Hello all
I have configured saslauthd to use pam for password verification and I want
to use pam_krb5 as the authentication back-end. I have set the following
options in /etc/postfix/sasl/smtpd.conf:

log_level: 3
pwcheck_method: saslauthd
mech_list: plain login

Also, I have entered the following lines in /etc/pam.d/smtp

auth            sufficient      /lib/security/pam_krb5.so minimum_uid=1000
session         required        /lib/security/pam_krb5.so minimum_uid=1000
account         required        /lib/security/pam_krb5.so minimum_uid=1000
password        sufficient      /lib/security/pam_krb5.so minimum_uid=1000

When I use testsaslauthd as "testsaslauthd -u user -p pass -s smtp -f
/var/run/saslauthd/mux", it can successfully authenticate the user which has
a corresponding principal in my kerberos configuration. But, when I want to
use telnet to actually test the smtp server, the authentication fails. By
the way, what should be provided to the server when the desired
authentication mechanism is plain? (Is that something like:  perl
-MMIME::Base64 -e 'print encode_base64("user\0pass")')? And the last
questions, are all those configuration file names (and definitely) their
content correct? I mean, /etc/postfix/smtpd.conf and /etc/pam.d/smtp?

Kind Regards
Ali Majdzadeh Kohbanani

Reply via email to