@timoid: "I am trialling the new debian sarge release for one of our test mail
servers. It was previously a woody install that has undergone a
dist-upgrade.
One thing ive noted is that sendmail will no longer authenticate users
who use outlook/outlook express against the local /etc/passwd
/etc/shadow combinations.
Ive installed the new version of sendmail then sasl2-bin and
libsasl2-modules. Sasl and libsasl and all associated modules
(libsasl-modules-plain?) were already installed.
Saslauthd is starting fine after editing /etc/default/saslauthd and its
set to use pam as a mechanism.
 8073 ?        Ss     0:00 /usr/sbin/saslauthd -a pam
 8074 ?        S      0:00 /usr/sbin/saslauthd -a pam
 8075 ?        S      0:00 /usr/sbin/saslauthd -a pam
 8076 ?        S      0:00 /usr/sbin/saslauthd -a pam
 8077 ?        S      0:00 /usr/sbin/saslauthd -a pam
Pam for smtp is the distribution default setup (when it asked to
overwrite it I did)
I ran /usr/share/sendmail/update_auth and it told me to add an include
from /etc/mail/sasl/sasl.m4 into sendmail.mc
Then I ran sendmailconfig:
"Ah, you're setup with SASL2 !
Unfortunately, there is no automagic way to migrate to /etc/sasldb2 :(
You'll want to make sure /etc/default/saslauthd is setup to start,
and has at least MECHANISMS=3D"pam" !"
On telnet to port 25
Escape character is '^]'.
220 atlas.local.workgroup ESMTP Sendmail 8.13.4/8.13.4/Debian-3; Fri, 10
Jun 2005 12:37:53 +1000; (No UCE/UBE) logging access from:
localhost(OK)-localhost [83.161.120.155]
EHLO tim
250-atlas.local.workgroup Hello localhost [83.161.120.155], pleased to meet
you
250-AUTH DIGEST-MD5 CRAM-MD5 LOGIN PLAIN
If anyone can see anything I missed or need to add I'd appreciate the
help.
Thanks
Tim Warnock
ISP Technical Manager
GetOnIt! Nationwide Internet.
1300 88 00 97
timoid (at) getonit.net.au"
    @timoid: "<quote>
There was the problem then, mine just had two lines, the rest were
commented out.
Ive put in there now (and it works):
auto_transition: false
pwcheck_method: saslauthd
allowanonymouslogin: 0
allowplaintext: 1
mech_list: EXTERNAL DIGEST-MD5 CRAM-MD5 LOGIN PLAIN
Thanks for pointing me in the right direction."
    @cowboy: "<quote>
Good, you're pretty much there
Good
That bites...  if you do `sasldblistusers`, you'll probably find lots
of users, but `sasldblistusers2` will likely have no entries :(
The SASL folks didn't provide a tool to automagically migrate sasldb - 
ok, actually they did; if you used gdbm, but Debian didn't...  So, you
need to make sure PAM is actually used for the plaintext authentication.
Ok, at least 90% there...
what is in /etc/mail/sasl/Sendmail.conf.2 ?
I have the following:
 	auto_transition: true
 	pwcheck_method: auxprop saslauthd
 	auxprop_plugin: sasldb
 	allowanonymouslogin: 0
 	allowplaintext: 1
 	mech_list: EXTERNAL DIGEST-MD5 CRAM-MD5 LOGIN PLAIN
That setup will allow SASL to convert and answer the encrypted
passwords, and fall-back to PAM for plain/login.
Rick Nelson
<Midgar> From all the sterotypes about Aussies, I figure you guys are
          really tough.
<Midgar> ;p
<krusto> we'll throw koala's at you
To UNSUBSCRIBE, email to <email_address>
with a subject of "unsubscribe". Trouble? Contact <email_address>"
{'source': 'USENET', 'other_information': '{"reply_count": 2, "forum_name": "linux.debian.isp.20141123.mbox"}', 'file': 'data/output/usenet-linux.debian.parquet'}