Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [sasl]

Simple Authentication and Security Layer (SASL) is a framework for authentication and data security in Internet protocols.

259 questions
7
votes
2 answers

Postfix deny relay for some virtual users

I'm using Postfix as MTA and relay. Users that wish to send e-mail from a remote system authenticates and Postfix hands that to Dovecot, and this works well. But how can I limit which users can use SMTP+Authentication, without limiting access to POP…
Simon Fredriksson
  • 143
  • 8
7
votes
4 answers

saslauthd authentication error

My server has developed an expected problem where I am unable to connect from a mail client. I've looked at the server logs and the only thing that looks to identify a problem are events like the following: Nov 23 18:32:43 hig3 dovecot: imap-login:…
James
  • 623
  • 2
  • 6
  • 13
7
votes
2 answers

Saslauth with ldapdb on debian

I'm trying to get saslauthd working with openldap. ldapsearch and every service connected to openldap works fine. sasldblistusers2 doesn't work - and ldapwhoami does not work either. getent passwd works fine too. sasldblistusers2 produces this log…
Andreas Rehm
  • 851
  • 6
  • 11
6
votes
0 answers

Low Entropy on Container

I am thinking my entropy level may be low? $ cat /proc/sys/kernel/random/entropy_avail I am around 132-178 on average. Pool size is default 4096 (this is a container on a virtualizer by the way). I also have ran: $ cat /dev/urandom | rngtest -c…
Gordon Snappleweed
  • 85
  • 1
  • 10
6
votes
2 answers

How to debug SASL authentication via LDAP towards active directory

I am trying to configure SASL running on Centos 6.5 to allow authentication towards the corporate active directory server. The end goal is to authenticate access to some subversion repos which are running on this server, but at this stage I am just…
harmic
  • 268
  • 1
  • 2
  • 14
5
votes
1 answer

warning: /usr/lib/postfix/smtpd: bad command startup -- throttling

today i set up a mailserver with a german tutorial from here: Now i'm done and need help with my issues. Sry for bad english - i hope my informations help u to help me ^^ mail.log: Nov 18 16:30:00 srv01 postfix/smtpd[23275]: connect from…
user386409
5
votes
1 answer

How to check if Postfix was compiled with support for Dovecot SASL?

The Dovecot instructions state: Since version 2.3, Postfix supports SMTP AUTH through Dovecot SASL as introduced in the Dovecot 1.0 series. If using Postfix obtained from a binary (such as a .rpm or .deb file), you can check if Postfix was …
KingsInnerSoul
  • 201
  • 3
  • 10
5
votes
1 answer

SASL auth to LDAP behind HAPROXY with name mismatches

My kerberos domain in MYEXAMPLE.ORG, but servers are located in the dmz-int.example.org dns zone. LDAP server is b1.dmz-int.example.org; its keytab include: udo ktutil -k /etc/krb5.keytab list /etc/krb5.keytab: Vno Type …
473183469
  • 1,360
  • 1
  • 12
  • 23
5
votes
2 answers

PAM vs /etc/shadow in Dovecot SASL configuration - Security differences?

I set up a server with Postfix SMTP auth through Dovecot SASL. However, it was not possible to get the PAM authentification working as standard out of the box. So more by chance, I changed it to the shadow driver as explained in Dovecot…
smartmic
  • 151
  • 4
5
votes
4 answers

"503 5.5.1 Error: authentication not enabled" when trying to connect to my postfix server remotley

I have the following: postfix-2.10.1-6.el7.x86_64 cyrus-sasl-lib-2.1.26-17.el7.x86_64 cyrus-sasl-plain-2.1.26-17.el7.x86_64 cyrus-sasl-2.1.26-17.el7.x86_64 my postconf -n is: alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases …
edotan
  • 1,876
  • 13
  • 39
  • 57
5
votes
1 answer

Dovecot says: "Requested CRAM-MD5 scheme, but we have only CRYPT" yet CRAM-MD5 is available

Following upgrade of Fedora Core 16 to Fedora Core 21, the new Dovecot installation isn't authenticating correctly and it's not at all clear why. We have 50+ email accounts served by this server, so I was hoping to keep the previous schemes working…
Richard T
  • 1,206
  • 12
  • 29
5
votes
4 answers

postfix SASL authentication failed - Internal authentication error

I've recently had to change SMTP relays from Cablevision to Verizon. Verizon blocks port 25 but they will accept SSL via port 465 (per this). I've used this and this to have stunnnel forward postfix's data to port 465. Unfortunately, my mail is…
Mark Kasson
  • 201
  • 1
  • 2
  • 7
5
votes
4 answers

Can't use EXTERNAL authentication after enabling TLS in ldap-2.4

I used the following LDIF file to activate the TLS support for the LDAP server: dn: cn=config changetype: modify add: olcTLSCipherSuite olcTLSCipherSuite: NORMAL - add: olcTLSCRLCheck olcTLSCRLCheck: none - add:…
user202
  • 53
  • 1
  • 1
  • 3
5
votes
3 answers

Postfix: SASL authentication failure: cannot connect to saslauthd server: Permission denied

I had a Postfix/Dovecot server up and running for about a week until I had to reboot it. When I did, things stopped working. I've been up searching for hours to no avail. IMAP successfully authenticates (despite dovecot being configured to piggyback…
flashbang
  • 135
  • 1
  • 1
  • 11
5
votes
3 answers

Svn authorizing over sasl+ldap failing after Ubuntu update 10.04 -> 12.04

I have working svnserve solution on Ubuntu 10.04 for authorizing svn users over SASL to Active directory (LDAP, not LDAPDB). Config files are at the bottom. After upgrading server to 12.04 release, this does not work anymore. I can authorize user…
Foton
  • 151
  • 1
  • 3
1
2
3
…
17 18