Simple Authentication and Security Layer (SASL) is a framework for authentication and data security in Internet protocols.

learn more… | top users | synonyms

0
votes
1answer
52 views

How to enable DIGEST-MD5 SASL mechanism in Open Directory?

We've created an Open Directory master on OSX 10.10 Yosemite + Server.app v4: $ sudo slapconfig -createldapmasterandadmin admin Administrator 1000 But it doesn't support DIGEST-MD5: $ ldapsearch ...
2
votes
2answers
853 views

Problem with testsaslauthd and kerberos5 (“saslauthd internal error”)

The error message “saslauthd internal error” seems like a catch-all for saslauthd, so I’m not sure if it’s a red herring, but here’s the brief description of my problem: This Kerberos command works ...
4
votes
3answers
973 views

Svn authorizing over sasl+ldap failing after Ubuntu update 10.04 -> 12.04

I have working svnserve solution on Ubuntu 10.04 for authorizing svn users over SASL to Active directory (LDAP, not LDAPDB). Config files are at the bottom. After upgrading server to 12.04 release, ...
0
votes
1answer
3k views

saslauthd + PostFix producing password verification and authentication errors

So I'm trying to setup PostFix while using SASL (Cyrus variety preferred, I was using dovecot earlier but I'm switching from dovecot to courier so I want to use cyrus instead of dovecot) but I seem to ...
1
vote
0answers
13 views

SASL severity 2 password verification failed

I have PHP Memcached running I have binary turned on (both memcached process & php) I am using Memcached::setSaslAuthData Using Ubuntu 14.04 SASL is enabled I just continually get: mech: ...
1
vote
4answers
3k views

saslauthd authentication error

My server has developed an expected problem where I am unable to connect from a mail client. I've looked at the server logs and the only thing that looks to identify a problem are events like the ...
0
votes
2answers
134 views

CentOS 7 ec2 smtpd - Client host rejected: Access denied

I've been trying to figure this out for hours and can't quite wrap my head around it. I have a mail server on an ec2 instance running CentOS7 that has postfix, courier (authlib and imap), sasl, ...
1
vote
2answers
1k views

How do I use ldapsearch with a cross-realm ticket?

kinit user@DOMAIN.TLD klist -afe Ticket cache: FILE:/tmp/krb5cc_1000 Default principal: user@DOMAIN.TLD Valid starting Expires Service principal 08/04/11 13:14:53 08/05/11 ...
0
votes
0answers
25 views

OpenLDAP 2.4 pass-through SASL configuration

I am having a hard time configuring pass-through on LDAP 2.4, mainly because most of the information in the internet is written for the older LDAP versions... I am looking to configure SASL but when ...
1
vote
1answer
2k views

postfix TLS disconnect from unknown

I install centos 6.4 posttfix with sasl and TLS my postconf -e alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases broken_sasl_auth_clients = yes command_directory = /usr/sbin ...
1
vote
0answers
109 views

Postfix + Saslauthd + Kerberos 5 + CentOS 7 not working

I've almost got saslauthd checking against Kerberos but seeing some last issues on CentOS 7. When postfix talks to saslauthd, it sends a lowercased domain and it's not corrected. I tried to fix things ...
1
vote
1answer
122 views

Postfix sasl/tls username password ubuntu14.04 only sender [closed]

Anybody can suggest me a good tutorial to configure postfix as a secure smtp. I've installed it by this command sudo apt-get install mail-stack-delivery but I can't use it. In particular I haven't a ...
0
votes
2answers
1k views

postfix permit_sasl_authenticated in smtpd_client_restrictions for submission on 587

First let me explain my setup. I'm using postfix 2.9.6 on Debian Wheezy. I do not allow AUTH on port 25, and force MUAs to use a submission service on port 587 instead. Debian comes with the following ...
1
vote
1answer
223 views

Postfix cannot authenticate against SASL

My system is Debian 7 aka Wheezy with postfix, courier, and mysql installed. Courier works well and if I issue testsaslauthd -u user@domain -p password -f /var/spool/postfix/var/run/saslauthd/mux -s ...
2
votes
2answers
716 views

Postfix: SASL authentication failure: cannot connect to saslauthd server: Permission denied

I had a Postfix/Dovecot server up and running for about a week until I had to reboot it. When I did, things stopped working. I've been up searching for hours to no avail. IMAP successfully ...
2
votes
2answers
1k views

