Bug#299732: marked as done (exim4: Add examples for cyrus_sasl authenticator)

Debian Bug Tracking System owner@bugs.debian.org
Wed, 25 May 2005 16:33:07 -0700


Your message dated Thu, 26 May 2005 01:27:32 +0200
with message-id <20050525232732.GA26471@lefler.int.l21.ma.zugschlus.de>
and subject line Closing bugs aftger 4.50-6 has been approved for sarge
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--------------------------------------
Received: (at submit) by bugs.debian.org; 16 Mar 2005 02:40:41 +0000
>From jk@blackdown.de Tue Mar 15 18:40:41 2005
Return-path: <jk@blackdown.de>
Received: from smtp.blackdown.de [213.239.206.42] 
	by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
	id 1DBOSe-0007aP-00; Tue, 15 Mar 2005 18:40:40 -0800
Received: from p3e9c3923.dip0.t-ipconnect.de ([62.156.57.35] ident=[FYVO03H/reUY32UMHNEP5Rxh47x4DCc2])
	by smtp.blackdown.de with esmtpsa (TLS-1.0:RSA_AES_256_CBC_SHA:32)
	(Exim 4.50)
	id 1DBOSc-0001Tz-BH
	for submit@bugs.debian.org; Wed, 16 Mar 2005 03:40:38 +0100
Received: from fry.jknet ([192.168.1.2] ident=[3XlL/1YVj1GT4N7eOqJBhzqsOgK3lZv7])
	by server.jknet with esmtps (TLS-1.0:RSA_AES_256_CBC_SHA:32)
	(Exim 4.44)
	id 1DBOSb-00019H-G9
	for submit@bugs.debian.org; Wed, 16 Mar 2005 03:40:37 +0100
Received: from jk by fry.jknet with local (Exim 4.50)
	id 1DBOSb-000352-0l
	for submit@bugs.debian.org; Wed, 16 Mar 2005 03:40:37 +0100
From: Juergen Kreileder <jk@blackdown.de>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: exim4: Add examples for cyrus_sasl authenticator
X-PGP-Key: http://blackhole.pca.dfn.de:11371/pks/lookup?op=get&search=0x730A28A5
X-PGP-Fingerprint: 7C19 D069 9ED5 DC2E 1B10  9859 C027 8D5B 730A 28A5
Date: Wed, 16 Mar 2005 03:40:36 +0100
Message-ID: <87psy0ia8r.fsf@blackdown.de>
Organization: Blackdown Java-Linux Team
Lines: 47
User-Agent: Gnus/5.110003 (No Gnus v0.3) Emacs/21.3 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Delivered-To: submit@bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE 
	autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 

Package: exim4
Version: 4.50-4
Severity: wishlist

The sasl authentication examples should be updated for the cyrus_sasl
authenticator.

Here's what I use:

,----
| cram_md5_sasl_server:
|   driver = cyrus_sasl
|   public_name = CRAM-MD5
|   server_realm = <short main hostname>
|   server_set_id = $1
| 
| plain_sasl_server:
|   driver = cyrus_sasl
|   public_name = PLAIN
|   server_realm = <short main hostname>
|   # don't send system passwords over unencrypted connections
|   server_advertise_condition = ${if eq{$tls_cipher}{}{0}{1}}
|   server_set_id = $1
| 
| login_sasl_server:
|   driver = cyrus_sasl
|   public_name = LOGIN
|   server_realm = <short main hostname>
|   # don't send system passwords over unencrypted connections
|   server_advertise_condition = ${if eq{$tls_cipher}{}{0}{1}}
|   server_set_id = $1
`----

I'm not sure if using the short hostname as relam will work for
everybody switching to cyrus_sasl from plaintext/saslauthd.  At least
on my systems, the plaintest/saslauthd combination used it as the
realm by default.

Note that the server_advertise_condition is untested.  (I only accept
'verify = certificate' in my acl_smtp_auth.)


        Juergen

-- 
Juergen Kreileder, Blackdown Java-Linux Team
http://blog.blackdown.de/

---------------------------------------
Received: (at 299732-done) by bugs.debian.org; 25 May 2005 23:27:35 +0000
>From mh+debian-packages@zugschlus.de Wed May 25 16:27:35 2005
Return-path: <mh+debian-packages@zugschlus.de>
Received: from 5301d.unt0.torres.l21.ma.zugschlus.de (torres.int.l21.ma.zugschlus.de) [217.151.83.1] (Debian-exim)
	by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
	id 1Db5Hj-00074Q-00; Wed, 25 May 2005 16:27:35 -0700
Received: from lefler.int.l21.ma.zugschlus.de ([192.168.130.38])
	by torres.int.l21.ma.zugschlus.de with esmtps (TLS-1.0:RSA_AES_256_CBC_SHA:32)
	(Exim 4.50)
	id 1Db5Hh-0005T0-R4; Thu, 26 May 2005 01:27:33 +0200
Received: from mh by lefler.int.l21.ma.zugschlus.de with local (Exim 4.50)
	id 1Db5Hg-0006xJ-TP; Thu, 26 May 2005 01:27:32 +0200
Date: Thu, 26 May 2005 01:27:32 +0200
From: Marc Haber <mh+debian-packages@zugschlus.de>
To: 307961-done@bugs.debian.org, 297670-done@bugs.debian.org,
	299051-done@bugs.debian.org, 302060-done@bugs.debian.org,
	303351-done@bugs.debian.org, 304033-done@bugs.debian.org,
	299732-done@bugs.debian.org, 296492-done@bugs.debian.org,
	299733-done@bugs.debian.org, 300967-done@bugs.debian.org
Cc: Marc Haber <mh+debian-packages@zugschlus.de>
Subject: Closing bugs aftger 4.50-6 has been approved for sarge
Message-ID: <20050525232732.GA26471@lefler.int.l21.ma.zugschlus.de>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.5.9i
Delivered-To: 299732-done@bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-3.0 required=4.0 tests=BAYES_00 autolearn=no 
	version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 
X-CrossAssassin-Score: 4

These bugs are now fixed in sarge as well.

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany  |  lose things."    Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature |  How to make an American Quilt | Fax: *49 621 72739835