URL: https://linuxfr.org/forums/linux-debian-ubuntu/posts/sasl-auth-avec-postfix-sur-sarge Title: SASL AUTH avec postfix sur Sarge Authors: keulu Date: 2006年01月23日T10:54:28+01:00 Tags: debian Score: 0 Bonjour, J'essaie de faire fonctionner l'authentification via sasl2 couplé à postfix installé sur une Debian Sarge. J'aimerais utiliser l'authentification sur base sasldb et j'ai donc créé ujn compte de test : login:test password:test sans infos realm. Le support TLS de postfix n'est pas activé pour l'instant. Voilà le résultat d'un test telnet local: # telnet localhost 25 Trying 127.0.0.1... Connected to localhost.localdomain. Escape character is '^]'. 220 mysmtp.mydomain.tld ESMTP (Debian/GNU) ehlo localhost 250-mysmtp.mydomain.tld 250-PIPELINING PLAIN 250-SIZE 10240000 250-VRFY 250-ETRN 250-AUTH LOGIN PLAIN 250-AUTH=LOGIN PLAIN 250 8BITMIME AUTH PLAIN dGVzdAB0ZXN0AHRlc3Q= 535 Error: authentication failed mail.log me donne : warning: SASL authentication failure: Password verification failed warning: localhost.localdomain[127.0.0.1]: SASL PLAIN authentication failed Le compte de test a été testé OK pour ce qui est de saslauthd : # testsaslauthd -u test -p test -f /var/spool/postfix/var/run/saslauthd/mux 0: OK "Success." Tout fonctionne correctement dans le postfix chrooté quand l'authentification est en mode shadow avec les comptes de la machine (MECHANISMS="shadow" dans /etc/default/saslauthd et pwcheck_method: saslauthd dans /etc/postfix/sasl/smtpd.conf) mais aucun moyen de le faire fonctionner avec MECHANISMS="sasldb" et pwcheck_method: auxprop. Merci pour toute aide qui puisse m'aider à résoudre ce problème. Je me suis déjà bien arraché les cheveux depuis quelques jours et je n'ai rien pû trouver comme solution ni sur le net, ni par moi même. Désolé pour la montagne de code fournie... Voilà mon main.cf: smtpd_banner = $myhostname ESMTP (Debian/GNU) biff = no # appending .domain is the MUA's job. append_dot_mydomain = no # Uncomment the next line to generate "delayed mail" warnings #delay_warning_time = 4h myhostname = mysmtp.mydomain.tld mydomain = mydomain.tld alias_maps = hash:/etc/postfix/aliases alias_database = hash:/etc/postfix/aliases myorigin = $mydomain mydestination = $myhostname, $mydomain, localhost relayhost = mynetworks = 127.0.0.0/8 home_mailbox = Maildir/ mailbox_command = procmail -a "$EXTENSION" mailbox_size_limit = 51200000 recipient_delimiter = + inet_interfaces = $myhostname, localhost smtpd_helo_required = yes smtpd_helo_restrictions = £spaces£ £/spaces£permit_mynetworks, £spaces£ £/spaces£reject_invalid_hostname, smtpd_recipient_restrictions = £spaces£ £/spaces£permit_sasl_authenticated, £spaces£ £/spaces£permit_mynetworks, £spaces£ £/spaces£reject_unauth_destination smtpd_sender_restrictions = £spaces£ £/spaces£reject_unknown_sender_domain, £spaces£ £/spaces£reject_non_fqdn_sender # Use amavis filtering content_filter=smtp-amavis:[127.0.0.1]:10024 # Reject exe attachement files header_checks = regexp:/etc/postfix/header_checks # SASL support (SMPTP AUTH) smtpd_sasl_local_domain = smtpd_sasl_auth_enable = yes smtpd_sasl_security_options = noanonymous # smtpd_sasl_application_name = smtpd broken_sasl_auth_clients = yes # SSL / TLS identification key