saslauthd not working

[Denis Ford]

Hello,

I've got a fresh installation of Fedora Core 1, with all packages updated
from the dulug mirror.  I'm trying to get SASL/Pam authentication set up for
Postfix, according to the README in the postfix docs
(/usr/share/doc/postfix-2.0.11/README-Postfix-SASL-RedHat.txt) .  I've gone
through all the steps, but it appears that saslauthd isn't working right:

$ /usr/sbin/testsaslauthd -u myuser -p mypasswd
0: NO "authentication failed"

I've confirmed that saslauthd is running, and as instructed,
/etc/sysconfig/saslauthd is set to MECH=pam

Any suggestions?

Thanks,
Denis

[David Cary Hart]

On Sat, 2004-01-10 at 14:13, Denis Ford wrote:
>  Hello,
>  
>  I've got a fresh installation of Fedora Core 1, with all packages updated
>  from the dulug mirror.  I'm trying to get SASL/Pam authentication set up for
>  Postfix, according to the README in the postfix docs
>  (/usr/share/doc/postfix-2.0.11/README-Postfix-SASL-RedHat.txt) .  I've gone
>  through all the steps, but it appears that saslauthd isn't working right:
>   
Forget the RPM. Get the latest source from Wietse's site and read the
SASL README. You need to compile it in.

I have it working only after recitations from the Upanishads, the Talmud
and Martha Stewart's biography. "Eye of newt . . . "


>  $ /usr/sbin/testsaslauthd -u myuser -p mypasswd
>  0: NO "authentication failed"
>  
>  I've confirmed that saslauthd is running, and as instructed,
>  /etc/sysconfig/saslauthd is set to MECH=pam
>  
>  Any suggestions?
>  
>  Thanks,
>  Denis 
                               ---------
            Quality Management - A Commitment to Excellence

[Denis Ford]

From: "David C. Hart" <dch(a)TQMcube.com&gt;
Sent: Saturday, January 10, 2004 2:34 PM

On Sat, 2004-01-10 at 14:13, Denis Ford wrote:
> > Hello,
> >
> > I've got a fresh installation of Fedora Core 1, with all packages updated
> > from the dulug mirror.  I'm trying to get SASL/Pam authentication set up
for
> > Postfix, according to the README in the postfix docs
> > (/usr/share/doc/postfix-2.0.11/README-Postfix-SASL-RedHat.txt) .  I've
gone
> > through all the steps, but it appears that saslauthd isn't
> working right:
> > 
> Forget the RPM. Get the latest source from Wietse's site and read
> the
> SASL README. You need to compile it in. 
> I have it working only after recitations from the Upanishads, the
> Talmud
> and Martha Stewart's biography. "Eye of newt . . . " 
Yikes.  That was enough to lose my nerve -- I have sendmail up with AUTH
working easily enough:
http://www.simpaticus.com/linux/sendmail-smtp-auth-howto.php

Hint - remove p as one of the confAUTH options.

[Alexander Dalloz]

Am Sa, den 10.01.2004 schrieb Denis Ford um 22:02:

[ snip ]

>  Yikes.  That was enough to lose my nerve -- I have sendmail up with
> AUTH
>  working easily enough:
>  http://www.simpaticus.com/linux/sendmail-smtp-auth-howto.php
>  
>  Hint - remove p as one of the confAUTH options. 
Instead of activating plain password authentication I would recommend to
let "p" active and additional configure STARTTLS at least for
PLAIN/LOGIN AUTH.

Alexander


-- 
Alexander Dalloz | Enger, Germany
PGP key valid: made 13.07.1999
PGP fingerprint: 2307 88FD 2D41 038E 7416  14CD E197 6E88 ED69 5653

[Leonard den Ottolander]

Hello Denis,

>  Yikes.  That was enough to lose my nerve -- I have sendmail up with
> AUTH
>  working easily enough:
>  http://www.simpaticus.com/linux/sendmail-smtp-auth-howto.php 
Just a question: Against what do you want to authenticate? The local user 
database? Or a different database specifically for mail users? In the 
latter case you could use sasldb2, in which case you do not need saslauthd.

