Sendmail/SASL2/saslauthdb problem


I'm trying to configure sendmail to authenticate against the system password file for SMTP using the ports collection and having a heck of a time with it. saslauthdb works great when tested with testsaslauthd (testsaslauthd -s smtp -u XXXXX -p XXXXX returns Success), but when testing by hand with the same account through sendmail (with the same bare username, no realm), I get the following error:

saslauthd[38367]: do_auth : auth failure: [user=XXXXXXX] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error]

From the other side, I see sendmail offering "250-AUTH PLAIN LOGIN" (what I want) in the ESTMP session and doing the auth login prompting, but then returning "535 5.7.0 authentication failed" in response to the base64-ed username and password.

Can anyone shed light on this? Here's my configuration:

FreeBSD 6.0-RELEASE #1

Sendmail 8.13.6/8.13.6 (installed via mail/sendmail-sasl compiled against an earlier install of security/cyrus-sasl2 -- I can see it passing the "-DSASL=2" during make)

/usr/local/lib/sasl2/Sendmail.conf has "pwcheck_method: saslauthd" and, I'm assuming from the error message, sendmail is actually calling it.


_______________________________________________
freebsd-isp@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-isp
To unsubscribe, send any mail to "freebsd-isp-unsubscribe@xxxxxxxxxxx"

Relevant Pages

  • Sendmail AUTH to Exchange 5.5
    ... I'm having trouble getting sendmail to authenticate to Exchange 5.5. ... dnl Support for SMTP_AUTH ...
    (comp.mail.sendmail)
  • Problem getting Evolution to authenticate to sendmail using DIGEST_MD5
    ... However I have NOT been able to get it to authenticate using DIGEST-MD5 ... Does anyone have experience with sendmail DIGEST-MD5 authentication? ... Server: ...
    (RedHat)
  • Re: SMPT AUTH problem
    ... John Summerfield ha scritto: ... but with right login and password it don't authenticate. ... to authenticate via sendmail it don't authenticate me. ... give me is Login Failed i have also undestood where is the problem. ...
    (Fedora)
  • Re: SMPT AUTH problem
    ... but with right login and password it don't authenticate. ... to authenticate via sendmail it don't authenticate me. ... give me is Login Failed i have also undestood where is the problem. ... The difficulty I had was discovering what domain it was using, testing is all very well, but it's useless testing something that's not what is being done. ...
    (Fedora)
  • Re: Migrating to a newer version of FreeBSD
    ... So I hastily installed a radius server, ... > sendmail and qpopper on it. ... > cannot seem to just download newer ports and install them. ... > authentication working on that one quickly and easily. ...
    (freebsd-questions)