> > i have a linux box (centos) with postifx working well with exchange, postfix
> > just relay the mails to the server using sasl authentication.
> >
> > My problem is that i m not able to do it in a solaris 10 server.
> >
> > in main.cf:
> >
> > relayhost = [exchange_IP]
> > smtp_sasl_auth_enable = yes
> > smtp_sasl_password_maps = dbm:/etc/postfix/sasl_passwd
> > smtp_sasl_security_options =
>
> Make sure you have Berkeley DB support on Solaris, (not just
> the obsolete DBM) and "hash" or "btree" instead.
Sorry can you help on that?what do i need to install? will these do the
trick?db-4.2.52.NC-sol10-sparc-local.gz | File info | db is the Berkeley open
source embedded database systemgdbm-1.9.1-sol10-sparc-local.gz | File info |
GNU dbm is a set of database routines that use extendible hashing and works
similar to the standard UNIX dbm routines
after installing these (or others) i need to install againg the postfix? it was
installed with pkgadd.
>
> > in smtp_sasl_passwd:
> > exchange_IP user:pwd
>
> Why not "[exchange_IP]" (with the enclosing []) for the lookup key.
I can put with that..tried with [] but like it didn't work i putted like i have
in linux, but if you think it is better i can put [] again.
>
> Also is TLS configured?
No, like i don't have in linux i didn't put any TLS configuration is it needed?
>
> indexed = ${default_database_type}:${config_directory}/
> cached = btree:${data_directory}/
>
> smtp_tls_security_level = may
> smtp_tls_policy_maps = ${indexed}tls_policy
> smtp_tls_session_cache_database = ${cached}smtp_scache
> smtp_tls_CAfile = ${config_directory}/CAfile
>
> tls_policy:
> [exchange_IP] secure match=exchange.example.com
> # OR with correct fingerprint:
> [exchange_IP] fingerprint match=00:11:22:...
>
> > smtp_sasl_security_options =
> > unknown_local_recipient_reject_code = 550
>
> How about set:
>
> smtp_sasl_tls_security_options = noanonymous
>
> Allowing plaintext over unencrypted connections is suboptimal.
Will set.
>
> > I put it in verbose and in logs it seems that postfix does not initiate auth
> > login...in a trace i can see that postfix does not sent the auth login to
> > the server.
>
> Solaris may not ship the "LOGIN" mechanism by default, real MTAs offer
> "PLAIN". But Microsoft MTAs sometimes prefer "LOGIN" and you need your
> Cyrus to provide the corresponding module.
>
> Look in /usr/lib/sasl2 or whereever your SASL modules are kept.
Can you help? i have these:bash-3.00# pwd/usr/lib/sasl2bash-3.00#
lslibanonymous.la libcrammd5.so.2 libgssapiv2.la
libotp.so.2 libsasldb.la libscram.so.2libanonymous.so
libcrammd5.so.2.0.25 libgssapiv2.so libotp.so.2.0.25
libsasldb.so libscram.so.2.0.25libanonymous.so.2
libdigestmd5.la libgssapiv2.so.2 libplain.la
libsasldb.so.2 sasl2libanonymous.so.2.0.25 libdigestmd5.so
libgssapiv2.so.2.0.25 libplain.so
libsasldb.so.2.0.25libcrammd5.la libdigestmd5.so.2 libotp.la
libplain.so.2 libscram.lalibcrammd5.so
libdigestmd5.so.2.0.25 libotp.so libplain.so.2.0.25
libscram.so
should it be a "liblogin"
In logs its normal not to see any kind of errors regarding the authentication?>
> --
> Viktor.
Thanks
