SASL configuration mistake
hi,
in the file /etc/postfix/sasl/smtp.conf you use saslauthd as pwcheck_method with MECHANISMS="pam" defined in /etc/default/saslauthd.
But you define unused auxprop module's options like :
auxprop_plugin: mysql sql_hostnames: 127.0.0.1 sql_user: ispconfig sql_passwd: secretpassword sql_database: dbispconfig sql_select: select password from mail_user where login = '%u'
For me, this is a nonsense !. Sorry for that.
Second, why do you use saslauthd .? i' don't understand ? auxprop: is more usable and permit digest authentication (with a cleartext password in database, off course) and do not keep process running unlike saslauthd daemon.
please consider to change smtp.conf configuration, remove saslauthd starting daemon process and useless smtp pam configuration.
/etc/postfix/sasl/smtp.conf plan :
pwcheck_method: auxpropmech_list: PLAIN LOGIN CRAM-MD5 DIGEST-MD5 allow_plaintext: true auxprop_plugin: sql sql_engine: mysql sql_hostnames: 127.0.0.1 sql_user: username sql_passwd: verysecretpassword sql_database: databasename sql_select: select clearpassword from mail_user where login = '%u@%r' and postfix = 'y'
CRAM-MD5 & DIGEST-MD5 only usable with clear text password in database. (this not a security risk) and permit secure login with courier imapd.
Thanks for your work :)
best regards;
Gpkfr