cyrus-sasl über MySql

[charlie]

HI,

Ich komme hier einfach nicht weiter bei der Authentifizierung. Erfindet irgendwie nicht den MySql server. Schon alles versuch kann mir einer von euch mal ein Tip geben?

mysqlname_parse: /etc/postfix/mysql_virtual_mailbox_maps.cf: adding host 'localhost' to list of mysql server hosts

Code: Select all

user = xxxx
password = xxxxx
hosts = localhost
dbname = xxxxx
table = mailxxxx
select_field = maildir
where_field = username
#mysql_server= localhost
#hosts = localhost

Code: Select all

# ==========================================================================
# service type  private unpriv  chroot  wakeup  maxproc command + args
#               (yes)   (yes)   (yes)   (never) (100)
# ==========================================================================
smtp      inet  n       -       n       -       -       smtpd -v

Code: Select all

postconf -m
static
sdbm
cidr
pcre
nis
regexp
environ
mysql
proxy
ldap
btree
unix
hash

Code: Select all

smtpd_recipient_restrictions = permit_mynetworks,    permit_sasl_authenticated,    check_relay_domains
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain = $myhostname
smtpd_sasl_security_options = noanonymous
strict_rfc821_envelopes = no
transport_maps = hash:/etc/postfix/transport
unknown_local_recipient_reject_code = 450
virtual_alias_maps = mysql:/etc/postfix/mysql_virtual_alias_maps.cf
virtual_gid_maps = static:51
virtual_mailbox_base = /usr/local/virtual
virtual_mailbox_domains = mysql:/etc/postfix/mysql_virtual_domains_maps.cf
virtual_mailbox_limit = 51200000
virtual_mailbox_maps = mysql:/etc/postfix/mysql_virtual_mailbox_maps.cf
virtual_minimum_uid = 51
virtual_transport = virtual
virtual_uid_maps = static:51

