From owner-freebsd-questions@FreeBSD.ORG Wed Sep 5 12:59:09 2007 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 1EEB416A41B for ; Wed, 5 Sep 2007 12:59:09 +0000 (UTC) (envelope-from mnslinky@gmail.com) Received: from py-out-1112.google.com (py-out-1112.google.com [64.233.166.177]) by mx1.freebsd.org (Postfix) with ESMTP id 2F74413C491 for ; Wed, 5 Sep 2007 12:59:08 +0000 (UTC) (envelope-from mnslinky@gmail.com) Received: by py-out-1112.google.com with SMTP id u77so6095033pyb for ; Wed, 05 Sep 2007 05:59:05 -0700 (PDT) DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:in-reply-to:references:mime-version:content-type:message-id:cc:content-transfer-encoding:from:subject:date:to:x-mailer; b=CbSCjbBtahWqzTw4heUO+7qurLfgdDImghuigZV+qOPBj7OvoqY6FLnuUk7F8xP8UoQuUoIektiQhIar4NwsAd5skVmPDb9adAze4kRTXmT+YbAgY0qOwAacHrVhEqemrJjzy0OZMSsS1foO1daWrf7CN0Z9tFUYmWx59J94/m0= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:in-reply-to:references:mime-version:content-type:message-id:cc:content-transfer-encoding:from:subject:date:to:x-mailer; b=uk09BYMUmRUH+b27+naXCJog1W6gss/+UD2DWs5Xzf5g5o5TS3d0zhKN58L8tsq7ryhSjkjMhrCZRD3/j3FZIZ3jcJJwjwvLfLvdJwYIm29Bc7kKMpTGIXhvvjq0kxjtCtfT1UFpsvw9+sdBpPl3afl0Pl35lceYdKZ/ZB9QKuk= Received: by 10.35.87.8 with SMTP id p8mr8717466pyl.1188997144827; Wed, 05 Sep 2007 05:59:04 -0700 (PDT) Received: from ?10.0.0.14? ( [74.95.66.25]) by mx.google.com with ESMTPS id f60sm8743760pyh.2007.09.05.05.59.00 (version=SSLv3 cipher=OTHER); Wed, 05 Sep 2007 05:59:00 -0700 (PDT) In-Reply-To: <80f4f2b20709050346l21f000f0y552bc0711cfcacfd@mail.gmail.com> References: <200709051012.46793.jonathan+freebsd-questions@hst.org.za> <80f4f2b20709050346l21f000f0y552bc0711cfcacfd@mail.gmail.com> Mime-Version: 1.0 (Apple Message framework v752.3) Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed Message-Id: Content-Transfer-Encoding: 7bit From: Eric Crist Date: Wed, 5 Sep 2007 07:58:58 -0500 To: "Jim Stapleton" X-Mailer: Apple Mail (2.752.3) Cc: freebsd-questions@freebsd.org, Jonathan McKeown Subject: Re: questions on setting up a mail server X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 05 Sep 2007 12:59:09 -0000 On Sep 5, 2007, at 5:46 AMSep 5, 2007, Jim Stapleton wrote: >> All the authentication options you mention after plain text (which >> is the >> standard method built in to the protocol) require Cyrus SASL. This >> isn't as >> scary to set up as the docs make it sound. PLAIN and LOGIN can >> both use your >> existing user passwords (which is what I do). GSSAPI requires >> Kerberos, and >> the digest methods (the -MD5 ones) need a separate file of >> passwords held in >> plain text - the sasldb. Of the passwd-based methods, PLAIN is the >> preferred >> protocol according to the docs and RFCs - LOGIN is the one >> Microsoft uses (go >> figure). > > Thanks, that's almost all of what I needed there. You insinuated (but > I don't think explicitly stated) that LOGIN is in fact encrypted in > some form? > > Thanks, > Only across SSL/TLS connections. ----- Eric F Crist Secure Computing Networks