I'm trying to authenticate users for smtp relaying using postfix +
saslauthd + mysql. Everything else works based on the gentoo "Virtual
Mailhosting System with Postfix Guide". I can connect via email client and
check mail, etc... But when it comes to sending email... it's not
authenticating properly. In searching for an answer I did find
/etc/sasl2/smtpd.conf's using "pwcheck_method: auxprop" and
"auxprop_plugin: sql"... is that something I should be looking at... or
did I just miss something in my general configurations? Any pointers would
be greatly appreciated.

/var/log/messages...
<<
Feb 10 10:38:55 myhost postfix/smtpd[2513]: smtpd_sasl_initialize: SASL
config file is smtpd.conf
Feb 10 10:38:55 myhost postfix/smtpd[2513]: sql_select option missing
Feb 10 10:38:55 myhost postfix/smtpd[2513]: auxpropfunc error no mechanism
available
Feb 10 10:38:55 myhost postfix/smtpd[2513]: _sasl_plugin_load failed on
sasl_auxprop_plug_init for plugin: sql
Feb 10 10:38:55 myhost postfix/smtpd[2513]: initializing the server-side
TLS engine
>>
<<
Feb 10 11:46:01 myhost postfix/smtpd[2869]: >>> START Recipient address
RESTRICTIONS <<<
Feb 10 11:46:01 myhost postfix/smtpd[2869]: generic_checks:
name=permit_sasl_authenticated
Feb 10 11:46:01 myhost postfix/smtpd[2869]: generic_checks:
name=permit_sasl_authenticated status=0
Feb 10 11:46:01 myhost postfix/smtpd[2869]: generic_checks: name=reject
status=2
Feb 10 11:46:01 myhost postfix/smtpd[2869]: > unknown[216.xxx.xxx.xx]: 554
<[EMAIL PROTECTED]>: Recipient address rejected: Access denied
>>

#/etc/sasl2/smtpd.conf
mech_list: PLAIN LOGIN
pwcheck_method: saslauthd

#/etc/courier/authlib/authdaemonrc
authmodulelist="authmysql authpam"
authmodulelistorig="authuserdb authpam authshadow authmysql authcustom
authpipe"

#/etc/courier/authlib/authmysqlrc
MYSQL_SERVER            localhost
MYSQL_USERNAME          xxxxxx
MYSQL_PASSWORD          xxxxxxx
MYSQL_PORT              0
MYSQL_OPT               0
MYSQL_DATABASE          mailsql
MYSQL_USER_TABLE        users
MYSQL_CLEAR_PWFIELD     clear
MYSQL_UID_FIELD         uid
MYSQL_GID_FIELD         gid
MYSQL_LOGIN_FIELD       email
MYSQL_HOME_FIELD        homedir
MYSQL_NAME_FIELD        name
MYSQL_MAILDIR_FIELD     maildir

#/etc/postfix/main.cf (significant bits)
smtpd_sasl_auth_enable = yes
smtpd_sasl2_auth_enable = yes
smtpd_sasl_security_options = noanonymous
broken_sasl_auth_clients = yes
smtpd_sasl_local_domain =

smtpd_recipient_restrictions = permit_sasl_authenticated,
permit_mynetworks, reject
smtp_tls_note_starttls_offer = yes
smtpd_use_tls = yes
#smtpd_tls_auth_only = yes
smtpd_tls_key_file = /etc/postfix/newreq.pem
smtpd_tls_cert_file = /etc/postfix/newcert.pem
smtpd_tls_CAfile = /etc/postfix/cacert.pem
smtpd_tls_loglevel = 3
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
tls_random_source = dev:/dev/urandom


-- 
gentoo-user@gentoo.org mailing list

Reply via email to