OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Authenticating Postfix SMTP via LDAP

From: Patrick Ben Koetter (pstate-of-mind.de)
Date: Mon Jan 03 2005 - 02:49:30 CST


* Nic le Roux <nicli-procc.za.net>:
> Good morning all,
>
> I have been googleling around but haven't found a definitive answer maybe
> someone could clarify for me.
>
>
> I'm using postfix with LDAP backend for authentication.
> I would like to use LDAP authentication without using PAM as a middle man
> (this is what is mostly suggested on the threads I have come across).
>
> However if at all possible I need to avoid that.
> Is this possible ?

Use either saslauthd or the auxprop plug-in ldapdb (requires
Cyrus-SASL.2.1.20).

> And if so a shove in the right direction would be greatly appreciated,

saslauthd gives you plaintext mechanisnms and requires a saslauthd.conf
which will hold all the LDAP parameters. See man saslauthd and
saslauthd.conf in the source tree.

ldapdb gets you more mileage and adds shared-secret mechanisms. It is
however a lot harder to setup and isn't really documented well.

See the OpenLDAP source contrib tree for the ldapdb plugin. It might
carry more documentation.

prick

--
SMTP AUTH howto:
<http://postfix.state-of-mind.de/patrick.koetter/smtpauth/>
SMTP AUTH debug utility:
<http://postfix.state-of-mind.de/patrick.koetter/saslfinger/>