Re: [gentoo-user] POSTFIX and SASL

[Joe Strusz <jstrusz@oxpub.com>]

Ok, I guess apparently no one can help me with this....

Blargh



At 12:10 PM 10/5/2005, you wrote:
>Heres the result of saslfinger -s:
>
>op saslfinger-0.9.9.1 # saslfinger -s
>saslfinger - postfix Cyrus sasl configuration Wed Oct  5 12:03:47 CDT 2005
>version: 0.9.9.1
>mode: server-side SMTP AUTH
>
>-- basics --
>Postfix: 2.1.5
>System:
>***************************************************************************
>                             NOTICE TO USERS
>
>
>This computer system is the private property of Oxford Publishing, 
>Inc., whether
>individual, corporate or government.  It is for authorized use only.
>Users (authorized or unauthorized) have no explicit or implicit
>expectation of privacy.
>
>Any or all uses of this system and all files on this system may be
>intercepted, monitored, recorded, copied, audited, inspected, and
>disclosed to your employer, to authorized site, government, and law
>enforcement personnel, as well as authorized officials of government
>agencies, both domestic and foreign.
>
>By using this system, the user consents to such interception, monitoring,
>recording, copying, auditing, inspection, and disclosure at the
>discretion of such personnel or officials.  Unauthorized or improper use
>of this system may result in civil and criminal penalties and
>administrative or disciplinary action, as appropriate. By continuing to
>use this system you indicate your awareness of and consent to these terms
>and conditions of use. LOG OFF IMMEDIATELY if you do not agree to the
>conditions stated in this warning.
>
>****************************************************************************
>
>-- smtpd is linked to --
>         libsasl2.so.2 => /usr/lib/libsasl2.so.2 (0x00002aaaab947000)
>
>-- active SMTP AUTH and TLS parameters for smtpd --
>broken_sasl_auth_clients = yes
>smtpd_sasl_auth_enable = yes
>smtpd_sasl_local_domain =
>smtpd_sasl_security_options = noanonymous
>smtpd_tls_CAfile = /etc/ssl/postfix/server.pem
>smtpd_tls_cert_file = /etc/ssl/postfix/server.crt
>smtpd_tls_key_file = /etc/ssl/postfix/server.key
>smtpd_tls_loglevel = 3
>smtpd_tls_received_header = yes
>smtpd_tls_session_cache_timeout = 3600s
>smtpd_use_tls = yes
>
>
>-- listing of /usr/lib/sasl2 --
>total 724
>drwxr-xr-x   2 root root  4096 Oct  5 09:09 .
>drwxr-xr-x  31 root root 16384 Oct  5 09:09 ..
>-rwxr-xr-x   1 root root   686 Oct  5 09:09 libanonymous.la
>-rwxr-xr-x   1 root root 22912 Oct  5 09:09 libanonymous.so
>-rwxr-xr-x   1 root root 22912 Oct  5 09:09 libanonymous.so.2
>-rwxr-xr-x   1 root root 22912 Oct  5 09:09 libanonymous.so.2.0.20
>-rwxr-xr-x   1 root root   674 Oct  5 09:09 libcrammd5.la
>-rwxr-xr-x   1 root root 22944 Oct  5 09:09 libcrammd5.so
>-rwxr-xr-x   1 root root 22944 Oct  5 09:09 libcrammd5.so.2
>-rwxr-xr-x   1 root root 22944 Oct  5 09:09 libcrammd5.so.2.0.20
>-rwxr-xr-x   1 root root   695 Oct  5 09:09 libdigestmd5.la
>-rwxr-xr-x   1 root root 56096 Oct  5 09:09 libdigestmd5.so
>-rwxr-xr-x   1 root root 56096 Oct  5 09:09 libdigestmd5.so.2
>-rwxr-xr-x   1 root root 56096 Oct  5 09:09 libdigestmd5.so.2.0.20
>-rwxr-xr-x   1 root root   670 Oct  5 09:09 liblogin.la
