[pfx] Re: help debugging SASL authentication failure: No worthy mechs found

>>>>> On April 3, 2026 Wietse Venema via Postfix-users <[email protected]> wrote:

> Greg Klanderman via Postfix-users:
>> CC'ing Michael Tokarev, the Debian package maintainer.
>>
>> IMO it seems like maybe postfix should require libsasl2-modules,
>> the 300kB is well spent if you're installing postfix, rather than
>> silently failing.

This comment was directed to Michael Tokarev, the debian maintainer,
regarding appropriate postfix package dependencies.

> Is Debian SASL support usable at all, without installing
> libsasl2-modules?  The table of contents shows a lot of
> authentication mechanisms.

> (RedHat) has separate packages for gssapi, ldap, md5, plain, scram,
> etc.,

According to Viktor, above, fedora also has a libsasl2-modules
package, I assume with the more common modules.

These seem to be the ones included in Debian's libsasl2-modules
package:

/usr/lib/x86_64-linux-gnu/sasl2/libanonymous.so.2.0.25
/usr/lib/x86_64-linux-gnu/sasl2/libcrammd5.so.2.0.25
/usr/lib/x86_64-linux-gnu/sasl2/libdigestmd5.so.2.0.25
/usr/lib/x86_64-linux-gnu/sasl2/liblogin.so.2.0.25
/usr/lib/x86_64-linux-gnu/sasl2/libntlm.so.2.0.25
/usr/lib/x86_64-linux-gnu/sasl2/libplain.so.2.0.25
/usr/lib/x86_64-linux-gnu/sasl2/libscram.so.2.0.25

Debian has several additional packages, libsasl2-modules-*:

libsasl2-modules-db
libsasl2-modules-gssapi-heimdal
libsasl2-modules-gssapi-mit 
libsasl2-modules-kdexoauth2
libsasl2-modules-ldap 
libsasl2-modules-otp 
libsasl2-modules-sql

> so we can't simply assume all the woprld is Debian.

That's why I suggested a generic update to the wording in the
SASL_README.

Greg
_______________________________________________
Postfix-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]