“No worthy mechs found” when trying to relay email to Gmail using Postfix

I've been trying to configure email to forward to Gmail, using Postfix to relay email to smtp.gmail.com. However, I'm failing to get it to authenticate with smtp.gmail.com, which is a rather vital ...
0
votes
2answers
483 views

postfix SASL authentication failed - Internal authentication error

I've recently had to change SMTP relays from Cablevision to Verizon. Verizon blocks port 25 but they will accept SSL via port 465 (per this). I've used this and this to have stunnnel forward ...
2
votes
1answer
5k views

Postfix + SASL = “Relay Access Denied” when sending from outside the network

I have in /etc/postfix/main.cf: smtpd_sasl_auth_enable = yes smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination and SASL seems to be working: $ ...
4
votes
2answers
3k views

Can't get SASL auxprop/sasldb working with postfix/Ubuntu 12.04

I have an Ubuntu 8.04LTS system running Postfix 2.5.1. On that system SMTP AUTH runs fine. The contents of /etc/postfix/sasl/smtpd.conf are: pwcheck_method: auxprop auxprop_plugin: sasldb mech_list: ...
2
votes
3answers
6k views

POSTFIX fatal: no SASL authentication mechanisms

I am struggling with the error above for more than 5 hours. I had tried to remove Postfix completely and I had followed the instructions of the next manual and the SASL manual in order to reinstall ...
5
votes
2answers
3k views

postfix sasl “cannot connect to saslauthd server: No such file or directory”

I try to setup postfix with smtp authentication. I want to use /etc/shadow as my realm Unfortunately I get a "generic error" when i try to authenticate # nc localhost 25 220 mail.foo ESMTP Postfix ...
-1
votes
2answers
2k views

Mail server: SASL authentication failure - Postfix + Dovecot + Mysql

I tried to set up my own mail server (postfix, dovecot, mysql, ) and I can connect via imaps/pop3s without any problems. But every time I try to connect to the SMTP server (e.g. with the Apple Mail ...
0
votes
0answers
113 views

SASLAUTH: Temporary block on more than 5 authentication followed failures

I'm running a Postfix MTA together to SASL when it comes to authentication. Yesterday saslauthd collapsed and none of the email users could login to the mail server. What i think is probably ...
1
vote
1answer
250 views

Postfix allows own domains to be sent without asking for logins

Postfix issue, (I asked this yesterday and manged to delete my own post instead of editing it sorry for that) I use Postfix+SASL I got these settings in main.cf: smtpd_sasl_security_options = ...
0
votes
1answer
29 views

Postfix accepts unauthorized requests

Here is an excerpt of my Postfix configuration: broken_sasl_auth_clients = yes smtpd_sasl_type = dovecot smtpd_sasl_path = private/auth smtpd_sasl_auth_enable = yes smtpd_relay_restrictions = ...
0
votes
3answers
162 views

Can't use EXTERNAL authentication after enabling TLS in ldap-2.4

I used the following LDIF file to activate the TLS support for the LDAP server: dn: cn=config changetype: modify add: olcTLSCipherSuite olcTLSCipherSuite: NORMAL - add: olcTLSCRLCheck ...
0
votes
0answers
208 views

How to exempt localhost from SMTP smart relay?

I've got a mail server (mail.mydomain.com) that has a relay set up as such: /etc/postfix/main.cf: # Smarthost relayhost = [smtpcorp.com]:2525 smtp_sasl_password_maps = ...
0
votes
1answer
796 views

SASL - Plaintext password not accepted - Encrypted works

I have a very strange issue! SASL does not work properly, as it does not accept plain-text passwords (like Outlook sends them) Oct 2 10:35:09 srf cyrus/imap[4119]: accepted connection Oct 2 ...
0
votes
1answer
115 views

Postfix Policyd both for SASL and non-SASL mail

I have configured Policyd v2 (cluebringer) to apply quota on msg count for SASL and non-SASL users. It is easy in policyd [1]. However I don't know how to configure postfix (2.7.1). Right now I have ...
0
votes
2answers
84 views

Postfix and dovecot auth

So I am trying to get my head around how this works in relation to how people can send credentials to authenticate via smtp and send mail. With a typical default set up of postfix and dovecot (with ...
1
vote
1answer
2k views

Openldap/Sasl/GSSAPI on Debian: Key table entry not found

The goal: to make an OpenLDAP server to authenticate using Kerberos V via GSSAPI Setup: several virtual machines running on freshly installed/updated Debian Squeeze A master KDC server ...
1
vote
1answer
864 views

Postfix allow SASL-authenticated users to send from any IP address

I understand that I need SMTP on port 25 to receive email, but I do not want this to be a relay port. Instead I would port 587 to be used for registered (SASL-authenticated) users to relay email from ...
0
votes
1answer
69 views