Code: Select all

Jul 22 12:39:23 nemo xxxxxx/xxxxxx-script: starting the xxxxxx mail system
Jul 22 12:39:23 nemo xxxxxx/master[26257]: daemon started -- version 2.1.1
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: match_string: mynetworks ~? debug_peer_list
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: match_string: mynetworks ~? fast_flush_domains
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: match_string: mynetworks ~? mynetworks
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: match_string: relay_domains ~? debug_peer_list
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: match_string: relay_domains ~? fast_flush_domains
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: match_string: relay_domains ~? mynetworks
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: match_string: relay_domains ~? permit_mx_backup_networks
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: match_string: relay_domains ~? qmqpd_authorized_clients
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: match_string: relay_domains ~? relay_domains
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: match_string: permit_mx_backup_networks ~? debug_peer_list
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: match_string: permit_mx_backup_networks ~? fast_flush_domains
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: match_string: permit_mx_backup_networks ~? mynetworks
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: match_string: permit_mx_backup_networks ~? permit_mx_backup_networks
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: connect to subsystem private/proxymap
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: send attr request = open
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: send attr table = unix:passwd.byname
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: send attr flags = 64
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: private/proxymap socket: wanted attribute: status
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: input attribute name: status
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: input attribute value: 0
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: private/proxymap socket: wanted attribute: flags
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: input attribute name: flags
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: input attribute value: 80
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: private/proxymap socket: wanted attribute: (list terminator)
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: input attribute name: (end)
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: dict_proxy_open: connect to map=unix:passwd.byname status=0 server_flags=0120
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: dict_open: proxy:unix:passwd.byname
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: dict_open: hash:/etc/aliases
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: dict_open: hash:/etc/xxxxxx/canonical
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: cfg_get_str: /etc/xxxxxx/mysql_virtual_alias_maps.cf: user = xxxxxx
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: cfg_get_str: /etc/xxxxxx/mysql_virtual_alias_maps.cf: password = xxxxxx
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: cfg_get_str: /etc/xxxxxx/mysql_virtual_alias_maps.cf: dbname = xxxxxx
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: cfg_get_str: /etc/xxxxxx/mysql_virtual_alias_maps.cf: table = alias
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: cfg_get_str: /etc/xxxxxx/mysql_virtual_alias_maps.cf: select_field = goto
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: cfg_get_str: /etc/xxxxxx/mysql_virtual_alias_maps.cf: where_field = address
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: cfg_get_str: /etc/xxxxxx/mysql_virtual_alias_maps.cf: additional_conditions = 
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: cfg_get_str: /etc/xxxxxx/mysql_virtual_alias_maps.cf: hosts = localhost
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: mysqlname_parse: /etc/xxxxxx/mysql_virtual_alias_maps.cf: adding host 'localhost' to list of mysql server hosts
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: dict_open: mysql:/etc/xxxxxx/mysql_virtual_alias_maps.cf
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: cfg_get_str: /etc/xxxxxx/mysql_virtual_mailbox_maps.cf: user = xxxxxx
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: cfg_get_str: /etc/xxxxxx/mysql_virtual_mailbox_maps.cf: password = xxxxxx
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: cfg_get_str: /etc/xxxxxx/mysql_virtual_mailbox_maps.cf: dbname = xxxxxx
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: cfg_get_str: /etc/xxxxxx/mysql_virtual_mailbox_maps.cf: table = mailbox
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: cfg_get_str: /etc/xxxxxx/mysql_virtual_mailbox_maps.cf: select_field = maildir
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: cfg_get_str: /etc/xxxxxx/mysql_virtual_mailbox_maps.cf: where_field = username
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: cfg_get_str: /etc/xxxxxx/mysql_virtual_mailbox_maps.cf: additional_conditions = 
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: cfg_get_str: /etc/xxxxxx/mysql_virtual_mailbox_maps.cf: hosts = localhost
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: mysqlname_parse: /etc/xxxxxx/mysql_virtual_mailbox_maps.cf: adding host 'localhost' to list of mysql server hosts
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: dict_open: mysql:/etc/xxxxxx/mysql_virtual_mailbox_maps.cf
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: match_string: smtpd_access_maps ~? debug_peer_list
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: match_string: smtpd_access_maps ~? fast_flush_domains
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: match_string: smtpd_access_maps ~? mynetworks
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: match_string: smtpd_access_maps ~? permit_mx_backup_networks
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: match_string: smtpd_access_maps ~? qmqpd_authorized_clients
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: match_string: smtpd_access_maps ~? relay_domains
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: match_string: smtpd_access_maps ~? smtpd_access_maps
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: smtpd_sasl_initialize: SASL config file is smtpd.conf
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: match_string: fast_flush_domains ~? debug_peer_list
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: match_string: fast_flush_domains ~? fast_flush_domains
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: watchdog_create: 0x80a0028 18000
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: watchdog_stop: 0x80a0028
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: watchdog_start: 0x80a0028
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: connection established
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: master_notify: status 0
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: name_mask: resource
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: name_mask: software
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: name_mask: noanonymous
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: connect from unknown[xxx.xxx.xxx.xxx]
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: match_list_match: unknown: no match
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: match_list_match: xxx.xxx.xxx.xxx: no match
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: match_list_match: unknown: no match
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: match_list_match: xxx.xxx.xxx.xxx: no match
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: > unknown[xxx.xxx.xxx.xxx]: 220 nemo.xxxx-xxxxxx.de ESMTP xxxxxx
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: watchdog_pat: 0x80a0028
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: < unknown[xxx.xxx.xxx.xxx]: EHLO robert
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: > unknown[xxx.xxx.xxx.xxx]: 250-nemo.xxxx-xxxxxx.de
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: > unknown[xxx.xxx.xxx.xxx]: 250-PIPELINING
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: > unknown[xxx.xxx.xxx.xxx]: 250-SIZE 10240000
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: > unknown[xxx.xxx.xxx.xxx]: 250-VRFY
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: > unknown[xxx.xxx.xxx.xxx]: 250-ETRN
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: > unknown[xxx.xxx.xxx.xxx]: 250-AUTH LOGIN PLAIN DIGEST-MD5 CRAM-MD5
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: > unknown[xxx.xxx.xxx.xxx]: 250-AUTH=LOGIN PLAIN DIGEST-MD5 CRAM-MD5
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: match_list_match: unknown: no match
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: match_list_match: xxx.xxx.xxx.xxx: no match
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: > unknown[xxx.xxx.xxx.xxx]: 250 8BITMIME
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: watchdog_pat: 0x80a0028
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: < unknown[xxx.xxx.xxx.xxx]: AUTH LOGIN
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: smtpd_sasl_authenticate: sasl_method LOGIN
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: smtpd_sasl_authenticate: uncoded challenge: Username:
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: > unknown[xxx.xxx.xxx.xxx]: 334 VXNlcm5hbWU6
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: < unknown[xxx.xxx.xxx.xxx]: dGVzdEBwdXJlLWhvc3RpbmcuZGU=
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: smtpd_sasl_authenticate: decoded response: test@xxxx-xxxxxx.de
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: smtpd_sasl_authenticate: uncoded challenge: Password:
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: > unknown[xxx.xxx.xxx.xxx]: 334 UGFzc3dvcmQ6
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: < unknown[xxx.xxx.xxx.xxx]: MTIzbml4
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: smtpd_sasl_authenticate: decoded response: 123nix
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: warning: SASL authentication problem: unknown password verifier 
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: warning: unknown[xxx.xxx.xxx.xxx]: SASL LOGIN authentication failed
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: > unknown[xxx.xxx.xxx.xxx]: 535 Error: authentication failed
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: watchdog_pat: 0x80a0028
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: smtp_get: EOF
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: lost connection after AUTH from unknown[xxx.xxx.xxx.xxx]
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: disconnect from unknown[xxx.xxx.xxx.xxx]
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: master_notify: status 1
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: connection closed
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: watchdog_stop: 0x80a0028
Jul 22 12:40:24 nemo xxxxxx/smtpd[26311]: watchdog_start: 0x80a0028

