OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Postifx authentication for clients

From: Alexander Hoogerhuis (alexhboxed.no)
Date: Thu Dec 13 2007 - 14:42:18 CST


Wietse Venema wrote:
> Alexander Hoogerhuis:
>> A quick question regarding postfix 2.4 and authentiation:
>>
>> Is there any similar mechinsm to smtp_sasl_password_maps that would
>> allow postfix as a server to have a simple map of remote IP/network and
>> user:pass stored, and not having to go through using full SASL?
>
> With Postfix you can plug in an alternate if you don't like the
> Dovecot or Cyrus ones. Docs in src/xsasl.
>

Having had a look through the docs and read a bit, how well would it be
looked upon to implement a very simple model, call it "simple" for the
sake of a name, so that you could stick this in the config file and be
running:

smtpd_sasl_type = simple
smtpd_sasl_auth_enable = yes
smtpd_sasl_path = hash:/etc/postfix/sasl_auth_map

and in /etc/postfix/sasl_auth_map:

1.2.3.4/30 user:pass
5.6.7.8/30 foo:bar
[etc]

The only aim for this would be to have a way to get a very simple
mechanism to challenge clients with a username and password and avoid
any external systems, and to rely simply on a flat file for the info.

> Wietse

-A :)