[ILUG] SASL with postfix and cyrus

[Jeroen Massar]

Bernhard D Rohrer wrote:
[..]
> hmm, I am using IMAPS and am getting this when using the symlink:
> 
> Apr  3 16:06:15 collab cyrus/imaps[28052]: Password verification failed
> Apr  3 16:06:16 collab saslauthd[28040]: do_auth         : auth failure:
> [user=houselion] [service=imap] [realm=] [mech=ldap] [reason=Unknown]

Do you use ldap?!

If so, then you are most likely in a for a long tough debugging session.
Not easy to do using some emails and requires a lot and lot of reading.

> whereas it plain works when not using it

At this point, you will want to start doing some debugging.

Thus:
 - check /var/run/
   - does it contain a symlink from:
      saslauthd (thus /var/run/saslauthd)
    to
      /var/spool/var/run/saslauthd ?

 - check /var/spool/postfix/
   - is /var/spool/postfix/var/run/saslauthd a real directory?
   - does it contain, after starting saslauthd a valid socket?

If yes, so far so good, then, check if the configuration file from
/etc/saslauthd (but it could be in /etc/postfix/saslauthd, I don't
recall) is available also in the chroot /var/spool/postfix/

Then stop saslauthd, and start it with the -d flag (debug) and see what
it gives for messages.

And what one can also do: strace -P <pid of saslauthd> and see what it
tries to accomplish ;)

Greets,
 Jeroen

(ps: there are reasons why I dumped cyrus btw,... dovecot solution is a
zillion times cleaner and doesn't require hacks... ;)