Simple Authentication and Security Layer (SASL) is a framework for authentication and data security in Internet protocols.

learn more… | top users | synonyms

7
votes
2answers
4k views

Svnserve authentication with SASL and normal user accounts

Is it possible to set up svnserve so that it authenticates using the system's users and passwords (e.g. using the /etc/shadow file)? I assume this would be with SASL, but I couldn't find an SASL ...
5
votes
2answers
1k views

What is SASL/GSSAPI?

Numerous times i have met the expression SASL/GSSAPI. I have searched Google many times, but i simply do no understand what it is and how it relate to Kerberos. Anybody that have a simple explanation ...
5
votes
2answers
3k views

postfix sasl “cannot connect to saslauthd server: No such file or directory”

I try to setup postfix with smtp authentication. I want to use /etc/shadow as my realm Unfortunately I get a "generic error" when i try to authenticate # nc localhost 25 220 mail.foo ESMTP Postfix ...
4
votes
2answers
3k views

Can't get SASL auxprop/sasldb working with postfix/Ubuntu 12.04

I have an Ubuntu 8.04LTS system running Postfix 2.5.1. On that system SMTP AUTH runs fine. The contents of /etc/postfix/sasl/smtpd.conf are: pwcheck_method: auxprop auxprop_plugin: sasldb mech_list: ...
4
votes
3answers
973 views

Svn authorizing over sasl+ldap failing after Ubuntu update 10.04 -> 12.04

I have working svnserve solution on Ubuntu 10.04 for authorizing svn users over SASL to Active directory (LDAP, not LDAPDB). Config files are at the bottom. After upgrading server to 12.04 release, ...
4
votes
1answer
2k views

Subversion 1.6 + SASL : Only works with plaintext 'userPassword'?

I'm attempting to setup svnserve with SASL support on my Slackware 13.1 server and after some trial and error I'm able to get it to work with the configuration listed below: svnserve.conf [general] ...
3
votes
1answer
2k views

Fail2Ban SASL Filter Misses Failed Logins

I am using fail2ban on my mail server. I discovered this morning that there were some 5000 failed login attempts (in the course of 1 hour) via SMTP that didn't get picked up by my sasl filter. Here ...
3
votes
1answer
6k views

SASL LOGIN authentication failed: UGFzc3dvcmQ6 - Find the username

First let me state that the mail server is working fine and users can connect and send email. Basically there is a local web script connecting into the mail server trying to send mail every few ...
3
votes
1answer
986 views

Postfix sasl: Relay access Denied (state 14)

I have postfix installed with dovecot. There are no problems when I'm trying to send e-mails from my server, however all e-mails that are coming in are rejected. My main.cf file: queue_directory = ...
3
votes
0answers
2k views

Saslauth with ldapdb on debian

I'm trying to get saslauthd working with openldap. ldapsearch and every service connected to openldap works fine. sasldblistusers2 doesn't work - and ldapwhoami does not work either. getent passwd ...
2
votes
1answer
5k views

Postfix + SASL = “Relay Access Denied” when sending from outside the network

I have in /etc/postfix/main.cf: smtpd_sasl_auth_enable = yes smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination and SASL seems to be working: $ ...
2
votes
3answers
6k views

POSTFIX fatal: no SASL authentication mechanisms

I am struggling with the error above for more than 5 hours. I had tried to remove Postfix completely and I had followed the instructions of the next manual and the SASL manual in order to reinstall ...
2
votes
1answer
129 views

Postfix rejects SASL auth when dovecot is down

We're using Postfix with Dovecot and SASL Auth via Dovecot (based on this tutorial). All works like expected. But when Dovecot is down (i.e. for maintenance or other reasons) then clients could not ...
2
votes
2answers
1k views

“No worthy mechs found” when trying to relay email to Gmail using Postfix

I've been trying to configure email to forward to Gmail, using Postfix to relay email to smtp.gmail.com. However, I'm failing to get it to authenticate with smtp.gmail.com, which is a rather vital ...
2
votes
2answers
3k views

Postfix “AUTH-LOGIN” no longer being offered for smtp auth after upgrade from Ubuntu 10.04 to 12.04.1

After doing a major Ubuntu dist upgrade from 10.04 to 12.04, my virtual-user postfix / dovecot installation only offers "PLAIN" SMTP Authentication mechanism. It used to offer PLAIN + LOGIN ...
2
votes
1answer
6k views

Postfix (SASL) / MySQL: Use MD5 Encryption?

Is it possible to use MD5 password encryption to encrypt passwords when using Postfix / SASL and MySQL? Currently, my setup is using the MySQL CRYPT() function, which for various reasons isn't ideal.
2
votes
2answers
256 views

Postfix doesn't require authentication for local emails?

