On 2/12/2025 11:22, Wietse Venema via Postfix-users wrote:
Jim Garrison via Postfix-users:
I have a Postfix server that does outbound-only relay in a small network
via a smarthost. There is no incoming mail (so no Dovecot), and
outbound is restricted to a very small set of clients.
The relay has to go through GMail, which I have had working with
user/password auth for several years. That's going away and GMail will
require OAUTH2.
I've followed the thread at
https://www.mail-archive.com/postfix-users@postfix.org/msg104614.html
but solutions seem to require Dovecot, which I'd rather not add to this
server.
[snip] > My armchair review:
This is a Cyrus SASL plugin that extends Cyrus SASL and thus requires
no changes to Postfix. Along with Cyrus library code it is loaded
into the Postfix SMTP client address space. The code is small but
has significant dependencies (besides Cyrus SASL, it depends on
libcurl, and on the C++ runtime library). It has (C) Google LLC,
and uses the Apache 2.0 license.
It is available as a binary package for some Debian-like distributions.
The Github repo has instrcutions for building Debian-like and
RedHat-like binary packages. Along with Cyruslibrary code it is
loaded into the Postfix SMTP client address space.
Still looking like the better option.
I successfully used this SASL plugin to get XOAUTH2 working with GMail
as an outbound smarthost. A couple of notes:
* Debian 12 installs postfix chroot, which I wasn't aware of. It just
worked out of the box and I had no reason to expect chroot.
* The list of dependencies at
https://github.com/tarickb/sasl-xoauth2/blob/packaging/ubuntu/debian/control
is complete, but on a minimal system you might not have python3-pip,
which is also required. Also it lists libstdc++6-4.6-dev, which
might be out of date, my system had libstdc++-12-dev, which seems to
work.
* Be sure to read and *carefully* follow the excellent instructions in
the repo's README.md.
After a couple of false starts (due to me not following instructions
EXACTLY ;-), it's all working.
--
Jim Garrison
j...@acm.org
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
