Gentoo Archives: gentoo-server

From: cparpart@×××××××××.net
To: gentoo-server@l.g.o
Subject: [gentoo-server] postfix + pam auth (sasl) ("unknown password verifier"?)
Date: Fri, 27 Aug 2004 11:12:11
Message-Id: 36508.212.202.170.189.1093605102.squirrel@212.202.170.189
1 Hi all,
2
3 I've a strange problem. This worked once, I know, but
4 since a few time it doesn't.
5
6 it actually does not auth any smtp user.
7
8 sws ~ # tail /var/log/messages
9 Aug 27 12:58:10 sws postfix/smtpd[21829]: connect from FOO[1.2.3.4]
10 Aug 27 12:58:10 sws postfix/smtpd[21829]: warning: SASL authentication
11 problem: unknown password verifier
12 Aug 27 12:58:10 sws postfix/smtpd[21829]: warning: SASL authentication
13 failure: Password verification failed
14 Aug 27 12:58:10 sws postfix/smtpd[21829]: warning: FOO[1.2.3.4]: SASL
15 PLAIN authentication failed
16 Aug 27 12:58:10 sws postfix/smtpd[21829]: lost connection after AUTH from
17 FOO[1.2.3.4]
18
19 sws ~ # emerge -pv postfix cyrus-sasl
20 [ebuild R ] mail-mta/postfix-2.1.4 +ipv6 -ldap -mailwrapper -mbox
21 +mysql +pam -postgres +sasl +ssl -vda 6 kB
22 [ebuild R ] dev-libs/cyrus-sasl-2.1.19 -berkdb -debug +gdbm -java
23 -kerberos -ldap -mysql +pam -postgres +ssl -static 0 kB
24
25 sws ~ # cat /etc/sasl/smtpd.conf
26 pwcheck_method:pam
27 mech_list: LOGIN PLAIN
28
29 sws ~ # cat /usr/lib/sasl2/smtpd.conf
30 pwcheck_method:pam
31 mech_list: LOGIN PLAIN
32
33 sws ~ # cat some parts of /etc/postfix/main.cf
34 # --- TLS support
35 smtpd_use_tls = yes
36 smtpd_tls_cert_file = /etc/postfix/server.pem
37 smtpd_tls_key_file = $smtpd_tls_cert_file
38 smtp_tls_note_starttls_offer = yes
39
40 # --- SMTP auth support
41 smtpd_sasl_auth_enable = yes
42 smtpd_sasl_security_options = noanonymous
43 smtpd_sasl_local_domain = $myhostname
44 broken_sasl_auth_clients = yes
45 smtpd_tls_auth_only = no
46
47 smtpd_helo_restrictions =
48 permit_mynetworks, permit_sasl_authenticated,
49 reject_invalid_hostname, reject_unknown_hostname,
50 reject_non_fqdn_hostname, reject
51
52 smtpd_recipient_restrictions = permit_mynetworks, permit_mx_backup,
53 permit_sasl_authenticated, check_relay_domains,
54 reject_non_fqdn_receipient, reject_unauth_destination, reject
55
56 smtpd_client_restrictions = permit_mynetworks,
57 permit_sasl_authenticated
58 # ---- end.
59
60 Does anyone know why this happens?
61
62 btw, why do I have to configure smtpd for sasl in two locations?
63
64 Thanks in advance,
65 Christian Parpart.

Replies

Subject Author
Re: [gentoo-server] postfix + pam auth (sasl) ("unknown password verifier"?) Jose Gonzalez Gomez <jgonzalez@×××××××××××.com>