Questions tagged [saslauthd]
saslauthd is a daemon process that handles plaintext authentication requests on behalf of the SASL library.
109
questions
0
votes
0
answers
26
views
postfix secure & insecure connections
I have configured postfix SMTP server for mail sending only with below configurations, I've used cyrus-sasl to authenticate with openLDAP, I want to achieve SMTP port 25 to use insecure connections ...
- 101
0
votes
2
answers
78
views
Postfix smtpd_sender_restrictions with logical AND
I am using postfix, I need to configure sender based restrictions so nobody that is not authenticated & not part of mynetworks can send mail through this server,
this is my smptd sender ...
- 101
0
votes
0
answers
108
views
SASL authontication is not working in postfix SMTP
Here my details
mantech@mail:/etc/pam.d$ ls
chfn common-session-noninteractive login runuser
chpasswd cron newusers runuser-l
chsh cups ...
0
votes
1
answer
1k
views
testsaslauthd giving "No such file or directory" error
I'm trying to setup a postifix server with virtualmin and while doing so I ran into a SASL error that said "No such file or directory". So I tried testing it with "testsaslauthd -u ...
- 1
0
votes
1
answer
829
views
Relay access denied on VPS (error 554 5.7.1)
I'm trying to figure out how to solve a problem on my VPS, maybe you can help me :D
Long story short: this is the first time I operate on a Bare Metal VPS, and I'm trying to setup the mail server.
...
0
votes
1
answer
1k
views
Fail2Ban - Posfix-SASL not working
i have a problem that my fail2ban will not ban sasl authentications against my postfix.
This is an example log entry from /var/log/syslog:
Jul 31 13:42:21 v50428 postfix/smtps/smtpd[635398]: warning: ...
- 21
1
vote
0
answers
44
views
Tell saslauthd to reject authentication attempts for all domains other than ours
We are running Postfix and require authentication for the sending of mail through SMTP. The authentication uses Cyrus' saslauthd which does a Kerberos authentication against our Kerberos domain.
Is ...
- 2,681
1
vote
1
answer
387
views
Postfix: how to use SASL authentication?
Hi I am trying to use a very simple sasl authentication. I have been testing the method here but still encounter error.
my server is a fresh install server.
And the command I run:
# saslpasswd2 -c -u ...
- 121
3
votes
1
answer
3k
views
Getting SENDMAIL (as a client) to use AUTH LOGIN
I am trying to use SENDMAIL (v8.15) on a Pi in my network to just forward mails to my SendGrid account. This is needed because my legacy webcams on my network cannot use the very long password ...
- 397
3
votes
1
answer
3k
views
configure saslauthd with PAM
I'm trying to configure saslauthd with PAM. I created a user test with password test using useradd and passwd and I checked that I can login with su - test.
[arch@vps-5220ce87 ~]$ systemctl status ...
- 151
0
votes
1
answer
155
views
Saslauthd - slow response, client timeout
We use saslauthd 2.1.27 with postfix and rimap authentication. We experience a strange issue after an update: terribly slow response times soon after a restart.
If the saslauthd process is restarted, ...
- 377
0
votes
0
answers
485
views
Cyrus-sasl config in Postfix in FreeBSD without dovecot
Good Afternoon, I have installed a Freebsd 12.1 with postfix and when trying to start see this in /var/log/maillog
warning: SASL: Connect to /usr/local/lib/sasl2/smtpd.conf failed: No such file or ...
- 7
0
votes
0
answers
508
views
postfix+saslauthd+pam_mysql adds EOL to passwords, thus breaks
I'm trying to use the pam_mysql module in conjunction with postfix and saslauthd. Everything appears to be working, except the actual password comparison is failing.
Note: the case being tested is ...
0
votes
0
answers
457
views
Get saslauthd to use a Kerberos principal other than one based on the hostname
We are using saslauthd on a Debian stretch Linux environment. We use saslauthd to do GSSAPI (i.e., kerberos) authentications. I see that saslauthd uses the principal host/<servername> when doing ...
- 2,681
1
vote
1
answer
2k
views
Can't telnet to Postfix SMTP server after adding smtpd_sasl_auth_enable option
I have the Postfix SMTP server installed on my CentOS 7 machine on port 25.
To test that it's working, I connect to it using telnet, like this:
# telnet localhost 25
and the result is:
Trying ::1....
- 1,510
2
votes
1
answer
749
views
Can't find the IP address of a Saslauthd login attempt
I need help locating the origin IP from this error messages/ login attempts:
From the 'sasl auth daemon' via Logwatch:
pam_unix(smtp:auth): check pass; user unknown
pam_unix(smtp:auth): ...
- 31
1
vote
0
answers
916
views
ldap pass though authentication
We have a scenario where the local ldap will actually receive all authentication requests and then pass the authentication to SASLauthd module when password is stored as {SASL}username. Thus, the ...
