From tobias.koeck at qudosoft.de Thu May 17 15:57:46 2018 From: tobias.koeck at qudosoft.de (=?utf-8?B?VG9iaWFzIEvDtmNr?=) Date: Thu, 17 May 2018 14:57:46 +0000 Subject: saslauthd Message-ID: <54ba97bbe490402ca96d3ecc2c93946c@qudosoft.de> Hi, just found a strange information in the saslauthd manpage sasldb (All platforms) Authenticate against the SASL authentication database. Note that this is prob‐ ably not what you want to use, and is even disabled at compile-time by default. If you want to use sasldb with the SASL library, you probably want to use the pwcheck_method of "auxprop" along with the sasldb auxprop plugin instead I don't understand why saslauthd with salsdb should not be used in the Postfix environment? At least there is no explanation why it's not what someboy want. Greetings Tobias -------------- next part -------------- An HTML attachment was scrubbed... URL: From dwhite at olp.net Fri May 25 22:27:56 2018 From: dwhite at olp.net (Dan White) Date: Fri, 25 May 2018 16:27:56 -0500 Subject: saslauthd In-Reply-To: <54ba97bbe490402ca96d3ecc2c93946c@qudosoft.de> References: <54ba97bbe490402ca96d3ecc2c93946c@qudosoft.de> Message-ID: <20180525212756.GB2471@dan.olp.net> On 05/17/18 14:57 +0000, Tobias Köck wrote: >Hi, > >just found a strange information in the saslauthd manpage > > sasldb (All platforms) > > Authenticate against the SASL authentication database. Note that this is prob‐ > ably not what you want to use, and is even disabled at compile-time by default. > If you want to use sasldb with the SASL library, you probably want to use the > pwcheck_method of "auxprop" along with the sasldb auxprop plugin instead > >I don't understand why saslauthd with salsdb should not be used in the >Postfix environment? At least there is no explanation why it's not what >someboy want. It is unusual to perform sasldb authentication via saslauthd. To do so would limit you to plaintext authentication mechanisms only (plain/login). saslauthd is an optional component of cyrus sasl. Much more common is to sidestep saslauthd altogether and specify the 'pwcheck_method: auxprop' configuration line above. Postfix should not use or need saslauthd unless you've configured 'pwcheck_method: saslauthd'. Consult the documentation at: https://www.cyrusimap.org/sasl/sasl/components.html If you have any further specific questions, you can ask on the cyrus-sasl mailing list. -- Dan White From tobias.koeck at qudosoft.de Mon May 28 09:19:33 2018 From: tobias.koeck at qudosoft.de (Tobias Koeck) Date: Mon, 28 May 2018 10:19:33 +0200 Subject: saslauthd In-Reply-To: <20180525212756.GB2471@dan.olp.net> References: <54ba97bbe490402ca96d3ecc2c93946c@qudosoft.de> <20180525212756.GB2471@dan.olp.net> Message-ID: <0507a039-a58d-7769-3148-c91970c71e80@qudosoft.de> Thanks for the information. On 05/25/2018 11:27 PM, Dan White wrote: > On 05/17/18 14:57 +0000, Tobias Köck wrote: >> Hi, >> >> just found  a strange information in the saslauthd manpage >> >>     sasldb     (All platforms) >> >>                Authenticate against the SASL authentication database. >> Note that this is prob‐ >>                ably not what you want to use, and is even disabled at >> compile-time by default. >>                If you want to use sasldb with the SASL library, you >> probably want to use the >>                pwcheck_method of "auxprop" along with the sasldb >> auxprop plugin instead >> >> I don't understand why saslauthd with salsdb should not be used in the >> Postfix environment? At least there is no explanation why it's not what >> someboy want. > > It is unusual to perform sasldb authentication via saslauthd. To do so > would limit you to plaintext authentication mechanisms only (plain/login). > saslauthd is an optional component of cyrus sasl. > > Much more common is to sidestep saslauthd altogether and specify the > 'pwcheck_method: auxprop' configuration line above. Postfix should not use > or need saslauthd unless you've configured 'pwcheck_method: saslauthd'. > > Consult the documentation at: > > https://www.cyrusimap.org/sasl/sasl/components.html > > If you have any further specific questions, you can ask on the > cyrus-sasl mailing list. >