Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 22 Dec 2001 01:21:42 +0100 (CET)
From:      Leif Neland <leifn@neland.dk>
To:        Leo Bicknell <bicknell@ufp.org>
Cc:        <freebsd-hackers@FreeBSD.ORG>
Subject:   Re: sendmail + auth + ssl + freebsd
Message-ID:  <20011222011106.F95956-100000@arnold.neland.dk>
In-Reply-To: <20011220022654.GA78232@ussenterprise.ufp.org>

next in thread | previous in thread | raw e-mail | index | archive | help


On Wed, 19 Dec 2001, Leo Bicknell wrote:

>
> After searching the archives and looking at the source, I find
> myself more confused.  I've been asked to set up sendmail + ssl +
> SMTP auth on a FreeBSD host.
>
> A quick "strings" on the sendmail binary shows a number of SSL
> functions, so I'm thinking the SSL bits are in there, but I'm not
> quite sure how to take advantage of them.  Issuing "AUTH" to a
> stock -STABLE sendmail gets command unrecognized though, so I don't
> think that is there.
>

Do you have this in /etc/make.conf?

# Add SMTP AUTH support to Sendmail
SENDMAIL_CFLAGS+=	-I/usr/local/include/sasl -DSASL -D_FFR_UNSAFE_SASL
SENDMAIL_LDFLAGS+=	-L/usr/local/lib
SENDMAIL_LDADD+=	-lsasl

In sendmail.mc:
TRUST_AUTH_MECH(`PLAIN LOGIN DIGEST-MD5 CRAM-MD5')dnl
define(`confAUTH_MECHANISMS',`PLAIN LOGIN DIGEST-MD5 CRAM-MD5')dnl
define(`confDONT_BLAME_SENDMAIL',`GroupReadableSASLFile')dnl

in /usr/local/lib/sasl/Sendmail.conf:
pwcheck_method: shadow

This will at least give you AUTH.
(I think you need to install ports/security/cyrus-sasl to make it work,
but I'm not sure).

> If no one else has figured this mess out, I'll do it and write a
> page for the handbook. If someone else has, please clue me in, and
> if necessary I'll still write that handbook page. :-)  It would be
> very nice if it was simple to make FreeBSD sendmail SSL and
> authenticate against the password file.

Leif


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011222011106.F95956-100000>