Re: [Exim] Eudora AUTH over TLS

Αρχική Σελίδα
Delete this message
Reply to this message
Συντάκτης: Jerome Mainka
Ημερομηνία:  
Προς: James P. Roberts, Jerome Mainka, Derek Simkowiak, Giuliano Gavazzi
Υ/ο: exim-users
Αντικείμενο: Re: [Exim] Eudora AUTH over TLS
James P. Roberts wrote:
> So, from this testing, we conclude that Eudora 5.2.0.9 on Windows cannot
> do either PLAIN or LOGIN Authentication over a TLS-encrypted channel,
> right?


Right. I filed a bug report at Eudora Web site.

> I seem to recall hearing that Eudora prefers to use CRAM-MD5
> authentication, which is an encrypted login method, IIRC? (PLEASE
> correct me if wrong!) I believe there are sample CRAM-MD5 authenticator
> configurations out there for Exim. For completeness, I recommend adding
> CRAM-MD5 test results to the above matrix, if anyone happens to have
> them.


Here it is:
Supports AUTH type CRAM-MD5 on a non-TLS connection: Yes
Supports AUTH type CRAM-MD5 after STARTTLS connection: No
Supports AUTH type CRAM-MD5 over wrapper mode TLS connection: No

It seems, as Giuliano pointed out, that Eudora enters in
pipe mode as soon as a TLS session is opened. I can see that in Eudora log,
since it doesn't wait for any return code from the server. Here is an excerpt
of the Eudora Log file. (The comments are mine).

1888 64:0.48 Rcvd: "220 docs.antisearch.net ESMTP Exim 4.12 Fri,\
     17 Jan 2003 00:36:51 +0100\r\n"
1888 32:0.48 Sent: "EHLO gandalf.antidot.net\r\n"
1888 64:0.49 Rcvd: "250-docs.antisearch.net Hello \
     ppp3157-cwdsl.fr.cw.net [62.210.104.158]\r\n"
1888 64:0.49 Rcvd: "250-SIZE 52428800\r\n"
1888 64:0.49 Rcvd: "250-PIPELINING\r\n"
1888 64:0.49 Rcvd: "250-STARTTLS\r\n"
1888 64:0.49 Rcvd: "250 HELP\r\n"
1888 32:0.49 Sent: "STARTTLS\r\n"
1888 64:0.49 Rcvd: "220 TLS go ahead\r\n"
1888 32:0.49 Sent: "EHLO gandalf.antidot.net\r\n"
1888 32:0.50 Sent: "RSET\r\n" /* Doesn't wait for a 2xx code */
1888 64:0.50 Rcvd: "250-docs.antisearch.net Hello \
     ppp3157-cwdsl.fr.cw.net [62.210.104.158]\r\n"
1888 64:0.50 Rcvd: "250-SIZE 52428800\r\n"
1888 64:0.50 Rcvd: "250-PIPELINING\r\n"
1888 64:0.50 Rcvd: "250-AUTH PLAIN LOGIN\r\n"
1888 64:0.50 Rcvd: "250 HELP\r\n"
1888 32:0.50 Sent: "MAIL FROM:<mainka@???>\r\n" /* Doesn't wait for
the answer to its RSET command */
1888 64:0.51 Rcvd: "250 Reset OK\r\n"
1888 32:0.51 Sent: "RCPT TO:<mainka@???>\r\n"
1888 64:0.51 Rcvd: "250 OK\r\n"
1888 32:0.51 Sent: "DATA\r\n"
1888 64:0.52 Rcvd: "550 authentication required\r\n" /* Doesn't even see the 5xx Code */
1888 32:0.52 Sent: "QUIT\r\n"
1888 64:0.52 Rcvd: "503 valid RCPT command must precede DATA\r\n"


Jerome Mainka
Antidot