Simple Authentication and Security Layer (SASL) is a framework for authentication and data security in Internet protocols.

learn more… | top users | synonyms

7
votes
2answers
4k views

Svnserve authentication with SASL and normal user accounts

Is it possible to set up svnserve so that it authenticates using the system's users and passwords (e.g. using the /etc/shadow file)? I assume this would be with SASL, but I couldn't find an SASL ...
6
votes
3answers
14k views

POSTFIX fatal: no SASL authentication mechanisms

I am struggling with the error above for more than 5 hours. I had tried to remove Postfix completely and I had followed the instructions of the next manual and the SASL manual in order to reinstall ...
6
votes
2answers
112 views

Postfix deny relay for some virtual users

I'm using Postfix as MTA and relay. Users that wish to send e-mail from a remote system authenticates and Postfix hands that to Dovecot, and this works well. But how can I limit which users can use ...
6
votes
1answer
870 views

Postfix + sasl method rimap strips domain name from user

I'm setting up a mail server with Postfix and Courier-IMAP. I'd like to do SMTP authentication with rimap, so that I don't have to maintain two user DB's. The problem I'm having, is that the username ...
6
votes
1answer
5k views

postfix sasl “cannot connect to saslauthd server: No such file or directory”

I try to setup postfix with smtp authentication. I want to use /etc/shadow as my realm Unfortunately I get a "generic error" when i try to authenticate # nc localhost 25 220 mail.foo ESMTP Postfix ...
5
votes
2answers
4k views

Can't get SASL auxprop/sasldb working with postfix/Ubuntu 12.04

I have an Ubuntu 8.04LTS system running Postfix 2.5.1. On that system SMTP AUTH runs fine. The contents of /etc/postfix/sasl/smtpd.conf are: pwcheck_method: auxprop auxprop_plugin: sasldb mech_list: ...
5
votes
2answers
2k views

What is SASL/GSSAPI?

Numerous times i have met the expression SASL/GSSAPI. I have searched Google many times, but i simply do no understand what it is and how it relate to Kerberos. Anybody that have a simple explanation ...
4
votes
2answers
3k views

“No worthy mechs found” when trying to relay email to Gmail using Postfix

I've been trying to configure email to forward to Gmail, using Postfix to relay email to smtp.gmail.com. However, I'm failing to get it to authenticate with smtp.gmail.com, which is a rather vital ...
4
votes
3answers
1k views

Svn authorizing over sasl+ldap failing after Ubuntu update 10.04 -> 12.04

I have working svnserve solution on Ubuntu 10.04 for authorizing svn users over SASL to Active directory (LDAP, not LDAPDB). Config files are at the bottom. After upgrading server to 12.04 release, ...
4
votes
1answer
2k views

Subversion 1.6 + SASL : Only works with plaintext 'userPassword'?

I'm attempting to setup svnserve with SASL support on my Slackware 13.1 server and after some trial and error I'm able to get it to work with the configuration listed below: svnserve.conf [general] ...
4
votes
0answers
2k views

Saslauth with ldapdb on debian

I'm trying to get saslauthd working with openldap. ldapsearch and every service connected to openldap works fine. sasldblistusers2 doesn't work - and ldapwhoami does not work either. getent passwd ...
3
votes
1answer
3k views

Fail2Ban SASL Filter Misses Failed Logins

I am using fail2ban on my mail server. I discovered this morning that there were some 5000 failed login attempts (in the course of 1 hour) via SMTP that didn't get picked up by my sasl filter. Here ...
3
votes
2answers
4k views

Postfix “AUTH-LOGIN” no longer being offered for smtp auth after upgrade from Ubuntu 10.04 to 12.04.1

After doing a major Ubuntu dist upgrade from 10.04 to 12.04, my virtual-user postfix / dovecot installation only offers "PLAIN" SMTP Authentication mechanism. It used to offer PLAIN + LOGIN ...
3
votes
1answer
188 views

Dovecot says: “Requested CRAM-MD5 scheme, but we have only CRYPT” yet CRAM-MD5 is available

Following upgrade of Fedora Core 16 to Fedora Core 21, the new Dovecot installation isn't authenticating correctly and it's not at all clear why. We have 50+ email accounts served by this server, so ...
3
votes
2answers
8k views

Postfix sasl login failing no mechanism found

following the link here: http://flurdy.com/docs/postfix/ with posfix, courier, MySql, and sasl gave me a web server that has imap functionality working fine but when i go to log into the server to ...
3
votes
1answer
7k views

