Re: [gentoo-user] Postix+SASL with LDAP

[Leandro Melo de Sales]

2006/7/11, Paulo Roberto Candido dos Santos <zauberschloss@×××××.com>:
> Show us your /etc/sasl2/smtp.conf.
>
> Mine is:
>
> pwcheck_method: authdaemond
> log_level: 3
> mech_list: PLAIN LOGIN
> authdaemond_path: /var/lib/courier/authdaemon/socket
>
> In my case, postfix authenticate on the Courier-imap authdaemond while
> authdaemond authenticate users in a MS AD server.
>
> There should be some way to auth postfix using pam... but I think
> smtpd.conf should be something like:
>
> pwcheck_method:pam
>
> Good Luck
>
> On 7/11/06, Leandro Melo de Sales <leandroal@×××××.com> wrote:
> > Hi,
> >
> >   I configured my PAM (using nsswitch.conf) to auth against a LDAP
> > server. Everything works fine and now I want to setup postifix to
> > permit only authenticated users to send e-mail through my smtp server.
> > But when I try to auth via smtp client, I got the following message on
> > /var/log/message:
> >
> > Jul 11 16:28:04 embedded postfix/smtpd[24105]: <
> > unknown[192.168.1.100]:
> > TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAFASgKAAAADw==
> > Jul 11 16:28:04 embedded postfix/smtpd[24105]:
> > smtpd_sasl_authenticate: decoded response: NTLMSSP
> > Jul 11 16:28:04 embedded postfix/smtpd[24105]: NTLM server step 1
> > Jul 11 16:28:04 embedded postfix/smtpd[24105]: client flags: ffff8207
> > Jul 11 16:28:04 embedded postfix/smtpd[24105]:
> > smtpd_sasl_authenticate: uncoded challenge: NTLMSSP
> > Jul 11 16:28:04 embedded postfix/smtpd[24105]: >
> > unknown[192.168.1.100]: 334
> > TlRMTVNTUAACAAAAOgA6ADAAAAAFggIA6WWAtbNxa0MAAAAAAAAAAAAAAAAAAAAARQBNAEIARQBEAEQARQBEAC4ARQBNAEIARQBEAEQARQBEAC4AVQBGAEMARwAuAEUARABVAC4AQgBSAA==
> > Jul 11 16:28:04 embedded postfix/smtpd[24105]: <
> > unknown[192.168.1.100]:
> > TlRMTVNTUAADAAAAGAAYAGYAAAAYABgAfgAAAAAAAABIAAAADgAOAEgAAAAQABAAVgAAAAAAAACWAAAABYIAAgUBKAoAAAAPbABlAGEAbgBkAHIAbwBDAE8ATQBQAE8AUgAwADYARHEN7mzgGaygXDkCXVzTuqazkUkib2OfybAb9R10AJ/mF/gI2dSKNw0NIFxhMmhx
> > Jul 11 16:28:04 embedded postfix/smtpd[24105]:
> > smtpd_sasl_authenticate: decoded response: NTLMSSP
> > Jul 11 16:28:04 embedded postfix/smtpd[24105]: NTLM server step 2
> > Jul 11 16:28:04 embedded postfix/smtpd[24105]: client user: leandro
> > Jul 11 16:28:04 embedded postfix/smtpd[24105]: warning: SASL
> > authentication problem: unable to open Berkeley db /etc/sasl2/sasldb2:
> > Permission denied
> > Jul 11 16:28:04 embedded postfix/smtpd[24105]: warning: SASL
> > authentication failure: no secret in database
> > Jul 11 16:28:04 embedded postfix/smtpd[24105]: warning:
> > unknown[192.168.1.100]: SASL NTLM authentication failed
> > Jul 11 16:28:04 embedded postfix/smtpd[24105]: >
> > unknown[192.168.1.100]: 535 Error: authentication failed
> > Jul 11 16:28:04 embedded postfix/smtpd[24105]: <
> > unknown[192.168.1.100]: AUTH NTLM
> > Jul 11 16:28:04 embedded postfix/smtpd[24105]:
> > smtpd_sasl_authenticate: sasl_method NTLM
> > Jul 11 16:28:04 embedded postfix/smtpd[24105]:
> > smtpd_sasl_authenticate: uncoded challenge:
> > Jul 11 16:28:04 embedded postfix/smtpd[24105]: > unknown[192.168.1.100]: 334
> >
> >
> > Any clue?
> >
> > --
> > Leandro Melo de Sales.
> > Computer Science MSc Candidate
> > Laboratório de Sistemas Distribuídos - lsd.ufcg.edu.br
> > Laboratório de Computação Pervasiva - embedded.ufcg.edu.br
> > Universidade Federal de Campina Grande - UFCG
> >
> > --
> > gentoo-user@g.o mailing list
> >
> >
>
> --
> gentoo-user@g.o mailing list
>
>


Hi... my /etc/sasl2/smtpd.conf has the following:

pwcheck_method:pam

Since my system in already configured to authenticate against a LDAP
server via nsswitch.conf.

Any other clue?

Leandro

-- 
gentoo-user@g.o mailing list