OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Andreas Piesk (a.pieskgmx.net)
Date: Tue Apr 23 2002 - 17:23:56 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Tuesday, April 23, 2002, 11:52:23 PM, Peter Barnwell wrote:

    > On Tuesday 23 Apr 2002 10:15 pm, you wrote:
    >> hiho,
    >>
    >> i have plans to put pam-based authentication into postfix.
    >> yes, i know, it's possible to use pam via sasl, but i'm not satisfied
    >> with that solution. many people use pam based authentication only
    >> (mysql, ldap, kerberos, etc.) and don't need the extra sasl layer.
    >> so i want to get rid of sasl, because i don't need it.
    >>
    > Am I correct in assuming that you intend to re-write the relevant postfix
    > code to enable Postfix to do smtp auth without sasl? If so I agree with you
    > that this would be a good idea, although my plan was to use MySQL as the sole
    > auth mechanism. sasl seems to add an immense overhead for what is essentialy
    > a pretty trivial operation.

    ok, not rewriting. i think about adding the pam code so it could be enabled
    by DEFS like the sasl code. i agree with you, sasl seems a little bit
    overkill for smtp authentication.

    but i think, using mysql as the sole auth mech (this implies you put the
    necessary mysql calls in postfix) isn't a good idea. if something in
    the mysql interface changes, you have to touch the postfix code. using a
    auth layer like pam you only have to change the module.

    ciao -ap

    -- 
    Andreas Piesk a.pieskgmx.net
    PGP-Fingerprint: 23CB A7E2 2E53 373C  DBCD 8EFC 7777 61C1
    

    - To unsubscribe, send mail to majordomopostfix.org with content (not subject): unsubscribe postfix-users