Re: saslauthd stops working

[Michael Moritz <mimo@gn.apc.org>]

Hi Emmanuel

This is my /etc/default/saslauthd

# This needs to be uncommented before saslauthd will be run automatically
START=yes

# You must specify the authentication mechanisms you wish to use.
# This defaults to "pam" for PAM support, but may also include
# "shadow" or "sasldb", like this:
# MECHANISMS="pam shadow"

MECHANISMS="pam"
#PARAMS=" -d "

/etc/postfix/sasl/smtpd.conf

mech_list: LOGIN PLAIN
minimum_layer: 0
pwcheck_method: saslauthd
auto_transition: no

/etc/pam.d/smtp

auth       required     /lib/security/pam_listfile.so item=user sense=deny 
file=/etc/frozen.users onerr=succeed
auth       required     /lib/security/pam_mysql.so user=syspwdread passwd=XXXX 
db=mailusers crypt=7 sqllog=1 logtable=authlog logmsgcolumn=msg logpi
dcolumn=pid logusercolumn=user loghostcolumn=host logtimecolumn=time
account    sufficient   /lib/security/pam_mysql.so user=syspwdread passwd=XXXX 
db=mailusers crypt=7 sqllog=1 logtable=authlog logmsgcolumn=msg logpi
dcolumn=pid logusercolumn=user loghostcolumn=host logtimecolumn=time
password   required     /lib/security/pam_mysql.so user=syspwdread passwd=XXXX 
db=mailusers crypt=7 sqllog=1 logtable=authlog logmsgcolumn=msg logpi
dcolumn=pid logusercolumn=user loghostcolumn=host logtimecolumn=time
session    sufficient   /lib/security/pam_mysql.so user=syspwdread passwd=XXXX 
db=mailusers crypt=7 sqllog=1 logtable=authlog logmsgcolumn=msg logpi
dcolumn=pid logusercolumn=user loghostcolumn=host logtimecolumn=time

BTW, just realised that the pam_mysql is our own hack. So maybe it's just 
that. Any suggestions still appreciated...

Best regards,

mimo

On Wednesday 01 June 2005 11:25, Emmanuel Halbwachs wrote:
> Hello,
>
> Michael Moritz a écrit :
> > we have recently changed to using saslauthd for authentication on sending
> > with postfix. Now, for some reason this stops working after a while (~5
> > days) and we have to restart the service. Now, I dont have very much more
> > information, I cant see any way to generate logging output fom it. Just
> > wondered if anyone had had this problem before.
>
> I've been using postfix + saslauthd on a test machine with only
> one account (me). I first ran woody with sarge packages (postfix
> et al.) and then full sarge for several weeks and did not notice any
> problem.
>
> Unfortunately, I don't have yet any production experience. More on
> this (~ 200 users) in some monthes :-\
>
> Shure this doesn't help much, but feel free to exchange about
> settings/configuration.
>
> --
> Emmanuel Halbwachs              Labo. de Photonique et Nanostructures
> tel      : (+33)1 69 63 61 34                             CNRS UPR 20
> fax      : (+33)1 69 63 60 06       Route de Nozay F 91460 Marcoussis