[Postfixbuch-users] sasldb und postfix

christian holle holle at ifj.fb15.uni-dortmund.de
Mi Mai 10 23:12:01 CEST 2006


Hi,
 
> Uhm, bitte denke daran, dass nur du die Ausgabe siehst, wir hier müssen 
> blind tippen. (^-^)

saslfinger - postfix Cyrus sasl configuration Wed May 10 23:09:52 CEST 2006
version: 1.0
mode: server-side SMTP AUTH

-- basics --
Postfix: 2.2.5
System: OpenBSD 3.9 (GENERIC) #617: Thu Mar  2 02:26:48 MST 2006

Welcome to OpenBSD: The proactively secure Unix-like operating system.

Please use the sendbug(1) utility to report bugs in the system.
Before reporting a bug, please try to reproduce it with the latest
version of the code.  With bug reports, please try to ensure that
enough information to reproduce the problem is enclosed, and if a
known fix for it exists, include that as well.

-- smtpd is linked to --
        02a14000 22a1a000 rlib 0    1   0      /usr/local/lib/libsasl2.so.2.20

-- active SMTP AUTH and TLS parameters for smtpd --
smtpd_sasl_application_name = smtpd
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous


-- listing of /usr/local/lib/sasl2 --
total 916
drwxr-xr-x   2 root  wheel   1024 Apr 20 15:59 .
drwxr-xr-x  10 root  wheel   3072 Mar  2 10:04 ..
-rw-r--r--   1 root  bin    12064 Apr 20 10:59 libanonymous.a
-rwxr-xr-x   1 root  bin      696 Apr 20 10:59 libanonymous.la
-rwxr-xr-x   1 root  bin    16971 Apr 20 10:59 libanonymous.so.2.20
-rw-r--r--   1 root  bin    14794 Apr 20 10:59 libcrammd5.a
-rwxr-xr-x   1 root  bin      684 Apr 20 10:59 libcrammd5.la
-rwxr-xr-x   1 root  bin    17485 Apr 20 10:59 libcrammd5.so.2.20
-rw-r--r--   1 root  bin    44716 Apr 20 10:59 libdigestmd5.a
-rwxr-xr-x   1 root  bin      705 Apr 20 10:59 libdigestmd5.la
-rwxr-xr-x   1 root  bin    48258 Apr 20 10:59 libdigestmd5.so.2.20
-rw-r--r--   1 root  bin    20936 Apr 20 10:59 libgssapiv2.a
-rwxr-xr-x   1 root  bin      741 Apr 20 10:59 libgssapiv2.la
-rwxr-xr-x   1 root  bin    26962 Apr 20 10:59 libgssapiv2.so.2.20
-rw-r--r--   1 root  bin    12194 Apr 20 10:59 liblogin.a
-rwxr-xr-x   1 root  bin      672 Apr 20 10:59 liblogin.la
-rwxr-xr-x   1 root  bin    17070 Apr 20 10:59 liblogin.so.2.20
-rw-r--r--   1 root  bin    59546 Apr 20 10:59 libotp.a
-rwxr-xr-x   1 root  bin      669 Apr 20 10:59 libotp.la
-rwxr-xr-x   1 root  bin    65251 Apr 20 10:59 libotp.so.2.20
-rw-r--r--   1 root  bin    12286 Apr 20 10:59 libplain.a
-rwxr-xr-x   1 root  bin      672 Apr 20 10:59 libplain.la
-rwxr-xr-x   1 root  bin    16936 Apr 20 10:59 libplain.so.2.20
-rw-r--r--   1 root  bin    18928 Apr 20 10:59 libsasldb.a
-rwxr-xr-x   1 root  bin      678 Apr 20 10:59 libsasldb.la
-rwxr-xr-x   1 root  bin    21935 Apr 20 10:59 libsasldb.so.2.20
-rw-r--r--   1 root  wheel     83 Apr 20 15:59 saslpasswd.conf
-rw-r--r--   1 root  wheel    113 May 10 22:40 smtpd.conf




-- content of /usr/local/lib/sasl2/smtpd.conf --
pwcheck_method: auxprop
log_level: 7
mech_list: PLAIN LOGIN
auxprop_plugin: sasldb2
sasldb_path: /etc/sasldb2.db


-- active services in /etc/postfix/master.cf --
# service type  private unpriv  chroot  wakeup  maxproc command + args
#               (yes)   (yes)   (yes)   (never) (100)
smtp      inet  n       -       -       -       -       smtpd
pickup    fifo  n       -       -       60      1       pickup
cleanup   unix  n       -       -       -       0       cleanup
qmgr      fifo  n       -       -       300     1       qmgr
tlsmgr    unix  -       -       -       1000?   1       tlsmgr
rewrite   unix  -       -       -       -       -       trivial-rewrite
bounce    unix  -       -       -       -       0       bounce
defer     unix  -       -       -       -       0       bounce
trace     unix  -       -       -       -       0       bounce
verify    unix  -       -       -       -       1       verify
flush     unix  n       -       -       1000?   0       flush
proxymap  unix  -       -       n       -       -       proxymap
smtp      unix  -       -       -       -       -       smtp
relay     unix  -       -       -       -       -       smtp
        -o fallback_relay=
showq     unix  n       -       -       -       -       showq
error     unix  -       -       -       -       -       error
discard   unix  -       -       -       -       -       discard
local     unix  -       n       n       -       -       local
virtual   unix  -       n       n       -       -       virtual
lmtp      unix  -       -       -       -       -       lmtp
anvil     unix  -       -       -       -       1       anvil
scache    unix  -       -       -       -       1       scache
maildrop  unix  -       n       n       -       -       pipe
  flags=DRhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient}
old-cyrus unix  -       n       n       -       -       pipe
  flags=R user=cyrus argv=/cyrus/bin/deliver -e -m ${extension} ${user}
cyrus     unix  -       n       n       -       -       pipe
  user=cyrus argv=/cyrus/bin/deliver -e -r ${sender} -m ${extension} ${user}
uucp      unix  -       n       n       -       -       pipe
  flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
ifmail    unix  -       n       n       -       -       pipe
  flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp     unix  -       n       n       -       -       pipe
  flags=Fq. user=foo argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient

-- mechanisms on localhost --

Damit Ihr nicht so ganz blind seid ;) 

> Welche Mechanismen versucht er beim Zugriff auf die sasldb?

Sowohl PLAIN als auch LOGIN, habe unter mech_list noch LOGIN hinzugefuegt.
 
> Hast du vielleicht beim Anlegen der User das Anlegen der plain-Passwörter 
> unterdrückt "saslpasswd2 -n ..."?

Nein, habe den User, wie in dem Ausschnitt angelegt.
 
> Dann würde sich das natürlich genau beissen mit der Angabe von mech_list= 
> PLAIN.

Das ist richtig, dem ist aber nicht so.
> 
> Sandy
> 
> -- 
> _______________________________________________
> Postfixbuch-users mailingliste
> Heinlein Professional Linux Support GmbH
> 
> Postfixbuch-users at listi.jpberlin.de
> http://listi.jpberlin.de/mailman/listinfo/postfixbuch-users



Mehr Informationen über die Mailingliste Postfixbuch-users