OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Patrick Ben Koetter (pstate-of-mind.de)
Date: Wed Apr 03 2002 - 00:49:10 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    >
    > > Outlook speaks SMTP to submit it's mail, like any other
    > MUA. Thus, the
    > > SMTP AUTH authentication is SMTP over TLS.
    >
    > but as I understand it, you can generate your own certificate
    > primarily to create SSH-like security for the transmission of
    > passwords which can then be authenticated for smtpd by SASL,
    > or am I misunderstanding how this all works together? At least,
    > that is what I am after - is there a better way?

    The idea is to use TLS to encrypt the connection before you send SMTP
    AUTH data (using SASL) when your client can only authenticate using
    method: plaintext/login.

    AFAIK you are on the right way, but only need to pass the SASL
    compilation part, which can be a time consuming task as for the
    excellent documentation that comes with sasl ;)

    For MySQL support I'd do what needs to be done when providing your own
    method. I think there really was a section on 'selfwritten methods' in
    the docs section of cyrus-SASL.

    prick

    -
    To unsubscribe, send mail to majordomopostfix.org with content
    (not subject): unsubscribe postfix-users