[TUTORIAL] StickyProxmox Mail Gateway v8 with Authentication

[hoanv9]

I am going with proxmox as MTA and try to make it authenticate with our Active Directory. Going through many thread and guideline but I can not make it work with saslauthd and ldap.
Is there anyone have the exp on this?


Small write-up on how to do this in Proxmox Mail Gateway 6.x:

• install packages for saslauthd:
  Code:
  apt-get install sasl2-bin libsasl2-modules
• modify /etc/default/saslauthd:
  Code:
  START=yes
  DESC="SASL Authentication Daemon"
  NAME="saslauthd"
  MECHANISMS="ldap"
  MECH_OPTIONS=""
  THREADS=5
  OPTIONS="-c -m /var/run/saslauthd"
• create /etc/saslauthd.conf (use a dedicated service account on ldap/ad for pmg):
  Code:
  ldap_use_sasl: yes
  ldap_servers: ldap://10.1.1.10:389
  ldap_search_base: OU=users,DC=example,DC=com
  ldap_bind_dn: CN=<pmg_service_username>,OU=Service accounts,DC=example,DC=com
  ldap_password: <pmg_service_password>
• start the saslauthd service:
  Code:
  service saslauthd restart
• test ldap connection through saslauthd, using a regular ldap/ad user:
  Code:
  testsaslauthd -u <username> -p <password>
• check the logs for sasslauthd
  Code:
  journalctl -fu saslauthd

Once the 0: OK "Success." is received from testsaslauthd the postfix config can be done.

 

[Stoiko Ivanov]

I set the TUTORIAL prefix on the thread (as I think it is quite fitting).

Thanks for sharing your experiences!