Re: Wierd postfix/cyrus SASL error...



--On Thursday, May 31, 2007 14:48:55 +0530 Amarendra Godbole <amarendra.godbole@xxxxxxxxx> wrote:

Hi,

I use postfix as an smtp client to deliver email to our enterprise
smtp server. Since the smtp server needs authentication, I used cyrus
sasl with postfix and things worked fine. After a portupgrade, postfix
has stopped working, and gives some wierd authentication error.
Googling did not help much, and hence I am posting here. Relevant
details follow:

----------8<-----------------
Postfix version: postfix-2.4.1,1
Cyrus SASL version: cyrus-sasl-2.1.22

Postfix built with: (contents of makedefs.out)
SYSTYPE = FREEBSD6
AR = ar
ARFL = rv
RANLIB = ranlib
SYSLIBS = -L/usr/local/lib -lpcre -L/usr/local/lib -lsasl2 -lpam -lcrypt
CC = cc -DHAS_PCRE -I/usr/local/include -DUSE_SASL_AUTH
-DUSE_CYRUS_SASL -I
/usr/local/include -I/usr/local/include/sasl
OPT = -O2 -fno-strict-aliasing -pipe
DEBUG =
AWK = awk
STRCASE =
EXPORT = AUXLIBS='-L/usr/local/lib -lpcre -L/usr/local/lib -lsasl2 -lpam
-lcryp
t' CCARGS='-DHAS_PCRE -I/usr/local/include -DUSE_SASL_AUTH
-DUSE_CYRUS_SASL -I/u
sr/local/include -I/usr/local/include/sasl' OPT='-O2 -fno-strict-aliasing
-pipe
' DEBUG=''
WARN = -Wall -Wno-comment -Wformat -Wimplicit -Wmissing-prototypes \
-Wparentheses -Wstrict-prototypes -Wswitch -Wuninitialized \
-Wunused

main.cf has the following entries:
# cyrus sasl stuff
smtp_sasl_auth_enable = yes
smtp_sasl_password_maps = hash:/usr/local/etc/postfix/sasl_passwd
smtp_security_options =

sasl_passwd.db exists created with postmap hash: command

Error in the maillog shows:
May 31 14:35:12 zimbu postfix/smtp[49765]: warning: SASL
authentication failure: GSSAPI Error: Miscellaneous failure (see
text) (open(/tmp/krb5cc_125): No such file or directory)
May 31 14:35:12 zimbu postfix/smtp[49765]: 1E722B895:
to=<xyz@xxxxxxx>, relay=smtp.foo.com[xx.xx.xx.xx]:25, delay=1.4,
delays=0.02/0.01/1.4/0, dsn=4.7.0, status=deferred (SASL
authentication failed; cannot authenticate to server
smtp.foo.com[xx.xx.xx.xx]: generic failure)

I don't quiet understand the first message of "no such file or directory".

I used exactly the same configuration earlier, and postfix was happily
working for the last year or so. Any pointers to fix this issue will
be appreciated. Thanks in advance!

I have a similar setup:
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
smtpd_sasl_local_domain = $myhostname
smtpd_sasl_application_name = smtpd
broken_sasl_auth_clients = yes
permit_sasl_authenticated

But I don't use a db password file. Have you tried re-running the postfix hash utility (postmap) on the db? That's the first thing that I would try.

--
Paul Schmehl (pauls@xxxxxxxxxxxx)
Senior Information Security Analyst
The University of Texas at Dallas
http://www.utdallas.edu/ir/security/


Relevant Pages

  • [SLE] cyrus configuration
    ... I figure I can muddle my way through postfix configuration using YAST2 ... But the configuration of cyrus is a little daunting. ... I am attempting to configure my network with PAM_LDAP authentication. ... But I would also want to be able to create mail accounts for users who are ...
    (SuSE)
  • Re: Problems trying to get SMTP AUTH to work...help please
    ... I even recompiled postfix with options to point to the correct ... locations for the SASL libraries... ... jwilliams: SASL CRAM-MD5 authentication failed ... whilst auxprop will use sasldb. ...
    (RedHat)
  • Re: Postifx and virtual users (user unknown)
    ... > fatal: no SASL authentication mechanisms ... Looks like a Postfix misconfiguration. ... Cyrus SASL and Cyrus-IMAPd don't have that much to do with each other. ...
    (Fedora)
  • Wierd postfix/cyrus SASL error...
    ... I use postfix as an smtp client to deliver email to our enterprise ... Since the smtp server needs authentication, I used cyrus ... sasl with postfix and things worked fine. ... and gives some wierd authentication error. ...
    (freebsd-questions)
  • Postfix with SASL2 Problem
    ... I have cyrus-sasl2, cyrus-sasl2-saslauthd and Postfix installed ... authentication failure: cannot connect to saslauthd server: No such ... TLS with Postfix is also OK, ... SASL (Simple Authentication and ...
    (freebsd-questions)