Solution to "unable to open Berkeley db /etc/sasldb2"

Solution to "unable to open Berkeley db /etc/sasldb2"

am 24.11.2005 13:40:13 von Spiros Ioannou

I have fedora (FC4).
Well I searched over 5 hours to get the answer for this problem, and I found
it in a debian system comments. Now it works perfect.
WHERE IN THE WORLD IS auto_transition DOCUMENTED???

Solution:

from the debian sample Sendmail.conf:
#- auto_transition: [false]
# if true, automatically add secrets to the secret database when
# PLAIN or check_password is used, so in the future the user can
# use the more secure mechanisms.

add the "auto_transition: true" to Sendmail.conf

First create /etc/sasldb2:
1)saslpasswd2 -c dummy
(enter a pass)
2) modify Sendmail.conf:
/usr/lib/sasl2/Sendmail.conf
pwcheck_method:saslauthd
auto_transition: true

you can check its contents with sasldblistusers2

and saslauthd runs like that:
ps -ef|grep sasl
root .... /usr/sbin/saslauthd -m /var/run/saslauthd -a shadow

and this is the auth part of my sendmail.mc:
------------
dnl ### do SMTPAUTH
define(`confAUTH_MECHANISMS', `LOGIN PLAIN DIGEST-MD5 CRAM-MD5')dnl
TRUST_AUTH_MECH(`LOGIN PLAIN DIGEST-MD5 CRAM-MD5')dnl

dnl ### do STARTTLS
define(`confCACERT_PATH', `/etc/mail/certs')dnl
define(`confCACERT', `/etc/mail/certs/cacert.pem')dnl
define(`confSERVER_CERT', `/etc/mail/certs/sendmail.pem')dnl
define(`confSERVER_KEY', `/etc/mail/certs/sendmail.pem')dnl
define(`confCLIENT_CERT', `/etc/mail/certs/sendmail.pem')dnl
define(`confCLIENT_KEY', `/etc/mail/certs/sendmail.pem')dnl
DAEMON_OPTIONS(`Port=smtp, Name=MTA')
DAEMON_OPTIONS(`Family=inet, Port=465, Name=MSA-auth, M=Ea')
DAEMON_OPTIONS(`Family=inet, Port=4650, Name=MSA-auth, M=Ea')


------------

Spiros

Re: Solution to "unable to open Berkeley db /etc/sasldb2"

am 29.11.2005 13:35:24 von Tilman Schmidt

Spiros Ioannou wrote:

> Well I searched over 5 hours to get the answer for this problem, and I found
> it in a debian system comments. Now it works perfect.
> WHERE IN THE WORLD IS auto_transition DOCUMENTED???

In the Cyrus SASL documentation. On my system, it is documented in
/usr/share/doc/packages/cyrus-sasl/doc/options.html and also mentioned
in /usr/share/doc/packages/cyrus-sasl/doc/sysadmin.html.

HTH
Tilman

--
Tilman Schmidt t.schmidt@phoenixsoftware.de
Phoenix Software GmbH Tel. +49 228 97199 0
Adolf-Hombitzer-Str. 12 Fax +49 228 97199 99
53227 Bonn, Germany http://www.phoenixsoftware.de