ASMTP setup on 4.8

[Drew Tomlinson]

----- Original Message ----- 
From: "Hajimu UMEMOTO" <ume at mahoroba.org>
To: "Drew Tomlinson" <drew at mykitchentable.net>
Cc: "Chris Boyd" <cboyd at gizmopartners.com>;
<freebsd-security at freebsd.org>
Sent: Friday, July 18, 2003 1:57 PM
Subject: Re: ASMTP setup on 4.8


> Hi,
>
> >>>>> On Fri, 18 Jul 2003 13:26:56 -0700
> >>>>> "Drew Tomlinson" <drew at mykitchentable.net> said:
>
> > Okay, I found the problem, and I've just committed the fix.  Please
> > re-cvsup and try it.
>
> drew> Thanks!!!
>
> You are welcome.
>
> > drew> It's been a few weeks since I looked at it but I recall having
> drew> to create
> > drew> a /usr/local/lib/sasl2/smtpd.conf file.  What should the
correct
> > drew> contents be?
> >
> > Though I have no experience with postfix, I heared that
> > /usr/local/lib/sasl2/smtpd.conf is for postfix.  Are you using
> > sendmail?  If so, it should be /usr/local/lib/sasl2/Sendmail.conf.
>
> drew> Yes, I'm using Postfix.
>
> I see.  Is your postfix able to access /var/state/saslauthd?  It
> should be:
>
> drwxrwx---   2 cyrus  mail   512 Jul 19 04:52 saslauthd

Yes, mine is like this and Postfix is a member of the mail group.

> Old cyrus-sasl2 port made the directory with wrong permission, and
> postfix couldn't access it.  This problem was corrected.  I believe
> postfix user belongs to mail group, so that postfix can access the
> directory.
>
> Oops, I didn't answer your question.  If you want to use saslauthd for
> plain text password, the correct contents of smtpd.conf should be:
>
> pwcheck_method: saslauthd

I have this.  /var/log/maillog shows:

Jul 21 09:34:38 blacklamb postfix/smtpd[66225]: warning: SASL
authentication failure: no user in db
Jul 21 09:34:38 blacklamb postfix/smtpd[66225]: warning: SASL
authentication failure: no secret in database

I have also tried "pwcheck_method: pam" but then /var/log/maillog shows:

Jul 21 09:38:34 blacklamb postfix/smtpd[66269]: warning: SASL
authentication problem: unknown password verifier
Jul 21 09:38:34 blacklamb postfix/smtpd[66269]: warning:
unknown[165.107.42.110]: SASL LOGIN authentication failed

Chris Boyd posted he had success by adding the following to
/etc/rc.conf:

sasl_saslauthd_enable="YES"
sasl_saslauthd_flags="-a getpwent"

Is this preferred over the script in /usr/local/etc/rc.d?

Still confused.

Thanks,

Drew

P.S. Thanks for fixing the man page.  Looks good now!