First I want to thank you for the detaild “HOWTO’S” that helpd me get my Debian server up and running Cleanly. After finishing configuring the base system (The Perfect Setup - Debian Sarge (3.1) ) I went on to the next step of Virtual Users And Domains With Postfix, Courier And MySQL (+ SMTP-AUTH, Quota, SpamAssassin, ClamAV) . Followed the steps in configuring all the parts of the system but still has a problem with a main part of the system – saslauthd wont start ( maybe permissions problem – read all I could find on the new but still nothing makes it work . If I run the cmd – mail:~# saslauthd check -a pam saslauthd[7888] :detach_tty : Cannot start saslauthd saslauthd[7888] :detach_tty : could not read from startup_pipe this is the relavent part of the auth.log as seen when I run the saslauthd check –a pam ::: Oct 15 12:33:50 mail saslauthd[7893]: detach_tty : could not lock pid file /var/run/saslauthd/saslauthd.pid: Resource temporarily unavailable Oct 15 12:33:50 mail saslauthd[7892]: detach_tty : Cannot start saslauthd Oct 15 12:33:50 mail saslauthd[7892]: detach_tty : could not read from startup_pipe This is the auth log output as seen when I make a /etc/init.d/saslauthd stop / start ::: Oct 15 12:37:49 mail saslauthd[7086]: server_exit : master exited: 7086 Oct 15 12:38:12 mail saslauthd[7933]: detach_tty : master pid is: 7933 Oct 15 12:38:12 mail saslauthd[7933]: ipc_init : listening on socket: /var/spool/postfix/var/run/saslauthd/mux Socket permissions : mail:~# ls -l /var/spool/postfix/var/run/saslauthd/mux srwxrwxrwx 1 root root 0 Oct 15 12:38 /var/spool/postfix/var/run/saslauthd/mux mail:~# ls -l /var/spool/postfix/var/run/saslauthd/ total 4 srwxrwxrwx 1 root root 0 Oct 15 12:38 mux -rw------- 1 root root 0 Oct 15 12:38 mux.accept -rw------- 1 root root 5 Oct 15 12:38 saslauthd.pid config files : smtpd.conf : pwcheck_method: saslauthd mech_list: plain login allow_plaintext: true saslauthd_path:/var/spool/postfix/var/run/saslauthd/saslauthd.pid saslauthd : /etc/default/saslauthd # This needs to be uncommented before saslauthd will be run automatically START=yes # You must specify the authentication mechanisms you wish to use. # This defaults to "pam" for PAM support, but may also include # "shadow" or "sasldb", like this: # MECHANISMS="pam shadow" MECHANISMS="pam" PARAMS="-m /var/spool/postfix/var/run/saslauthd" Master.cf - /etc/postfix/master.cf ::: # ========================================================================== # service type private unpriv chroot wakeup maxproc command + args # (yes) (yes) (yes) (never) (100) # ========================================================================== smtp inet n - - - - smtpd #submission inet n - - - - smtpd # -o smtpd_etrn_restrictions=reject #628 inet n - - - - qmqpd pickup fifo n - - 60 1 pickup cleanup unix n - - - 0 cleanup qmgr fifo n - - 300 1 qmgr #qmgr fifo n - - 300 1 oqmgr rewrite unix - - - - - trivial-rewrite bounce unix - - - - 0 bounce defer unix - - - - 0 bounce trace unix - - - - 0 bounce verify unix - - - - 1 verify flush unix n - - 1000? 0 flush proxymap unix - - n - - proxymap smtp unix - - - - - smtp relay unix - - - - - smtp # -o smtp_helo_timeout=5 -o smtp_connect_timeout=5 showq unix n - - - - showq error unix - - - - - error local unix - n n - - local virtual unix - n n - - virtual lmtp unix - - n - - lmtp anvil unix - - n - 1 anvil # # Interfaces to non-Postfix software. Be sure to examine the manual # pages of the non-Postfix software to find out what options it wants. # # maildrop. See the Postfix MAILDROP_README file for details. # maildrop unix - n n - - pipe flags=DRhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient} uucp unix - n n - - pipe flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) ifmail