1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
|
divert(-1)dnl
#-----------------------------------------------------------------------------
# $Sendmail: debian_auth.m4,v 8.14.2 2007-11-02 22:20:56 cowboy Exp $
#
# Copyright (c) 2001-2007 Richard Nelson. All Rights Reserved.
#
# cf/hack/debian_auth.m4. Generated from debian_auth.m4.in by configure.
#
# debian_trustauth.m4 m4 file for
# * supporting MSP->MTA and MTA->MTA authentication
# * supporting the auth= parameter on the mail from: command.
#
# This file is an extremely simple example that lets *ALL* trusted users
# sendmail, daemon, root, uucp, etc. proxy for any user.
#
# If you've a better idea, please let me know
#
#-----------------------------------------------------------------------------
divert(0)dnl
VERSIONID(`$Id: debian_auth.m4,v 8.14.2-1 2007-11-02 22:20:56 cowboy Exp $')
dnl #
dnl # MTA as Client authentication - only if authinfo/access_db *NOT* used...
define(`confDEF_AUTH_INFO', `MAIL_SETTINGS_DIR`'default-auth-info')dnl
dnl #
dnl # add (fake) uid 'sendmail' to trusted users - it is used as the id
dnl # for MSP->MTA, and MTA->MTA proxying.
ifdef(`confTRUSTED_USERS',
`define(`confTRUSTED_USERS',
defn(`confTRUSTED_USERS')`,sendmail')',
`define(`confTRUSTED_USERS', `sendmail')')dnl
dnl #
dnl # Define local rulesets for trust_auth
LOCAL_RULESETS
#
#-----------------------------------------------------------------------------
# Local_trust_auth: Define who is able to authenticate for whom...
# The sendmail default is to allow *IFF* authen == author
# This ruleset also allows trusted users to authenicate as anyone - needed
# for MSP->MTA and MTA->MTA forwarding of mail from: <...> auth=...
SLocal_trust_auth
R$* $: $&{auth_authen} Put authentication id in the workspace
ifdef(`DEBIAN_DEBUG',dnl
`R$* $: $(log authtype:$&{auth_type} $) $1
R$* $: $(log authauthen:$&{auth_authen} $) $1
R$* $: $(log authauthor:$&{auth_author} $) $1')
R$=t $@ $#ok Trusted users... Allow trusted users to auth= as anyone
#-----------------------------------------------------------------------------
|
