Postfix smtp autentizace uzivatelu

[Petr Barta]

Jan Volešák wrote:
> Dobry den,
> zapasim se smtp autentizaci uzivatelu pro moznost relaye. Kdyby to mel nekdo rozbehane byl bych vdecen za konzultaci. Nyni jsem ve stavu, kdy mi to v logu hlasi viz nize. Kdyz otestuji heslo tak to projde.
>  /usr/bin/testsaslauthd -u volesak -p heslo
> 0: OK "Success."
> Stroj je urcen pouze pro relay, nezachytava zadnou domenu.

Priznam, ze jsem nemel cas zkoumat podrobne Vase logy, ale jestli Vam 
pomuze moje konfigurace (debian, postfix), mam to nasledovne:

smtp_tls_CAfile = /etc/postfix/tls/cacert.pem
smtp_tls_cert_file = /etc/postfix/tls/server-cert.pem
smtp_tls_key_file = /etc/postfix/tls/server-key.pem
smtp_tls_loglevel = 1
smtp_tls_session_cache_database = btree:/var/run/smtp_tls_session_cache
smtp_use_tls = yes
smtpd_tls_CAfile = /etc/postfix/tls/cacert.pem
smtpd_tls_cert_file = /etc/postfix/tls/server-cert.pem
smtpd_tls_key_file = /etc/postfix/tls/server-key.pem
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_database = btree:/var/run/smtpd_tls_session_cache
smtpd_use_tls = yes
tls_random_source = dev:/dev/urandom
smtpd_recipient_restrictions = permit_mynetworks, 
permit_sasl_authenticated, reject_unauth_destination, 
check_policy_service inet:127.0.0.1:60000
smtpd_sender_restrictions = permit_mynetworks, 
permit_sasl_authenticated, check_sender_access 
hash:/etc/postfix/sender_access, reject_unknown_sender_domain, 
reject_unverified_sender

/usr/lib/sasl2/smtpd.conf:
pwcheck_method: saslauthd auxprop
mech_list: plain login
auxprop_plugin: sasldb


/etc/default/saslauthd:
START=yes
MECHANISMS="shadow pam"
OPTIONS="-c"


Petr Barta