Simple Authentication and Security Layer (SASL) is a framework for authentication and data security in Internet protocols.

learn more… | top users | synonyms

7
votes
2answers
3k views

Svnserve authentication with SASL and normal user accounts

Is it possible to set up svnserve so that it authenticates using the system's users and passwords (e.g. using the /etc/shadow file)? I assume this would be with SASL, but I couldn't find an SASL ...
5
votes
2answers
985 views

What is SASL/GSSAPI?

Numerous times i have met the expression SASL/GSSAPI. I have searched Google many times, but i simply do no understand what it is and how it relate to Kerberos. Anybody that have a simple explanation ...
4
votes
1answer
2k views

Subversion 1.6 + SASL : Only works with plaintext 'userPassword'?

I'm attempting to setup svnserve with SASL support on my Slackware 13.1 server and after some trial and error I'm able to get it to work with the configuration listed below: svnserve.conf [general] ...
4
votes
2answers
2k views

postfix sasl “cannot connect to saslauthd server: No such file or directory”

I try to setup postfix with smtp authentication. I want to use /etc/shadow as my realm Unfortunately I get a "generic error" when i try to authenticate # nc localhost 25 220 mail.foo ESMTP Postfix ...
3
votes
3answers
709 views

Svn authorizing over sasl+ldap failing after Ubuntu update 10.04 -> 12.04

I have working svnserve solution on Ubuntu 10.04 for authorizing svn users over SASL to Active directory (LDAP, not LDAPDB). Config files are at the bottom. After upgrading server to 12.04 release, ...
3
votes
1answer
2k views

Fail2Ban SASL Filter Misses Failed Logins

I am using fail2ban on my mail server. I discovered this morning that there were some 5000 failed login attempts (in the course of 1 hour) via SMTP that didn't get picked up by my sasl filter. Here ...
3
votes
1answer
2k views

Can't get SASL auxprop/sasldb working with postfix/Ubuntu 12.04

I have an Ubuntu 8.04LTS system running Postfix 2.5.1. On that system SMTP AUTH runs fine. The contents of /etc/postfix/sasl/smtpd.conf are: pwcheck_method: auxprop auxprop_plugin: sasldb mech_list: ...
3
votes
1answer
968 views

Postfix sasl: Relay access Denied (state 14)

I have postfix installed with dovecot. There are no problems when I'm trying to send e-mails from my server, however all e-mails that are coming in are rejected. My main.cf file: queue_directory = ...
3
votes
0answers
1k views

Saslauth with ldapdb on debian

I'm trying to get saslauthd working with openldap. ldapsearch and every service connected to openldap works fine. sasldblistusers2 doesn't work - and ldapwhoami does not work either. getent passwd ...
3
votes
0answers
645 views

Postfix sasl relay host - weird behaviour

Previously I had a relayhost set in postfix to mailhost.zen.co.uk - I don't think it accepts SASL - only TLS. So I though I would try changing to a different relay host. However, the following log ...
2
votes
1answer
5k views

Postfix + SASL = “Relay Access Denied” when sending from outside the network

I have in /etc/postfix/main.cf: smtpd_sasl_auth_enable = yes smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination and SASL seems to be working: $ ...
2
votes
2answers
777 views

“No worthy mechs found” when trying to relay email to Gmail using Postfix

I've been trying to configure email to forward to Gmail, using Postfix to relay email to smtp.gmail.com. However, I'm failing to get it to authenticate with smtp.gmail.com, which is a rather vital ...
2
votes
1answer
124 views

Postfix rejects SASL auth when dovecot is down

We're using Postfix with Dovecot and SASL Auth via Dovecot (based on this tutorial). All works like expected. But when Dovecot is down (i.e. for maintenance or other reasons) then clients could not ...
2
votes
2answers
75 views

Postfix doesn't require authentication for local emails?

I've got a Postfix/Courier mail server (Authenticated with SASL/MySQL) all according to this tutorial. I'm currently running my server on Debian 6, it is a VPS. It works well as far as I can see but I ...
2
votes
2answers
2k views

Postfix “AUTH-LOGIN” no longer being offered for smtp auth after upgrade from Ubuntu 10.04 to 12.04.1

After doing a major Ubuntu dist upgrade from 10.04 to 12.04, my virtual-user postfix / dovecot installation only offers "PLAIN" SMTP Authentication mechanism. It used to offer PLAIN + LOGIN ...
2
votes
4answers
180 views

Is SASL not supported in Postfix on FreeBSD?

