Hello,
I am trying to investigate a strange problem I came across while configuring
TLS with exim 3.167. I have two pretty default authenticators set up that
provide AUTH PLAIN and AUTH LOGIN. Here is the LOGIN one:
auth_login:
driver = plaintext
public_name = LOGIN
server_prompts = "Username:: : Password::"
server_condition = "${if and {{!eq{$1}{}}{!eq{$2}{}} \
{crypteq{$2}{${extract{1}{:} \
{${lookup{$1}lsearch{/etc/mail/passwd}{$value}{*:*}}}}}}}{1}{0}}"
server_set_id = $1
Tests I did using Outlook Express show, that it works as expected:
Received: from modem.rmf.pl ([195.117.15.45] helo=dreptak)
by skipper.rmf.pl with asmtp (Exim 3.167 #1)
id 13sPUa-0008FT-00
for lukie@???; Sun, 05 Nov 2000 14:05:48 +0100
X-Mailer: Microsoft Outlook Express 5.00.2615.200
And here is a fragment of OE's smtp.log:
SMTP: 14:06:21 [tx] AUTH LOGIN
SMTP: 14:06:22 [rx] 334 VXNlcm5hbWU6
SMTP: 14:06:22 [tx] ************
SMTP: 14:06:22 [rx] 334 UGFzc3dvcmQ6
SMTP: 14:06:22 [tx] ************
SMTP: 14:06:22 [rx] 235 Authentication succeeded
Well... it works. Now, I also have a similarly basic TLS/SSL support
compiled against OpenSSL 0.9.5a. Here's the config:
tls_certificate = /etc/mail/stunnel.pem
tls_privatekey = /etc/mail/stunnel.pem
tls_advertise_hosts = "*"
Stunnel.pem contains of course both key and certificate. It seems
to work too:
Received: from modem.rmf.pl ([195.117.15.45] helo=dreptak)
by skipper.rmf.pl with smtp (TLSv1:EXP-RC4-MD5:128)
(Exim 3.167 #1)
id 13sPNZ-00089y-00
for lukie@???; Sun, 05 Nov 2000 13:58:33 +0100
SMTP: 13:59:04 [tx] STARTTLS
SMTP: 13:59:05 [rx] 220 OpenSSL/0.9.5beta go ahead
SMTP: 13:59:06 [tx] HELO dreptak
SMTP: 13:59:07 [rx] 250 skipper.rmf.pl Hello modem.rmf.pl [195.117.15.45]
SMTP: 13:59:07 [tx] MAIL FROM: <lukie@???>
SMTP: 13:59:07 [rx] 250 <lukie@???> is syntactically correct
SMTP: 13:59:07 [tx] RCPT TO: <lukie@???>
SMTP: 13:59:07 [rx] 250 <lukie@???> is syntactically correct
[...]
Now... here begins the strange part. As long as either of the above is used
separately, everything works just fine. But when I try to use both, I have
two types of strange behaviour:
SMTP: 14:01:51 [tx] STARTTLS
SMTP: 14:01:51 [rx] 220 OpenSSL/0.9.5beta go ahead
SMTP: 14:01:52 [tx] EHLO dreptak
SMTP: 14:01:52 [rx] 250-skipper.rmf.pl Hello modem.rmf.pl [195.117.15.45]
SMTP: 14:01:52 [rx] 250-SIZE 50331648
SMTP: 14:01:52 [rx] 250-PIPELINING
SMTP: 14:01:52 [rx] 250-AUTH PLAIN LOGIN
SMTP: 14:01:52 [rx] 250 HELP
SMTP: 14:01:52 [tx] AUTH LOGIN
SMTP: 14:01:52 [rx] 334 VXNlcm5hbWU6
SMTP: 14:01:52 [tx] bGdyb2NoYWw=
SMTP: 14:01:53 [rx] 501 Invalid base64 data
... with the password being rejected, or the session just hangs after
login data being sent and timeout occurs. Well, what I am sure is that
plain (non-encrypted) data shown above _is_ valid.
Anyone who has ancountered similiar problems? Or perhaps someone, who
has no problems using Exim with Outlook Express clients?
Regards,
--
Łukasz Grochal, network administrator
Radio Muzyka Fakty, Sp. z o.o. al. Waszyngtona 1, 30-204 Kraków
tel., fax: +48 12 4252625 e-mail: l.grochal@???
