chrooting Postfix+SASL+TLS

From: Alex Melkomukov (amelkomukov_at_flexpop.net)
Date: 07/26/04

  • Next message: Richard Kuhns: "Question about virus/spam filtering for customers with mail servers" 
    Date: Mon, 26 Jul 2004 11:17:42 -0700 (PDT)
To: freebsd-isp@freebsd.org

    Hello all,

    I tried posting to the FreeBSD Questions list with no luck. I figured I
    would try this list to see if anyone has an answer/pointers for me to work
    with.

    posted message:

    Hi all,

    Has anyone successfully set up Postfix to run chrooted with saslauthd?
    I've been trying to get this to work for several days now and have run
    out of ideas.

    Everything works fine non-chrooted, but as soon as I run
    postfix/smtpd chrooted, I get the following messages in maillog:

    Jul 23 09:46:30 xxx postfix/smtpd[2472]: connect from yyy[999.999.999.999]
    Jul 23 09:46:30 xxx postfix/smtpd[2472]: setting up TLS connection from
    yyy[999.999.999.999]
    Jul 23 09:46:30 xxx postfix/smtpd[2472]: TLS connection established from
    yyy[999.999.999.99]: TLSv1 with cipher RC4-MD5 (128/128 bits)
    Jul 23 09:46:30 xxx postfix/smtpd[2472]: warning: SASL authentication
    failure: cannot connect to saslauthd server: No such file or directory
    Jul 23 09:46:30 xxx postfix/smtpd[2472]: warning: yyy[999.999.999.999]:
    SASL LOGIN authentication failed
    Jul 23 09:46:30 xxx postfix/smtpd[2472]: warning: Read failed in
    network_biopair_interop with errno=0: num_read=0, want_read=5
    Jul 23 09:46:30 xxx postfix/smtpd[2472]: lost connection after AUTH from
    yyy[999.999.999.999]
    Jul 23 09:46:30 xxx postfix/smtpd[2472]: disconnect from
    yyy[999.999.999.999]

    Here is what I have installed:

    OS:

    FreeBSD 4.9-RELEASE

    ports installed:

    openssl-0.9.7d
    cyrus-sasl-2.1.18
    cyrus-sasl-saslauthd-2.1.18_1

    postfix installed from source with TLS patch applied:

    postfix-2.1.3
    pfixtls-0.8.18-2.1.3-0.9.7d

    postfix chroot directory:

    /var/spool/postfix

    saslauthd startup options:

    /usr/local/sbin/saslauthd -a getpwent -m
    /var/spool/postfix/var/state/saslauthd

    tls/sasl options in /etc/postfix/main.cf:

    # sasl config
    #
    broken_sasl_auth_clients = yes
    smtpd_sasl_auth_enable = yes
    smtpd_sasl_local_domain =

    smtpd_sender_restrictions = permit_sasl_authenticated, permit_mynetworks
    smtpd_recipient_restrictions = permit_sasl_authenticated,
    permit_mynetworks, reject_unauth_destination

    # tls config
    #
    smtp_use_tls = yes
    smtpd_use_tls = yes
    smtp_tls_note_starttls_offer = yes
    smtpd_tls_key_file = /etc/postfix/ssl/smtpd.pem
    smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.pem
    smtpd_tls_CAfile = /etc/postfix/ssl/smtpd.pem
    smtpd_tls_loglevel = 1
    smtpd_tls_received_header = yes
    smtpd_tls_session_cache_timeout = 3600s
    tls_random_source = dev:/dev/urandom

    I have tried all kinds of tips from my archive searches and still no luck.

    Can anyone give me any pointers/instructions on how to run postfix
    chrooted with saslauthd using FreeBSD 4.9?

    any advice will be appreciated.

    thanks in advance,

    Alex M.

    _______________________________________________
    freebsd-isp@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-isp
    To unsubscribe, send any mail to "freebsd-isp-unsubscribe@freebsd.org"

  • Next message: Richard Kuhns: "Question about virus/spam filtering for customers with mail servers"

    Relevant Pages

    • Re: saslauthd? I cant seem to get it installed for postfix..
      ... > But still cant find saslauthd... ... Here's a recipy for getting SASL running with Postfix on a Sarge box. ... 2] Get the SASL Authentication daemon and SASL authentication modules: ... CA certificate filename ...
      (Debian-User)
    • saslauthd : Permission denied after todays dist-upgrade
      ... After this postfix can not connect to the saslauthd daemon anymore. ... authentication failure: cannot connect to saslauthd server: Permission ...
      (Debian-User)
    • Re: postfix authenticated smtp mysteriously no longer works
      ... All libraries are updated. ... I'm running the latest postfix port on FreeBSD6 and it was ... error about can not contact the saslauthd daemon. ... cleanup unix n - y - 0 cleanup ...
      (comp.unix.bsd.freebsd.misc)
    • Re: [opensuse] Setting up new email server on 10.3
      ... 220 jimmee.local ESMTP Postfix ... So, plain login is runing now, but I still cant send a message to a user on this machine. ... So, now that you have smtp auth enabled and saslauthd is running, you should be able to authenticate against passwd. ... I needed a cert for www.domain.com to handle my squirrrelmail users. ...
      (SuSE)
    • Re: [postfix-tls] SASL LOGIN authentication failed [SOLVED]
      ... That discrepancy is due to the fact that the debian package runs ... Either it tells you to make the pwcheck socket in the chroot ... postfix with). ... |> Then start saslauthd and reload postfix' ...
      (Debian-User)