OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Piotr Klaban (maklerman.torun.pl)
Date: Mon Jul 02 2001 - 01:37:36 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On Thu, Jun 28, 2001 at 03:55:54PM +0200, Loic Le Loarer wrote:
    > > You can use nss_mysql (found on sourceforge) and SASL (with PAM or pwcheck).
    >
    > Well this is a good idea, I did not know the existence of nss_mysql,
    > thank you.
    > But with this method I must give SASL access to all the users and I must
    > create a true UNIX users for all the SASL users (of course it can have
    > no access to the system but, we never know), is there a way to create
    > SASL only users ?

    You are right, users then are local to the system.
    If you want to use SASL only users, but with mysql database,
    then you can use pam_mysql module (there is also pam_ldap etc.).
    But you need diffrent setup for sasl-1.5.24 and sasl-2.x (in alpha
    stage now).

    NOTE: I did not tested it, it's just my thoughts.

    With sasl-1.5.24 (current postfix implementation) you need to
    include pam_mysql call in /etc/pam.d/smtp, and with sasl-2.x
    in /etc/pam.d/cyrus (I just looked for pam_start() calls in the
    cyrus-sasl sources). There is no /etc/pam.d directory in Solaris,
    then you need to use just 'smtp' and 'cyrus' service names.

    -- 
    Piotr Klaban
    -
    To unsubscribe, send mail to majordomopostfix.org with content
    (not subject): unsubscribe postfix-users