Re: Mail relaying on postfix using the Jamm environemnt

A huge thanks for this - I'll tackle it first thing tomorrow - talk about 
weight taken off your shoulders.

Thanks again - I'll feedback as much as possible.

Cheers
Buzz

>From: Chris Holleman <[email protected]>
>Reply-To: [email protected]
>To: [email protected]
>Subject: Re: [Jamm-users] Mail relaying on postfix using the Jamm 
>environemnt
>Date: Sun, 23 May 2004 12:07:08 +0200
>
> >
> > Do you have any notes on how to do this?
> >
>configure cyrus sasl2, something like this should work
>
>--with-rc4 --with-dblib=berkeley     --enable-anon     --enable-cram     
>--enable-digest --enable-plain     --enable-login     --enable-ntlm
>
>make
>make install
>
>ln -s /usr/local/lib/sasl2 /usr/lib/sasl2
>ln -s /usr/local/include/sasl/ /usr/include/sasl
>
>
>get the tls patch
>
>ftp://ftp.aet.tu-cottbus.de/pub/postfix_tls
>
>patch postfix
>
>patch -p1 < ../pfixtls-0.8.16-2.0.18-0.9.7c/pfixtls.diff
>
>recompile postfix
>
>make tidy
>make makefiles CCARGS="-DUSE_SSL -I/usr/local/ssl/include -DUSE_SASL_AUTH 
>-I/usr/include/sasl -DHAS_LDAP -I/usr/local/include" 
>AUXLIBS="-L/usr/local/lib -lldap -L/usr/local/lib -llber 
>-L/usr/local/ssl/lib -lssl -lcrypto -L/usr/lib/sasl2 -lsasl2 -lssl 
>-lcrypto"
>make upgrade
>
>
>
>edit /usr/lib/sasl2/smtpd.conf
>
>mini root # cat /usr/lib/sasl2/smtpd.conf
>pwcheck_method: saslauthd
>mech_list: AUTH LOGIN PLAIN DIGEST-MD5 CRAM-MD5
>mini root #
>
>
>edit /etc/saslauthd.conf
>
>mini root # cat /etc/saslauthd.conf
>ldap_servers: ldap://192.168.1.3
>ldap_filter: mail=%u
>mini root #
>note: depending on the version of sasl2 libs either use mail=%u or if you 
>sasl2 libs are newer then 2.1.17 use mail=%u@%r in your ldap_filter
>
>note2 you might also make your ldap filter to read something like
>ldap_filter: 
>(&(ObjectClass=JammMailAccount)(mail=%u@%r)(accountactive=TRUE)(SmtpAuth=TRUE))
>
>smtpauth is an extra attribute i added to the ldap schema
>
>
>edit main.cf
>
>this is needed for smtp auth
>
>smtpd_sasl_auth_enable = yes
>#smtpd_sasl_local_domain = $myhostname
>broken_sasl_auth_clients = yes
>smtpd_recipient_restrictions = permit_mynetworks,
>   permit_sasl_authenticated,
>   check_relay_domains
>smtpd_sasl_security_options = noanonymous
>
>start saslauthd
>/usr/local/sbin/saslauthd -a ldap -O /etc/saslauthd.conf
>
>restart postfix
>
>
>that should do it i think.
>
>this doesn't cover setting up tls, it shouldn't be to hard, just following 
>the README files in postfix source tree should be enough (i'm to lame for 
>it at the moment)
>
>if you have trouble check /var/log/maillog and /var/log/secure
>
>ps. i wrote it down very quickly so forgive me if it contains errors or 
>typo's
>
>i hope it's helpfull
>
>--
>Met vriendelijke groeten/kind regards,
>
>Chris Holleman
>
>
>
>-------------------------------------------------------
>This SF.Net email is sponsored by: Oracle 10g
>Get certified on the hottest thing ever to hit the market... Oracle 10g.
>Take an Oracle 10g class now, and we'll give you the exam FREE.
>http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
>_______________________________________________
>Jamm-users mailing list
>[email protected]
>https://lists.sourceforge.net/lists/listinfo/jamm-users

_________________________________________________________________
Get a FREE connection, FREE modem and one month's FREE line rental, plus a 
US or European flight when you sign up for BT Broadband!  
http://www.msn.co.uk/specials/btbroadband



-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g. 
Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click