On 2023-03-04 12:01, Per Jessen wrote:
Carlos E. R. wrote:
I am confused about why the need to configure for "NTLM and GSSAPI" as you say. I don't configure for any, I just let postfix figure it out on its own.
You must have a very special postfix :-) There is no way postfix is going to automagically figure out how to submit mails on port 587, set up TLS, authenticate etc.
Kind of. I configured it once years ago, a decade ago at least, but I never had to worry about what protocols it does. It negotiates what to use with the other end, AFAIK. But my mail providers do not seem to require kerberos. ############################################################ # SASL stuff ############################################################ #-- Passwords: client smtp_sasl_auth_enable = yes smtp_sender_dependent_authentication = yes smtp_sasl_security_options = noanonymous smtp_sasl_password_maps = lmdb:/etc/postfix/sasl_passwd smtp_sasl_mechanism_filter = cram-md5, login #-- Passwords: server smtpd_sasl_auth_enable = no # cyrus : smtpd_sasl_type = cyrus # smtpd_sasl_path = smtpd # dovecot : smtpd_sasl_type = dovecot # smtpd_sasl_path = private/auth smtpd_sasl_type = cyrus smtpd_sasl_path = smtpd ############################################################ # TLS stuff ############################################################ #tls_append_default_CA = no relay_clientcerts = #tls_random_source = dev:/dev/urandom smtp_tls_security_level = may smtp_use_tls = no smtp_tls_loglevel = 1 smtp_enforce_tls = no smtpd_use_tls = no smtpd_tls_loglevel = 0 smtpd_tls_CAfile = smtpd_tls_CApath = smtpd_tls_cert_file = smtpd_tls_key_file = smtpd_tls_ask_ccert = no smtpd_tls_exclude_ciphers = RC4 smtpd_tls_received_header = no smtpd_tls_session_cache_database = lmdb:${data_directory}/smtpd_scache Most of that is either default openSUSE configs, or come from /usr/share/doc/packages/postfix-doc/README_FILES/SASL_README. That file mentions GSSAPI and NTLM. I see now that it is different. For port 587, what I use is this: /etc/postfix/sender_relayhost robin.listas@gmx.es [mail.gmx.es]:submission robin.listas@telefonica.net [smtp.telefonica.net] -- Cheers / Saludos, Carlos E. R. (from 15.4 x86_64 at Telcontar)