sendmail TCP lmtp - local auth needed?

[Andrew Morgan]

On Sun, 21 Sep 2003, J.D. Bronson wrote:

>
> I setup sendmail 8.12.10 to use TCP for lmtp rather than UNIX sockets.
>
> define(`confLOCAL_MAILER', `cyrusv2')dnl
> define(`CYRUSV2_MAILER_FLAGS', `A5 at w/:|m')dnl
> define(`CYRUSV2_MAILER_ARGS', `TCP localhost lmtp')dnl
>
>
> this works, but I now end up with this:
>
> Sep 21 11:55:38 myhost sendmail[14567]: to=<username at myhost.mydomain.com>,
> ctladdr=<username at myhost.mydomain.com> (100
> /10), delay=00:00:01, xdelay=00:00:00, mailer=cyrusv2, pri=30591,
> relay=localhost.mydomain.com. [127.0.0.1], dsn=4.0.0, stat=Deferred: 4
> 30 Authentication required
>
> I know if I run 'lmtpd -a' it will deliver, but that could open up some
> trouble. I have searched the archives at sendmail and cyrus and dont see a
> solution to this. I have been told to tell sendmail to use SASL to
> authenticate when it connects - but I am looking for an example of how to
> do this...I do have SASL installed and it does work fine....
>
> I hope someone can at least point me towards some answer?

We are using postfix as the mail relay here, but maybe our solution will
work for you too.  On the Cyrus box, we have lmtp accepting TCP
connections with "lmtpd -a" (preauth).  However, we have compiled Cyrus
with tcp-wrappers and have the following in /etc/hosts.deny:

lmtp: ALL EXCEPT LOCAL, smtp1.oregonstate.edu, smtp2.oregonstate.edu

This avoids the whole issue of setting up authentication with the mail
relays.  In our case, we only want to accept lmtp mail from the mail
relays anyways, even if we did use authentication.

	Andy