Public bug reported:
Binary package hint: sasl2-bin
The problem is quite complex, and has at least 2 easy workarounds. Maybe
updating some docs or comments in /etc/default/saslauthd can be enough.
Scenario
I've set up a server with users in LDAP. Both postfix and cyrus need to
authenticate the users, and using saslauthd you have 2 options:
1) run smtpd without chroot
2) move saslauthd socket from /var/run/saslauthd to
/var/spool/postfix/var/run/saslauthd (as suggested in /etc/default/saslauthd)
and then create a softlink in the old location of the socket so that cyrus can
talk to saslauthd
The problem with 1) is that I'd prefer to keep the added security provided by
the chroot.
The problem with 2) is that /var/run is in tmpfs, and the softlink doesn't
survive a reboot. The 'easy fix' to this is, if a "-m /new/socket/dir" is given
to saslauthd, the init script should create a link from the new location to
/var/run/saslauthd
Since this problem is exactly the same of syslog(s) not being usable
from chroots without additional listening socket, the "real" fix would
be to patch saslauthd to support additional sockets.
Ciao,
Roberto
** Affects: cyrus-sasl2 (Ubuntu)
Importance: Undecided
Status: New
--
Can't use saslauthd to authenticate both postfix and cyrus due to
/var/run/saslauthd being on tmpfs
https://bugs.launchpad.net/bugs/138931
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