SASL PLAIN authentication failed: another step is needed in authentication

I have one host (rhea) where I have installed a postfix to relay the emails from my home server (tronics24), which is on a DSL connection. I have generated self-signed certificates: (on rhea) touch ...
3
votes
1answer
7k views

SASL LOGIN authentication failed: UGFzc3dvcmQ6 - Find the username

First let me state that the mail server is working fine and users can connect and send email. Basically there is a local web script connecting into the mail server trying to send mail every few ...
3
votes
1answer
1k views

Postfix sasl: Relay access Denied (state 14)

I have postfix installed with dovecot. There are no problems when I'm trying to send e-mails from my server, however all e-mails that are coming in are rejected. My main.cf file: queue_directory = ...
2
votes
4answers
5k views

saslauthd authentication error

My server has developed an expected problem where I am unable to connect from a mail client. I've looked at the server logs and the only thing that looks to identify a problem are events like the ...
2
votes
1answer
6k views

Postfix + SASL = “Relay Access Denied” when sending from outside the network

I have in /etc/postfix/main.cf: smtpd_sasl_auth_enable = yes smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination and SASL seems to be working: $ ...
2
votes
1answer
141 views

Postfix rejects SASL auth when dovecot is down

We're using Postfix with Dovecot and SASL Auth via Dovecot (based on this tutorial). All works like expected. But when Dovecot is down (i.e. for maintenance or other reasons) then clients could not ...
2
votes
1answer
93 views

searching for the correct way to compile postfix

I am experiencing issues while compiling latest version of postfix from source code. At the moment I'm trying to compile version 3 because Debian 7 and latest Ubuntu 14,10 (version 2,9 and 2,11 for ...
2
votes
4answers
436 views

Is SASL not supported in Postfix on FreeBSD?

I'm managing a mail server that was set up on FreeBSD that runs Postfix and Dovecot. When I type postconf -a, nothing is returned. As I understand it, this command should tell me if SASL is supported ...
2
votes
1answer
3k views

Exim authentication using Dovecot driver

Been following the instructions at the Dovecot Wiki for setting up Exim to share authentication credentials with Dovecot. I have setup Dovecot to deliver mails for virtual users and setup a router ...
2
votes
1answer
6k views

Postfix (SASL) / MySQL: Use MD5 Encryption?

Is it possible to use MD5 password encryption to encrypt passwords when using Postfix / SASL and MySQL? Currently, my setup is using the MySQL CRYPT() function, which for various reasons isn't ideal.
2
votes
3answers
2k views

Postfix: SASL authentication failure: cannot connect to saslauthd server: Permission denied

I had a Postfix/Dovecot server up and running for about a week until I had to reboot it. When I did, things stopped working. I've been up searching for hours to no avail. IMAP successfully ...
2
votes
2answers
665 views

Postfix doesn't require authentication for local emails?

I've got a Postfix/Courier mail server (Authenticated with SASL/MySQL) all according to this tutorial. I'm currently running my server on Debian 6, it is a VPS. It works well as far as I can see but I ...
2
votes
1answer
55 views

Postfix - sender dependent relaying for multiple domains

I have spent the last couple of days going through SO questions and the Postfix documentation but have not succeeded in figuring out what I'm doing wrong. My situation is as follows: I have a server ...
2
votes
1answer
48 views

dovecot/ postfix make me two different folder same user (user; user@domain)

I had some problem with the Dovecot/Postfix/LDAP/SASL config files: The LDAP query, SASL config its work but my problem is postfix and the dovecot: When i first login the outlook/thunderbird/etc.. it ...
2
votes
1answer
180 views

SASL PLAIN authenticating with primary domain, but not with virtual domain

Postfix + dovecot and sasl. Works so far with 1 domain. Added a virtual domain. Incoming mail for this works. Outgoing however has SASL authentication failing. Why does it fail I don't know. ...
2
votes
1answer
2k views

Postfix allow SASL-authenticated users to send from any IP address

I understand that I need SMTP on port 25 to receive email, but I do not want this to be a relay port. Instead I would port 587 to be used for registered (SASL-authenticated) users to relay email from ...
2
votes
1answer
4k views

unable to open Berkeley db /etc/sasldb2: No such file or directory

In /var/log/mail.log I get such error message: Jul 25 01:33:11 ubuntu8 postfix/smtpd[10863]: warning: SASL authentication problem: unable to open Berkeley db /etc/sasldb2: No such file or directory ...
2
votes
1answer
384 views

Kerberos principal names for distributed services

Two typical forms for Kerberos (v5) principal names seem to be: username[/instance]@REALM service/fully-qualified-domain-name@REALM I've also seen something like this for services which could exist ...
2
votes
1answer
481 views

