Issac Kelly a écrit :
> SASL is not working with mysql
> 
> #saslfinger -c
> [snip] 
> 
> # more /etc/postfix/sasl/smtpd.conf
> auxprop_plugin: sql
> mech_list: plain login cram-md5 digest-md5

can you disable cram-md5 and digest-md5 for now?

> [snip]
> 
> SASL is not connecting to the mysql database.
>  in /var/log/auth.log
> Oct 16 07:06:41 postfix/smtpd[2027]: sql auxprop plugin using mysql engine
> 
> and mysql is set to log all queries but these queries from the same
> time are from Postfix trying to deliver mail, not from SASL trying to
> authenticate a user.
>                   333 Quit
> 081016  7:04:53           334 Connect     [EMAIL PROTECTED] on maildb
>                   334 Query       SELECT destination FROM aliases WHERE
> mail='csc.com' and enabled = 1
>                   335 Connect     [EMAIL PROTECTED] on maildb
>                   335 Query       SELECT domain FROM domains WHERE
> domain='csc.com' and enabled = 1
>                   334 Query       SELECT destination FROM aliases WHERE
> mail='threefound.com' and enabled = 1
>                   335 Query       SELECT domain FROM domains WHERE
> domain='threefound.com' and enabled = 1
> 081016  7:06:41           336 Connect     [EMAIL PROTECTED] on maildb
>                   336 Query       SELECT destination FROM aliases WHERE
> mail='yahoo.com' and enabled = 1
>                   337 Connect     [EMAIL PROTECTED] on maildb
>                   337 Query       SELECT domain FROM domains WHERE
> domain='yahoo.com' and enabled = 1
> 

That's weired. could it be apparmor? (That would be surprising since
there are other connections, but I am not familiar with what apparmor
can do).

> Saslfinger seems to think that I need a password maps file, but the
> documentation I read said that was optional.

it's because you run "saslfinger -c". you should run "saslfinger -s".
you want server side (smtpd_*), not client side (smtp_*).

> 
> I'm very confused by this whole ordeal.  Are there any mail servers
> that are easier to administer?

cyrus-sasl isn't easy. why not use dovecot sasl instead?

Reply via email to