>-rwxr-xr-x   1 root root 22912 Oct  5 09:09 liblogin.so
>-rwxr-xr-x   1 root root 22912 Oct  5 09:09 liblogin.so.2
>-rwxr-xr-x   1 root root 22912 Oct  5 09:09 liblogin.so.2.0.20
>-rwxr-xr-x   1 root root   665 Oct  5 09:09 libntlm.la
>-rwxr-xr-x   1 root root 39304 Oct  5 09:09 libntlm.so
>-rwxr-xr-x   1 root root 39304 Oct  5 09:09 libntlm.so.2
>-rwxr-xr-x   1 root root 39304 Oct  5 09:09 libntlm.so.2.0.20
>-rwxr-xr-x   1 root root   670 Oct  5 09:09 libplain.la
>-rwxr-xr-x   1 root root 22912 Oct  5 09:09 libplain.so
>-rwxr-xr-x   1 root root 22912 Oct  5 09:09 libplain.so.2
>-rwxr-xr-x   1 root root 22912 Oct  5 09:09 libplain.so.2.0.20
>-rwxr-xr-x   1 root root   684 Oct  5 09:09 libsasldb.la
>-rwxr-xr-x   1 root root 26992 Oct  5 09:09 libsasldb.so
>-rwxr-xr-x   1 root root 26992 Oct  5 09:09 libsasldb.so.2
>-rwxr-xr-x   1 root root 26992 Oct  5 09:09 libsasldb.so.2.0.20
>-rw-------   1 root root    49 Oct  3 11:30 smtpd.conf
>
>-- listing of /var/lib/sasl2 --
>total 12
>drwxr-xr-x   2 root root 4096 Oct  5 11:37 .
>drwxr-xr-x  17 root root 4096 Sep 21 11:38 ..
>-rw-r--r--   1 root root    0 Oct  5 09:09 .keep
>srwxrwxrwx   1 root root    0 Oct  5 11:37 mux
>-rw-------   1 root root    0 Oct  5 11:37 mux.accept
>-rw-------   1 root root    6 Oct  5 11:37 saslauthd.pid
>
>-- listing of /usr/local/lib/sasl2 --
>total 12
>drwx------  2 root root 4096 Oct  3 10:56 .
>drwxr-xr-x  4 root root 4096 Sep 30 15:13 ..
>-rw-------  1 root root   50 Oct  5 11:16 smtpd.conf
>
>
>
>
>-- content of /usr/lib/sasl2/smtpd.conf --
>pwcheck_method: saslauthd
>mech_list: PLAIN LOGIN
>
>-- content of /usr/local/lib/sasl2/smtpd.conf --
>pwcheck_method: saslauthd
>mech_list: PLAIN LOGIN
>
>
>
>-- active services in /etc/postfix/master.cf --
># service type  private unpriv  chroot  wakeup  maxproc command + args
>#               (yes)   (yes)   (yes)   (never) (100)
>smtp      inet  n       -       n       -       -       smtpd -v
>         #  -o smtpd_etrn_restrictions=reject
>pickup    fifo  n       -       n       60      1       pickup
>cleanup   unix  n       -       n       -       0       cleanup
>qmgr      fifo  n       -       n       300     1       qmgr
>rewrite   unix  -       -       n       -       -       trivial-rewrite
>bounce    unix  -       -       n       -       0       bounce
>defer     unix  -       -       n       -       0       bounce
>trace     unix  -       -       n       -       0       bounce
>verify    unix  -       -       n       -       1       verify
>flush     unix  n       -       n       1000?   0       flush
>proxymap  unix  -       -       n       -       -       proxymap
>smtp      unix  -       -       n       -       -       smtp
>relay     unix  -       -       n       -       -       smtp
>showq     unix  n       -       n       -       -       showq
>error     unix  -       -       n       -       -       error
>local     unix  -       n       n       -       -       local
>virtual   unix  -       n       n       -       -       virtual
>lmtp      unix  -       -       n       -       -       lmtp
>anvil     unix  -       -       n       -       1       anvil
>maildrop  unix  -       n       n       -       -       pipe
