Sendmail as client via smarthost and ssl

Matthew Seaman m.seaman at infracaninophile.co.uk
Fri Oct 29 15:12:10 UTC 2010


On 29/10/2010 14:49, Christopher Illies wrote:
> Although I have no idea what GSSAPI and NTLM are, I remembered that I have
> seen these abbreviations before: NTLM is an OPTION for cyrus-sasl2, and yes,
> it is compiled in (WITH_NTLM=true). And GSSAPI appeared first in the mc file:

GSSAPI is the "Generic Security Services Application Program Interface"
and NTLM is "NT Lan Manager" -- they are both authentication systems
popular amongst various generations of Microsoft OSes.  GSSAPI is
actually based on that old Unix stalwart: Kerberos, and hence is also
fairly popular amongst non-Microsoft types.  They are some of the
authentication mechanisms that come as standard with SASL implementations.

Unless you know that you do need them, you almost certainly don't.  You
can turn off support for those mechanisms at the point of compiling
cyrus-sasl2, or you can take them out of the configuration for the
various SASL consumers if you want.  They are pretty much harmless
though, so just doing nothing is also a viable option[*].

	Cheers,

	Matthew

[*] I have run into situations where not compiling them into various
software made everything run much more smoothly: however, those were
exceptional circumstances, and probably a temporary artefact of the
particular software versions.  Your mileage will probably vary.

-- 
Dr Matthew J Seaman MA, D.Phil.                   7 Priory Courtyard
                                                  Flat 3
PGP: http://www.infracaninophile.co.uk/pgpkey     Ramsgate
JID: matthew at infracaninophile.co.uk               Kent, CT11 9PW

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 267 bytes
Desc: OpenPGP digital signature
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20101029/105e95c9/signature.pgp


More information about the freebsd-questions mailing list