Simple Authentication and Security Layer (SASL) is a framework for authentication and data security in Internet protocols.

learn more… | top users | synonyms

1
vote
0answers
10 views

How to ensure encrypted OpenLDAP sessions using SASL/GSSAPI

I am running OpenLDAP 2.4 on a Debian jessie system. Clients typically connect to this LDAP server over port 389 using SASL/GSSAPI with our Kerberos infrastructure. When a client connects using SASL/...
0
votes
1answer
30 views

Posfix: SASL authentication failed (unbuntu/office 365)

I'm unable to get postfix to work with our office 365 mail. here's the main.cf file: smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu) biff = no append_dot_mydomain = no readme_directory = no ...
0
votes
0answers
14 views

How can you enable SASLv2 and STARTTLS on a VPS? [closed]

I have tried following this guide for setting up phpbb3 email, but I got stuck on the step for enabling SASLv2 and STARTTLS. I'm not sure how to complete that step without detailed instructions. Can ...
0
votes
1answer
19 views

How to restrict SMTP login to its own address in sasldb2? [duplicate]

I'm using sasldb2 (without saslauthd) for SMTP authentication with Postfix. To create a new user, I run saslpasswd2 -u example.com mail which creates a login mail@example.com. However, using these ...
0
votes
0answers
46 views

Dovecot/Postfix mail server SASL: Connect to private/auth failed

Trying to get this mail sever up has eaten up a good chunk of 2 days and I've made some headway but this specific error has persisted throughout. I'm using a Debian server with Postfix + Dovecot + ...
1
vote
1answer
43 views

Postfix + SASL using wrong query to authenticate

I recently set up postfix + dovecot on a aws ec2 instance following this guide: http://flurdy.com/docs/postfix/#config-secure-auth Currently I'm stuck with SASL. The SQL query doesn't seem to be ...
2
votes
0answers
25 views

PAM vs /etc/shadow in Dovecot SASL configuration - Security differences?

I set up a server with Postfix SMTP auth through Dovecot SASL. However, it was not possible to get the PAM authentification working as standard out of the box. So more by chance, I changed it to ...
0
votes
1answer
32 views

Postfix: Unverified Client host rejected / SASL Logged In

Running Ubuntu, iRedMail, Mysql, Amavis, Spamassassin, Dovecot, Postfix Recently had some unauthorized usage of a postfix server internally from a malware deprecated staging server. I worked on ...
2
votes
1answer
68 views

Bad search filter - postfix, OpenLDAP, Saslauthd

I am trying to setup a mail server on Debian Jessie and have come across a problem that's doing my head in. When trying to access OpenLDAP through saslauthd via the command testsaslauthd -u user1 -p ...
1
vote
0answers
39 views

Saslauthd LDAP errors even though it seems to work [closed]

I have a subversion server (svnserve) setup on my Ubuntu. In my svnserve.conf I setup SASL authentication: .... [sasl] ### This option specifies whether you want to use the Cyrus SASL ### library ...
2
votes
1answer
37 views

NO [ALERT] Unexpected response from remote authentication server

is what I see when I run testsaslauthd inside an strace socket(PF_LOCAL, SOCK_STREAM, 0) = 3 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/saslauthd/mux"}, 110) = 0 writev(3, [{"\0\34a....
0
votes
1answer
24 views

ubuntu - Postfix mail sent from server not logged in mail.log or phpmail.log

I am having server which hosts 70-80 websites and also using relay server for smtp using postfix using mysql database for domain and email boxes. I have also activated the phpmail.log for sendmail. ...
1
vote
1answer
60 views

saslauthd running in segfault after some time

I'm using postfix with courier and mysql for authentication. Lately I have some segmentation faults, which causes sasl deamon to crash. It seems, the have something to do with dictionary attacks on ...
0
votes
1answer
25 views

sasl_username does not appear in my maillog logfile

I've got some servers that do not log the user when processing mail. Packages involved are postfix 2:2.11.5-centos5.15072015 and cyrus-sasl-2.1.22-7.el5_8.1.x86_64 There is no sasl_username on the ...
1
vote
1answer
62 views

Fail2ban bans me after sending successful 5 mails

Dear all I am using Fail2Ban v0.8.13 on CentOS 6 system in order to protect my Postfix servers. Basically it works so after 5 wrong login attempts on SMTP I get banned. Fail2Ban Jail conf [sasl-...
0
votes
0answers
15 views

What happens using SASL plaintext on an openldap server on the server side?

