SMM:08-44
Sendmail Installation and Operation Guide
A
Do not offer AUTH
a
Offer AUTH (default)
B
Do not offer VERB
b
Offer VERB (default)
C
Do not require security layer for
plaintext AUTH (default)
c
Require security layer for plaintext AUTH
D
Do not offer DSN
d
Offer DSN (default)
E
Do not offer ETRN
e
Offer ETRN (default)
L
Do not require AUTH (default)
l
Require AUTH
P
Do not offer PIPELINING
p
Offer PIPELINING (default)
S
Do not offer STARTTLS
s
Offer STARTTLS (default)
V
Do not request a client certificate
v
Request a client certificate (default)
X
Do not offer EXPN
x
Offer EXPN (default)
Note: the entries marked as ``(default)'' may require that some configuration has been made,
e.g., SMTP AUTH is only available if properly configured. Moreover, many options can be
changed on a global basis via other settings as explained in this document, e.g., via Daemon-
PortOptions.
The ruleset may return `$#temp' to indicate that there is a temporary problem deter-
mining the correct features, e.g., if a map is unavailable. In that case, the SMTP server
issues a temporary failure and does not accept email.
5.1.4.15. try_tls
The try_tls ruleset is called when sendmail connects to another MTA. If the ruleset
does resolve to the "error" mailer, sendmail does not try STARTTLS even if it is offered.
This is useful to interact with MTAs that have broken STARTTLS implementations by sim-
ply not using it.
5.1.4.16. authinfo
The authinfo ruleset is called when sendmail tries to authenticate to another MTA. It
should return $# followed by a list of tokens that are used for SMTP AUTH. If the return
value starts with anything else it is silently ignored. Each token is a tagged string of the
form: "TDstring" (including the quotes), where
T
Tag which describes the item
D
Delimiter: ':' simple text follows
'=' string is base64 encoded
string
Value of the item
Valid values for the tag are:
U
user (authorization) id
I
authentication id
P
password
R
realm
M
list of mechanisms delimited by spaces