> On 29 May 2022, at 5:15 pm, Jim Garrison <j...@jhmg.net> wrote:
>
> One possible suggestion for Postfix: Since it appears Postfix was
> never able to even establish contact with Cyrus SASL, it might be nice
> to detect that condition and provide a different error message than
> just "authentication failed", to help with troubleshooting. I
> also appreciate that that might actually require a change in libsasl
> and not Postfix.
As you surpmised, Postfix had no trouble using the Cyrus SASL library,
the error indication is returned from the library, there's nothing
Postfix can do to elicit a more precise error message.
Cyrus SASL supports many mechanisms, and its use is justified if you
need its advanced features. If you're already using Dovecot, and its
SASL support meets your needs, that is typically the simpler choice.
--
Viktor.