I've got a Postfix/Courier mail server (Authenticated with SASL/MySQL) all according to this tutorial. I'm currently running my server on Debian 6, it is a VPS. It works well as far as I can see but I ...
2
votes
4answers
216 views

Is SASL not supported in Postfix on FreeBSD?

I'm managing a mail server that was set up on FreeBSD that runs Postfix and Dovecot. When I type postconf -a, nothing is returned. As I understand it, this command should tell me if SASL is supported ...
2
votes
1answer
5k views

SASL PLAIN authentication failed: another step is needed in authentication

I have one host (rhea) where I have installed a postfix to relay the emails from my home server (tronics24), which is on a DSL connection. I have generated self-signed certificates: (on rhea) touch ...
2
votes
1answer
3k views

unable to open Berkeley db /etc/sasldb2: No such file or directory

In /var/log/mail.log I get such error message: Jul 25 01:33:11 ubuntu8 postfix/smtpd[10863]: warning: SASL authentication problem: unable to open Berkeley db /etc/sasldb2: No such file or directory ...
2
votes
1answer
368 views

Kerberos principal names for distributed services

Two typical forms for Kerberos (v5) principal names seem to be: username[/instance]@REALM service/fully-qualified-domain-name@REALM I've also seen something like this for services which could exist ...
2
votes
2answers
717 views

Postfix: SASL authentication failure: cannot connect to saslauthd server: Permission denied

I had a Postfix/Dovecot server up and running for about a week until I had to reboot it. When I did, things stopped working. I've been up searching for hours to no avail. IMAP successfully ...
2
votes
1answer
878 views

Postfix + SASLAUTHD + MySQL authentication problems

I've been trying to sort this out for the past 6 hours or so, this is the error message I'm facing (Running CentOS x64): /var/log/maillog: Jun 22 20:42:49 ptroa postfix/smtpd[10130]: warning: SASL ...
2
votes
3answers
5k views

Postfix rejecting mail from authenticated clients

I am trying to configure Postfix so that it would accept mail from authenticated clients outside $mynetworks. When I try to send a test email from my iPhone, which is configured to use port 25, SSL ...
2
votes
1answer
2k views

FreeBSD: OpenLDAP, SASL, and GSSAPI

I've run into some problems getting OpenLDAP on FreeBSD (8.2-STABLE) to authenticate using Kerberos tickets. I hope I've just had a brain glitch, so please feel free to let me know that I've missed ...
2
votes
1answer
1k views

How do I allow anonymous SVN access on svnserve with SASL?

I've setup svnserve with SASL authentication and encryption for encrypting the traffic. Anonymous access should be allowed. My configuration file conf/svnserve.conf (with comments stripped) looks like ...
2
votes
1answer
966 views

Postfix sasl relay host - failure

I'm trying to set up SASL to a relayhost to send external email. I've read a hell of a lot and done everything I'm supposed to have done. However our provider won't accept me relaying emails with (we ...
2
votes
1answer
174 views

Enabling smtp authentication on postfix with users in another smtp server

I am trying to replace an existing qmail installation with postfix. Qmail is currently authenticating outgoing smtp from users clients with a perl script. This script checks user's provided ...
2
votes
0answers
344 views

issue with heimdal kerberos in ldap backend

I'm having a bit of trouble getting Kerberos (Heimdal version) to work nicely with OpenLDAP. The kerberos database is being stored in LDAP itself. The KDC uses SASL EXTERNAL authentication as root to ...
2
votes
2answers
853 views

Problem with testsaslauthd and kerberos5 (“saslauthd internal error”)

The error message “saslauthd internal error” seems like a catch-all for saslauthd, so I’m not sure if it’s a red herring, but here’s the brief description of my problem: This Kerberos command works ...
1
vote
4answers
3k views

saslauthd authentication error

My server has developed an expected problem where I am unable to connect from a mail client. I've looked at the server logs and the only thing that looks to identify a problem are events like the ...
1
vote
2answers
590 views

Relaying mail through postfix with SASL

I'd like to relay mail from my laptop through my server. I've successfully configured postfix and SASL, and I can AUTH successfully using telnet. dhcp-241:~ jgorset$ telnet mail.example.com 25 Trying ...
1
vote
2answers
1k views

SASL (Postfix) authentication with MySQL and Blowfish pre-encrypted passwords

I have a Rails app with the Devise authentication gem running user registration and login. I want to use the db table that Devise populates when a user registers as the table that Postfix uses to ...
1
vote
2answers
5k views

