[Résolu] Postfix + SASL

Postfix + SASL [Résolu] - réseaux et sécurité - Linux et OS Alternatifs

Marsh Posté le 30-10-2015 à 12:00:26    

Bonjour,
 
Je ne comprend pas ce que j'ai raté dans la configuration SASL pour avoir cette ligne dans les logs... :
 

Code :
  1. SASL CRAM-MD5 authentication failed: no mechanism available


 
/etc/sasl2/smtpd.conf

Code :
  1. pwcheck_method: saslauthd
  2. mech_list: plain login


 
/etc/sysconfig/saslauthd

Code :
  1. # Directory in which to place saslauthd's listening socket, pid file, and so
  2. # on.  This directory must already exist.
  3. SOCKETDIR=/var/run/saslauthd
  5. # Mechanism to use when checking passwords.  Run "saslauthd -v" to get a list
  6. # of which mechanism your installation was compiled with the ablity to use.
  7. MECH=ldap
  9. # Options sent to the saslauthd. If the MECH is other than "pam" uncomment the next line.
  10. # DAEMONOPTS=--user saslauth
  12. # Additional flags to pass to saslauthd on the command line.  See saslauthd(8)
  13. # for the list of accepted flags.
  14. FLAGS=


 
main.cf

Code :
  1. ######################################################
  2. ## Definition des parametres de chiffrement via TLS ##
  3. ######################################################
  5. # Smtp ( OUTGOING )
  6. smtp_tls_loglevel            = 1
  7. smtp_tls_security_level      = may
  8. smtp_tls_CAfile              = /configuration/ssl/DigiCertCA.crt
  9. smtp_tls_protocols           = !SSLv2, !SSLv3, TLSv1
  10. smtp_tls_mandatory_protocols = !SSLv2, !SSLv3, TLSv1
  11. smtp_tls_mandatory_ciphers   = high
  12. smtp_tls_exclude_ciphers     = aNULL, eNULL, EXPORT, DES, RC4, MD5, PSK, aECDH, EDH-DSS-DES-CBC3-SHA, EDH-RSA-DES-CDC3-SHA, KRB5-DE5, CBC3-SHA
  14. # ---------------------------------------------------------------------------------------------------
  16. # Smtpd ( INCOMING )
  17. smtpd_tls_loglevel            = 1
  18. smtpd_use_tls                 = yes
  19. smtpd_tls_security_level      = may
  20. smtpd_tls_received_header     = yes
  21. smtpd_tls_protocols           = !SSLv2, !SSLv3, TLSv1
  22. smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3, TLSv1
  23. smtpd_tls_mandatory_ciphers   = high
  24. smtpd_tls_exclude_ciphers     = aNULL, eNULL, EXPORT, DES, RC4, MD5, PSK, aECDH, EDH-DSS-DES-CBC3-SHA, EDH-RSA-DES-CDC3-SHA, KRB5-DE5, CBC3-SHA
  25. smtpd_tls_CAfile              = /configuration/ssl/DigiCertCA.crt
  26. smtpd_tls_cert_file           = /configuration/ssl/smtp.mondomaine.fr.crt
  27. smtpd_tls_key_file            = /configuration/ssl/smtp.mondomaine.fr.nopass.key
  28. smtpd_tls_eecdh_grade         = ultra
  30. tls_eecdh_strong_curve = prime256v1
  31. tls_eecdh_ultra_curve  = secp521r1
  32. tls_preempt_cipherlist = yes
  33. tls_random_source      = dev:/dev/urandom
  35. smtp_tls_session_cache_database  = btree:${data_directory}/smtp_scache
  36. smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
  37. lmtp_tls_session_cache_database  = btree:${data_directory}/lmtp_scache
  39. smtpd_tls_session_cache_timeout = 3600s
  42. ##################################
  43. ## Parametres de connexion SASL ##
  44. ##################################
  45. smtpd_sasl_auth_enable          = yes
  46. smtpd_sasl_path                 = smtpd
  47. smtpd_sasl_security_options     = noanonymous
  48. smtpd_sasl_tls_security_options = $smtpd_sasl_security_options
  49. smtpd_sasl_local_domain         = $mydomain
  50. smtpd_sasl_authenticated_header = no
  52. broken_sasl_auth_clients = yes


 
 
Merci d'avance pour votre aide ! :)


Message édité par K-ny13 le 12-11-2015 à 15:56:08
Reply

Marsh Posté le 30-10-2015 à 12:00:26   

Reply

Marsh Posté le 09-11-2015 à 16:54:50    

Je suis pas sur mais dans smtpd.conf met les mechanisme en majuscules (PLAIN LOGIN).


---------------
sheep++
Reply

Marsh Posté le 12-11-2015 à 15:55:17    

Bonjour h3bus,
 
Ça a l'air de fonctionner. Merci !

Reply

Sujets relatifs:

Leave a Replay

Make sure you enter the(*)required information where indicate.HTML code is not allowed