Ich habe den Cyrus-sasl so kompiliert:

Code: Select all

./configure --libdir=/usr/lib 
	--with-plugindir=/usr/lib/sasl2 
	--prefix=/usr 
	--sysconfdir=/etc 
	--mandir=/usr/share/man 
	--with-saslauthd=/var/spool/postfix/var/state/saslauthd 
	--enable-pam 
	--enable-sample 
	--enable-login 
	--enable-plain 
	--disable-gssapi 
	--disable-checkapop 
	--with-openssl=/usr/include/openssl 
	--disable-cram 
	--disable-otp 
	--enable-krb4=no 
	--with-ldap=no 
	--without-dbpath 
	--with-dblib=none 
	--enable-mysql 
	--with-mysql=/usr/include/mysql

Code: Select all

smtp.conf

pwcheck_method: auxprop
mech_list: PLAIN LOGIN DIGEST-MD5 CRAM-MD5
auxprop_plugin: mysql
sql_engine: mysql
mysql_user: xxxxx
mysql_passwd: xxxxx
mysql_database: xxxxx
mysql_statement: SELECT password FROM mailbox WHERE username : '%u@r%' and active='1'
mysql_verbose: yes
#host = localhost
mysql_server: localhost
mysql_port: 3306
#mysql_socket: /var/lib/mysql/mysql.sock
sasl_log_level: 3
#pwcheck_method: pam
#pwcheck_method: saslauthd
#mech_lost: PLAIN LOGIN
sql_usessl: no

thx
charlie

[duergner]

Schau dir mal das Howto bei http://www.workaround.org an.

[charlie]

HI,

ja auch schon versucht über die pam_mysql.so zu gehn ......

thx

[sascha]

Und was ging da nicht? Mit pam_mysql hats bei mir geklappt.