I'm managing a mail server that was set up on FreeBSD that runs Postfix and Dovecot. When I type postconf -a, nothing is returned. As I understand it, this command should tell me if SASL is supported ...
2
votes
1answer
5k views

Postfix (SASL) / MySQL: Use MD5 Encryption?

Is it possible to use MD5 password encryption to encrypt passwords when using Postfix / SASL and MySQL? Currently, my setup is using the MySQL CRYPT() function, which for various reasons isn't ideal.
2
votes
1answer
5k views

SASL PLAIN authentication failed: another step is needed in authentication

I have one host (rhea) where I have installed a postfix to relay the emails from my home server (tronics24), which is on a DSL connection. I have generated self-signed certificates: (on rhea) touch ...
2
votes
1answer
1k views

Postfix “SASL authentication failure: No worthy mechs found”

Trying to use postfix with smtp to connect to google's smtp. When trying to send mail, I get this error: Sep 15 14:04:41 zedsaid postfix/smtp[20271]: certificate verification failed for ...
2
votes
1answer
357 views

Kerberos principal names for distributed services

Two typical forms for Kerberos (v5) principal names seem to be: username[/instance]@REALM service/fully-qualified-domain-name@REALM I've also seen something like this for services which could exist ...
2
votes
3answers
3k views

Postfix rejecting mail from authenticated clients

I am trying to configure Postfix so that it would accept mail from authenticated clients outside $mynetworks. When I try to send a test email from my iPhone, which is configured to use port 25, SSL ...
2
votes
1answer
1k views

FreeBSD: OpenLDAP, SASL, and GSSAPI

I've run into some problems getting OpenLDAP on FreeBSD (8.2-STABLE) to authenticate using Kerberos tickets. I hope I've just had a brain glitch, so please feel free to let me know that I've missed ...
2
votes
1answer
1k views

How do I allow anonymous SVN access on svnserve with SASL?

I've setup svnserve with SASL authentication and encryption for encrypting the traffic. Anonymous access should be allowed. My configuration file conf/svnserve.conf (with comments stripped) looks like ...
2
votes
1answer
4k views

SASL LOGIN authentication failed: UGFzc3dvcmQ6 - Find the username

First let me state that the mail server is working fine and users can connect and send email. Basically there is a local web script connecting into the mail server trying to send mail every few ...
2
votes
1answer
934 views

Postfix sasl relay host - failure

I'm trying to set up SASL to a relayhost to send external email. I've read a hell of a lot and done everything I'm supposed to have done. However our provider won't accept me relaying emails with (we ...
2
votes
1answer
419 views

Postfix + SASLAUTHD + MySQL authentication problems

I've been trying to sort this out for the past 6 hours or so, this is the error message I'm facing (Running CentOS x64): /var/log/maillog: Jun 22 20:42:49 ptroa postfix/smtpd[10130]: warning: SASL ...
2
votes
1answer
147 views

Enabling smtp authentication on postfix with users in another smtp server

I am trying to replace an existing qmail installation with postfix. Qmail is currently authenticating outgoing smtp from users clients with a perl script. This script checks user's provided ...
2
votes
0answers
280 views

issue with heimdal kerberos in ldap backend

I'm having a bit of trouble getting Kerberos (Heimdal version) to work nicely with OpenLDAP. The kerberos database is being stored in LDAP itself. The KDC uses SASL EXTERNAL authentication as root to ...
1
vote
3answers
2k views

saslauthd authentication error

My server has developed an expected problem where I am unable to connect from a mail client. I've looked at the server logs and the only thing that looks to identify a problem are events like the ...
1
vote
2answers
545 views

Relaying mail through postfix with SASL

I'd like to relay mail from my laptop through my server. I've successfully configured postfix and SASL, and I can AUTH successfully using telnet. dhcp-241:~ jgorset$ telnet mail.example.com 25 Trying ...
1
vote
2answers
1k views

SASL (Postfix) authentication with MySQL and Blowfish pre-encrypted passwords

I have a Rails app with the Devise authentication gem running user registration and login. I want to use the db table that Devise populates when a user registers as the table that Postfix uses to ...
1
vote
2answers
4k views

SASL + postfixadmin - SMTP authentication with hashed password

I'm trying to set up the mail server. I have problem with my SMTP authentication using sasl. I'm using postfixadmin to create my mailboxes, the password is in some kind of md5, postfixadmin ...
1
vote
2answers
3k views

Posfix smtpd_sasl_path seems does not work for me

I have such configuration: /etc/postfix/main.cf smtpd_sasl_type = cyrus smtpd_sasl_auth_enable = yes smtpd_sasl_path = /usr/lib/sasl2/smtpd /usr/lib/sasl2/smtpd.conf pwcheck_method: auxprop ...
1
vote
1answer
308 views

