Hello Reindl Harald-2.  I would rather remain with the Postfix MTA and
DBbmail server, rather than switching  to something else like Cyrus or
Dovecot mail servers, as Postfix and DBmail are working fine.  I can relay
emails from within my local network, once I have enter the user's local IP
address in "/etc/mail/access",  eg (192.168.1.45    RELAY), and built the
"access.db" file, but Postfix will not relay email coming from my IPhones
out in the internet.

Before switching to Postfix and DBmail, I used sendmail MTA, and the Cyrus
email server.  I had local IP addresses entered in the sendmail
/etc/mail/access file, which I used to build the access.db file as follows:

portmap hash /etc/mail/access.db < /etc/mail/access

Postfix seems to be using Sendmail's access.db; because, when I add a new
user, I must include their local ip address in the /etc/mail/access file and
build the /etc/mail/access.db before the new local user can sent out emails.. 
I though that was kind of strange, but that how it works for local users.

However, Postfix is refusing to relay emails from the iPhones that connect
to my mail server from outside networks.  This is a good thing, as I don't
want to be an open relay.  I just need some way to let Postfix know that the
iPhones should be trusted for relaying emails.

That where sasl comes in.  Postfix will recgonize emails coming from my
roaming iPhone users, who connects from an outside networks, if the iPhone
connect using sasl.  Thanks for your information, though.

Regards,

LelandJ


Reindl Harald-2 wrote:
> 
> We are using dovecot as imap/pop3-proxy which solves CRAM-MD5, NTLM,
> POP3S, IMAPS, TLS and other nice things and can also be used for
> postfix-sasl-auth.
> 
> But passwords should be plaintext in the userdb if you want
> MD5-Authentication because dovecot takes the password from
> the databases and calculates himself the hash to verify
> with the one from the client
> 
> http://www.postfix.org/SASL_README.html#server_dovecot
> 
> So you have ONE software for all authentications which can also
> replace chars in usernames as we need for % to @
> 
> Am 05.02.2010 15:42, schrieb lelandj:
>> 
>> Whoops, here is the email again without HTML stripping line feeds and
>> carriage returns:
>> 
>> I need to configure sasl for dbmail to allow postfix fo relay emails sent
>> from a couple of roaming users via their iphones.  The Iphones connect to
>> different networks wirelessly, as the users roam about.  The iPones
>> receive
>> a dynamic IP address from the network to which they connect.  It is my
>> understanding that postfix will allow relaying of emails from remote
>> users
>> that can connect to the mail server using sasl.
>> 
>> I used Cyrus with sasl four or five years ago and had sasl configured to
>> work with it using the sasldb file, which stored users names and
>> passwords,
>> but I'm currently using Dbmail Administrator to add/delete users using
>> MD5
>> authentication.
>> 
>> Below is the /etc/imapd.conf file on my Fedora 6 mail server:
>> 
>> allowplaintext: yes
>> hashimapspool: 1
>> sasl_mech_list: PLAIN
>> sharedprefix: shared
>> virtdomains: 0
>> maxmessagesize: 5000000
>> sievedir: /var/lib/imap/sieve
>> admins: cyrus root
>> sasl_pwcheck_method: saslauthd
>> configdirectory: /var/lib/imap
>> tls_ca_file: /etc/pki/tls/certs/ca-bundle.crt
>> altnamespace: 1
>> autocreatequota_units: 1
>> tls_key_file: /etc/pki/cyrus-imapd/cyrus-imapd.pem
>> sendmail: /usr/sbin/sendmail
>> unixhierarchysep: 1
>> partition-default: /var/spool/imap
>> sieve_maxscriptsize: 320
>> userprefix: user
>> tls_cert_file: /etc/pki/cyrus-imapd/cyrus-imapd.pem
>> 
>> Regards,
>> 
>> LelandJ
>> 
> 
> -- 
> 
> Mit besten Grüßen, Reindl Harald
> the lounge interactive design GmbH
> A-1060 Vienna, Hofmühlgasse 17
> software-development / cms-solutions
> p: +43 (1) 595 3999 33, m: +43 (676) 40 221 40
> icq: 154546673, http://www.thelounge.net/
> 
> 
>  
> _______________________________________________
> DBmail mailing list
> [email protected]
> http://mailman.fastxs.nl/cgi-bin/mailman/listinfo/dbmail
> 
> 

-- 
View this message in context: 
http://old.nabble.com/Using-sasl-with-dbmail-and-md5-login-tp27468767p27470027.html
Sent from the dbmail users mailing list archive at Nabble.com.

_______________________________________________
DBmail mailing list
[email protected]
http://mailman.fastxs.nl/cgi-bin/mailman/listinfo/dbmail

Reply via email to