smtp authentication failure

classic Classic list List threaded Threaded
9 messages Options
Reply | Threaded
Open this post in threaded view
|

smtp authentication failure

Nasser Heidari-2

Hello,

I'm running postfix on Centos 5.2 with virtual domain and users.

I used http://high5.net/howto/ as a reference.

I can send and receive email with webmail , and receive email with mail client but I can't send email .

Here is maillog error :

 

Nov 15 13:05:48 prmail postfix/smtpd[13408]: connect from unknown[192.168.18.214]

Nov 15 13:05:48 prmail pop3d: LOGIN, user=[hidden email], ip=[::ffff:192.168.18.214], port=[3318]

Nov 15 13:05:48 prmail postfix/smtpd[13408]: warning: SASL authentication problem: unable to open Berkeley db /etc/sasldb2: No such file or directory

Nov 15 13:05:48 prmail postfix/smtpd[13408]: warning: SASL authentication problem: unable to open Berkeley db /etc/sasldb2: No such file or directory

Nov 15 13:05:48 prmail postfix/smtpd[13408]: warning: unknown[192.168.18.214]: SASL LOGIN authentication failed: authentication failure

Nov 15 13:05:48 prmail postfix/smtpd[13408]: disconnect from unknown[192.168.18.214]

Nov 15 13:05:48 prmail pop3d: LOGOUT, user=[hidden email], ip=[::ffff:192.168.18.214], port=[3318], top=0, retr=0, rcvd=18, sent=38, time=0

 

Also here is my sasl configuration :

#pwcheck_method: authdaemond

#log_level: 3

#mech_list: PLAIN LOGIN

#authdaemond_path: /var/spool/authdaemon/socket

pwcheck_method: saslauthd

mech_list: PLAIN LOGIN

minimum_layer: 0

 

(I test both pam authentication and authdaemond ).

 

[root@prmail postfix]# rpm -qa cyrus-sasl

cyrus-sasl-2.1.22-4

[root@prmail postfix]# rpm -qa postfix

postfix-2.3.3-2.el5.centos.mysql_pgsql

 

also I get this message in /var/log/messages

 

Nov 15 13:05:48 prmail postfix/smtpd[13408]: sql_select option missing

Nov 15 13:05:48 prmail postfix/smtpd[13408]: auxpropfunc error no mechanism available

 

Any idea ?


smime.p7s (6K) Download Attachment
Reply | Threaded
Open this post in threaded view
|

Re: smtp authentication failure

mouss-2
Nasser Heidari wrote:

> Hello,
>
> I'm running postfix on Centos 5.2 with virtual domain and users.
>
> I used http://high5.net/howto/ as a reference.
>
> I can send and receive email with webmail , and receive email with mail
> client but I can't send email .
>
> Here is maillog error :
>
>  
>
> Nov 15 13:05:48 prmail postfix/smtpd[13408]: connect from
> unknown[192.168.18.214]
>
> Nov 15 13:05:48 prmail pop3d: LOGIN, user=[hidden email],
> ip=[::ffff:192.168.18.214], port=[3318]
>
> Nov 15 13:05:48 prmail postfix/smtpd[13408]: warning: SASL authentication
> problem: unable to open Berkeley db /etc/sasldb2: No such file or directory
>

cyrus sasl cannot find /etc/sasldb2. either the file does not exist, or
you are running smtpd chrooted and the the file isn't found in the
chroot cage.

The output of the following commands will show more infos:
# grep smtpd master.cf
# ls -l /etc/sasldb2
# ls -l /var/spool/postfix/etc/sasldb2


> [snip]
> (I test both pam authentication and authdaemond ).
>

moving from one config to the other only creates problems (mixing
options... etc).

If your authdaemon is working, it is easier to use it.


>  
> [snip]
Reply | Threaded
Open this post in threaded view
|

RE: smtp authentication failure

Nasser Heidari-2
Hi again.
Thanks for your answer,
I don't run postfix in a jail.

