Hi,

okay, maybe i'm catching on.

i set up the /etc/sasldb2 method of authentication.
that's doing ....  so far .... what i want.

1.  okay, i guess /etc/postfix/sasl_passwd is only for client
security?  but why does the client need security?  my /etc/postfix/sasl_passwd
file (and assoc .db) were nonsensical, yet i got authenticated,
encrypted email delivered to that machine, and read it w/ mutt.
what does /etc/postfix/sasl_passwd really do?
am i not really using it?  should i remove those references in main.cf?

        i guess /etc/sasldb2 is doing what i wanted.  namely, i wanted
to make a list of all the users (and passwords) that i liked,
and let the mail server play nice with them, and not let
anyone else play.

2.  did i just open holes in my security?  is this a pretty reasonable
way to do what i want?

3.  do i have extraneous stuff in my main.cf file now?
what do i need to delete?

4.  i said "method of authentication" but that's sloppy, right,
i'm using auxprop(?) as the password-verification service?
or saslauthd with an auxprop plugin?  i know i'm using saslauthd,
i just want to know what the right term is, should i ever
need to tell someone what i'm doing.

thx in advance.

j.

-- 
Jay Scott               512-835-3553            g...@arlut.utexas.edu
Head of Sun Support, Sr. Operating Systems Specialist
Applied Research Labs, Computer Science Div.                   S224
University of Texas at Austin

Reply via email to