Simple Authentication and Security Layer (SASL) is a framework for authentication and data security in Internet protocols.

learn more… | top users | synonyms

2
votes
2answers
853 views

Problem with testsaslauthd and kerberos5 (“saslauthd internal error”)

The error message “saslauthd internal error” seems like a catch-all for saslauthd, so I’m not sure if it’s a red herring, but here’s the brief description of my problem: This Kerberos command works ...
-1
votes
2answers
2k views

Mail server: SASL authentication failure - Postfix + Dovecot + Mysql

I tried to set up my own mail server (postfix, dovecot, mysql, ) and I can connect via imaps/pop3s without any problems. But every time I try to connect to the SMTP server (e.g. with the Apple Mail ...
0
votes
1answer
52 views

How to enable DIGEST-MD5 SASL mechanism in Open Directory?

We've created an Open Directory master on OSX 10.10 Yosemite + Server.app v4: $ sudo slapconfig -createldapmasterandadmin admin Administrator 1000 But it doesn't support DIGEST-MD5: $ ldapsearch ...
0
votes
1answer
69 views

Postfix selectively enforce TLS

I am running postfix in Debian Wheezy as my MTA. I currently have it configured to require secure connections for SMTP. In main.cf I have: smtpd_tls_auth_only = yes smtpd_tls_security_level = ...
0
votes
1answer
57 views

POSTFIX auth can't get logged in

I try to setup my postfix smtp with sasl auth. It seems to be working when I check it with telnet on the local server. ouput: # telnet mail.domain.tld smtp Trying 37.34.52.199... Connected to ...
0
votes
1answer
748 views

Postfix ignoring SASL with dovecot -how to debug?

I recently upgraded my server (Ubuntu 12.03) and today I noticed that SMTP is not offering authentication anymore. My setup is using virtual mailboxes + MySQL. Telnet session: telnet ...
0
votes
1answer
747 views

Postfix (MySQL): Encrypted passwords does not work

Update: I've tried to insert the password in plain text in the DB. That works, and I'm now able to send mail as well. I tried setting up the whole thing (using the guide mentioned) again, but with the ...
0
votes
1answer
187 views

Fedora 389 ds sasl mapping issue?

I have a fedora client that is authenticating to a centos server running 389 ds and kerberos I can run kinit <my-user-principal> on the fedora client successfully and get a ticket, but no ...
0
votes
1answer
382 views

pam_ldap, where is the filter set?

A while ago I asked a question about this same issue already (Cyrus on CentOS with sasl / pam / ldap), and I came a bit further. The Bind DN is no longer empty; LDAP works with all apps except imap. ...
0
votes
1answer
108 views

In SASL authentication, are the messages between a particular client and server the same every time it connects?

I wrote a test client and server using the Cyrus SASL library, and I'm manually forcing it to select GSSAPI as the mechanism. While debugging, I printed the md5sum of each message as it was passed ...
-1
votes
1answer
289 views

Postfix auth problem

Apr 1 21:05:05 Lucid postfix/smtpd[6230]: warning: xxx: SASL PLAIN authentication failed: no mechanism available Apr 1 21:05:05 Lucid postfix/smtpd[6230]: warning: SASL authentication problem: ...
3
votes
0answers
2k views

Saslauth with ldapdb on debian

I'm trying to get saslauthd working with openldap. ldapsearch and every service connected to openldap works fine. sasldblistusers2 doesn't work - and ldapwhoami does not work either. getent passwd ...
2
votes
0answers
343 views

issue with heimdal kerberos in ldap backend

I'm having a bit of trouble getting Kerberos (Heimdal version) to work nicely with OpenLDAP. The kerberos database is being stored in LDAP itself. The KDC uses SASL EXTERNAL authentication as root to ...
1
vote
0answers
13 views

SASL severity 2 password verification failed

I have PHP Memcached running I have binary turned on (both memcached process & php) I am using Memcached::setSaslAuthData Using Ubuntu 14.04 SASL is enabled I just continually get: mech: ...
1
vote
0answers
109 views

Postfix + Saslauthd + Kerberos 5 + CentOS 7 not working

I've almost got saslauthd checking against Kerberos but seeing some last issues on CentOS 7. When postfix talks to saslauthd, it sends a lowercased domain and it's not corrected. I tried to fix things ...
1
vote
0answers
217 views

Memcached with SASL: Couldn't find mech PLAIN

I'm trying to get memcached working with SASL. I'm compiling memcached and libevent from source. These are the steps I took (both under root and a user, same result): Having these packages: ...
1
vote
0answers
774 views

heimdal kerberos in openldap issue

I think I posted this on the wrong 'sister site', so here it is. I'm having a bit of trouble getting Kerberos (Heimdal version) to work nicely with OpenLDAP. The kerberos database is being stored in ...
1
vote
0answers
540 views

How do I use an encrypted MySQL password with Cyrus SASL?

In /etc/postfix/sasl/smtpd.conf I have: auxprop_plugin: sql sql_engine: mysql sql_hostnames: 127.0.0.1 sql_database: mail sql_user: mailadmin sql_passwd: secret sql_select: SELECT password FROM users ...
1
vote
0answers
331 views

OpenLDAP, SASL and non-cleartext password storage

I'm working on a setup where postfix and cyrus-imap do proxy authorization against openldap (my setup is here http://1nw.eu/!cD ). I love this solution, it's a lot more elegant that using saslauthd. ...
1
vote
0answers
667 views

Postfix sasl relay host - weird behaviour

Previously I had a relayhost set in postfix to mailhost.zen.co.uk - I don't think it accepts SASL - only TLS. So I though I would try changing to a different relay host. However, the following log ...
0
votes
0answers
25 views

OpenLDAP 2.4 pass-through SASL configuration

I am having a hard time configuring pass-through on LDAP 2.4, mainly because most of the information in the internet is written for the older LDAP versions... I am looking to configure SASL but when ...
0
votes
0answers
207 views

How to exempt localhost from SMTP smart relay?

I've got a mail server (mail.mydomain.com) that has a relay set up as such: /etc/postfix/main.cf: # Smarthost relayhost = [smtpcorp.com]:2525 smtp_sasl_password_maps = ...
0
votes
0answers
539 views

Diagnose SASL LOGIN authentication failure with postfix and sasldb

I am trying to configure a Postfix SMTP server on my personal machine (ubuntu server) using sasldb2. So far what I have set up works well with the test command: testsaslauthd (however it may be ...
0
votes
0answers
113 views

SASLAUTH: Temporary block on more than 5 authentication followed failures

I'm running a Postfix MTA together to SASL when it comes to authentication. Yesterday saslauthd collapsed and none of the email users could login to the mail server. What i think is probably ...
0
votes
0answers
350 views

Postfix with Dovecot SASL doesn't authenticate SMTP senders

I have a Postfix/Dovecot setup on my server and I use Webmin/Virtualmin for management. Receiving emails works fine, and users are able to authenticate when accessing via IMAP. I am having problems ...