[root@prmail postfix]# grep smtpd master.cf
smtp      inet  n       -       n       -       -       smtpd
587      inet  n       -       n       -       -       smtpd
#submission inet n       -       n       -       -       smtpd
#  -o smtpd_enforce_tls=yes
#  -o smtpd_sasl_auth_enable=yes
#  -o smtpd_client_restrictions=permit_sasl_authenticated,reject
smtps     inet  n       -       n       -       -       smtpd
  -o smtpd_tls_wrappermode=yes
  -o smtpd_sasl_auth_enable=yes
  -o smtpd_client_restrictions=permit_sasl_authenticated,reject

Also I don't want to use sasldb for my authentication; my user information
is in mysql database.


-----Original Message-----
From: [hidden email]
[mailto:[hidden email]] On Behalf Of mouss
Sent: Saturday, November 15, 2008 14:02
To: [hidden email]
Subject: Re: smtp authentication failure

Nasser Heidari wrote:

> Hello,
>
> I'm running postfix on Centos 5.2 with virtual domain and users.
>
> I used http://high5.net/howto/ as a reference.
>
> I can send and receive email with webmail , and receive email with mail
> client but I can't send email .
>
> Here is maillog error :
>
>  
>
> Nov 15 13:05:48 prmail postfix/smtpd[13408]: connect from
> unknown[192.168.18.214]
>
> Nov 15 13:05:48 prmail pop3d: LOGIN, user=[hidden email],
> ip=[::ffff:192.168.18.214], port=[3318]
>
> Nov 15 13:05:48 prmail postfix/smtpd[13408]: warning: SASL authentication
> problem: unable to open Berkeley db /etc/sasldb2: No such file or
directory
>

cyrus sasl cannot find /etc/sasldb2. either the file does not exist, or
you are running smtpd chrooted and the the file isn't found in the
chroot cage.

The output of the following commands will show more infos:
# grep smtpd master.cf
# ls -l /etc/sasldb2
# ls -l /var/spool/postfix/etc/sasldb2


> [snip]
> (I test both pam authentication and authdaemond ).
>

moving from one config to the other only creates problems (mixing
options... etc).

If your authdaemon is working, it is easier to use it.


>  
> [snip]

smime.p7s (6K) Download Attachment
Reply | Threaded
Open this post in threaded view
|

Re[2]: smtp authentication failure

Алексей Доморадов
> Hi again.
> Thanks for your answer,
> I don't run postfix in a jail.
>
> [root@prmail postfix]# grep smtpd master.cf
> smtp      inet  n       -       n       -       -       smtpd
> 587      inet  n       -       n       -       -       smtpd
> #submission inet n       -       n       -       -       smtpd
> #  -o smtpd_enforce_tls=yes
> #  -o smtpd_sasl_auth_enable=yes
> #  -o smtpd_client_restrictions=permit_sasl_authenticated,reject
> smtps     inet  n       -       n       -       -       smtpd
>   -o smtpd_tls_wrappermode=yes
>   -o smtpd_sasl_auth_enable=yes
>   -o smtpd_client_restrictions=permit_sasl_authenticated,reject
>
> Also I don't want to use sasldb for my authentication; my user information
> is in mysql database.
If you store user information in mysql, you also need to install cyrus-sasl-sql package

# yum install cyrus-sasl-sql

And use following smtpd.conf

pwcheck_method: auxprop
mech_list: PLAIN LOGIN CRAM-MD5
auxprop_plugin: sql
sql_engine: mysql
sql_hostnames: localhost
sql_user: postfix
sql_passwd: postfix
sql_database: postfix
sql_select: select password from mailbox where username = '%u@%r' and active='1'
log_level: 3

Use postfixadmin to manage your users in mysql
Reply | Threaded
Open this post in threaded view
|

Re: smtp authentication failure

mouss-2
Алексей Доморадов wrote:
>>[snip]
>>
>> Also I don't want to use sasldb for my authentication; my user information
>> is in mysql database.
> If you store user information in mysql, you also need to install cyrus-sasl-sql package
>

yes. unless he sores passwords encrypted, in which case he should use
authdaemon (as it seems he has it already).

