Sorry for the delay.

* Crazedfred <crazedf...@yahoo.com>:
> I ran "saslfinger -c" and "saslfinger -s" and it does appear that many of
> the relevant services are chrooted. I wasn't quite sure, however, so I
> attached the full output of both commands.

You want server-side debug output, which is 'saslfinger -s'.

> Of interest was the error message (not sure if it's relevant though):
> Cannot find the smtp_sasl_password_maps parameter in main.cf.
> Client-side SMTP AUTH cannot work without this parameter!

That can be ignored with server-side SASL.


> I then changed the OPTIONS of /etc/default/saslauthd to what you reccomended:
> #OPTIONS="-c -m /var/run/saslauthd"
> OPTIONS="-c -m /var/spool/postfix/var/run/saslauthd"

Correct.

> 
> However there are still curious errors (I don't think I've seen the 
> auxpropfunc error before):
> Sep  7 11:25:02 gpasswd[8432]: user postfix added by root to group sasl
> Sep  7 11:26:18 postfix/smtpd[8489]: auxpropfunc error invalid parameter 
> supplied
> Sep  7 11:26:18 postfix/smtpd[8489]: _sasl_plugin_load failed on 
> sasl_auxprop_plug_init for plugin: ldapdb

The Cyrus SASL libsasl library wants to initialize the ldapdb auxprop plugin.
It fails because it isn't configured. You don't want ldapdb. Ignore it.


> Further, postfix is still giving similar errors when authentication fails:
> Sep  7 11:53:20 postfix/smtpd[8821]: connect from 
> localhost.localdomain[127.0.0.1]
> Sep  7 11:53:37 postfix/smtpd[8821]: warning: SASL authentication problem: 
> unable to open Berkeley db /etc/sasldb2: No such file or directory
> Sep  7 11:53:37 postfix/smtpd[8821]: warning: SASL authentication problem: 
> unable to open Berkeley db /etc/sasldb2: No such file or directory
> Sep  7 11:53:37 postfix/smtpd[8821]: warning: SASL authentication failure: 
> Password verification failed
> Sep  7 11:53:37 postfix/smtpd[8821]: warning: 
> localhost.localdomain[127.0.0.1]: SASL plain authentication failed: 
> authentication failure


The smtpd.conf isn't where it should be on Debian systems. Move it from
/usr/lib/sasl2/smtpd.conf to /etc/postfix/sasl/smtpd.conf.

p@rick


-- 
All technical questions asked privately will be automatically answered on the
list and archived for public access unless privacy is explicitely required and
justified.

saslfinger (debugging SMTP AUTH):
<http://postfix.state-of-mind.de/patrick.koetter/saslfinger/>

Reply via email to