A few postfix issues - LDAP / anvil and sasl?

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
12 messages Options
Reply | Threaded
Open this post in threaded view
|

A few postfix issues - LDAP / anvil and sasl?

Evan Platt-3

My setup is I get my mail from a relay host - they perform A/V and anti spam. So if I can set up a ldap server, they can query for valid domains.

I've recompiled postfix with ldap support (I hope!), but it doesn't appear postfix is using the aliases in my ldap.

My setup is I have one mailbox on my server (eplatt) and all valid mail goes to it. So my aliases consists of
example1:eplatt
example2:eplatt
webmaster:eplatt

etc.

Everything was working until (murphys law) I reinstalled to enable ldap support. I reinstalled with:

make -f Makefile.init makefiles 'PREFIX=/etc/postfix ' 'CCARGS=-DUSE_TLS -I/sw/include/sasl -DUSE_SASL_AUTH -DUSE_CYRUS_SASL ' 'AUXLIBS=-L/opt/local/lib -lsasl2 -lssl -lcrypto' 'CCARGS='-I/usr/local/include -DHAS_LDAP' AUXLIBS='-L/usr/local/lib -lldap -L/usr/local/lib -llber'

I'm seeing in the mail.log:
Jun 21 11:47:48 www ${multi_instance_name: postfix}${multi_instance_name?$multi_instance_name}/master[7111]: reload -- version 2.6.2, configuration /etc/postfix

Second, I've disabled anvil in master.cf, but I still see:

Jun 21 11:48:27 www postfix/smtpd[7132]: warning: connect to private/anvil: Connection refused
Jun 21 11:48:27 www postfix/smtpd[7132]: warning: problem talking to server private/anvil: Connection refused

I recall (but can't find it on google) adding anvil=no in main.cf?

I've included my postconf -n at the end, but can anyone help and advise what I'm doing wrong?

I have

uid=eplatt,dc=espphotography,dc=com
and names of mail, value of [hidden email], [hidden email] , etc.

with
alias_maps = ldap:/etc/postfix/ldap-aliases.cf
ldap-aliases.cf:
server_host = localhost
search_base = dc=espphotography, dc=com

all mail is rejected:

Jun 20 12:43:37 www postfix/smtpd[1703]: NOQUEUE: reject: RCPT from unknown[192.168.1.4]: 550 5.1.1 <[hidden email]>: Recipient address rejected: User unknown in local recipient table; from=<[hidden email]> to=<[hidden email]> proto=ESMTP helo=<mylaptop.espphotography.com>

Below is my postconf.n. Anything I'm missing , please let me know.

Thanks!

# postconf -n
alias_database = hash:/etc/postfix/aliases
alias_maps = hash:/etc/postfix/aliases
broken_sasl_auth_clients = yes
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/libexec/postfix
data_directory = /var/lib/postfix
debug_peer_level = 2
html_directory = no
inet_interfaces = all
mail_owner = postfix
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
message_size_limit = 10000000
mydomain = espphotography.com
myhostname = espphotography.com
mynetworks_style = subnet
newaliases_path = /usr/bin/newaliases
queue_directory = /private/var/spool/postfix
readme_directory = /usr/share/doc/postfix
relayhost = [smtp.comcast.net]:587
sample_directory = /usr/share/doc/postfix/examples
sendmail_path = /usr/sbin/sendmail
setgid_group = postdrop
smtp_sasl_auth_enable = yes
smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
smtp_sasl_security_options =
smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain = $mydomain
smtpd_sasl_security_options = noanonymous
smtpd_sender_restrictions = check_sender_access hash:/etc/postfix/access
smtpd_tls_cert_file = /System/Library/OpenSSL/certs/smtpd.pem
smtpd_tls_key_file = $smtpd_tls_cert_file
smtpd_use_tls = yes
unknown_local_recipient_reject_code = 550


     
Reply | Threaded
Open this post in threaded view
|

Re: A few postfix issues - LDAP / anvil and sasl?

