On 06/17/14 11:30 +0100, Michael Grant wrote:
On Tue, Jun 17, 2014 at 3:04 AM, Vijay Sarvepalli wrote:
Hello Michael,
This is usually a permissions issue. Have you checked where saslauthd is
running as a UNIX socket - the permissions are world readable/writeable?
Check the permissions of
(typical location)
/var/run/saslauthd/
/var/run/saslauthd/mux.socket
If not, you can turn on debugging in Sendmail and then see the errors
either in mismatched of allowed protocols. "-O loglevel=14" when you run
sendmail should be sufficient.
Thanks Vijay, still having problems. I tried chmodding /var/run/saslauthd
to 777 but it didn't help. When raising the log level to 14, here's what I
see in the log:
Also see syslog (auth facility).
Jun 17 04:53:28 strange sm-mta[8152]: NOQUEUE: connect from
host-X-X-X-X.rangeX-X.btcentralplus.com [1.2.3.4]
Jun 17 04:53:28 strange sm-mta[8152]: AUTH: available mech=LOGIN PLAIN,
allowed mech=EXTERNAL LOGIN PLAIN
Jun 17 04:53:34 strange sm-mta[8152]: STARTTLS=server, relay=
host-X-X-X-X.rangeX-X.btcentralplus.com [1.2.3.4], version=TLSv1/SSLv3,
verify=NOT, cipher=DHE-RSA-AES128-SHA, bits=128/128
Jun 17 04:53:34 strange sm-mta[8152]: STARTTLS=server, cert-subject=,
cert-issuer=, verifymsg=ok
Jun 17 04:53:34 strange sm-mta[8152]: AUTH: available mech=LOGIN PLAIN,
allowed mech=EXTERNAL LOGIN PLAIN
Jun 17 04:53:34 strange sm-mta[8152]: s5H8rS5Y008152: AUTH failure (PLAIN):
generic failure (-1) SASL(-1): generic failure: Password verification
failed, relay=host-X-X-X-X.rangeX-X.btcentralplus.com [1.2.3.4]
Jun 17 04:53:34 strange sm-mta[8152]: s5H8rS5Y008152: AUTH failure (LOGIN):
generic failure (-1) SASL(-1): generic failure: checkpass failed, relay=
host-X-X-X-X.rangeX-X.btcentralplus.com [1.2.3.4]
I tried reducing the methods to just LOGIN and PLAIN. I also added some
other lines to the Sendmail.conf.2 file:
pwcheck_method:saslauthd
mech_list: login plain
saslauthd_path: /var/run/saslauthd
This should include the trailing /mux file. See:
http://www.cyrussasl.org/docs/cyrus-sasl/2.1.25/options.php
allowplaintext: 1
sendmail is just not even trying to talk to saslauthd. Am I missing a
library or something?
Being linked against the libsasl2 glue library should be all that's needed
for communication with saslauthd.
--
Dan White
