SMTP AUTH

[Sendmail]

　

まず以下のパッケージが入っているかどうか確認

# cyrus-sasl-gssapi
# cyrus-sasl-md5
# cyrus-sasl
# cyrus-sasl-plain
# cyrus-sasl-devel

/etc/mail/sendmail.mc の以下の二つのコメントをはずす

TRUST_AUTH_MECH(`EXTERNAL DIGEST-MD5 CRAM-MD5 LOGIN PLAIN'')dnl
define(`confAUTH_MECHANISMS'', `EXTERNAL GSSAPI DIGEST-MD5 CRAM-MD5 LOGIN PLAIN'')dnl

sendmail.cfを作成
# cp /etc/mail/sendmail.mc /etc/mail/sendmail.mc.orig
# vi /etc/mail/sendmail.mc
# cp /etc/mail/sendmail.cf /etc/mail/sendmail.cf.orig
# m4 /etc/mail/sendmail.mc > /etc/mail/sendmail.cf

/usr/lib/sasl2/Sendmail.confを編集

[/usr/lib/sasl2/Sendmail.conf]
pwcheck_method:saslauthd <-- saslauthdによる認証

/etc/sysconfig/saslauthdを編集

[/etc/sysconfig/saslauthd]
# Directory in which to place saslauthd's listening socket, pid file, and so
# on. This directory must already exist.
SOCKETDIR=/var/run/saslauthd

# Mechanism to use when checking passwords. Run "saslauthd -v" to get a list
# of which mechanism your installation was compiled to use.
MECH=shadow　<- shadowによる認証（使用できる認証方法はsaslauthd -vにて確認）

# Additional flags to pass to saslauthd on the command line. See saslauthd(8)
# for the list of accepted flags.
FLAGS=

※MECH=shadowとした場合、CRAM-MD5やDIGEST-MD5などは使用できません。

#Telnetでlocalhostに接続して確認

# telnet 127.0.0.1 25
Trying 127.0.0.1...
Connected to localhost.localdomain (127.0.0.1).
Escape character is ''^]''.
220 ksknet.net ESMTP Sendmail 8.12.10/8.12.10; Wed, 24 Mar 2004 13:03:57 -0500
ehlo test
250-ksknet.net Hello localhost.localdomain [127.0.0.1], pleased to meet you
250-ENHANCEDSTATUSCODES
250-PIPELINING
250-8BITMIME
250-SIZE
250-DSN
250-ETRN
250-AUTH GSSAPI DIGEST-MD5 CRAM-MD5 LOGIN PLAIN　<- こう出ていればOK
250-DELIVERBY
250 HELP
quit
221 2.0.0 ksknet.net closing connection
Connection closed by foreign host.
#

# saslauthdとsendmailを再起動
# /service saslauthd restart
Stopping saslauthd: [ OK ]
Starting saslauthd: [ OK ]
# service sendmail restart
Shutting down sendmail: [ OK ]
Shutting down sm-client: [ OK ]
Starting sendmail: [ OK ]
Starting sm-client: [ OK ]
#

---

---