On Sat, Sep 04, 2004, Jeff Waugh wrote:
> Not a guide, but a snippet, because I do exactly what you want to - it's
> great! You need sasl to do tls.

Thanks for the guide.

Perhaps I miss understood, but this section of
http://www.aet.tu-cottbus.de/personen/jaenicke/pfixtls/doc/conf.html led
me to believe that you can set Postfix up to relay for anyone with an
"approved" client certificate:

   # Two additional options has been added for relay control to the UCE rules:
   #   permit_tls_clientcerts   (a)
   # and
   #   permit_tls_all_clientcerts. (b)
   #
   # If one of these options is added to
   #   smtpd_recipient_restrictions,
   # postfix will relay if 
   # (a) a valid (it passed the verification) client certificate is presented
   #     and its fingerprint is listed in the list of client certs
   #     (relay_clientcerts),
   # (b) any valid (it passed the verification) client certificate is presented.

If it turns out I have misunderstood I will try your settings.

> /etc/postfix/sasl_passwd: (which you need to postmap)
>
>  server password

I take it this is my user password on the remote machine? If so, how
does it know my username?

-Mary
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

Reply via email to