| |||||||||||||||||||||||||||||||
|
> Hi all, > I'm trying to configure postfix in order to accept only authenticated Accept or accept for relaying? > user with cyrus-sasl. In my scenario users must be authenticated against > /etc/shadow using saslauthd. > The saslauthd daemon is properly configured to use shadow mechanism and > serve only plain or login anthentication methods but unfortunately an > error pops out in the log file: > > connect from unknown[192.168.1.65] > Jul 23 18:09:27 skmail2 postfix/smtpd[28635]: warning: SASL > authentication problem: unable to open Berkeley db /etc/sasldb2: No such > file or directory > Jul 23 18:09:27 skmail2 postfix/smtpd[28635]: warning: SASL > authentication problem: unable to open Berkeley db /etc/sasldb2: No such > file or directory > Jul 23 18:09:27 skmail2 postfix/smtpd[28635]: warning: > unknown[192.168.1.65]: SASL LOGIN authentication failed: authentication > failure > Jul 23 18:09:27 skmail2 postfix/smtpd[28635]: lost connection after AUTH > from unknown[192.168.1.65] > Jul 23 18:09:27 skmail2 postfix/smtpd[28635]: disconnect from > unknown[192.168.1.65] Download saslfinger and send "saslfinger -s" output. saslfinger (debugging SMTP AUTH): <http://postfix.state-of-mind.de/patrick.koetter/saslfinger/> p@rick > > The authentication fails and users are not authorized to send emails. > It seams that cyrus is trying to authenticate users against his db file > and not against the system's /etc/shadow as i expect. > > Do you have any clue about this error? Have you ever faced it? > Any idea about the solution? > > This is my software version and configuration: > > Host: > SUSE Linux Enterprise Server 10 SP1 (x86_64) > Linux skmail2 2.6.16.46-0.12-default #1 Thu May 17 14:00:09 UTC > 2007 x86_64 x86_64 x86_64 GNU/Linux > > Software: > postfix v. 2.3.7 > cyrus-sasl-saslauthd 2.1.21-18.4 > > Configuration: > /usr/lib/sasl2/smtpd.conf > pwcheck_method: saslauthd > mech_list: PLAIN LOGIN > > /etc/sysconfig/saslauthd > SASLAUTHD_AUTHMECH=shadow > > > /etc/postfix/main.cf > smtpd_sasl_auth_enable = yes > broken_sasl_auth_clients = yes > smtpd_sasl_local_domain = $myhostname > smtpd_sender_restrictions = > permit_sasl_authenticated,permit_mynetworks,reject > smtpd_recipient_restrictions = > permit_mynetworks,permit_sasl_authenticated,reject_unauth_destination > smtpd_sasl_type = cyrus > smtpd_sasl_path = smtpd > > > Best regards, > Denis Maggiorotto -- The Book of Postfix <http://www.postfix-book.com> saslfinger (debugging SMTP AUTH): <http://postfix.state-of-mind.de/patrick.koetter/saslfinger/>
| ||||||||||||||||||||||||||||||
© 2004-2008 readlist.com