From: Jevos, Peter (Peter dot Jevos at Oriflame-SW dot Com)
Date: Tue Jun 15 2004 - 09:00:57 EDT
hello, I've problem with sasl authentication.
I used cyrus-sasl with:
$tar zxf cyrus-sasl-2.1.18.tar.gz
$cd cyrus-sasl-2.1.18
$export CPPFLAGS="-I/usr/local/mysql/include/mysql"
$./configure \
--enable-anon \
--enable-plain \
--enable-login \
--enable-sql \
--disable-krb4 \
--disable-otp \
--disable-cram \
--disable-digest \
--with-mysql=/usr/local/mysql/lib/mysql \
--without-pam \
--without-saslauthd \
--without-pwcheck \
--with-dblib=berkeley \
--with-bdb-libdir=/usr/local/bdb/lib \
--with-bdb-incdir=/usr/local/bdb/include \
--with-openssl=/usr/local/ssl \
--with-plugindir=/usr/local/lib/sasl2
$make
#make install
#ln -s /usr/local/lib/sasl2 /usr/lib/sasl2
#echo "/usr/local/lib/" >> /etc/ld.so.conf
#ldconfig
My usr/local/lib/sasl2/smtpd.conf looks:
log_level: 3
pwcheck_method: auxprop
mech_list: PLAIN LOGIN
auxprop_plugin: sql
sql_engine: mysql
sql_hostnames: localhost
sql_database: mail
sql_user: user
sql_passwd: password
sql_select: SELECT clear FROM postfix_users WHERE email='%u@%r' and
access='Y'
When I'm using sasl client & server tools I got
/tmp/install/cyrus-sasl-2.1.18/sample # ./client -s rcmd -p 8000 -m PLAIN
127.0.0.1
receiving capability list... recv: {21}
LOGIN ANONYMOUS PLAIN
LOGIN ANONYMOUS PLAIN
please enter an authentication id: test at test dot biz
please enter an authorization id: test at test dot biz
Password:
send: {5}
PLAIN
send: {1}
Y
send: {50}
test at test dot biz[0]test at test dot biz[0]test
bad protocol from server (ÿ ffffffff)
closing connection
My /var/log/messages:
Jun 15 14:43:10 test lt-server: sql_select option missing
Jun 15 14:43:10 test lt-server: auxpropfunc error no mechanism available
Jun 15 14:43:10 test lt-server: _sasl_plugin_load failed on
sasl_auxprop_plug_init for plugin: sql
But When I tried to use
server$ telnet mail.my.server 25
Trying 10.1.2.3
Connected to 10.1.2.3.
Escape character is '^]'.
220 mail.my.server ESMTP Postfix
EHLO blah
250-mail.my.server
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-AUTH LOGIN PLAIN
250-AUTH=LOGIN PLAIN
250-XVERP
250 8BITMIME
auth plain dXNlcgB1c2VyAHBhc3M= # where hash is printf
'test at test dot biz[0]test at test dot biz[0]test' | mimencode
235 Authentication successful
Does anybody know about this problem ?
Thanx
pet
|
|
|