Unable to use saslauthd with postfix for smtp_auth

[Haute Subzero]

This may be related to 244568, 138931. The details don't appear to be the same, but the underlying cause could in fact be the same. I'm attempting to setup an 8.04 server install with Postfix, mysql, and postfixadmin. I'm using courier for imap and pop services, but that's all working fine.

root@vmail:~# lsb_release -rd
Description: Ubuntu 8.04.1
Release: 8.04

Postfix 2.5.1-2ubuntu1
libsasl2-modules-sql 2.1.22.dfsg1-18ubuntu2

A more complete transcript of the history is available at
http://www.howtoforge.com/forums/showthread.php?p=134492

To summarize, it appears that saslauthd is not returning/using the correct encryption methods when called via the sql interface. I was able to setup the exact same configuration on a 7.10 server in a few hours with no problem. During my attempts I did find one post which seems to indicate that an upgrade from a working 7.10 system to 8.04 also broke the installation, so while I'm afraid I can't narrow the problem more completely I can provide whatever configuration details you need for the working (7.10) system and a failing (8.04) system for analysis. So far during my search for an alternative to this issue I've found lot's a folks asking the same question, a few who've bailed and gone back to 7.10, and no one who can definitively say they have it working. This certainly appears to be a regression failure since it works in older releases. Please contact me if you need additional information, configurations, etc.

[Brian Murray (brian-murray)]

Thank you for taking the time to report this bug and helping to make Ubuntu better. This bug did not have a package associated with it, which is important for ensuring that it gets looked at by the proper developers. You can learn more about finding the right package at https://wiki.ubuntu.com/Bugs/FindRightPackage. I have classified this bug as a bug in libsasl2-modules-sql.

[Haute Subzero (sub0hero)]

Thanks Brian,

I think that's probably the right classification but since it seems to
be an interaction problem I wasn't sure. I also questioned whether it
could be indirectly security related since the only possible fix I've
run across is someone who appears to have run postfix without chrooting
it. That really wasn't an option for me so I didn't try it to confirm.
Just let me know if you guys need any configs, etc. I've got the
failing 8.04 server static in a VM so I can leave it in the current state.

Brian Murray wrote:
> Thank you for taking the time to report this bug and helping to make
> Ubuntu better. This bug did not have a package associated with it, which
> is important for ensuring that it gets looked at by the proper
> developers. You can learn more about finding the right package at
> https://wiki.ubuntu.com/Bugs/FindRightPackage. I have classified this
> bug as a bug in libsasl2-modules-sql.
>
> ** Changed in: cyrus-sasl2 (Ubuntu)
> Sourcepackagename: None => cyrus-sasl2
>
>

--
  Do not meddle in the affairs of wizards,
  for they are subtle and quick to anger.
                      -- Gildor Inglorion

[Chuck Short (zulcss)]

Hi,

I was wondering if you were stil having this problem?

Thanks
chuck

[Haute Subzero (sub0hero)]

Hi Chuck,

Actually I put that project on hold because I couldn't get it working.
Life has a way of readjusting your priorities. :) I've just recently
wiped the system and loaded a 9.04 version to attempt the process again,
although I'm not sure I'm using the same combinations this time around.
I also haven't had time to get around to testing the auth stuff yet,
just trying to get basic communication working first. Doing this broken
up over several greatly separated days is dramatically stretching the
process out. If you have something specific you'd like me to try I'll
see what I can do.

Melvin Backus

Chuck Short wrote:
> Hi,
>
> I was wondering if you were stil having this problem?
>
> Thanks
> chuck
>
> ** Changed in: cyrus-sasl2 (Ubuntu)
> Importance: Undecided => Low
>
> ** Changed in: cyrus-sasl2 (Ubuntu)
> Status: New => Incomplete
>
>

[Chuck Short (zulcss)]

Ok, thanks for the response please re-open this bug if you are experience any problems with saslauth and postfix.

Regards
chuck