Hello:

Rahul Rekapalli wrote,

[ snipped most of the top stuff ]

> I got the message
> AUTH LOGIN GSSAPI

FYI: The Sendmail included with RHL 7.1 and later, has SASL support. To
use it, all I had to do was *uncomment* the following lines in
/etc/mail/sendmail.mc and regenerate /etc/sendmail.cf

-- sendmail.mc --
TRUST_AUTH_MECH(`DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl
define(`confAUTH_MECHANISMS', `DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl
-- sendmail.mc --

With this, all I got was "AUTH LOGIN PLAIN"

Next, I added users to sasldb using "saslpasswd -c shanu" and restarted
sendmail. "saslpasswd" created /etc/sasldb.

Now I get:

250-AUTH DIGEST-MD5 CRAM-MD5 LOGIN PLAIN

It was that simple.

> Why are the other authentication mechanisms not visible? 

You probably have a broken SASL setup.

> I tried using sasldb, but saslpasswd creates a file called
> /etc/sasldb.db and sasldblistusers gives me an error saying
> /etc/sasldb does not exist.

Please try again with stock Sendmail from a recent distribution.
'/usr/sbin/sendmail -d0.1 -bv root | grep SASL' will tell you whether
your copy of sendmail supports SASL.

# /usr/sbin/sendmail -d0.1 -bv root | grep SASL
NAMED_BIND NETINET NETINET6 NETUNIX NEWDB NIS QUEUE SASL SCANF

> tried creating a symbolic link but that too did not work. 

> also, for the mail relay, how do i deny/allow relaying for certain
> domains.

> where does the smtp auth come into place? 

By default, sendmail does not allow relaying, but if a user has been
authenticated, relaying is allowed. An authenticated user bypasses all
other relay checks.

> how can i force that every user has to be authenticated before
> relaying the mail?

This is the default behaviour provided you do not have any relay rules
for your network.

> how can i grant access to users on my network? 

Why are you implementing AUTH in the first place? If you want to relay
mails on a "per user basis" then use AUTH else just use the regular
relay scheme.

> do i have to create users in sasldb for all users in my local network?

No. SASL supports PAM, LDAP, GSSAPI and DB back ends. You can choose the
one most suited for your site.

-- Shanu
http://shankerbalan.com/


-- 
APL is a mistake, carried through to perfection.  It is the language of
the future for the problems of the past: it creates a new generation of
coding bums.


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
linux-india-help mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/linux-india-help

Reply via email to