Postfix & SASL Authentication

[jan gestre]

On 8/9/06, Gerard Seibert <gerard at seibercom.net> wrote:
>
> Paul Schmehl wrote:
>
> > Apparently you're using the sasldb2 database for logins?  If so, the
> > sasldb2 database needs to be readable by postfix, and it has to be
> > populated with the usernames at domains that you need.  Have you populated
> > the db?
> >
> > You would probably be better off using saslauthd as your pwcheck_method.
> >   Then start saslauthd with the -a sasldb flag.  (See man 8 saslauthd.)
> >   Auxprop is an older method that wasn't very dependable.
>
> Thanks, that is what I did. I had to modify the
> /usr/local/lib/smtpd.conf file, but that was about it.
>
> I do have one question though. The rc.d file has 'pam' listed rather
> than sasldb for the '-a ' flag. I changed it there although the
> directions said not too. Is there any reason that changing it in the rc.d
> file is a bad thing? I could not figure out what it meant to do
> otherwise. Was I suppose to create another file that would override that
> one? If so, what was the syntax of the file suppose to be? Anyway, it
> works, so that is all I am really interested in at the moment.
>
> try putting this in your rc.conf:

saslauthd_enable="YES"
saslauthd_flags="-a getpwent"

HTH