[Pkg-exim4-users] configuring with dpkg

[Marc Haber]

On Mon, Jul 16, 2007 at 05:05:59PM +0200, Steven Lobbezoo wrote:
> Le lundi 16 juillet 2007 14:19, Marc Haber a écrit :
> > I advise against using system accounts for e-mail authentication.
> > My reasoning is documented in README.Debian. There is also
> > documentation about how to do this if you insist.
> Well, i have to, since these users all work in the company, and have other 
> apps they use on the server to.

And they insist on storing the password that gives access to all of
these shiny apps in their mail client?

> > If you use SMTP AUTH, you do not need to allow relaying from specified
> > IP addresses. SMTP AUTH is completely independent of that. Just leave
> > the answer to the debconf question about which networks to relay for
> > empty.
> OK, but ... HOW to enable SMTP-AUTH. I tried to put the following line
> in update........:
> AUTH_CLIENT_ALLOW_NOTLS_PASSWORDS='true'
> But, no dice. The system never accepts any login method.

The server authenticators are commented out by default. Enable those
you want to use by removing the comment sign. And, since you operate
the server, and you are using system account passwords, do NOT
(repeat NOT) allow unencrypted passwords. It is bad enough to have
them stored on the clients, have them encrypted in transit. Please.

http://pkg-exim4.alioth.debian.org/README/README.Debian.html#smtp-auth
should give more advice. That file is also in the package, waiting to
be read.

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany  |  lose things."    Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature |  How to make an American Quilt | Fax: *49 3221 2323190