* Zero Zeibov <[email protected]>: > I try to limit auth mech in postfix 2.6.1 on FreeBSD 6.4. For this > I've added to main.conf: > > smtp_sasl_mechanism_filter = plain, login
This does not apply to the SMTP server smtpd, but only to the SMTP client smtp. > But simple test by telnet shows following: > > Connected to x.x.x.x. > Escape character is '^]'. > 220 xxx.xxx.com.ua ESMTP Postfix > ehlo 1 > 250-xxx.xxx.com.ua > 250-PIPELINING > 250-SIZE 10240000 > 250-ETRN > 250-STARTTLS > 250-AUTH NTLM LOGIN PLAIN GSSAPI DIGEST-MD5 CRAM-MD5 > 250-AUTH=NTLM LOGIN PLAIN GSSAPI DIGEST-MD5 CRAM-MD5 > 250-ENHANCEDSTATUSCODES > 250-8BITMIME > 250 DSN > > I also tried to limit auth mechs in /usr/local/lib/sasl2/smtpd.conf > pwcheck_method: saslauthd > mechlist: PLAIN LOGIN The name of the parameter is "mech_list" not "mechlist". Fix that first. If that doesn't do it all, create a symlink from /usr/lib/sasl2/ to /usr/local/lib/sasl2/. This is what Cyrus SASL usually expects. Mileage on FreeBSD might differ. I can't tell. I don't run FreeBSD. p...@rick > But it doesn't help. > How I can remove such auth mechs as GSSAPI DIGEST-MD5 CRAM-MD5? -- All technical answers asked privately will be automatically answered on the list and archived for public access unless privacy is explicitely required and justified. saslfinger (debugging SMTP AUTH): <http://postfix.state-of-mind.de/patrick.koetter/saslfinger/>
