Add step to set sasldb permissions
@@ -55,6 +55,19 @@ The full user name is the user name you entered plus the domain name (`__<user-n
====
--
+. Ensure that the `qdrouterd` process can read the SASL database.
++
+--
+If the `qdrouterd` process runs as an unprivileged user, you might need to adjust the permissions or ownership of the SASL database so that the router can read it.
+
+This example makes the qdrouterd user the owner of the SASL database:
+
+[options="nowrap"]
+----
+$ sudo chown qdrouterd /var/lib/qdrouterd/qdrouterd.sasldb
+----
+--
+
. Open the `/etc/sasl2/qdrouterd.conf` configuration file.
+
--