[charlie]

Hi Sascha,

ich habe die pam_mysql in /etc/pam.d/ und auch noch mal in /var/spool/postfix/etc/pam.d eine pam.conf habe ich auf meiner SuSE 9.0 nicht gefunden.
Mit dem Erfolg das er nie die pam_mysql benutz hat.....

charlie

P.s.
Igendwie ist die Seite tod... http://www.workaround.org

[duergner]

Geht bei mir ohne Probleme. Hast du libpam-mysql denn installiert?

[sascha]

Die Datei sollte smtp heißen. Guck mal hier: http://www.gentoo.org/doc/en/virt-mail- ... doc_chap10

[charlie]

Hi,

ja sry habe ich auch so /etc/pam.d/smtp und die pam_mysql.so in die /lib/security. Habe sie auch mal in die /var/spool/postfix/lib/security kopiert.

Funzt leider net? Ich check noch mal alles.....

mfg
charlie

P.S.
Das habe ich eben noch in den warn.log gefunden:
Jul 22 15:14:40 nemo postfix/smtpd[29889]: mysql auxprop plugin has been requested
Jul 22 15:14:40 nemo postfix/smtpd[29889]: mysql plugin Parse the username test@xxxxxxx.de
Jul 22 15:14:40 nemo postfix/smtpd[29889]: mysql plugin try and connect to a host
Jul 22 15:14:40 nemo postfix/smtpd[29889]: mysql plugin trying to connect to
Jul 22 15:14:40 nemo postfix/smtpd[29889]: mysql plugin Parse the username test@xxxxxxx.de
Jul 22 15:14:40 nemo postfix/smtpd[29889]: mysql plugin try and connect to a host
Jul 22 15:14:40 nemo postfix/smtpd[29889]: mysql plugin trying to connect to
Jul 22 15:14:40 nemo saslauthd[29885]: pam_sm_authenticate called.
Jul 22 15:14:40 nemo saslauthd[29885]: dbuser changed.
Jul 22 15:14:40 nemo saslauthd[29885]: Unknown option: password=DBpassword
Jul 22 15:14:40 nemo saslauthd[29885]: Unknown option: hosts=localhost
Jul 22 15:14:40 nemo saslauthd[29885]: database changed.
Jul 22 15:14:40 nemo saslauthd[29885]: table changed.
Jul 22 15:14:40 nemo saslauthd[29885]: usercolumn changed.
Jul 22 15:14:40 nemo saslauthd[29885]: passwdcolumn changed.
Jul 22 15:14:40 nemo saslauthd[29885]: crypt changed.
Jul 22 15:14:40 nemo saslauthd[29885]: db_connect called.
Jul 22 15:14:40 nemo saslauthd[29885]: returning 7 .
Jul 22 15:14:40 nemo saslauthd[29885]: returning 7 after db_connect.

[charlie]

Geht bei mir ohne Probleme. Hast du libpam-mysql denn installiert?

Wenn du mir sagst wie es bei der SuSE heist, das ist kein Debian Server.....

[duergner]

Im YaST nach provides pam_mysql.so suchen. Sollte er dann finden.

[charlie]

HI,

ne nicht zu finden die habe ich mir aber schon selber gebaut von http://sourceforge.net/projects/pam-mysql/

thx

[charlie]

HI,

hmmm irgendwie kommt jetzt nix mehr mit falscher Anmeldung beim Verschicken von Mails in andere Domains.....
Aber dafür ein Relay access denied ?? :lol:

Wie kann denn das sein wenn ich angemeldet bin kann ich doch überall hin verschicken? Oder muss ich das auch noch confen?
Glaube so langsam ist mein Hirn matsch.....

charlie

[duergner]

Wie sehen denn die smtp_sender_restrictions aus?

Aber wenn du alles nach http://www.workaround.org eingerichtet hast, sollte es passen.

[charlie]

Hi,

ich hatte ein faschen trable drin der userneame sieht so aus user@domain.tcl der cyrus will aber name = user haben ohne domain.
Kann man die Query username = '%u' noch in die pam_mysql einbauen? Der courier Authentifiziert auch auf usermane.
Was ist eigenendlich wenn der user schon einer domaine vorkommt?

charlie