Re: Cyrus-sasl + postfix + postgresql problem.

[EASY steve.h...@digitalcertainty.co.uk]

On Sun, 2009-06-21 at 10:35 +0200, Rafał Radecki wrote:
> Hi all. I'm currently installing an smtp server on CentOS 5.3. Part of
> it is to use PostgreSQL backend to store virtual
> users/domains/aliases/passwords and of course to use it for SASL
> authentication. My /usr/lib/sasl2/smtpd.conf file:
> 
> pwdcheck_method: auxprop
> sql_engine: pgsql
> sql_user: postfix
> sql_passwd: some_password
> sql_hostnames: localhost
> sql_database: postfix
> sql_select: SELECT password FROM mailbox WHERE username='%...@%r'
> mech_list: login plain
> log_level: 4
> 
> My /etc/postfix/main.cf:
> 
> smtpd_sasl_auth_enable = yes
> broken_sasl_auth_clients = yes
> smtpd_sasl_local_domain = $mydomain
> smtpd_sasl_security_options = noanonymous
> smtpd_recipient_restrictions = permit_mynetworks,
> permit_sasl_authenticated, \
> reject_unauth_destination
> 
> virtual_alias_maps = pgsql:/etc/postfix/pgsql_virtual_alias_maps.cf
> virtual_alias_domains = $virtual_alias_maps
> virtual_uid_maps = static:1004
> virtual_gid_maps = static:1004
> virtual_mailbox_base = /var/spool/mail/virtual
> virtual_mailbox_domains =
> pgsql:/etc/postfix/pgsql_virtual_domains_maps.cf
> virtual_mailbox_maps =
> pgsql:/etc/postfix/pgsql_virtual_mailbox_maps.cf
> #virtual_mailbox_limit = 51200000
> transport_maps = pgsql:/etc/postfix/pgsql_transport.cf
> 
> I use that line to insert a record to the PostgreSQL base:
> 
> postfix=>INSERT INTO mailbox(username, password, name, maildir)
> postfix->VALUES('r...@example.com','password','description','r...@example.com/');
> 
> But when i try to send mail through my server i get the following
> errors in /var/log/maillog:
> 
> warning: SASL authenticatin problem: unable to open db etc/sasldb2: no
> such file or directory
What mechanism are you using for the SASL? Unless I'm getting confused
here you need something like the Cyrus/Dovecot SASL 'guts' to make it
work. 
> 
> I'm quite confused because i thought that all authenticaton data
> should be taken from mentioned PostgreSQL database. 
But it needs the interface. I'm no expert but I think you've got
something missing here (or mis-configured) with whatever is offering the
'SASL' service to Postfix.
> 
> Any help will be very kindly appreciated.
> 
> With regards,
> R.
Please treat my answer with much caution. I know only a tiny fraction
about SASL compared to the guru's that post here. I've only answered
because it is Sunday and it may be as simple as you've missed a chunk in
your setup'. Hopefully someone else with better experience will give you
better advice.
> 
> 
> 
> 
> 
>