[vine-users:069677] Re: postfixのsmtp-authについて教えてください。

[Irish Red <setter _at_ xxxxxxxx>]

鈴木です。

手元のマシンでやって見ました。

# apt-get install cyrus-sasl-plain cyrus-sasl-md5

# apt-get source postfix

postfix.spec の変更点。
diff postfix.spec.orig postfix.spec
117,118c117,119
<               -DHAS_PGSQL -I/usr/include/pgsql" \
< AUXLIBS=""
---
>               -DHAS_PGSQL -I/usr/include/pgsql \
>               -DUSE_SASL_AUTH -I/usr/include/sasl" \
> AUXLIBS="-lsasl2"

$ rpmbuild -ba postfix.spec
# rpm -ivh --force ../RPMS/i386/postfix-2.0.20-0vl5.i386.rpm

# echo "pwcheck_method: saslauthd" > /usr/lib/sasl2/smtpd.conf

# vi /etc/postfix/main.cf  以下の行を追加。
broken_sasl_auth_clients = yes
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
smtp_sasl_security_options = noanonymous
smtpd_recipient_restrictions =permit_sasl_authenticated, reject

# /etc/rc.d/init.d/saslauthd start
# /etc/rc.d/init.d/postfix start

$ telnet localhost 25

Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
220 setter ESMTP Postfix
ehlo locahlost
250-setter
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-AUTH DIGEST-MD5 CRAM-MD5 PLAIN LOGIN
250-AUTH=DIGEST-MD5 CRAM-MD5 PLAIN LOGIN
250-XVERP
250 8BITMIME
quit
221 Bye
Connection closed by foreign host.

で、もじらからつかってみると。
A: 認証使わず。
Jan 13 18:48:22 localhost postfix/smtpd[749]: connect from localhost[127.0.0.1]
Jan 13 18:48:22 localhost postfix/smtpd[749]: BB6422CCD0: client=localhost[127.0.0.1]
Jan 13 18:48:22 localhost postfix/smtpd[749]: BB6422CCD0: reject: RCPT from localhost[127.0.0.1]: 554 <setter _at_ reset.jp>: Recipient address rejected: Access denied; from=<sette
r _at_ reset.jp> to=<setter _at_ reset.jp> proto=ESMTP helo=<[127.0.0.1]>
Jan 13 18:48:25 localhost postfix/smtpd[749]: lost connection after RCPT from localhost[127.0.0.1]
Jan 13 18:48:25 localhost postfix/smtpd[749]: disconnect from localhost[127.0.0.1]

B: 認証あり。
Jan 13 18:50:17 localhost postfix/smtpd[32649]: connect from localhost[127.0.0.1]
...
Jan 13 18:50:17 localhost postfix/smtpd[32649]: warning: localhost[127.0.0.1]: SASL CRAM-MD5 authentication failed
...
Jan 13 18:50:18 localhost postfix/smtpd[32649]: 7A3852CCD0: client=localhost[127.0.0.1], sasl_method=PLAIN, sasl_username=user
Jan 13 18:50:18 localhost postfix/cleanup[361]: 7A3852CCD0: message-id=<41E64459.7020800 _at_ reset.jp>
Jan 13 18:50:18 localhost postfix/qmgr[32646]: 7A3852CCD0: from=<setter _at_ reset.jp>, size=1019, nrcpt=1 (queue active)
Jan 13 18:50:18 localhost postfix/smtpd[32649]: disconnect from localhost[127.0.0.1]

OK !という結果です。

-- 
 Hiroshi Suzuki              It's crucial   qp
 setter _at_ reset.jp                 to my     (..)/
 http://my.reset.jp/~setter/  Well-being   -  -
 http://i-red.info/                         ~~
 Powered by Linux/DeleGate   _____________*-_____