Evan Platt-3

I should add - this is a OS/X 10.4 box if that makes a difference (workstation).



----- Original Message ----
From: Evan Platt <[hidden email]>
To: [hidden email]
Sent: Sunday, June 21, 2009 6:38:24 PM
Subject: A few postfix issues - LDAP / anvil and sasl?


My setup is I get my mail from a relay host - they perform A/V and anti spam. So if I can set up a ldap server, they can query for valid domains.

I've recompiled postfix with ldap support (I hope!), but it doesn't appear postfix is using the aliases in my ldap.

My setup is I have one mailbox on my server (eplatt) and all valid mail goes to it. So my aliases consists of
example1:eplatt
example2:eplatt
webmaster:eplatt

etc.

Everything was working until (murphys law) I reinstalled to enable ldap support. I reinstalled with:

make -f Makefile.init makefiles 'PREFIX=/etc/postfix ' 'CCARGS=-DUSE_TLS -I/sw/include/sasl -DUSE_SASL_AUTH -DUSE_CYRUS_SASL ' 'AUXLIBS=-L/opt/local/lib -lsasl2 -lssl -lcrypto' 'CCARGS='-I/usr/local/include -DHAS_LDAP' AUXLIBS='-L/usr/local/lib -lldap -L/usr/local/lib -llber'

I'm seeing in the mail.log:
Jun 21 11:47:48 www ${multi_instance_name: postfix}${multi_instance_name?$multi_instance_name}/master[7111]: reload -- version 2.6.2, configuration /etc/postfix

Second, I've disabled anvil in master.cf, but I still see:

Jun 21 11:48:27 www postfix/smtpd[7132]: warning: connect to private/anvil: Connection refused
Jun 21 11:48:27 www postfix/smtpd[7132]: warning: problem talking to server private/anvil: Connection refused

I recall (but can't find it on google) adding anvil=no in main.cf?

I've included my postconf -n at the end, but can anyone help and advise what I'm doing wrong?

I have

uid=eplatt,dc=espphotography,dc=com
and names of mail, value of [hidden email], [hidden email] , etc.

with
alias_maps = ldap:/etc/postfix/ldap-aliases.cf
ldap-aliases.cf:
server_host = localhost
search_base = dc=espphotography, dc=com

all mail is rejected:

Jun 20 12:43:37 www postfix/smtpd[1703]: NOQUEUE: reject: RCPT from unknown[192.168.1.4]: 550 5.1.1 <[hidden email]>: Recipient address rejected: User unknown in local recipient table; from=<[hidden email]> to=<[hidden email]> proto=ESMTP helo=<mylaptop.espphotography.com>

Below is my postconf.n. Anything I'm missing , please let me know.

Thanks!

# postconf -n
alias_database = hash:/etc/postfix/aliases
alias_maps = hash:/etc/postfix/aliases
broken_sasl_auth_clients = yes
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/libexec/postfix
data_directory = /var/lib/postfix
debug_peer_level = 2
html_directory = no
inet_interfaces = all
mail_owner = postfix
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
message_size_limit = 10000000
mydomain = espphotography.com
myhostname = espphotography.com
mynetworks_style = subnet
newaliases_path = /usr/bin/newaliases
queue_directory = /private/var/spool/postfix
readme_directory = /usr/share/doc/postfix
relayhost = [smtp.comcast.net]:587
sample_directory = /usr/share/doc/postfix/examples
sendmail_path = /usr/sbin/sendmail
setgid_group = postdrop
smtp_sasl_auth_enable = yes
smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
smtp_sasl_security_options =
smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain = $mydomain
smtpd_sasl_security_options = noanonymous
smtpd_sender_restrictions = check_sender_access hash:/etc/postfix/access
smtpd_tls_cert_file = /System/Library/OpenSSL/certs/smtpd.pem
smtpd_tls_key_file = $smtpd_tls_cert_file
smtpd_use_tls = yes
unknown_local_recipient_reject_code = 550


     
Reply | Threaded
Open this post in threaded view
|

Re: A few postfix issues - LDAP / anvil and sasl?

