Re: STMP Auth Failure

From: Robin Curts (rcurts_at_robincurts.com)
Date: 02/04/05

  • Next message: Paul Howarth: "Re: network configuration file" 
    Date: Fri, 04 Feb 2005 13:25:16 -0500
To: For users of Fedora Core releases <fedora-list@redhat.com>

    Rodolfo J. Paiz wrote:

    >On Fri, 2005-02-04 at 11:06 -0600, rcurts@robincurts.com wrote:
    >
    >
    >>I CAN send mail to <my_username>@<hostname_of_box>.com ... but if i send
    >>to an outside domain I get the error.
    >>
    >>The AUTH section of my sendmail.mc file:
    >>
    >>define(`confAUTH_OPTIONS', `A p')dnl
    >>TRUST_AUTH_MECH(`EXTERNAL DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl
    >>define(`confAUTH_MECHANISMS', `EXTERNAL GSSAPI DIGEST-MD5 CRAM-MD5 LOGIN
    >>PLAIN')dnl
    >>
    >>
    >>
    >
    >Try removing the "p" for the first line, like this:
    >
    >define(`confAUTH_OPTIONS', `A')dnl
    >
    >I believe the "p" parameter only allows encrypted authentication, and
    >will expressly prevent SMTP AUTH unencrypted mechanisms like PLAIN and
    >LOGIN unless the session is encrypted.
    >
    >For most people, allowing PLAIN and LOGIN SMTP AUTH is no greater risk
    >than they already have, since POP and IMAP *also* transmit unencrypted
    >passwords. Hence, no damage done by removing the 'p'.
    >
    >I think it should work with that one change. Try it and see!
    >
    >Cheers,
    >
    >
    >
    A few answers to the folks that have been helping me:

    I took the "p" out of the confAUTH_OPTIONS to allow for encrypted
    user/pass's, and I still get the same error. I tried that a few times in
    my barrage of tests with sendmail.mc :)

    I moved the LOG_LEVEL to 15 and I got the following output from maillog:
    Feb 4 12:41:59 localhost sendmail[8286]: j14Hf6sq008286:
    ruleset=check_rcpt, arg1=rcurts@robincurts.com,
    relay=wbar15.tmp1-4-8-050-019.tmp1.dsl-verizon.net [4.8.50.19],
    reject=550 5.7.1 rcurts@robincurts.com... Relaying denied. Proper
    authentication required.
    (not much help -- just the Proper Auth Required message really)

    I did add saslpasswd2 for the user i am trying to log in as, no help
    there either.

    When i telnet to my host on port 25 i issue "ehlo localhost" and "auth
    login". here's the output:
    220 intrastudios.com ESMTP Sendmail 8.13.1/8.13.1; Fri, 4 Feb 2005
    13:20:39 -0500
    ehlo localhost
    250-intrastudios.com Hello wbar15.tmp1-4-8-050-019.tmp1.dsl-verizon.net
    [4.8.50.19], pleased to meet you
    250-ENHANCEDSTATUSCODES
    250-PIPELINING
    250-8BITMIME
    250-SIZE
    250-DSN
    250-ETRN
    250-AUTH DIGEST-MD5 CRAM-MD5
    250-DELIVERBY
    250 HELP
    auth login
    504 5.3.3 AUTH mechanism login not available

    Note: I have both outlook and thunderbird set to "My SMTP Server
    Requires Authentication". Outlook tries once and sends me an
    underliverable email saying "Relaying Denied. Proper authentication
    required." Thunderbird just prompts me over and over for my password,
    until I hit cancel and then it all fails.

    -Robin Curts 

    -- 
/**
 * Robin Curts 
 * rcurts@robincurts.com
 * (813) 786-8634
 */
-- 
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list
  • Next message: Paul Howarth: "Re: network configuration file"

    Relevant Pages

    • Re: Cant send mail using Mail.app, but can with Thunderbird
      ... I believe that AUTH LOGIN sends the login and password base64 encoded and AUTH PLAIN sends the login and password in clear text. ... Password must be the base64 encoded authentication if it is now working on your machine. ... Many older email clients only support PLAIN such as older copies of outlook and I believe many browser email programs such as netscape only support PLAIN. ...
      (comp.sys.mac.system)
    • Re: Cant send mail using Mail.app, but can with Thunderbird
      ... Forgot to mention it but on a FreeBSD machine with smtp auth, only PLAIN works with the password database, the other mechansisms require an entry in the SASL password database see, /usr/local/sbin/saslpasswd2, for setting the users password in the SASL database. ... So perhaps your problem with PLAIN and LOGIN had more to do with the password stored in your database, ie wrong password when using PLAIN and correct password with using LOGIN with the SASL database. ... mail app supports the following authentication mechanisms, ...
      (comp.sys.mac.system)
    • Re: sendmail user name and password authentication
      ... authentication fails on your host. ... be sure you get at one line: 250-AUTH LOGIN PLAIN ... if SMTP AUTH again fails check that you can login with the given data ...
      (Fedora)
    • Re: Defaulting domain w/integrated auth
      ... for internal - it will auto login since user already logged to ... > Maybe I have other setup issues but if I disable Intergrated auth the my> sharepoint server portals will not build thier search databases issuing> authorization warnings. ...
      (microsoft.public.inetserver.iis)
    • Re: Exchange 2003 SMTP nicht konform zu RFC?
      ... >> AUTH LOGIN schreiben. ... die kein Challenge mit Daten benötigt. ... > Methode LOGIN keinen Challenge erfordert? ... Für ein SMTP-AUTH, das "LOGIN" als Authentifizierungsart unterstützt, sollte ...
      (microsoft.public.de.german.exchange2000.general)