FEATURE(authinfo)
Use a separate database for authentication information V8.12 and later
Beginning with V8.12, FEATURE(authinfo)
tells
sendmail to look in a special
database file called authinfo
for authentication information, rather than in the
access database. This means
you can have more secure permissions for the
authinfo database than for
the access database. FEATURE(authinfo)
is
declared like this:
FEATURE(`authinfo')
This creates a default configuration declaration that looks like this:
Kauthinfo hash /etc/mail/authinfo
Here the hash
is
derived from the setting of the DATABASE_MAP_TYPE
mc configuration macro (Set a Default Database-Map Type for Features on page 897) and the /etc/mail
is derived from the setting
of the MAIL_SETTINGS_DIR mc
macro (The MAIL_SETTINGS_DIR mc Macro on page 68). If you wish to change the defaults
without having to change these two
mc configuration macros, you
can simply define that new default by adding a
second argument to the feature declaration:
FEATURE(`authinfo', `hash /etc/private/authinfo')
If you provide a second argument and the second argument is a literal LDAP:
FEATURE(`authinfo', `LDAP')
the default becomes the following (we have wrapped the lines to fit the page):
Kauthinfo ldap −1 -v sendmailMTAMapValue -k (&(objectClass=sendmailMTAMapObject) (|(sendmailMTACluster=${sendmailMTACluster})(sendmailMTAHost=$j)) (sendmailMTAMapName=authinfo)(sendmailMTAKey=%0))
See ldap (was ldapx) on page 912 for a description of the ldap
database type and
its
Get sendmail, 4th Edition now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.