Barney Desmond
In reply to this post by Evan Platt-3
2009/6/22 Evan Platt <[hidden email]>:
>
> make -f Makefile.init makefiles 'PREFIX=/etc/postfix ' 'CCARGS=-DUSE_TLS -I/sw/include/sasl -DUSE_SASL_AUTH -DUSE_CYRUS_SASL ' 'AUXLIBS=-L/opt/local/lib -lsasl2 -lssl -lcrypto' 'CCARGS='-I/usr/local/include -DHAS_LDAP' AUXLIBS='-L/usr/local/lib -lldap -L/usr/local/lib -llber'
>
> I'm seeing in the mail.log:
> Jun 21 11:47:48 www ${multi_instance_name: postfix}${multi_instance_name?$multi_instance_name}/master[7111]: reload -- version 2.6.2, configuration /etc/postfix

Are you literally seeing dollars and curly-braces in the logs? If
that's obfuscation then it's very unclear. Someone else may have
suggestions/corrections for your `make` line, but does ldap now appear
in the output of `postconf -m`?

> Second, I've disabled anvil in master.cf, but I still see:
>
> Jun 21 11:48:27 www postfix/smtpd[7132]: warning: connect to private/anvil: Connection refused
> Jun 21 11:48:27 www postfix/smtpd[7132]: warning: problem talking to server private/anvil: Connection refused
>
> I recall (but can't find it on google) adding anvil=no in main.cf?

I only know enough about anvil to say that you probably don't want, or
need, to touch it. Why did you disable anvil? It performs connection
rate-limiting to prevent runaway situations. "It makes too much noise
in the mail log" isn't a good excuse. Also, I don't see any
anvil=(yes|no) directive, what makes you think it exists?
http://www.postfix.org/postconf.5.html#anvil

> I have
>
> uid=eplatt,dc=espphotography,dc=com
> and names of mail, value of [hidden email], [hidden email] , etc.
>
> with
> alias_maps = ldap:/etc/postfix/ldap-aliases.cf
> ldap-aliases.cf:
> server_host = localhost
> search_base = dc=espphotography, dc=com
>
> all mail is rejected:
>
> Jun 20 12:43:37 www postfix/smtpd[1703]: NOQUEUE: reject: RCPT from unknown[192.168.1.4]: 550 5.1.1 <[hidden email]>: Recipient address rejected: User unknown in local recipient table; from=<[hidden email]> to=<[hidden email]> proto=ESMTP helo=<mylaptop.espphotography.com>

I'm no good with LDAP, but I'd suggest trying some manual queries
against the table, without postfix. Something like this to see if the
results look "sane":

postmap -q [hidden email] ldap:/etc/postfix/ldap-aliases.cf

alias_maps is generally for local delivery, which should mean the
lookup key is just a name, not a full email address. Does that match
what you have stored in LDAP?


> # postconf -n
> alias_database = hash:/etc/postfix/aliases
> alias_maps = hash:/etc/postfix/aliases

Usually one posts the "broken" postconf-n output, but we know what you
mean (assuming you haven't changed anything else except putting in
LDAP).
Reply | Threaded
Open this post in threaded view
|

Re: A few postfix issues - LDAP / anvil and sasl?

Sahil Tandon
On Jun 22, 2009, at 11:22 AM, Barney Desmond <[hidden email]>  
wrote:

> 2009/6/22 Evan Platt <[hidden email]>:
>>
>> make -f Makefile.init makefiles 'PREFIX=/etc/postfix ' 'CCARGS=-
>> DUSE_TLS -I/sw/include/sasl -DUSE_SASL_AUTH -DUSE_CYRUS_SASL '  
>> 'AUXLIBS=-L/opt/local/lib -lsasl2 -lssl -lcrypto' 'CCARGS='-I/usr/
>> local/include -DHAS_LDAP' AUXLIBS='-L/usr/local/lib -lldap -L/usr/
>> local/lib -llber'
>>
>> I'm seeing in the mail.log:
>> Jun 21 11:47:48 www ${multi_instance_name: postfix}$
>> {multi_instance_name?$multi_instance_name}/master[7111]: reload --  
>> version 2.6.2, configuration /etc/postfix
>
> Are you literally seeing dollars and curly-braces in the logs? If
> that's obfuscation then it's very unclear. Someone else may have
> suggestions/corrections for your `make` line, but does ldap now appear
> in the output of `postconf -m`?

