Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Chris Miller on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Sendmail + Cyrus-Sasl2 (SMTP Authentication)

Status
Not open for further replies.

shuajoh

IS-IT--Management
Jan 7, 2014
1
KE
Hello guys,

I'm trying to get SMTP Authentication to work on my el6 server which is running Sendmail. Below are the configs/output from the server.

# sendmail -d0.1
Version 8.14.4
Compiled with: DNSMAP HESIOD HES_GETMAILHOST LDAPMAP LOG MAP_REGEX
MATCHGECOS MILTER MIME7TO8 MIME8TO7 NAMED_BIND NETINET NETINET6
NETUNIX NEWDB NIS PIPELINING SASLv2 SCANF SOCKETMAP STARTTLS
TCPWRAPPERS USERDB USE_LDAP_INIT

sendmail.mc:
define(`confAUTH_OPTIONS', `A')dnl
TRUST_AUTH_MECH(`LOGIN PLAIN')dnl
define(`confAUTH_MECHANISMS', `LOGIN PLAIN')dnl
DAEMON_OPTIONS(`Port=submission, Name=MSA, M=Ea')dnl
LOCAL_CONFIG
ESASL_PATH=/usr/lib/sasl2
define(`confENVDEF', `-DSASL')dnl
define(`conf_sendmail_LIBS', `-lsasl')dnl

# cat /etc/sasl2/Sendmail.conf
pwcheck_method: saslauthd
mech_list: LOGIN PLAIN
saslauthd_path: /var/run/saslauthd/

# cat /etc/sysconfig/saslauthd
SOCKETDIR=/var/run/saslauthd
MECH=pam
FLAGS=

# cat /etc/sasl2/Sendmail.conf
pwcheck_method: saslauthd
mech_list: LOGIN PLAIN
saslauthd_path: /var/run/saslauthd/

# testsaslauthd -u xxxxx -p xxxxxx -s smtp
0: OK "Success."

Here's a log of a failed SMTP Auth

Jan 7 10:03:09 mail sendmail[5322]: NOQUEUE: connect from xxx.xxx.xxx.xxx
Jan 7 10:03:09 mail sendmail[5322]: AUTH: available mech=PLAIN LOGIN, allowed mech=LOGIN PLAIN
Jan 7 10:03:09 mail sendmail[5322]: s07739E6005322: Milter: no active filter
Jan 7 10:03:09 mail sendmail[5322]: s07739E6005322: --- 220 xxxxx ESMTP
Jan 7 10:03:09 mail sendmail[5322]: s07739E6005322: <-- EHLO MUMO
Jan 7 10:03:09 mail sendmail[5322]: s07739E6005322: --- 250-xxxxx Hello xxxxx [xxx.xxx.xxx.xxx], pleased to meet you
Jan 7 10:03:09 mail sendmail[5322]: s07739E6005322: --- 250-ENHANCEDSTATUSCODES
Jan 7 10:03:09 mail sendmail[5322]: s07739E6005322: --- 250-PIPELINING
Jan 7 10:03:09 mail sendmail[5322]: s07739E6005322: --- 250-8BITMIME
Jan 7 10:03:09 mail sendmail[5322]: s07739E6005322: --- 250-SIZE 54525952
Jan 7 10:03:09 mail sendmail[5322]: s07739E6005322: --- 250-DSN
Jan 7 10:03:09 mail sendmail[5322]: s07739E6005322: --- 250-AUTH LOGIN PLAIN
Jan 7 10:03:09 mail sendmail[5322]: s07739E6005322: --- 250-DELIVERBY
Jan 7 10:03:09 mail sendmail[5322]: s07739E6005322: --- 250 HELP
Jan 7 10:03:09 mail sendmail[5322]: s07739E6005322: <-- AUTH LOGIN
Jan 7 10:03:09 mail sendmail[5322]: s07739E6005322: --- 334 xxxxx
Jan 7 10:03:09 mail sendmail[5322]: s07739E6005322: --- 334 xxxxx
Jan 7 10:03:09 mail sendmail[5322]: s07739E6005322: --- 535 5.7.0 authentication failed
Jan 7 10:03:09 mail sendmail[5322]: s07739E6005322: AUTH failure (LOGIN): generic failure (-1) SASL(-1): generic failure: checkpass failed, relay=xxxxx [xxx.xxx.xxx.xxx]
Jan 7 10:03:09 mail sendmail[5322]: s07739E6005322: --- 421 4.4.1 xxxxx Lost input channel from xxxxxxxx [xxx.xxx.xxx.xxx]
Jan 7 10:03:09 mail sendmail[5322]: s07739E6005322: xxxxx [xxx.xxx.xxx.xxx] did not issue MAIL/EXPN/VRFY/ETRN during connection to MSA

I'll really appreciate any assistance i can get.


Thanks,
Shuajoh

 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top