files # smtpd_tls_key_file = /etc/postfix/ssl/smtpd.key # smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.crt # smtpd_tls_CAfile = /etc/postfix/ssl/cacert.pem # SSL / TLS support parameters # smtpd_tls_auth_only = no # smtpd_use_tls = yes # smtpd_tls_loglevel = 1 # smtpd_tls_ask_ccert = yes # smtpd_tls_received_header = yes # smtpd_tls_session_cache_timeout = 3600s # tls_random_source = dev:/dev/urandom et mon master.cf: smtp inet n - - - - smtpd #submission inet n - - - - smtpd # -o smtpd_etrn_restrictions=reject #628 inet n - - - - qmqpd pickup fifo n - - 60 1 pickup cleanup unix n - - - 0 cleanup qmgr fifo n - - 300 1 qmgr #qmgr fifo n - - 300 1 oqmgr rewrite unix - - - - - trivial-rewrite bounce unix - - - - 0 bounce defer unix - - - - 0 bounce trace unix - - - - 0 bounce verify unix - - - - 1 verify flush unix n - - 1000? 0 flush proxymap unix - - n - - proxymap smtp unix - - - - - smtp relay unix - - - - - smtp # -o smtp_helo_timeout=5 # -o smtp_connect_timeout=5 showq unix n - - - - showq error unix - - - - - error local unix - n n - - local virtual unix - n n - - virtual lmtp unix - - n - - lmtp anvil unix - - n - 1 anvil # # Interfaces to non-Postfix software. Be sure to examine the manual # pages of the non-Postfix software to find out what options it wants. # # maildrop. See the Postfix MAILDROP_README file for details. # maildrop unix - n n - - pipe £spaces£ £/spaces£flags=DRhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient} uucp unix - n n - - pipe £spaces£ £/spaces£flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) ifmail unix - n n - - pipe £spaces£ £/spaces£flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) bsmtp unix - n n - - pipe £spaces£ £/spaces£flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -d -t$nexthop -f$sender $recipient scalemail-backend unix - n n - 2 pipe £spaces£ £/spaces£flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${extension} # only used by postfix-tls tlsmgr fifo - - n 300 1 tlsmgr smtps inet n - y - - smtpd -v £spaces£ £/spaces£-o smtpd_tls_wrappermode=yes £spaces£ £/spaces£-o smtpd_sasl_auth_enable=yes 587 inet n - n - - smtpd £spaces£ £/spaces£-o smtpd_enforce_tls=yes £spaces£ £/spaces£-o smtpd_sasl_auth_enable=yes smtp-amavis unix - - n - 2 smtp £spaces£ £/spaces£-o smtp_data_done_timeout=1200 £spaces£ £/spaces£-o smtp_send_xforward_command=yes £spaces£ £/spaces£-o disable_dns_lookup=yes 127.0.0.1:10025 inet n - n - - smtpd £spaces£ £/spaces£-o content_filter= £spaces£ £/spaces£-o local_recipient_maps= £spaces£ £/spaces£-o relay_recipient_maps= £spaces£ £/spaces£-o smtpd_restriction_classes= £spaces£ £/spaces£-o smtpd_client_restrictions= £spaces£ £/spaces£-o smtpd_helo_restrictions= £spaces£ £/spaces£-o smtpd_sender_restrictions= £spaces£ £/spaces£-o smtpd_recipient_restrictions=permit_mynetworks,reject £spaces£ £/spaces£-o mynetworks=127.0.0.1/8 £spaces£ £/spaces£-o strict_rfc821_envelopes=yes £spaces£ £/spaces£-o smtpd_error_sleep_time=0 £spaces£ £/spaces£-o smtpd_soft_error_limit=1001 £spaces£ £/spaces£-o smtpd_hard_error_limit=1000 et finalement mon /etc/postfix/sasl/smtpd.conf: pwcheck_method: auxprop mech_list: plain login auxprop_plugin: sasldb2

AltStyle によって変換されたページ (->オリジナル) /