Hi experts,
I'm run postfix 2.10 + Cyrus sasl 2.1 + Dovecot 2.2 on Oracle Linux 7.
Dovecot works with saslauthd normally, but Postfix always failed on authentication, wish someone can help to check what problem it is.
Error message got from /var/log/maillog as below:
=======================
May 1 23:43:27 tiger systemd: Started SASL authentication daemon..
May 1 23:44:02 tiger saslauthd[25162]: do_auth : auth failure: [user=yun.wang] [service=imap] [realm=] [mech=pam] [reason=PAM auth error]
=======================
Error message got from /var/log/messages as below:
=======================
May 1 23:28:13 tiger unix_chkpwd[24656]: password check failed for user (yun.wang)
May 1 23:28:13 tiger saslauthd[24570]: pam_unix(smtp:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= user=yun.wang
=======================
Run testsaslauthd for user yun.wang, it return success.
=======================
[root@tiger sysconfig]# testsaslauthd -u yun.wang -p yunwangpassword -s smtp
0: OK "Success."
=======================
The configuration of postfix as below:
=======================
[root@tiger postfix]# postconf -n
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
broken_sasl_auth_clients = yes
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/libexec/postfix
data_directory = /var/lib/postfix
debug_peer_level = 2
debugger_command = PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin ddd $daemon_directory/$process_name $process_id & sleep 5
html_directory = no
inet_interfaces = all
inet_protocols = ipv4
mail_owner = postfix
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain
mydomain = oracle.com
myhostname = tiger.oracle.com
mynetworks = 127.0.0.0/8
myorigin = $mydomain
newaliases_path = /usr/bin/newaliases.postfix
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/postfix-2.10.1/README_FILES
sample_directory = /usr/share/doc/postfix-2.10.1/samples
sendmail_path = /usr/sbin/sendmail.postfix
setgid_group = postdrop
smtpd_client_restrictions = permit_mynetworks, permit_sasl_authenticated, reject
smtpd_helo_required = no
smtpd_helo_restrictions = permit_mynetworks, reject
smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks, reject
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain = $myhostname
smtpd_sasl_path = smtpd
smtpd_sasl_security_options = noanonymous
smtpd_sender_restrictions = permit_sasl_authenticated, permit_mynetworks, reject
unknown_local_recipient_reject_code = 550
=======================
Thanks a lot!
Wang Yun