Sendmail AUTH

[Justin Willmert]

Thanks for that reply. I came to the solution by trial-and-error, but I 
didn't know why; you answered that for me. Thanks!

Justin

Alexander Dalloz wrote:
> Am Do, den 04.08.2005 schrieb Justin Willmert um 17:28:
> 
> 
>>I've been trying to get my Sendmail server to use authentication to send 
>>emails. Right now I can get by with just using my 'access' file and 
>>allowing my home network's IP address, but when we go on vacation, I 
>>can't send emails without creating a tunnel with putty to my server at 
>>home to make Sendmail think I'm sending it from localhost.
> 
> 
> Correct, SMTP AUTH is the route to go here for being able to send mail
> through your MTA from untrusted because changing IP addresses.
> 
> 
>>The problem is I can't get authentication to work. I've followed a 
>>couple different tutorials on-line, and by all appearances, it should 
>>work, but it doesn't.
>>
>>First, the text below is the settings I added to sendmail.mc. This is 
>>where I deviate from some of the tutorials. Many of them also set up for 
>>encryption, but until I get at least this part to work, I don't even 
>>want to think about that, though I'll probably add that in later sometime.
>>
>>     define(`confAUTH_OPTIONS', `A')dnl
>>     TRUST_AUTH_MECH(`LOGIN PLAIN')dnl
>>     define(`confAUTH_MECHANISMS', `LOGIN PLAIN')dnl
> 
> 
> Looks good for using those 2 mechs. Better to combine that in second
> step with STARTTLS to not send auth data unencrypted through the net.
> 
> 
>>And then I just want to login with my system accounts and not have to 
>>worry about keeping SASL accounts in sync with my system (stored in an 
>>LDAP server) accounts, I have this in my /usr/lib/sasl2/Sendmail.conf file:
>>
>>     pwcheck_method:pam
> 
> 
> That is wrong. This _was_ valid with SASL v1.5 but no longer with
> SASLv2. So change it back to be
> 
> pwcheck_method:saslauthd
> 
> 
>>When I try to send an email, Thunderbird asks me for my password (after 
>>I put my username in the properties for my SMTP server, of course) and 
>>it fails. I can enter my password a couple different time, but it always 
>>fails.
> 
> 
> It can't work with that setup.
> 
> 
>>Justin Willmert
> 
> 
> Run "service saslauthd start" and "chkconfig saslauthd on". As soon as
> started the saslauthd you are able to SMTP AUTH. The default setup is to
> use shadow with saslauthd which is basically the same as using pam
> (default). Only if you change your /etc/pam.d/smtp setup to be different
> for specific purposes you get something different and it will require to
> change in /etc/sysconfig/saslauthd to MECH=pam to use PAM.
> 
> http://www.joreybump.com/code/howto/smtpauth.html
> 
> That is a good howto for Fedora use of Sendmail and SMTP AUTH.
> 
> Alexander
> 
> 
>