Am 30.05.2011 13:49, schrieb M. Rodrigo Monteiro:
> Hi!
> 
> I'm trying to setup an SMTP Gateway, with Postfix authenticating in Cyrus 
> SASL.
> 
> # postconf mail_version
> mail_version = 2.8.2
> 
> # postconf -a
> cyrus
> dovecot
> 
> # /usr/local/cyrus-sasl/sbin/saslauthd -l -n 10 -a rimap -O imap_server
> 
> # /usr/local/cyrus-sasl/sbin/testsaslauthd -u
> rodrigo.monteiro@mydmoain -p password
> 0: OK "Success."
> 
> ### main.cf ###
> smtpd_sasl_auth_enable = yes
> smtpd_sasl_security_options = noanonymous
> smtpd_sasl_local_domain =
> broken_sasl_auth_clients = yes
> smtpd_sasl_path = smtpd
> cyrus_sasl_config_path = /usr/lib/sasl2/smtpd.conf
> smtp_sasl_path = /usr/lib/sasl2/smtpd.conf
> #############
> 
> # cat /usr/lib/sasl2/smtpd.conf
> pwcheck_method: saslauthd
> mech_list: PLAIN LOGIN
> saslauthd_path: /usr/local/cyrus-sasl/var/mux
> 
> ### maillog ###
> May 29 18:42:01 sec56 postfix/smtpd[22830]: warning: SASL
> authentication problem: unable to open Berkeley db /etc/sasldb2: No
> such file or directory
> May 29 18:42:01 sec56 postfix/smtpd[22830]: warning: SASL
> authentication problem: unable to open Berkeley db /etc/sasldb2: No
> such file or directory
> May 29 18:42:01 sec56 postfix/smtpd[22830]: warning: SASL
> authentication failure: Password verification failed
> ##############
> 
> What am I missing? Why Postfix is trying to use /etc/sasldb2 instead
> of saslauthd?

The cyrus_sasl_config_path expects a directory, you've specified a file.
Check and correct that. Note that a particular Cyrus version is required
for this to work, check man 5 postconf (or man -s 5 postconf).

Is Postfix reading the configuration the way you mean it? Check the
output of "postconf -n".

Is smtpd run in a chroot? Check master.cf.

After all that: does your Cyrus installation really read its
configuration from /usr/lib/sasl2, or rather from /usr/local/lib/sasl2?
 You haven't quoted relevant configuration to that extent.  Try setting
a relative symlink:
ln -s ../../lib/sasl2 /usr/local/lib (be sure to update the chroot if
you use one!)

Reply via email to