Mailinglist Archive: opensuse-security (485 mails)

< Previous Next >
Re: [suse-security] postfix/imap/cyrus-sasl and Pam backend - PARTLY SOLVED!
  • From: Andreas Winkelmann <ml@xxxxxxxxxxxxxx>
  • Date: Fri, 12 Mar 2004 16:49:46 +0100
  • Message-id: <200403121649.46136.ml@xxxxxxxxxxxxxx>
Am Freitag, 12. März 2004 16:25 schrieb Markus Feilner:

> > > Now smtp, imap and pop work - with:
> > > smtp: tls+plain
> > > pop: ssl+plain
> > > imap:tls+"einfacher text" -Whatever that means...
> > >
> > > Can i make that more secure?
> >
> > Use a real pam-module.
>
> OK. any hints for a working pam- configuration?
> The suse default /etc/pam.d/smtp does not work here...

What is "default"? pam_unix2? Make sure to clear "smtpd_sasl_local_domain" in
Postfix.

# postconf smtpd_sasl_local_domain

should be empty.

> > And force tls/ssl.
>
> You mean for pop, right? smtp and imap use it.
> How can I force That?

Postfix: Look for "smtpd_tls_auth_only = yes" or "smtpd_enforce_tls = yes".

Hmm, which POP/IMAP-Daemon do you use? I know only Cyrus-IMAP.

--
Andreas


< Previous Next >
Follow Ups