Issue integrating with Cyrus-SASL

2011-09-04 Thread Crazedfred
Hello, I'm having trouble with authentication on Debian 6. I've set up Postfix to use Cryus-SASL to authenticate against LDAP. The SASL configuration is a success: sudo testsaslauthd -u "t...@example.com" -p "notRightPassword" 0: NO "authentication failed" sudo testsaslauthd -u "t...@example.com"

Re: Issue integrating with Cyrus-SASL

2011-09-04 Thread Patrick Ben Koetter
* Crazedfred : > Hello, > I'm having trouble with authentication on Debian 6. > > > I've set up Postfix to use Cryus-SASL to authenticate against LDAP. > The SASL configuration is a success: > sudo testsaslauthd -u "t...@example.com" -p "notRightPassword" > 0: NO "authentication failed" > sudo te

Re: Issue integrating with Cyrus-SASL

2011-09-05 Thread Crazedfred
> If you use the pass above, change it now that you have sent it to public. I am substituting in fake accounts and passwords to show what's going on, these do not match what I am actually using :) > Where did you put smtpd.conf? On Debian it should be in > /etc/postfix/sasl/smtpd.conf. On my sy

Re: Issue integrating with Cyrus-SASL

2011-09-05 Thread Patrick Ben Koetter
* Crazedfred : > > If you use the pass above, change it now that you have sent it to public. > > I am substituting in fake accounts and passwords to show what's going on, > these do not match what I am actually using :) > > > Where did you put smtpd.conf? On Debian it should be in > > /etc/postf

Re: Issue integrating with Cyrus-SASL

2011-09-07 Thread Crazedfred
Thank you for the reply p@rick. By your recommendation I did add the postfix user to sasl: sudo adduser postfix sasl Adding user `postfix' to group `sasl' ... Adding user postfix to group sasl Done. I ran "saslfinger -c" and "saslfinger -s" and it does appear that many of the relevant services a

Re: Issue integrating with Cyrus-SASL

2011-09-07 Thread Charles Marcus
On 2011-09-07 1:01 PM, Crazedfred wrote: > I ran "saslfinger -c" and "saslfinger -s" and it does appear that many > of the relevant services are chrooted. Either they are or they aren't... As your master.cf shows, most are... Anything without an 'n' in the chroot column IS chrooted (it does NOT

Re: Issue integrating with Cyrus-SASL

2011-09-08 Thread Crazedfred
Issue integrating with Cyrus-SASL On 2011-09-07 1:01 PM, Crazedfred wrote: > I ran "saslfinger -c" and "saslfinger -s" and it does appear that many > of the relevant services are chrooted. Either they are or they aren't... As your master.cf shows, most are... A

Re: Issue integrating with Cyrus-SASL

2011-09-08 Thread Charles Marcus
Please don't top post... On 2011-09-08 1:33 PM, Crazedfred wrote: On Wednesday, September 7, 2011 1:02 PM, Charles Marcus wrote: On 2011-09-07 1:01 PM, Crazedfred I ran "saslfinger -c" and "saslfinger -s" and it does appear that many of the relevant services are chrooted. Either they are o

Re: Issue integrating with Cyrus-SASL

2011-09-08 Thread Crazedfred
 > Please don't top post... Whoops, sorry, web-client defaults :) It doesn't even quote correctly. > Eliminate the chroot until you get it working, *then* work on chrooting > everything - *if* you really feel you need it (most people don't). I would agree that I most likely don't need chroot

Re: Issue integrating with Cyrus-SASL

2011-09-08 Thread Charles Marcus
On 2011-09-08 2:05 PM, Crazedfred wrote: I would agree that I most likely don't need chroot (and it is strange that the default config has issues with chroot?). How can I disable the feature for all of postfix's components? As I said... place an 'n' in the chroot column for each service... Rt

Re: Issue integrating with Cyrus-SASL

2011-09-13 Thread Crazedfred
> place an 'n' in the chroot column for each service Sounds good. On your advice, I went and turned off chroot, then ran "saslfinger -s" again (output attached). I restarted the saslauthd and postfix services before doing so. You can see that chroot is off for all components. Further, based on

Re: Issue integrating with Cyrus-SASL

2011-09-13 Thread Wietse Venema
Crazedfred: > > place an 'n' in the chroot column for each service > > Sounds good. > > On your advice, I went and turned off chroot, then ran "saslfinger -s" again > (output attached). > I restarted the saslauthd and postfix services before doing so. > You can see that chroot is off for all com

