Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [sasl]

Simple Authentication and Security Layer (SASL) is a framework for authentication and data security in Internet protocols.

259 questions
1
vote
0 answers

heimdal kerberos in openldap issue

I think I posted this on the wrong 'sister site', so here it is. I'm having a bit of trouble getting Kerberos (Heimdal version) to work nicely with OpenLDAP. The kerberos database is being stored in LDAP itself. The KDC uses SASL EXTERNAL…
Brian
  • 41
  • 3
1
vote
1 answer

Roundcube, Postfix and SMTP authentication (CRAM-MD5) error

I'm having trouble configuring Roundcube with SMTP authentification on Postfix. All the credentials are true, because I have no problem using the e-mail from Thunderbird and my mobile phone e-mail client. Here is the SMTP configuration for…
Ion
  • 111
  • 1
  • 4
1
vote
2 answers

Postfix not working

A while ago I installed the postfix mail server on my ubuntu 10.04 VPS. At the time it was working good but now it's just stopped working. I was trying to enable SASL authentification and somewhere it must have went really wrong. I've studied the…
user1488723
  • 11
  • 2
1
vote
0 answers

How do I use an encrypted MySQL password with Cyrus SASL?

In /etc/postfix/sasl/smtpd.conf I have: auxprop_plugin: sql sql_engine: mysql sql_hostnames: 127.0.0.1 sql_database: mail sql_user: mailadmin sql_passwd: secret sql_select: SELECT password FROM users WHERE smtp_username = '%u' sql_usessl: no This…
Nick
  • 4,503
  • 29
  • 69
  • 97
1
vote
1 answer

SVN SASL Commit - Authorisation failed

I've been attempting to setup our SVN server to be accessible by both DAV SVN through Apache and now the SVN:// protocol (for better performance) root@svnvm:~# svnserve --foreground -d --foreground -R --config-file /svn/svnserve.conf -r…
Thermionix
  • 917
  • 2
  • 15
  • 28
1
vote
2 answers

Postfix - Is there a way to reject invalid authentication (even for mynetworks)?

I got a working postfix/dovecot configuration running with the following rule for recipients rejection: smtpd_recipient_restrictions = permit_sasl_authenticated,permit_mynetworks,reject This works as intended (authorize authenticated users or users…
Julien
  • 78
  • 1
  • 8
1
vote
2 answers

How do I get php-memcached extension to work with SASL on RHEL6

I have RHEL6.1 with php. I've installed libmemcached-1.0.2 from src.rpm and compiled php-memcached 2.0.0b2. If I try to setSaslAuthData('user','pass') and write something to memcached (Couchbase server) I always end up with return code 5 (WRITE…
Dmytro Leonenko
  • 456
  • 1
  • 7
  • 24
1
vote
1 answer

Can't login to Cyrus IMAP with domain name in username, can if I don't qualify with domain name

I'm trying to install Cyrus with SASL for authentication. I'm struggling getting logins to work properly though. I'm trying to setup virtual hosting, as we'll have several domains worth of email on this host. In my imapd.conf: sasl_pwcheck_method:…
Matthew Scharley
  • 1,507
  • 3
  • 15
  • 19
1
vote
1 answer

pam_ldap, where is the filter set?

A while ago I asked a question about this same issue already (Cyrus on CentOS with sasl / pam / ldap), and I came a bit further. The Bind DN is no longer empty; LDAP works with all apps except imap. Whenever I try to logon using imtest:…
Oscar
  • 11
  • 1
  • 3
1
vote
0 answers

OpenLDAP, SASL and non-cleartext password storage

I'm working on a setup where postfix and cyrus-imap do proxy authorization against openldap (my setup is here http://1nw.eu/!cD ). I love this solution, it's a lot more elegant that using saslauthd. But I'm concerned about passwords stored in…
Julien Vehent
  • 3,017
  • 19
  • 26
1
vote
2 answers

How do I use ldapsearch with a cross-realm ticket?

kinit user@DOMAIN.TLD klist -afe Ticket cache: FILE:/tmp/krb5cc_1000 Default principal: user@DOMAIN.TLD Valid starting Expires Service principal 08/04/11 13:14:53 08/05/11 01:14:53 krbtgt/DOMAIN.TLD@DOMAIN.TLD renew…
84104
  • 12,905
  • 6
  • 45
  • 76
1
vote
2 answers

SASL (Postfix) authentication with MySQL and Blowfish pre-encrypted passwords

I have a Rails app with the Devise authentication gem running user registration and login. I want to use the db table that Devise populates when a user registers as the table that Postfix uses to authenticate users. The table has all the fields…
webo
  • 183
  • 1
  • 1
  • 5
1
vote
1 answer

SASL + postfixadmin - SMTP authentication with hashed password

I'm trying to set up the mail server. I have problem with my SMTP authentication using sasl. I'm using postfixadmin to create my mailboxes, the password is in some kind of md5, postfixadmin config.inc.php: $CONF['encrypt'] =…
mateo
  • 15
  • 1
  • 5
1
vote
1 answer

saslauthd and PAM: "Too many open files" error - saslauthd restart fixes this - what is wrong?

I have a Postfix mail server running Debian Squeeze. SASL authentication for secure SMTP is supported by saslauthd which relies on pam, which relies on winbind. This pattern seems to be reoccuring every couple of weeks: Initially, there are no…
labradort
  • 1,169
  • 1
  • 8
  • 20
1
vote
3 answers

Postfix+sasslauthd+PAM How can I deny/allow specific users from authenticating?

I have a simple postfix installation on RedHat that's been running fine for years and uses TLS/saslauthd/PAM to allow users to authenticate to relay mail from the external network. All users are local linux accounts, so the saslauthd method using…
OpenSkeptic
  • 11
  • 1
  • 2
1 2 3
…
17 18