[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Postfix Authentication for Remote Users



Hi:

If i´m not wrong, to run un-chrooted postfix change in
/etc/postfix/master.cf the line:

    smtp      inet  n       -       -       -       -       smtpd

to:

    smtp      inet  n       -       n       -       -       smtpd

bye...

----- Original Message ----- 
From: "R. W. Rodolico" <stargazer@rodolico.org>
To: <debian-isp@lists.debian.org>
Sent: Tuesday, November 08, 2005 8:26 AM
Subject: Re: Postfix Authentication for Remote Users


> I finally worked it out, but I'm not sure how. I do know it is a
> kludge, but I see no way around it. For anyone searching, these
> documents helped. The postfix documentation doesn't help at all
> since Debian puts postfix in a chroot jail and that appears to cause
> sasl to not work. Or, I don't know what I am talking about.
>
> I finally ended up taking the advice in the third link, since this
> machine needs client maintainability over security. I simply told
> sasl to start up inside the chroot jail that Debian creates for
> postfix, then postfix was able to talk to it. Doesn't seem to be any
> other way around it. I'll just create a little cron job to update
> the copy of shadow in /var/spool/etc. Major breach of security, but
> is easier right now than figuring out how to un-chroot postfix.
>
> Gawd this is a total kludge.
>
> http://www.tribulaciones.org/docs/postfix-sasl-tls-howto.html
>
> http://archives.neohapsis.com/archives/postfix/2003-03/0051.html
>
> http://archives.neohapsis.com/archives/postfix/2005-01/0006.html
>
> Rod
>
> Corey Ralph said:
> > On 08/11/2005, at 3:57 PM, R. W. Rodolico wrote:
> >
> >> I have installed postfix for the first time, but can not figure
> out
> >> how to tell it to authenticate remote users, ie users on
> >> (generally
> >> dynamic) machines outside the network who should be required to
> authenticate prior to sending mail. I'm simply getting a
> >> rejection.
> >
> > http://www.postfix.org/SASL_README.html
> >
> >
> > --
> > To UNSUBSCRIBE, email to debian-isp-REQUEST@lists.debian.org
> > with a subject of "unsubscribe". Trouble? Contact
> > listmaster@lists.debian.org
> >
> >
>
>
> -- 
> Meddle not in the Affairs of Dragons
>     for thou art crunchy, and good with catsup.
>
>
>
>
>
>
>
>
>
> -- 
> To UNSUBSCRIBE, email to debian-isp-REQUEST@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact
listmaster@lists.debian.org



Reply to: