From 2953e57a25ed45c046f6711ae5c3277ff88a4017 Mon Sep 17 00:00:00 2001
From: "Antonio J. Delgado" <ad@susurrando.com>
Date: Mon, 30 Jan 2023 23:03:04 +0200
Subject: [PATCH] configure SASLauth daemon to authenticate with IMAP server

---
 tasks/configure.yml | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)

diff --git a/tasks/configure.yml b/tasks/configure.yml
index eee2fdb..a079220 100644
--- a/tasks/configure.yml
+++ b/tasks/configure.yml
@@ -153,6 +153,22 @@
     backup: true
     create: true
 
+- name: Ensure SASL authentication daemon use IMAP mechanism
+  lineinfile:
+    path: /etc/default/saslauthd
+    regexp: '^MECHANISMS='
+    line: 'MECHANISMS="rimap"'
+    backup: true
+    create: true
+
+- name: Ensure SASL authentication daemon configure IMAP mechanism
+  lineinfile:
+    path: /etc/default/saslauthd
+    regexp: '^MECH_OPTIONS='
+    line: 'MECH_OPTIONS="127.0.0.1"'
+    backup: true
+    create: true
+
 - name: Ensure CRON job to update clients exists
   cron:
     name: "Update SMTPD trusted clients"
@@ -191,6 +207,12 @@
     regexp: "^{{ item.user }}: "
   loop: "{{ local_aliases }}"
   notify: Refresh aliases
+
+- name: Ensure postfix belongs to sasl group
+  user:
+    append: true
+    groups:
+      - sasl
 ###################
 #                 #
 # This at the end #