Some administrators find it easier to designate mail access using ACLs if they do all their other configuration using ACLs. They also might have mixed network environments that necessitate using ACLs to assign mail access.
To enable mail access using ACLs:
1In Server Admin, select the server that has Mail service running.
2Select Access, then click Services.
3Select Mail from the Services list.
4Select “For selected services below.”
5Select “Allow only users and group below.”
6Click the Add (+) button to reveal a Users and Groups list.
7Drag the user or group to the access list.
8Click Save.
Choosing Authentication for Mail Service
SMTP Authentication
You can protect your server from being an open relay (which indiscriminately relays mail to other mail servers) by requiring SMTP authentication. Requiring authentication ensures that only known
You can configure Mail service to require secure authentication using
Plain authentication sends mail passwords as plain text over the network. Login authentication sends a minimally secure crypt hash of the password over the network. You might allow these less secure authentication methods, which don’t encrypt passwords, if some users have mail client software that doesn’t support the secure methods.
If you configure Mail service to require
Before enabling Kerberos authentication for incoming Mail service, you must integrate Mac OS X with a Kerberos server. If you’re using Mac OS X Server for Kerberos authentication, this is already done for you.
Enabling SMTP Authentication will:
ÂÂ Make your users authenticate with their mail client before accepting mail to send.
ÂÂ Frustrate mail server abusers who are trying to send mail through your system without your consent.
64
Chapter 3 Mail Service Advanced Configuration
