SMTP server setup

Go in General Parameters > Advanced Parameters > SMTP:

  • Session key containing mail address: choose which session field contains mail address

  • SMTP Server: IP or hostname of the SMTP server

  • SMTP Port: Port of the SMTP server

  • SMTP User: SMTP user if authentication is required

  • SMTP Password: SMTP password if authentication is required

  • SASL mechanism: SASL mechanism(s) allowed to authenticate on the SMTP server (see below)

  • SSL/TLS protocol and SSL/TLS options: Here you can enable SMTPS or startTLS. A list of possible options can be found in the IO::Socket::SSL documentation.

Choosing the SASL mechanism

Added in version 2.23.3.

By default, LemonLDAP::NG lets Net::SMTP choose the authentication mechanism among all the mechanisms advertised by the server, and the “strongest” one is selected. Some servers advertise mechanisms that do not work (DIGEST-MD5 for example), which makes authentication fail even with valid credentials.

In that case, set SASL mechanism (SMTPAuthMech) to the mechanism you want to use, or to a space separated list of allowed mechanisms, for example:

PLAIN LOGIN CRAM-MD5

Only the listed mechanisms will then be tried, in the order chosen by Authen::SASL among those also advertised by the server. Leave the field empty to restore the default behavior.

Warning

The Authen::SASL module must be installed to use this parameter, and Email::Sender must be at least 1.300032. If this parameter is set while one of these requirements is not met, the mail related plugins refuse to start, since mails would otherwise be sent using another mechanism than the configured one.

Tip

  • If no SMTP server is configured, the mail will be sent via the local sendmail program. Else, Net::SMTP module is required to use the SMTP server

  • The SMTP server value can hold the port, for example: mail.example.com:25

Warning

  • Older versions of the Email::Sender library have limitations when it comes to SMTPS or STARTTLS support. Versions lower than 1.300027 will not be able to check the remote server certificate or use custom IO::Socket::SSL options.

  • Mail headers:

    • Mail sender: address seen in the “From” field (default: noreply@[DOMAIN])

    • Reply address: address seen in the “Reply-To” field

    • charset: Charset used for the body of the mail (default: utf-8)

Testing your email setup

Added in version 2.0.10.

You can test your email setup in the General Parameters > Advanced Parameters > SMTP page by using the Send test email button in the manager.

Tip

You need to save your SMTP configuration before you can test it

Added in version 2.0.10.

You can also test your email setup using the test-email command in the CLI

lemonldap-ng-cli test-email dwho@badwolf.org