unix - n n - - pipe flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) bsmtp unix - n n - - pipe flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -d -t$nexthop -f$sender $recipient scalemail-backend unix - n n - 2 pipe flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${extension} # only used by postfix-tls #tlsmgr fifo - - n 300 1 tlsmgr #smtps inet n - n - - smtpd -o smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes #587 inet n - n - - smtpd -o smtpd_enforce_tls=yes -o smtpd_sasl_auth_enable=yes amavis unix - - - - 2 smtp -o smtp_data_done_timeout=1200 -o smtp_send_xforward_command=yes 127.0.0.1:10025 inet n - - - - smtpd -o content_filter= -o local_recipient_maps= -o relay_recipient_maps= -o smtpd_restriction_classes= -o smtpd_client_restrictions= -o smtpd_helo_restrictions= -o smtpd_sender_restrictions= -o smtpd_recipient_restrictions=permit_mynetworks,reject -o mynetworks=127.0.0.0/8,192.168.0.0/24,192.168.10.0/24,192.168.20.0/24,192.168.33.0/24 -o strict_rfc821_envelopes=yes -o receive_override_options=no_unknown_recipient_checks,no_header_body_checks -o smtpd_bind_address=127.0.0.1 Smtp - /etc/pam.d/smtp auth required pam_mysql.so user=mail_admin passwd=mypass host=127.0.0.1 db=mail table=users usercolumn=email passwdcolumn=password crypt=1 auth required pam_mysql.so user=mail_admin passwd=mypass host=127.0.0.1 db=mail table=users usercolumn=email passwdcolumn=password crypt=1 ( mypass=mail_admin_password !!! ) I don’t really know which details can I give more and I really hope you can help me figure out what did I do wrong on The way . Best Regards, TRoiy ( [email protected] )
I found two slight differences between my howto nad the files you posted: /etc/default/saslauthd should be exactly like this: Code: # This needs to be uncommented before saslauthd will be run automatically START=yes # You must specify the authentication mechanisms you wish to use. # This defaults to "pam" for PAM support, but may also include # "shadow" or "sasldb", like this: # MECHANISMS="pam shadow" MECHANISMS="pam" PARAMS="-m /var/spool/postfix/var/run/saslauthd -r" And /etc/postfix/sasl/smtpd.conf must be like this: Code: pwcheck_method: saslauthd mech_list: plain login allow_plaintext: true
I am running Debian Sarge 3.1: What are the perms on the /var/spool/postfix/var/run/saslauthd dir? For me, the group ownership is the sasl group, and i needed to add the postfix user to the sasl group. Did you create the directories "/var/" "/var/run" "/var/spool/run/saslauthd" Since the INIT scripts on my Debian box still look in "/var/run/saslauthd", I removed /var/run/saslauthd, and then created a symlink to /var/spool/postfix/var/run/saslauthd # rm -rf /var/run/saslauthd # ln -s /var/spool/postfix/var/run/saslauthd /var/run/saslauthd (you could also change the init script, but I find this to be cleaner) --- # cat /etc/postfix/sasl/smtpd.conf pwcheck_method: saslauthd mech_list: plain login --- # ls -l /var/spool/postfix/var/run/ total 4 drwx--x--- 2 root sasl 4096 Oct 10 23:31 saslauthd --- # cat /etc/default/saslauthd # This needs to be uncommented before saslauthd will be run automatically START=yes PARAMS="-m /var/spool/postfix/var/run/saslauthd" # You must specify the authentication mechanisms you wish to use. # This defaults to "pam" for PAM support, but may also include # "shadow" or "sasldb", like this: # MECHANISMS="pam shadow" MECHANISMS="pam"
back with some more heya again ... ok .. after changing those mistakes my files looks like this ... mail:~# vi /etc/default/saslauthd ---------------------------------------------------------------------------------------------------------- # This needs to be uncommented before saslauthd will be run automatically START=yes # You must specify the authentication mechanisms you wish to use. # This defaults to "pam" for PAM support, but may also include # "shadow" or "sasldb", like this: # MECHANISMS="pam shadow" MECHANISMS="pam" PARAMS="-m /var/spool/postfix/var/run/saslauthd -r" ----------------------------------------------------------------------------------------------------------- mail:~# vi /etc/postfix/sasl/smtpd.conf --------------------------------------------------------------------------------------------------------- pwcheck_method: saslauthd mech_list: plain login allow_plaintext: true --------------------------------------------------------------------------------------------------------- main.cf ::: --------------------------------------------------------------------------------------------------------- # See /usr/share/postfix/main.cf.dist for a commented, more complete version smtpd_banner = $myhostname ESMTP $mail_name musicinfo.org biff = no # appending .domain is the MUA's job. append_dot_mydomain = no # Uncomment the next line to generate "delayed mail" warnings #delay_warning_time = 4h myhostname = mail.musicinfo.org alias_maps = hash:/etc/aliases alias_database = hash:/etc/aliases myorigin = /etc/mailname mydestination = localhost, localhost.localdomain relayhost = mynetworks = 127.0.0.0/8,192.168.0.0/24,192.168.10.0/24,192.168.20.0/24,192.168.33.0/24 mailbox_command = mailbox_size_limit = 0 recipient_delimiter = + inet_interfaces = all smtpd_sasl_local_domain = smtpd_sasl_auth_enable = yes smtpd_sasl_security_options = noanonymous broken_sasl_auth_clients = yes smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination smtpd_tls_auth_only = no smtp_use_tls = yes smtpd_use_tls = yes smtp_tls_note_starttls_offer = yes smtpd_tls_key_file = /etc/postfix/smtpd.key smtpd_tls_cert_file = /etc/postfix/smtpd.cert smtpd_tls_CAfile = /etc/postfix/ssl/cacert.pem smtpd_tls_loglevel = 1 smtpd_tls_received_header = yes smtpd_tls_session_cache_timeout = 3600s tls_random_source = dev:/dev/urandom home_mailbox = Maildir/ virtual_alias_domains = virtual_alias_maps = proxy:mysql:/etc/postfix/mysql-virtual_forwardings.cf, mysql:/etc/postfix/mysql-virtual_email2email.cf virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql-virtual_domains.cf virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql-virtual_mailboxes.cf virtual_mailbox_base = /home/vmail virtual_uid_maps = static:5000 virtual_gid_maps = static:5000 transport_maps = proxy:mysql:/etc/postfix/mysql-virtual_transports.cf virtual_create_maildirsize = yes virtual_mailbox_extended = yes virtual_mailbox_limit_maps = proxy:mysql:/etc/postfix/mysql-virtual_mailbox_limit_maps.cf virtual_mailbox_limit_override = yes virtual_maildir_limit_message = "The user you are trying to reach is over quota." virtual_overquota_bounce = yes proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mai lbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $ transport_maps $mynetworks $virtual_mailbox_limit_maps content_filter = amavis:[127.0.0.1]:10024 receive_override_options = no_address_mappings disable_vrfy_command = yes --------------------------------------------------------------------------------------------------------- but when try to make auth against server this is the outcome log : mail:~# tail -n100 /var/log/mail.log Oct 15 21:20:22 mail postfix/smtpd[3102]: connect from home.zehu.net[192.117.0.100] Oct 15 21:20:23 mail postfix/smtpd[3102]: warning: home.zehu.net[192.117.0.100]: SASL LOGIN authentication failed Oct 15 21:20:24 mail postfix/smtpd[3102]: lost connection after AUTH from home.zehu.net[192.117.0.100] Oct 15 21:20:24 mail postfix/smtpd[3102]: disconnect from home.zehu.net[192.117.0.100] Oct 15 21:20:25 mail courierpop3login: Connection, ip=[::ffff:192.117.0.100] Oct 15 21:20:26 mail courierpop3login: LOGIN, [email protected], ip=[::ffff:192.117.0.100] Oct 15 21:20:27 mail courierpop3login: LOGOUT, [email protected], ip=[::ffff:192.117.0.100], top=0, retr=0, time=1 mail:~# tail -n100 /var/log/auth.log Oct 15 21:20:19 mail postfix/smtpd[3102]: sql_select option missing Oct 15 21:20:19 mail postfix/smtpd[3102]: auxpropfunc error no mechanism available Oct 15 21:20:19 mail postfix/smtpd[3102]: _sasl_plugin_load failed on sasl_auxprop_plug_init for plugin: sql Oct 15 21:20:23 mail saslauthd[2147]: (pam_unix) could not identify user (from getpwnam([email protected])) Oct 15 21:20:23 mail saslauthd[2147]: DEBUG: auth_pam: pam_acct_mgmt failed: User not known to the underlying authentication module Oct 15 21:20:23 mail saslauthd[2147]: do_auth : auth failure: [service=smtp] [realm=musicinfo.org] [mech=pam] [reason=PAM acct error] Oct 15 21:22:37 mail saslauthd[2145]: server_exit : master exited: 2145 Oct 15 21:22:40 mail saslauthd[3123]: detach_tty : master pid is: 3123 Oct 15 21:22:40 mail saslauthd[3123]: ipc_init : listening on socket: /var/spool/postfix/var/run/saslauthd/mux when checking up saslauthd with : mail:~# saslauthd check -a pam saslauthd[3152] :detach_tty : Cannot start saslauthd saslauthd[3152] :detach_tty : could not read from startup_pipe and this in auth.log : Oct 15 21:30:35 mail saslauthd[3153]: detach_tty : could not lock pid file /var/run/saslauthd/saslauthd.pid: Resource temporarily unavailable Oct 15 21:30:35 mail saslauthd[3152]: detach_tty : Cannot start saslauthd Oct 15 21:30:35 mail saslauthd[3152]: detach_tty : could not read from startup_pipe am i so far from the "truth" :P ? Regards , Roiy - TmWtp
you may need to add 'permit' to your 'smtp_recipient_restrictions' line... this is what mine has. smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination, permit Also, is "ziv" the actual user on your box? If you login with that user, is the username exactly "ziv"? I have to leave now... but I'll get back on here later on. In the mean time... search google.com for "DEBUG: auth_pam: pam_acct_mgmt failed: User not known to the underlying authentication module" ... that came up with alot so it might lead you somewhere.
this is the state ::: hola again ... i did change the original line and added permit at the end : smtpd_recipient_restrictions = permit_mynetworks,permit_sasl_authenticated,reject_unauth_destination,permit .... was'nt there before ... ( only permit ) . still get ::: Oct 15 22:50:50 mail postfix/smtpd[3652]: sql_select option missing Oct 15 22:50:50 mail postfix/smtpd[3652]: auxpropfunc error no mechanism available Oct 15 22:50:50 mail postfix/smtpd[3652]: _sasl_plugin_load failed on sasl_auxprop_plug_init for plugin: sql Oct 15 22:50:53 mail saslauthd[3539]: (pam_unix) could not identify user (from getpwnam([email protected])) Oct 15 22:50:53 mail saslauthd[3539]: DEBUG: auth_pam: pam_acct_mgmt failed: User not known to the underlying authentication module Oct 15 22:50:53 mail saslauthd[3539]: do_auth : auth failure: [service=smtp] [realm=musicinfo.org] [mech=pam] [reason=PAM acct error] ziv is a legit user in the domain ... a virtual domain affcorse so his user name iis actually [email protected] but it guess thats knows for all you linux ppl.. im just starting to understand so ... . any suggestions ? ... im getting lost with all the mailing lists google offers ... newbie ... :( Thanks for ALL the help ALL's ... Roiy - TmWtp
maybe some more data required ,,, ? maybe some more data required ,,, ? some more cfg files ? ill post anything ... as far as i care my root pass .. dont mind formating the machine again and start from the begining .. done it once 3 days ago ... Thanks again , Roiy - TmWtp
