authentication mechanism and password scheme

• link
• authentication mechanism -> how password is transferred from cilent from server; passwd scheme: how password is stored in server.

plain and plaintext

• auth_mechanisms = plain
• disable_plaintext_auth = yes
• plain is one protocol of authentication mechanism, password is plaintext; “disable_plaintext_auth=yes”  means ssl/tls is mandatory.

service

• service = 一个独立运行的 Dovecot 功能组件
  • service imap-login # IMAP 登录
  • service imap # IMAP 邮件操作
  • service pop3-login # POP3 登录
  • service pop3 # POP3 邮件收取
  • service auth # 账号密码验证
  • service lda # 本地邮件投递
• 只有被 Dovecot 启用的协议 / 功能，对应的 service 才会真正运行
  • /etc/dovecot/dovecot.conf
  • protocols = imap pop3 lmtp
  • 写了 imap → 启动 imap-login + imap, 写了 pop3 → 启动 pop3-login + pop3,没写的协议 → 对应的 service 完全不运行

namespace

• man page
• table could be file or db
• table could be list or mapping
• credential in a relay context
  • the credentials are a mapping of labels and username:password pairs, format: label1 user:password
  • passwords are not encrypted (smtpctl encrypt subcommand.)
• table examples
  • table users   file:/etc/smtpd/users
  • table creds   file:/etc/smtpd/creds
  • table domainemail  {hongy19 = hongy19@hongy19.net}

• action “outbound” relay host smtps://smtp2go@mail.smtp2go.com:465 auth mail-from “@hongy19.net -> doesn’t work for smtp2go
• action “outbound” relay host smtps://smtp2go@mail.smtp2go.com:465 pki hongy19.net auth mail-from “@hongy19.net”   -> work for smtp2go
• action “outbound” relay host smtp+tls://smtp2go@mail.smtp2go.com:587 auth mail-from “@hongy19.net” -> work for smtp2go