On Thu, 8 Feb 2007, John Robinson wrote:
> I can't advertise authentication only to people who've started TLS, so I
> guess I need to fail authentication to my shell users whatever password
> they give if they haven't started TLS. I can see some horrible mess
> coming along with my authenticators' server_condition - either trying to
> do lookups of the user's shell in /etc/shells, or looking up the user in
> two different places.
>
> Has anybody here done this elegantly, or even done it at all, and if so
> please could you share it with me - or tell me why this is all
> incredibly stupid?
Reject the AUTH command when you don't want it rather than later in
server_condition.
--
Philip Hazel University of Cambridge Computing Service
Get the Exim 4 book: http://www.uit.co.uk/exim-book