Re: Postfix and SASL authentication



Barry Samuels wrote:
I have tried twice before to set up SASL authentication for Postfix and failed to get it working both times. I am now trying a third time.

I have three remote mail servers to which I can send outgoing mail. I use Balsa as a mail client and, as a test, I set the value of the Remote Server, in the Balsa settings, to each of the three mail servers in turn together with the appropriate values for username and password. I sent an email using each setting and they all arrived. This shows that my username/password combinations are correct for each of the remote servers.

I then created an /etc/postfix/sasl_passwd file and transferred the values for all three servers in the form:

server.name username:password

I then ran postmap hash:/etc/postfix/sasl_passwd.

So far so good.

Before I go any further I'd like to check the format of the sasl_passwd file. I have seen the form shown above on various howtos after searching on the Internet but I have also seen them where the server is encased in square brackets - [server.name].

Are those brackets required?
This prevents MX lookups so it speeds things up.

Having got an answer to that question I'll carry on with the SASL setup and will probably be back with further questions.


As SASL requires a 3rd party to do the actual authentication, you need to use a SASL mechanism that Postfix supports.
Either Cyrus SASL or Dovecot SASL has to be installed in your system.
There are enough documents on the web explaining the procedure to get either system working.


Mihira.

--
Random Quotes From Megas XLR
Coop: You see? The mysteries of the Universe are revealed when you break stuff.
Jamie: When in doubt, blow up a planet.
Kiva: It's an 80 foot robot, if we can't see it, absolutely it's not here.
Glorft Technician: Unnecessary use of force in capturing the Earthers has been approved.


--
To UNSUBSCRIBE, email to debian-user-REQUEST@xxxxxxxxxxxxxxxx with a subject of "unsubscribe". Trouble? Contact listmaster@xxxxxxxxxxxxxxxx



Relevant Pages

  • Re: I have been hacked (WAS: Have I been hacked or is nmap wrong?)
    ... > console based ftp client. ... the FTP servers have? ... > They are really mail servers, at least smtp for outgoing mails ... If you're firewall was dropping incoming packets destined to ...
    (freebsd-questions)
  • Re: DNS not resolving mail server for ADSL users
    ... > did I say my intention was to confuse, ... > to identify mail servers, so it better to set up one as ... > of even one SMTP server that will be looking for an MX ... Maybe the way you configure your mail servers, there is no need for internal ...
    (microsoft.public.win2000.dns)
  • Re: Postfix and SASL authentication
    ... I am now trying a third time. ... I use Balsa as a mail client and, as a test, I set the value of the Remote Server, in the Balsa settings, to each of the three mail servers in turn together with the appropriate values for username and password. ...
    (Debian-User)
  • Re: Postfix and SASL authentication
    ... I am now trying a third time. ... I have three remote mail servers to which I can send outgoing mail. ...
    (Debian-User)
  • RE: suggestions on a good firewall
    ... > guard feature which only lets mail servers receive the RFC 821 commands ... the FTP Fixup allows traffic in on port 20 ... > commands that could be used for nefarious purposes. ...
    (Security-Basics)