Jim Garrison via Postfix-users:
> I have a Postfix server that does outbound-only relay in a small network
> via a smarthost. There is no incoming mail (so no Dovecot), and
> outbound is restricted to a very small set of clients.
>
> The relay has to go through GMail, which I have had working with
> user/password auth for several years. That's going away and GMail will
> require OAUTH2.
>
> I've followed the thread at
> https://www.mail-archive.com/postfix-users@postfix.org/msg104614.html
> but solutions seem to require Dovecot, which I'd rather not add to this
> server.
>
> I also found, from 2022,
> https://www.mail-archive.com/postfix-users@postfix.org/msg97342.html
> part of which is
>
> > Weitse Venema:
> >> Gino Ferguson:
> >> Today's question: we were asked if we can send emails using oauth2 instead
> >> of
> >> basic auth.
> >>
> >> The best I could find is this git repo:
> >> https://github.com/tarickb/sasl-xoauth2
> >
> >
> > Thanks, I had not seen this. Rhey have examples for Gmail and Office365.
> >
> >> Does anyone have any experience with this or with any other solutions?
> >
> > There is an earlier effort at
> > http://mmogilvi.users.sourceforge.net/software/oauthbearer.html
> >
> > Looks like tarickb is the way to go.
>
> Is the last sentence still true if one doesn't want to install Dovecot?
>
> The github repo shows recent commits, so it looks like it's still being
> maintained.
>
> Thanks for any insight.
My armchair review:
This is a Cyrus SASL plugin that extends Cyrus SASL and thus requires
no changes to Postfix. Along with Cyrus library code it is loaded
into the Postfix SMTP client address space. The code is small but
has significant dependencies (besides Cyrus SASL, it depends on
libcurl, and on the C++ runtime library). It has (C) Google LLC,
and uses the Apache 2.0 license.
It is available as a binary package for some Debian-like distributions.
The Github repo has instrcutions for building Debian-like and
RedHat-like binary packages. Along with Cyruslibrary code it is
loaded into the Postfix SMTP client address space.
Still looking like the better option.
Wietse
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
