Postfix, SASL & LDAP

[uxbod]

Hi:

am trying to get a Postfix 2.10 server to SASL auth against a Zimbra 8 system but it always fails.  This is on a CentOS 6 system and am using the following /etc/sasl2/saslauthd.conf:

ldap_servers: ldap://123.123.123.123:389/
ldap_version: 3
ldap_search_base: dc=domain,dc=com
ldap_filter: (&(|(uid=%u)(zimbraMailDeliveryAddress=%u)(zimbraMailAlias=%u))(zimbraMailStatus=enabled))
ldap_auth_method: bind
ldap_bind_dn: uid=zmpostfix,cn=appaccts,cn=zimbra
ldap_bind_password: <SECRET>

Has anybody else managed to get it to work please ?

[Fabio S. Schmidt]

Hi Uxbod,

Could you paste your Postfix 2.10 configurations and what cyrus-sasl packages you have installed?

[quanah]

Not sure why you're messing with saslauthd.conf. Postfix should be able to auth directly against the LDAP server with a simple bind, just like in a regular Zimbra MTA setup.

[quanah]

Unless you are using it for submission (which isn't clear here). If so, you have to use Zimbra's cyrus-sasl build, as it has a *custom* sasl method compiled in. A standard postfix/sasl isn't going to work well with that