Cycrus SASL

See Chapter 12 for information on Cyrus SASL and Postfix. You can download the source for the Cyrus SASL libraries from the Carnegie Mellon web site. Note that this book assumes that you are working with SASL Version 2.x libraries. Follow the instructions for building the Cyrus SASL2 libraries. There is also a SASL_README file that comes with the Postfix dist ribution.

One issue when compiling Cyrus SASL that affects Postfix is whether or not to include support for certain Microsoft clients that authenticate using a nonstandard mechanism. The standard plain-text authentication mechanism is identified as PLAIN , but these clients use LOGIN . If you need to support such clients, be sure that the libraries are built with the workaround enabled using the --enable-login option when you run configure .

When you install the libraries, be sure to note their location. This example assumes that they are installed in /usr/local/lib and that the header files are located below /usr/local/include. If you are using different locations, adjust the examples accordingly.

To build Postfix with SASL support, you must define the USE_SASL_AUTH macro and specify the directories for the libraries and header files. You must also link against the libsasl2.so library file. Run make tidy if necessary. Build your Makefile with the following options:

$ make makefiles CCARGS='-DUSE_SASL_AUTH -I/usr/local/include/sasl' \
AUXLIBS='-L/usr/local/lib -lsasl2'

Remember that if you must provide the path to your libraries to the runtime linker, include the correct runtime search path argument:

$ make makefiles CCARGS='-DUSE_SASL_AUTH -I/usr/local/include/sasl' \
AUXLIBS='-L/usr/local/lib -lsasl2 -rpath /usr/local/lib'

If your linker uses an argument other than rpath , be sure to specify the correct one.