- 11
0
votes
0
answers
266
views
Pass through authentication from Openldap to Openldap
I am looking for a method to setup a Pass Through Authentication (PTA) between 2 openldap instances. All what I found is that is is possible to have this feature between an openldap instance to which ...
- 101
1
vote
1
answer
1k
views
Using SASL from CentOS 7 Host to Authenticate to Active Directory
Trying to configure SASL on a CentOS 7 box to talk to an Active Directory installation. I've tried a couple different configurations that generate different errors. The latest:
No worthy mechs found
...
- 141
0
votes
1
answer
270
views
Openldap RootDN and other 'admin' user work differently when changing userPassword
Using OpenLDAP (2.4.44) on CENTOS 7 and have configured {SASL} pass-thru to another remote LDAP for some users using the userPassword field. This can change (overwrite) to using the local password {...
5
votes
1
answer
5k
views
Log username in maillogs when there is SASL authentication failure
I have a server with postfix and cyrus-sasl. When ever there is an authentication failure it reports in maillog below line.
postfix/smtpd[27669]: warning: unknown[185.xxx.xxx.xxx]: SASL LOGIN ...
- 71
0
votes
1
answer
7k
views
How to restart linux services if it reaches 100% CPU? [closed]
I have postfix email server with saslauthd. Time and again saslauthd daemon eats 100% CPU. Restarting these services returns to normal cpu usage.
Is there any proper script to determine services with ...
1
vote
1
answer
3k
views
What is wrong with my SASL?
So the story goes: I have a score of CentOS 6.9 virtual machines, migrated to Microsoft's Azure cloud by VHD upload. Once deployed I found out that Azure doesn't allow to send out email directly from ...
- 140
-1
votes
1
answer
826
views
postfix fails to autheticate aginst saslauthd
I have a weird problem trying to autheticate postfix against saslauthd.
I am on a standard linux system:
Linux smswtc 3.16.0-4-amd64 #1 SMP Debian 3.16.51-3 (2017-12-13) x86_64 GNU/Linux
postfix ...
0
votes
1
answer
6k
views
sasl authentication with postfix
I have a weird problem on postfix trying to authenticate user/pass saslauthd
relevant lines in mail.log
Feb 14 16:06:21 smswtc postfix/smtpd[3577]: warning: SASL authentication failure: Requested ...
0
votes
1
answer
2k
views
Postfix SMTP SASL Authentication with pam_mysql can't accept email addresses as username
I'm currently trying working on a project to update an existing postfix deployment. I'm having issues with authenticating users against smtp.
The primary issue I have is that our postfix users ...
- 219
1
vote
1
answer
1k
views
Need help creating LDAP Server that syncs users from 3 separate AD Controllers
Hopefully I can get some help here as I have really been beating my head against the ol' keyboard over here.
So, here's the situation.
We recently migrated end users from an onsite Exchange server ...
- 11
0
votes
0
answers
3k
views
Postfix+saslauthd: pam_unix(smtp:auth): authentication failure
I'm run postfix 2.10 + Cyrus sasl 2.1 + Dovecot 2.2 on Oracle Linux 7.
Dovecot works with saslauthd normally, but Postfix always failed on authentication, wish someone can help to check what problem ...
- 1
3
votes
1
answer
874
views
apt-get purge removing seemingly unrelated packages
I somehow managed to remove the /var/run/saslauthd directory while installing authentication for Postfix, so I was trying to apt-get purge and then reinstall the various saslauthd packages in order to ...
- 131
1
vote
0
answers
109
views
My webmail access (Proxy CAS) fails when I check my mails by IMAP
I use a web sso portal which provides cas tickets. I "cassify" my webmail and my imap server (cyrus-imapd).
When I fetch my emails from the Webmail (proxy CAS), it's ok.
Except if I fetch my emails ...
- 11
1
vote
1
answer
6k
views
Postifx and Dovecot: fatal: no SASL authentication mechanisms
When I sent an test mail from my Gmail to my server, I get this error:
fatal: no SASL authentication mechanisms
Here is all my configuration files and log files, to help us:
/var/log/maillog
Nov ...
- 11
1
vote
1
answer
951
views
SMTP-SASL authentification doesn't work
I created another thread previously, where I reported about the problem that I wasn't able to get saslauthd starting up at all:
SMTP authentification: saslauthd won't start
I now re-installed a ...
- 41
3
votes
0
answers
1k
views
SMTP authentification: saslauthd won't start
I've set up a mailserver, which is working fine, but now I wanted to add SMTP authentification using SASL. However, trying to start saslauthd (my system is Ubuntu 16.04) doesn't work, but I don't get ...
- 41
1
vote
1
answer
1k
views
Postfix SASL allow SMTP Authentication and relay messages
I am trying to set my SMTP server so it allows only SMTP authenticated users to send emails but the actual sending is done via Mailjet.
