1 |
Check your auth.log in /var/log... does it tell you anything? You may |
2 |
(probably) will have to add a debug flag in your /etc/pam.d/<whatever> |
3 |
file to really get any useful information out of it. |
4 |
|
5 |
-Mike |
6 |
|
7 |
On 7/19/06, Leandro Melo de Sales <leandroal@×××××.com> wrote: |
8 |
> Hi! I'm trying to setup postfix with authentication. I have |
9 |
> PAM/NSSwitch configured to use LDAP backend. I also installed |
10 |
> cyrus-sasl, but when I test authentication I got some errors. What I'm |
11 |
> doing wrong? Some relevant information: |
12 |
> |
13 |
> /etc/sasl2/smtpd.conf |
14 |
> |
15 |
> pwcheck_method:pam |
16 |
> |
17 |
> --------------------------------------- |
18 |
> |
19 |
> telnet port 25: |
20 |
> |
21 |
> embedded postfix # telnet localhost 25 |
22 |
> Trying 127.0.0.1... |
23 |
> Connected to localhost. |
24 |
> Escape character is '^]'. |
25 |
> 220 Servidor de E-Mail Embedded |
26 |
> EHLO mydomain.com |
27 |
> 250-embedded.mydomain.com |
28 |
> 250-PIPELINING |
29 |
> 250-SIZE 10240000 |
30 |
> 250-VRFY |
31 |
> 250-ETRN |
32 |
> 250-STARTTLS |
33 |
> 250 8BITMIME |
34 |
> quit |
35 |
> 221 Bye |
36 |
> Connection closed by foreign host. |
37 |
> |
38 |
> -------------------------------------------- |
39 |
> |
40 |
> log: |
41 |
> |
42 |
> Jul 19 11:20:27 embedded postfix/smtpd[31410]: < |
43 |
> unknown[192.168.1.100]: |
44 |
> TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAFASgKAAAADw== |
45 |
> Jul 19 11:20:27 embedded postfix/smtpd[31410]: |
46 |
> smtpd_sasl_authenticate: decoded response: NTLMSSP |
47 |
> Jul 19 11:20:27 embedded postfix/smtpd[31410]: NTLM server step 1 |
48 |
> Jul 19 11:20:27 embedded postfix/smtpd[31410]: client flags: ffff8207 |
49 |
> Jul 19 11:20:27 embedded postfix/smtpd[31410]: |
50 |
> smtpd_sasl_authenticate: uncoded challenge: NTLMSSP |
51 |
> Jul 19 11:20:27 embedded postfix/smtpd[31410]: > |
52 |
> unknown[192.168.1.100]: 334 |
53 |
> TlRMTVNTUAACAAAAOgA6ADAAAAAFggIAxSfRzXMryGYAAAAAAAAAAAAAAAAAAAAARQBNAEIARQBEAEQARQBEAC4ARQBNAEIARQBEAEQARQBEAC4AVQBGAEMARwAuAEUARABVAC4AQgBSAA== |
54 |
> Jul 19 11:20:27 embedded postfix/smtpd[31410]: < |
55 |
> unknown[192.168.1.100]: |
56 |
> TlRMTVNTUAADAAAAGAAYAI4AAAAYABgApgAAACgAKABIAAAADgAOAHAAAAAQABAAfgAAAAAAAAC+AAAABYIAAgUBKAoAAAAPZQBtAGIAZQBkAGQAZQBkAC4AdQBmAGMAZwAuAGUAZAB1AC4AYgByAGwAZQBhAG4AZAByAG8AQwBPAE0AUABPAFIAMAA2AFhBruTJ7QP1D2kjfvHaMU0IHH0O2a0i6qfimYU8bx0zsRE2W3N/+wpohdPaH5f26Q== |
57 |
> Jul 19 11:20:27 embedded postfix/smtpd[31410]: |
58 |
> smtpd_sasl_authenticate: decoded response: NTLMSSP |
59 |
> Jul 19 11:20:27 embedded postfix/smtpd[31410]: NTLM server step 2 |
60 |
> Jul 19 11:20:27 embedded postfix/smtpd[31410]: client user: leandro |
61 |
> Jul 19 11:20:27 embedded postfix/smtpd[31410]: client domain: |
62 |
> embedded.ufcg.edu.br |
63 |
> Jul 19 11:20:27 embedded postfix/smtpd[31410]: warning: SASL |
64 |
> authentication failure: no secret in database |
65 |
> Jul 19 11:20:27 embedded postfix/smtpd[31410]: warning: |
66 |
> unknown[192.168.1.100]: SASL NTLM authentication failed |
67 |
> Jul 19 11:20:27 embedded postfix/smtpd[31410]: > |
68 |
> unknown[192.168.1.100]: 535 Error: authentication failed |
69 |
> Jul 19 11:20:27 embedded postfix/smtpd[31410]: < |
70 |
> unknown[192.168.1.100]: AUTH NTLM |
71 |
> Jul 19 11:20:27 embedded postfix/smtpd[31410]: |
72 |
> smtpd_sasl_authenticate: sasl_method NTLM |
73 |
> Jul 19 11:20:27 embedded postfix/smtpd[31410]: |
74 |
> smtpd_sasl_authenticate: uncoded challenge: |
75 |
> Jul 19 11:20:27 embedded postfix/smtpd[31410]: > unknown[192.168.1.100]: 334 |
76 |
> |
77 |
> main.cf: |
78 |
> |
79 |
> smtpd_sasl_auth_enable = yes |
80 |
> smtpd_sasl_security_options = noanonymous |
81 |
> smtpd_sasl_local_domain = $myhostname |
82 |
> broken_sasl_auth_clients = yes |
83 |
> smtpd_recipient_restrictions = permit_sasl_authenticated, |
84 |
> permit_mynetworks, check_relay_domains |
85 |
> -- |
86 |
> gentoo-server@g.o mailing list |
87 |
> |
88 |
> |
89 |
|
90 |
|
91 |
-- |
92 |
________________________________ |
93 |
Michael E. Crute |
94 |
http://mike.crute.org |
95 |
|
96 |
I may not have gone where I intended to go, but I think I have ended |
97 |
up where I intended to be. --Douglas Adams |
98 |
-- |
99 |
gentoo-server@g.o mailing list |