Simple Authentication and Security Layer (SASL) is a framework for authentication and data security in Internet protocols.

learn more… | top users | synonyms

2
votes
1answer
46 views

Bad search filter - postfix, OpenLDAP, Saslauthd

I am trying to setup a mail server on Debian Jessie and have come across a problem that's doing my head in. When trying to access OpenLDAP through saslauthd via the command testsaslauthd -u user1 -p ...
2
votes
1answer
76 views

How can I install libmemcached on Openshift with sasl support?

I need libmemcached with sasl support to use Memcached Cloud cartridge on Openshift Online. I doing next: 1) Install sasl. curl -LO ftp://ftp.cyrusimap.org/cyrus-sasl/cyrus-sasl-2.1.26.tar.gz tar ...
1
vote
1answer
56 views

saslauthd running in segfault after some time

I'm using postfix with courier and mysql for authentication. Lately I have some segmentation faults, which causes sasl deamon to crash. It seems, the have something to do with dictionary attacks on ...
0
votes
1answer
20 views

Postfix: Unverified Client host rejected / SASL Logged In

Running Ubuntu, iRedMail, Mysql, Amavis, Spamassassin, Dovecot, Postfix Recently had some unauthorized usage of a postfix server internally from a malware deprecated staging server. I worked on ...
0
votes
1answer
21 views

ubuntu - Postfix mail sent from server not logged in mail.log or phpmail.log

I am having server which hosts 70-80 websites and also using relay server for smtp using postfix using mysql database for domain and email boxes. I have also activated the phpmail.log for sendmail. ...
0
votes
1answer
17 views

sasl_username does not appear in my maillog logfile

I've got some servers that do not log the user when processing mail. Packages involved are postfix 2:2.11.5-centos5.15072015 and cyrus-sasl-2.1.22-7.el5_8.1.x86_64 There is no sasl_username on the ...
0
votes
1answer
52 views

saslauthd authentication fails for AD

I cannot get saslauthd to work with Active Directory. Here is /etc/saslauthd.conf: ldap_use_sasl: yes ldap_servers: ldap://ad.example.com ldap_search_base: OU=Users,DC=example,DC=com ldap_bind_dn: ...
0
votes
1answer
83 views

openldap, crypt passwords do not work for sasl

I've been working on migrating an existing server cluster to using openldap for user/password management. I've run into a problem though - I do not have access to plain text passwords and all SASL ...
0
votes
1answer
140 views

slapd running fine and listening on port 389, but still can't contact

Here is my ldapsearch command with debug (I've masked my real IP address): $ sudo /usr/local/bin/ldapsearch -H ldap://99.99.99.99 -b dc=my-domain,dc=com -x -d -1 ...
0
votes
1answer
146 views

SASL Auth against LDAP

So I am running into a whirlwind of issues with my cyrus install. I am setting up a multi-domain kolab groupware solution. I am on centos 6.7 I am getting this flooding my error logs when I try to ...
0
votes
1answer
232 views

Mongodb + Kerberos BadValue SASL mechanism GSSAPI is not supported

I am trying to run an instance of mongodb with the authentication mechanism GSS-API. This is the command: mongod --dbpath /home/ec2-user/db/node2/data --auth --setParameter ...
0
votes
1answer
585 views

Postfix logging “Fatal: no SASL authentication mechanisms”

I was trying to close the open relay postfix server I had running, as there was spam coming from it, and now I can't get e-mails. The message I get in the log when someone tries to send an email is ...
0
votes
1answer
296 views

Fedora 389 ds sasl mapping issue?

I have a fedora client that is authenticating to a centos server running 389 ds and kerberos I can run kinit <my-user-principal> on the fedora client successfully and get a ticket, but no ...
0
votes
1answer
547 views

pam_ldap, where is the filter set?

A while ago I asked a question about this same issue already (Cyrus on CentOS with sasl / pam / ldap), and I came a bit further. The Bind DN is no longer empty; LDAP works with all apps except imap. ...
0
votes
1answer
119 views

In SASL authentication, are the messages between a particular client and server the same every time it connects?

I wrote a test client and server using the Cyrus SASL library, and I'm manually forcing it to select GSSAPI as the mechanism. While debugging, I printed the md5sum of each message as it was passed ...
-1
votes
1answer
92 views

Sending emails from non-configured domains with postfix/dovecot

I am trying to setup a mail server with postfix/dovecot. I can currently receive emails and send emails from domains that I have configured. I have a lot of domains and my email setup is simple - ...
4
votes
0answers
2k views

Saslauth with ldapdb on debian

I'm trying to get saslauthd working with openldap. ldapsearch and every service connected to openldap works fine. sasldblistusers2 doesn't work - and ldapwhoami does not work either. getent passwd ...
3
votes
0answers
296 views

Configure mailgun as relayhost on top of existing postfix server already using sasl

I might be barking at the wrong tree completely here, but I'll ask anyway. I've followed a tutorial to setup a Mailserver on ubuntu 14.04 with postfix, dovecot and mysql. Now I have setup mailgun to ...
3
votes
0answers
73 views

Low Entropy on Container

I am thinking my entropy level may be low? cat /proc/sys/kernel/random/entropy_avail I am around 132-178 on average. pool size is default 4096 (this is a container on a virtualizer by the way) I ...
2
votes
0answers
16 views

PAM vs /etc/shadow in Dovecot SASL configuration - Security differences?