>   flags=DRhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient}
>old-cyrus unix  -       n       n       -       -       pipe
>   flags=R user=cyrus argv=/cyrus/bin/deliver -e -m ${extension} ${user}
>cyrus     unix  -       n       n       -       -       pipe
>   user=cyrus argv=/cyrus/bin/deliver -e -r ${sender} -m ${extension} ${user}
>uucp      unix  -       n       n       -       -       pipe
>   flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail 
> ($recipient)
>ifmail    unix  -       n       n       -       -       pipe
>   flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
>bsmtp     unix  -       n       n       -       -       pipe
>   flags=Fq. user=foo argv=/usr/local/sbin/bsmtp -f $sender $nexthop 
> $recipient
>
>
>smtp-amavis     unix -        -       n     -       2  smtp
>   -o smtp_data_done_timeout=1200
>   -o smtp_send_xforward_command=yes
>
>127.0.0.1:10025 inet n        -       n     -       -  smtpd
>   -o content_filter=
>   -o local_recipient_maps=
>   -o relay_recipient_maps=
>   -o smtpd_restriction_classes=
>   -o smtpd_client_restrictions=
>   -o smtpd_helo_restrictions=
>   -o smtpd_sender_restrictions=
>   -o smtpd_recipient_restrictions=permit_mynetworks,reject
>   -o mynetworks=127.0.0.0/8
>   -o strict_rfc821_envelopes=yes
>   -o smtpd_error_sleep_time=0
>   -o smtpd_soft_error_limit=1001
>   -o smtpd_hard_error_limit=1000
>
>-- mechanisms on localhost --
>250-AUTH LOGIN PLAIN
>250-AUTH=LOGIN PLAIN
>
>
>-- end of saslfinger output --
>
>op saslfinger-0.9.9.1 #
>
>
>
>
>COULD IT BE the amavis spam filter interfering?
>
>i noticed the line -o smtpd_recipient_restriction=permit_mynetworks,reject
>
>which is not how it is under /etc/postfix/main.cf... i dunno if 
>thats just for amavisd or what...
>
>
>could someone please help and shed some insight on this?
>
>
>At 12:04 PM 10/5/2005, you wrote:
>>This is the result ov the emerge -pv cyrus-sasl
>>
>>These are the packages that I would merge, in order:
>>
>>Calculating dependencies ...done!
>>[ebuild   R   ] dev-libs/cyrus-sasl-2.1.20  +authdaemond +berkdb 
>>+gdbm -java -kerberos -ldap -mysql +pam -postgres +ssl -static 0 kB
>>
>>Total size of downloads: 0 kB
>>
>>
>>----- Original Message ----- From: "kashani" <kashani-list@badapple.net>
>>To: <gentoo-user@lists.gentoo.org>
>>Sent: Wednesday, October 05, 2005 11:31 AM
>>Subject: Re: [gentoo-user] POSTFIX and SASL
>>
>>
>>>Joe Strusz wrote:
>>>>No, thats not it... what about master.cf?  Could someone send me 
>>>>a sample master.cf with SASL running?
>>>
>>>sasl requires no changes to master.cf
>>>
>>>what's an emerge -pv cyrus-sasl look like?
>>>
>>>kashani
>>>
>>>--
>>>gentoo-user@gentoo.org mailing list
>>
>>--
>>gentoo-user@gentoo.org mailing list
>
>
>Joe Strusz
>
>IT Assistant
>Oxford Publishing, Inc.
>307 West Jackson Avenue
>Oxford, MS 38655-2154
>800-247-3881
>662-236-5510x40
>jstrusz@oxpub.com
>http://www.nightclub.com
>
>
>--
>gentoo-user@gentoo.org mailing list


Joe Strusz

IT Assistant
Oxford Publishing, Inc.
307 West Jackson Avenue
Oxford, MS 38655-2154
800-247-3881
662-236-5510x40
jstrusz@oxpub.com
http://www.nightclub.com


-- 
gentoo-user@gentoo.org mailing list