He is not obfusticating; that is real log output.

>
>> Second, I've disabled anvil in master.cf, but I still see:
>>
>> Jun 21 11:48:27 www postfix/smtpd[7132]: warning: connect to  
>> private/anvil: Connection refused
>> Jun 21 11:48:27 www postfix/smtpd[7132]: warning: problem talking  
>> to server private/anvil: Connection refused
>>
>> I recall (but can't find it on google) adding anvil=no in main.cf?
>
> I only know enough about anvil to say that you probably don't want, or
> need, to touch it. Why did you disable anvil? It performs connection
> rate-limiting to prevent runaway situations. "It makes too much noise
> in the mail log" isn't a good excuse. Also, I don't see any
> anvil=(yes|no) directive, what makes you think it exists?
> http://www.postfix.org/postconf.5.html#anvil
>
>> I have
>>
>> uid=eplatt,dc=espphotography,dc=com
>> and names of mail, value of [hidden email], [hidden email]
>>  , etc.
>>
>> with
>> alias_maps = ldap:/etc/postfix/ldap-aliases.cf
>> ldap-aliases.cf:
>> server_host = localhost
>> search_base = dc=espphotography, dc=com
>>
>> all mail is rejected:
>>
>> Jun 20 12:43:37 www postfix/smtpd[1703]: NOQUEUE: reject: RCPT from  
>> unknown[192.168.1.4]: 550 5.1.1 <[hidden email]>:  
>> Recipient address rejected: User unknown in local recipient table;  
>> from=<[hidden email]> to=<[hidden email]>  
>> proto=ESMTP helo=<mylaptop.espphotography.com>
>
> I'm no good with LDAP, but I'd suggest trying some manual queries
> against the table, without postfix. Something like this to see if the
> results look "sane":
>
> postmap -q [hidden email] ldap:/etc/postfix/ldap-
> aliases.cf
>
> alias_maps is generally for local delivery, which should mean the
> lookup key is just a name, not a full email address. Does that match
> what you have stored in LDAP?
>
>
>> # postconf -n
>> alias_database = hash:/etc/postfix/aliases
>> alias_maps = hash:/etc/postfix/aliases
>
> Usually one posts the "broken" postconf-n output, but we know what you
> mean (assuming you haven't changed anything else except putting in
> LDAP).
Reply | Threaded
Open this post in threaded view
|

Re: A few postfix issues - LDAP / anvil and sasl?

Wietse Venema
In reply to this post by Evan Platt-3
Evan Platt:
> Jun 21 11:48:27 www postfix/smtpd[7132]: warning: connect to private/anvil: Connection refused
> Jun 21 11:48:27 www postfix/smtpd[7132]: warning: problem talking to server private/anvil: Connection refused

You installed Postfix, and then you copied the old master.cf/main.cf
files over the new files.

To fix the old configuration files:

# postfix upgrade-configuration

        Wietse
Reply | Threaded
Open this post in threaded view
|

Re: A few postfix issues - LDAP / anvil and sasl?

Evan Platt-3
In reply to this post by Barney Desmond

----- Original Message ----

From: Barney Desmond <[hidden email]>
To: [hidden email]
Sent: Monday, June 22, 2009 8:22:45 AM
Subject: Re: A few postfix issues - LDAP / anvil and sasl?


>Are you literally seeing dollars and curly-braces in the logs? If
>that's obfuscation then it's very unclear. Someone else may have
>suggestions/corrections for your `make` line, but does ldap now appear
>in the output of `postconf -m`?

