On Wed, 19 May 2010 19:35:06 -0400, Victor Duchovni <victor.ducho...@morganstanley.com> wrote: > > Why did you change "cyrus" to "postfix"? Does this "postfix" > user have the same rights as "cyrus" to do proxy authentication? >
Indeed, it does. ---- # ldapwhoami -Y DIGEST-MD5 -U postfix -H ldap://localhost -R linuxwall.info -X u:julien SASL/DIGEST-MD5 authentication started Please enter your password: SASL username: u:julien SASL SSF: 128 SASL data security layer installed. dn:cn=julien vehent,ou=people,dc=linuxwall,dc=info ---- > > Is your SMTP server chrooted? Have you configured a non-default > Cyrus plugin search path? > Nope. It's a completely out of the (debian) box cyrus/slapd/postfix installation. I described openldap and cyrus configurations here: http://wiki.linuxwall.info/doku.php/en:ressources:dossiers:openldap:openldap_debian http://wiki.linuxwall.info/doku.php/en:ressources:dossiers:cyrus:imapd > > Well, the SMTP server may be chrooted, or may be looking outside > /usr/lib/sasl2. In which case, I don't think I would be seeing any connection to the LDAP directory, since sasl wouldn't be able to find the ldapdb driver. Right ? Thanks, Julien