Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm trying to configure my postfix server to accept connections from outside mail clients using SASL authentication with dovecot. It was previously setup with cyrus sasl.

However when I try to send mail from another server using Mozilla Thunderbird, I get lines like these in my maillog file:

warning: SASL authentication problem: unable to open Berkeley db /etc/sasldb2: No such file or directory
warning: SASL authentication failure: no secret in database
warning: SASL CRAM-MD5 authentication failed: authentication failure

These are lines in my config file:

smtpd_helo_restrictions =
smtpd_sender_restrictions = reject_unknown_sender_domain

smtpd_recipient_restrictions =
    check_client_access hash:/etc/postfix/pop-before-smtp,

  smtpd_sasl_path = dovecot
  smtpd_sasl_path = private/auth
  smtpd_sasl_auth_enable = yes
  smtpd_sasl_security_options = noplaintext noanonymous
  broken_sasl_auth_clients = yes

I've also checked the config files /usr/lib/sasl/smtpd.conf and /etc/postfix/sasl/smtpd.conf and I have:

mech_list: plain login

I have no idea why postfix keeps giving me the sasldb2 and cram-md5 authentication error. Help much appreciated.

share|improve this question

saslauthd can handle only PLAIN and LOGIN authentication methods but you have disabled plaintext with smtpd_sasl_security_options. Also you have typo in your config - smtpd_sasl_path statement is duplicated, it seems first one should be typed as smtpd_sasl_type instead.

Check for additional details.

share|improve this answer
Thanks. That solved it. I feel like an idiot for missing the typos. I would vote you up but I don't have enough reputation. – JavaDev Apr 11 '11 at 20:13
You can accept his answer, even if you don't have enough rep to upvote it. – Bill Weiss Apr 12 '11 at 13:29

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.