Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 21 Jul 2003 09:50:17 -0700
From:      "Drew Tomlinson" <drew@mykitchentable.net>
To:        "Hajimu UMEMOTO" <ume@mahoroba.org>
Cc:        freebsd-security@freebsd.org
Subject:   Re: ASMTP setup  on 4.8
Message-ID:  <011501c34fa8$3ed6cb30$6e2a6ba5@lc.ca.gov>
References:  <yge65lzol3s.wl%ume@mahoroba.org><DE9650EA-B944-11D7-A73C-00039375B178@gizmopartners.com><yge4r1jof0q.wl%ume@mahoroba.org><039801c34d60$c3e59cb0$6e2a6ba5@lc.ca.gov><yge1xwnoasy.wl%ume@mahoroba.org><03cf01c34d6a$f3002150$6e2a6ba5@lc.ca.gov> <ygey8yvmu2h.wl%ume@mahoroba.org>

next in thread | previous in thread | raw e-mail | index | archive | help

----- Original Message ----- 
From: "Hajimu UMEMOTO" <ume@mahoroba.org>
To: "Drew Tomlinson" <drew@mykitchentable.net>
Cc: "Chris Boyd" <cboyd@gizmopartners.com>;
<freebsd-security@freebsd.org>
Sent: Friday, July 18, 2003 1:57 PM
Subject: Re: ASMTP setup on 4.8


> Hi,
>
> >>>>> On Fri, 18 Jul 2003 13:26:56 -0700
> >>>>> "Drew Tomlinson" <drew@mykitchentable.net> said:
>
> > Okay, I found the problem, and I've just committed the fix.  Please
> > re-cvsup and try it.
>
> drew> Thanks!!!
>
> You are welcome.
>
> > drew> It's been a few weeks since I looked at it but I recall having
> drew> to create
> > drew> a /usr/local/lib/sasl2/smtpd.conf file.  What should the
correct
> > drew> contents be?
> >
> > Though I have no experience with postfix, I heared that
> > /usr/local/lib/sasl2/smtpd.conf is for postfix.  Are you using
> > sendmail?  If so, it should be /usr/local/lib/sasl2/Sendmail.conf.
>
> drew> Yes, I'm using Postfix.
>
> I see.  Is your postfix able to access /var/state/saslauthd?  It
> should be:
>
> drwxrwx---   2 cyrus  mail   512 Jul 19 04:52 saslauthd

Yes, mine is like this and Postfix is a member of the mail group.

> Old cyrus-sasl2 port made the directory with wrong permission, and
> postfix couldn't access it.  This problem was corrected.  I believe
> postfix user belongs to mail group, so that postfix can access the
> directory.
>
> Oops, I didn't answer your question.  If you want to use saslauthd for
> plain text password, the correct contents of smtpd.conf should be:
>
> pwcheck_method: saslauthd

I have this.  /var/log/maillog shows:

Jul 21 09:34:38 blacklamb postfix/smtpd[66225]: warning: SASL
authentication failure: no user in db
Jul 21 09:34:38 blacklamb postfix/smtpd[66225]: warning: SASL
authentication failure: no secret in database

I have also tried "pwcheck_method: pam" but then /var/log/maillog shows:

Jul 21 09:38:34 blacklamb postfix/smtpd[66269]: warning: SASL
authentication problem: unknown password verifier
Jul 21 09:38:34 blacklamb postfix/smtpd[66269]: warning:
unknown[165.107.42.110]: SASL LOGIN authentication failed

Chris Boyd posted he had success by adding the following to
/etc/rc.conf:

sasl_saslauthd_enable="YES"
sasl_saslauthd_flags="-a getpwent"

Is this preferred over the script in /usr/local/etc/rc.d?

Still confused.

Thanks,

Drew

P.S. Thanks for fixing the man page.  Looks good now!





Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?011501c34fa8$3ed6cb30$6e2a6ba5>