I have an OpenLDAP server and I use SASL with the login authentication mechanism. My user passwords are securely hashed and stored within my LDAP database. I understand that the login credentials are ...
0
votes
0answers
77 views

Postfix SASL server said: 535 5.7.8 Error: authentication failed:

I have a mail server (running on Ubuntu server 12.04) that worked fine until a couple of months ago. After I forgot to renew my cacert.org free certificate, I created a new certificate and loaded it ...
0
votes
0answers
78 views

Postfix/Dovecot Mail: fatal: no SASL authentication mechanisms

I'm getting this issue when trying to setup Postfix/Dovecot to work on my Ubuntu server, 15.10. Followed this guide to try to setup the server, worked in the past. However, trying to upgrade to 15.10 ...
0
votes
0answers
68 views

issues with svnserve using ldap and sasl

I am trying to setup SVN's svnserve server using ldap and sasl to authenticate users and to encrypt data but I come across the following issues: /var/log/messages error or warning when I execute ...
5
votes
3answers
605 views

How to get SASL authentication to work with DIGEST-MD5 for OpenLDAP?

I'm setting up OpenLDAP slapd on Ubuntu 14.04 Trusty Tahr. I want certain instances (replication etc.) that aren't users to be able to login via SASL using DIGEST-MD5 mechanism. Unlike users, they ...
3
votes
0answers
347 views

Configure mailgun as relayhost on top of existing postfix server already using sasl

I might be barking at the wrong tree completely here, but I'll ask anyway. I've followed a tutorial to setup a Mailserver on ubuntu 14.04 with postfix, dovecot and mysql. Now I have setup mailgun to ...
0
votes
1answer
35 views

Grant Kerberos Ticket on successfull authentication against third party password store

I am currently building a system where I would like to deploy Kerberos. However my external constraints on the user management do not allow me to authenticate the users against Kerberos itself. I do ...
0
votes
1answer
240 views

“SASL authentication failed” when authenticating to receiving mail server

Some recipients do not receive emails from my Postfix 2.11.0 server. Their servers reject my SASL connections with errors like 535 5.7.8 Error: authentication failed: authentication failure and 535 5....
0
votes
1answer
98 views

Users allowed to send mail using postfix

I've installed postfix and opendkim on my ubuntu server, intending to use this server as a private relay for an application to send "activation" emails to new users. I configured SASL authentication ...
1
vote
0answers
23 views

Authnetication failure with postfix and sasl using sasldb

I'm really not sure what my issue is. I've checked several guides, and I am sure I have set this up correctly, including config fails, restarting the service, permissions etc. OS is Ubuntu Server. ...
0
votes
1answer
56 views

saslauthd authentication fails for AD

I cannot get saslauthd to work with Active Directory. Here is /etc/saslauthd.conf: ldap_use_sasl: yes ldap_servers: ldap://ad.example.com ldap_search_base: OU=Users,DC=example,DC=com ldap_bind_dn: CN=...
0
votes
0answers
12 views

What is cmusaslsecretuserPassword and how to get rid of it?

I am running a Cyrus IMAP server which uses the SASL authentification. sasldblistusers2 shows following entries: myuser@alpha.example.com: cmusaslsecretcmusaslsecretcmusaslsecretuserPassword myuser@...
0
votes
2answers
400 views

Dovecot doesn't create /var/spool/postfix/private/auth

I'm moving an Ubuntu 14.04 postfix mail installation from one machine to another. The current setup works fine pretty much with Ubuntu's default postfix and dovecot setup so that users can use SMTP ...
0
votes
1answer
91 views

openldap, crypt passwords do not work for sasl

I've been working on migrating an existing server cluster to using openldap for user/password management. I've run into a problem though - I do not have access to plain text passwords and all SASL ...
3
votes
0answers
81 views

Low Entropy on Container

I am thinking my entropy level may be low? cat /proc/sys/kernel/random/entropy_avail I am around 132-178 on average. pool size is default 4096 (this is a container on a virtualizer by the way) I ...
0
votes
1answer
183 views

slapd running fine and listening on port 389, but still can't contact

Here is my ldapsearch command with debug (I've masked my real IP address): $ sudo /usr/local/bin/ldapsearch -H ldap://99.99.99.99 -b dc=my-domain,dc=com -x -d -1 ldap_url_parse_ext(ldap://99.99.99.99)...
0
votes
1answer
175 views

SASL Auth against LDAP

So I am running into a whirlwind of issues with my cyrus install. I am setting up a multi-domain kolab groupware solution. I am on centos 6.7 I am getting this flooding my error logs when I try to ...
2
votes
1answer
365 views

Postfix - sender dependent relaying for multiple domains

I have spent the last couple of days going through SO questions and the Postfix documentation but have not succeeded in figuring out what I'm doing wrong. My situation is as follows: I have a server ...
0
votes
2answers
4k views

“503 5.5.1 Error: authentication not enabled” when trying to connect to my postfix server remotley

I have the following: postfix-2.10.1-6.el7.x86_64 cyrus-sasl-lib-2.1.26-17.el7.x86_64 cyrus-sasl-plain-2.1.26-17.el7.x86_64 cyrus-sasl-2.1.26-17.el7.x86_64 my postconf -n is: alias_database = ...
-1
votes
2answers
2k views

postfix error: 535 5.7.8 Error: authentication failed: authentication failure

I need to connect to Dyn mail relay and I'm using their KB. I'm trying to connect to my postfix server with telnet to port 25. This is the postconf -n alias_database = hash:/etc/aliases alias_maps =...
2
votes
1answer
87 views

How can I install libmemcached on Openshift with sasl support?

