Re: telnet hangs on the sasl2 part

Roelof Wobben <[email protected]>
Newsgroups gmane.comp.security.cyrus.sasl
Message-ID <[email protected]>
Op 3-6-2017 om 14:40 schreef Alexander
Dalloz:

Am
02.06.2017 um 23:49 schrieb Roelof Wobben:

Op 2-6-2017 om 23:41 schreef Alexander
Dalloz:

Am 02.06.2017 um 08:31 schrieb Roelof
Wobben:

pwcheck_method = auxprop

auxprop_plugin = sasldb2

mech_list = plain login cram-md5 digest-md5 ntlm

That's wrong syntax. That mistake creates the very same
Postfix error log messages for me too testing your issue.

Correct it to:

pwcheck_method: auxprop

auxprop_plugin: sasldb2

mech_list: plain login cram-md5 digest-md5 ntlm

Alexander

Sorry, that were typo's from me.

The real file looks like what you have stated.

I am still sure you have a SASL configuration with invalid syntax,
because that's exactly what Postfix complains about.

The default and clean installation of Postfix and cyrus-sasl using
auxprop works out of the box.

It would be useful if you present complete and reliable
information about your setup.

postconf -n

postconf -Mf

/etc/sasl2/smtpd.conf (including permissions: ls -al; ls -alZ)

/etc/sasldb2 permissions: ls -al; ls -alZ

Did you create it using saslpasswd2? Can you list the users by
sasldblistusers2?

Alexander

Here is the requested info

postconf -N :

alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
broken_sasl_auth_clients = yes
command_directory = /usr/sbin
config_directory = /etc/postfix
cyrus_sasl_config_path = /usr/lib/sasl2
daemon_directory = /usr/libexec/postfix
data_directory = /var/lib/postfix
debug_peer_level = 2
debugger_command = PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin ddd $daemon_directory/$process_name $process_id & sleep 5
html_directory = no
inet_interfaces = all
inet_protocols = all
mail_owner = postfix
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain
mydomain = srv.world
myhostname = mail.srv.world
mynetworks = 168.100.189.0/28, 127.0.0.0/8
myorigin = $mydomain
newaliases_path = /usr/bin/newaliases.postfix
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/postfix-2.10.1/README_FILES
sample_directory = /usr/share/doc/postfix-2.10.1/samples
sendmail_path = /usr/sbin/sendmail.postfix
setgid_group = postdrop
smtp_sasl_security_options = noanonymous
smtpd_sasl_auth_enable = yes
smtpd_sasl_authenticated_header = yes
smtpd_sasl_path = smptd
smtpd_sasl_type = cyrus
unknown_local_recipient_reject_code = 550

postconf -Mf :

587 inet n - n - - smtpd
pickup unix n - n 60 1 pickup
cleanup unix n - n - 0 cleanup
qmgr unix n - n 300 1 qmgr
tlsmgr unix - - n 1000? 1 tlsmgr
rewrite unix - - n - - trivial-rewrite
bounce unix - - n - 0 bounce
defer unix - - n - 0 bounce
trace unix - - n - 0 bounce
verify unix - - n - 1 verify
flush unix n - n 1000? 0 flush
proxymap unix - - n - - proxymap
proxywrite unix - - n - 1 proxymap
smtp unix - - n - - smtp
relay unix - - n - - smtp
showq unix n - n - - showq
error unix - - n - - error
retry unix - - n - - error
discard unix - - n - - discard
local unix - n n - - local
virtual unix - n n - - virtual
lmtp unix - - n - - lmtp
anvil unix - - n - 1 anvil
scache unix - - n - 1 scache

/etc/sasl2/smtpd.conf contents :

pwcheck_method: auxprop
auxprop_pluin : sasldb2
mech_list: plain login
log_Level : 7

permissions /etc/sasl2/smtpd.conf :

-rw-r--r--. 1 root root 89 3 jun 09:53 /etc/sasl2/smtpd.conf

permissions /etc/sasldb2 :

-rw-r-----. 1 postfix root 12288 2 jun 08:06 /etc/sasldb2

sasdblistusers2 :

roelof@localhost: userPassword

Roelof
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.