shell $> apt-get install sasl2-bin postfix dovecot-pop3d 3.修改 saslauthd 配置文件 shell $> vim /etc/default /saslauthd START=yes DESC="SASL Authentication Daemon" NAME="saslauthd" MECHANISMS="shadow" MECH_OPTIONS ="" THREADS=5 OPTIONS="-c -m /var/spool/postfix/var/run/saslauthd" 4.重启 saslauthd 服务 shell $> /etc/init.d /saslauthd restart ln -s /var/spool/postfix/var/run/saslauthd/ /var/run/saslauthd ## 不做这步操作,验证总是报错. shell
memcached -S -d -u nobody ” SASL认证也可以有很多种认证机制,比如pam,shadow,ldap等 下面配置成使用shadow方式去认证 “ #修改/etc/sysconfig/saslauthd 5.5.17 make & make install #增加一个软链接 ln -s /lib/security/pam_mysql.so /lib64/security/pam_mysql.so #修改saslauthd passwdcolumn=secret crypt=0 sqllog=1 verbose=1 #新增加memcached的配置文件/etc/sasl2/memcached.conf pwcheck_method: saslauthd #重启saslauthd /etc/init.d/saslauthd restart #测试saslauthd认证已经成功 /usr/sbin/testsaslauthd -s /etc/pam.d/
0POSTGREY_DELAY=300POSTGREY_MAX_AGE=35POSTGREY_TEXT="Delayed by Postgrey"POSTGREY_AUTO_WHITELIST_CLIENTS=5ENABLE_SASLAUTHD =0SASLAUTHD_MECHANISMS=SASLAUTHD_MECH_OPTIONS=SASLAUTHD_LDAP_SERVER=SASLAUTHD_LDAP_BIND_DN=SASLAUTHD_LDAP_PASSWORD =SASLAUTHD_LDAP_SEARCH_BASE=SASLAUTHD_LDAP_FILTER=SASLAUTHD_LDAP_START_TLS=SASLAUTHD_LDAP_TLS_CHECK_PEER =SASLAUTHD_LDAP_TLS_CACERT_FILE=SASLAUTHD_LDAP_TLS_CACERT_DIR=SASLAUTHD_LDAP_PASSWORD_ATTR=SASLAUTHD_LDAP_AUTH_METHOD =SASLAUTHD_LDAP_MECH=SRS_SENDER_CLASSES=envelope_senderSRS_EXCLUDE_DOMAINS=SRS_SECRET=DEFAULT_RELAY_HOST
实现 SMTP 发信认证 1、 启动 saslauthd 认证服务 [root@mail ~]# yum -y install cyrus-sasl //此包默认通常已安装 [root @mail ~]# systemctl restart saslauthd [root@mail ~]# systemctl enable saslauthd [root@mail ~]# testsaslauthd //检查saslauthd服务 2、编辑 postfix 配置,启用SMTP认证 [root@mail ~]# vim /etc/postfix/main.cf # 设置本地网络 mynetworks permit_sasl_authenticated, reject_unauth_destination [root@mail ~]# systemctl restart saslauthd
# less/var/log/audit/audit.log Dec 15 03:24:46 saslauthd[5892]: do_auth : auth failure: [user =test@cto.com] [service=smtp] [realm=cto.com] [mech=pam] [reason=PAM autherror] Dec 15 03:25:15 saslauthd user=test@cto.com] [service=smtp] [realm=cto.com] [mech=pam] [reason=PAM autherror] Dec 15 03:25:45 saslauthd
安装软件 [root@slave-node ~]# yum install -y sendmail [root@slave-node ~]# yum install -y sendmail-cf 启动saslauthd 服务进行SMTP验证(默认是安装的,如果没有,就手动安装) [root@slave-node ~]# service saslauthd start Starting saslauthd: restart Stopping saslauthd: [ OK ] Starting saslauthd: [ OK ] 将服务加入自启行列 [root@slave-node ~]# chkconfig sendmail on [root@slave-node ~]# chkconfig saslauthd saslauthd 0:off 1:off 2:on 3:on 4:on 5:on 6:off 三、测试发送邮箱 (1)第一种方式:安装sendmail即可使用
on vi /etc/sysconfig/saslauthd 修改 /etc/sysconfig/saslauthd # vim /etc/sysconfig/saslauthd # Directory in which to place saslauthd’s listening socket, pid file, and so # on. SOCKETDIR=/var/run/saslauthd # Mechanism to use when checking passwords. Run “saslauthd -v” to get a list # of which mechanism your installation was compiled with the ablity MECH=shadow 修改 vi /etc/sasl2/smtpd.conf pwcheck_method: saslauthd mech_list: plain login 测试 saslauthd
~]# tail /etc/passwdsystemd-coredump:x:999:997:systemd Core Dumper:/:/sbin/nologinsaslauth:x:998:76:Saslauthd user:/run/saslauthd:/sbin/nologindhcpd:x:177:177:DHCP server:/:/sbin/nologinsshd:x:74:74:Privilege-separated :/:/usr/sbin/nologinsystemd-coredump:x:999:997:systemd Core Dumper:/:/sbin/nologinsaslauth:x:998:76:Saslauthd user:/run/saslauthd:/sbin/nologindhcpd:x:177:177:DHCP server:/:/sbin/nologinsshd:x:74:74:Privilege-separated user:/run/saslauthd:/sbin/nologindhcpd:x:177:177:DHCP server:/:/sbin/nologinsshd:x:74:74:Privilege-separated
