Postfix plain text authentication with SASL

2011-06-08 Thread Suresh Kumar Prajapati
Hi, Can anyone help me setting postfix plain authentication with SASL. I've spent a complete week on this already. Any help appreciated. -- Best Regards, Suresh Kumar Prajapati Linux Security Admin E-mail: er.sureshprajap...@gmail.com --

Re: Postfix plain text authentication with SASL

2011-06-08 Thread Patrick Ben Koetter
* Suresh Kumar Prajapati : > Can anyone help me setting postfix plain authentication with SASL. > I've spent a complete week on this already. > Any help appreciated. Sure. Send debug output as required by Postfix debug readme and I will help you. p@rick -- All technical questions asked privatel

Re: Postfix plain text authentication with SASL

2011-06-08 Thread Erwan Loaëc
Hello, Just to save you some more time, if your mailserver is behind a cisco asa/pix firewall, you should check this thread: http://www.mail-archive.com/postfix-users@postfix.org/msg01896.html -- Erwan Suresh Kumar Prajapati wrote: Hi, Can anyone help me setting postfix plain authenticati

Re: Postfix plain text authentication with SASL

2011-06-08 Thread Patrick Ben Koetter
* Suresh Kumar Prajapati : > here is the output from saslfinger command. > > saslfinger - postfix Cyrus sasl configuration Wed Jun 8 11:42:39 MSD 2011 > version: 1.0.2 > mode: server-side SMTP AUTH > > -- basics -- > Postfix: 2.3.3 > System: CentOS release 5.6 (Final) > > -- smtpd is linked to

Re: Postfix plain text authentication with SASL

2011-06-08 Thread Suresh Kumar Prajapati
Hi all, No one is there to help me On Wed, Jun 8, 2011 at 12:49 PM, Suresh Kumar Prajapati < er.sureshprajap...@gmail.com> wrote: > > Hi, > > Can anyone help me setting postfix plain authentication with SASL. > I've spent a complete week on this already. > Any help appreciated. > -- > Best

Re: Postfix plain text authentication with SASL

2011-06-08 Thread Frank Bonnet
Which backend are you using ? ldap radius nis ? Le 09/06/2011 07:03, Suresh Kumar Prajapati a écrit : Hi all, No one is there to help me On Wed, Jun 8, 2011 at 12:49 PM, Suresh Kumar Prajapati< er.sureshprajap...@gmail.com> wrote: Hi, Can anyone help me setting postfix plain authenti

Re: Postfix plain text authentication with SASL

2011-06-08 Thread Stephen Ingram
On Wed, Jun 8, 2011 at 10:03 PM, Suresh Kumar Prajapati wrote: > Hi all, > > No one is there to help me > > > On Wed, Jun 8, 2011 at 12:49 PM, Suresh Kumar Prajapati > wrote: >> >> Hi, >> >> Can anyone help me setting postfix plain authentication with SASL. >> I've spent a complete week on th

Re: Postfix plain text authentication with SASL

2011-06-08 Thread Frank Bonnet
You MUST use a backend for sasl Auth Envoyé de mon iPhone Le 9 juin 2011 à 07:56, Suresh Kumar Prajapati a écrit : > Hi, > > found anything. > > > > > On Thu, Jun 9, 2011 at 10:59 AM, Suresh Kumar Prajapati > wrote: > Hi, > > I just want to setup postfix SASL based authentication and

Re: Postfix plain text authentication with SASL

2011-06-09 Thread Patrick Ben Koetter
* Suresh Kumar Prajapati : > No one is there to help me You started your thread ignoring the list policy which tells how to ask for help. When I asked you to follow the rules you replied to me offlist. I looked at your configuration and replied to the list. You replied offlist again. You d

Re: Postfix plain text authentication with SASL

2011-06-09 Thread Suresh Kumar Prajapati
Hi, Sorry for this. I am sending you the saslfinger output Usage: saslfinger [-chs] Use "saslfinger -h" to find out what the options mean. [root@quranmail postfix]# saslfinger -s saslfinger - postfix Cyrus sasl configuration Thu Jun 9 11:24:25 MSD 2011 version: 1.0.2 mode: server-side SMTP AU

Re: Postfix plain text authentication with SASL

2011-06-09 Thread Stephen Ingram
On Thu, Jun 9, 2011 at 12:16 AM, Suresh Kumar Prajapati wrote: > Hi, > > and i dont find any saslauthd.conf file > > here is the /etc/sasl2/smtpd.conf > > pwcheck_method: saslauthd > mech_list: plain login That's a problem. In that file (/etc/sasl2/smtpd.conf) you are specifying that you want to

Re: Postfix plain text authentication with SASL

2011-06-09 Thread Suresh Kumar Prajapati
Hi, I;ve gone through this and setup the things according to the config there. please let me know if I'm wrong anywhere. On Thu, Jun 9, 2011 at 12:57 PM, Stephen Ingram wrote: > On Thu, Jun 9, 2011 at 12:16 AM, Suresh Kumar Prajapati > wrote: > > Hi, > > > > and i dont find any saslauthd.con

Re: Postfix plain text authentication with SASL

2011-06-09 Thread Patrick Ben Koetter
* Suresh Kumar Prajapati : > [root@quranmail postfix]# saslfinger -s > saslfinger - postfix Cyrus sasl configuration Thu Jun 9 11:24:25 MSD 2011 > version: 1.0.2 > mode: server-side SMTP AUTH > > -- basics -- > Postfix: 2.3.3 > System: CentOS release 5.6 (Final) > > -- smtpd is linked to -- >

