Hello Nyoman,

Wednesday, January 4, 2006, 7:23:52 PM, you wrote:

> Dear all,
> Saya sudah berhasil install cyrus-sasl-2.1.15-3. 
> Langkah2 instalasi saya mengikuti dari
> http://www.linuxfromscratch.org/blfs/view/stable/postlfs/cyrus-sasl.html
> Dan saya bingung dengan init script sehingga membawa saya terdampar ke
> http://www.linuxfromscratch.org/blfs/view/stable/introduction/bootscripts.ht
> ml apa pula maksud dan hubungannya dgn smtp auth..? Gimana menggunakannya..?

> Next gimana setting di main.cf...? Selain main.cf apalagi yang harus
> disetting agar smtp auth ini berfungsi dengan benar..?

> Btw, udah baca2 file install.html yang disertakan di tarball
> cyrus-sasl-2.1.15-3 tapi makin puyeng...

> Please bantuan rekan2 sekalian

> Salam
> Nyoman

Kalau saya cuma nambahin ini di main.cf
smtpd_recipient_restrictions =
  permit_sasl_authenticated,
  permit_mynetworks,
  #reject_non_fqdn_hostname,
  reject_non_fqdn_sender,
  reject_non_fqdn_recipient,
  reject_unauth_destination,
  reject_unauth_pipelining,
  reject_invalid_hostname,
#  reject_rbl_client opm.blitzed.org,
#  reject_rbl_client list.dsbl.org,
#  reject_rbl_client bl.spamcop.net,
#  reject_rbl_client sbl-xbl.spamhaus.org
broken_sasl_auth_clients = yes
smtpd_sender_restrictions = permit_sasl_authenticated, permit_mynetworks
smtpd_sasl_auth_enable = yes
#smtp_sasl_auth_enable = yes
smtpd_sasl_local_domain =
smtpd_sasl_security_options = noanonymous

terus edit file /usr/lib/sasl2/smtpd.conf
pwcheck_method: saslauthd
mech_list: plain login

start service saslauthd
/etc/init.d/saslauthd start

buat user test untuk percobaan
useradd test
passwd test

generate username dan password ke BASE64 (karena saya menggunakan
plain text dan passwordnya password)
perl -MMIME::Base64 -e 'print encode_base64("test\0test\0password");'
dGVzdAB0ZXN0AHBhc3N3b3Jk <== (hasil dari generate)

edit main.cf sekali lagi dan isi/ubah
mynetworks = 127.0.0.0/8
restart postfix

skr coba telnet dari computer lain,
perhatikan:
[EMAIL PROTECTED]:~ # telnet 192.168.83.6 25
Trying 192.168.83.6...
Connected to 192.168.83.6 (192.168.83.6).
Escape character is '^]'.
220 mail.royalperspective.com ESMTP Postfix
ehlo test.com
250-mail.royalperspective.com
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-AUTH LOGIN PLAIN
250-AUTH=LOGIN PLAIN
250 8BITMIME
mail from: [EMAIL PROTECTED]
250 Ok
rcpt to: [EMAIL PROTECTED]
250 Ok
quit
221 Bye
Connection closed by foreign host.

sampai di sini email server masih bekerja wajar, sekali lagi telnet
[EMAIL PROTECTED]:~ # telnet 192.168.83.6 25
Trying 192.168.83.6...
Connected to 192.168.83.6 (192.168.83.6).
Escape character is '^]'.
220 mail.royalperspective.com ESMTP Postfix
ehlo test.com
250-mail.royalperspective.com
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-AUTH LOGIN PLAIN
250-AUTH=LOGIN PLAIN
250 8BITMIME
mail from: [EMAIL PROTECTED]
250 Ok
rcpt to: [EMAIL PROTECTED]
554 <[EMAIL PROTECTED]>: Relay access denied
quit
221 Bye
Connection closed by foreign host.

seperti yang kita harapkan, dilarang relay :)
sekali lagi telnet kali ini menggunakan AUTH PLAIN
[EMAIL PROTECTED]:~ # telnet 192.168.83.6 25
Trying 192.168.83.6...
Connected to 192.168.83.6 (192.168.83.6).
Escape character is '^]'.
220 mail.royalperspective.com ESMTP Postfix
ehlo test.com
250-mail.royalperspective.com
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-AUTH LOGIN PLAIN
250-AUTH=LOGIN PLAIN
250 8BITMIME
AUTH PLAIN dGVzdAB0ZXN0AHBhc3N3b3Jk
235 Authentication successful
mail from: [EMAIL PROTECTED]
250 Ok
rcpt to: [EMAIL PROTECTED]
250 Ok
data
354 End data with <CR><LF>.<CR><LF>
from: [EMAIL PROTECTED]
to: [EMAIL PROTECTED]
subject: test auth menggunakan sasl

Hai... dia
.
250 Ok: queued as 8189F2804A
quit
221 Bye
Connection closed by foreign host.

Sukses...., ah masak sih.. mari kita check maillog

Jan  4 20:18:31 redhat postfix/smtpd[4580]: connect from unknown[192.168.83.253]
Jan  4 20:19:09 redhat postfix/smtpd[4580]: 8189F2804A: 
client=unknown[192.168.83.253], sasl_method=PLAIN, sasl_username=test
Jan  4 20:19:35 redhat postfix/cleanup[4589]: 8189F2804A: message-id=<[EMAIL 
PROTECTED]>
Jan  4 20:19:35 redhat postfix/qmgr[4578]: 8189F2804A: from=<[EMAIL 
PROTECTED]>, size=381, nrcpt=1 (queue active)
Jan  4 20:19:36 redhat postfix/smtpd[4580]: disconnect from 
unknown[192.168.83.253]
Jan  4 20:19:41 redhat postfix/smtp[4590]: 8189F2804A: to=<[EMAIL PROTECTED]>, 
relay=mx1.mail.yahoo.com[67.28.113.10], delay=39, status=bounced (host 
mx1.mail.yahoo.com[67.28.113.10] said: 554 delivery error: dd This user doesn't 
have a yahoo.com account ([EMAIL PROTECTED]) [-5] - mta102.mail.re2.yahoo.com 
(in reply to end of DATA command))
Jan  4 20:19:41 redhat postfix/cleanup[4589]: C95422804D: message-id=<[EMAIL 
PROTECTED]>
Jan  4 20:19:41 redhat postfix/qmgr[4578]: C95422804D: from=<>, size=2443, 
nrcpt=1 (queue active)
Jan  4 20:19:41 redhat postfix/qmgr[4578]: 8189F2804A: removed
Jan  4 20:20:14 redhat postfix/smtp[4590]: connect to test.com[208.48.34.132]: 
Connection timed out (port 25)
Jan  4 20:20:14 redhat postfix/smtp[4590]: C95422804D: to=<[EMAIL PROTECTED]>, 
relay=none, delay=33, status=deferred (connect to test.com[208.48.34.132]: 
Connection timed out)

Selengkapnya baca 
http://postfix.state-of-mind.de/patrick.koetter/smtpauth/smtp_auth_mailclients.html
Dan sorry, emailnya puanjanggg banget.. habis minta step by step
sih... maunya sih diupload ke web, tapi berhubung udah malam dan mau
pulang :) ya terpaksa mengorbankan banyak orang.. sorry sekali lagi
kalau emailnya kepanjangan....

Nyoman.                     
Juga




-- 
FAQ milis di http://wiki.linux.or.id/FAQ_milis_tanya-jawab
Unsubscribe: kirim email ke [EMAIL PROTECTED]
Arsip dan info milis selengkapnya di http://linux.or.id/milis

Kirim email ke