Wierd postfix/cyrus SASL error...

[Paul Schmehl]

--On Friday, June 01, 2007 14:55:23 +0530 Amarendra Godbole 
<amarendra.godbole at gmail.com> wrote:
>
> Okay, after a lot of digging around, I got the error. Somehow
> something messed up during the portupgrade, and postfix started
> negotiating GSSAPI authentication with the smtp server. Since GSSAPI
> needs krb (kerberos) support, which was not configured, the auth
> failed. Adding the following lines to main.cf solved the problem, and
> postfix now happily chugs along:
>
> smtp_sasl_security_options = noanonymous, noplaintext
> smtp_sasl_mechanism_filter = login, ntlm
>
> Now it negotiates login or ntlm with the server, and the auth works
> fine. Thanks for all the help. My next stop is to figure out *what*
> changed during portupgrade (as my postfix config files were the same
> as before) that created this issue.
>
Since Postfix is such a critical app, you might want to consider presetting 
the config you want in /usr/local/etc/pkgtools.conf to avoid surprises 
during portupgrade.

-- 
Paul Schmehl (pauls at utdallas.edu)
Senior Information Security Analyst
The University of Texas at Dallas
http://www.utdallas.edu/ir/security/