Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm running an Amazon linux AMI and using sendmail as the mail server. By default, STARTTLS is disabled on this build and I'd like to enable it for SMTP and POP3. I seem to have it configured properly for SMTP, but in order to get the POP3 auth to work I think I need to reconfigure sasl2 so it accepts a few other auth mechanisms (DIGEST-MD5 and CRAM-MD5).

The default sasl2 install was built using the AMI's yum repo, and i think I need to reconfigure it with a few additional options. What's the best way about doing this? Should I just yum remove cyrus-sasl2 and then compile from source, or is there a quick and easy way to reconfigure a yum-installed app?

share|improve this question
You shouldn't need to use DIGEST-MD5 or CRAM-MD5 over connections secured by TLS. Those are typically used on plain, unsecured connections. –  Gnarfoz Aug 7 '12 at 8:34
Duly noted. Is there any reason to not use both, however? –  Jeff Aug 7 '12 at 8:46
I'm not certain, I don't think so. I think some component of my mail server setup (postfix+dovecot w/ sasl-auth) refused to do it, when I last tried that. That's been a while, though. –  Gnarfoz Aug 7 '12 at 9:57
add comment

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.