Simple Authentication and Security Layer (SASL) is a framework for authentication and data security in Internet protocols.

learn more… | top users | synonyms

1
vote
1answer
2k views

Openldap/Sasl/GSSAPI on Debian: Key table entry not found

The goal: to make an OpenLDAP server to authenticate using Kerberos V via GSSAPI Setup: several virtual machines running on freshly installed/updated Debian Squeeze A master KDC server ...
1
vote
1answer
189 views

Does Cyrus SASL support userdb authentication?

I'm not finding anything that indicates it doesn't; I need to be able to authenticate virtual users. If not do I need to start using dovecot?
2
votes
4answers
338 views

Is SASL not supported in Postfix on FreeBSD?

I'm managing a mail server that was set up on FreeBSD that runs Postfix and Dovecot. When I type postconf -a, nothing is returned. As I understand it, this command should tell me if SASL is supported ...
0
votes
2answers
2k views

Postfix - Is there a way to reject invalid authentication (even for mynetworks)?

I got a working postfix/dovecot configuration running with the following rule for recipients rejection: smtpd_recipient_restrictions = permit_sasl_authenticated,permit_mynetworks,reject This works ...
0
votes
2answers
1k views

How do I get php-memcached extension to work with SASL on RHEL6

I have RHEL6.1 with php. I've installed libmemcached-1.0.2 from src.rpm and compiled php-memcached 2.0.0b2. If I try to setSaslAuthData('user','pass') and write something to memcached (Couchbase ...
4
votes
2answers
2k views

“No worthy mechs found” when trying to relay email to Gmail using Postfix

I've been trying to configure email to forward to Gmail, using Postfix to relay email to smtp.gmail.com. However, I'm failing to get it to authenticate with smtp.gmail.com, which is a rather vital ...
1
vote
3answers
5k views

Postfix rejecting mail from authenticated clients

I am trying to configure Postfix so that it would accept mail from authenticated clients outside $mynetworks. When I try to send a test email from my iPhone, which is configured to use port 25, SSL ...
1
vote
1answer
2k views

Can't login to Cyrus IMAP with domain name in username, can if I don't qualify with domain name

I'm trying to install Cyrus with SASL for authentication. I'm struggling getting logins to work properly though. I'm trying to setup virtual hosting, as we'll have several domains worth of email on ...
0
votes
1answer
409 views

pam_ldap, where is the filter set?

A while ago I asked a question about this same issue already (Cyrus on CentOS with sasl / pam / ldap), and I came a bit further. The Bind DN is no longer empty; LDAP works with all apps except imap. ...
0
votes
3answers
1k views

“SQL engine 'mysql' not supported”

I'm having some trouble with postfix and SASL when using a MySQL backend on an Ubuntu server. auth.log Oct 12 13:25:21 lvps92-60-121-255 postfix/smtpd[28508]: sql auxprop plugin using mysql engine ...
6
votes
1answer
4k views

postfix sasl “cannot connect to saslauthd server: No such file or directory”

I try to setup postfix with smtp authentication. I want to use /etc/shadow as my realm Unfortunately I get a "generic error" when i try to authenticate # nc localhost 25 220 mail.foo ESMTP Postfix ...
1
vote
0answers
346 views

OpenLDAP, SASL and non-cleartext password storage

I'm working on a setup where postfix and cyrus-imap do proxy authorization against openldap (my setup is here http://1nw.eu/!cD ). I love this solution, it's a lot more elegant that using saslauthd. ...
0
votes
1answer
314 views

How to log saslauthd crashes

Is it possible to log saslauthd crash? I had some crashes recently and there is messages that can't be found saslauth mechanisms.
1
vote
2answers
2k views

How do I use ldapsearch with a cross-realm ticket?

kinit user@DOMAIN.TLD klist -afe Ticket cache: FILE:/tmp/krb5cc_1000 Default principal: user@DOMAIN.TLD Valid starting Expires Service principal 08/04/11 13:14:53 08/05/11 ...
0
votes
2answers
3k views

Cyrus on CentOS with sasl / pam / ldap

SASL/PAM/LDAP is driving me crazy... that's what I read a lot when googling for problems in this area, and what I experience myself :-S I'm trying to get Cyrus imap working for virtual hosting on ...
0
votes
1answer
1k views

Postfix: 5.7.1 Relay access denied

I hope I can become help here with my problem. I can't send E-Mails. I get only the error message: 5.7.1 Relay access denied my postconf: append_dot_mydomain = no biff = no ...
2
votes
2answers
2k views

