Re: filtering ofmipd-submitted messages

On 2 Jun 2017, at 17:35, Andrew Richards wrote:

> ofmipd + AUTH: FYI my ofmipd-plus also bases its' authentication on 
> John
> Levine's SMTP AUTH, you may find it helpful to see what I've done,
>
> http://free.acrconsulting.co.uk/email/ofmipd-plus.html

I hadn't seen that before. Cool. I may borrow a bit en route to my goal, 
which is to make the smallest possible changes to mess822 that result in 
these configuration options for the sysadmin:

1. SMTP AUTH required: ofmipd runs as the authenticated user
2. SMTP AUTH optional: ofmipd runs as the default user (e.g., qmaild) 
unless authenticated
3. SMTP AUTH unavailable: ofmipd runs as it always has

I'm going to try to get there like so:

1. Characterize stock ofmipd's behaviors with automated tests
2. Apply John Levine's SMTP AUTH patch
3. Add more characterization tests around AUTH behaviors
4. Write new tests for what new things I want to happen
5. Make them pass

I intend to factor all the SMTP AUTH behavior out to a new "ofmipup" 
program, at the end of which I suspect my ofmipd will be identical (or 
very nearly so) to DJB's original, and my three desired config options 
will work like so:

1. As root, "ofmipup checkpassword ofmipd"
2. As root, "ofmipup -u qmaild checkpassword ofmipd"
3. As qmaild, "ofmipd"

stunnel has been fine for me, so I plan to avoid learning anything about 
TLS while solving this problem. ;-)

- Amitai