Run postmap -p on sasl_passwd which is mode 0600 to get sasl_passwd.db with mode 0644 as per official docs, otherwise the postfix service cannot see the db file and cannot get the auth info. The *.db file's contents are protected and do not need to be hidden.
Hash maps are not sufficient to represent any of the meaningful updates one might want, e.g. overriding all senders or a specific set of senders not grouped on a system level, thus we need to be able to use other type of maps, such as regexp or pcre
tersmitten
commented
3 years ago
As the title says:
postmap -ponsasl_passwdwhich is mode0600to getsasl_passwd.dbwith mode0644as per official docs, otherwise the postfix service cannot see the db file and cannot get the auth info. The*.dbfile's contents are protected and do not need to be hidden.regexporpcre