ifelse(SECTION, `MAIN', `dnl
define(`confSMTP_AUTH_ADVERTIZE', `*')dnl
ifdef(`confSMTP_AUTH_SKIP_ADVERTIZE', `ifelse(confSMTP_AUTH_SKIP_ADVERTIZE, `NO', `dnl', `dnl
hostlist skip_auth_advertise             = CONFDIR/skip_auth_advertise
define(`confSMTP_AUTH_ADVERTIZE', `!+skip_auth_advertise : *')dnl
')')
ifelse(confDISABLE_AUTH_WITHOUT_TLS, `ALL', `
auth_advertise_hosts = ${if eq{$tls_cipher}{}{+relay_from_hosts}{confSMTP_AUTH_ADVERTIZE}}
', `
auth_advertise_hosts = confSMTP_AUTH_ADVERTIZE
')
')dnl

ifelse(SECTION, `AUTHENTICATORS', `dnl

ifdef(`confSMTP_AUTH_SPA', `ifelse(confSMTP_AUTH_SPA, `YES', `dnl
	srv_auth_spa:
		driver			= spa
		public_name		= NTLM
#		server_secret		= ${if eq{$1}{login}{password}fail}
ifdef(`confSMTP_AUTH_SOURCE', `dnl
dnl
ifelse(confSMTP_AUTH_SOURCE, `PASSWD_PLAIN', `dnl
		server_password		= ${extract{1}{:}{\
    					${lookup{$1}lsearch{confSMTP_AUTH_PASSWD_PLAIN}{\
					${if match{$value}{\N^(\{\S+\})?(.+)$\N}{$2}{$value}}\
					}{\
					${lookup{$1@$qualify_domain}lsearch{confSMTP_AUTH_PASSWD_PLAIN}{\
					${if match{$value}{\N^(\{\S+\})?(.+)$\N}{$2}{$value}}\
					}fail}\
					}}\
					}}
')
dnl
ifelse(confSMTP_AUTH_SOURCE, `MYSQL_PLAIN', `dnl
		server_password		= ${lookup mysql{ \
					${sg{\
					confSMTP_AUTH_MYSQL_PLAIN \
					}{\NLOGIN\N}{${quote_mysql:$1}}}\
					}{$value}fail}
')
')
')')


ifdef(`confSMTP_AUTH_PLAIN', `ifelse(confSMTP_AUTH_PLAIN, `YES', `dnl
	srv_auth_plain:
		driver			= plaintext
		public_name		= PLAIN
		server_prompts		= :
ifdef(`confSMTP_AUTH_SOURCE', `dnl
dnl
ifelse(confSMTP_AUTH_SOURCE, `IMAP', `dnl
		server_condition	= ${perl{imap_login}{confSMTP_AUTH_IMAP_HOST}{confSMTP_AUTH_IMAP_PORT}{$2}{$3}}
')
dnl
ifelse(confSMTP_AUTH_SOURCE, `PAM', `dnl
		server_condition	= ${if pam{$2:${sg{$3}{:}{::}}}{yes}{no}}
')
dnl
ifelse(confSMTP_AUTH_SOURCE, `SASLAUTHD', `dnl
#		server_condition	= ${if saslauthd{{username}{password}{service}{realm}}{yes}{no}}
		server_condition	= ${if saslauthd{{${local_part:$2}}{$3}{}{${domain:$2}}}{yes}{no}}
')
dnl
ifelse_strstr(confSMTP_AUTH_SOURCE, `PASSWD', `dnl
ifelse_strstr(confSMTP_AUTH_SOURCE, `PASSWD_PLAIN', `dnl
		server_condition	= ${if eq{$3}\
					{${extract{1}{:}{\
    					${lookup{$2}lsearch{confSMTP_AUTH_PASSWD_PLAIN}{${sg{$value}{\N^\{\S+\}\N}{}}}{\
    					${lookup{$2@$qualify_domain}lsearch{confSMTP_AUTH_PASSWD_PLAIN}{${sg{$value}{\N^\{\S+\}\N}{}}}fail}\
					}}\
					}}}\
					{yes}{no}}
', `
		server_condition	= ${if crypteq{$3}\
					{${extract{1}{:}{\
    					${lookup{$2}lsearch{confSMTP_AUTH_PASSWD}{${sg{$value}{\N^\{\S+\}\N}{}}}{\
    					${lookup{$2@$qualify_domain}lsearch{confSMTP_AUTH_PASSWD}{${sg{$value}{\N^\{\S+\}\N}{}}}fail}\
					}}\
					}}}\
					{yes}{no}}
')
')
dnl
ifelse_strstr(confSMTP_AUTH_SOURCE, `MYSQL', `dnl
ifelse_strstr(confSMTP_AUTH_SOURCE, `MYSQL_PLAIN', `dnl
		server_condition	= ${if eq{$3}\
					{${lookup mysql{ \
					${sg{\
					confSMTP_AUTH_MYSQL_PLAIN \
					}{\NLOGIN\N}{${quote_mysql:$2}}}\
					}{${sg{$value}{\N^\{\S+\}\N}{}}}fail}}\
					{yes}{no}}
', `
		server_condition	= ${if crypteq{$3}\
					{${lookup mysql{ \
					${sg{\
					confSMTP_AUTH_MYSQL \
					}{\NLOGIN\N}{${quote_mysql:$2}}}\
					}{${sg{$value}{\N^\{\S+\}\N}{}}}fail}}\
					{yes}{no}}
')
')
')
		server_set_id		= $2
')')


