> Dear Agnello,
>
> If your testing a smtp auth. then first you have to authenticate your self 
> before the MTA will allow you to send mail.
>
> use following steps.
> perl -MMIME::Base64 -e 'print encode_base64("[EMAIL PROTECTED]")'
>
> replace
> 1.jsm1 with username
> 2. jms1.net with your domain
> 3. not.my.real.password with your username's password.
>
> you will get a string
>
> Telnet 216.185.43.253 25
> 220 mail.agnello-postfixtest.com ESMTP Postfix
> ehlo hi
> 250-mail.agnello-postfixtest.com
> 250-PIPELINING
> 250-SIZE 10240000
> 250-VRFY
> 250-ETRN
> 250 8BITMIME
>
> it should also show 250-AUTH LOGIN PLAIN.
> then you have to just put the string in front of
>
> AUTH LOGIN "string got from perl command"
>
> it shd say go ahead.
>
> hence you need to check your configuration again.
>
> Regards,
>
> Vishal
>
> Agnello George <[EMAIL PROTECTED]> wrote: HI
>
> I have instaled cyrus sasl and have configured my mail server as following:
>
> my /usr/lib/sasl2/smtpd.conf looks like this
> pwcheck_method: authdaemond
> mech_list: PLAIN LOGIN
>
> my main.cf look like this
> ###################################################
> alias_database = hash:/etc/aliases
> alias_maps = hash:/etc/aliases
> broken_sasl_auth_clients = yes
> command_directory = /usr/sbin
> config_directory = /etc/postfix
> content_filter = amavisfeed:[127.0.0.1]:10024
> daemon_directory = /usr/libexec/postfix
> debug_peer_level = 2
> home_mailbox = Maildir/
> html_directory = no
> inet_interfaces = all
> mail_owner = postfix
> mailq_path = /usr/bin/mailq.postfix
> manpage_directory = /usr/share/man
> mydestination = $myhostname, localhost.$mydomain, localhost
> newaliases_path = /usr/bin/newaliases.postfix
> queue_directory = /var/spool/postfix
> readme_directory = /usr/share/doc/postfix-2.3.3/README_FILES
> sample_directory = /usr/share/doc/postfix-2.3.3/samples
> sendmail_path = /usr/sbin/sendmail.postfix
> setgid_group = postdrop
> smtpd_recipient_restrictions = permit_mynetworks,
> permit_sasl_authenticated, reject_unauth_destination
> smtpd_sasl_auth_enable = yes
> smtpd_sasl_local_domain =
> smtpd_sasl_security_options = noanonymous
> smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.cert
> smtpd_tls_key_file = /etc/postfix/ssl/smtpd.key
> smtpd_use_tls = yes
> unknown_local_recipient_reject_code = 550
> virtual_alias_maps = mysql:/etc/postfix/mysql_virtual_alias_maps.cf
> virtual_create_maildirsize = yes
> virtual_gid_maps = static:5000
> virtual_mailbox_base = /home/vmail
> virtual_mailbox_domains = mysql:/etc/postfix/mysql_virtual_domain_maps.cf
> virtual_mailbox_limit_maps = mysql:/etc/postfix/mysql_virtual_quota_maps.cf
> virtual_mailbox_limit_override = yes
> virtual_mailbox_maps = mysql:/etc/postfix/mysql_virtual_mailbox_maps.cf
> virtual_overquota_bounce = yes
> virtual_uid_maps = static:5000
> ######################################################
>
> when i try to telnet my mailserver on port 25 from a remote client on
> a different network i get the following error :
>
> Telnet 216.185.43.253 25
> ###################################################
> 220 mailserver.managedns.org ESMTP Postfix
> mail from:test250 2.1.0 Ok
> rcpt to:[EMAIL PROTECTED] 5.7.1 <[EMAIL PROTECTED]>: Relay
> access denied
> quit221 2.0.0 Bye
> #####################################################
>
> i have installed postfix version --- postfix-2.3.3-2
>
> when i query the packages for cyrus sasl o ge the following :
> rpm -qa |grep cyrus
> cyrus-sasl-lib-2.1.22-6
> cyrus-sasl-plain-2.1.22-6
> cyrus-sasl-devel-2.1.22-6
> cyrus-sasl-2.1.22-6
>
> I have ckecked every forum on the internet . Please if any one has
> faced this and resolved it , kindly help me here.
>
> Thanks
>
> Agnello . G .Dsouza
>
>
>
>
> ---------------------------------
> Forgot the famous last words? Access your message archive online. Click here.
>
> [Non-text portions of this message have been removed]
>
>
>
> 



Thanks Vishal for you post  ,

  I have solved the problem with smtp -auth. ( relay access denied ) and
thought i would share my configuration the with those who are facing
similar issues
My system is  FC4  and i wanted a basic requirement of system users on
my mail server ( only one domain ) . setting up of postfix in this
case is pretty easy but smth-AUTH as  major problem. Here are some of
my tips and configuration files  i sued to authenticate users through
PAM  instead of the /etc/shadow . { note:  for to users authenticate r
through /etc/shadow you would need to allow postfix have read
permission to the /etc/shadow file , which would be a security risk by
default /etc/shadow is 400  }


the testsaslauthd  is a command to check is system user authenticate
testsaslauthd -u testpostfix -p testpostfix

vi /etc/sysconfig/saslauthd
# Directory in which to place saslauthd's listening socket, pid file, and so
# on. This directory must already exist.
SOCKETDIR=/var/run/saslauthd
# Mechanism to use when checking passwords. Run "saslauthd -v" to get a list
# of which mechanism your installation was compiled to use.
MECH="PAM"
# Additional flags to pass to saslauthd on the command line. See saslauthd(8)
# for the list of accepted flags.
FLAGS=


vi /usr/lib/sasl2/smtpd.conf


pwcheck_method: saslauthd
mech_list: PLAIN LOGIN



[EMAIL PROTECTED] ~]# rpm -qa |grep cyrus
cyrus-sasl-2.1.20-6
cyrus-sasl-plain-2.1.20-6
cyrus-sasl-sql-2.1.20-6
cyrus-sasl-md5-2.1.20-6
cyrus-sasl-devel-2.1.20-6
cyrus-sasl-gssapi-2.1.20-6
cyrus-sasl-ntlm-2.1.20-6




vi main.cf

enable_server_options = yes
smtpd_sasl2_auth_enable = yes

smtpd_sasl_auth_enable = yes

smtpd_sasl_path = smtpd
smtpd_sasl_application_name = smtpd

smtpd_sasl_security_options = noanonymous

smtpd_sasl_authenticated_header = yes
smtpd_sasl_local_domain =

broken_sasl_auth_clients = yes

server_enabled = 1

smtpd_recipient_restrictions = permit_mynetworks,

permit_sasl_authenticated, reject_unauth_destination,
check_relay_domains




telnet ipaddress 25

220 mail.foostor.com ESMTP Postfix
ehlo localhost
250-mail.foostor.com
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-AUTH LOGIN PLAIN
250-AUTH=LOGIN PLAIN
250 8BITMIME

Please do add in you comments , thanks again for all the help !!


Agnello . G .Dsouza

Reply via email to