Simple Authentication and Security Layer (SASL) is a framework for authentication and data security in Internet protocols.

learn more… | top users | synonyms

7
votes
2answers
4k views

Svnserve authentication with SASL and normal user accounts

Is it possible to set up svnserve so that it authenticates using the system's users and passwords (e.g. using the /etc/shadow file)? I assume this would be with SASL, but I couldn't find an SASL ...
6
votes
1answer
4k views

postfix sasl “cannot connect to saslauthd server: No such file or directory”

I try to setup postfix with smtp authentication. I want to use /etc/shadow as my realm Unfortunately I get a "generic error" when i try to authenticate # nc localhost 25 220 mail.foo ESMTP Postfix ...
5
votes
2answers
1k views

What is SASL/GSSAPI?

Numerous times i have met the expression SASL/GSSAPI. I have searched Google many times, but i simply do no understand what it is and how it relate to Kerberos. Anybody that have a simple explanation ...
4
votes
2answers
3k views

Can't get SASL auxprop/sasldb working with postfix/Ubuntu 12.04

I have an Ubuntu 8.04LTS system running Postfix 2.5.1. On that system SMTP AUTH runs fine. The contents of /etc/postfix/sasl/smtpd.conf are: pwcheck_method: auxprop auxprop_plugin: sasldb mech_list: ...
4
votes
3answers
1k views

Svn authorizing over sasl+ldap failing after Ubuntu update 10.04 -> 12.04

I have working svnserve solution on Ubuntu 10.04 for authorizing svn users over SASL to Active directory (LDAP, not LDAPDB). Config files are at the bottom. After upgrading server to 12.04 release, ...
4
votes
1answer
2k views

Subversion 1.6 + SASL : Only works with plaintext 'userPassword'?

I'm attempting to setup svnserve with SASL support on my Slackware 13.1 server and after some trial and error I'm able to get it to work with the configuration listed below: svnserve.conf [general] ...
3
votes
2answers
2k views

“No worthy mechs found” when trying to relay email to Gmail using Postfix

I've been trying to configure email to forward to Gmail, using Postfix to relay email to smtp.gmail.com. However, I'm failing to get it to authenticate with smtp.gmail.com, which is a rather vital ...
3
votes
3answers
8k views

POSTFIX fatal: no SASL authentication mechanisms

I am struggling with the error above for more than 5 hours. I had tried to remove Postfix completely and I had followed the instructions of the next manual and the SASL manual in order to reinstall ...
3
votes
1answer
2k views

Fail2Ban SASL Filter Misses Failed Logins

I am using fail2ban on my mail server. I discovered this morning that there were some 5000 failed login attempts (in the course of 1 hour) via SMTP that didn't get picked up by my sasl filter. Here ...
3
votes
1answer
6k views

SASL LOGIN authentication failed: UGFzc3dvcmQ6 - Find the username

First let me state that the mail server is working fine and users can connect and send email. Basically there is a local web script connecting into the mail server trying to send mail every few ...
3
votes
1answer
990 views

Postfix sasl: Relay access Denied (state 14)

I have postfix installed with dovecot. There are no problems when I'm trying to send e-mails from my server, however all e-mails that are coming in are rejected. My main.cf file: queue_directory = ...
3
votes
0answers
2k views

Saslauth with ldapdb on debian

I'm trying to get saslauthd working with openldap. ldapsearch and every service connected to openldap works fine. sasldblistusers2 doesn't work - and ldapwhoami does not work either. getent passwd ...
2
votes
4answers
3k views

saslauthd authentication error

My server has developed an expected problem where I am unable to connect from a mail client. I've looked at the server logs and the only thing that looks to identify a problem are events like the ...
2
votes
1answer
6k views

Postfix + SASL = “Relay Access Denied” when sending from outside the network

I have in /etc/postfix/main.cf: smtpd_sasl_auth_enable = yes smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination and SASL seems to be working: $ ...
2
votes
1answer
131 views

Postfix rejects SASL auth when dovecot is down

We're using Postfix with Dovecot and SASL Auth via Dovecot (based on this tutorial). All works like expected. But when Dovecot is down (i.e. for maintenance or other reasons) then clients could not ...
2
votes
2answers
3k views

Postfix “AUTH-LOGIN” no longer being offered for smtp auth after upgrade from Ubuntu 10.04 to 12.04.1

After doing a major Ubuntu dist upgrade from 10.04 to 12.04, my virtual-user postfix / dovecot installation only offers "PLAIN" SMTP Authentication mechanism. It used to offer PLAIN + LOGIN ...
2
votes
4answers
263 views

Is SASL not supported in Postfix on FreeBSD?

