Testing authentincation / SASL + MySQL

[volatile 45hs]

Hello list, I am trying to use MySQL as an authentication backend for SASL

I am folowing directions from The Book of Postfix but I am stack in
authentication testing.

Can somebody help me with it please?



Errors:

MySQL query log:
---------------

1033 Connect     Access denied for user: 'postfix at localhost' (Using
password: YES)

/var/log/auth: I understand that this is a fallback mecganisms
--------------

Apr 26 22:38:36 ced lt-server: sql_select option missing
Apr 26 22:38:36 ced lt-server: auxpropfunc error no mechanism available
Apr 26 22:38:36 ced lt-server: _sasl_plugin_load failed on
sasl_auxprop_plug_init for plugin: sql

Apr 26 22:32:55 ced lt-server: unable to open Berkeley db /etc/sasldb2: No
such file or directory
Apr 26 22:32:55 ced lt-server: unable to open Berkeley db /etc/sasldb2: No
such file or directory
Apr 26 22:32:55 ced lt-server: Password verification failed



Details:


ls /usr/local/lib/sasl2 -> seems that I could compile SASL w/ MySQL support?
-----------------------

libanonymous.la         libcrammd5.so.2.0.21    liblogin.so.2
libsasldb.la         libsql.so.2
libanonymous.so         libdigestmd5.la         liblogin.so.2.0.21
libsasldb.so         libsql.so.2.0.19
libanonymous.so.2       libdigestmd5.so         libplain.la
libsasldb.so.2       libsql.so.2.0.21
libanonymous.so.2.0.21  libdigestmd5.so.2       libplain.so
libsasldb.so.2.0.19
libcrammd5.la           libdigestmd5.so.2.0.21  libplain.so.2
libsasldb.so.2.0.21
libcrammd5.so           liblogin.la             libplain.so.2.0.19
libsql.la
libcrammd5.so.2         liblogin.so             libplain.so.2.0.21
libsql.so


/usr/lib/sasl2/smtp.conf & sample.conf
--------------------------------------

# Global parameter
log_level: 3

# Password verification service
pwcheck_method: auxprop

# SMTP AUTH mechanisms
mech_list: PLAIN LOGIN CRAM_MD5

# auxiliary plugin parameters -> mysql password backend
auxprop_plugin: sql
sql_engine: mysql
sql_hostname: localhost
sql_database: smtpauthdb
sql_user: postfix
sql_passwd:
sql_select: SELECT %p FROM users WHERE username = '%u' AND userrealm = '%r'
and auth = '1'
sql_usessl: no

server / client output
---------------------

# sh server -s rcmd -p 8000
trying 10, 1, 6
socket: Address family not supported by protocol
trying 2, 1, 6
accepted new connection
send: {41}
ANONYMOUS LOGIN DIGEST-MD5 CRAM-MD5 PLAIN
recv: {5}
PLAIN
recv: {1}
Y
recv: {18}
test[0]test[0]testpass
starting SASL negotiation: user not foundclosing connection

# sh client -s rcmd -p 8000 -m PLAIN 127.0.0.1
receiving capability list... recv: {41}
ANONYMOUS LOGIN DIGEST-MD5 CRAM-MD5 PLAIN
ANONYMOUS LOGIN DIGEST-MD5 CRAM-MD5 PLAIN
please enter an authentication id: test
please enter an authorization id: test
Password:
send: {5}
PLAIN
send: {1}
Y
send: {18}
test[0]test[0]testpass
authentication failed
closing connection

Compile options
---------------

  export CPPFLAGS="-I/usr/include/mysql" &&

  ./configure \
   --prefix=/usr/local/sasl2 \
  --enable-sample \
  --enable-shared=yes \
  --enable-fast-install=yes \
  --disable-static \
  --disable-cmulocal \
  --disable-java \
  --disable-alwaystrue \
  --disable-libtool-lock \
  --disable-staticdlopen \
  --disable-checkapop \
  --enable-cram \
  --enable-plain \
  --enable-login \
  --disable-anon \
  --disable-digest \
  --disable-krb4 \
  --disable-gssapi \
  --disable-ntlm \
  --disable-otp \
  --disable-srp \
  --disable-srp-setpass \
  --enable-sql \
  --with-mysql \
  --with-plugindir=/usr/local/lib/sasl2 \
  --with-des=yes \
  --with-rc4 \
  --with-openssl=/usr/bin/openssl \
  --without-pam \
  --without-dbpath \
  --without-dblib \
  --without-bdb-libdir \
  --without-bdb-incdir \
  --without-pwcheck \
  --without-dmalloc \
  --without-sfio \
  --without-opie \
  --without-ldap \
  --without-javabase \
  --without-gdbm \
  --without-gnu-ld \
  --without-purecov \
  --without-purify \
  --without-authdaemon \
  --with-saslauthd=no \
  --without-ipctype   &&
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.andrew.cmu.edu/mailman/private/cyrus-sasl/attachments/20060426/b3d52906/attachment.html