FreeBSD: OpenLDAP, SASL, and GSSAPI

I've run into some problems getting OpenLDAP on FreeBSD (8.2-STABLE) to authenticate using Kerberos tickets. I hope I've just had a brain glitch, so please feel free to let me know that I've missed ...
0
votes
2answers
419 views

Postfix, SASL, MySQL Issues

Ok, a recent Gentoo upgrade for Postfix/Cyrus SASL/MySQL packages broke something. I'm at my wits end, no idea what the problem is. main.cf # local settings. Remember any domain you want treated as ...
0
votes
1answer
662 views

Does Solaris 10 sendmail support SMTP AUTH

Can anyone tell me if Solaris 10 now comes with a sendmail binary that supports SMTP AUTH ? Search brings up many old post on how to complie SASL and Sendmail , but I'd rather use a built in, ...
1
vote
1answer
3k views

Exim authentication using Dovecot driver

Been following the instructions at the Dovecot Wiki for setting up Exim to share authentication credentials with Dovecot. I have setup Dovecot to deliver mails for virtual users and setup a router ...
2
votes
1answer
1k views

How do I allow anonymous SVN access on svnserve with SASL?

I've setup svnserve with SASL authentication and encryption for encrypting the traffic. Anonymous access should be allowed. My configuration file conf/svnserve.conf (with comments stripped) looks like ...
0
votes
1answer
766 views

Postfix SASL error

I'm trying to configure my postfix server to accept connections from outside mail clients using SASL authentication with dovecot. It was previously setup with cyrus sasl. However when I try to send ...
-1
votes
1answer
310 views

Postfix auth problem

Apr 1 21:05:05 Lucid postfix/smtpd[6230]: warning: xxx: SASL PLAIN authentication failed: no mechanism available Apr 1 21:05:05 Lucid postfix/smtpd[6230]: warning: SASL authentication problem: ...
0
votes
1answer
638 views

Sending Postfix messages over SSL

I've been trying to setup Postfix on our Debian server and as I understand it, all messages get send via Telnet on port 25. I've followed these instructions exactly: http://wiki.debian.org/Postfix ...
2
votes
2answers
977 views

Problem with testsaslauthd and kerberos5 (“saslauthd internal error”)

The error message “saslauthd internal error” seems like a catch-all for saslauthd, so I’m not sure if it’s a red herring, but here’s the brief description of my problem: This Kerberos command works ...
1
vote
2answers
1k views

SASL (Postfix) authentication with MySQL and Blowfish pre-encrypted passwords

I have a Rails app with the Devise authentication gem running user registration and login. I want to use the db table that Devise populates when a user registers as the table that Postfix uses to ...
1
vote
2answers
5k views

SASL + postfixadmin - SMTP authentication with hashed password

I'm trying to set up the mail server. I have problem with my SMTP authentication using sasl. I'm using postfixadmin to create my mailboxes, the password is in some kind of md5, postfixadmin ...
1
vote
1answer
4k views

OpenLDAP Setup help: SASL/GSSAPI authentication started

I am trying to setup & configure OpenLDAP on Fedora Core 13. I've gotten as far as compiling and installing OpenLDAP v2.4.23. Whenever I try to run one of the LDAP commands (like ldapsearch), I ...
0
votes
1answer
597 views

smtp sasl authentication failure

I have configured and fixed almost all the problems with my postfix +courier + mysql setup for virtual mailboxes. I can now receive mail and send it from webmail (squirrel). BUT, what I can't do is ...
0
votes
1answer
177 views

postfix SMTPD relay problems while sending

Hello My server is Ubuntu LTS 10.04 Installed and configured postfix with sasl, courier and virtual domains with mysql behind them. everything is working except for sending of email to outside ...
4
votes
1answer
2k views

Subversion 1.6 + SASL : Only works with plaintext 'userPassword'?

I'm attempting to setup svnserve with SASL support on my Slackware 13.1 server and after some trial and error I'm able to get it to work with the configuration listed below: svnserve.conf [general] ...
3
votes
1answer
7k views

SASL LOGIN authentication failed: UGFzc3dvcmQ6 - Find the username

First let me state that the mail server is working fine and users can connect and send email. Basically there is a local web script connecting into the mail server trying to send mail every few ...
0
votes
1answer
1k views

postfix: smtpd configured to allow mail to/from local domain only?

I have an email server set up for our company's domain. We want to be able to receive our domain-based mail but we would like to be able to send email to ANY domain through the server as well. Using ...
1
vote
1answer
1k views

saslauthd and PAM: “Too many open files” error - saslauthd restart fixes this - what is wrong?

