From nobody Sat Oct 21 03:21:17 2023 X-Original-To: freebsd-questions@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4SC6Dp73j2z4xMmf for ; Sat, 21 Oct 2023 03:21:30 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from mout.kundenserver.de (mout.kundenserver.de [212.227.17.10]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "mout.kundenserver.de", Issuer "Telekom Security ServerID OV Class 2 CA" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4SC6Dp3cPLz4FvV for ; Sat, 21 Oct 2023 03:21:30 +0000 (UTC) (envelope-from freebsd@edvax.de) Authentication-Results: mx1.freebsd.org; none Received: from terra.edvax.de ([178.12.46.17]) by mrelayeu.kundenserver.de (mreue109 [213.165.67.113]) with ESMTPSA (Nemesis) id 1MSbp1-1r4jny1Dsf-00SxvO; Sat, 21 Oct 2023 05:21:27 +0200 Received: from r56.edvax.de (r56 [10.200.1.11]) (authenticated bits=0) by terra.edvax.de (8.17.1/8.17.1) with ESMTPA id 39L3LM9Q063054; Sat, 21 Oct 2023 05:21:23 +0200 (CEST) (envelope-from freebsd@edvax.de) Date: Sat, 21 Oct 2023 05:21:17 +0200 From: Polytropon To: William Dudley Cc: freebsd-questions Subject: Re: how to tell what options sendmail pkg was built with? Message-Id: <20231021052117.fc1f2c38.freebsd@edvax.de> In-Reply-To: References: Reply-To: Polytropon Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) List-Id: User questions List-Archive: https://lists.freebsd.org/archives/freebsd-questions List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-questions@freebsd.org X-BeenThere: freebsd-questions@freebsd.org Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Provags-ID: V03:K1:jojv9uodGpF+hxxqKaUP5GJsienrrXSDzx7d5UY+DaypmUNhXbY zP+3JBWBbKonj5BJZmWdgAmsT6JxNYAj3sOMMw5jEcMy5bMUElkzLqo9abdEIvt+NIeIV56 QM+nd4xXKoJVbfTpar2cfv4atyw5+MQ+bSS9N6FSB6+wWdAOiyOAUrsYYeY/okxKypcU//t 5oDUCkV7iRws7lRgoGZ9g== X-Spam-Flag: NO UI-OutboundReport: notjunk:1;M01:P0:pncGu6vsH80=;XtKtd+KuGeJTeHXTEpiTCYHmTVB 5oJrw35yynV/J0PZpRcFF1usv/52+GA8IlJdXrM3yX3JTE4JiqAXKwJKPIpzc2FN6jWwoTnyB odj3Z+GgllPwWC5Uav6ZxYSm8JNCSJ1gOMsRKJi1YwMK9Daw3vdNLSLU5ZmTiregDIvdGEB55 ChX/iwxBFETrmeBk8XqQf+Qa3IeEmiCFPsOQm6eZFZUnypjll8M3xYLxf6hchlS1PY2U7oIOL g/u4pvbHqxVD4xWiyhOC3xQ49TBNdKoZk2YeX5EwA2QkgBwNr5OJxNr15DYQv1GGebJtS/6CW o+B4CTYtChN8QZCCAM/MuDsPWikDTDngGaBgs84kbWaUpZT8yaRCxXNnuVF8BR+K/S9nNXT6R 4ucIaLPoSS08+6xMzEx84CpZRR89nrWMF0Zcr0fJ7rPv4ID6S7WZRZzgQhf4FQ2mCABO7P57e WTKO8esf77e0BFUBet+WSbkyo5OFGYLV6Bj3PSgAtUaKNFDOh71g6Kzj0MKNvQHCIp9YuojxY XJMlkajiJsdkCDYg8Jzh5tbSQAhXN+CxfNj3+FWVWIv5dDtYLrE2Dyto0/5REfcNvbuvGfxFR 83Ky5qCoM7jqnjtTwj9zaRf7nwpNTjNJiZJSc4aAlb3zNDNkLoijDzl78osBUQxECtpFqAZqL ooXnpnf+gR9lR93EdrnDcPo8gW2yfMcwilzJXrI2PyYTHFl4s0Rw8IIag4sLU57gRKtq0OrPI XN5zK9rg8jykCae/hMaHqJL1kXkSSpJG5r9I6QHjNPlP6onKsqicdedzyIDf7et1Hz1AUmm99 by3NKOYfdRNHxLkplYFC2+n1Rl93OHJBDPNUDTa7hSUs13ijB3yMLsrVmQ18gWxfodc/5GEse sE7ltbryQR6Rb3A== X-Spamd-Bar: ---- X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:8560, ipnet:212.227.0.0/16, country:DE] X-Rspamd-Queue-Id: 4SC6Dp3cPLz4FvV On Fri, 20 Oct 2023 20:42:58 -0400, William Dudley wrote: > I'm in sendmail hell again. Trying to fix broken sendmail because > libssl.so.11 disappeared, so my sendmail from ports died. So there are more problems than just sendmail... Try to reinstall OpenSSL (system version). > I originally built it from ports to try to shut up this error from stock > sendmail: > > Warning: Option: AuthMechanisms requires SASL support (-DSASL) > Warning: Option: AuthOptions requires SASL support (-DSASL) > > It would be nice if one didn't have to go through the ports pageant > just to get a working sendmail. Oh - it seems you want SASL. You want SASL? It's complicated, but possible with system sendmail. 1. Install cyrus-sasl and cyrus-sasl-saslauthd (version 2) from ports or pkg. Default configuration is okay. 2. Add to /etc/make.conf: SENDMAIL_CFLAGS=-I/usr/local/include -DSASL=2 SENDMAIL_LDADD=/usr/local/lib/libsasl2.so Note that the Handbook at 30.9 # 4 is _wrong_; this works. https://docs.freebsd.org/en/books/handbook/mail/#SMTP-Aut 3. Recompile system sendmail: # cd /usr/src/lib/libsm # make # cd /usr/src/lib/libsmutil # make # cd /usr/src/usr.sbin/sendmail # make # make install 4. Check: Now you have SASL2 support # sendmail -d0.1 -bt < /dev/null Now SASLv2 will be listed. If you actually need SASL to authenticate, start and configure the service accordingly. > There's a sendmail pkg. How does one determine what options that > was built with, short of installing it and trying it? Is that documented > anywhere? The pkg command doesn't seem to have a way to query > for that information. I'd say you find them in the program's Makefile. > Lots of googling has failed to turn up an answer. Yes, that is a trend now... Good luck! Oh, one further thing to check: Your sendmail configuration. If your control file has define(`confAUTH_MECHANISMS', `EXTERNAL GSSAPI DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl then maybe just remove the one that requires SASL, if you do not need it. -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ...