Hello.

I've notice a problem with SMTP AUTH in postfix with dovecot. My configuration is based on Postgresql. I've created a function in postgresql which returns password and username and attached it to password_query. Query looks like this

password_query = SELECT username_out as username, password_out as password FROM get_password(lower('%n'),lower('%d'));

Problem is when get_password returns something like this...

vmail=# SELECT username_out as username, password_out FROM get_password(lower(''),lower('')); LOG: statement: SELECT username_out as username, password_out FROM get_password(lower(''),lower('')); LOG: duration: 2.342 ms statement: SELECT username_out as username, password_out FROM get_password(lower(''),lower(''));
username | password_out
----------+--------------
         |
(1 row)


It returns 1 empty row....

When this is attached to postfix with smtp auth with such configuration

# SMTP AUTH
broken_sasl_auth_clients = yes
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
smtpd_sasl_authenticated_header = yes
smtpd_sasl_local_domain =
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth

my serwer starts to be open relay...

I now that it returns empty string for username and password... so where is the password checked... if I dont send password as a parameter to my function.

Definition of the function looks like this:

CREATE FUNCTION get_password("login" character varying, "domain" character varying, OUT username_out character varying, OUT password_out character varying) RETURNS record

Can you help with that...

BT



----------------------------------------------------------------------
Zrob numer kumplom >> http://link.interia.pl/f1a5d

Reply via email to