[gentoo-user] Re: Courier-Authlib and S.A.S.L.

[Ashley Dixon]

On Sat, Mar 28, 2020 at 19:23:24 +0000, Andreas Stiasny wrote:
> When I compare the output of "grep -i sasl /etc/postfix/main.cf" to your
> configuration the only noticeable difference is that you don't have the line
>
> smtpd_sasl2_auth_enable = yes

Seems the T.L.S.\ encryption was the culprit. Although all the S.A.S.L.\ options
were configured correctly, `telnet` wasn't reporting it as T.L.S.\ was
optional in general, but required for authentication.

smtpd_tls_security_level = may
smtpd_tls_auth_only = yes

Changing `smtpd_tls_security_level` to `encrypt` seems to fix the issue, such
that a STARTTLS is now required for most actions aside from HELO/EHLO.

According to [1], the `sql_select: dummy` is only required if cyrus-sasl is
built with MySQL/PostgreSQL support, which in this case is not required due to
the help of courier-authlib.

Thanks for your help. It seems that I also forgot to add `smtpd_sasl_auth_enable
= yes` for some reason *; the name isn't exactly cryptic!

[1] Gentoo Forums,
https://forums.gentoo.org/viewtopic-t-502523.html

 * Despite me using S.A.S.L. 2 (/etc/sasl2), Postfix doesn't seem to recognise
 * the `smtpd_sasl2_auth_enable` option, only `smtpd_sasl_auth_enable`.

-- 

Ashley Dixon
suugaku.co.uk

2A9A 4117
DA96 D18A
8A7B B0D2
A30E BF25
F290 A8AA