Dotaz: Postfix na Mandrivě a jeho autorizace

[Tomas3]

Ahoj, mam mandrivu 2006, existuje zde nekdo kdo by mi poradil jak rozchodit overovani uz. jmena v postfixu oproti mysql kde pouzivam postfixadmin a zde je v mysql kodovane heslo? Ctu na internetu spoustu diskuzi,... ohledne tohoto overovani a SASL v /etc/postfix/sasl/smtpd.conf nastavuju vse jak mi radi, ale porad se mi nedari v outlooku pri zaskrtnute volbe Server pozaduje overeni docilit toho, aby se opravdu uzivatel overil. v /etc/postfix/sasl/smtpd.conf mam toto:

pwcheck_method: saslauthd auxprop
#saslauthd_path:    /var/lib/sasl2/mux
#auxprop_plugin: sql
password_format: crypt

pwcheck_method: auxprop
auxprop_plugin: sql
mech_list: plain login
sql_engine: mysql
sql_user: postfix
sql_passwd: --heslo--
sql_hostnames: localhost
sql_database: postfix
sql_select: select password from mailbox where username='%u%r'

stejne mi to nefunguje ... Poradite mi nekdo co je nejlepsi za volbu a jak to mam dat tedy do kupy? postfix mam nastaven dle nastaveni postfixadmin howto, takze mi schranky vytvari,... ale postfix mi maily neoveruje a nerad bych, aby mi nekdo nezneuzil muj mail server pro spam,... Diky diky

Odpovědi

[Tomas3]

zkousel jsem take nastavovat pam, ale bez vysledku :o(

ve /var/log/mail/warning pise:

May 16 11:50:25 www3 postfix/smtpd[11821]: warning: SASL authentication problem: unknown password verifier 
May 16 11:50:25 www3 postfix/smtpd[11821]: warning: unknown[172.22.1.5]: SASL LOGIN authentication failed

/etc/postfix/sasl/smtpd.conf

pwcheck_method:    pam

/etc/pam.d/smtp

auth    sufficient pam_mysql.so host=localhost db=postfix user=postfix 
passwd=--heslo-- table=mailbox usercolumn=username passwdcolumn=password crypt=1
auth    required pam_mysql.so host=localhost db=postfix user=postfix 
passwd=--heslo-- table=mailbox usercolumn=username passwdcolumn=password crypt=1

poradite mi?

[Libor Klepac]

pwcheck_method ma byt saslauthd a saslauthd by mel bezet s parametrem -a pam -r (pouzivej pam a predavej i domenu jako soucast uzivatelskeho jmena) ... uz se to tu resilo mockrat

[Tomas3]

Bezi mi s parametrem -a pam nastavilo se mi to hned po instalaci. Ted nevim kde to zmenit ...

V PAM.d/smtp jsem nastavil:

auth    sufficient /lib/security/pam_mysql.so host=localhost db=postfix user=postfix 
passwd=-heslo- table=mailbox usercolumn=username passwdcolumn=password crypt=1
auth    required /lib/security/pam_mysql.so host=localhost db=postfix user=postfix 
passwd=-heslo- table=mailbox usercolumn=username passwdcolumn=password crypt=1

je to spravne? Opravdu nevim co delam spatne ... Nejak se tomu postfixu nedari autorizovat pres outlook toho uzivatele z mysql :o(

[Tomas3]

A v smtpd.conf jsem odkomentoval:

pwcheck_method:    saslauthd
mech_list:         plain login

saslauthd_path:    /var/lib/sasl2/mux
minimum_layer: 0

[Libor Klepac]

koukni do /var/log/auth.log, pripadne si zkus pustit ten saslauthd primo z terminalu a pridej parametr -d ...zustane na terminalu a bude vypisovat hlasky

[Tomas3]

Tak jsem se k tomu dokopal tak, ze jsem nastavil:

smtpd.conf

pwcheck_method: saslauthd auxprop
saslauthd_path:    /var/lib/sasl2/mux
auxprop_plugin: sql
password_format: crypt

sql_engine: mysql
mech_list: PLAIN LOGIN
sql_user: postfix
sql_passwd: -heslo-
sql_database: postfix
sql_hostnames: localhost
sql_select: SELECT password FROM mailbox WHERE username = '%u@%r'
sql_verbose: yes

ale ted mi auth.log vypisuje:

.... ....

