Re: Mail relaying on postfix using the Jamm environemnt

> 
> Do you have any notes on how to do this?
> 
configure cyrus sasl2, something like this should work

--with-rc4 --with-dblib=berkeley     --enable-anon     --enable-cram     --enable-digest --enable-plain     --enable-login     --enable-ntlm

make
make install

ln -s /usr/local/lib/sasl2 /usr/lib/sasl2
ln -s /usr/local/include/sasl/ /usr/include/sasl


get the tls patch

ftp://ftp.aet.tu-cottbus.de/pub/postfix_tls

patch postfix

patch -p1 < ../pfixtls-0.8.16-2.0.18-0.9.7c/pfixtls.diff

recompile postfix

make tidy
make makefiles CCARGS="-DUSE_SSL -I/usr/local/ssl/include -DUSE_SASL_AUTH -I/usr/include/sasl -DHAS_LDAP -I/usr/local/include" AUXLIBS="-L/usr/local/lib -lldap -L/usr/local/lib -llber -L/usr/local/ssl/lib -lssl -lcrypto -L/usr/lib/sasl2 -lsasl2 -lssl -lcrypto"
make upgrade



edit /usr/lib/sasl2/smtpd.conf

mini root # cat /usr/lib/sasl2/smtpd.conf
pwcheck_method: saslauthd
mech_list: AUTH LOGIN PLAIN DIGEST-MD5 CRAM-MD5
mini root #


edit /etc/saslauthd.conf

mini root # cat /etc/saslauthd.conf
ldap_servers: ldap://192.168.1.3
ldap_filter: mail=%u
mini root #
note: depending on the version of sasl2 libs either use mail=%u or if you sasl2 libs are newer then 2.1.17 use mail=%u@%r in your ldap_filter

note2 you might also make your ldap filter to read something like
ldap_filter: (&(ObjectClass=JammMailAccount)(mail=%u@%r)(accountactive=TRUE)(SmtpAuth=TRUE))

smtpauth is an extra attribute i added to the ldap schema


edit main.cf

this is needed for smtp auth

smtpd_sasl_auth_enable = yes
#smtpd_sasl_local_domain = $myhostname
broken_sasl_auth_clients = yes
smtpd_recipient_restrictions = permit_mynetworks,
  permit_sasl_authenticated,
  check_relay_domains
smtpd_sasl_security_options = noanonymous

start saslauthd
/usr/local/sbin/saslauthd -a ldap -O /etc/saslauthd.conf

restart postfix


that should do it i think.

this doesn't cover setting up tls, it shouldn't be to hard, just following the README files in postfix source tree should be enough (i'm to lame for it at the moment)

if you have trouble check /var/log/maillog and /var/log/secure

ps. i wrote it down very quickly so forgive me if it contains errors or typo's
	
i hope it's helpfull

-- 
Met vriendelijke groeten/kind regards,

Chris Holleman



-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g. 
Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click