Simple Authentication and Security Layer (SASL) is a framework for authentication and data security in Internet protocols.

learn more… | top users | synonyms

2
votes
1answer
67 views

Bad search filter - postfix, OpenLDAP, Saslauthd

I am trying to setup a mail server on Debian Jessie and have come across a problem that's doing my head in. When trying to access OpenLDAP through saslauthd via the command testsaslauthd -u user1 -p ...
2
votes
1answer
87 views

How can I install libmemcached on Openshift with sasl support?

I need libmemcached with sasl support to use Memcached Cloud cartridge on Openshift Online. I doing next: 1) Install sasl. curl -LO ftp://ftp.cyrusimap.org/cyrus-sasl/cyrus-sasl-2.1.26.tar.gz tar --...
1
vote
1answer
59 views

saslauthd running in segfault after some time

I'm using postfix with courier and mysql for authentication. Lately I have some segmentation faults, which causes sasl deamon to crash. It seems, the have something to do with dictionary attacks on ...
0
votes
1answer
29 views

Posfix: SASL authentication failed (unbuntu/office 365)

I'm unable to get postfix to work with our office 365 mail. here's the main.cf file: smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu) biff = no append_dot_mydomain = no readme_directory = no ...
0
votes
1answer
24 views

ubuntu - Postfix mail sent from server not logged in mail.log or phpmail.log

I am having server which hosts 70-80 websites and also using relay server for smtp using postfix using mysql database for domain and email boxes. I have also activated the phpmail.log for sendmail. ...
0
votes
1answer
25 views

sasl_username does not appear in my maillog logfile

I've got some servers that do not log the user when processing mail. Packages involved are postfix 2:2.11.5-centos5.15072015 and cyrus-sasl-2.1.22-7.el5_8.1.x86_64 There is no sasl_username on the ...
0
votes
1answer
56 views

saslauthd authentication fails for AD

I cannot get saslauthd to work with Active Directory. Here is /etc/saslauthd.conf: ldap_use_sasl: yes ldap_servers: ldap://ad.example.com ldap_search_base: OU=Users,DC=example,DC=com ldap_bind_dn: CN=...
0
votes
1answer
91 views

openldap, crypt passwords do not work for sasl

I've been working on migrating an existing server cluster to using openldap for user/password management. I've run into a problem though - I do not have access to plain text passwords and all SASL ...
0
votes
1answer
182 views

slapd running fine and listening on port 389, but still can't contact

Here is my ldapsearch command with debug (I've masked my real IP address): $ sudo /usr/local/bin/ldapsearch -H ldap://99.99.99.99 -b dc=my-domain,dc=com -x -d -1 ldap_url_parse_ext(ldap://99.99.99.99)...
0
votes
1answer
174 views

SASL Auth against LDAP

So I am running into a whirlwind of issues with my cyrus install. I am setting up a multi-domain kolab groupware solution. I am on centos 6.7 I am getting this flooding my error logs when I try to ...
0
votes
1answer
245 views

Mongodb + Kerberos BadValue SASL mechanism GSSAPI is not supported

I am trying to run an instance of mongodb with the authentication mechanism GSS-API. This is the command: mongod --dbpath /home/ec2-user/db/node2/data --auth --setParameter authenticationMechanisms=...
0
votes
1answer
648 views

Postfix logging “Fatal: no SASL authentication mechanisms”

I was trying to close the open relay postfix server I had running, as there was spam coming from it, and now I can't get e-mails. The message I get in the log when someone tries to send an email is ...
0
votes
1answer
303 views

Fedora 389 ds sasl mapping issue?

I have a fedora client that is authenticating to a centos server running 389 ds and kerberos I can run kinit <my-user-principal> on the fedora client successfully and get a ticket, but no ...
0
votes
1answer
564 views

pam_ldap, where is the filter set?

A while ago I asked a question about this same issue already (Cyrus on CentOS with sasl / pam / ldap), and I came a bit further. The Bind DN is no longer empty; LDAP works with all apps except imap. ...
0
votes
1answer
121 views

In SASL authentication, are the messages between a particular client and server the same every time it connects?

I wrote a test client and server using the Cyrus SASL library, and I'm manually forcing it to select GSSAPI as the mechanism. While debugging, I printed the md5sum of each message as it was passed ...
-1
votes
1answer
94 views

Sending emails from non-configured domains with postfix/dovecot

I am trying to setup a mail server with postfix/dovecot. I can currently receive emails and send emails from domains that I have configured. I have a lot of domains and my email setup is simple - ...
4
votes
0answers
2k views

Saslauth with ldapdb on debian

I'm trying to get saslauthd working with openldap. ldapsearch and every service connected to openldap works fine. sasldblistusers2 doesn't work - and ldapwhoami does not work either. getent passwd ...
3
votes
0answers
346 views

Configure mailgun as relayhost on top of existing postfix server already using sasl

I might be barking at the wrong tree completely here, but I'll ask anyway. I've followed a tutorial to setup a Mailserver on ubuntu 14.04 with postfix, dovecot and mysql. Now I have setup mailgun to ...
3
votes
0answers
81 views

Low Entropy on Container

I am thinking my entropy level may be low? cat /proc/sys/kernel/random/entropy_avail I am around 132-178 on average. pool size is default 4096 (this is a container on a virtualizer by the way) I ...
2
votes
0answers
25 views

PAM vs /etc/shadow in Dovecot SASL configuration - Security differences?

