Problem with Cyrus-SASL with auxprop-mysql and Postfix
Patrick Ben Koetter
p at state-of-mind.de
Sun Feb 11 04:15:41 EST 2007
* Jens Mittag <thomas-moore at gmx.net>:
> I know this has been discussed often enough, but though I've read a lot of
> postings about this topic I can not solve it...
> I've set set debug levels to the maximum values possible (for both postfix
> and SASL) and get the following error (which is not very helpful to me):
> postfix/smtpd: Read 49 chars: AUTH PLAIN AG0wMHJlZGJpQG0wMHJlLmRlADVta
> postfix/smtpd: warning: SASL authentication failure: Password verification failed
> m00re postfix/smtpd: warning: unknown[22.214.171.124]: SASL PLAIN authentication failed
> m00re postfix/smtpd: Write 34 chars: 535 Error: authentication failed??
> My smtpd.conf looks like:
> log_level: 7
> pwcheck_method: auxprop
> auxprop_plugin: sql
> mech_list: plain login
> sql_engine: mysql
> sql_hostnames: 127.0.0.1
> sql_user: postfix
> sql_passwd: passwort
> sql_database: postfix
> sql_select: select password from mailbox where username='%u@%r'
> At first I thought the sql_select is wrong, but unfortunately, SASL does not
> connect to MySQL at all. What could cause this?
> My system is Ubuntu 6.06 LTS (means I have version 2.1.19.dfsg1-0.1ubuntu2
> Besides doing the auxprop approach I also tried authdaemond, but with no
> success either. I have already switched from a chrooted postfix to normal
> operation, but I still get
> postfix/smtpd: warning: SASL authentication failure: cannot connect
> to Courier authdaemond: No such file or directory
> The smtpd.conf I used for this approach is:
> pwcheck_method: authdaemond
> log_level: 7
> mech_list: PLAIN LOGIN
> authdaemond_path: /var/run/courier/authdaemon/socket
> The socket file exists and is readable by the user postfix... whats wrong?
First guess: In both cases you are running the Postfix smtpd daemon chrooted
and therefore it can't access the MySQL socket or the authdaemond socket.
If that's not the answer show 'saslfinger -s' output.
p at rick
The Book of Postfix
saslfinger (debugging SMTP AUTH):
More information about the Cyrus-sasl