Problems with SASL2 and postfix on freebsd

[martin hudec]

Hello,

  if I may ask, my problem has something common with this.. See below..
  
On Fri, Aug 05, 2005 at 01:05:30PM +0200 or thereabouts, cell wrote:
> >>Trying 127.0.0.1...
> >>Connected to localhost.linux-win.org.
> >>Escape character is '^]'.
> >>220 gw-bsd.linux-win.org ESMTP Postfix 2.2.5 (FreeBSD)
> >>ehlo example.pl
> >>250-gw-bsd.linux-win.org
> >>250-PIPELINING
> >>250-SIZE 10000000
> >>250-VRFY
> >>250-ETRN
> >>250-STARTTLS
> >>250 8BITMIME

  220 amber.aeternal.net ESMTP Postfix
  ehlo aeternal.net
  250-amber.aeternal.net
  250-PIPELINING
  250-SIZE 10240000
  250-VRFY
  250-ETRN
  250-STARTTLS
  250-AUTH LOGIN PLAIN
  250-AUTH=LOGIN PLAIN
  250 8BITMIME

  So far so good, I am offering LOGIN and PLAIN..

> >>In /usr/local/lib/sasl2 i have that :
> >>
> >>pwcheck_method: saslauthd
> >>auxprop_plugin: sql
> >>sql_engine: mysql
> >>sql_hostnames: 127.0.0.1
> >>sql_user: maildb
> >>sql_passwd: *****
> >>sql_database: maildb
> >>sql_select: select clear from users where id='%u@%r'

  I am getting following error:

  Aug  5 13:22:27 amber postfix/smtpd[18606]: sql_select option missing
  Aug  5 13:22:27 amber postfix/smtpd[18606]: auxpropfunc error no
  mechanism available

  I assume it is caused by configuration of my
  /usr/local/lib/sasl2/smtpd:

  pwcheck_method: authdaemond
  log_level: 3
  mech_list: PLAIN LOGIN
  authdaemond_path:/usr/local/var/spool/authdaemon/socket

  Maybe I need to setup sql_* stuff like above, but.. due to security
  reasons I do not have any clear (plaintext form of password) in my
  table, but md5 hashed password.

  Is there any way how to put into sql_select directive that I need
  to use md5? Or do I have to store also plaintext form of passwords? 

-- 
martin hudec


   * 421 907 303 393
   * corwin at aeternal.net
   * http://www.aeternal.net

"Nothing travels faster than the speed of light with the possible 
exception of bad news, which obeys its own special laws."

   Douglas Adams, "The Hitchhiker's Guide to the Galaxy"
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20050805/58442522/attachment.bin