Re: questions on setting up a mail server

All the authentication options you mention after plain text (which is the
standard method built in to the protocol) require Cyrus SASL. This isn't as
scary to set up as the docs make it sound. PLAIN and LOGIN can both use your
existing user passwords (which is what I do). GSSAPI requires Kerberos, and
the digest methods (the -MD5 ones) need a separate file of passwords held in
plain text - the sasldb. Of the passwd-based methods, PLAIN is the preferred
protocol according to the docs and RFCs - LOGIN is the one Microsoft uses (go
figure).

Thanks, that's almost all of what I needed there. You insinuated (but
I don't think explicitly stated) that LOGIN is in fact encrypted in
some form?

Thanks,
-Jim Stapleton
_______________________________________________
freebsd-questions@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscribe@xxxxxxxxxxx"

Relevant Pages

  • Re: questions on setting up a mail server
    ... standard method built in to the protocol) require Cyrus SASL. ... PLAIN and LOGIN can both use your ... existing user passwords. ...
    (freebsd-questions)
  • Re: /etc/hosts.equiv & .rhosts
    ... want to login at another host, that host needs the first host's name ... best to allow key-only login so hackers can't ... on the port 22 as it WILL be messed with all day long. ... # Protocol 2 only ...
    (comp.os.linux.security)
  • Re: questions on setting up a mail server
    ... standard method built in to the protocol) require Cyrus SASL. ... use your existing user passwords. ... passwords held in plain text - the sasldb. ... PLAIN is the preferred protocol according to the docs and RFCs - LOGIN is ...
    (freebsd-questions)
  • Cant get AUTH PLAIN and AUTH LOGIN
    ... but I can't get sendmail to ... give me AUTH PLAIN and LOGIN options. ... TRUST_AUTH_MECH(`EXTERNAL LOGIN PLAIN') ...
    (comp.mail.sendmail)
  • Re: Somebody is keep trying to ssh into my systems, how can I stop that?
    ... your 2058 bit is as bogus as you claim MY security is. ... that any system that allows a user to login can allow a user to get in. ... it invalidates MY method, it invalidates YOURS, plain and simple. ...
    (comp.os.linux.security)