saslauthd auth failure in CentOS postfix/mysql setup

[jimjxr]

Hi,

I followed the howto to setup postfix/sasl/postfixadmin/mysql on CentOS 5.2, everything works except the auth part, I can use telnet to send email to virtual user in mysql without problem. The only problem is I couldn't do authentication, I got the following error when trying "testsaslauthd -s smtp -u test@mydomain -p mypass -f /var/run/saslauthd/mux":

0: NO "authentication failed"

auth.log shows

saslauthd[17903]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module

saslauthd[17903]: do_auth : auth failure: [user=test@mydomain] [service=smtp] [realm=mydomain] [mech=pam] [reason=PAM auth error]

I suspect this is because pam is not authenticating against mysql, so I installed pam_mysql, and changed
/etc/pam.d/smtp from

#%PAM-1.0
auth include system-auth
account include system-auth

to

#%PAM-1.0
auth required pam_mysql.so user=postfix passwd=pass host=127.0.0.1 db=postfix table=mailbox usercolumn=username passwdcolumn=password crypt=3
account sufficient pam_mysql.so user=postfix passwd=pass host=127.0.0.1 db=postfix table=mailbox usercolumn=username passwdcolumn=password crypt=3

and restarted saslauthd. However testsaslauthd still failed, with a slightly different error in auth.log:

saslauthd[18048]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure
do_auth : auth failure: [user=test@mydomain] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error]

Any ideas?

Thanks

[jimjxr]

It's amazing what a good night sleep can do:
1. Enable mysql query logging in /etc/my.cnf
2. Confirmed mysql is being queried when testsaslauthd is run, so pam_mysql is doing its job.
3. Conclusion: password doesn't match is the only explanation.
4. Fix: Check postfixadmin's config.inc.php, $CONF['encrypt'] is set to 'md5crypt', realized this incompatible with pam_mysql's crypt=3, changed it to 'md5', authentication works now!