Sasl/Postfix/SMTP AUTH

[Shelley Waltz]

I am running cyrus-sasl-2.1.17-1(Simon's rpms) with
cyrus-imapd-2.2.3(Simon's rpms) and have authentication
using saslauthd -ldap   with mechanism plain with STARTTLS
working fine.

I am now tring to do the same with Postfix-2.0.18 such that it
will relay if authenticated using SMTP AUTH.
Even though saslauthd is started using "saslauthd -ldap",
it appears as though postfix tries to get the password from
sasldb ...

Mar  4 10:05:21 chipmunk postfix/postfix-script: starting the Postfix mail 
system
Mar  4 10:05:21 chipmunk postfix/master[12079]: daemon started -- version 
2.0.18
Mar  4 10:05:42 chipmunk imaps[11950]: accepted connection
Mar  4 10:05:42 chipmunk imaps[11950]: TLS server engine: cannot load CA 
data
Mar  4 10:05:48 chipmunk imaps[11950]: mystore: starting txn 2147483665
Mar  4 10:05:48 chipmunk imaps[11950]: mystore: committing txn 2147483665
Mar  4 10:05:48 chipmunk imaps[11950]: starttls: SSLv3 with cipher RC4-MD5 
(128/128 bits new) no authentication
Mar  4 10:05:54 chipmunk imaps[11950]: login: raven.cabm.rutgers.edu 
[192.76.178.8] shelley plain+TLS User logged in
Mar  4 10:05:54 chipmunk imaps[11950]: seen_db: user shelley opened 
/usr/cyrus/imap/user/s/shelley.seen
Mar  4 10:05:54 chipmunk imaps[11950]: open: user shelley opened INBOX
Mar  4 10:05:56 chipmunk master[8912]: process 11801 exited, status 0
Mar  4 10:05:56 chipmunk master[12085]: about to exec 
/usr/lib/cyrus-imapd/imapd
Mar  4 10:05:56 chipmunk imaps[12085]: executed
Mar  4 10:06:29 chipmunk postfix/smtpd[12086]: connect from 
raven.cabm.rutgers.edu[192.76.178.8]
Mar  4 10:06:29 chipmunk postfix/smtpd[12086]: warning: SASL 
authentication problem: unable to open Berkeley db /etc/sasldb2: No such 
file or directory
Mar  4 10:06:29 chipmunk postfix/smtpd[12086]: warning: SASL 
authentication problem: unable to open Berkeley db /etc/sasldb2: No such 
file or directory
Mar  4 10:06:29 chipmunk postfix/smtpd[12086]: warning: SASL 
authentication failure: Password verification failed
Mar  4 10:06:29 chipmunk postfix/smtpd[12086]: warning: 
raven.cabm.rutgers.edu[192.76.178.8]: SASL PLAIN authentication failed
Mar  4 10:06:53 chipmunk postfix/smtpd[12086]: warning: SASL 
authentication problem: unable to open Berkeley db /etc/sasldb2: No such 
file or directory
Mar  4 10:06:53 chipmunk last message repeated 3 times
Mar  4 10:06:53 chipmunk postfix/smtpd[12086]: warning: SASL 
authentication failure: Password verification failed
Mar  4 10:06:53 chipmunk postfix/smtpd[12086]: warning: 
raven.cabm.rutgers.edu[192.76.178.8]: SASL PLAIN authentication failed


If I then create a /usr/lib/sasl2/smtpd.conf file with the following:
pwcheck_method : saslauthd

the result is the following ...

Mar  4 10:11:17 chipmunk postfix/master[12149]: daemon started -- version 
2.0.18
Mar  4 10:11:48 chipmunk imaps[12085]: accepted connection
Mar  4 10:11:48 chipmunk imaps[12085]: TLS server engine: cannot load CA 
data
Mar  4 10:11:53 chipmunk imaps[12085]: mystore: starting txn 2147483667
Mar  4 10:11:53 chipmunk imaps[12085]: mystore: committing txn 2147483667
Mar  4 10:11:53 chipmunk imaps[12085]: starttls: SSLv3 with cipher RC4-MD5 
(128/128 bits new) no authentication
Mar  4 10:11:59 chipmunk imaps[12085]: login: raven.cabm.rutgers.edu 
[192.76.178.8] shelley plain+TLS User logged in
Mar  4 10:11:59 chipmunk imaps[12085]: seen_db: user shelley opened 
/usr/cyrus/imap/user/s/shelley.seen
Mar  4 10:11:59 chipmunk imaps[12085]: open: user shelley opened INBOX
Mar  4 10:12:18 chipmunk postfix/smtpd[12155]: fatal: SASL per-process 
initialization failed
Mar  4 10:12:19 chipmunk postfix/master[12149]: warning: process 
/usr/libexec/postfix/smtpd pid 12155 exit status 1
Mar  4 10:12:19 chipmunk postfix/master[12149]: warning: 
/usr/libexec/postfix/smtpd: bad command startup -- throttling
Mar  4 10:12:41 chipmunk master[8912]: process 11950 exited, status 0


What is necessary in the configuration to get this to work.  Below are my 
config files.

[root at chipmunk sasl2]# more /etc/saslauthd.conf
ldap_servers: ldap://localhost/
ldap_search_base: dc=cabm.rutgers,dc=edu
ldap_bind_dn: cn=chipmunk,dc=cabm.rutgers,dc=edu
ldap_bind_pw: xxxxxx
ldap_version: 3
#ldap_timeout: 5
#ldap_timelimit: 5
ldap_restart: yes
ldap_scope: sub
ldap_search_base: dc=cabm.rutgers,dc=edu
ldap_auth_method: bind
#ldap_filter: (|(uid=%u)(mail=%u)(alias=%u))
ldap_filter: (uid=%u)
ldap_debug: 9
ldap_verbose: 1
ldap_ssl: no


postfix/main.cf
# sasl auth config
broken_sasl_auth_clients = yes
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options =


Shelley Waltz

---
Home Page: http://asg.web.cmu.edu/cyrus
Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html