I'm managing a mail server that was set up on FreeBSD that runs Postfix and Dovecot. When I type postconf -a, nothing is returned. As I understand it, this command should tell me if SASL is supported ...
2
votes
1answer
6k views

Postfix (SASL) / MySQL: Use MD5 Encryption?

Is it possible to use MD5 password encryption to encrypt passwords when using Postfix / SASL and MySQL? Currently, my setup is using the MySQL CRYPT() function, which for various reasons isn't ideal.
2
votes
2answers
378 views

Postfix doesn't require authentication for local emails?

I've got a Postfix/Courier mail server (Authenticated with SASL/MySQL) all according to this tutorial. I'm currently running my server on Debian 6, it is a VPS. It works well as far as I can see but I ...
2
votes
1answer
589 views

Postfix + sasl method rimap strips domain name from user

I'm setting up a mail server with Postfix and Courier-IMAP. I'd like to do SMTP authentication with rimap, so that I don't have to maintain two user DB's. The problem I'm having, is that the username ...
2
votes
1answer
6k views

SASL PLAIN authentication failed: another step is needed in authentication

I have one host (rhea) where I have installed a postfix to relay the emails from my home server (tronics24), which is on a DSL connection. I have generated self-signed certificates: (on rhea) touch ...
2
votes
3answers
983 views

Postfix: SASL authentication failure: cannot connect to saslauthd server: Permission denied

I had a Postfix/Dovecot server up and running for about a week until I had to reboot it. When I did, things stopped working. I've been up searching for hours to no avail. IMAP successfully ...
2
votes
1answer
3k views

unable to open Berkeley db /etc/sasldb2: No such file or directory

In /var/log/mail.log I get such error message: Jul 25 01:33:11 ubuntu8 postfix/smtpd[10863]: warning: SASL authentication problem: unable to open Berkeley db /etc/sasldb2: No such file or directory ...
2
votes
1answer
369 views

Kerberos principal names for distributed services

Two typical forms for Kerberos (v5) principal names seem to be: username[/instance]@REALM service/fully-qualified-domain-name@REALM I've also seen something like this for services which could exist ...
2
votes
1answer
57 views
+50

SASL PLAIN authenticating with primary domain, but not with virtual domain

Postfix + dovecot and sasl. Works so far with 1 domain. Added a virtual domain. Incoming mail for this works. Outgoing however has SASL authentication failing. Why does it fail I don't know. ...
2
votes
1answer
90 views

Postfix/Dovecot: SASL LOGIN authentication aborted

I use Postfix together with Dovecot (auth/LMTP) on my mailserver. Everything is working fine, but I notice several warnings in the log-files each day: postfix/smtpd[4169]: warning: ...
2
votes
1answer
1k views

Postfix + SASLAUTHD + MySQL authentication problems

I've been trying to sort this out for the past 6 hours or so, this is the error message I'm facing (Running CentOS x64): /var/log/maillog: Jun 22 20:42:49 ptroa postfix/smtpd[10130]: warning: SASL ...
2
votes
2answers
2k views

FreeBSD: OpenLDAP, SASL, and GSSAPI

I've run into some problems getting OpenLDAP on FreeBSD (8.2-STABLE) to authenticate using Kerberos tickets. I hope I've just had a brain glitch, so please feel free to let me know that I've missed ...
2
votes
1answer
1k views

How do I allow anonymous SVN access on svnserve with SASL?

I've setup svnserve with SASL authentication and encryption for encrypting the traffic. Anonymous access should be allowed. My configuration file conf/svnserve.conf (with comments stripped) looks like ...
2
votes
2answers
909 views

Problem with testsaslauthd and kerberos5 (“saslauthd internal error”)

The error message “saslauthd internal error” seems like a catch-all for saslauthd, so I’m not sure if it’s a red herring, but here’s the brief description of my problem: This Kerberos command works ...
2
votes
1answer
974 views

Postfix sasl relay host - failure

I'm trying to set up SASL to a relayhost to send external email. I've read a hell of a lot and done everything I'm supposed to have done. However our provider won't accept me relaying emails with (we ...
2
votes
0answers
14 views

Dovecot: using a separate passdb per service

Situation: one front-facing server running Dovecot as IMAP/POP3/ManageSieve proxy, a mixture of IMAP servers (Dovecot, Exchange, ...) in the back-end. Dovecot's passdb does lookups against MySQL which ...
2
votes
1answer
183 views

