Dovecot Submission Proxy Auth

Stephan Bosch stephan at rename-it.nl
Sat Jan 12 23:04:34 EET 2019



Op 11/01/2019 om 02:52 schreef Jacky:
>
> Hi,
>
> Just found out that Postfix does not implement/support the AUTH=sender 
> parameter.
>
> So, back to Dovecot, can we use variables in the
>
> submission_relay_user =
> submission_relay_password =
>

No, that is not supported. :/

> then Dovecot will forward the username and password information of the 
> current user to the Postfix submission service for authentication?
>

Would Postfix do something with the XCLIENT LOGIN field in that regard?

(Note that 2.3.4 messes up XCLIENT in several ways, so --- if Postfix 
can do this --- you'll have to wait for the next release).

Regards,

Stephan.

> Best regards,
>
> Jacky
>
>
>
> On 10/1/2019 10:46 AM, Jacky wrote:
>>
>> Hi Gerald and Odhiambo Washington,
>>
>> Thank you for your suggestions and will try them out.
>>
>> Best regards,
>>
>> Jacky
>>
>> On 9/1/2019 6:38 PM, Odhiambo Washington wrote:
>>>
>>>
>>> On Wed, 9 Jan 2019 at 13:09, Jacky <jacky at jesstech.com 
>>> <mailto:jacky at jesstech.com>> wrote:
>>>
>>>     Hi Gerald,
>>>
>>>     in my postfix/main.cf <http://main.cf>
>>>
>>>     smtpd_sasl_authenticated_header = yes
>>>     smtpd_sasl_security_options = noanonymous
>>>     smtpd_sasl_local_domain = $myhostname
>>>     smtpd_sasl_type = dovecot
>>>     smtpd_sasl_path = /var/run/dovecot/auth-client
>>>     broken_sasl_auth_clients = yes
>>>
>>>     I am already using dovecot for SASL
>>>
>>>     The dovecot submission service authenticates users and already
>>>     added the
>>>     AUTH= parameter in the MAIL FROM
>>>
>>>     MAIL FROM:<jacky at xxx.com <mailto:jacky at xxx.com>>
>>>     AUTH=jacky at xxx.com <mailto:jacky at xxx.com> SIZE=1430
>>>
>>>     But, it seems that postfix does not accept the AUTH= parameter and
>>>     reject the sender as no logged in.
>>>
>>>
>>>     Best regards,
>>>
>>>     Jacky
>>>
>>>
>>> Hi Jacky,
>>>
>>> Your question belongs to postfix mailinng list.
>>>
>>> Anyway, the last time I was playing with postfix (I am an Exim user 
>>> normally), I had to check that:
>>> smtpd_sasl_path = /var/run/dovecot/auth-client
>>>
>>> ..the socket is readable by the postfix user:
>>>
>>> So, check 10-master.conf for the socket. Something like:
>>>
>>> # Postfix smtp-auth
>>>   unix_listener  var/run/dovecot/auth-client  {
>>>     mode = 0666
>>>   }
>>>
>>> Restart dovecot and see...
>>>
>>> You can read the https://wiki.dovecot.org/HowTo/PostfixAndDovecotSASL
>>>
>>>
>>>
>>> -- 
>>> Best regards,
>>> Odhiambo WASHINGTON,
>>> Nairobi,KE
>>> +254 7 3200 0004/+254 7 2274 3223
>>> "Oh, the cruft.", grep ^[^#] :-)



More information about the dovecot mailing list