I set up a server with Postfix SMTP auth through Dovecot SASL. However, it was not possible to get the PAM authentification working as standard out of the box. So more by chance, I changed it to ...
2
votes
0answers
165 views

Dovecot: using a separate passdb per service

Situation: one front-facing server running Dovecot as IMAP/POP3/ManageSieve proxy, a mixture of IMAP servers (Dovecot, Exchange, ...) in the back-end. Dovecot's passdb does lookups against MySQL which ...
2
votes
0answers
550 views

issue with heimdal kerberos in ldap backend

I'm having a bit of trouble getting Kerberos (Heimdal version) to work nicely with OpenLDAP. The kerberos database is being stored in LDAP itself. The KDC uses SASL EXTERNAL authentication as root to ...
1
vote
0answers
20 views

Authnetication failure with postfix and sasl using sasldb

I'm really not sure what my issue is. I've checked several guides, and I am sure I have set this up correctly, including config fails, restarting the service, permissions etc. OS is Ubuntu Server. ...
1
vote
0answers
51 views

Mail Server Memory buffer error

From time to time, my mail server stops sending any new mails. When this happened, I find the below error log, Jun 22 23:10:18 myserver saslauthd[3967]: DEBUG: auth_pam: pam_authenticate failed: ...
1
vote
0answers
47 views

SASL severity 2 password verification failed

I have PHP Memcached running I have binary turned on (both memcached process & php) I am using Memcached::setSaslAuthData Using Ubuntu 14.04 SASL is enabled I just continually get: mech: ...
1
vote
0answers
747 views

Postfix + Saslauthd + Kerberos 5 + CentOS 7 not working

I've almost got saslauthd checking against Kerberos but seeing some last issues on CentOS 7. When postfix talks to saslauthd, it sends a lowercased domain and it's not corrected. I tried to fix things ...
1
vote
0answers
2k views

Diagnose SASL LOGIN authentication failure with postfix and sasldb

I am trying to configure a Postfix SMTP server on my personal machine (ubuntu server) using sasldb2. So far what I have set up works well with the test command: testsaslauthd (however it may be ...
1
vote
0answers
378 views

Memcached with SASL: Couldn't find mech PLAIN

I'm trying to get memcached working with SASL. I'm compiling memcached and libevent from source. These are the steps I took (both under root and a user, same result): Having these packages: ...
1
vote
0answers
1k views

heimdal kerberos in openldap issue

I think I posted this on the wrong 'sister site', so here it is. I'm having a bit of trouble getting Kerberos (Heimdal version) to work nicely with OpenLDAP. The kerberos database is being stored in ...
1
vote
0answers
390 views

OpenLDAP, SASL and non-cleartext password storage

I'm working on a setup where postfix and cyrus-imap do proxy authorization against openldap (my setup is here http://1nw.eu/!cD ). I love this solution, it's a lot more elegant that using saslauthd. ...
1
vote
0answers
694 views

Postfix sasl relay host - weird behaviour

Previously I had a relayhost set in postfix to mailhost.zen.co.uk - I don't think it accepts SASL - only TLS. So I though I would try changing to a different relay host. However, the following log ...
0
votes
0answers
11 views

What happens using SASL plaintext on an openldap server on the server side?

I have an OpenLDAP server and I use SASL with the login authentication mechanism. My user passwords are securely hashed and stored within my LDAP database. I understand that the login credentials are ...
0
votes
0answers
61 views

Postfix SASL server said: 535 5.7.8 Error: authentication failed:

I have a mail server (running on Ubuntu server 12.04) that worked fine until a couple of months ago. After I forgot to renew my cacert.org free certificate, I created a new certificate and loaded it ...
0
votes
0answers
71 views

Postfix/Dovecot Mail: fatal: no SASL authentication mechanisms

I'm getting this issue when trying to setup Postfix/Dovecot to work on my Ubuntu server, 15.10. Followed this guide to try to setup the server, worked in the past. However, trying to upgrade to 15.10 ...
0
votes
0answers
52 views

issues with svnserve using ldap and sasl

I am trying to setup SVN's svnserve server using ldap and sasl to authenticate users and to encrypt data but I come across the following issues: /var/log/messages error or warning when I execute ...
0
votes
0answers
12 views

What is cmusaslsecretuserPassword and how to get rid of it?

I am running a Cyrus IMAP server which uses the SASL authentification. sasldblistusers2 shows following entries: myuser@alpha.example.com: cmusaslsecretcmusaslsecretcmusaslsecretuserPassword ...