> [snip]
Reply | Threaded
Open this post in threaded view
|

RE: Re[2]: smtp authentication failure

Nasser Heidari-2
In reply to this post by Алексей Доморадов
Hello,
I have been installed this package before:
[root@prmail ~]# rpm -q cyrus-sasl-sql  
cyrus-sasl-sql-2.1.22-4
also I change my smtpd.conf as you mentioned , but I'm still getting this
message in my maillog :

Nov 16 08:52:14 prmail postfix/smtpd[3616]: connect from
unknown[192.168.18.214]
Nov 16 08:52:14 prmail pop3d: LOGIN, user=[hidden email],
ip=[::ffff:192.168.18.214], port=[47762]
Nov 16 08:52:15 prmail pop3d: LOGOUT, user=[hidden email],
ip=[::ffff:192.168.18.214], port=[47762], top=0, retr=0, rcvd=18, sent=38,
time=1
Nov 16 08:52:15 prmail postfix/smtpd[3616]: warning: SASL authentication
problem: unable to open Berkeley db /etc/sasldb2: No such file or directory
Nov 16 08:52:15 prmail postfix/smtpd[3616]: warning: SASL authentication
problem: unable to open Berkeley db /etc/sasldb2: No such file or directory
Nov 16 08:52:15 prmail postfix/smtpd[3616]: warning:
unknown[192.168.18.214]: SASL LOGIN authentication failed: authentication
failure
Nov 16 08:52:15 prmail postfix/smtpd[3616]: disconnect from
unknown[192.168.18.214]

And here is my /var/log/messages last lines:

Nov 16 08:52:14 prmail postfix/smtpd[3616]: sql_select option missing
Nov 16 08:52:14 prmail postfix/smtpd[3616]: auxpropfunc error no mechanism
available
Nov 16 08:52:14 prmail postfix/smtpd[3616]: _sasl_plugin_load failed on
sasl_auxprop_plug_init for plugin: sql
Nov 16 08:52:14 prmail postfix/smtpd[3616]: connect from
unknown[192.168.18.214]
Nov 16 08:52:14 prmail pop3d: LOGIN, user=[hidden email],
ip=[::ffff:192.168.18.214], port=[47762]
Nov 16 08:52:15 prmail pop3d: LOGOUT, user=[hidden email],
ip=[::ffff:192.168.18.214], port=[47762], top=0, retr=0, rcvd=18, sent=38,
time=1
Nov 16 08:52:15 prmail postfix/smtpd[3616]: warning: SASL authentication
problem: unable to open Berkeley db /etc/sasldb2: No such file or directory
Nov 16 08:52:15 prmail postfix/smtpd[3616]: warning: SASL authentication
problem: unable to open Berkeley db /etc/sasldb2: No such file or directory
Nov 16 08:52:15 prmail postfix/smtpd[3616]: warning:
unknown[192.168.18.214]: SASL LOGIN authentication failed: authentication
failure
Nov 16 08:52:15 prmail postfix/smtpd[3616]: disconnect from
unknown[192.168.18.214]

I think there is problem with sasl , because it seems sasl want to use
/etc/sasldb2 instead of mysql !
Any idea ?
Thanks .

-----Original Message-----
From: Алексей Доморадов [mailto:[hidden email]]
Sent: Saturday, November 15, 2008 19:36
To: Nasser Heidari
Cc: [hidden email]
Subject: Re[2]: smtp authentication failure

> Hi again.
> Thanks for your answer,
> I don't run postfix in a jail.
>
> [root@prmail postfix]# grep smtpd master.cf
> smtp      inet  n       -       n       -       -       smtpd
> 587      inet  n       -       n       -       -       smtpd
> #submission inet n       -       n       -       -       smtpd
> #  -o smtpd_enforce_tls=yes
> #  -o smtpd_sasl_auth_enable=yes
> #  -o smtpd_client_restrictions=permit_sasl_authenticated,reject
> smtps     inet  n       -       n       -       -       smtpd
>   -o smtpd_tls_wrappermode=yes
>   -o smtpd_sasl_auth_enable=yes
>   -o smtpd_client_restrictions=permit_sasl_authenticated,reject
>
> Also I don't want to use sasldb for my authentication; my user information
> is in mysql database.
If you store user information in mysql, you also need to install
cyrus-sasl-sql package

