From owner-freebsd-questions@FreeBSD.ORG Fri Oct 29 15:12:10 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 8DB5D1065675 for ; Fri, 29 Oct 2010 15:12:10 +0000 (UTC) (envelope-from m.seaman@infracaninophile.co.uk) Received: from smtp.infracaninophile.co.uk (smtp6.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3fd3:cd67:fafa:3d78]) by mx1.freebsd.org (Postfix) with ESMTP id 975C38FC12 for ; Fri, 29 Oct 2010 15:12:09 +0000 (UTC) Received: from russet.local (reflex.squiz.co.uk [83.217.109.164]) (authenticated bits=0) by smtp.infracaninophile.co.uk (8.14.4/8.14.4) with ESMTP id o9TFC4mA066264 (version=TLSv1/SSLv3 cipher=DHE-RSA-CAMELLIA256-SHA bits=256 verify=NO); Fri, 29 Oct 2010 16:12:05 +0100 (BST) (envelope-from m.seaman@infracaninophile.co.uk) X-DKIM: Sendmail DKIM Filter v2.8.3 smtp.infracaninophile.co.uk o9TFC4mA066264 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=infracaninophile.co.uk; s=201001-infracaninophile; t=1288365125; bh=yBUAT/nxPltwsrwR2EaPXZnc/uDfwEZXHajDgsGiQ2k=; h=Message-ID:Date:From:MIME-Version:To:CC:Subject:References: In-Reply-To:Content-Type:Cc:Content-Type:Date:From:In-Reply-To: Message-ID:Mime-Version:References:To; z=Message-ID:=20<4CCAE43F.5050607@infracaninophile.co.uk>|Date:=20F ri,=2029=20Oct=202010=2016:11:59=20+0100|From:=20Matthew=20Seaman= 20|User-Agent:=20Mozilla/5.0=20(M acintosh=3B=20U=3B=20Intel=20Mac=20OS=20X=2010.6=3B=20en-US=3B=20r v:1.9.2.12)=20Gecko/20101027=20Thunderbird/3.1.6|MIME-Version:=201 .0|To:=20Christopher=20Illies=20|CC:=20V incent=20Hoffman=20,=20=0D=0A=20"freebsd-quest ions@freebsd.org"=20|Subject:=20Re: =20Sendmail=20as=20client=20via=20smarthost=20and=20ssl|References :=20=09<4CC98291.8000609@bah.homeip.net>=09=09<4CC9E9A9.2090105@un sane.co.uk>=09,=09<4CCABB82.9080504@unsane.co.uk>=20|In-Reply-To:= 20|X-Enigmail-Version:=201.1.1|Content-Type:=20multipart/signed=3B =20micalg=3Dpgp-sha1=3B=0D=0A=20protocol=3D"application/pgp-signat ure"=3B=0D=0A=20boundary=3D"------------enigF659D33D7415F0ECDB73A2 D6"; b=uvmQChwM/LaCl0AcVixPhiZVLOF+ZIP+CfVHkgWVkK6hDedEJhACQyfNrn5SWqAmy /QKH9VsNr0Bftk5YwTHxNPn1O0AcjdjPtJ/N+nI323XrjyUasyNSqLJyovCY/RLept AVmCBP5IOlkHm6v7lQ9QiqyElABhD2evF6XIhwrg= X-Authentication-Warning: lucid-nonsense.infracaninophile.co.uk: Host reflex.squiz.co.uk [83.217.109.164] claimed to be russet.local Message-ID: <4CCAE43F.5050607@infracaninophile.co.uk> Date: Fri, 29 Oct 2010 16:11:59 +0100 From: Matthew Seaman User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.2.12) Gecko/20101027 Thunderbird/3.1.6 MIME-Version: 1.0 To: Christopher Illies References: <4CC98291.8000609@bah.homeip.net> <4CC9E9A9.2090105@unsane.co.uk> , <4CCABB82.9080504@unsane.co.uk> In-Reply-To: X-Enigmail-Version: 1.1.1 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="------------enigF659D33D7415F0ECDB73A2D6" X-Virus-Scanned: clamav-milter 0.96.4 at lucid-nonsense.infracaninophile.co.uk X-Virus-Status: Clean X-Spam-Status: No, score=-0.1 required=5.0 tests=BAYES_20,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,SPF_FAIL autolearn=no version=3.3.1 X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on lucid-nonsense.infracaninophile.co.uk Cc: "freebsd-questions@freebsd.org" , Vincent Hoffman Subject: Re: Sendmail as client via smarthost and ssl X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 29 Oct 2010 15:12:10 -0000 This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enigF659D33D7415F0ECDB73A2D6 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable On 29/10/2010 14:49, Christopher Illies wrote: > Although I have no idea what GSSAPI and NTLM are, I remembered that I h= ave > seen these abbreviations before: NTLM is an OPTION for cyrus-sasl2, and= yes, > it is compiled in (WITH_NTLM=3Dtrue). And GSSAPI appeared first in the = mc file: GSSAPI is the "Generic Security Services Application Program Interface" and NTLM is "NT Lan Manager" -- they are both authentication systems popular amongst various generations of Microsoft OSes. GSSAPI is actually based on that old Unix stalwart: Kerberos, and hence is also fairly popular amongst non-Microsoft types. They are some of the authentication mechanisms that come as standard with SASL implementations= =2E Unless you know that you do need them, you almost certainly don't. You can turn off support for those mechanisms at the point of compiling cyrus-sasl2, or you can take them out of the configuration for the various SASL consumers if you want. They are pretty much harmless though, so just doing nothing is also a viable option[*]. Cheers, Matthew [*] I have run into situations where not compiling them into various software made everything run much more smoothly: however, those were exceptional circumstances, and probably a temporary artefact of the particular software versions. Your mileage will probably vary. --=20 Dr Matthew J Seaman MA, D.Phil. 7 Priory Courtyard Flat 3 PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate JID: matthew@infracaninophile.co.uk Kent, CT11 9PW --------------enigF659D33D7415F0ECDB73A2D6 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.14 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkzK5EQACgkQ8Mjk52CukIyhrgCgj93aUj/jILLXP8UPFKEF8hAO opcAnjCEuZvL9gdNXTmDdw7TSfD9mc1z =LSqK -----END PGP SIGNATURE----- --------------enigF659D33D7415F0ECDB73A2D6--