From: Victor Duchovni (Victor.Duchovnimorganstanley.com)
Date: Mon Mar 16 2009 - 09:31:07 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Mon, Mar 16, 2009 at 10:19:44AM -0400, Jorey Bump wrote:

> Victor Duchovni wrote, at 03/16/2009 10:10 AM:
> > On Mon, Mar 16, 2009 at 02:29:17PM +0530, ram wrote:
> >
> >> For smtp-auth configuration, some users put full emailid as username ,
> >> some use just the userid part of email-id(before ''). Can postfix
> >> always authenticate with userid. Can this be done only for email-ids of
> >> some domain
> >
> > Postfix passes the data received from the SASL client verbatim to the
> > SASL library. The rest is up to the SASL library.
>
> For clarification, what happens when smtpd_sasl_local_domain is set?
> Does the presence or absence of a realm in the login alter Postfix
> behaviour?

The value is passed to the SASL library when creating the SASL server
handle as the "realm" argument, for example with Cyrus:

     SASL_SERVER_NEW(service, var_myhostname,
                     realm ? realm : NO_AUTH_REALM,
                     server_address, client_address,
                     NO_SESSION_CALLBACKS, NO_SECURITY_LAYERS,
                     &sasl_conn)

what that means is up to the SASL library. The Dovecot SASL driver
ignores the realm.

--
        Viktor.

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.

To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:
<mailto:majordomopostfix.org?body=unsubscribe%20postfix-users>

If my response solves your problem, the best way to thank me is to not
send an "it worked, thanks" follow-up. If you must respond, please put
"It worked, thanks" in the "Subject" so I can delete these quickly.

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]