May 16 13:09:15 www3 postfix/smtpd[13764]: sql plugin Parse the username info@mojedomena.cz 
May 16 13:09:15 www3 postfix/smtpd[13764]: sql plugin try and connect to a host 
May 16 13:09:15 www3 postfix/smtpd[13764]: sql plugin trying to open db 'postfix' on host 'localhost' 
May 16 13:09:15 www3 postfix/smtpd[13764]: sql plugin could not connect to host localhost
May 16 13:09:15 www3 postfix/smtpd[13764]: sql plugin couldn't connect to any host 
May 16 13:09:15 www3 postfix/smtpd[13764]: sql plugin Parse the username info@masaznistudio.cz 
May 16 13:09:15 www3 postfix/smtpd[13764]: sql plugin try and connect to a host 
May 16 13:09:15 www3 postfix/smtpd[13764]: sql plugin trying to open db 'postfix' on host 'localhost' 
May 16 13:09:15 www3 postfix/smtpd[13764]: sql plugin could not connect to host localhost
May 16 13:09:15 www3 postfix/smtpd[13764]: sql plugin couldn't connect to any host 

takze se nemuze spojit s mysql na localhostu, to nechapu, v postfixu jsem to musel udelat pres proxy:mysql tady v tomto nevim jak

[Tomas3]

ted mam v logu:

May 16 13:34:07 www3 postfix/smtpd[14838]: sql auxprop plugin using mysql engine 
May 16 13:34:07 www3 postfix/smtpd[14838]: sql plugin Parse the username info@domena.cz 
May 16 13:34:07 www3 postfix/smtpd[14838]: sql plugin try and connect to a host 
May 16 13:34:07 www3 postfix/smtpd[14838]: sql plugin trying to open db 'postfix' on host '127.0.0.1' 
May 16 13:34:07 www3 postfix/smtpd[14838]: sql plugin Parse the username info@domena.cz 
May 16 13:34:07 www3 postfix/smtpd[14838]: sql plugin try and connect to a host 
May 16 13:34:07 www3 postfix/smtpd[14838]: sql plugin trying to open db 'postfix' on host '127.0.0.1' 
May 16 13:34:07 www3 postfix/smtpd[14838]: sql plugin Parse the username info@domena.cz 
May 16 13:34:07 www3 postfix/smtpd[14838]: sql plugin try and connect to a host 
May 16 13:34:07 www3 postfix/smtpd[14838]: sql plugin trying to open db 'postfix' on host '127.0.0.1' 
May 16 13:34:07 www3 postfix/smtpd[14838]: begin transaction
May 16 13:34:07 www3 postfix/smtpd[14838]: sql plugin create statement from userPassword info domena.cz 
May 16 13:34:07 www3 postfix/smtpd[14838]: sql plugin doing query SELECT password FROM mailbox WHERE username = 'info@domena.cz'; 
May 16 13:34:07 www3 postfix/smtpd[14838]: sql plugin create statement from cmusaslsecretPLAIN info domena.cz 
May 16 13:34:07 www3 postfix/smtpd[14838]: sql plugin doing query SELECT password FROM mailbox WHERE username = 'info@domena.cz'; 
May 16 13:34:07 www3 postfix/smtpd[14838]: commit transaction
May 16 13:34:07 www3 postfix/smtpd[14838]: sql plugin Parse the username info@domena.cz 
May 16 13:34:07 www3 postfix/smtpd[14838]: sql plugin try and connect to a host 
May 16 13:34:07 www3 postfix/smtpd[14838]: sql plugin trying to open db 'postfix' on host '127.0.0.1' 

[Tomas3]

pam.d/smtp nemuzu pouzit takto:

auth    sufficient /lib/security/pam_mysql.so host=localhost db=postfix user=postfix passwd=-heslo- table=mailbox usercolumn=username passwdcolumn=password crypt=1
auth    required /lib/security/pam_mysql.so host=localhost db=postfix user=postfix passwd=-heslo- table=mailbox usercolumn=username passwdcolumn=password crypt=1

protoze neumi prevadet cely nazev e-mailove adresy a pridava jen do username to co je pred zavinacem, napr. jen info

log pak vypada takto:

...

May 16 13:43:30 www3 saslauthd[15031]: crypt changed.
May 16 13:43:30 www3 saslauthd[15031]: db_connect  called.
May 16 13:43:30 www3 saslauthd[15031]: returning 0 .
May 16 13:43:30 www3 saslauthd[15031]: db_checkpasswd called.
May 16 13:43:30 www3 saslauthd[15031]: pam_mysql: where clause = 
May 16 13:43:30 www3 saslauthd[15031]: SELECT password FROM mailbox WHERE username='info'
May 16 13:43:30 www3 saslauthd[15031]: pam_mysql: select returned more than one result
May 16 13:43:30 www3 saslauthd[15031]: returning 7 after db_checkpasswd.
May 16 13:43:30 www3 saslauthd[15031]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure
May 16 13:43:30 www3 saslauthd[15031]: do_auth         : auth failure: [user=info] [service=smtp] [realm=domena.cz] [mech=pam] [reason=PAM auth error]

[Libor Klepac]

to prave dela, pokud ten saslauthd bezi bez parametru -r

[Tomas3]

Uz mi to jede ... parametr -r jsem tam dal a jsem uz o neco chytrejsi ... Kdyb ynebylo na tom internetu tolik blabolu a nesmyslnych navodu jak to zkonfigurovat, tak bych tady nepsal takove veci ;o) Jedine co mi ted na postfixu nefunguje jsou aliasy z mysql :o( Proste mi to vraci postfix jako nedorucitelne, protoze dany uzivatel neexistuje :o(