I try to limit auth mech in postfix 2.6.1 on FreeBSD 6.4. For this
I've added to main.conf:

smtp_sasl_mechanism_filter = plain, login

But simple test by telnet shows following:

Connected to x.x.x.x.
Escape character is '^]'.
220 xxx.xxx.com.ua ESMTP Postfix
ehlo 1
250-xxx.xxx.com.ua
250-PIPELINING
250-SIZE 10240000
250-ETRN
250-STARTTLS
250-AUTH NTLM LOGIN PLAIN GSSAPI DIGEST-MD5 CRAM-MD5
250-AUTH=NTLM LOGIN PLAIN GSSAPI DIGEST-MD5 CRAM-MD5
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN

I also tried to limit auth mechs in /usr/local/lib/sasl2/smtpd.conf
pwcheck_method: saslauthd
mechlist: PLAIN LOGIN
But it doesn't help.
How I can remove such auth mechs as GSSAPI DIGEST-MD5 CRAM-MD5?

Reply via email to