Yes, and yes. That's the exact copy and paste from my mail log.

>I only know enough about anvil to say that you probably don't want, or
>need, to touch it. Why did you disable anvil? It performs connection
>rate-limiting to prevent runaway situations. "It makes too much noise
>in the mail log" isn't a good excuse. Also, I don't see any
>anvil=(yes|no) directive, what makes you think it exists?
>http://www.postfix.org/postconf.5.html#anvil

A WHILE back, I had a problem where anvil would pop up, and I googled the entry I received at the time, and the link was "If you don't use anvil, disable it in main.cf with anvil = (something)...

No, I really don't need / want anvil. My mail is sent to me from my primary MX. My firewall is configured to only allow mail traffic from a few IP's. So... really, no need for anvil. :)


>I'm no good with LDAP, but I'd suggest trying some manual queries
>against the table, without postfix. Something like this to see if the
>results look "sane":

>postmap -q [hidden email] ldap:/etc/postfix/ldap-aliases.cf

I tried a few, they all return nothing..

>alias_maps is generally for local delivery, which should mean the
>lookup key is just a name, not a full email address. Does that match
>what you have stored in LDAP?

D'oh. No, I'll change them.

>Usually one posts the "broken" postconf-n output, but we know what you
>mean (assuming you haven't changed anything else except putting in
>LDAP).

Well, I really CAN if you want - however it breaks postfix (all mail is rejected), so I'd rather not. :)



     
Reply | Threaded
Open this post in threaded view
|

Re: A few postfix issues - LDAP / anvil and sasl?

Evan Platt-3
In reply to this post by Wietse Venema

----- Original Message ----

From: Wietse Venema <[hidden email]>
To: Evan Platt <[hidden email]>
Cc: [hidden email]
Sent: Monday, June 22, 2009 9:12:36 AM
Subject: Re: A few postfix issues - LDAP / anvil and sasl?

>You installed Postfix, and then you copied the old master.cf/main.cf
>files over the new files.

>To fix the old configuration files:

># postfix upgrade-configuration

d'oh! Yes, I missed that.. Just ran it.. That's solved (so far) the postfix errors,

I ran it, didn't see any errors on output, and don't see anything obviously changed in main.cf or master.cf... I do still see

Jun 22 09:53:22 www postfix/smtpd[12728]: warning: smtpd_sasl_auth_enable is true, but SASL support is not compiled in
Jun 22 09:53:22 www postfix/smtpd[12728]: warning: TLS has been selected, but TLS support is not compiled in

So I'm unable to use port 587 to my relayhost... Is there something else I'm missing?

Thanks again.

Evan

Is there a way to completely disable anvil?



     
Reply | Threaded
Open this post in threaded view
|

Re: A few postfix issues - LDAP / anvil and sasl?

Victor Duchovni
In reply to this post by Evan Platt-3
On Mon, Jun 22, 2009 at 09:44:05AM -0700, Evan Platt wrote:

> No, I really don't need / want anvil. My mail is sent to me from my
> primary MX. My firewall is configured to only allow mail traffic from
> a few IP's. So... really, no need for anvil. :)

Parameters to control anvil:

    smtpd_client_event_limit_exceptions = ${smtpd_client_connection_limit_exceptions:$mynetworks}
    smtpd_client_connection_count_limit = 50
    smtpd_client_connection_rate_limit = 0
    smtpd_client_message_rate_limit = 0
    smtpd_client_new_tls_session_rate_limit = 0
    smtpd_client_recipient_rate_limit = 0

Only the connection count limit is enabled by default. To disable it:

    smtpd_client_event_limit_exceptions = static:everyone

Do not remove anvil from maser.cf. Just configure the SMTP server to
not enforce any limits.

--
        Viktor.

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.

To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:
<mailto:[hidden email]?body=unsubscribe%20postfix-users>

If my response solves your problem, the best way to thank me is to not
send an "it worked, thanks" follow-up. If you must respond, please put
"It worked, thanks" in the "Subject" so I can delete these quickly.
Reply | Threaded
Open this post in threaded view
|

Re: A few postfix issues - LDAP / anvil and sasl?

