Re: SASL authentication via dovecot?

11 msg	Reject unknown Sender address
10 msg	Postfix and archiving
5 msg	-o content_filter overrides main.cf ?
1 msg	Postfix 2.4.3 and 2.3.11 available

SASL authentication via dovecot?
\ Marco Fioretti (31 May 2007)
. \ Benjamin Donnachie (31 May 2007)
. \ Marco Fioretti (31 May 2007)
. . \ Benjamin Donnachie (31 May 2007)
. . . \ M. Fioretti (1 Jun 2007)
. . . . \ Benjamin Donnachie (1 Jun 2007)
. . . . . \ M. Fioretti (2 Jun 2007)
. \ Miguel Angel Tormo (31 May 2007)

2 msg	postfix/sasl: sql_select option missing - wtf?
3 msg	max connection rate/count/limit issues.
1 msg	requeue mails
6 msg	nothing in maillog
9 msg	local and remote storage for same user
7 msg	Rejecting Invaliud Users - Useful Resource poin...
4 msg	Distributing map files
5 msg	relay_recipient_maps for multiple destinations
13 msg	auto-responders with postfix
6 msg	Mydestination with virtual domains
6 msg	Splitting smtpd_proxy_filter in smtpd_recipient...
10 msg	Can't Send to Sprint Messaging Users..
1 msg	MAAWG meeting anyone?
2 msg	basic postfix 2.4.1 configuration for a simple ...
5 msg	Strange persistant 'timeout after DATA' from ma...

Subject:	Re: SASL authentication via dovecot?
Group:	Postfix-users
From:	Miguel Angel Tormo
Date:	31 May 2007

El Jueves, 31 de Mayo de 2007 a las 18:37, Marco Fioretti escribió:
> Greetings,
>
> the postfix sasl readme, http://www.postfix.org/SASL_README.htm
>
> says:
>
> >The Cyrus SASL library is a lot of code. With this, Postfix becomes
> >as secure as other mail systems that use the Cyrus SASL library.
> >Dovecot provides an alternative that may be worth considering.
>
> In principle, I like the idea of doing without Cyrus, since I have
> to run an IMAP server anyway and had already chosen Dovecot.
> However, I would like to know what other list members think of this
> approach: is it as secure as Cyrus, are you using it but
> configured differently, is that page up to date...
>
> The page also says:
>
> >Support for the Dovecot version 1 SASL protocol is available in
> >Postfix 2.3 and later.
>
> If one only has a binary package of Postfix, how can he check if
> dovecot support was compiled in? (without finding the makefile and
> looking at it, that is)
>
> TIA,
> Marco
>
>

I am using postfix 2.3 with dovecot sasl for authentication for almost 1 year now and never had an issue with it.
It is very easy to set it up. In main.cf:
smtpd_sasl_auth_enable = yes
smtpd_sasl_type = dovecot
# Can be an absolute path, or relative to $queue_directory
smtpd_sasl_path = private/dovecotauth

In dovecot.conf:

auth default {
mechanisms = plain login # and whatever
.... some config ...

socket listen {
client {
path = /var/spool/postfix/private/dovecotauth
mode = 0660
user = postfix
group = postfix
}
}
}