Re: sendmail + auth as client to ISP, but internally (imap) no authwanted
Hi Alexander,
thanks for the hints.
Alexander Dalloz schrieb:
>
> In access_db you have set relay for localhost / 127.0.0.1?
>
Yes this is set to RELAY.
>> MAILER(smtp)dnl
>> MAILER(procmail)dnl
>> MAILER(local)dnl
>> MAILER(cyrusv2)dnl
>> define(`CYRUSV2_MAILER_FLAGS',`A5@W')dnl
>> define(`CYRUSV2_LMTP_SOCKET',`/var/lib/imap/socket/lmtp')dnl
>> define(`confLOCAL_MAILER',`cyrusv2')dnl
>
> Do not set such mailer modifications below any MAILER.
Ok, It seemes to work, but I have moved the lines anyway.
>> Is there any way to configure that? Can I disable AUTH for local mail
>> delivery? Do I need to enable some AUTH-METHODS (PLAIN and LOGIN) for
>> local delivery (and sasl)?
>
> First + second question: yes, use access_db
> Third question: no.
I am still not any further. As soon as I put the line
FEATURE(`authinfo',`hash /etc/mail/auth/client-info')dnl
in my sendmail.mc, I get the error:
AUTH=client, available mechanisms do not fulfill requirements
I found some remotely similar discussion about how sendmail and sasl
play together and it seems that if they use different AUTH METHODS, that
could be a reason why it fails:
saslauthd -v
saslauthd 2.1.18
authentication mechanisms: getpwent kerberos5 pam rimap shadow ldap
and in sendmail I have:
TRUST_AUTH_MECH(`EXTERNAL DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl
So I changed the /usr/lib/sasl2/Sendmail.conf:
pwcheck_method:saslauthd
mech_list:EXTERNAL DIGEST-MD5 CRAM-MD5 LOGIN PLAIN
liblogin and libplain are in /usr/lib/sasl2
Unfortunately it still does not work.
Uwe
|