---
name: "saslfinger"
section: "1"
platform: "linux"
package: "sasl2-bin"
version: "2.1.28+dfsg-10"
release: "Debian 12 (Bookworm)"
platforms: ["linux"]
url: "https://new.carta.tech/saslfinger"
---

# saslfinger(1)

A utility to collect SMTP AUTH relevant configuration for Postfix

## NAME

saslfinger - A utility to collect SMTP AUTH relevant configuration for Postfix

## SYNOPSIS

**saslfinger \[-chs\]**

## DESCRIPTION

saslfinger is a utility to collect SMTP AUTH relevant configuration for Postfix. Depending on how you run it, it will search for information on server-side or client-side SMTP AUTH configuration settings in Postfix and Cyrus SASL.

## OPTIONS

- **-c**

  If you run saslfinger with the option **-c** it will collect data required for client-side SMTP AUTH. Client-side SMTP AUTH is when Postfix smtp daemon uses SMTP AUTH to authenticate itself with a remote mail server that offers SMTP AUTH.

  saslfinger will try to telnet to all hosts listed in smtp\_sasl\_password\_maps, if it may read smtp\_sasl\_password\_maps

  The telnet test verifies your host is able to reach the remote servers and shows what AUTH mechanisms they offer - in some cases this is required to debug client-side SMTP AUTH.

  Important: By default smtp\_sasl\_password\_maps must be read-only to root, since these maps contain the usernames and passwords to authenticate. If you run saslfinger as root access will be no problem, but saslfinger will fail if you lack the permissions to access smtp\_sasl\_password\_maps.

  If you want to run the telnet test, but don't want to run saslfinger as root change permissions of smtp\_sasl\_password\_maps so that the user running saslfinger may access smtp\_sasl\_password\_maps while you debug.

  \*note: You don't need to worry about saslfinger doing anything with the username or password stored next to the remote hosts in your smtp\_sasl\_password\_maps; saslfinger completely ignores these informations!

- **-h**

  If you run saslfinger with the option **-h** it will print a little help message that tells you about the options you can use.

- **-s**

  If you run saslfinger with the option **-s** it will collect data required for server-side SMTP AUTH. Server-side SMTP AUTH is when Postfix smtpd daemon offers SMTP AUTH to mail clients.

## FILES

*saslfinger* - the script you need to run.

*saslfinger.1* - the man page you are currently reading.

## AUTHOR

Patrick Koetter, \<patrick.koetter@state-of-mind.de\>, **http://www.state-of-mind.de**

You will find the newest version of saslfinger at **http://postfix.state-of-mind.de/patrick.koetter/saslfinger/**.

## BUGS

Please report bugs to \<patrick.koetter@state-of-mind.de\>