Re: Postfix plain text authentication with SASL

2011-06-09 Thread Patrick Ben Koetter
Stephen, * Stephen Ingram : > On Thu, Jun 9, 2011 at 12:16 AM, Suresh Kumar Prajapati > wrote: > > Hi, > > > > and i dont find any saslauthd.conf file > > > > here is the /etc/sasl2/smtpd.conf > > > > pwcheck_method: saslauthd > > mech_list: plain login > > That's a problem. In that file (/etc/s

Re: Postfix plain text authentication with SASL

2011-06-09 Thread Suresh Kumar Prajapati
Hi, I've follow all the info you have give and the command show the following output [root@hostname postfix]# testsaslauthd -u tom -p redhat 0: NO "authentication failed" On Thu, Jun 9, 2011 at 1:03 PM, Patrick Ben Koetter wrote: > * Suresh Kumar Prajapati : > > [root@quranmail postfix]# sas

Re: Postfix plain text authentication with SASL

2011-06-09 Thread Suresh Kumar Prajapati
Hi, Here is the interactive session output [root@quranmail postfix]# telnet 217.23.4.146 25 Trying 217.23.4.146... Connected to 217.23.4.146. Escape character is '^]'. 220 ESMTP ehlo google.com 250- 250-PIPELINING 250-SIZE 10485760 250-VRFY 250-ETRN 250-AUTH LOGIN PLAIN 250-AUTH=LOGIN PLAIN 25

Re: Postfix plain text authentication with SASL

2011-06-09 Thread Patrick Ben Koetter
* Suresh Kumar Prajapati : > I've follow all the info you have give and the command show the following > output > > [root@hostname postfix]# testsaslauthd -u tom -p redhat > 0: NO "authentication failed" IIRC you use saslauthd with PAM as backend. Please try this: % testsaslauthd -s pam -u tom -

Re: Postfix plain text authentication with SASL

2011-06-09 Thread Patrick Ben Koetter
* Suresh Kumar Prajapati : > Here is the interactive session output > > [root@quranmail postfix]# telnet 217.23.4.146 25 > Trying 217.23.4.146... > Connected to 217.23.4.146. > Escape character is '^]'. > 220 ESMTP > ehlo google.com > 250- > 250-PIPELINING > 250-SIZE 10485760 > 250-VRFY > 250-E

Re: Postfix plain text authentication with SASL

2011-06-09 Thread Suresh Kumar Prajapati
Hi following is the output from the command you have [root@ ~]# testsaslauthd -s pam -u tom -p redhat 0: NO "authentication failed" and then i change /etc/sysconfig/saslauthd fiel MECH=shadow and then run the following command [root@ ~]# testsaslauthd -s shadow -u tom -p redhat 0: OK "Success."

Re: Postfix plain text authentication with SASL

2011-06-09 Thread Patrick Ben Koetter
* Suresh Kumar Prajapati : > Hi > following is the output from the command you have > [root@ ~]# testsaslauthd -s pam -u tom -p redhat > 0: NO "authentication failed" > > and then i change /etc/sysconfig/saslauthd > fiel MECH=shadow > and then run the following command > > [root@ ~]# testsaslauth

Re: Postfix plain text authentication with SASL

2011-06-09 Thread Patrick Ben Koetter
* Suresh Kumar Prajapati : > Both are system users and I've assigned password to them using > passwd user_name > command as well > saslpasswd2 user_name So we have two ways to go: system accounts or separate mail user database. I recommend using the separate database, because compromised accounts

Re: Postfix plain text authentication with SASL

2011-06-09 Thread Suresh Kumar Prajapati
Hi, For the time being I just want to go with system accounts,once this is set , I can catch up with second option. On Thu, Jun 9, 2011 at 2:23 PM, Patrick Ben Koetter wrote: > * Suresh Kumar Prajapati : > > Both are system users and I've assigned password to them using > > passwd user_name >

Re: Postfix plain text authentication with SASL

2011-06-09 Thread Patrick Ben Koetter
* Suresh Kumar Prajapati : > For the time being I just want to go with system accounts,once this is set , > I can catch up with second option. Fine. Run saslauthd with "-a shadow". Run testsaslauthd and verify you have a user for whom authenication works. Drop "smtpd_sasl_local_domain" in main.cf

Re: Postfix plain text authentication with SASL

2011-06-09 Thread Suresh Kumar Prajapati
Hi, Followed your steps and this is output warning: SASL authentication failure: Password verification failed Jun 9 13:12:26 domain.com postfix/smtpd[1391]: warning: fdsakjfhbdskj.fdsakjfhbdskj.com[ip_address]: SASL plain authentication failed: authentication failure testsaslauthd -s pam -u to

Re: Postfix plain text authentication with SASL

2011-06-09 Thread Suresh Kumar Prajapati
Hi, Can anyone help me... On Thu, Jun 9, 2011 at 2:45 PM, Suresh Kumar Prajapati < er.sureshprajap...@gmail.com> wrote: > Hi, > > Followed your steps and this is output > > warning: SASL authentication failure: Password verification failed > Jun 9 13:12:26 domain.com postfix/smtpd[1391]: warni

Re: Postfix plain text authentication with SASL

2011-06-09 Thread Patrick Ben Koetter
* Suresh Kumar Prajapati : > Followed your steps and this is output > > warning: SASL authentication failure: Password verification failed > Jun 9 13:12:26 domain.com postfix/smtpd[1391]: warning: > fdsakjfhbdskj.fdsakjfhbdskj.com[ip_address]: SASL plain authentication > failed: authentication fa