postfix sasl configuration - please help!
 

I've been on this for three days now and am getting nowhere!

ok I have sasl and postfix all working but not together. if I do..

tetstsaslauthd -u useername -p password I get an OK so sasl is working againts the shadow password file.

when trying to authenticate from a mail client I get...

Sep 16 22:42:37 mail postfix/smtpd[17154]: warning: SASL authentication problem: unknown password verifier
Sep 16 22:42:37 mail postfix/smtpd[17154]: warning: 89-145-232-118.xdsl.murphx.net[89.145.232.118]: SASL LOGIN authentication failed: no mechanism available
Sep 16 22:42:37 mail postfix/smtpd[17154]: lost connection after AUTH from 89-145-232-118.xdsl.murphx.net[89.145.232.118]

my main.cf file....
# These are only the parameters changed from a default install
# see /etc/postfix/main.cf.dist for a commented, fuller version of this file.

# These are changed by postfix install script
readme_directory = /usr/share/doc/postfix-2.1.5/README_FILES
sample_directory = /usr/share/doc/postfix-2.1.5/samples
html_directory = /usr/share/doc/postfix-2.1.5/html
sendmail_path = /usr/sbin/sendmail.postfix
setgid_group = postdrop
command_directory = /usr/sbin
manpage_directory = /usr/share/man
daemon_directory = /usr/libexec/postfix/
newaliases_path = /usr/bin/newaliases.postfix
mailq_path = /usr/bin/mailq.postfix
mailbox_size_limit = 0
message_size_limit = 0

#
# User configurable parameters
#
mynetworks_style = class
mynetworks = 200.0.0.0/24, 127.0.0.0/8
myhostname = mail.XXXXXX.com
mydonain = XXXXXXX.com
myorigin = $mydomain
delay_warning_time = 4h
smtpd_banner = $myhostname ESMTP $mail_name
unknown_local_recipient_reject_code = 450
smtp-filter_destination_concurrency_limit = 2
lmtp-filter_destination_concurrency_limit = 2
#
# by IJ - this sorted out delivering locally
mydestination = $myhostname, localhost.$mydomain, localhost, XXXXXX.com, XXXXXXX.com, XXXXXXXXX.com
#
smtpd_sasl_path = smtpd
smtpd_sasl_local_domain =
smtpd_sasl_auth_enable = yes
smtpd_recipient_restrictions =
permit_mynetworks
permit_sasl_authenticated
reject_unauth_destination
broken_sasl_auth_clients = yes

postfix is working fine on the internal lan - sending and receiving ok but simply can't connect from outside with authentication
please help!

For the benefit of others scratching their heads - here's how i got it working

in /etc/postfix/main.cf - add the following lines

smtpd_sasl_path = smtpd
smtpd_sasl_type = cyrus
smtpd_sasl_local_domain =
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
smtpd_recipient_restrictions =
permit_mynetworks
permit_sasl_authenticated
reject_unauth_destination
broken_sasl_auth_clients = yes


/usr/lib/sasl2/smtpd.conf should look like this:

pwcheck_method: saslauthd
mech_list: plain login

And the bit that was really throwing me is saslauthd was starting in the incorrect directory, so I assume that postfix either did not know about it or couldn't see it. the SOCKETDIR used to be /var/spool/postfix/var/run/saslauthd

/etc/sysconfig/saslauthd now looks like this:

SOCKETDIR=/var/run/saslauthd
START=yes
PARAMS="-m /var/run/saslauthd"
MECHANISMS=shadow
FLAGS=

and it now all works....