Postfix/Dovecot: SASL LOGIN authentication aborted

I use Postfix together with Dovecot (auth/LMTP) on my mailserver. Everything is working fine, but I notice several warnings in the log-files each day: postfix/smtpd[4169]: warning: ...
2
votes
1answer
1k views

Postfix + SASLAUTHD + MySQL authentication problems

I've been trying to sort this out for the past 6 hours or so, this is the error message I'm facing (Running CentOS x64): /var/log/maillog: Jun 22 20:42:49 ptroa postfix/smtpd[10130]: warning: SASL ...
2
votes
2answers
2k views

FreeBSD: OpenLDAP, SASL, and GSSAPI

I've run into some problems getting OpenLDAP on FreeBSD (8.2-STABLE) to authenticate using Kerberos tickets. I hope I've just had a brain glitch, so please feel free to let me know that I've missed ...
2
votes
1answer
1k views

How do I allow anonymous SVN access on svnserve with SASL?

I've setup svnserve with SASL authentication and encryption for encrypting the traffic. Anonymous access should be allowed. My configuration file conf/svnserve.conf (with comments stripped) looks like ...
2
votes
2answers
1k views

Problem with testsaslauthd and kerberos5 (“saslauthd internal error”)

The error message “saslauthd internal error” seems like a catch-all for saslauthd, so I’m not sure if it’s a red herring, but here’s the brief description of my problem: This Kerberos command works ...
2
votes
1answer
999 views

Postfix sasl relay host - failure

I'm trying to set up SASL to a relayhost to send external email. I've read a hell of a lot and done everything I'm supposed to have done. However our provider won't accept me relaying emails with (we ...
2
votes
0answers
83 views

Dovecot: using a separate passdb per service

Situation: one front-facing server running Dovecot as IMAP/POP3/ManageSieve proxy, a mixture of IMAP servers (Dovecot, Exchange, ...) in the back-end. Dovecot's passdb does lookups against MySQL which ...
2
votes
1answer
224 views

Enabling smtp authentication on postfix with users in another smtp server

I am trying to replace an existing qmail installation with postfix. Qmail is currently authenticating outgoing smtp from users clients with a perl script. This script checks user's provided ...
2
votes
0answers
446 views

issue with heimdal kerberos in ldap backend

I'm having a bit of trouble getting Kerberos (Heimdal version) to work nicely with OpenLDAP. The kerberos database is being stored in LDAP itself. The KDC uses SASL EXTERNAL authentication as root to ...
1
vote
3answers
1k views

Postfix: how to use simple file for SASL authentication?

I'd like to run Postfix on a Debian VPS to send e-mails from my application. The application (running on other VPSes) would connect to Postfix via SMTP. Postfix does not have to handle incoming email; ...
1
vote
2answers
1k views

SASL (Postfix) authentication with MySQL and Blowfish pre-encrypted passwords

I have a Rails app with the Devise authentication gem running user registration and login. I want to use the db table that Devise populates when a user registers as the table that Postfix uses to ...
1
vote
2answers
5k views

SASL + postfixadmin - SMTP authentication with hashed password

I'm trying to set up the mail server. I have problem with my SMTP authentication using sasl. I'm using postfixadmin to create my mailboxes, the password is in some kind of md5, postfixadmin ...
1
vote
2answers
640 views

Relaying mail through postfix with SASL

I'd like to relay mail from my laptop through my server. I've successfully configured postfix and SASL, and I can AUTH successfully using telnet. dhcp-241:~ jgorset$ telnet mail.example.com 25 Trying ...
1
vote
2answers
1k views

CentOS 7 ec2 smtpd - Client host rejected: Access denied

I've been trying to figure this out for hours and can't quite wrap my head around it. I have a mail server on an ec2 instance running CentOS7 that has postfix, courier (authlib and imap), sasl, ...
1
vote
2answers
2k views

postfix SASL authentication failed - Internal authentication error

I've recently had to change SMTP relays from Cablevision to Verizon. Verizon blocks port 25 but they will accept SSL via port 465 (per this). I've used this and this to have stunnnel forward ...
1
vote
2answers
2k views

postfwd not rate limiting sasl users

I would like to use postfwd version 2 to limit the amount of daily mail sent by my sasl authenticated users. I installed latest tarball: postfwd-1.35 with latest postfix from Centos 6.4 In my I have ...
1
vote
2answers
2k views

Postfix not working

A while ago I installed the postfix mail server on my ubuntu 10.04 VPS. At the time it was working good but now it's just stopped working. I was trying to enable SASL authentification and somewhere it ...