Questions tagged [sasl]

Simple Authentication and Security Layer (SASL) is a framework for authentication and data security in Internet protocols.

Filter by
Sorted by
Tagged with
0
votes
0answers
8 views

Can't determine the principal used to LDAP syncrepl GSSAPI

I've configured two openldap fully functional in HA (syncrepl mode provider - slave). After testing that simple bind syncrepl works flawlessly, I'm trying to deploy from scratch using only GSSAPI to ...
0
votes
0answers
21 views

Postfix: With SASL on Thunderbird can connect to Postfix but Node.js app can't. With SASL off the reverse is true. Why is this?

Environment: Postfix 3.3, Dovecot 2.2, Node.js - Postfix/Dovecot is running next to a Node.js app inside of a Digital Ocean Droplet. Question: With SASL on Thunderbird can connect to Postfix but ...
1
vote
0answers
44 views

Authenticating Apache HTTPServer 2.4.x with mod_auth_gssapi using Microsoft Active directory

I'm looking for below configurations for GSSAPI authentication with Apache 2.4 for Active directory: 1. How to configure Apache HTTPServer 2.4.x with mod_auth_gssapi using Microsoft Active directory? ...
0
votes
0answers
25 views

Getting postfix to log to a file on docker

I have created a docker image based on Ubuntu 20.04 with postfix and dovecot. I also installed syslog-ng in hope to solve my problem, but it didn't work. Thing is, I want to use fail2ban to prevent ...
0
votes
0answers
23 views

Secure ldap and Kerberos bind after Microsoft change

I use Kerberos/spnego and ldap for a SSO, therefore we bind Kerberos to the AD of our client. Now with March 2020 Microsoft is recommending to use LDAPS instead of LDAP and use SASL only with ...
0
votes
0answers
174 views

Postfix error, SASL authentication failed; cannot authenticate to server, no mechanism available

I would like to set up postfix relay to my website hosting SMTP server, from my home server. It's Centos 7, set up using dynamic IP and dynamic DNS. Because of limited space in my hosting site, I ...
0
votes
0answers
26 views

OpenLDAP SASL EXTERNAL and TLS

I have a semi-working openldap TLS configuration. Considering the many questions here about this particular thing this seems to be a feat of its own. But this prohibits me to use ldapi:// and the ...
2
votes
1answer
69 views

Postfix warning: SASL: Connect to /var/spool/postfix/private/auth failed: No such file or directory

I have searched, and failed to find an answer and I am out of ideas. I just do not know enough about postfix and dovecot to parse the configs or understand what may be causing this error. warning: ...
0
votes
0answers
46 views

SSSD Certificate-Based Client Authentication against LDAP

We use a (Open)LDAP database to authenticate clients in our network utilizing SSSD on the client side. Currently, the users have to enter their password to log-in. We wanted to change the ...
0
votes
1answer
179 views

Dovecot: Username character disallowed by auth_username_chars: 0x0a

I'm trying to set up a postfix+dovecot server to use GNU Mailman for creating a mailing list server, however I'm currently stuck at setting up SASL authentication using dovecot. It seems to add a ...
0
votes
0answers
43 views

Addressing sasl ldapdb “invalid parameter supplied” message in syslog

I am getting the following error messages in our syslog when I run the krb5-sync command on our Debian stretch machine: 2019-12-20T06:04:10.352902-08:00 kdc-uat2 krb5-sync[20631]: ...
0
votes
1answer
138 views

How to setup SASL Proxy Authorization with an OpenLDAP server on Debian

For Kerberos Authentication together with SASL/GSSAPI Authorization on client devices I need Proxy Authorization on an OpenLDAP server running on Raspberry Pi with Debian/Raspbian Buster. I tried to ...
0
votes
0answers
24 views

How to set userpassword preference on entries with multiple userpassword attributes?

Currently I have LDAP entries with 2 userPassword attributes. One is a regular SHA password which the other one delegates to SASL. However this results in all entries binding through SASL rather than ...
0
votes
0answers
21 views

Sieve vacation auto-reply doesn't authenticate with the correct user on SASL file

I've set up sieve filtering in my mail server to use a vacation script, however when the mail is sent by postfix it bounces back because it doesn't authenticate with the ISP. I have the ...
0
votes
0answers
16 views

Building a generic LDAP Authentication client

We have a B2B web application, offering network management services to companies. We would like to enable LDAP authentication for this service. What I have in mind for the integration is the following:...
0
votes
0answers
152 views

LDAP Bind Account Minimum Permissions

I am trying to find out the minimum permissions required for an LDAP bind through SASL. I'm rusty on AD so please forgive the ignorance. I know that a standard domain user is sufficient to perform a ...
0
votes
0answers
232 views

