i have these errors on my postfix logs. ive just installed postfix+sasl.what seems to be the problem ?
mail postfix/smtpd[26307]: auxpropfunc error no mechanism available Feb 1 17:37:27 mail postfix/smtpd[26333]: sql_select option missing
--------------------------------- Do you Yahoo!? With a free 1 GB, there's more in store with Yahoo! Mail.
Am Do, den 02.02.2006 schrieb spart cus um 2:47:
i have these errors on my postfix logs. ive just installed postfix+sasl.what seems to be the problem ?mail postfix/smtpd[26307]: auxpropfunc error no mechanism available Feb 1 17:37:27 mail postfix/smtpd[26333]: sql_select option missing
There is not problem, at least if you don't want to SASL auth against an SQL database. Just
yum remove cyus-sasl-sql
to get rid of these warnings of your SMTP AUTH uses a different backend.
Alexander
Alexander Dalloz ad+lists@uni-x.org wrote: Am Do, den 02.02.2006 schrieb spart cus um 2:47:
i have these errors on my postfix logs. ive just installed postfix+sasl.what seems to be the problem ?mail postfix/smtpd[26307]: auxpropfunc error no mechanism available Feb 1 17:37:27 mail postfix/smtpd[26333]: sql_select option missing
There is not problem, at least if you don't want to SASL auth against an SQL database. Just
yum remove cyus-sasl-sql
to get rid of these warnings of your SMTP AUTH uses a different backend.
Alexander
yes i remembered installing cyrus-sasl-sql. my MECH=pam and my pwcheck_method: sasluthd. is it ok to remove it ? i notice also that even i remove any block on mynetworks= on postfix still they can send/receive messages. supposed to be it cannot send due to the fact that its not on mynetworks parameter. is this the doing of saslauthd ?
tnx for the reply,its really a big help.
Alexander Dalloz ad+lists@uni-x.org wrote: Am Do, den 02.02.2006 schrieb spart cus um 2:47:
i have these errors on my postfix logs. ive just installed postfix+sasl.what seems to be the problem ?mail postfix/smtpd[26307]: auxpropfunc error no mechanism available Feb 1 17:37:27 mail postfix/smtpd[26333]: sql_select option missing
There is not problem, at least if you don't want to SASL auth against an SQL database. Just
yum remove cyus-sasl-sql
to get rid of these warnings of your SMTP AUTH uses a different backend.
Alexander
Am Do, den 02.02.2006 schrieb spart cus um 14:36:
yes i remembered installing cyrus-sasl-sql. my MECH=pam and my pwcheck_method: sasluthd. is it ok to remove it ? i notice also that even i remove any block on mynetworks= on postfix still they can send/receive messages. supposed to be it cannot send due to the fact that its not on mynetworks parameter. is this the doing of saslauthd ?
Please do not top-post.
Yes, it is safe to remove cyrus-sasl-sql in your case as you do not use the SASL auxprop sql plugin.
I can not answer the second question. General advise: first check your logs, here the maillog. Then, if you can't answer the question your own and you feel to ask here on the list: provide details, especially log content which shows what you are asking about. The output of "postconf -n" may too show the cause of Postfix's behaviour.
Alexander
--- Alexander Dalloz ad+lists@uni-x.org wrote:
Am Do, den 02.02.2006 schrieb spart cus um 14:36:
yes i remembered installing cyrus-sasl-sql. my
MECH=pam and my pwcheck_method: sasluthd. is
it ok to remove it ? i notice also that even i
remove any block on mynetworks= on postfix still they
can send/receive messages. supposed to be it
cannot send due to the fact that its not on mynetworks
parameter. is this the doing of saslauthd ?
Please do not top-post.
Yes, it is safe to remove cyrus-sasl-sql in your case as you do not use the SASL auxprop sql plugin.
I can not answer the second question. General advise: first check your logs, here the maillog. Then, if you can't answer the question your own and you feel to ask here on the list: provide details, especially log content which shows what you are asking about. The output of "postconf -n" may too show the cause of Postfix's behaviour.