I am running on Ubuntu 14.04 LTS and Postfix version is ...
- 111
1
vote
1
answer
598
views
How to protect saslauthd from local brute force attack?
There are numerous instructions over the internet to use saslauthd. I've tried to run the service. It gave me a surprise when I discovered that /run/saslauthd/mux socket and /usr/sbin/testsaslauthd ...
- 131
4
votes
3
answers
2k
views
Apache 2.4 replacement for mod_auth_shadow?
My employer has been running RHEL 6.x and Apache httpd 2.2 for many years. We are currently in the process of migrating to new hardware running RHEL 7.1 and Apache httpd 2.4. Our current web site has ...
0
votes
1
answer
2k
views
Unable to send email from Command Line in Postfix (warning: TLS library .....)
I configured postfix with ssl/tls. and created an smtp. However I am unable to send test email and/or login.
"Text below first defines error log (different attempts) and then configuration files."
...
- 53
1
vote
1
answer
451
views
Postfix multi instance with separate SASLDB for each instance
I configured postfix with multiple instances (postmulti), each instance has your own IP address and it´s working great, but I need each instance uses it´s own sasldb2 file to authenticate users.
The ...
- 37
0
votes
0
answers
1k
views
fail2ban saslauth ban not working
when I run:
fail2ban-regex /var/log/mail.warn /etc/fail2ban/filter.d/sasl.conf
output:
Date template hits:
8158 hit(s): MONTH Day Hour:Minute:Second
0 hit(s): WEEKDAY MONTH Day Hour:Minute:Second ...
- 83
0
votes
1
answer
461
views
testsaslauthd on openLDAP centos worked for first time but failed after that
testsaslauthd only works for first time after i edited the file /etc/saslauthd.conf and restarted openLDAP when i run it the second time, it is showing authentication failed. When i reedited the file ...
- 11
2
votes
1
answer
2k
views
Postfix + SASL using wrong query to authenticate
I recently set up postfix + dovecot on a aws ec2 instance following this guide: http://flurdy.com/docs/postfix/#config-secure-auth
Currently I'm stuck with SASL.
The SQL query doesn't seem to be ...
- 155
2
votes
1
answer
941
views
Properly Configure Postfix to be secure (SASL + TLS)
I've followed online tutorials online to setup my mail server with SASL and TLS, and amavis.
It all seems to works - except i can send mails even if i don't authenticate first - which is not good.
I ...
- 167
2
votes
1
answer
369
views
NO [ALERT] Unexpected response from remote authentication server
is what I see when I run testsaslauthd inside an strace
socket(PF_LOCAL, SOCK_STREAM, 0) = 3
connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/saslauthd/mux"}, 110) = 0
writev(3, [{"\0\34a....
- 262
10
votes
3
answers
15k
views
How to get SASL authentication to work with DIGEST-MD5 for OpenLDAP?
I'm setting up OpenLDAP slapd on Ubuntu 14.04 Trusty Tahr. I want certain instances (replication etc.) that aren't users to be able to login via SASL using DIGEST-MD5 mechanism.
Unlike users, they ...
- 595
1
vote
2
answers
3k
views
Postfix config for virtual aliases and sasldb
I'm trying to set-up postfix to handle several domains as aliases, with an SMTP server accepting incoming mails from these domains with sasldb authentication. The documentation looks quite old, and ...
- 13
1
vote
0
answers
477
views
Authnetication failure with postfix and sasl using sasldb
I'm really not sure what my issue is. I've checked several guides, and I am sure I have set this up correctly, including config fails, restarting the service, permissions etc. OS is Ubuntu Server.
...
- 11
1
vote
1
answer
2k
views
Setup Postfix with SMTP-AUTH over SASL2 with SASLDB for users to send emails
Hello,
I spent the last few days trying to setup Postfix with SASLDB to send emails from my application over SMTP on Ubuntu Server 15.04. I searched, read and tested a lot about it but I can't get it ...
- 121
1
vote
1
answer
6k
views
Postfix SMTP+saslauthd autentication failure
I try to implement SMTP authentication with postfix and saslauthd on Ubuntu.
My IP is W.X.Y.Z, and my VPS IP is W'.X'.Y'.Z'.
My user is JohnDoe and my hostname is server.
It doesn't work, here are ...
- 11
6
votes
0
answers
587
views
Low Entropy on Container
I am thinking my entropy level may be low?
$ cat /proc/sys/kernel/random/entropy_avail
I am around 132-178 on average. Pool size is default 4096 (this is a container on a virtualizer by the way).
...
5
votes
1
answer
2k
views
svnserve+sasl+ldap : saslauthd not contacted?
I am trying to authenticate subversion users against sasl+ldap. Other questions about this problem seem to be related to earlier versions of subversion, or sasldb authentication.
lsb_release -a
No ...
- 161