I set up a server with Postfix SMTP auth through Dovecot SASL. However, it was not possible to get the PAM authentification working as standard out of the box. So more by chance, I changed it to ...
2
votes
0answers
176 views

Dovecot: using a separate passdb per service

Situation: one front-facing server running Dovecot as IMAP/POP3/ManageSieve proxy, a mixture of IMAP servers (Dovecot, Exchange, ...) in the back-end. Dovecot's passdb does lookups against MySQL which ...
2
votes
0answers
560 views

issue with heimdal kerberos in ldap backend

I'm having a bit of trouble getting Kerberos (Heimdal version) to work nicely with OpenLDAP. The kerberos database is being stored in LDAP itself. The KDC uses SASL EXTERNAL authentication as root to ...
1
vote
0answers
9 views

How to ensure encrypted OpenLDAP sessions using SASL/GSSAPI

I am running OpenLDAP 2.4 on a Debian jessie system. Clients typically connect to this LDAP server over port 389 using SASL/GSSAPI with our Kerberos infrastructure. When a client connects using SASL/...
1
vote
0answers
23 views

Authnetication failure with postfix and sasl using sasldb

I'm really not sure what my issue is. I've checked several guides, and I am sure I have set this up correctly, including config fails, restarting the service, permissions etc. OS is Ubuntu Server. ...
1
vote
0answers
56 views

Mail Server Memory buffer error

From time to time, my mail server stops sending any new mails. When this happened, I find the below error log, Jun 22 23:10:18 myserver saslauthd[3967]: DEBUG: auth_pam: pam_authenticate failed: ...
1
vote
0answers
49 views

SASL severity 2 password verification failed

I have PHP Memcached running I have binary turned on (both memcached process & php) I am using Memcached::setSaslAuthData Using Ubuntu 14.04 SASL is enabled I just continually get: mech: ``PLAIN'...
1
vote
0answers
797 views

Postfix + Saslauthd + Kerberos 5 + CentOS 7 not working

I've almost got saslauthd checking against Kerberos but seeing some last issues on CentOS 7. When postfix talks to saslauthd, it sends a lowercased domain and it's not corrected. I tried to fix things ...
1
vote
0answers
2k views

Diagnose SASL LOGIN authentication failure with postfix and sasldb

I am trying to configure a Postfix SMTP server on my personal machine (ubuntu server) using sasldb2. So far what I have set up works well with the test command: testsaslauthd (however it may be ...
1
vote
0answers
401 views

Memcached with SASL: Couldn't find mech PLAIN

I'm trying to get memcached working with SASL. I'm compiling memcached and libevent from source. These are the steps I took (both under root and a user, same result): Having these packages: cyrus-...
1
vote
0answers
1k views

heimdal kerberos in openldap issue

I think I posted this on the wrong 'sister site', so here it is. I'm having a bit of trouble getting Kerberos (Heimdal version) to work nicely with OpenLDAP. The kerberos database is being stored in ...
1
vote
0answers
393 views

OpenLDAP, SASL and non-cleartext password storage

I'm working on a setup where postfix and cyrus-imap do proxy authorization against openldap (my setup is here http://1nw.eu/!cD ). I love this solution, it's a lot more elegant that using saslauthd. ...
1
vote
0answers
697 views

Postfix sasl relay host - weird behaviour

Previously I had a relayhost set in postfix to mailhost.zen.co.uk - I don't think it accepts SASL - only TLS. So I though I would try changing to a different relay host. However, the following log ...
0
votes
0answers
46 views

Dovecot/Postfix mail server SASL: Connect to private/auth failed

Trying to get this mail sever up has eaten up a good chunk of 2 days and I've made some headway but this specific error has persisted throughout. I'm using a Debian server with Postfix + Dovecot + ...
0
votes
0answers
15 views

What happens using SASL plaintext on an openldap server on the server side?

I have an OpenLDAP server and I use SASL with the login authentication mechanism. My user passwords are securely hashed and stored within my LDAP database. I understand that the login credentials are ...
0
votes
0answers
76 views

Postfix SASL server said: 535 5.7.8 Error: authentication failed:

I have a mail server (running on Ubuntu server 12.04) that worked fine until a couple of months ago. After I forgot to renew my cacert.org free certificate, I created a new certificate and loaded it ...
0
votes
0answers
78 views

Postfix/Dovecot Mail: fatal: no SASL authentication mechanisms

I'm getting this issue when trying to setup Postfix/Dovecot to work on my Ubuntu server, 15.10. Followed this guide to try to setup the server, worked in the past. However, trying to upgrade to 15.10 ...
0
votes
0answers
68 views

issues with svnserve using ldap and sasl

I am trying to setup SVN's svnserve server using ldap and sasl to authenticate users and to encrypt data but I come across the following issues: /var/log/messages error or warning when I execute ...
0
votes
0answers
12 views

What is cmusaslsecretuserPassword and how to get rid of it?

I am running a Cyrus IMAP server which uses the SASL authentification. sasldblistusers2 shows following entries: myuser@alpha.example.com: cmusaslsecretcmusaslsecretcmusaslsecretuserPassword myuser@...