Jay G. Scott wrote: > hi, > > the goal: require AUTH and TLS to send email. > using these instructions: > http://postfix.state-of-mind.de/patrick.koetter/smtpauth/postfix_tls_support.html > > postfix 2.3.3 from the RH enterprise rpm. > > partial successes: > i can get tls to insert a header if i'm only using tls. (ie, tls but no auth) > i can get auth to insert a header but i lose the tls header. (auth, no tls) > > i get to koetter's section 15.9 w/o incident, AFAIK. > > using mutt as the client, and a canned .muttrc like so: > > .muttrc > set mbox_type=mbox > set smtp_url="smtp://gl1:___...@smail.arlut.utexas.edu/" > set hostname="smail.arlut.utexas.edu" > > using koetter's configs this happens: > [...@smail ~]$ mutt -s "per koetter" gl2 < /etc/motd > SMTP server does not support authentication > Could not send the message. > > if i turn this off in main.cf: > #smtpd_tls_auth_only=yes >
smtpd_tls_auth_only means only offer AUTH after STARTTLS has been given by the CLIENT. You can test this like: "openssl s_client -starttls smtp -crlf -connect 1.2.3.4:25" Mutt may not have used TLS, hence that message.