Weird postfix/cyrus-sasl error...

[Patrick Ben Koetter]

* Amarendra Godbole <amarendra.godbole at gmail.com>:
> Hi,
> 
> I use postfix as an smtp client to deliver email to our enterprise
> smtp server. Since the smtp server needs authentication, I used cyrus
> sasl with postfix and things worked fine. After a portupgrade, postfix
> has stopped working, and gives some wierd authentication error.
> Googling did not help much, and hence I am posting here. Relevant
> details follow:
> 
> ----------8<-----------------
> Postfix version: postfix-2.4.1,1
> Cyrus SASL version: cyrus-sasl-2.1.22
> 
> Postfix built with: (contents of makedefs.out)
> SYSTYPE = FREEBSD6
> AR      = ar
> ARFL    = rv
> RANLIB  = ranlib
> SYSLIBS = -L/usr/local/lib -lpcre -L/usr/local/lib -lsasl2 -lpam -lcrypt
> CC      = cc -DHAS_PCRE -I/usr/local/include -DUSE_SASL_AUTH 
> -DUSE_CYRUS_SASL -I
> /usr/local/include -I/usr/local/include/sasl
> OPT     = -O2 -fno-strict-aliasing -pipe
> DEBUG   =
> AWK     = awk
> STRCASE =
> EXPORT  = AUXLIBS='-L/usr/local/lib -lpcre -L/usr/local/lib -lsasl2 -lpam 
> -lcryp
> t' CCARGS='-DHAS_PCRE -I/usr/local/include -DUSE_SASL_AUTH -DUSE_CYRUS_SASL 
> -I/u
> sr/local/include -I/usr/local/include/sasl' OPT='-O2 -fno-strict-aliasing 
> -pipe
> ' DEBUG=''
> WARN    = -Wall -Wno-comment -Wformat -Wimplicit -Wmissing-prototypes \
>       -Wparentheses -Wstrict-prototypes -Wswitch -Wuninitialized \
>       -Wunused
> 
> main.cf has the following entries:
> # cyrus sasl stuff
> smtp_sasl_auth_enable = yes
> smtp_sasl_password_maps = hash:/usr/local/etc/postfix/sasl_passwd
> smtp_security_options =
> 
> sasl_passwd.db exists created with postmap hash: command
> 
> Error in the maillog shows:
> May 31 14:35:12 zimbu postfix/smtp[49765]: warning: SASL
> authentication failure: GSSAPI Error:  Miscellaneous failure (see
> text) (open(/tmp/krb5cc_125): No such file or directory)
> May 31 14:35:12 zimbu postfix/smtp[49765]: 1E722B895:
> to=<xyz at xyz.com>, relay=smtp.foo.com[xx.xx.xx.xx]:25, delay=1.4,
> delays=0.02/0.01/1.4/0, dsn=4.7.0, status=deferred (SASL
> authentication failed; cannot authenticate to server
> smtp.foo.com[xx.xx.xx.xx]: generic failure)

Use smtp_sasl_mechanism_filter to filter GSSAPI away.

p at rick


-- 
The Book of Postfix
<http://www.postfix-book.com>
saslfinger (debugging SMTP AUTH):
<http://postfix.state-of-mind.de/patrick.koetter/saslfinger/>