# yum install cyrus-sasl-sql

And use following smtpd.conf

pwcheck_method: auxprop
mech_list: PLAIN LOGIN CRAM-MD5
auxprop_plugin: sql
sql_engine: mysql
sql_hostnames: localhost
sql_user: postfix
sql_passwd: postfix
sql_database: postfix
sql_select: select password from mailbox where username = '%u@%r' and
active='1'
log_level: 3

Use postfixadmin to manage your users in mysql

smime.p7s (6K) Download Attachment
Reply | Threaded
Open this post in threaded view
|

Re: smtp authentication failure

mouss-2
Nasser Heidari wrote:

> Hello,
> I have been installed this package before:
> [root@prmail ~]# rpm -q cyrus-sasl-sql  
> cyrus-sasl-sql-2.1.22-4
> also I change my smtpd.conf as you mentioned , but I'm still getting this
> message in my maillog :
>
> [snip]
>
> And here is my /var/log/messages last lines:
>
> Nov 16 08:52:14 prmail postfix/smtpd[3616]: sql_select option missing

sasl doesn't see sql_select in smtpd.conf. please download saslfinger
and run it (saslfinger -s). then post the output here.

> [snip]

Reply | Threaded
Open this post in threaded view
|

RE: smtp authentication failure

Nasser Heidari-2
Here is my saslfinger output:

[root@prmail ~]# saslfinger -s
saslfinger - postfix Cyrus sasl configuration Sun Nov 16 10:23:19 IRST 2008
version: 1.0.2
mode: server-side SMTP AUTH

-- basics --
Postfix: 2.3.3
System: CentOS release 5.2 (Final)

-- smtpd is linked to --
        libsasl2.so.2 => /usr/lib/libsasl2.so.2 (0x00f2c000)

-- active SMTP AUTH and TLS parameters for smtpd --
broken_sasl_auth_clients = yes
smtpd_sasl_auth_enable = yes
smtpd_sasl_authenticated_header = yes
smtpd_sasl_local_domain =
smtpd_sasl_path = smptd
smtpd_sasl_security_options = noanonymous
smtpd_tls_auth_only = no
smtpd_tls_cert_file = /usr/local/ssl/mail.mydomain.net.crt
smtpd_tls_key_file = /usr/local/ssl/mail.mydomain.net.key
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_database = btree:/etc/postfix/tls_smtpd_scache
smtpd_use_tls = yes


-- listing of /usr/lib/sasl --
total 36
drwxr-xr-x  2 root root  4096 Nov 15 10:22 .
drwxr-xr-x 42 root root 20480 Nov 11 04:02 ..
-rw-r--r--  1 root root    47 Sep  2 14:27 OLD-smtp.conf
-rw-r-----  1 root root   473 Nov 16 08:45 smtpd.conf

