Getting SMTP Auth to work
Lisa Casey
I have a sendmail 8.12.6 server running on Redhat that I am successfully
doing SMTP Auth on. I have set up Sendmail 8.13.1 on FreeBSD 5.3 and am
trying to configure that one to do Auth as well.
I installed Cyrus SASL. Then I set up the auth stuff in sendmail.mc and
regenerated sendmail.cf. When I restart Sendmail, I get this:
Warning: Option: AuthMechanisms requires SASL support (-DSASL)
Warning: Option: AuthOptions requires SASL support (-DSASL)
As I mentioned, I did install Cyrus SASL before I did this. On
http://www.sendmail.org/~ca/email/auth.html it says:
" Make sure the libraries are installed in a location which sendmail uses on
your system by default. The libraries must be "safe", i.e., they should be
owned by root and only writable by that user. As usual, the whole path must
be safe too. "
I wonder if this might be (part of) the problem. On my Redhat box, the sasl
libraries are in /usr/lib/sasl On the FreeBSD box the sasl libraries were
installed in /usr/local/lib/sasl Other than that, I don't know what the
problem might be.
Can anyone here help?
Lisa Casey
Per Hedeland
<li...@jellico.net> writes:
>
>I have a sendmail 8.12.6 server running on Redhat that I am successfully
>doing SMTP Auth on. I have set up Sendmail 8.13.1 on FreeBSD 5.3 and am
>trying to configure that one to do Auth as well.
>
>I installed Cyrus SASL. Then I set up the auth stuff in sendmail.mc and
>regenerated sendmail.cf. When I restart Sendmail, I get this:
>
>Warning: Option: AuthMechanisms requires SASL support (-DSASL)
>Warning: Option: AuthOptions requires SASL support (-DSASL)
>
>As I mentioned, I did install Cyrus SASL before I did this.
But the message is trying to tell you that (after having installed SASL)
you need to rebuild *sendmail*, i.e. the binary, for SASL support - the
binary in the FreeBSD base system doesn't include SASL support, probably
because they don't want to include SASL in the "lean" base system. And
you should upgrade from 8.13.1 anyway for security reasons (unless you
have applied FreeBSD-specific patches / source upgrades that cover the
security issues - I don't know if they bump the version number).
--Per Hedeland
p...@hedeland.org
Lisa Casey
OK, I think I found the problem. I forgot about site.config.m4
Sigh, on my Redhat box I installed Sendmail from a downloaded .tar.gz file.
On the Freebsd box (which is the one I am working on) I installed SEndmail
from ports. On my Redhat box, site-config.m4 is in
/usr/src/sendmail/sendmail-8.12.6/devtools whereas in the Freebsd box I have
a site-config.m4 file in /usr/ports/mail/sendmail/files/site.config.m4
Questions (maybe need input from a FreeBSD guru?):
1) Do I need to copy that site-config.m4 file from
/usr/ports/mail/sendmail/files/site.config.m4 to somewhere else before I use
it or can I just edit it in that directory?
2) Will I need to recompile Sendmail afterwards, or just rebuild my
sendmail.cf file?
Thanks again,
Lisa Casey
Martin Latos
> Questions (maybe need input from a FreeBSD guru?):
> 1) Do I need to copy that site-config.m4 file from
> /usr/ports/mail/sendmail/files/site.config.m4 to somewhere else before I use
> it or can I just edit it in that directory?
libraries location.Yes, if ports work in any way as the sources, you must recompile the
binary every time you change siteconfig
ML
Per Hedeland
<li...@jellico.net> writes:
>
>OK, I think I found the problem. I forgot about site.config.m4
>Sigh, on my Redhat box I installed Sendmail from a downloaded .tar.gz file.
>On the Freebsd box (which is the one I am working on) I installed SEndmail
>from ports. On my Redhat box, site-config.m4 is in
>/usr/src/sendmail/sendmail-8.12.6/devtools whereas in the Freebsd box I have
>a site-config.m4 file in /usr/ports/mail/sendmail/files/site.config.m4
>
>Questions (maybe need input from a FreeBSD guru?):
>1) Do I need to copy that site-config.m4 file from
>/usr/ports/mail/sendmail/files/site.config.m4 to somewhere else before I use
>it or can I just edit it in that directory?
You have lots of choices, but none of them include either of those
methods:
1) "Standard sendmail": Download the tarball from sendmail.org and build
according to the standard instructions (i.e. create/modify
site.config.m4 in the devtools/Site directory of the tree from the
tarball). Two installation subchoices:
a) Just do the standard sendmail install.
b) Read up on mailwrapper(8) that is used by the standard FreeBSD
install, and use that setup - i.e. install your newly-built
sendmail "elsewhere" and have mailer.conf(5) point to it, instead
of effectively blowing that stuff away which a) does.
2) "Standard FreeBSD": Build and install from the source of the FreeBSD
base system that includes sendmail - search for SASL in make.conf(5).
You should make sure those sources are current first (e.g. via cvsup).
3) "FreeBSD standard port": This appears to be what you have used, for
some reason (i.e. it can make sense as a way to install a newer
version than the one in the base system, but FreeBSD 5.3 shipped with
8.13.1 in the base system, no point installing the same version from
the port). Or maybe you just did a search for site.config.m4 and
found that file? The base system doesn't use one. Anyway, build
options are controlled by 'make' variable settings here too, see
/usr/ports/mail/sendmail/Makefile for what is available. I believe
you can set them in make.conf too, or if you use 'portupgrade' to
install ports, you can set them in /usr/local/etc/pkgtools.conf. Or
give them on the commandline of course. You should make sure the port
is current first (e.g. via cvsup).
4) "FreeBSD special port": Installing the mail/sendmail-sasl "pseudo-
port" will do 3) with SASL for you. Likewise make sure the (sendmail)
port is current first.
3) and 4) both will take care of the mailwrapper stuff, avoiding
conflict with the base system installation.
>2) Will I need to recompile Sendmail afterwards, or just rebuild my
>sendmail.cf file?
Yes, see my other followup (and note that all of the above include
rebuilding:-).
--Per Hedeland
p...@hedeland.org