Configure SASL on Centos 7 Postfix/Dovecot/MariaDB setup [duplicate]

I'm trying to set up SASL on my existing Postfix + Dovecot setup with virtual users in MariaDB. Authentication fails: systemctl status postfix -l ... postfix/smtpd[17389]: fatal: no SASL ...
0
votes
0answers
145 views

How to configure svnserve to use OpenLDAP through SASL

Bear with me, I'm really annoyed and frustrated after about 2 weeks of struggles following different guides and manuals without any success, so any suggestions and ideas are welcome because I'm lost. ...
0
votes
1answer
195 views

Can't telnet to Postfix SMTP server after adding smtpd_sasl_auth_enable option

I have the Postfix SMTP server installed on my CentOS 7 machine on port 25. To test that it's working, I connect to it using telnet, like this: # telnet localhost 25 and the result is: Trying ::1....
1
vote
0answers
14 views

SASL not blocking non authenticated user sending email to itself

My email server is working fine except that still allows anyone to send email from a my@email.pt to my@email.pt. I eanbled in /etc/postfix/main.cf smtpd_sasl_type = dovecot smtpd_sasl_path = private/...
0
votes
1answer
347 views

Postfix How to send mail in behalf of an alias

I'm using postfix as a mail relay in a very simple setup, mostly with aliases, forwarding mails to GMail. My main goal with this is to minimize the need for mailboxes on my server. Let's assume I ...
0
votes
1answer
801 views

Unable to connect to port 993 for IMAP on Ubuntu server with Postfix/Dovecot/MySQL

Ubuntu 16.04.5 Apache2 MySQL Postfix w/MySQL Dovecot SASL2 UFW I am trying to install a working mail server and client on this machine. I followed this tutorial which allows authentication through ...
0
votes
1answer
261 views

Postfix / Thunderbird / Cyrus SASL2: Username Or Password Invalid

I'm quite certain that I've entered my password correctly; that Thunderbird regards it as incorrect is I expect due to a Postfix or Cyrus SASL misconfiguration. I am perpetually confused about eMail ...
0
votes
0answers
339 views

Pass through authentication with LDAP and Kerberos

I have a SLES 12 server and installed and configured MIT KDC and openLDAP. I want to use pass through authentication in openLDAP so that the password is only stored in the KDC and I don't have to ...
1
vote
1answer
599 views

Using SASL from CentOS 7 Host to Authenticate to Active Directory

Trying to configure SASL on a CentOS 7 box to talk to an Active Directory installation. I've tried a couple different configurations that generate different errors. The latest: No worthy mechs found ...
0
votes
1answer
199 views

Kopano LDAP unable to login when username has special character

Ok, so I currently have a Kopano server working with Openldap to manage logins. The problem I currently have is that if I decide to define a user's login as his email, I can't send a message via ...
1
vote
1answer
207 views

Mail Server allow sending spam to hosted mailboxes

I got an issue on both of my servers (Postfix + Dovecot and one on Zimbra) My issue is some robots send spam without login to our hosted mailboxes using the same FROM/RCPT. It seems Google got the ...
0
votes
1answer
1k views

What is wrong with my SASL?

So the story goes: I have a score of CentOS 6.9 virtual machines, migrated to Microsoft's Azure cloud by VHD upload. Once deployed I found out that Azure doesn't allow to send out email directly from ...
0
votes
1answer
313 views

MySQL Authentication against OpenLDAP Failure

I'm trying to set up OpenLDAP authentication on a MySQL Commercial Server (5.7.21) I've followed all the steps described on MySQL web https://dev.mysql.com/doc/refman/5.7/en/ldap-pluggable-...
1
vote
1answer
2k views

fail2ban cannot set iptables rules

I have only a thin knowledge of both iptables and fail2ban, but my mail server has a lot of incoming connections that I want to get rid of. I have this config block in /etc/fail2ban/jail.conf [...
1
vote
0answers
616 views

Postfix: How to use reject_sender_login_mismatch when using MySQL virtual users?

I want to force senders to use an envelope sender address that's identical to the SASL login username. From the Postfix SASL README I see I should list, in the smtpd_sender_login_maps option, a hash ...
3
votes
0answers
236 views

Postfix: Enforce sender address for some users only

I am looking for an option to enforce an envelope sender address in postfix for selected users, only. E.g., I want to permit user1@example.com to send mails as user1@example.com, only, while all other ...
0
votes
1answer
344 views

Ubuntu Server - Postfix Issue

I have an issue receiving an email into my server here is what shows in the mail.log file: Nov 1 10:50:30 hoskin postfix/smtpd[20806]: warning: SASL: Connect to /var/spool/postfix/private/auth ...
2
votes
1answer
642 views

How to generate entries for different mechanisms with saslpasswd2?