SASL + postfixadmin - SMTP authentication with hashed password

I'm trying to set up the mail server. I have problem with my SMTP authentication using sasl. I'm using postfixadmin to create my mailboxes, the password is in some kind of md5, postfixadmin ...
1
vote
2answers
2k views

postfwd not rate limiting sasl users

I would like to use postfwd version 2 to limit the amount of daily mail sent by my sasl authenticated users. I installed latest tarball: postfwd-1.35 with latest postfix from Centos 6.4 In my I have ...
1
vote
2answers
4k views

Posfix smtpd_sasl_path seems does not work for me

I have such configuration: /etc/postfix/main.cf smtpd_sasl_type = cyrus smtpd_sasl_auth_enable = yes smtpd_sasl_path = /usr/lib/sasl2/smtpd /usr/lib/sasl2/smtpd.conf pwcheck_method: auxprop ...
1
vote
1answer
224 views

Postfix cannot authenticate against SASL

My system is Debian 7 aka Wheezy with postfix, courier, and mysql installed. Courier works well and if I issue testsaslauthd -u user@domain -p password -f /var/spool/postfix/var/run/saslauthd/mux -s ...
1
vote
2answers
2k views

Upgrading to Debian 7: Postfix Auth fails

I'm upgrading various Debian 6 servers to Debian 7. There are a few minor issues, but this one is a show stopper. On Debian, Postfix runs in a chrooted environment. That environment is setup ...
1
vote
1answer
523 views

Postfix + sasl method rimap strips domain name from user

I'm setting up a mail server with Postfix and Courier-IMAP. I'd like to do SMTP authentication with rimap, so that I don't have to maintain two user DB's. The problem I'm having, is that the username ...
1
vote
1answer
250 views

Postfix allows own domains to be sent without asking for logins

Postfix issue, (I asked this yesterday and manged to delete my own post instead of editing it sorry for that) I use Postfix+SASL I got these settings in main.cf: smtpd_sasl_security_options = ...
1
vote
2answers
6k views

Postfix sasl login failing no mechanism found

following the link here: http://flurdy.com/docs/postfix/ with posfix, courier, MySql, and sasl gave me a web server that has imap functionality working fine but when i go to log into the server to ...
1
vote
1answer
3k views

OpenLDAP Setup help: SASL/GSSAPI authentication started

I am trying to setup & configure OpenLDAP on Fedora Core 13. I've gotten as far as compiling and installing Openldap v2.4.23. Whenever I try to run one of the LDAP commands (like ldapsearch), ...
1
vote
1answer
1k views

saslauthd and PAM: “Too many open files” error - saslauthd restart fixes this - what is wrong?

I have a Postfix mail server running Debian Squeeze. SASL authentication for secure SMTP is supported by saslauthd which relies on pam, which relies on winbind. This pattern seems to be reoccuring ...
1
vote
1answer
844 views

Postfix sasl relay host

I'm trying to set up SASL to a relayhost to send external email. I've read a hell of a lot and done everything I'm supposed to have done. However our provider won't accept me relaying emails with (we ...
1
vote
1answer
123 views

Postfix sasl/tls username password ubuntu14.04 only sender [closed]

Anybody can suggest me a good tutorial to configure postfix as a secure smtp. I've installed it by this command sudo apt-get install mail-stack-delivery but I can't use it. In particular I haven't a ...
1
vote
1answer
868 views

Postfix allow SASL-authenticated users to send from any IP address

I understand that I need SMTP on port 25 to receive email, but I do not want this to be a relay port. Instead I would port 587 to be used for registered (SASL-authenticated) users to relay email from ...
1
vote
1answer
952 views

How to debug SASL authentication via LDAP towards active directory

I am trying to configure SASL running on Centos 6.5 to allow authentication towards the corporate active directory server. The end goal is to authenticate access to some subversion repos which are ...
1
vote
1answer
2k views

postfix TLS disconnect from unknown

I install centos 6.4 posttfix with sasl and TLS my postconf -e alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases broken_sasl_auth_clients = yes command_directory = /usr/sbin ...
1
vote
2answers
851 views

What is the exact meaning of “SASL authentication failure: incorrect digest response”

I followed Flurdy's how-to for setting up a mail server on ubuntu. I can receive mails and use squirrelmail to read and send emails. However, I can't send emails through my server using my email ...
1
vote
1answer
343 views

Postfix + Dovecot SASL - Need catch all with virtual users

I have a Postfix instance using SASL with Dovecot for authentication. I am using virtual_alias_maps for some address rewriting, but I'm unable to use a catch all definition (@domain newaddress) as ...