From: Victor Duchovni (Victor.Duchovnimorganstanley.com)
Date: Tue Apr 01 2008 - 17:57:17 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Tue, Apr 01, 2008 at 03:53:53PM -0600, James Devine wrote:

> Yes, I am able to restrict each instance as each instance has its own
> main.cf and I can set the smtpd_sasl_local_domain for each. I changed the
> code in the sasl client library to trash any realm sent by the user and
> attach the realm sent by postfix instead.

Not a generally useful solution (and likely breaks GSSAPI, ...) :-(
It is probably better to let users authenticate, and then restrict the
realms which pass "permit_sasl_authenticated". Any interest in developing
a clean Postfix patch + docs for that?

--
        Viktor.

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.

To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:
<mailto:majordomopostfix.org?body=unsubscribe%20postfix-users>

If my response solves your problem, the best way to thank me is to not
send an "it worked, thanks" follow-up. If you must respond, please put
"It worked, thanks" in the "Subject" so I can delete these quickly.

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]