Pré-requis (vraiment ?)

aptitude install postfix-tls libsasl2-modules sasl2-bin

/etc/postfix/sasl/smtpd.conf

pwcheck_method: saslauthd # sinon postfix n'utilise jamais l'authentification
#mech_list: plain login digest-md5 cram-md5 # digest me pose des pb
mech_list: plain login  cram-md5

/etc/postfix/main.cf

[...]

smtpd_recipient_restrictions =
     permit_mynetworks,
     permit_sasl_authenticated,
    [...]
[...]
# SASL options: only secure methods, without plain text
#smtpd_sasl_security_options = noanonymous, noplaintext
smtpd_sasl_security_options = noanonymous
#smtpd_sasl_local_domain = $mydomain
#smtpd_sasl_local_domain = $myhostname
smtpd_sasl_local_domain =
smtpd_sasl_auth_enable = yes
smtpd_sasl_application_name = smtpd
broken_sasl_auth_client = no

/etc/default/saslauthd

MECHANISMS="pam"
OPTIONS="-c -m /var/spool/postfix/var/run/saslauthd -r"

Je ne sais plus pourquoi

dpkg-statoverride --add root sasl 710 /var/spool/postfix/var/run/saslauthd
adduser postfix sasl # est-ce nécessaire ?
dans /etc/init.d/postfix : FILES=[...] etc/sasldb2

sasl en mode debug

saslauthd -d -V -a pam -c -m /var/spool/postfix/var/run/saslauthd -r

testsaslauthd -u UserSansFQDN -p PassWord -f /var/spool/postfix/var/run/saslauthd/mux