Postfix + sasl method rimap strips domain name from user

I'm setting up a mail server with Postfix and Courier-IMAP. I'd like to do SMTP authentication with rimap, so that I don't have to maintain two user DB's. The problem I'm having, is that the username ...
1
vote
1answer
204 views

Postfix allows own domains to be sent without asking for logins

Postfix issue, ( i asked this yesterday and manged to delete my own post instead of editing it sorry for that) I use Postfix+sasl i got these settings in main.cf smtpd_sasl_security_options = ...
1
vote
2answers
5k views

Postfix sasl login failing no mechanism found

following the link here: http://flurdy.com/docs/postfix/ with posfix, courier, MySql, and sasl gave me a web server that has imap functionality working fine but when i go to log into the server to ...
1
vote
1answer
3k views

OpenLDAP Setup help: SASL/GSSAPI authentication started

I am trying to setup & configure OpenLDAP on Fedora Core 13. I've gotten as far as compiling and installing Openldap v2.4.23. Whenever I try to run one of the LDAP commands (like ldapsearch), ...
1
vote
1answer
1k views

saslauthd and PAM: “Too many open files” error - saslauthd restart fixes this - what is wrong?

I have a Postfix mail server running Debian Squeeze. SASL authentication for secure SMTP is supported by saslauthd which relies on pam, which relies on winbind. This pattern seems to be reoccuring ...
1
vote
1answer
3k views

unable to open Berkeley db /etc/sasldb2: No such file or directory

In /var/log/mail.log I get such error message: Jul 25 01:33:11 ubuntu8 postfix/smtpd[10863]: warning: SASL authentication problem: unable to open Berkeley db /etc/sasldb2: No such file or directory ...
1
vote
1answer
820 views

Postfix sasl relay host

I'm trying to set up SASL to a relayhost to send external email. I've read a hell of a lot and done everything I'm supposed to have done. However our provider won't accept me relaying emails with (we ...
1
vote
2answers
664 views

postfix TLS disconnect from unknown

I install centos 6.4 posttfix with sasl and TLS my postconf -e alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases broken_sasl_auth_clients = yes command_directory = /usr/sbin ...
1
vote
2answers
1k views

Upgrading to Debian 7: Postfix Auth fails

I'm upgrading various Debian 6 servers to Debian 7. There are a few minor issues, but this one is a show stopper. On Debian, Postfix runs in a chrooted environment. That environment is setup ...
1
vote
1answer
2k views

Roundcube, Postfix and SMTP authentication (CRAM-MD5) error

I'm having trouble configuring Roundcube with SMTP authentification on Postfix. All the credentials are true, because I have no problem using the e-mail from Thunderbird and my mobile phone e-mail ...
1
vote
2answers
1k views

Postfix not working

A while ago I installed the postfix mail server on my ubuntu 10.04 VPS. At the time it was working good but now it's just stopped working. I was trying to enable SASL authentification and somewhere it ...
1
vote
1answer
1k views

SVN SASL Commit - Authorisation failed

I've been attempting to setup our SVN server to be accessible by both DAV SVN through Apache and now the SVN:// protocol (for better performance) root@svnvm:~# svnserve --foreground -d --foreground ...
1
vote
1answer
4k views

Settings to change to allow PostFix to accept outgoing mail from authenticated users

I have a mail server that can receive mail for users that are in a MySQL database, and lets them download those message via POP3s. This is all working fine. My PostFix version is 2.7.0, on Ubuntu ...
1
vote
1answer
2k views

Openldap/Sasl/GSSAPI on Debian: Key table entry not found

The goal: to make an OpenLDAP server to authenticate using Kerberos V via GSSAPI Setup: several virtual machines running on freshly installed/updated Debian Squeeze A master KDC server ...
1
vote
1answer
166 views

Does Cyrus SASL support userdb authentication?

I'm not finding anything that indicates it doesn't; I need to be able to authenticate virtual users. If not do I need to start using dovecot?
1
vote
1answer
1k views

Can't login to Cyrus IMAP with domain name in username, can if I don't qualify with domain name

I'm trying to install Cyrus with SASL for authentication. I'm struggling getting logins to work properly though. I'm trying to setup virtual hosting, as we'll have several domains worth of email on ...
1
vote
1answer
1k views

How do I use ldapsearch with a cross-realm ticket?

kinit user@DOMAIN.TLD klist -afe Ticket cache: FILE:/tmp/krb5cc_1000 Default principal: user@DOMAIN.TLD Valid starting Expires Service principal 08/04/11 13:14:53 08/05/11 ...