Re: [Exim] SMTP authentication

Top Page
Delete this message
Reply to this message
Author: Dan Egli
Date:  
To: Johannes M. Posel, exim-users
Subject: Re: [Exim] SMTP authentication
To authenticate against /etc/shadow, you would need to either
1) Run exim as root (bad idea)
2) make /etc/shadow readable to world (Then why have it?)
3) use an external authentication system, like PAM. Problem is that Exim and
Pam don't always get along that well. Thats why I used a MySQL database. It
maintains the security since you cannot read from the database w/o a password,
and allows for searches to be done easily.
----- Original Message -----
From: Johannes M. Posel <jmp@???>
To: <exim-users@???>
Sent: Thursday, May 23, 2002 12:47 PM
Subject: Re: [Exim] SMTP authentication


> Dear Dave,
>
> Going back 20:32 23.05.2002...
>
> > Since this person seems to be a newview, he'd probably cut and paste
> > that exactly without understanding it, and more importantly, that this
> > only authenticates user 'ph10' and password 'secret'. When posting a
> > sample like this, it might be a good idea to point something like that
> > out,
>
> How would one authenticate against the shadow password database? That
> is something I'm trying to get up&runnin for a while now, but it won't
> work. I hoped that the Exim book could answer this, but no luck ;) Or,
> if it is easier, what would I enter in the server_condition if I
> wanted to check against a plain text file, I think it is done via
> "lsearch" then, with such a format:
>
> user1     pass1
> user2     pass2
> ...

>
> Every user in this file would be allowed to relay.
>
> Thanks,
>  Johannes                            mailto:jmp@its-toasted.org

>
> --
> Conscience is what hurts when everything else feels so good.
>
>
> --
>
> ## List details at http://www.exim.org/mailman/listinfo/exim-users Exim

details at http://www.exim.org/ ##
>
>