Re: postfix & cyrus & sasl_smtp_auth

[Patrick Ben Koetter <p@xxxxxxxxxxxxxxxx>]

* Philippe Vogel <filiaap@xxxxxxxxxx> [041002 01:27]:
> Anybody got any idea why the cyrus-team made smtp-client-auth with
> that insecure way by storing user-pw in a file?

There's many other possibilities to use Cyrus-SASL.

> 1) This is not easy to administrate because everything has to be but in 
> a file again.
> 2) Is there a different way using sasldb2 or direct sasl-auth?

Read options.html from the sparse SASL docs.

> I know this lists are flodded with this stuff, but there are many 
> questions and no answers to find on the net.
> Everybody has nice explanations but nobody shows a working solution 
> except this insecure one.

The Book of Postfix has a complete chapter on it. It will be published
in November.

> I run postfix chroot + amavisd-new + spamassassin + cyrus-imap + smtp-auth.
> The spamassassin + amavis is no problem at all, but cyrus is trash.

It's not. The documentation is worth a s...load.

p@rick

-- 
I take the freedom to ignore offlist messages. Open Source software
requires open access to information that tells all of us how to run it.
Don't deprive the community of that!

SMTP AUTH HOWTO: <http://postfix.state-of-mind.de/patrick.koetter/>