Home / server / Questions / 1087649
Accepted
tsc_chazz
Asked: 2021-12-18 18:00:39 +0800 CST

How does Sendmail figure out where SASL is listening?

  • 772

I'm trying to get SMTP-AUTH working on a Mint Linux 20.2 machine, and I'm having trouble getting authentication to happen. I have installed Cyrus sasl2, and apparently configured it properly - testsaslauthd -u <user> -p <password> -s smtp returns 0: OK "Success." But when I try to send mail from my client using the same credentials, sendmail can't authenticate. What is curious to me is that when I use testsaslauthd entries are generated in my auth log, but when Sendmail tries, there is nothing. Trying to use testsaslauthd from a non-root context also results in no auth entry, which leads me to believe that either sendmail does not have sufficient permission to connect to the sasl daemon, or that it doesn't know where that pipe is and is guessing wrong. So I guess the question is, how does sendmail find that pipe, and who is it being when it does that?

linux sendmail sasl

2 Answers

  1. There should be a configuration file for each client using SASL, e.G. "/usr/lib/sasl2/Sendmail.conf"

    pwcheck_method: saslauthd
    • 1
  2. Best Answer

    Is your sendmail compiled with SASL? check:

    sendmail -d0 < /dev/null | grep SASL

    it should list "SASLv2"

    Did you activate it in "sendmail.mc" ? Example:

    define(`confAUTH_MECHANISMS', `PLAIN LOGIN CRAM-MD5')dnl
define(`confAUTH_OPTIONS', `y')dnl
TRUST_AUTH_MECH(`PLAIN LOGIN CRAM-MD5')dnl
define(`confDONT_BLAME_SENDMAIL',`GroupReadableSASLDBFile')dnl
    • 0