Merge ~kotodama/charm-postfix-relay/+git/charm-postfix-relay:fix_auth_defaults into charm-postfix-relay:master

[Loïc Gomez]

If auth parameters are set, disable anonymous sending of emails and set default auth mechanisms

When we set up auth params, we expect Postfix to authenticate.
Without these, Postfix sends emails without trying any form of authentication.
LOGIN and PLAIN are the mechanisms that can be used without other form of configuration.

[🤖 Canonical IS Merge Bot (canonical-is-mergebot)]

This merge proposal is being monitored by mergebot. Change the status to Approved to merge.

[Haw Loeung (hloeung)]

LGTM

review: Approve (+1)

[🤖 prod-jenkaas-bootstack (prod-jenkaas-bootstack)]

FAILED: Continuous integration, rev:003ea67a0c679ac6eeea36388851472642d293a3
https://jenkins.canonical.com/bootstack/job/lp-charm-postfix-relay-ci/3/
Executed test runs:
    FAILURE: https://jenkins.canonical.com/bootstack/job/lp-charm-test-functest/592/
    None: https://jenkins.canonical.com/bootstack/job/lp-update-mp/210/

Click here to trigger a rebuild:
https://jenkins.canonical.com/bootstack/job/lp-charm-postfix-relay-ci/3//rebuild

review: Needs Fixing (continuous-integration)

[🤖 prod-jenkaas-bootstack (prod-jenkaas-bootstack)]

PASSED: Continuous integration, rev:003ea67a0c679ac6eeea36388851472642d293a3
https://jenkins.canonical.com/bootstack/job/lp-charm-postfix-relay-ci/6/
Executed test runs:
    SUCCESS: https://jenkins.canonical.com/bootstack/job/lp-charm-test-functest/612/
    None: https://jenkins.canonical.com/bootstack/job/lp-update-mp/218/

Click here to trigger a rebuild:
https://jenkins.canonical.com/bootstack/job/lp-charm-postfix-relay-ci/6//rebuild

review: Approve (continuous-integration)

[Erhan Sunar (esunar)]

review: Approve

[🤖 Canonical IS Merge Bot (canonical-is-mergebot)]

Change successfully merged at revision e32b5be9c21d639e772d8e145b710087b9196d4f

[Loïc Gomez (kotodama)]

Many thanks!

diff --git a/src/templates/main.cf b/src/templates/main.cf
index 966fec4..b9b6ef1 100644
--- a/src/templates/main.cf
+++ b/src/templates/main.cf
@@ -19,7 +19,8 @@ smtp_use_tls = yes
 {%- if enable_auth %}
 smtp_sasl_auth_enable = yes
 smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
-smtp_sasl_security_options =
+smtp_sasl_security_options = noanonymous
+smtp_sasl_mechanism_filter = plain,login
 {%- endif %}
 
 disable_vrfy_command = {{ disable_vrfy_command }}