Hi,
okay, maybe i'm catching on.
i set up the /etc/sasldb2 method of authentication.
that's doing .... so far .... what i want.
1. okay, i guess /etc/postfix/sasl_passwd is only for client
security? but why does the client need security? my /etc/postfix/sasl_passwd
file (and assoc .db) were nonsensical, yet i got authenticated,
encrypted email delivered to that machine, and read it w/ mutt.
what does /etc/postfix/sasl_passwd really do?
am i not really using it? should i remove those references in main.cf?
i guess /etc/sasldb2 is doing what i wanted. namely, i wanted
to make a list of all the users (and passwords) that i liked,
and let the mail server play nice with them, and not let
anyone else play.
2. did i just open holes in my security? is this a pretty reasonable
way to do what i want?
3. do i have extraneous stuff in my main.cf file now?
what do i need to delete?
4. i said "method of authentication" but that's sloppy, right,
i'm using auxprop(?) as the password-verification service?
or saslauthd with an auxprop plugin? i know i'm using saslauthd,
i just want to know what the right term is, should i ever
need to tell someone what i'm doing.
thx in advance.
j.
--
Jay Scott 512-835-3553 [email protected]
Head of Sun Support, Sr. Operating Systems Specialist
Applied Research Labs, Computer Science Div. S224
University of Texas at Austin