Postfix SMTP use permit_sasl_authenticated and non ssal for authentication

timgerr · 04-16-2008, 03:00 PM

Hey all,
I have a problem with my mail server. I have some remote users that cannot accept a certificate for SMTP authentication. I would like to change my server so a user can use SSL cert or not. They have to authenticate with a username and password but I want to have the option for the ssl smtp authenication. How can I do this. Here is part of my main.cf file:

Code:

#TLS - SMTP AUTH
disable_vrfy_command = yes
smtpd_use_tls = yes
smtpd_tls_auth_only = yes
tls_random_source = dev:/dev/urandom
smtpd_tls_cert_file = /etc/postfix/cert.pem
smtpd_tls_key_file = /etc/postfix/key.pem
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
broken_sasl_auth_clients = yes
# Add some security
# Added by XXXXXX 12/10/2007
smtpd_recipient_restrictions =
        permit_sasl_authenticated,
        permit_mynetworks,
        reject_unauth_destination,
        reject_invalid_hostname,
        reject_unknown_sender_domain,
        reject_unknown_recipient_domain,
        reject_rbl_client list.dsbl.org,
        reject_rbl_client sbl-xbl.spamhaus.org,
        reject_rbl_client cbl.abuseat.org,
        reject_rbl_client dul.dnsbl.sorbs.net

Thanks for the help.

Timgerr

billymayday · 04-17-2008, 07:49 AM

Have a look at http://postfix.state-of-mind.de/patr...s_support.html

This is the first SASL/TLS howto listed on the postfix howto site

datopdog · 04-17-2008, 11:14 AM

Code:

smtpd_tls_auth_only = no

That one liner will sort you out.