OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: the purpose of smtpd_sasl_authenticated_header

From: mouss (usebsdfree.fr)
Date: Mon May 08 2006 - 16:55:18 CDT


Eddy Beliveau wrote:
> I would like to have some header which tell if the SMTP sender has
> been authenticated or not
> and, if so, what was the login username that has been used for
> authentication.
>
> I didn't find a way of doing it in 2.2.10
> I noticed in 2.3 that there is a main.cf parameter
> smtpd_sasl_authenticated_header
> which should add the login username to the Received header
> My problem is that my login username is the studentid or employeeid value
> and I don't want that value to appear on any headers.
so once you "consume" it, replace it.
>
> You said: "- if login = email address (many virtual users setups),
> then there is no problem including the login.
> - if you use a content filter, you can enable it, use it in the
> content filter (SA can use it), and then remove it either in a custom
> filter or using REPLACE after the filter."
>
> This is exactly what I was going to do: -enable
> smtpd_sasl_authenticated_header
> -use it with my content filter
> -and remove the header when I need it no more.
>
> But, I won't need to remove it if the displayed value was something
> like the email address instead of the original login username
what to do and how you do it depend on your exact setup. if you don't
like providing too much infos publicly, contact me offlist (and I'll
"translate" to the list)
>
> This is why I ask if there is some way to display another content in
> that field.
see above. it really depends on your setup. one hint here is to add a
REPLACE in after the filter header_checks that woul remove the login.
but again, this depends on your setup.