Evan Platt-3
In reply to this post by Evan Platt-3

Googling around, a few suggestions seem to be
make -f Makefile.init makefiles CCARGS='-DUSE_SASL_AUTH -I/sw/include/sasl -DUSE_TLS -I/usr/include/openssl -DUSE_CYRUS_SASL -I/usr/local/lib/sasl2 -DHAS_SSL -I/usr/local/ssl/include/openssl' AUXLIBS='-L/usr/lib -lldap -L/usr/lib -llber -L/usr/lib -lsasl2 -lssl'

I tried this, and the last few lines of make are:

FO -DNO_KQUEUE -DHAS_PCRE -I/sw/include -g -O -I. -I../../include -DMACOSX -c smtpd_resolve.c
cc -DUSE_SASL_AUTH -I/sw/include/sasl -DUSE_TLS -I/usr/include/openssl -DUSE_CYRUS_SASL -I/usr/local/lib/sasl2 -DHAS_SSL -I/usr/local/ssl/include/openssl -DBIND_8_COMPAT -DNO_NETINFO -DNO_KQUEUE -DHAS_PCRE -I/sw/include -g -O -I. -I../../include -DMACOSX -o smtpd smtpd.o smtpd_token.o smtpd_check.o smtpd_chat.o smtpd_state.o smtpd_peer.o smtpd_sasl_proto.o smtpd_sasl_glue.o smtpd_proxy.o smtpd_xforward.o smtpd_dsn_fix.o smtpd_milter.o smtpd_resolve.o ../../lib/libmaster.a ../../lib/libtls.a ../../lib/libdns.a ../../lib/libxsasl.a ../../lib/libmilter.a ../../lib/libglobal.a ../../lib/libutil.a -L/usr/lib -lldap -L/usr/lib -llber -L/usr/lib -lsasl2 -lssl -L/sw/lib -lpcre -flat_namespace
/usr/libexec/gcc/powerpc-apple-darwin8/4.0.1/ld: Undefined symbols:
_sasl_set_path

Am I on the right path? Any suggestions?

Thanks. :)



     
Reply | Threaded
Open this post in threaded view
|

Re: A few postfix issues - LDAP / anvil and sasl?

Victor Duchovni
On Tue, Jun 30, 2009 at 11:36:17AM -0700, Evan Platt wrote:

> At 06:34 PM 6/22/2009, you wrote:
>
>> Googling around, a few suggestions seem to be
>> make -f Makefile.init makefiles CCARGS='-DUSE_SASL_AUTH -I/sw/include/sasl
>> -DUSE_TLS -I/usr/include/openssl -DUSE_CYRUS_SASL -I/usr/local/lib/sasl2
>> -DHAS_SSL -I/usr/local/ssl/include/openssl' AUXLIBS='-L/usr/lib -lldap
>> -L/usr/lib -llber -L/usr/lib -lsasl2 -lssl'
>>
>> I tried this, and the last few lines of make are:
>>
>> FO -DNO_KQUEUE -DHAS_PCRE -I/sw/include -g -O -I. -I../../include -DMACOSX
>> -c smtpd_resolve.c
>> cc -DUSE_SASL_AUTH -I/sw/include/sasl -DUSE_TLS -I/usr/include/openssl
>> -DUSE_CYRUS_SASL -I/usr/local/lib/sasl2 -DHAS_SSL
>> -I/usr/local/ssl/include/openssl -DBIND_8_COMPAT -DNO_NETINFO -DNO_KQUEUE
>> -DHAS_PCRE -I/sw/include -g -O -I. -I../../include -DMACOSX -o smtpd
>> smtpd.o smtpd_token.o smtpd_check.o smtpd_chat.o smtpd_state.o
>> smtpd_peer.o smtpd_sasl_proto.o smtpd_sasl_glue.o smtpd_proxy.o
>> smtpd_xforward.o smtpd_dsn_fix.o smtpd_milter.o smtpd_resolve.o
>> ../../lib/libmaster.a ../../lib/libtls.a ../../lib/libdns.a
>> ../../lib/libxsasl.a ../../lib/libmilter.a ../../lib/libglobal.a
>> ../../lib/libutil.a -L/usr/lib -lldap -L/usr/lib -llber -L/usr/lib -lsasl2
>> -lssl -L/sw/lib -lpcre -flat_namespace
>> /usr/libexec/gcc/powerpc-apple-darwin8/4.0.1/ld: Undefined symbols:
>> _sasl_set_path
>>
>> Am I on the right path? Any suggestions?

