Help - Search - Members - Calendar
Full Version: How-To: RHE + Sendmail + Smtp Authentication
The Planet Forums > Operating Systems > Red Hat Linux > Red Hat HOWTOs
jaume
Anyway here the steps to get it working for RHE:

1. Enable saslauth + shadow. Edit /etc/sysconfig/saslauthd or /etc/rc.d/init.d/saslauthd and change from MECH=pam to MECH=shadow.

2. Enable saslauthd service on boot:
# chkconfig --level 2345 saslauthd on

3. Start saslauthd:
# /etc/init.d/saslauthd start

4. Now is just adding some lines to sendmail.mc and rebuild sendmail.cf from it ( you can do it via webmin easily or from commandline)

From commandline:

Backup your /etc/mail/sendmail.mc
# cp /etc/mail/sendmail.mc /etc/mail/sendmail.mc.BKP
# cp /etc/mail/sendmail.cf /etc/mail/sendmail.cf.BKP

Edit /etc/mail/sendmail.mc and do these:

Just after:
CODE
define(`confAUTH_OPTIONS', `A')dnl


Add:
CODE
dnl # <added>

TRUST_AUTH_MECH(`DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl

define(`confAUTH_MECHANISMS', `DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl

dnl # </added>


Then change this:
CODE
DAEMON_OPTIONS(`Port=smtp,Addr=127.0.0.1, Name=MTA')dnl


to

CODE
DAEMON_OPTIONS(`Port=smtp,Name=MTA')dnl


And finally rebuild sendmail.cf from the sendmail.mc:

# cd /etc/mail/
# m4 sendmail.mc > sendmail.cf

5. Chmod mail folder to be able to collect via pop3 :

# chmod 1777 /var/spool/mail

6. Restart sendmail:
# service sendmail restart

7. Make sure you have pop3/imap enabled under xinetd:

Edit files in /etc/xinetd.d/ and set ipop3 and imap to disable = no and restart xinetd ( service xinetd restart ).

8. Done.
simonmay
Worked okay however had to
chmod 1777 /var/spool/mail
before it would collect mail via pop3
uniquemedia
Hi,

I tried this however I cant connect in Outlook. I tried to telnet to Port 110 and I got connection refused.

Any ideas?
Cheers,
Jon
jaume
QUOTE
Originally posted by uniquemedia
Hi,

I tried this however I cant connect in Outlook.  I tried to telnet to Port 110 and I got connection refused.

Any ideas?
Cheers,
Jon


Have you enabled pop3 under xinetd ?
simonmay
After the lastest RHEL updates of the 12 May 2004
Sendmail auth system stops working

With a plain RHEL 3 installation

cp /etc/pam.d/smtp.sendmail /etc/pam.d/smtp

resolves this problem

For ENSIM

cp /usr/lib/opcenter/sendmail/install/smtp.pam /etc/pam.d/smtp
StillKlipywitz
Pardon my noob ignorance, but is this a specific fix for the repeated authentication process in outbound email messages?

My Ensin 3.7 box keeps asking users to re-enter their SMTP auth over and over, and they cant send emails out until I manually restart saslauthd...


Would this be the fix I am so desperately looking for?


Thanks,
jaume
QUOTE
Originally posted by StillKlipywitz
Pardon my noob ignorance, but is this a specific fix for the repeated authentication process in outbound email messages?

My Ensin 3.7 box keeps asking users to re-enter their SMTP auth over and over, and they cant send emails out until I manually restart saslauthd...  


Would this be the fix I am so desperately looking for?


Thanks,


Not related ... The fix for your ploblem is in this thread:
http://forum.ensim.com/showthread.php?threadid=11055

1. You need to add a script ( posted by Chris on the 2nd page of previous url) that copy the new liblaus libs to each virtualsite) and have the correct sendmail rpms installed.

These sendmail rpms had issues:
sendmail-cf-8.12.11-3
sendmail-8.12.11-3

They have just released new versions .. try upgrading them or revert back to previous versions.

