Postfix + SMTP-AUTH
Fri, 23/02/2007 - 5:18pm — tumbleweed
I finally found a good blog post on the subject of getting Postfix to do SMTP-AUTH via SASL.
I went one step further, and instead of moving /var/run/saslauthd/ to the Postfix chroot, I did a bind mount:
/etc/fstab:
/var/run/saslauthd /var/spool/postfix/var/run/saslauthd none bind 0 0
Postfix was announcing methods like CRAM-MD5 which can’t be supported by the PAM backend, so I restricted them down to PLAIN and LOGIN (over TLS only, obviously):
/etc/postfix/sasl/smtpd.conf:
pwcheck_method: saslauthd
mech_list: plain login
mech_list: plain login
Now, it’s working nicely, and I can IMAPS and SMTP-AUTH-TLS to my mail server from anywhere.
Comments
You should check out the dovec
You should check out the dovecot sasl support in postfix. It allows you to talk directly to the dovecot authentication server.
You add this to main.cf:
smtpd_sasl_auth_enable = yes
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth
And this to dovecot.conf (inside auth default { } ):
socket listen {
client {
path = /var/spool/postfix/private/auth
mode = 0660
user = postfix
group = postfix
}
}
Restart and bob's your uncle. Much better than cyrus imho.
Yes, Izak, I totally agree, ho
Yes, Izak, I totally agree, however Dovecot SASL support isn't in sarge.
When etch rolls around... :-)
Post new comment