ifdef(`confSMTP_AUTH_LOGIN', `ifelse(confSMTP_AUTH_LOGIN, `YES', `dnl
	srv_auth_login:
		driver			= plaintext
		public_name		= LOGIN
		server_prompts		= Username:: : Password::
ifdef(`confSMTP_AUTH_SOURCE', `dnl
dnl
ifelse(confSMTP_AUTH_SOURCE, `IMAP', `dnl
		server_condition	= ${perl{imap_login}{confSMTP_AUTH_IMAP_HOST}{confSMTP_AUTH_IMAP_PORT}{$1}{$2}}
')
dnl
ifelse(confSMTP_AUTH_SOURCE, `PAM', `dnl
		server_condition	= ${if pam{$1:${sg{$2}{:}{::}}}{yes}{no}}
')
dnl
ifelse(confSMTP_AUTH_SOURCE, `SASLAUTHD', `dnl
#		server_condition = ${if saslauthd{{username}{password}{service}{realm}}{yes}{no}}
		server_condition	= ${if saslauthd{{${local_part:$1}}{$2}{}{${domain:$1}}}{yes}{no}}
')
dnl
ifelse_strstr(confSMTP_AUTH_SOURCE, `PASSWD', `dnl
ifelse_strstr(confSMTP_AUTH_SOURCE, `PASSWD_PLAIN', `dnl
		server_condition	= ${if eq{$2}\
					{${extract{1}{:}{\
    					${lookup{$1}lsearch{confSMTP_AUTH_PASSWD_PLAIN}{${sg{$value}{\N^\{\S+\}\N}{}}}{\
    					${lookup{$1@$qualify_domain}lsearch{confSMTP_AUTH_PASSWD_PLAIN}{${sg{$value}{\N^\{\S+\}\N}{}}}fail}\
					}}\
					}}}\
					{yes}{no}}
', `
		server_condition	= ${if crypteq{$2}\
					{${extract{1}{:}{\
    					${lookup{$1}lsearch{confSMTP_AUTH_PASSWD}{${sg{$value}{\N^\{\S+\}\N}{}}}{\
    					${lookup{$1@$qualify_domain}lsearch{confSMTP_AUTH_PASSWD}{${sg{$value}{\N^\{\S+\}\N}{}}}fail}\
					}}\
					}}}\
					{yes}{no}}
')
')
dnl
ifelse_strstr(confSMTP_AUTH_SOURCE, `MYSQL', `dnl
ifelse_strstr(confSMTP_AUTH_SOURCE, `MYSQL_PLAIN', `dnl
		server_condition	= ${if eq{$2}\
					{${lookup mysql{ \
					${sg{\
					confSMTP_AUTH_MYSQL_PLAIN \
					}{\NLOGIN\N}{${quote_mysql:$1}}}\
					}{${sg{$value}{\N^\{\S+\}\N}{}}}fail}}\
					{yes}{no}}
', `
		server_condition	= ${if crypteq{$2}\
					{${lookup mysql{ \
					${sg{\
					confSMTP_AUTH_MYSQL \
					}{\NLOGIN\N}{${quote_mysql:$1}}}\
					}{${sg{$value}{\N^\{\S+\}\N}{}}}fail}}\
					{yes}{no}}
')
')
')
		server_set_id		= $1
')')


ifdef(`confSMTP_AUTH_CRAM_MD5', `ifelse(confSMTP_AUTH_CRAM_MD5, `YES', `dnl
	srv_auth_cram_md5:
		driver			= cram_md5
		public_name		= CRAM-MD5
#		server_secret		= ${if eq{$1}{login}{password}fail}
ifdef(`confSMTP_AUTH_SOURCE', `dnl
dnl
ifelse(confSMTP_AUTH_SOURCE, `PASSWD_PLAIN', `dnl
		server_secret		= ${extract{1}{:}{\
    					${lookup{$1}lsearch{confSMTP_AUTH_PASSWD_PLAIN}{\
					${sg{$value}{\N^\{\S+\}\N}{}}\
					}{\
    					${lookup{$1@$qualify_domain}lsearch{confSMTP_AUTH_PASSWD_PLAIN}{\
					${sg{$value}{\N^\{\S+\}\N}{}}\
					}fail}\
					}}\
					}}
')
dnl
ifelse(confSMTP_AUTH_SOURCE, `MYSQL_PLAIN', `dnl
		server_secret		= ${lookup mysql{ \
					${sg{\
					confSMTP_AUTH_MYSQL_PLAIN \
					}{\NLOGIN\N}{${quote_mysql:$1}}}\
					}{$value}fail}
')
')
		server_set_id		= $1
')')

')dnl