gentoo-security+subscribe@g.o>
90 > >>List-Id: Gentoo Linux mail <gentoo-security.gentoo.org>
91 > >>X-BeenThere: gentoo-security@g.o
92 > >>Reply-To: gentoo-security@l.g.o
93 > >>X-Virus-Scanned: This message was scanned for viruses by ClamAV.
94 > >>X-Virus-Scanned: This message was scanned for viruses by ClamAV.
95 > >>X-Spam-Status: No, hits=-1.973 tagged_above=-100 required=6.5 tests=AWL,
96 > >> BAYES_00, RCVD_IN_NJABL_RELAY
97 > >>X-Spam-Level:
98 > >>
99 > >>I ran the saslpasswd2 -c <username> command to no avail... im still
100 > >>receiving the blasted password prompt.
101 > >>
102 > >>I know that sasl uses sasldb2 by default, but i swear i changed that to
103 > >> pam.
104 > >>
105 > >>
106 > >>>X-Original-To: jstrusz@×××××.com
107 > >>>Delivered-To: jstrusz@×××××.com
108 > >>>Delivered-To: <gentoo-security@l.g.o>
109 > >>>Date: Wed, 05 Oct 2005 14:41:51 +0100
110 > >>>From: Jonathan Wright <mail@×××××××××.uk>
111 > >>>User-Agent: Mozilla Thunderbird 1.0.6 (X11/20050822)
112 > >>>X-Accept-Language: en-us, en
113 > >>>List-Post: <mailto:gentoo-security@l.g.o>
114 > >>>List-Help: <mailto:gentoo-security+help@g.o>
115 > >>>List-Unsubscribe: <mailto:gentoo-security+unsubscribe@g.o>
116 > >>>List-Subscribe: <mailto:gentoo-security+subscribe@g.o>
117 > >>>List-Id: Gentoo Linux mail <gentoo-security.gentoo.org>
118 > >>>X-BeenThere: gentoo-security@g.o
119 > >>>Reply-To: gentoo-security@l.g.o
120 > >>>To: gentoo-security@l.g.o
121 > >>>Subject: Re: Fwd: Re: [gentoo-security] postfix and SASL
122 > >>>X-Virus-Scanned: This message was scanned for viruses by ClamAV.
123 > >>>X-Spam-Status: No, hits=-2.599 tagged_above=-100 required=6.5
124 > >>> tests=BAYES_00
125 > >>>X-Spam-Level:
126 > >>>
127 > >>>Joe Strusz wrote:
128 > >>>>OK, well i disabled the smtpd_tl_auth_only line.
129 > >>>>And now whenever i try to connect via say outlook express on a
130 > >>>>client machine...
131 > >>>>I check the box that says, "my outgoing server requires
132 > >>>>authentication", and i do get the password prompt, however
133 > >>>>whichever login/password i try to use it gets rejected, over and
134 > >>>>over and over again...
135 > >>>>any suggestions?
136 > >>>
137 > >>>SASL doesn't use system authentication (such as PAM/LDAP) by
138 > >>>default. It uses it's own password database (similar to the way samba
139 > >>> works).
140 > >>>
141 > >>>Make sure that you run:
142 > >>>
143 > >>>saslpasswd2 -c <username>
144 > >>>
145 > >>>to add the user (and their password) to the SASL authentication
146 > >>> database.
147 > >>>
148 > >>>--
149 > >>> Jonathan Wright ~ mail at djnauk.co.uk
150 > >>> ~ www.djnauk.co.uk
151 > >>>--
152 > >>> 2.6.12-gentoo-r6-djnauk-b2 AMD Athlon(tm) XP 2100+
153 > >>> up 5 days, 5:17, 4 users, load average: 0.47, 0.32, 0.29
154 > >>>--
155 > >>> "The world is not divided into sheeps and goats. Not all things
156 > >>> are black nor all things white. It is a fundamental of taxonomy
157 > >>> that nature rarely deals with discrete categories. Only the
158 > >>> human mind invents categories and tries to force facts into
159 > >>> separated pigeon-holes."
160 > >>>
161 > >>> "The living world is a continuum in each and every one of its
162 > >>> aspects. The sooner we learn this concerning sexual behavior the
163 > >>> sooner we shall reach a sound understanding of the realities of
164 > >>> sex."
165 > >>>
166 > >>> ~ Alfred Kinsey, Sexual Behavior in the Human Male, 1948
167 > >>>--
168 > >>>gentoo-security@g.o mailing list
169 > >>
170 > >>
171 > >>Joe Strusz
172 > >>
173 > >>IT Assistant
174 > >>Oxford Publishing, Inc.
175 > >>307 West Jackson Avenue
176 > >>Oxford, MS 38655-2154
177 > >>800-247-3881
178 > >>662-236-5510x40
179 > >>jstrusz@×××××.com
180 > >>http://www.nightclub.com
181 > >>
182 > >>
183 > >>--
184 > >>gentoo-security@g.o mailing list
185 > >
186 > >
187 > > Joe Strusz
188 > >
189 > > IT Assistant
190 > > Oxford Publishing, Inc.
191 > > 307 West Jackson Avenue
192 > > Oxford, MS 38655-2154
193 > > 800-247-3881
194 > > 662-236-5510x40
195 > > jstrusz@×××××.com
196 > > http://www.nightclub.com
197 > >
198 > >
199 > > --
200 > > gentoo-security@g.o mailing list
201 > >
202 > >
203 >
204 >
205 >--
206 >------------------------------------------------------------------------
207 >| Joerg Mertin : smurphy@××××××.org (Home)|
208 >| in Forchheim/Germany : smurphy@×××××.de (Alt1)|
209 >| Stardust's LiNUX System : |
210 >| Web: http://www.solsys.org |
211 >------------------------------------------------------------------------
212 >PGP Fingerprint: AF0F FB75 997B 025F 4538 5AD6 9888 5D97 170B 8B7A
213 >
214 >
215 >
216 >--
217 >gentoo-security@g.o mailing list
218
219
220 Joe Strusz
221
222 IT Assistant
223 Oxford Publishing, Inc.
224 307 West Jackson Avenue
225 Oxford, MS 38655-2154
226 800-247-3881
227 662-236-5510x40
228 jstrusz@×××××.com
229 http://www.nightclub.com
230
231
232 --
233 gentoo-security@g.o mailing list