mail.log this is the /var/log/mail.log entries when a user tries to telnet the server now ::: Oct 15 23:14:05 mail postfix/smtpd[3883]: connect from unknown[212.199.157.62] Oct 15 23:15:25 mail postfix/smtpd[3883]: 823141B6695: client=unknown[212.199.157.62] Oct 15 23:15:26 mail postfix/cleanup[3903]: 823141B6695: message-id=<[email protected]> Oct 15 23:15:26 mail postfix/qmgr[3462]: 823141B6695: from=<[email protected]>, size=356, nrcpt=1 (queue active) Oct 15 23:15:26 mail amavis[1377]: (01377-02) lookup_sql: 2013, Lost connection to MySQL server during query Oct 15 23:15:26 mail amavis[1377]: (01377-02) NOTICE: Disconnected from SQL server Oct 15 23:15:26 mail amavis[1377]: (01377-02) TROUBLE in check_mail: creating_partsdir FAILED: DBD::mysql::st execute failed: Lost connection to MySQL server during query at (eval 38) line 238, <GEN16> line 850. Oct 15 23:15:26 mail amavis[1377]: (01377-02) PRESERVING EVIDENCE in /var/lib/amavis/amavis-20051015T204635-01377 Oct 15 23:15:26 mail postfix/smtp[3904]: 823141B6695: to=<[email protected]>, relay=127.0.0.1[127.0.0.1], delay=1, status=deferred (host 127.0.0.1[127.0.0.1] said: 451 4.5.0 Error in processing, id=01377-02, creating_partsdir FAILED: DBD::mysql::st execute failed: Lost connection to MySQL server during query at (eval 38) line 238, <GEN16> line 850. (in reply to end of DATA command)) Oct 15 23:16:17 mail postfix/smtpd[3883]: disconnect from unknown[212.199.157.62] anyone ?
yup mail:~# netstat -tap Active Internet connections (servers and established) Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 *:imaps *:* LISTEN 1048/couriertcpd tcp 0 0 *op3s *:* LISTEN 1071/couriertcpd tcp 0 0 musicinfo.org:10024 *:* LISTEN 967/amavisd (master tcp 0 0 musicinfo.org:10025 *:* LISTEN 3458/master tcp 0 0 musicinfo.org:mysql *:* LISTEN 3752/mysqld tcp 0 0 *op3 *:* LISTEN 1057/couriertcpd tcp 0 0 *:imap2 *:* LISTEN 1034/couriertcpd tcp 0 0 *:www *:* LISTEN 1342/apache2 tcp 0 0 *:981 *:* LISTEN 1352/perl tcp 0 0 *:ftp *:* LISTEN 1330/proftpd: (acce tcp 0 0 mail.musicinfo.o:domain *:* LISTEN 955/named tcp 0 0 musicinfo.org:domain *:* LISTEN 955/named tcp 0 0 *:ssh *:* LISTEN 1319/sshd tcp 0 0 *:smtp *:* LISTEN 3458/master tcp 0 0 musicinfo.org:953 *:* LISTEN 955/named tcp 0 0 *:https *:* LISTEN 1342/apache2 tcp 0 0 mail.musicinfo.org:ssh 192.168.10.2:2016 ESTABLISHED3918/sshd: roiy [pr tcp 0 0 mail.musicinfo.org:ssh 192.168.10.2:4980 ESTABLISHED3624/sshd: roiy [pr tcp 1 0 musicinfo.org:32773 musicinfo.org:mysql CLOSE_WAIT 1374/amavisd (child tcp 1 0 musicinfo.org:32780 musicinfo.org:mysql CLOSE_WAIT 1375/amavisd (child tcp 0 144 mail.musicinfo.org:ssh 192.168.10.2:3136 ESTABLISHED1359/sshd: roiy [pr
Ok, a couple of things.... First: Can you verify that you have the mysql plugin for postfix installed: Code: # dpkg -l postfix-mysql If you do not, you'll need to install it if you want to use mysql: Code: # apt-get install postfix-mysql Secondly: You have alot going on, and you need to narrow down your problems, solving 1 at a time. When was the last time you had a working mail server... meaning, that you could send and recieve mail with this server? You're adding alot of non-basic features to postfix all at once. My recommendation would be to start with a cleaner main.cf config file. Put a comment before all the extra lines that aren't necessary to function, something like this: Code: # See /usr/share/postfix/main.cf.dist for a commented, more complete version smtpd_banner = $myhostname ESMTP $mail_name musicinfo.org biff = no # appending .domain is the MUA's job. append_dot_mydomain = no # Uncomment the next line to generate "delayed mail" warnings #delay_warning_time = 4h myhostname = mail.musicinfo.org alias_maps = hash:/etc/aliases alias_database = hash:/etc/aliases myorigin = /etc/mailname mydestination = localhost, localhost.localdomain relayhost = mynetworks = 127.0.0.0/8,192.168.0.0/24,192.168.10.0/24,192.168.20.0/24,192.168.33.0/24 mailbox_command = mailbox_size_limit = 0 recipient_delimiter = + inet_interfaces = all smtpd_sasl_local_domain = smtpd_sasl_auth_enable = yes smtpd_sasl_security_options = noanonymous broken_sasl_auth_clients = yes smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination,permit smtpd_tls_auth_only = no smtp_use_tls = yes smtpd_use_tls = yes smtp_tls_note_starttls_offer = yes smtpd_tls_key_file = /etc/postfix/smtpd.key smtpd_tls_cert_file = /etc/postfix/smtpd.cert smtpd_tls_CAfile = /etc/postfix/ssl/cacert.pem smtpd_tls_loglevel = 1 smtpd_tls_received_header = yes smtpd_tls_session_cache_timeout = 3600s tls_random_source = dev:/dev/urandom home_mailbox = Maildir/ # Get rid of the Virtual User stuff until you get saslauthd working #virtual_alias_domains = #virtual_alias_maps = #proxy:mysql:/etc/postfix/mysql-virtual_forwardings.cf, mysql:/etc/postfix/mysql-virtual_email2email.cf #virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql-virtual_domains.cf #virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql-virtual_mailboxes.cf #virtual_mailbox_base = /home/vmail #virtual_uid_maps = static:5000 #virtual_gid_maps = static:5000 #transport_maps = proxy:mysql:/etc/postfix/mysql-virtual_transports.cf #virtual_create_maildirsize = yes #virtual_mailbox_extended = yes #virtual_mailbox_limit_maps = proxy:mysql:/etc/postfix/mysql-virtual_mailbox_limit_maps.cf #virtual_mailbox_limit_override = yes #virtual_maildir_limit_message = "The user you are trying to reach is over quota." #virtual_overquota_bounce = yes #proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mai #lbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $ #transport_maps $mynetworks $virtual_mailbox_limit_maps #content_filter = amavis:[127.0.0.1]:10024 #receive_override_options = no_address_mappings #disable_vrfy_command = yes I would then start adding those features afterwards. With a basic installation of postfix, you should just be able to send email to your mail server from your mail server without authentication or anything. You can easily test it by sending an email from the command line like this: Code: # echo "test email" | mail [email protected] Then you want to first check your logs making sure that there were no errors, and you should be able to check your mail same as you are now (if imap/pop is configured correctly). Otherwise, you should see a message in '/home/username/Maildir/new'. Then, once you have saslauthd working, move on to the mysql extension and virtual usermaps. more to come...
the problem is OVER :0) THANKS to FALKO so that was the problem afterall ::: Code: auth required pam_mysql.so user=mail_admin passwd=mail_admin_password host=127.0.0.1 db=mail table=users usercolumn=email passwdcolumn=password crypt=1 auth required pam_mysql.so user=mail_admin passwd=mail_admin_password host=127.0.0.1 db=mail table=users usercolumn=email passwdcolumn=password crypt=1in it, but in the tutorial it's Code: auth required pam_mysql.so user=mail_admin passwd=mail_admin_password host=127.0.0.1 db=mail table=users usercolumn=email passwdcolumn=password crypt=1 account sufficient pam_mysql.so user=mail_admin passwd=mail_admin_password host=127.0.0.1 db=mail table=users usercolumn=email passwdcolumn=password crypt=1 so after changing this "little" mistake the whole thing is working like a charm :0)) to conclude i want to thank you all guys for being here and being so supportive about "dumm" newbie's questions ... like mine ciao for now , Roiy - TmWtp p.s : Falko - Vielen Dank Falko