| View previous topic :: View next topic |
| Author |
Message |
zenacus
n00b
Joined: 06 Aug 2004
Posts: 4
|
 Posted: Mon Aug 09, 2004 4:20 pm Post subject: PostFix + Cyrus SASL Auth Problem |
 |
|
Hi All,
Running through the setup guide, and cannot seem to get my telnet session to echo back that I have AUTH LOGIN-PLAIN, here is my telnet output:
| Code: |
EHLO domain.com
250-ns1.zenacus.com
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-STARTTLS
250 8BITMIME
|
Here is teh last portion of my /etc/postfix/main.cf file where you add the SASL stuff:
| Code: |
smtpd_sasl_auth_enable = yes
smtpd_sasl2_auth_enable = yes
smtpd_sasl_security_options = noanonymous
broken_sasl_auth_clients = yes
smtpd_sasl_local_domain =
smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks, re$
smtpd_use_tls = yes
smtpd_tls_auth_only = yes
smtpd_tls_key_file = /etc/postfix/newreq.pem
smtpd_tls_cert_file = /etc/postfix/newcert.pem
smtpd_tls_CAfile = /etc/postfix/cacert.pem
smtpd_tls_loglevel = 3
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
tls_random_source = dev:/dev/urandom
|
And I am not sure about the smptd.conf file because it appears that you have to create it from scratch? If so what directory should I create it in and what parameters should I set in that file?
Thanks in advance for your help!
[/b] |
|
| Back to top |
|
 |
devon
l33t
Joined: 23 Jun 2003
Posts: 943
|
| Posted: Tue Aug 10, 2004 5:52 am Post subject: |
|
|
Did you resolve your problem? Here is my smtpd.conf file for reference.
| Code: | $ cat /etc/sasl2/smtpd.conf
# $Header: /home/cvsroot/gentoo-x86/net-mail/postfix/files/smtp.sasl,v 1.1 2003/09/24 05:08:51 max Exp $
#pwcheck_method:pam
pwcheck_method:pwcheck
mech_list: PLAIN LOGIN
|
Here is Postfix's SASL HowTo with information about the different authentication methods. |
|
| Back to top |
|
|
Martian21
n00b
Joined: 21 Aug 2003
Posts: 26
|
| Posted: Tue Aug 17, 2004 1:33 pm Post subject: |
|
|
Postfix will NOT offer any login methods until after you have established a secure connection. You see that it offers STARTTLS.
If you comment out:
| Code: | | smtpd_tls_auth_only = yes |
Postfix will then give you login options as well as STARTTLS. This is a security feature! If you allow users to login with PLAIN or LOGIN before starting TLS then they send their credentials in clear text!!!
Hope this helps,
Martian |
|
| Back to top |
|
|
|
Networking & Security
