On Wednesday 23 October 2002 11:36 am, Matt Bernstein wrote:
> At 10:49 -0500 Eric Renfro wrote:
> >I'm trying to switch from using LDAP-based user SMTP AUTH, to PgSQL-based
> >lookup AUTH.
> >
> >My current authenticators are like:
>
> begin authenticators
>
> cram_md5:
> driver = cram_md5
> public_name = CRAM-MD5
> server_secret = ${lookup pgsql{select password from member where
> username='$1'}{$value}fail} server_set_id = $1
Oct 23 13:14:48 ginseng.myrddincd.com oidentd[12400]: [myrddincd.com]
Successful lookup: 49811 , 25 : psi-jack (psi-jack)
Oct 23 13:14:49 ginseng.myrddincd.com exim[12399]: 2002-10-23 13:14:49
184Q1p-0003Dz-00 <= erenfro@??? H=myrddincd.com
(ginseng.myrddincd.com) [192.168.1.10] U=psi-jack P=asmtp X=TLSv1:RC4-MD5:128
A=dbmail_cram:erenfro S=818 id=200210231313.09456.erenfro@???
Oct 23 13:14:50 ginseng.myrddincd.com exim[12406]: 2002-10-23 13:14:50
184Q1p-0003E6-00 exiscan: mail already scanned (previous ID was
184Q1p-0003Dz-00)
Oct 23 13:14:50 ginseng.myrddincd.com exim[12406]: 2002-10-23 13:14:50
184Q1p-0003E6-00 <= erenfro@??? U=mail P=spam-scanned S=1196
id=200210231313.09456.erenfro@???
Oct 23 13:14:50 ginseng.myrddincd.com dbmail/smtp[12422]: insert_messages():
message id=3791, size=1316 is inserted
Oct 23 13:14:50 ginseng.myrddincd.com exim[12418]: 2002-10-23 13:14:50
184Q1p-0003E6-00 => psi-jack <psi-jack@???> R=dbmail_user
T=dbmail_delivery
Oct 23 13:14:50 ginseng.myrddincd.com exim[12418]: 2002-10-23 13:14:50
184Q1p-0003E6-00 Completed
Oct 23 13:14:50 ginseng.myrddincd.com exim[12402]: 2002-10-23 13:14:50
184Q1p-0003Dz-00 => psi-jack <psi-jack@???> R=spamcheck_router
T=spamcheck
Oct 23 13:14:50 ginseng.myrddincd.com exim[12402]: 2002-10-23 13:14:50
184Q1p-0003Dz-00 Completed
First time works.
Oct 23 13:15:15 ginseng.myrddincd.com oidentd[12459]: Connection from
myrddincd.com (192.168.1.10):0
Oct 23 13:15:15 ginseng.myrddincd.com oidentd[12459]: [myrddincd.com]
Successful lookup: 49837 , 25 : psi-jack (psi-jack)
Oct 23 13:15:15 ginseng.myrddincd.com exim[12458]: 2002-10-23 13:15:15
Authentication failed for myrddincd.com (ginseng.myrddincd.com)
[192.168.1.10] (psi-jack): 535 Incorrect authentication data (set_id=erenfro)
Oct 23 13:15:15 ginseng.myrddincd.com exim[12458]: 2002-10-23 13:15:15
Authentication failed for myrddincd.com (ginseng.myrddincd.com)
[192.168.1.10] (psi-jack): 535 Incorrect authentication data (set_id=erenfro)
Second time fails.
That's the one problem I keep having with the cram authenticator. I've got
LOGIN and PLAIN working fine, after working at it a while.
But CRAM-MD5 seems to be very picky. My original query was as follows:
dbmail_cram:
driver = cram_md5
public_name = CRAM-MD5
server_secret = \
${if eq{$1}
{${lookup pgsql \
{SELECT userid FROM users WHERE userid = '${quote_pgsql:$1}'} \
}}
{${lookup pgsql \
{SELECT passwd FROM users WHERE userid = '${quote_pgsql:$1}'} \
}}
fail}
server_set_id = $1
And, that worked, only for the first time, for the first user that authed.
Once I saw this reply, I tried out your method, and it's doing the very exact
same thing. Succeeding once, and failing any further time.
--
Eric Renfro
Myrddin Computers & Designs - CEO/President
Sales: sales@???
Fax: (775) 243-4535