Re: Issue integrating with Cyrus-SASL

2011-09-13 Thread Patrick Ben Koetter
Sorry for the delay. * Crazedfred : > I ran "saslfinger -c" and "saslfinger -s" and it does appear that many of > the relevant services are chrooted. I wasn't quite sure, however, so I > attached the full output of both commands. You want server-side debug output, which is 'saslfinger -s'. > Of

Re: Issue integrating with Cyrus-SASL

2011-09-14 Thread Crazedfred
> What is the result of:find / -name smtpd.conf sudo find / -name smtpd.conf /usr/lib/sasl2/smtpd.conf That is the only result, I'm afraid. And the contents of the file do match: cat /usr/lib/sasl2/smtpd.conf pwcheck_method: saslauthd mech_list: login plain

Re: Issue integrating with Cyrus-SASL

2011-09-15 Thread Patrick Ben Koetter
* Crazedfred : > > What is the result of:find / -name smtpd.conf > > sudo find / -name smtpd.conf > /usr/lib/sasl2/smtpd.conf read the debian documentation! p@rick -- All technical questions asked privately will be automatically answered on the list and archived for public access unless privac

Re: Issue integrating with Cyrus-SASL

2011-09-16 Thread Crazedfred
>  Crazedfred : > > > What is the result of:find / -name smtpd.conf > > > > sudo find / -name smtpd.conf > > /usr/lib/sasl2/smtpd.conf > read the debian documentation! Could you elaborate? Am I looking for the wrong file? That search above was ran at the behest of another user on this list. The

Re: Issue integrating with Cyrus-SASL

2011-09-16 Thread Wietse Venema
Crazedfred: > >? Crazedfred : > > > What is the result of:find / -name smtpd.conf > > > > sudo find / -name smtpd.conf > > /usr/lib/sasl2/smtpd.conf > read the debian documentation! Could you elaborate? Am I looking for the wrong file? I have seen several hints on this mailing list that Debian

Re: Issue integrating with Cyrus-SASL

2011-09-16 Thread John Peach
On Fri, 16 Sep 2011 14:17:13 -0400 (EDT) Wietse Venema wrote: > Crazedfred: > > >? Crazedfred : > > > > What is the result of:find / -name smtpd.conf > > > > > > sudo find / -name smtpd.conf > > > /usr/lib/sasl2/smtpd.conf > > > read the debian documentation! > > Could you elaborate? > Am I lo

Re: Issue integrating with Cyrus-SASL

2011-09-16 Thread Patrick Ben Koetter
* Crazedfred : > >  Crazedfred : > > > > What is the result of:find / -name smtpd.conf > > > > > > sudo find / -name smtpd.conf > > > /usr/lib/sasl2/smtpd.conf > > > read the debian documentation! > > Could you elaborate? > Am I looking for the wrong file? > That search above was ran at the behe

Re: Issue integrating with Cyrus-SASL

2011-09-21 Thread Crazedfred
> Crazedfred: > > >? Crazedfred : > > > > What is the result of:find / -name smtpd.conf > > > > > > sudo find / -name smtpd.conf > > > /usr/lib/sasl2/smtpd.conf > > > read the debian documentation! > > Could you elaborate? > Am I looking for the wrong file? > > I have seen several hints on th

Re: Issue integrating with Cyrus-SASL

2011-09-28 Thread Crazedfred
Any thoughts? From: Crazedfred To: "postfix-users@postfix.org" Sent: Wednesday, September 21, 2011 5:20 AM Subject: Re: Issue integrating with Cyrus-SASL > Crazedfred: > > >? Crazedfred : > > > > What is the

Re: Issue integrating with Cyrus-SASL

2011-09-28 Thread Wietse Venema
Crazedfred: > Any thoughts? What does the smtpd line in master.cf look like? If it looks like this: smtp inet n - - - - smtpd This means that chroot is turned on , and that Postfix won't be able to talk to saslauthd. To turn off chroot change it into thi

Re: Issue integrating with Cyrus-SASL

2011-10-09 Thread Crazedfred
11 3:07 PM Subject: Re: Issue integrating with Cyrus-SASL Crazedfred: > Any thoughts? What does the smtpd line in master.cf look like? If it looks like this:     smtp      inet  n      -      -      -      -      smtpd This means that chroot is turned on , and that Postfix won't