Re: enabling cyrus-sasl in postfix by default

["Jonathan A. Kollasch" <jakllsch%kollasch.net@localhost>]

On Tue, May 05, 2026 at 08:09:26PM -0400, Greg Troxel wrote:
> "Jonathan A. Kollasch" <jakllsch%kollasch.net@localhost> writes:
> 
> > Does anyone have objection to adding 'sasl' to PKG_SUGGESTED_OPTIONS in
> > mail/postfix/options.mk?  This would add a dependency on cyrus-sasl for
> > the default build.
> 
> You didn't explain the consequences.
> 
> First, cyrus-sasl is 833418 per pkg_add -s on NetBSD 10 amd64.  That's
> 12.7% of postfix's size, but on a mail server isn't really not that
> much, even 10 years ago.
> 
> Are you sure that if you enable it, that existing postfix setups
> configured to use dovecot, e.g. via
> 
>   smtpd_sasl_type = dovecot
>   smtpd_sasl_path = private/auth
> 
> will continue to work?
> 

Yes, I believe so; at least, when I compiled with cyrus-sasl enabled,
`postconf -a` (which lists possible smtpd sasl implementations) still
includes "dovecot".

> Do you believe that if the config doesn't have "smtpd_sasl_type = cyrus"
> or whatever, that no cyrus code will run?
> 

Yes, I do; I can't vouch for "won't even run any cyrus sasl library
initialization function", but I do believe cyrus-sasl won't be executed
in network code paths in that case.

> If yes, and no code will run, then it seems fine to me.  If enabling it
> wil break the use of dovecot auth (which I view as the standard
> approach), then I'm opposed.