Enabling smtp authentication on postfix with users in another smtp server

I am trying to replace an existing qmail installation with postfix. Qmail is currently authenticating outgoing smtp from users clients with a perl script. This script checks user's provided ...
2
votes
0answers
372 views

issue with heimdal kerberos in ldap backend

I'm having a bit of trouble getting Kerberos (Heimdal version) to work nicely with OpenLDAP. The kerberos database is being stored in LDAP itself. The KDC uses SASL EXTERNAL authentication as root to ...
1
vote
2answers
1k views

SASL (Postfix) authentication with MySQL and Blowfish pre-encrypted passwords

I have a Rails app with the Devise authentication gem running user registration and login. I want to use the db table that Devise populates when a user registers as the table that Postfix uses to ...
1
vote
2answers
5k views

SASL + postfixadmin - SMTP authentication with hashed password

I'm trying to set up the mail server. I have problem with my SMTP authentication using sasl. I'm using postfixadmin to create my mailboxes, the password is in some kind of md5, postfixadmin ...
1
vote
2answers
605 views

Relaying mail through postfix with SASL

I'd like to relay mail from my laptop through my server. I've successfully configured postfix and SASL, and I can AUTH successfully using telnet. dhcp-241:~ jgorset$ telnet mail.example.com 25 Trying ...
1
vote
2answers
2k views

postfwd not rate limiting sasl users

I would like to use postfwd version 2 to limit the amount of daily mail sent by my sasl authenticated users. I installed latest tarball: postfwd-1.35 with latest postfix from Centos 6.4 In my I have ...
1
vote
2answers
2k views

Postfix not working

A while ago I installed the postfix mail server on my ubuntu 10.04 VPS. At the time it was working good but now it's just stopped working. I was trying to enable SASL authentification and somewhere it ...
1
vote
1answer
3k views

Exim authentication using Dovecot driver

Been following the instructions at the Dovecot Wiki for setting up Exim to share authentication credentials with Dovecot. I have setup Dovecot to deliver mails for virtual users and setup a router ...
1
vote
2answers
4k views

Posfix smtpd_sasl_path seems does not work for me

I have such configuration: /etc/postfix/main.cf smtpd_sasl_type = cyrus smtpd_sasl_auth_enable = yes smtpd_sasl_path = /usr/lib/sasl2/smtpd /usr/lib/sasl2/smtpd.conf pwcheck_method: auxprop ...
1
vote
1answer
569 views

Postfix cannot authenticate against SASL

My system is Debian 7 aka Wheezy with postfix, courier, and mysql installed. Courier works well and if I issue testsaslauthd -u user@domain -p password -f /var/spool/postfix/var/run/saslauthd/mux -s ...
1
vote
2answers
3k views

Upgrading to Debian 7: Postfix Auth fails

I'm upgrading various Debian 6 servers to Debian 7. There are a few minor issues, but this one is a show stopper. On Debian, Postfix runs in a chrooted environment. That environment is setup ...
1
vote
1answer
271 views

Postfix allows own domains to be sent without asking for logins

Postfix issue, (I asked this yesterday and manged to delete my own post instead of editing it sorry for that) I use Postfix+SASL I got these settings in main.cf: smtpd_sasl_security_options = ...
1
vote
1answer
4k views

Roundcube, Postfix and SMTP authentication (CRAM-MD5) error

I'm having trouble configuring Roundcube with SMTP authentification on Postfix. All the credentials are true, because I have no problem using the e-mail from Thunderbird and my mobile phone e-mail ...
1
vote
2answers
7k views

Postfix sasl login failing no mechanism found

following the link here: http://flurdy.com/docs/postfix/ with posfix, courier, MySql, and sasl gave me a web server that has imap functionality working fine but when i go to log into the server to ...
1
vote
1answer
4k views

OpenLDAP Setup help: SASL/GSSAPI authentication started

I am trying to setup & configure OpenLDAP on Fedora Core 13. I've gotten as far as compiling and installing Openldap v2.4.23. Whenever I try to run one of the LDAP commands (like ldapsearch), ...
1
vote
1answer
1k views

saslauthd and PAM: “Too many open files” error - saslauthd restart fixes this - what is wrong?

I have a Postfix mail server running Debian Squeeze. SASL authentication for secure SMTP is supported by saslauthd which relies on pam, which relies on winbind. This pattern seems to be reoccuring ...
1
vote
1answer
854 views

Postfix sasl relay host

I'm trying to set up SASL to a relayhost to send external email. I've read a hell of a lot and done everything I'm supposed to have done. However our provider won't accept me relaying emails with (we ...
1
vote
1answer
222 views

Postfix sasl/tls username password ubuntu14.04 only sender [closed]

Anybody can suggest me a good tutorial to configure postfix as a secure smtp. I've installed it by this command sudo apt-get install mail-stack-delivery but I can't use it. In particular I haven't a ...