OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Different backend authentications for Postfix

From: Wietse Venema (wietseporcupine.org)
Date: Tue Dec 07 2010 - 11:45:12 CST


Jason Voorhees:
> Hi:
>
> For personal reasons I'm planning to migrate a Zimbra installation to
> a Postfix+Cyrus IMAP based schema. My Zimbra server has two domains:
> domain1.com and domain2.com. Users from domain1.com authenticate via
> Active Directory and domain2.com authenticate via Zimbra (using its
> own OpenLDAP server).
>
> As you know Zimbra has postfix embedded with a custom version of
> saslauthd. Now I have to keep the same double authentication schema
> when migrate to postfix so the question is: How could configure
> Postfix to authenticate users from one domain (domain1.com) to a
> backend A (Active Directory) and users from other domain (domain2.com)
> to a backend B (OpenLDAP, MySQL, PAM, etc)? Is it possible? Any ideas?
>
> I hope someone can help me with some ideas.

Postfix does not implement any SASL authentication - SASL
is implemented entirely by the back-end (Cyrus or Dovecot).

        Wietse