From: Edward R. Bailey (ebail_at_mse.ufl.edu)
Date: Fri May 20 2005 - 19:55:32 CEST
Date: Fri, 20 May 2005 13:55:32 -0400 From: "Edward R. Bailey" <ebail@mse.ufl.edu> Message-ID: <H000006a000dbfd8.1116611732.scalix.mse.ufl.edu@MHS> Subject: RE: [suse-sles-e] Saslauthd, Pam and LDAP
I figured out the answer - for suse you do not use a tradational smtpd.conf. Do not use pam in the config file - use saslauthd instead and it will work.
Ed
-----Original Message-----
From: Edward R. Bailey
Sent: Friday, May 20, 2005 9:29 AM
To: suse-sles-e@suse.com
Subject: [suse-sles-e] Saslauthd, Pam and LDAP
Hello,
I am trying to setup secure smtp using postfix, saslauthd and ldap. I can get everything to work using the sasldb password database but once I try and use pam to access our ldap database authentication stops working.
My steps to switch saslauthd from sasldb to pam
1. changed the method in /etc/sysconfig/sasldauthd from sasldb to pam and then restarted saslauthd
2. created /etc/pam.d/smtp using
#/etc/pam.d/smtp
auth required /lib/security/pam_ldap.so
account required /lib/security/pam_ldap.so password required /lib/security/pam_ldap.so use_authtok session required /lib/security/pam_ldap.so
3. entered postfix reload
4. tried to send an email through postfix using my ldap username and password which did not work.
Error message:
May 20 09:24:39 newmail postfix/smtpd[5248]: warning: SASL authentication problem: unknown password verifier May 20 09:24:39 newmail postfix/smtpd[5248]: warning: SASL authentication failure: Password verification failed May 20 09:24:39 newmail postfix/smtpd[5248]: warning: rosco.mse.ufl.edu[10.5.46.238]: SASL PLAIN authentication failed
I did notice that the sasldauthd docs in /usr/share/doc/packages mentioned something about using saslautd.conf to interface with ldap directly. Would that be easier? Can someone point me toward some documentation regarding what I am doing that I can check or know what I am doing wrong?
Thanks in advance
Edward Bailey
MSE Network and Facilities Services
846-3329
---------------------------------------------------------------------
To unsubscribe, e-mail: suse-sles-e-unsubscribe@suse.com
For additional commands, e-mail: suse-sles-e-help@suse.com
This archive was generated by hypermail 2.1.7 : Fri May 20 2005 - 19:55:49 CEST