[Samba] [OT] Postfix sasl authentication help

[L.P.H. van Belle]

Hai Chan Min Wai, 

If you use debian, enable at least imap on localhost, then do the following. 
Use imap for the password check.. 

## install Sasl
apt-get install -y sasl2-bin libsasl2-modules
## backup
cp /etc/default/saslauthd /etc/default/saslauthd.backup

## create sasl folder in /etc/postfix/sasl/ and create the sasl config file
mkdir -p /etc/postfix/sasl/
cat << EOF > /etc/postfix/sasl/smtpd.conf
pwcheck_method: saslauthd
mech_list: PLAIN LOGIN
EOF

## change the default saslauthd options for remote imap (rimap) to localhost 143
sed -i 's/MECHANISMS="pam"/MECHANISMS="rimap"/g' /etc/default/saslauthd
sed -i 's/MECH_OPTIONS=""/MECH_OPTIONS="127.0.0.1 143"/g' /etc/default/saslauthd

## postfix smtp(d) in Chroot mode.. ( by default ) ( add -r for remote imap )
sed -i "s/OPTIONS=\"-c -m \/var\/run\/saslauthd\"/OPTIONS=\"-r -c -m \/var\/spool\/postfix\/var\/run\/saslauthd\"/g" /etc/default/saslauthd

## adduser postfix to sasl group
gpasswd -a postfix sasl

## add override for saslauthd..
## the initscript wil create this directory automatic for you with correct rights.
## ( see : zcat /usr/share/doc/sasl2-bin/README.Debian.gz |less )
dpkg-statoverride --add root sasl 750 /var/spool/postfix/var/run/saslauthd

## enable saslauthd DAEMON
sed -i 's/START=no/START=yes/g' /etc/default/saslauthd

## enable saslauthd for postfix
postconf -e "smtpd_sasl_auth_enable = yes"
## this point to the "smtpd.conf" file in the /etc/postfix/sasl/ directory
postconf -e "smtpd_sasl_path = smtpd"

service saslauthd restart
service postfix restart

##check for directory :
ls -al /var/spool/postfix/var/run/

and your done.

This is tested want works on multipel servers with different backends. 

Greetz, 

Louis


>-----Oorspronkelijk bericht-----
>Van: dcmwai at gmail.com [mailto:samba-bounces at lists.samba.org] 
>Namens Chan Min Wai
>Verzonden: woensdag 18 februari 2015 4:58
>Aan: samba at lists.samba.org
>Onderwerp: [Samba] [OT] Postfix sasl authentication help
>
>Dear all,
>
>Would need some of your advise. 
>
>As I was the trying to get postfix sasl working with samba AD. 
>
>I've try to search online for a few examples some use ldap, 
>kerberos or pam. 
>
>I'm using winbind on that system and I wonder if we can use 
>winbind with sasl. 
>
>Or anyone have a more correct on how it should be done. 
>
>My existing setup was working with ldap before moving to samba4. 
>
>Thank you. 
>
>
>Regards,
>Chan Min Wai
>-- 
>To unsubscribe from this list go to the following URL and read the
>instructions:  https://lists.samba.org/mailman/options/samba
>
>