[pfx] Re: help debugging SASL authentication failure: No worthy mechs found

>Greg Klanderman via Postfix-users:
>> CC'ing Michael Tokarev, the Debian package maintainer.
>>
>> IMO it seems like maybe postfix should require libsasl2-modules, the
>> 300kB is well spent if you're installing postfix, rather than silently
>> failing.

On 03.04.26 14:58, Wietse Venema via Postfix-users wrote:
>Is Debian SASL support usable at all, without installing libsasl2-modules?

libsasl2-modules is hard dependency in Debian, you can't install postfix 
without it.

libsasl2-modules provides modules for sasl authentication, postfix works 
without it, cyrus-based authentication (client or server-size) does not.

Dovecot-based (server-side only) authentication works without this.
so I don't wonder why postfix' dependence on it is relaxed to Suggests:
(Recommends: are installed by default, you can disable it)


I have described my sasl configuration on postfix 8-10 at:
https://marc.info/?l=postfix-users&m=165417746525497&w=2
coming from Debian wiki:
https://wiki.debian.org/PostfixAndSASL#Implementation_using_Cyrus_SASL


There were many sasl-related changes since that, but the wiki seems to be 
updated using that info.

Unfortunately, the only server using sasl client authentication I maintained 
was decommissioned about a year ago, I'm not sure if I can find backup 
(there's a chance)


Seems that Greg (OP) missed setting cyrus_sasl_config_path and creating 
/etc/postfix/sasl/smtpd.conf with proper settings.

Greg, can you test and report if those changes help you?


-- 
Matus UHLAR - fantomas, [email protected] ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
My mind is like a steel trap - rusty and illegal in 37 states.
_______________________________________________
Postfix-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]