authenticating to sendmail?

Gerry Doris gerry
Mon May 17 11:42:06 PDT 2004


On Tue, 24 Dec 2002, Douglas J Hunley wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Gerry Doris spewed electrons into the ether that resembled:
> > 1. sendmail no longer runs as root.  The result is that it can no longer
> > access the /etc/sasldb file where the sasl username/passwords are stored
> > (this is needed if you're going to enable either DIGEST-M5 or CRAM-M5).
> > Lowering the permissions of /etc/sasldb will result in another error.
> 
> why not just create /etc/mail/default-auth-info instead of /etc/sasldb like 
> Sendmail recommends?

If you want to use either CRAM-M5 or DIGEST-M5 you need to have Cyrus-SASL
installed and have used saslpasswd to create username/passwords.  Those
are created in /etc/sasldb.  You won't get CRAM-M5 or DIGEST-M5 working
without /etc/sasldb.  These mechanisms along with GASSAPI (kerberos) and
LOGIN are used to authenticate mail clients to the sendmail server.

The /etc/mail/default-auth-info file is used to authenticate one sendmail 
server to another.  

-- 
Gerry

"The lyfe so short, the craft so long to learne"  Chaucer



More information about the Linux-users mailing list