Alternativ: [[postfix-sasl|cyrus SASL]]

Doku: [[ https://doc.dovecot.org/configuration_manual/howto/postfix_and_dovecot_sasl/ | Anleitung von dovecot.org ]]

====== Dovecot auth service ======
<file txt /etc/dovecot/local.conf>
…
service auth {
  unix_listener /var/spool/postfix/private/auth {
    mode = 0660
    user = postfix
    group = postfix
  }
}
# Outlook and Windows Mail works only with LOGIN mechanism, not the standard PLAIN:
auth_mechanisms = plain login
…
</file>
  doveconf -n | grep -EA3 -B5 '/var/spool/postfix/private/auth'
  doveconf auth_mechanisms
-> ''auth_mechanisms = plain login''
  systemctl reload dovecot.service

Testen:
  namei -l /var/spool/postfix/private/auth
-> darf Postfix auf den Socket zugreifen?
  lsof /var/spool/postfix/private/auth
-> ''dovecot … unix … /var/spool/postfix/private/auth … LISTEN''

====== Postfix soll Dovecot auth service nutzen ======

  postconf -e 'smtpd_sasl_type = dovecot'
  postconf -e 'smtpd_sasl_path = private/auth'
  postconf -e 'smtpd_sasl_auth_enable = yes'

===== Testen =====
=== swaks ===
  swaks --from me@example.com --to you@example.com -s localhost -a -au nutzer14 -ap test
-> ''Authentication successful''
=== netcat ===
Encodiertes Passwort erzeugen:
  perl -MMIME::Base64 -e 'print encode_base64("iw\0iw\0passwort")'
oder:
  echo -en "iw\0iw\0passwort" | mimencode

Authentifizierung testen:
  netcat -v localhost 25
  220 notebook12.linuxhotel.de ESMTP Postfix (Debian/GNU)
  EHLO localhost
  250-localhost
  250-AUTH LOGIN PLAIN
  AUTH PLAIN aXcAaXcAdGVzdA==
  235 Authentication successful