I'm struggling to create the satisfactory set of records in sasldb2.db. If I use the regular saslpasswd2 -c user I get exactly one record, according to sasldblistusers2: user@my.example.com: ...
0
votes
1answer
262 views

Postfix and dovecot. TLS not available

I've been trying to setup a send only SMTP server with postfix and dovecot, on Ubuntu 16.04. The problem I'm having is that when trying to send an email I get the message back. 4.7.0 TLS not ...
0
votes
1answer
748 views

Zentyal 5: SASL credentials could not be processed

I want to ask you for help and point me how i can fix my mistake without reinstalling the whole system. So... There was Zentyal 4, and after upgrading to Zentyal 5 I got some errors. One of them ...
1
vote
1answer
1k views

Need help creating LDAP Server that syncs users from 3 separate AD Controllers

Hopefully I can get some help here as I have really been beating my head against the ol' keyboard over here. So, here's the situation. We recently migrated end users from an onsite Exchange server ...
3
votes
2answers
2k views

Dovecot SASL auth not working

Like said, Dovecot auth fails when i try to connect with Thunderbird. Incoming and outgoing mail works fine. I used e.g. this tutorial (and many more) as a reference: https://serverfault.com/...
0
votes
1answer
723 views

How to setup TLS for postfix? Should I use SASL with dovecot?

I need to setup TLS/SSL for postfix, so I can send mail from my iphone via my smtp mailserver (or else i will get relay access denied messages). From what I understand this is one way: https://www....
2
votes
1answer
1k views

postfix not working correctly after system upgrade (no SASL authentication mechanism)

I had a working postfix/dovecot configuration running on a Ubuntu Server machine 14.04 LTS. Then I made a upgrade to 16.04.2 using do-release-upgrade. Everything seemed to work besides my mail service....
6
votes
3answers
5k views

Add GSSAPI to OpenLdap in supportedSASLMechanisms

I'm looking how to add the GSSAPI support into my OpenLDAP ? Current setup MIT Kerberos V + OpenLDAP Kerberos bind to openldap Able to issue kerberos tickets to my users (with kinit exampluser) Able ...
1
vote
1answer
571 views

Postfix + Dovecot login fail only in Imap

sorry in advance because Im sure the problem is stupid, but after two days trying different configurations from Google and Serverfault it still not working. Im Newbie in Postfix/Dovecot After ...
1
vote
1answer
568 views

Postfix SMTP sender access restrictions

The issue: Couple of days ago we faced spam attack from external IP that was using a real external domain to send around 7k email to different external domains like yahoo, hotmail, gmail ....etc, ...
4
votes
1answer
13k views

warning: /usr/lib/postfix/smtpd: bad command startup — throttling

today i set up a mailserver with a german tutorial from here: Now i'm done and need help with my issues. Sry for bad english - i hope my informations help u to help me ^^ mail.log: Nov 18 16:30:00 ...
1
vote
1answer
613 views

SMTP-SASL authentification doesn't work

I created another thread previously, where I reported about the problem that I wasn't able to get saslauthd starting up at all: SMTP authentification: saslauthd won't start I now re-installed a ...
3
votes
1answer
252 views

How to check if Postfix was compiled with support for Dovecot SASL?

The Dovecot instructions state: Since version 2.3, Postfix supports SMTP AUTH through Dovecot SASL as introduced in the Dovecot 1.0 series. If using Postfix obtained from a binary (such as a ....
2
votes
0answers
631 views

SMTP authentification: saslauthd won't start

I've set up a mailserver, which is working fine, but now I wanted to add SMTP authentification using SASL. However, trying to start saslauthd (my system is Ubuntu 16.04) doesn't work, but I don't get ...
1
vote
1answer
858 views

Postfix SASL allow SMTP Authentication and relay messages

I am trying to set my SMTP server so it allows only SMTP authenticated users to send emails but the actual sending is done via Mailjet. I am running on Ubuntu 14.04 LTS and Postfix version is ...
1
vote
0answers
517 views

ldap_bind: Invalid credentials (49) when configuring Pass-Trough authentication with SASL in OpenLDAP with AD

I'm using ubuntu 14.04 and OpenLDAP-2.4.40. I have synchronized Active Directory users in OpenLDAP using LSC utility. Now I want to do the authentications on the OpenLDAP part and will use the AD ...
5
votes
1answer
2k views

SASL auth to LDAP behind HAPROXY with name mismatches

My kerberos domain in MYEXAMPLE.ORG, but servers are located in the dmz-int.example.org dns zone. LDAP server is b1.dmz-int.example.org; its keytab include: udo ktutil -k /etc/krb5.keytab list /etc/...

1
2 3 4 5