-- listing of /usr/lib/sasl2 --
total 2956
drwxr-xr-x  2 root root   4096 Nov 16 08:45 .
drwxr-xr-x 42 root root  20480 Nov 11 04:02 ..
-rwxr-xr-x  1 root root    884 Jan  7  2007 libanonymous.la
-rwxr-xr-x  1 root root  14372 Jan  7  2007 libanonymous.so
-rwxr-xr-x  1 root root  14372 Jan  7  2007 libanonymous.so.2
-rwxr-xr-x  1 root root  14372 Jan  7  2007 libanonymous.so.2.0.22
-rwxr-xr-x  1 root root    856 Jan  7  2007 liblogin.la
-rwxr-xr-x  1 root root  14752 Jan  7  2007 liblogin.so
-rwxr-xr-x  1 root root  14752 Jan  7  2007 liblogin.so.2
-rwxr-xr-x  1 root root  14752 Jan  7  2007 liblogin.so.2.0.22
-rwxr-xr-x  1 root root    856 Jan  7  2007 libplain.la
-rwxr-xr-x  1 root root  14848 Jan  7  2007 libplain.so
-rwxr-xr-x  1 root root  14848 Jan  7  2007 libplain.so.2
-rwxr-xr-x  1 root root  14848 Jan  7  2007 libplain.so.2.0.22
-rwxr-xr-x  1 root root    930 Jan  7  2007 libsasldb.la
-rwxr-xr-x  1 root root 905200 Jan  7  2007 libsasldb.so
-rwxr-xr-x  1 root root 905200 Jan  7  2007 libsasldb.so.2
-rwxr-xr-x  1 root root 905200 Jan  7  2007 libsasldb.so.2.0.22
-rwxr-xr-x  1 root root    878 Jan  7  2007 libsql.la
-rwxr-xr-x  1 root root  23084 Jan  7  2007 libsql.so
-rwxr-xr-x  1 root root  23084 Jan  7  2007 libsql.so.2
-rwxr-xr-x  1 root root  23084 Jan  7  2007 libsql.so.2.0.22
-rw-r-----  1 root root    473 Nov 16 08:45 smtpd.conf
-rw-r--r--  1 root root    138 Sep  2 11:34 smtpd.conf.rpmsave

-- listing of /etc/sasl2 --
total 20
drwxr-xr-x  2 root root 4096 Nov 15 10:47 .
drwxr-xr-x 54 root root 4096 Nov 15 10:18 ..
-rw-r-----  1 root root  473 Nov 16 08:45 smtpd.conf




-- content of /usr/lib/sasl/smtpd.conf --
# smtpd.conf
#pwcheck_method: authdaemond
#log_level: 3
#mech_list: PLAIN LOGIN
#authdaemond_path: /var/spool/authdaemon/socket
#pwcheck_method: saslauthd
#mech_list: PLAIN LOGIN
#minimum_layer: 0
pwcheck_method: auxprop
mech_list: PLAIN LOGIN CRAM-MD5
auxprop_plugin: sql
sql_engine: mysql
sql_hostnames: localhost
sql_user: --- replaced ---
sql_passwd: --- replaced ---
sql_database: postfix
sql_select: select password from mailbox where username = '%u@%r' and
active='1'
log_level: 3

-- content of /usr/lib/sasl2/smtpd.conf --
# smtpd.conf
#pwcheck_method: authdaemond
#log_level: 3
#mech_list: PLAIN LOGIN
#authdaemond_path: /var/spool/authdaemon/socket
#pwcheck_method: saslauthd
#mech_list: PLAIN LOGIN
#minimum_layer: 0
pwcheck_method: auxprop
mech_list: PLAIN LOGIN CRAM-MD5
auxprop_plugin: sql
sql_engine: mysql
sql_hostnames: localhost
sql_user: --- replaced ---
sql_passwd: --- replaced ---
sql_database: postfix
sql_select: select password from mailbox where username = '%u@%r' and
active='1'
log_level: 3

-- content of /etc/sasl2/smtpd.conf --
# smtpd.conf
#pwcheck_method: authdaemond
#log_level: 3
#mech_list: PLAIN LOGIN
#authdaemond_path: /var/spool/authdaemon/socket
#pwcheck_method: saslauthd
#mech_list: PLAIN LOGIN
#minimum_layer: 0
pwcheck_method: auxprop
mech_list: PLAIN LOGIN CRAM-MD5
auxprop_plugin: sql
sql_engine: mysql
sql_hostnames: localhost
sql_user: --- replaced ---
sql_passwd: --- replaced ---
sql_database: postfix
sql_select: select password from mailbox where username = '%u@%r' and
active='1'
log_level: 3