2. Run ensim maintenance mode:

set_pre_maintenance
set_maintenance
set_post_maintenance
service webppliance restart
REBIS
Jaume,

Chris' patches don't resolve SMTP/Auth issue for me. Plus, up2date flags Sendmail due to config mod by Ensim.
jaume
QUOTE
Originally posted by REBIS
Jaume,

Chris' patches don't resolve SMTP/Auth issue for me. Plus, up2date flags Sendmail due to config mode by Ensim.


Worked for me ... but using the old sendmail rpms:
sendmail-8.12.10-1.i386
sendmail-cf-8.12.10-1.i386

Try to get the old ones if still on up2date service:

up2date -get sendmail-8.12.10-1.i386 sendmail-cf-8.12.10-1.i386
rpm -Uvh --oldpackage sendmail*.rpm
and run maintenance with Chris script in place.

Haven't tried the new sendmail rpms that are on up2date today.
REBIS
Thanks, Jaume. No joy. I suppose the old rpm's are gone. Guess I'll give the new ones a whirl. icon_sad.gif
REBIS
No dice. icon_sad.gif
mcnightmare
i had this message by up2date...

i think it's gonna be more easy to wait the next ensim 4.0 pro update before upgrarding thoses packages !

am-I right ?

------------------------------------------------------------------------
The following Packages were marked to be skipped by your configuration:

Name Version Rel Reason
-------------------------------------------------------------------------------
kernel 2.4.21 15.ELPkg name/pattern
kernel-smp 2.4.21 15.ELPkg name/pattern
kernel-source 2.4.21 15.ELPkg name/pattern
kernel-utils 2.4 8.37.3Pkg name/pattern
sendmail
jaume
do not install the sendmail packages .... but you you should install the kernel packages and boot with that new kernel.
mcnightmare
i heard about upgrading or installing the new kernel....

if the kernel update fail i scrap my config
if i install it, i could boot with 2 differents kernel !!!

what i can do ?
i'm new on RH entreprise, i dont know how to install 2 kernels
jaume
you can install as many kernels you want but just boot one:) . When installing use rpm -ivh and not rpm -Uvh .. so you keep old kernel.
EOC_Jason
If you are still having auth problems, try using these instead and give them a wirl:

CODE
TRUST_AUTH_MECH(`EXTERNAL PLAIN LOGIN GSSAPI')dnl

define(`confAUTH_MECHANISMS',`EXTERNAL PLAIN LOGIN')dnl
Macao
QUOTE (EOC_Jason)
If you are still having auth problems, try using these instead and give them a wirl:

CODE
TRUST_AUTH_MECH(`EXTERNAL PLAIN LOGIN GSSAPI')dnl

define(`confAUTH_MECHANISMS',`EXTERNAL PLAIN LOGIN')dnl


Is there a tutorial somewhere that would explain the differences between:

define(`confAUTH_OPTIONS', `A')dnl
and
define(`confAUTH_OPTIONS', `A p')dnl

The sendmail.mc says the latter line allows relaying if the user authenticates, and disallows plaintext authentication (PLAIN/LOGIN) on non-TLS links.
So what does the first allow and disallow?



PLAIN is the preferred plaintext authentication method and used by Mozilla Mail and Evolution, though Outlook Express and other MUAs do use LOGIN. Other mechanisms should be used if the connection is not guaranteed secure.

Anywhere a tutorial on what do all these options do?

TRUST_AUTH_MECH(`EXTERNAL DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl

define(`confAUTH_MECHANISMS', `EXTERNAL GSSAPI DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl


I'm using Outlook Express for the record, so is it possible to disable PLAIN and keep LOGIN mechanism active?

What are the options for sending login information in encrypted format without starting to mess around with root certificates.

Lot of questions, hope someone can help icon_smile.gif
gifart
What if there is no pop3 or imap server on my server? Which one should I install?
DavidPesta
This HowTo may no longer work for users with RHEL 4.

Please read this thread:
http://forums.ev1servers.net/showthread.php?t=61953

David
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2010 Invision Power Services, Inc.