= # 空 => 无 # 例如,对于 SASLAUTHD_MECHANISMS rimap,您需要指定 imap 服务器的 ip-地址/服务器名 ==> xxx.xxx.xxx.xxx SASLAUTHD_MECH_OPTIONS SASLAUTHD_LDAP_SERVER= # 空 => 使用 LDAP_BIND_DN 的值 # 指定一个有权搜索目录树的对象 # 例如 active directory:SASLAUTHD_LDAP_BIND_DN ,dc=net SASLAUTHD_LDAP_BIND_DN= # 空 => 使用 LDAP_BIND_PW 的值 SASLAUTHD_LDAP_PASSWORD= # 空 => 使用 LDAP_SEARCH_BASE SASLAUTHD_LDAP_START_TLS= # 空 => 否 # yes => 要求并验证服务器证书 # 如果为 yes,您必须/可以指定 SASLAUTHD_LDAP_TLS_CACERT_FILE 或 SASLAUTHD_LDAP_TLS_CACERT_DIR。
Ss 01:19 0:00 /usr/sbin/saslauthd -m /run/saslauthd -a pam root 63132 0.0 0.0 69648 676 S 01:19 0:00 /usr/sbin/saslauthd -m /run/saslauthd -a pam root 63133 0.0 0.0 69648 676 S 01:19 0:00 /usr/sbin/saslauthd -m /run/saslauthd -a pam root 63134 0.0 0.0 69648 676 S 01:19 0:00 /usr/sbin/saslauthd -m /run/saslauthd -a pam root 63135 0.0 0.0 69648 676 S 01:19 0:00 /usr/sbin/saslauthd -m /run/saslauthd -a pam root 63144 0.0 0.0 112680 972
usr/local/lib/sasl2/Sendmail.conf并向其中添加以下内容: vim /usr/local/lib/sasl2/Sendmail.conf pwcheck_method: saslauthd portmaster security/cyrus-sasl2-saslauthd 编辑系统配置文件/etc/rc.conf,并在文件末尾添加以下配置参数。 vim /etc/rc.conf hostname = "your_hostname" sendmail_enable="YES" saslauthd_enable="YES" 现在开始saslauthd service saslauthd start 你应该看到这个输出: usage: hostname [-fs] [name-of-host] usage: hostname [-fs] [name-of-host ] Starting saslauthd.
sbin/nologin nfsnobody:x:65534:65534:Anonymous NFS User:/var/lib/nfs:/sbin/nologin saslauth:x:996:76:Saslauthd user:/run/saslauthd:/sbin/nologin avahi:x:70:70:Avahi mDNS/DNS-SD Stack:/var/run/avahi-daemon:/sbin/
local_recipient_maps这个配置,收邮件收不到, 2,cyrus-sasl配置 vim /etc/sasl2/smtpd.conf //在文件尾部加上以下内容 log_level: 3 //记录log的模式 saslauthd_path :/var/run/saslauthd/mux //设置一下smtp寻找cyrus-sasl的路径 3,配置cyrus-imapd cyrus-imapd的主要配置文件有下面三个 /etc/sysconfig
K66gpsd K75netfs K84NetworkManager K85rpcidmapd K88rsyslog K92ip6tables S01halt K10saslauthd K66gpsd K75netfs K84wpa_supplicant K86nfslock K89iscsid K92iptables K10saslauthd K89rdisc S08iptables S18rpcidmapd S25cups S35qemu S85ksmtuned S99local K10saslauthd K85mdmonitor S07iscsid S13rpcbind S23NetworkManager S26udev-post S84ksm S99local K10saslauthd K66gpsd K75netfs K84NetworkManager K85rpcidmapd K88rsyslog K92ip6tables S01reboot K10saslauthd
72::/:/sbin/nologin dockerroot:x:995:992:Docker User:/var/lib/docker:/sbin/nologin saslauth:x:994:76:Saslauthd user:/run/saslauthd:/sbin/nologin mailnull:x:47:47::/var/spool/mqueue:/sbin/nologin smmsp:x:51:51::/
| /var/www | /sbin/nologin | | saslauth | x | 498 | 76 | Saslauthd | /var/www | /sbin/nologin | | saslauth | x | 498 | 76 | Saslauthd
S开头的全部开机执行;K开头的开机不执行) 例如: K01lxc K95cgconfig S13iscsi S54cloud-final K10saslauthd
nscd:x:28:28:NSCD Daemon:/:/sbin/nologin admin:x:1000:1000::/home/admin:/bin/bash saslauth:x:997:76:Saslauthd user:/run/saslauthd:/sbin/nologin zabbix:x:996:993:Zabbix Monitoring System:/var/lib/zabbix:/sbin/nologin 为分隔符截取文件第6列内容 [root@xiaoge opt]# cut -d ':' -f 6 passwd.txt /var/lib/chrony /etc/ntp / / /home/admin /run/saslauthd
smtpd_sasl_security_options = noanonymous #取消smtp的匿名登录 此项默认值为noanonymous 此项请务必指定为noanonymous(5).安装sasldb、saslauthd
:/:/usr/sbin/nologinsystemd-coredump:x:999:997:systemd Core Dumper:/:/sbin/nologinsaslauth:x:998:76:Saslauthd user:/run/saslauthd:/sbin/nologindhcpd:x:177:177:DHCP server:/:/sbin/nologinsshd:x:74:74:Privilege-separated