I recently configured this on SUSE, but I am not sure if the Fedora rpm's 
(postfix and cyrus-saslare functionaly the same. Assuming they are these 
are the relevant postfix configuration options:

# smtpd_sasl_auth_enable also necessary for sasldb2
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
# Use smtpd_sasl_local_domain as the domain for users in the sasldb2
smtpd_sasl_local_domain = $myhostname
# For Outlook Express 4 and Exchange 5
broken_sasl_auth_clients = yes
smtpd_recipient_restrictions = permit_mynetworks, \
permit_sasl_authenticated, check_relay_domains
# smtp options are for outgoing connections
smtp_sasl_auth_enable = no
smtp_sasl_password_maps =
smtp_sasl_security_options =

Bye,
Leonard.

--
mount -t life -o ro /dev/dna /genetic/research

[Bevan C. Bennett]

David C. Hart wrote:
>  On Sat, 2004-01-10 at 14:13, Denis Ford wrote:
> >I've got a fresh installation of Fedora Core 1, with all packages updated
> >from the dulug mirror.  I'm trying to get SASL/Pam authentication set up for
> >Postfix, according to the README in the postfix docs
> >(/usr/share/doc/postfix-2.0.11/README-Postfix-SASL-RedHat.txt) .  I've gone
> >through all the steps, but it appears that saslauthd isn't working right: 
>  
>  Forget the RPM. Get the latest source from Wietse's site and read the
>  SASL README. You need to compile it in.
>  
>  I have it working only after recitations from the Upanishads, the Talmud
>  and Martha Stewart's biography. "Eye of newt . . . " 
The above poster exaggerates, postfix and sasl-auth appear to work just 
fine using the out-of-the-box RPMs.

Your problem, it appears, rests with saslauthd rather than postfix 
proper (since even the test authentication fails).

Where is your test user's authentication information stored? (local 
account? LDAP? NIS?) Can that user login on the system? Can they su?

. . . and Re: saslauthd not working

[David Cary Hart]

Sorry. Also, the only thing that usually works is auxprop.

On Sat, 2004-01-10 at 14:13, Denis Ford wrote:
>  Hello,
>  
>  I've got a fresh installation of Fedora Core 1, with all packages updated
>  from the dulug mirror.  I'm trying to get SASL/Pam authentication set up for
>  Postfix, according to the README in the postfix docs
>  (/usr/share/doc/postfix-2.0.11/README-Postfix-SASL-RedHat.txt) .  I've gone
>  through all the steps, but it appears that saslauthd isn't working right:
>  
>  $ /usr/sbin/testsaslauthd -u myuser -p mypasswd
>  0: NO "authentication failed"
>  
>  I've confirmed that saslauthd is running, and as instructed,
>  /etc/sysconfig/saslauthd is set to MECH=pam
>  
>  Any suggestions?
>  
>  Thanks,
>  Denis 
                               ---------
            Quality Management - A Commitment to Excellence

[Casper Pedersen]

>  $ /usr/sbin/testsaslauthd -u myuser -p mypasswd
>  0: NO "authentication failed"
>   
Create smtpd.conf in /usr/lib/sasl2 and /usr/lib/sasl with this:
pwcheck_method: saslauthd
mech_list: plain login

And it should work.

Regards/Casper

-- 
GPG Public key is available from: http://www.keyserver.net/
Fingerprint = 56ED 74A4 7B00 20E2 B493 0C1A 6B4E BF8F A086 FE57

[Nalin Dahyabhai]

On Sat, Jan 10, 2004 at 02:13:58PM -0500, Denis Ford wrote:
>  I've got a fresh installation of Fedora Core 1, with all packages
> updated
>  from the dulug mirror.  I'm trying to get SASL/Pam authentication set up for
>  Postfix, according to the README in the postfix docs
>  (/usr/share/doc/postfix-2.0.11/README-Postfix-SASL-RedHat.txt) .  I've gone
>  through all the steps, but it appears that saslauthd isn't working right:
>  
>  $ /usr/sbin/testsaslauthd -u myuser -p mypasswd
>  0: NO "authentication failed"
>  
>  I've confirmed that saslauthd is running, and as instructed,
>  /etc/sysconfig/saslauthd is set to MECH=pam
>  
>  Any suggestions? 
When you run testsaslauthd, be sure to use the '-s' flag to set a
service name -- this in turn is used when calling into the PAM library,
so it should be the name of a valid configuration in /etc/pam.d (the
default appears to be "imap").

If that doesn't get things running, the logs in /var/log/messages should
shed some light on things.

HTH,

Nalin