Alexander
Got it working now.Thanks for all the help. Im still on studying sasl for postfix. Is it more secure to limit the mech_list to just plain and login ? Im not using TLS support for this.
__________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
Am Do, den 02.02.2006 schrieb spart cus um 16:36:
Got it working now.Thanks for all the help. Im still on studying sasl for postfix. Is it more secure to limit the mech_list to just plain and login ? Im not using TLS support for this.
Do not propagate any mechanism which your server setup does not really is able to handle. So restricting the offered mech list to plain and login when using saslauthd is the proper thing to do. You should protect the user's authentication data transmitted in cleartext (just base64 encoded) over the wire by enforcing TLS.
Alexander
Alexander Dalloz ad+lists@uni-x.org wrote: Am Do, den 02.02.2006 schrieb spart cus um 16:36:
Got it working now.Thanks for all the help. Im still on studying sasl for postfix. Is it more secure to limit the mech_list to just plain and login ? Im not using TLS support for this.
Do not propagate any mechanism which your server setup does not really is able to handle. So restricting the offered mech list to plain and login when using saslauthd is the proper thing to do. You should protect the user's authentication data transmitted in cleartext (just base64 encoded) over the wire by enforcing TLS.
Alexander
I've already limit my mech_list to plain and login. What about for TLS? I've google for it and it seems they are used for debian packages. Is there a good site for centos setup ? just like what i did on this, i've found a site setting up the mail server for centos but without the tls. dont want to mess up coz my mail server is already running well.tnx again for the helo.
--------------------------------- Relax. Yahoo! Mail virus scanning helps detect nasty viruses!
Am Fr, den 03.02.2006 schrieb spart cus um 0:31:
I've already limit my mech_list to plain and login. What about for TLS? I've google for it and it seems they are used for debian packages. Is there a good site for centos setup ? just like what i did on this, i've found a site setting up the mail server for centos but without the tls. dont want to mess up coz my mail server is already running well.tnx again for the helo.
http://www.postfix.org/TLS_README.html https://www.aet.tu-cottbus.de/personen/jaenicke/postfix_tls/doc/
http://www.thoron.iki.fi/postfix/postfix-tls-cacert.shtml
google is a quick help. Be aware that you do not need to compile anything for this on CentOS. You just have to get the certificate (either self-signed cert or from cacert.org or a commercial one) and to configure Postfix to use it.
Alexander
--- Alexander Dalloz ad+lists@uni-x.org wrote:
Am Fr, den 03.02.2006 schrieb spart cus um 0:31:
I've already limit my mech_list to plain and
login. What about for TLS? I've google for it and
it seems they are used for debian packages. Is
there a good site for centos setup ? just like
what i did on this, i've found a site setting up
the mail server for centos but without the tls.
dont want to mess up coz my mail server is already
running well.tnx again for the helo.
https://www.aet.tu-cottbus.de/personen/jaenicke/postfix_tls/doc/
http://www.thoron.iki.fi/postfix/postfix-tls-cacert.shtml
google is a quick help. Be aware that you do not need to compile anything for this on CentOS. You just have to get the certificate (either self-signed cert or from cacert.org or a commercial one) and to configure Postfix to use it.
Alexander
I'll be using a self-signed cert since my setup will be all open source and will be documented here. Follow up question on my sasl-sql problem, im using mailscanner and postfix, will this affect mailscanner ? your quick responce on all of this is great help , tnx a lot.
__________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
Am Fr, den 03.02.2006 schrieb spart cus um 1:34:
I'll be using a self-signed cert since my setup will be all open source and will be documented here. Follow up question on my sasl-sql problem, im using mailscanner and postfix, will this affect mailscanner ? your quick responce on all of this is great help , tnx a lot.
No, the SASL auxprop sql plugin is used for AUTH (if you store auth information in an SQL database) and as far as I know mailscanner is not into SMTP AUTH (would even be curious if it would be).
Alexander
-
Alexander Dalloz -
spart cus