Re: Mail relaying on postfix using the Jamm environemnt

> >the tls stuff. That should be trivial..
> 
> OK, I came across two more things which I had to add - I'll do a complete 
> howto, but this is just to document them for now:
> 
> 1) The configure for sasl needed a reference to ldap:
> --with-rc4 --with-dblib=berkeley     --enable-anon     --enable-cram
> --enable-digest --enable-plain     --enable-login     --enable-ntlm 
> --with-ldap=/usr/local
> 
correct, missed that, i have just cut and pasted most of my original  mail from .bash_history :-)



> 2)  The /etc/saslauthd.conf needed other bits for the ldap - and this is 
> probably just specific to my set up:
> ldap_bind_dn: cn=Manager,dc=mail,dc=example,dc=com
> ldap_bind_pw: mypassword
> ldap_search_base: dc=mail,dc=example,dc=com
> 
hhmm

that is only needed if you bind to your ldap server. i don't...


> 
> So, I'm now at the point where:
> 
> 1. I can run 'testsaslauthd -u username -p password' and I get an OK - 
> Succeeded
> 2. I disable tls and telnet to the server and I get AUTH LOGIN PLAIN 
> DIGEST-MD5 CRAM-MD5
> 
> However, if I then do a:
> 
> [root]# printf 'username\0username\0password' | mmencode
> dGVzdAB0ZXN0AHRlc3RwYXNz
> 
> .. and telnet to the server, do the following, I get an error
> 
> S: 220 mail.example.com ESMTP Postfix
> C: EHLO example.com
> S: 250-mail.example.com
> S: 250-PIPELINING
> S: 250-SIZE 10240000
> S: 250-VRFY
> S: 250-ETRN
> S: 250-AUTH LOGIN PLAIN CRAM-MD5
> S: 250-AUTH=LOGIN PLAIN CRAM-MD5
> S: 250-XVERP
> S: 250 8BITMIME
> C: AUTH PLAIN dGVzdAB0ZXN0AHRlc3RwYXNz
> S: 535 Error: authentication failed
> 
> All of the correct switches are in main.cf for sasl that you have speccified
> 
> The username contains the domain name and tld, so  smtpd_sasl_local_domain 
> = $myhostname is omitted from main.cf
> 
> I really cannot work out what the problem is, unless, of course, the 
> problem is that postfix is pulling apart the username and striping out the 
> domain name and tld name
> A

postfix doesn't do that, sasl is, it splits the user and realm part, that's why the ldap filter %u@%r


> Best
> Buzz
> 
> _________________________________________________________________
> It's fast, it's easy and it's free. Get MSN Messenger today! 
> http://www.msn.co.uk/messenger
> 
> 
> 
> -------------------------------------------------------
> This SF.Net email is sponsored by: Oracle 10g
> Get certified on the hottest thing ever to hit the market... Oracle 10g. 
> Take an Oracle 10g class now, and we'll give you the exam FREE.
> http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
> _______________________________________________
> Jamm-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/jamm-users

-- 
Met vriendelijke groeten/kind regards,

Chris Holleman



-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g. 
Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click