SASL + Postfix strangeness

Andreas Winkelmann ml at awinkelmann.de
Mon Oct 3 03:12:38 EDT 2005


Am Monday 03 October 2005 01:11 schrieb Michael Laccetti:

> I'm busy trying to setup a Postfix server that uses SASL to authenticate
> users against a MySQL database.  Postfix is configured properly, and I
> believe that SASL is as well.
>
> My smtpd.conf file:
> log_level: 3
> pwcheck_method: auxprop
> mech_list: PLAIN LOGIN CRAM-MD5 DIGEST-MD5
> auxprop_plugin: sql
> sql_engine: mysql
> sql_hostnames: localhost
> sql_database: postfix
> sql_user: postfix
> sql_passwd: ------------
> sql_select: SELECT userPass FROM users WHERE username='%u' AND
> userrealm='%r' AND auth='1'
> sql_usessl: no

"...SELECT userPass FROM..."

> Whenever I attempt to authenticate myself, Postfix outputs the following:
> warning: SASL authentication failure: Password verification failed.  So, I
> went and checked the auth logs.  And that's when I noticed something
> strange.  The sql_select statement is being populated in a strange manner. 
> Here is a sample: sql plugin doing query SELECT userPassword FROM users
> WHERE
> username='mail.example.com' AND userrealm='mail.codeogre.com' AND auth='1';

"...SELECT userPassword FROM..."

Either show us the real Configuration or the real Log-Entry.

> Apparently %u is being replaced with the realm, and not the username.  How
> is that possible?  Any ideas as to fixing this?

-- 
	Andreas


More information about the Cyrus-sasl mailing list