Re: [gentoo-user] POSTFIX and SASL

[Bryan Whitehead]

After spending 5 mins trying to get SASL working myself... I just emerged 
stunnel and switched to simap/spop3... ;)

On Wed, 5 Oct 2005, Joe Strusz wrote:

> Ive read every forum on the site, and even ventured over the Wiki for even
> more redundant reading.  Ive read the entire postfix handbook, and still have
> not found an answer to this problem.  Its been two weeks now I haven't been
> able to send mail from outside the network to non local users.
>
> Heres my /etc/postfix/main.cf:
>
> alias_database = hash:/etc/mail/aliases
> alias_maps = hash:/etc/mail/aliases
> biff = no
> broken_sasl_auth_clients = yes
> command_directory = /usr/sbin
> config_directory = /etc/postfix
> content_filter = smtp-amavis:[127.0.0.1]:10024
> daemon_directory = /usr/lib/postfix
> debug_peer_level = 2
> default_destination_concurrency_limit = 2
> empty_address_recipient = MAILER-DAEMON
> home_mailbox = .maildir/
> html_directory = no
> inet_interfaces = all
> local_destination_concurrency_limit = 2
> mail_owner = postfix
> mailq_path = /usr/bin/mailq
> manpage_directory = /usr/share/man
> mydestination = op, op.$mydomain, $mydomain
> mydomain = mydomain.com
> myhostname = op.mydomain.com
> mynetworks = 192.168.1.0/24, 127.0.0.0/8, *.*.*.*(my WAN ip)
> newaliases_path = /usr/bin/newaliases
> queue_directory = /var/spool/postfix
> queue_minfree = 120000000
> readme_directory = /usr/share/doc/postfix-2.1.5-r2/readme
> sample_directory = /etc/postfix
> sendmail_path = /usr/sbin/sendmail
> setgid_group = postdrop
> smtp_use_tls = yes
> smtpd_data_restrictions = reject_unauth_pipelining
> smtpd_sasl_auth_enable = yes
> smtpd_sasl_local_domain =
> smtpd_sasl_security_options = noanonymous
> smtpd_tls_CAfile = /etc/ssl/postfix/server.pem
> smtpd_tls_cert_file = /etc/ssl/postfix/server.crt
> smtpd_tls_key_file = /etc/ssl/postfix/server.key
> smtpd_tls_loglevel = 3
> smtpd_tls_received_header = yes
> smtpd_tls_session_cache_timeout = 3600s
> smtpd_use_tls = yes
> tls_random_source = dev:/dev/urandom
> unknown_local_recipient_reject_code = 450
> virtual_alias_domains = myvirtual.com
> virtual_alias_maps = hash:/etc/postfix/virtual
>
>
> And heres /etc/sasl2/smtpd.conf:
>
> pwcheck_method: saslauthd
> mech_list: plain login
>
> And heres /etc/conf.d/saslauthd:
>
> #  $Id: saslauthd.sysconfig,v 1.1 2001/05/02 10:55:48 wiget Exp $
> #  Authentications mechanism (for list see saslauthd -v)
> SASL_AUTHMECH=pam
>
>
> #  Hostname for remote IMAP server (if rimap auth mech is used)
> #  Ldap configuration file (if ldap auth mech is used)
> SASL_MECH_OPTIONS=
>
>
> # Extra options (for list see saslauthd -h)
> SASLAUTHD_OPTS=
>
>
> And last but not least, heres a description of the problem...
>
> TLS and everything else works great.  However as soon as I check that little
> box in outlook express that says "my smtp server requires authentication" on
> the client whom worsk out of the office on home internet lines.. the password
> box keeps reappearing, and accepting any passwords... i ran the line
> "saslpasswd2 -c username" to no avail.  Same issue.
>
> Postfix was compiled with SASL support:
>
> [ebuild   R   ] mail-mta/postfix-2.1.5-r2  -ipv6 -ldap -mailwrapper -mbox
> +mysql +pam -postgres +sasl (-selinux) +ssl -vda 0 kB
>
> And when i telnet to 25 and issue the ehlo command, i do get AUTH PLAIN
> lines...
>
> whats going on?
>
> please help
>
> im racking my brains.
>
>
>
>
> Joe Strusz
>
> IT Assistant
> Oxford Publishing, Inc.
> 307 West Jackson Avenue
> Oxford, MS 38655-2154
> 800-247-3881
> 662-236-5510x40
> jstrusz@×××××.com
> http://www.nightclub.com
>
>
>

-- 
Bryan Whitehead
Email:driver@×××××××××.net
-- 
gentoo-user@g.o mailing list