mail/postfix default build options request: SASL

[Dewayne Geraghty]

On 7/07/2015 3:45 PM, Kubilay Kocak wrote:
> On 7/07/2015 3:31 PM, Gregory Orange wrote:
>> Hi Olli and ports@,
>>
>> I don't know if this is a helpful forum to raise it, but I would like to
>> request that SASL be enabled in the default build options for
>> mail/postfix. I am attempting to use binary-only packages wherever
>> possible, and so far this is the first where I currently have to build
>> it myself.
>>
>> I would have thought SASL is in use across many Postfix installations,
>> but of course I could be wrong. I was tempted to try out
>> SMTP-after-IMAP, but since Postfix has the support, I think SASL is far
>> cleaner.
>>
>> Would any responders please include me in the CC? I am not subscribed to
>> the list.
>>
>> Thanks,
>> Greg.
>>
> If consensus can't be achieved or there is a good reason not to enable
> this by default, then postfix-sasl as a slave port may be a desirable
> alternative, which I believe has existed in the past.
>
> I'm generally:
>
>  +1 on security related options enabled by default
>  +1 on OPTIONS_DEFAULT matching upstream defaults
>  -1 on OPTIONS_DEFAULT introducing large dependency sets
>
> ./koobs
> _______________________________________________
> freebsd-ports at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-ports
> To unsubscribe, send any mail to "freebsd-ports-unsubscribe at freebsd.org"
I'm with you on that one koobs.  Everything we build includes kerberos
&/or tls or sasl; but it has a complexity/management cost.  A slave port
would be a good short term option pending
flavours/variants/something-with-strong-authentication.  This would
probably help postfix to be comparable to sendmail+tls+sasl2+ldap?