-- content of /etc/postfix/sasl/smtpd.conf --
# smtpd.conf
#pwcheck_method: authdaemond
#log_level: 3
#mech_list: PLAIN LOGIN
#authdaemond_path: /var/spool/authdaemon/socket
#pwcheck_method: saslauthd
#mech_list: PLAIN LOGIN
#minimum_layer: 0
pwcheck_method: auxprop
mech_list: PLAIN LOGIN CRAM-MD5
auxprop_plugin: sql
sql_engine: mysql
sql_hostnames: localhost
sql_user: --- replaced ---
sql_passwd: --- replaced ---
sql_database: postfix
sql_select: select password from mailbox where username = '%u@%r' and
active='1'
log_level: 3


-- active services in /etc/postfix/master.cf --
# service type  private unpriv  chroot  wakeup  maxproc command + args
#               (yes)   (yes)   (yes)   (never) (100)
smtp      inet  n       -       n       -       -       smtpd
587      inet  n       -       n       -       -       smtpd
smtps     inet  n       -       n       -       -       smtpd
  -o smtpd_tls_wrappermode=yes
  -o smtpd_sasl_auth_enable=yes
  -o smtpd_client_restrictions=permit_sasl_authenticated,reject
pickup    fifo  n       -       n       60      1       pickup
cleanup   unix  n       -       n       -       0       cleanup
qmgr      fifo  n       -       n       300     1       qmgr
tlsmgr    unix  -       -       n       1000?   1       tlsmgr
rewrite   unix  -       -       n       -       -       trivial-rewrite
bounce    unix  -       -       n       -       0       bounce
defer     unix  -       -       n       -       0       bounce
trace     unix  -       -       n       -       0       bounce
verify    unix  -       -       n       -       1       verify
flush     unix  n       -       n       1000?   0       flush
proxymap  unix  -       -       n       -       -       proxymap
smtp      unix  -       -       n       -       -       smtp
relay     unix  -       -       n       -       -       smtp
        -o fallback_relay=
showq     unix  n       -       n       -       -       showq
error     unix  -       -       n       -       -       error
discard   unix  -       -       n       -       -       discard
local     unix  -       n       n       -       -       local
virtual   unix  -       n       n       -       -       virtual
lmtp      unix  -       -       n       -       -       lmtp
anvil     unix  -       -       n       -       1       anvil
scache    unix  -       -       n       -       1       scache
maildrop  unix  -       n       n       -       -       pipe
  flags=DRhu user=vmail argv=/usr/bin/maildrop i-w 90 -d ${recipient}
old-cyrus unix  -       n       n       -       -       pipe
  flags=R user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -m ${extension}
${user}
cyrus     unix  -       n       n       -       -       pipe
  user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -r ${sender} -m
${extension} ${user}
uucp      unix  -       n       n       -       -       pipe
  flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail
($recipient)
ifmail    unix  -       n       n       -       -       pipe
  flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp     unix  -       n       n       -       -       pipe
  flags=Fq. user=foo argv=/usr/local/sbin/bsmtp -f $sender $nexthop
$recipient

-- mechanisms on localhost --
250-AUTH PLAIN LOGIN
250-AUTH=PLAIN LOGIN

-- end of saslfinger output --

-----Original Message-----


From: [hidden email]
[mailto:[hidden email]] On Behalf Of mouss
Sent: Sunday, November 16, 2008 10:19
To: [hidden email]
Subject: Re: smtp authentication failure

Nasser Heidari wrote:

> Hello,
> I have been installed this package before:
> [root@prmail ~]# rpm -q cyrus-sasl-sql  
> cyrus-sasl-sql-2.1.22-4
> also I change my smtpd.conf as you mentioned , but I'm still getting this
> message in my maillog :
>
> [snip]
>
> And here is my /var/log/messages last lines:
>
> Nov 16 08:52:14 prmail postfix/smtpd[3616]: sql_select option missing
sasl doesn't see sql_select in smtpd.conf. please download saslfinger
and run it (saslfinger -s). then post the output here.

> [snip]


smime.p7s (6K) Download Attachment
Reply | Threaded
Open this post in threaded view
|

Re: smtp authentication failure

mouss-2
Nasser Heidari wrote:

> Here is my saslfinger output:
>
> [root@prmail ~]# saslfinger -s
> saslfinger - postfix Cyrus sasl configuration Sun Nov 16 10:23:19 IRST 2008
> version: 1.0.2
> mode: server-side SMTP AUTH
>
> -- basics --
> Postfix: 2.3.3
> System: CentOS release 5.2 (Final)
>
> -- smtpd is linked to --
>         libsasl2.so.2 => /usr/lib/libsasl2.so.2 (0x00f2c000)
>
> [snip]
> -- listing of /usr/lib/sasl2 --
> total 2956
> drwxr-xr-x  2 root root   4096 Nov 16 08:45 .
> drwxr-xr-x 42 root root  20480 Nov 11 04:02 ..
> -rwxr-xr-x  1 root root    884 Jan  7  2007 libanonymous.la
> -rwxr-xr-x  1 root root  14372 Jan  7  2007 libanonymous.so
> -rwxr-xr-x  1 root root  14372 Jan  7  2007 libanonymous.so.2
> -rwxr-xr-x  1 root root  14372 Jan  7  2007 libanonymous.so.2.0.22
> -rwxr-xr-x  1 root root    856 Jan  7  2007 liblogin.la
> -rwxr-xr-x  1 root root  14752 Jan  7  2007 liblogin.so
> -rwxr-xr-x  1 root root  14752 Jan  7  2007 liblogin.so.2
> -rwxr-xr-x  1 root root  14752 Jan  7  2007 liblogin.so.2.0.22
> -rwxr-xr-x  1 root root    856 Jan  7  2007 libplain.la
> -rwxr-xr-x  1 root root  14848 Jan  7  2007 libplain.so
> -rwxr-xr-x  1 root root  14848 Jan  7  2007 libplain.so.2
> -rwxr-xr-x  1 root root  14848 Jan  7  2007 libplain.so.2.0.22
> -rwxr-xr-x  1 root root    930 Jan  7  2007 libsasldb.la
> -rwxr-xr-x  1 root root 905200 Jan  7  2007 libsasldb.so
> -rwxr-xr-x  1 root root 905200 Jan  7  2007 libsasldb.so.2
> -rwxr-xr-x  1 root root 905200 Jan  7  2007 libsasldb.so.2.0.22
> -rwxr-xr-x  1 root root    878 Jan  7  2007 libsql.la
> -rwxr-xr-x  1 root root  23084 Jan  7  2007 libsql.so
> -rwxr-xr-x  1 root root  23084 Jan  7  2007 libsql.so.2
> -rwxr-xr-x  1 root root  23084 Jan  7  2007 libsql.so.2.0.22
> -rw-r-----  1 root root    473 Nov 16 08:45 smtpd.conf
> -rw-r--r--  1 root root    138 Sep  2 11:34 smtpd.conf.rpmsave
>

so you have plain, login and sql modules.


> [snip]
> -- content of /usr/lib/sasl2/smtpd.conf --
> # smtpd.conf
> #pwcheck_method: authdaemond
> #log_level: 3
> #mech_list: PLAIN LOGIN
> #authdaemond_path: /var/spool/authdaemon/socket
> #pwcheck_method: saslauthd
> #mech_list: PLAIN LOGIN
> #minimum_layer: 0
> pwcheck_method: auxprop
> mech_list: PLAIN LOGIN CRAM-MD5

remove CRAM-MD5. you don't have the module installed anyway.

> auxprop_plugin: sql
> sql_engine: mysql
> sql_hostnames: localhost
> sql_user: --- replaced ---
> sql_passwd: --- replaced ---
> sql_database: postfix
> sql_select: select password from mailbox where username = '%u@%r' and
> active='1'
> log_level: 3
>
> [snip]
>
> -- mechanisms on localhost --
> 250-AUTH PLAIN LOGIN
> 250-AUTH=PLAIN LOGIN
>
> -- end of saslfinger output --

now restart postfix and try again.