I have a Postfix mail server running Debian Squeeze. SASL authentication for secure SMTP is supported by saslauthd which relies on pam, which relies on winbind. This pattern seems to be reoccuring ...
2
votes
1answer
6k views

Postfix + SASL = “Relay Access Denied” when sending from outside the network

I have in /etc/postfix/main.cf: smtpd_sasl_auth_enable = yes smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination and SASL seems to be working: $ ...
1
vote
2answers
2k views

Postfix “SASL authentication failure: No worthy mechs found”

Trying to use postfix with smtp to connect to google's smtp. When trying to send mail, I get this error: Sep 15 14:04:41 zedsaid postfix/smtp[20271]: certificate verification failed for ...
0
votes
3answers
1k views

Postfix+sasslauthd+PAM How can I deny/allow specific users from authenticating?

I have a simple postfix installation on RedHat that's been running fine for years and uses TLS/saslauthd/PAM to allow users to authenticate to relay mail from the external network. All users are local ...
0
votes
1answer
402 views

Getting Hudson to connect to a sasl svnserve install

We are unable to get hudson to connect to our SVN server. We are using SASL and we can connect just fine with tortoisesvn and the standard cli client. However when we try to use hudson we get this ...
3
votes
1answer
996 views

Postfix sasl: Relay access Denied (state 14)

I have postfix installed with dovecot. There are no problems when I'm trying to send e-mails from my server, however all e-mails that are coming in are rejected. My main.cf file: queue_directory = ...
2
votes
1answer
4k views

unable to open Berkeley db /etc/sasldb2: No such file or directory

In /var/log/mail.log I get such error message: Jul 25 01:33:11 ubuntu8 postfix/smtpd[10863]: warning: SASL authentication problem: unable to open Berkeley db /etc/sasldb2: No such file or directory ...
1
vote
2answers
4k views

Posfix smtpd_sasl_path seems does not work for me

I have such configuration: /etc/postfix/main.cf smtpd_sasl_type = cyrus smtpd_sasl_auth_enable = yes smtpd_sasl_path = /usr/lib/sasl2/smtpd /usr/lib/sasl2/smtpd.conf pwcheck_method: auxprop ...
5
votes
2answers
2k views

What is SASL/GSSAPI?

Numerous times i have met the expression SASL/GSSAPI. I have searched Google many times, but i simply do no understand what it is and how it relate to Kerberos. Anybody that have a simple explanation ...
1
vote
2answers
614 views

Relaying mail through postfix with SASL

I'd like to relay mail from my laptop through my server. I've successfully configured postfix and SASL, and I can AUTH successfully using telnet. dhcp-241:~ jgorset$ telnet mail.example.com 25 Trying ...
2
votes
1answer
374 views

Kerberos principal names for distributed services

Two typical forms for Kerberos (v5) principal names seem to be: username[/instance]@REALM service/fully-qualified-domain-name@REALM I've also seen something like this for services which could exist ...
0
votes
1answer
110 views

In SASL authentication, are the messages between a particular client and server the same every time it connects?

I wrote a test client and server using the Cyrus SASL library, and I'm manually forcing it to select GSSAPI as the mechanism. While debugging, I printed the md5sum of each message as it was passed ...
0
votes
2answers
232 views

Postfix SMTP AUTH setup??? Confused

I have setup Postfix on my CentOS and configured it properly. Now, I want to enable user authentication to avoid any spam deliveries. I don't want a complicated setup, just a plain txt file which ...
1
vote
0answers
685 views

Postfix sasl relay host - weird behaviour

Previously I had a relayhost set in postfix to mailhost.zen.co.uk - I don't think it accepts SASL - only TLS. So I though I would try changing to a different relay host. However, the following log ...
2
votes
1answer
987 views

Postfix sasl relay host - failure

I'm trying to set up SASL to a relayhost to send external email. I've read a hell of a lot and done everything I'm supposed to have done. However our provider won't accept me relaying emails with (we ...
1
vote
1answer
870 views

Postfix sasl relay host

I'm trying to set up SASL to a relayhost to send external email. I've read a hell of a lot and done everything I'm supposed to have done. However our provider won't accept me relaying emails with (we ...
2
votes
1answer
6k views

Postfix (SASL) / MySQL: Use MD5 Encryption?

Is it possible to use MD5 password encryption to encrypt passwords when using Postfix / SASL and MySQL? Currently, my setup is using the MySQL CRYPT() function, which for various reasons isn't ideal.