Re: Postfix ldap_table authenticate to LDAP using GSSAPI or EXTERNAL

2013-01-22 Thread Eric McCorkle
On 01/23/13 00:51, Eric McCorkle wrote: > On 01/23/13 00:49, Viktor Dukhovni wrote: >> On Wed, Jan 23, 2013 at 12:33:01AM -0500, Eric McCorkle wrote: >> >>> Which is due ultimately to there not being a kerberos principal >>> available. However, if I add "start_tls = yes" (and set up the >>> certif

Re: Postfix ldap_table authenticate to LDAP using GSSAPI or EXTERNAL

2013-01-22 Thread Eric McCorkle
On 01/23/13 00:49, Viktor Dukhovni wrote: > On Wed, Jan 23, 2013 at 12:33:01AM -0500, Eric McCorkle wrote: > >> Which is due ultimately to there not being a kerberos principal >> available. However, if I add "start_tls = yes" (and set up the >> certificate files), then I get the same "unable to a

Re: Postfix ldap_table authenticate to LDAP using GSSAPI or EXTERNAL

2013-01-22 Thread Viktor Dukhovni
On Wed, Jan 23, 2013 at 12:33:01AM -0500, Eric McCorkle wrote: > Which is due ultimately to there not being a kerberos principal > available. However, if I add "start_tls = yes" (and set up the > certificate files), then I get the same "unable to allocate TLS context" > error. > > This seems to

Re: Postfix ldap_table authenticate to LDAP using GSSAPI or EXTERNAL

2013-01-22 Thread Eric McCorkle
On 01/22/13 10:04, Wietse Venema wrote: > Eric McCorkle: >> Interestingly, postalias run from the command line seems to work just >> fine. More interestingly, using an ldap-based local_recipients_maps >> seems to work just fine, but alias_maps fails as described. > > You run postalias as root. Po

Relay Exceptions

2013-01-22 Thread Tom Tucker
I am struggling with a configuration that might be impossible. Hopefully the list can help guide me. I want to allow internal systems the ability to relay emails to my domains even though they might get caught with 'reject_unknown_reverse_client_hostname'. Possible? If yes, I am unsure how to

Re: Sufficiently locked down?

2013-01-22 Thread Stan Hoeppner
On 1/22/2013 2:34 PM, Grant wrote: > I thought my postfix setup was configured to send mail on port 587 and > receive mail on port 25, so I was surprised to find that I could send > mail from the local machine on port 25. Is my config OK? Postfix never sends mail *from* TCP 25 or TCP 587. These

Re: Sufficiently locked down?

2013-01-22 Thread Reindl Harald
Am 22.01.2013 21:34, schrieb Grant: > I thought my postfix setup was configured to send mail on port 587 and > receive mail on port 25, so I was surprised to find that I could send > mail from the local machine on port 25 typically the local machine is in "mynetworks" signature.asc Descripti

Sufficiently locked down?

2013-01-22 Thread Grant
I thought my postfix setup was configured to send mail on port 587 and receive mail on port 25, so I was surprised to find that I could send mail from the local machine on port 25. Is my config OK? master.cf: smtp inet n - n - 1 postscreen smtpd pass -

Re: Postfix ldap_table authenticate to LDAP using GSSAPI or EXTERNAL

2013-01-22 Thread Jerry
On Tue, 22 Jan 2013 10:04:30 -0500 (EST) Wietse Venema articulated: > Another difference is that root shell user environment settings > differ from those of Postfix daemons. Look at the output from > "postconf import_environment export_evironment". More information > about these is in http://www.p

Re: Postfix ldap_table authenticate to LDAP using GSSAPI or EXTERNAL

2013-01-22 Thread Viktor Dukhovni
On Mon, Jan 21, 2013 at 09:05:33PM -0500, Eric McCorkle wrote: > I am trying to set up an LDAP-based alias table, and I want postfix to > authenticate to LDAP using a Kerberos service principal, or at least > using the EXTERNAL method (SSL certificate authentication). I would recommend GSSAPI (Ke

Re: Postfix ldap_table authenticate to LDAP using GSSAPI or EXTERNAL

2013-01-22 Thread Wietse Venema
Eric McCorkle: > Interestingly, postalias run from the command line seems to work just > fine. More interestingly, using an ldap-based local_recipients_maps > seems to work just fine, but alias_maps fails as described. You run postalias as root. Postfix runs as a daemon, and minimizes usage of ro