Hello

I've been educating myself all day, trying to figure out how to prevent some local users from using Postfix. These are regular users but I placed some heavy restricitons on what they can do in a chroot.

Finally I remembered about saslauthd, and I thought I've nearly figured it out. But I haven't.

I'm seeing references in my readings about /etc/pam.d/smtpd.conf - a file which doesn't exist on my system. I'm reasonably sure that I didn't delete it.

Given that this file is missing: what configuration is Potfix using in order to authenticate with SASL?

If I create /etc/pam.d/smtpd.conf and guess what to put into it: am I likely to break something on my mostly vanilla Postfix setup?

I'm essentially in the same boat as the guy asking this question on serverfault. He didn't get an answer.

Thanks in advance.

Try /usr/doc/postfix-3.9.0/readme/SASL_README and see if that helps.

I managed it: http://littlesvr.ca/grumble/2024/03/...e-local-users/

That was strangely difficult to figure out. I thought this would be is a relatively common requirement.

I wonder if doing this with PAM would have been a cleaner solution, but I don't have the time now to figure out the ins and outs of how PAM works.