Postfix selectively enforce TLS

I am running postfix in Debian Wheezy as my MTA. I currently have it configured to require secure connections for SMTP. In main.cf I have: smtpd_tls_auth_only = yes smtpd_tls_security_level = ...
1
vote
1answer
198 views

Plain-text login with sendmail and SASL, Ubuntu 10.04

I'm trying to configure sendmail with a smarthost. I mostly followed this guide (although I understand it is written for Scalix). SMTP server uses plain-text authentication. However, when sendmail ...
0
votes
1answer
100 views

Has my Postfix been compromised? [duplicate]

I'm running a postfix installation on ubuntu 10.04 LTS with multiple domains. The relay access requires authentication with STARTTLS. This morning one of the user accounts logged in and sent hundreds ...
0
votes
0answers
539 views

Diagnose SASL LOGIN authentication failure with postfix and sasldb

I am trying to configure a Postfix SMTP server on my personal machine (ubuntu server) using sasldb2. So far what I have set up works well with the test command: testsaslauthd (however it may be ...
1
vote
1answer
948 views

How to debug SASL authentication via LDAP towards active directory

I am trying to configure SASL running on Centos 6.5 to allow authentication towards the corporate active directory server. The end goal is to authenticate access to some subversion repos which are ...
0
votes
1answer
57 views

POSTFIX auth can't get logged in

I try to setup my postfix smtp with sasl auth. It seems to be working when I check it with telnet on the local server. ouput: # telnet mail.domain.tld smtp Trying 37.34.52.199... Connected to ...
1
vote
2answers
849 views

What is the exact meaning of “SASL authentication failure: incorrect digest response”

I followed Flurdy's how-to for setting up a mail server on ubuntu. I can receive mails and use squirrelmail to read and send emails. However, I can't send emails through my server using my email ...
1
vote
1answer
133 views

SASL accepts “wrong” passwords

I setup an mailserver with Postfix and configured it to use Cyrus SASL to authenticate my users. It worked perfectly, until I found out that I can login with shorter passwords than they actually are. ...
2
votes
2answers
252 views

Postfix doesn't require authentication for local emails?

I've got a Postfix/Courier mail server (Authenticated with SASL/MySQL) all according to this tutorial. I'm currently running my server on Debian 6, it is a VPS. It works well as far as I can see but I ...
1
vote
0answers
217 views

Memcached with SASL: Couldn't find mech PLAIN

I'm trying to get memcached working with SASL. I'm compiling memcached and libevent from source. These are the steps I took (both under root and a user, same result): Having these packages: ...
0
votes
1answer
441 views

Postfix with SASL

I'm getting crazy configuring POSTFIX + DOVECOT + Authenticated SMTP (SASL for now). Pop/imap accounts works well to get the mailbox, but I cannot login to smtp using sasl: Here: [root@mail ...
1
vote
2answers
2k views

Upgrading to Debian 7: Postfix Auth fails

I'm upgrading various Debian 6 servers to Debian 7. There are a few minor issues, but this one is a show stopper. On Debian, Postfix runs in a chrooted environment. That environment is setup ...
0
votes
2answers
194 views

postfix: set from address when relaying to google mail

I use postfix on a debian server and I have it configured to use gmail as a smarthost (hope I've got that right). How can I set the From: address on my outgoing mails? I need to change that on every ...
1
vote
2answers
2k views

postfwd not rate limiting sasl users

I would like to use postfwd version 2 to limit the amount of daily mail sent by my sasl authenticated users. I installed latest tarball: postfwd-1.35 with latest postfix from Centos 6.4 In my I have ...
0
votes
3answers
483 views

Postfix: how to use simple file for SASL authentication?

I'd like to run Postfix on a Debian VPS to send e-mails from my application. The application (running on other VPSes) would connect to Postfix via SMTP. Postfix does not have to handle incoming email; ...
0
votes
1answer
354 views

No sasl auth mechanism available

I'm trying to use Dovecot+Postfix+Mysql so far everything worked fine. Since upgrading from Debian 6 to 7 I'm unable to send mails. Receiving is still possible. /var/log/mail.log Oct 22 15:21:24 ...
1
vote
2answers
6k views

Postfix sasl login failing no mechanism found

following the link here: http://flurdy.com/docs/postfix/ with posfix, courier, MySql, and sasl gave me a web server that has imap functionality working fine but when i go to log into the server to ...
0
votes
1answer
110 views

Postfix, Dovecot and SASL: SASL not present

It seems that I don't have SASL support, althou I've checked my configuration against ALL the online tutorials, and it seems fine to me. I've also checked /var/log/mail.log and there's no word "SASL" ...