I need libmemcached with sasl support to use Memcached Cloud cartridge on Openshift Online. I doing next: 1) Install sasl. curl -LO ftp://ftp.cyrusimap.org/cyrus-sasl/cyrus-sasl-2.1.26.tar.gz tar --...
2
votes
1answer
134 views

dovecot/ postfix make me two different folder same user (user; user@domain)

I had some problem with the Dovecot/Postfix/LDAP/SASL config files: The LDAP query, SASL config its work but my problem is postfix and the dovecot: When i first login the outlook/thunderbird/etc.. it ...
1
vote
0answers
56 views

Mail Server Memory buffer error

From time to time, my mail server stops sending any new mails. When this happened, I find the below error log, Jun 22 23:10:18 myserver saslauthd[3967]: DEBUG: auth_pam: pam_authenticate failed: ...
0
votes
1answer
105 views

What is a saslpasswd2 domain?

What does saslpasswd2 do, in particular, what is the domain option for: -u domain use domain for user domain (realm). UPDATE: Suppose, I: smtp login to smtp.mydomain.com, as myself@...
1
vote
1answer
312 views

Dovecot reports no SASL authentication mechanisms

On my way to setup a mail server with Postfix and Dovecot on Ubuntu, I can now send mails to other domains. However, I cannot receive from others. In the logs it reads Jun 14 09:34:35 postfix/smtpd[...
1
vote
1answer
583 views

Postfix E-Mail transfer doesn`t work - SASL Authentification failed

I want to use the postfix MTA to send E-mails from my Nagios monitoring system to the contacts. However, i get the follwing error, if a mail will be send May 28 16:20:29 op5-system postfix/qmgr[1932]:...
-2
votes
3answers
430 views

How to force Postfix SMTP to use AUTH (SASL?) and reject anonymous connections? [closed]

The following snippet has been added to the main.cf file of postfix: smtpd_sasl_auth_enable = yes smtpd_sasl_security_options = noanonymous smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd ...
0
votes
1answer
509 views

Why am I getting a 'fatal: SASL library initialization'

If I turn on smtp_sasl_auth_enable=yes <- yes I get this set of warnings and a fatal for SASL. I can not see why it's also looking for cyrus - which is not compiled in. postfix/smtp[87056]: ...
3
votes
1answer
482 views

Dovecot says: “Requested CRAM-MD5 scheme, but we have only CRYPT” yet CRAM-MD5 is available

Following upgrade of Fedora Core 16 to Fedora Core 21, the new Dovecot installation isn't authenticating correctly and it's not at all clear why. We have 50+ email accounts served by this server, so ...
6
votes
2answers
282 views

Postfix deny relay for some virtual users

I'm using Postfix as MTA and relay. Users that wish to send e-mail from a remote system authenticates and Postfix hands that to Dovecot, and this works well. But how can I limit which users can use ...
2
votes
1answer
122 views

searching for the correct way to compile postfix

I am experiencing issues while compiling latest version of postfix from source code. At the moment I'm trying to compile version 3 because Debian 7 and latest Ubuntu 14,10 (version 2,9 and 2,11 for ...
0
votes
1answer
246 views

Mongodb + Kerberos BadValue SASL mechanism GSSAPI is not supported

I am trying to run an instance of mongodb with the authentication mechanism GSS-API. This is the command: mongod --dbpath /home/ec2-user/db/node2/data --auth --setParameter authenticationMechanisms=...
-1
votes
1answer
4k views

535 5.7.8 Error: authentication failed: no mechanism available [duplicate]

I'm using Debian 7, with postfix/courier. When I attempt to login using SMTP I get the following error telnet localhost 25 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. 220 ...
2
votes
0answers
177 views

Dovecot: using a separate passdb per service

Situation: one front-facing server running Dovecot as IMAP/POP3/ManageSieve proxy, a mixture of IMAP servers (Dovecot, Exchange, ...) in the back-end. Dovecot's passdb does lookups against MySQL which ...
2
votes
1answer
323 views

SASL PLAIN authenticating with primary domain, but not with virtual domain

Postfix + dovecot and sasl. Works so far with 1 domain. Added a virtual domain. Incoming mail for this works. Outgoing however has SASL authentication failing. Why does it fail I don't know. /etc/...