On Mar 13, 2013, at 09:47, Christian Rohmann <[email protected]> wrote:
> Hello postfix-users, > > I'd like to somehow get/forward the SASL username of an authenticated > user to a before-queue SMTP content filter that is connected via > smtpd_proxy_filter. > I know I can use "smtpd_sasl_authenticated_header = yes", but that is > not quite what I want or need as the scanner can only (easily) take a > username in via SMTP-Auth or XCLIENT. > > > I see two options: > > 1) Use the XCLIENT attribute LOGIN and have postfix send that to the > scanner. But I don't know if postfix even does send XCLIENT data to > another SMTP server (content filter in this case). I quick test showed > that postfix will not speak XCLIENT upstream but only XFORWARD. > > 2) Another option would be to forward the username that was used on the > primary connection and use that to "authenticate" towards the > smtpd_proxy_filter. Is there a way to achieve that? > > > If transmitting the SASL username was possible with after-queue > filtering, I might consider that as well. As far as I understand it, you may need to use either the milter or the policy server interface to connect the content filter, if you want to pass the SASL data. For example, Postfix passes the following to a policy server; sasl_method=plain sasl_username=you sasl_sender= There does not seem to be a way to do this via SMTP, but it is possible that I have overlooked some part of the documentation. Cya, Jona
