Hmm. The problem I am having occurs when I tried to send email from my
Netscape Communicator 4.79 email client. This is a form of SMTP after
POP or IMAP, so authentication should already have happened. (Note: on
this version of Postfix there is a new feature called 'anvil' which
appears to have something to do with rate limiting, and only allows one
authentication per 60 sec, and I can't seem to find out how to change
that - this is a different problem from the SASL problem, of course..)

Anyway, reading the Postfix Sasl documentation here :
http://www.postfix.org/smtpd.8.html

pointed me to this:

http://www.postfix.org/postconf.5.html#smtpd_sasl_path

which specifically discusses Netscape.
------------------------------------------
smtpd_sasl_exceptions_networks (default: empty)

    What SMTP clients Postfix will not offer AUTH support to.

    Some clients (Netscape 4 at least) have a bug that causes them to
require a login and password whenever AUTH is offered, whether it's
necessary or not. To work around this, specify, for example, $mynetworks
to prevent Postfix from offering AUTH to local clients.

    Specify a list of network/netmask patterns, separated by commas
and/or whitespace. The mask specifies the number of bits in the network
part of a host address. You can also "/file/name" or "type:table"
patterns. A "/file/name" pattern is replaced by its contents; a
"type:table" lookup table is matched when a table entry matches a lookup
string (the lookup result is ignored). Continue long lines by starting
the next line with whitespace.

    Note: IP version 6 address information must be specified inside []
in the smtpd_sasl_exceptions_networks value, and in files specified with
"/file/name". IP version 6 addresses contain the ":" character, and
would otherwise be confused with a "type:table" pattern.

    Example:

    smtpd_sasl_exceptions_networks = $mynetworks

    This feature is available in Postfix 2.1 and later.
---------------------------------------

I went into main.cf and added this:

smtpd_sasl_exceptions_networks = $mynetworks,
mysql:/etc/postfix/mysql-mydestination.cf

and now Netscape works! (in fact I sent this message from Netscape).

I hope that I have not broken anything or unintentionally become an open
relay. Mynetworks is the standard conservative 127.0.0.1/8 and a local
subnet.

Any comments? Again, thanks in advance and I hope this is useful to
others trying to use Web-Cyradm with Ubuntu Dapper, which I think will
become a fairly large factor in the distro world (even in servers - they
have a pretty solid effort underway to gain installs.)

/Larry Honig.

_______________________________________________
This mailing list is hosted and supported
by bit-heads GmbH | http://www.bit-heads.ch

_______________________________________________
Web-cyradm mailing list
[email protected]
http://www.web-cyradm.org/mailman/listinfo/web-cyradm

Reply via email to