You are using header files from SASL 2.1.22 or later, which
define SASL_PATH_TYPE_CONFIG, but libraries from a version
of SASL that does not have "sasl_set_path()".

Change the order of "-L/sw/lib" to put it ahead of "-lsasl2".

--
        Viktor.

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.

To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:
<mailto:[hidden email]?body=unsubscribe%20postfix-users>

If my response solves your problem, the best way to thank me is to not
send an "it worked, thanks" follow-up. If you must respond, please put
"It worked, thanks" in the "Subject" so I can delete these quickly.
Reply | Threaded
Open this post in threaded view
|

Re: A few postfix issues - LDAP / anvil and sasl?

Brian Evans - Postfix List
In reply to this post by Evan Platt-3
Evan Platt wrote:

> At 06:34 PM 6/22/2009, you wrote:
>
>> Googling around, a few suggestions seem to be
>> make -f Makefile.init makefiles CCARGS='-DUSE_SASL_AUTH
>> -I/sw/include/sasl -DUSE_TLS -I/usr/include/openssl -DUSE_CYRUS_SASL
>> -I/usr/local/lib/sasl2 -DHAS_SSL -I/usr/local/ssl/include/openssl'
>> AUXLIBS='-L/usr/lib -lldap -L/usr/lib -llber -L/usr/lib -lsasl2 -lssl'
>>
>
> Just following up (or bumping if you will) my old thread.. Still
> running postfix without tls, LDAP or cyrus sasl...
As http://www.postfix.org/LDAP_README.html#build says, you seem to have
omitted -DHAS_LDAP and, possibly, an include location for it.
Reply | Threaded
Open this post in threaded view
|

Re: A few postfix issues - LDAP / anvil and sasl?

Victor Duchovni
In reply to this post by Victor Duchovni
On Tue, Jun 30, 2009 at 02:04:07PM -0700, Evan Platt wrote:

> At 12:02 PM 6/30/2009, you wrote:
>
>> You are using header files from SASL 2.1.22 or later, which
>> define SASL_PATH_TYPE_CONFIG, but libraries from a version
>> of SASL that does not have "sasl_set_path()".
>
> That's way above my head - is there an easy way to fix that?
>
>> Change the order of "-L/sw/lib" to put it ahead of "-lsasl2".
>
> Am I misunderstanding? It is already? (I'm assuming you mean /usr/lib? I
> don't have a /sw/lib, there's the /usr/lib/ but that is before -lsasl2?
>
> make -f Makefile.init makefiles CCARGS='-DUSE_SASL_AUTH -I/sw/include/sasl
> -DUSE_TLS -I/usr/include/openssl -DUSE_CYRUS_SASL -I/usr/local/lib/sasl2
> -DHAS_SSL -I/usr/local/ssl/include/openssl' AUXLIBS='-L/usr/lib -lldap
> -L/usr/lib -llber -L/usr/lib -lsasl2 -lssl'

There was an -L/sw/lib in your previous post. Where are the libraries
that go with /sw/include/sasl? Put the -L/... setting for these ahead
of "-lsasl2".


--
        Viktor.

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.

To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:
<mailto:[hidden email]?body=unsubscribe%20postfix-users>

If my response solves your problem, the best way to thank me is to not
send an "it worked, thanks" follow-up. If you must respond, please put
"It worked, thanks" in the "Subject" so I can delete these quickly.