Re: [Exim] Exim SMTP Auth, version 4.10 and 4.12...

Top Page
Delete this message
Reply to this message
Author: David Bauman
Date:  
To: Nico Erfurth
CC: exim-users@exim.org
Subject: Re: [Exim] Exim SMTP Auth, version 4.10 and 4.12...
> Strange, IIRC nothing changed in this area.

Yea, I didn't see anything in the docs about it changing, either...

> 1.) Do you see any logentries?


Nothing at all (Clients can't auth, thus no logs are written)

> 2.) Are you sure exim is using the right configure-file?
>     (exim -bP configure_file)


Yes, everything is fine on this route as well...

> 3.) Try to make a debugrun with exim -bh 1.1.1.1 -d and use a fake SMTP
>     session, does it advertise the auth mechs?
>     It should show you a line like
>     250-AUTH PLAIN LOGIN
>     after you send the EHLO.
>     What happens if you send
>     AUTH PLAIN $X
>     where $X is a base64 encoded "username:password"-string


Here's something very interesting... When I do attempt this, this is
what I get:

Exim version 4.10 uid=0 gid=0 pid=31901 L=834cd8 D=fff7577f
Berkeley DB: Sleepycat Software: Berkeley DB 3.2.9: (January 24, 2001)
changed uid/gid: forcing real = effective
uid=0 gid=0
auxiliary group list: <none>
trusted user
admin user
changed uid/gid: privilege not needed
uid=8 gid=12
auxiliary group list: <none>
originator: uid=0 gid=0 login=root name=root
sender address = root@???
sender_fullhost = [1.1.1.1]
sender_rcvhost = [1.1.1.1]

**** SMTP testing session as if from host 1.1.1.1
**** but without any ident (RFC 1413) callback.
**** This is not for real!

host in host_lookup? yes (matched "*")
looking up host name for 1.1.1.1
IP address lookup failed: h_errno=1
sender_fullhost = [1.1.1.1]
sender_rcvhost = [1.1.1.1]
set_process_info: 31901 handling incoming connection from [1.1.1.1]
host in host_reject_connection? no (option unset)
host in sender_unqualified_hosts? no (option unset)
host in recipient_unqualified_hosts? no (option unset)
host in helo_verify_hosts? no (option unset)
host in helo_try_verify_hosts? no (option unset)
host in helo_accept_junk_hosts? no (option unset)
LOG: smtp_connection MAIN
SMTP connection from [1.1.1.1]
SMTP>> 220 rhyn.phaseburn.net ESMTP Exim 4.10 Fri, 28 Feb 2003 11:59:22

-0800
220 rhyn.phaseburn.net ESMTP Exim 4.10 Fri, 28 Feb 2003 11:59:22 -0800
smtp_setup_msg entered
EHLO rhyn.phaseburn.net
SMTP<< EHLO rhyn.phaseburn.net
rhyn.phaseburn.net in helo_lookup_domains? yes (matched "@")
looking up host name for 1.1.1.1
IP address lookup failed: h_errno=1
sender_fullhost = (rhyn.phaseburn.net) [1.1.1.1]
sender_rcvhost = [1.1.1.1] (helo=rhyn.phaseburn.net)
set_process_info: 31901 handling incoming connection from
(rhyn.phaseburn.net) [1.1.1.1]
host in "/etc/exim/exim.relay"? no (end of list)
host in auth_advertise_hosts? yes (end of list)
host in tls_advertise_hosts? no (option unset)
250-rhyn.phaseburn.net Hello rhyn.phaseburn.net [1.1.1.1]
250-SIZE 52428800
250-PIPELINING
250-AUTH PLAIN LOGIN
250 HELP
SMTP>> 250-rhyn.phaseburn.net Hello rhyn.phaseburn.net [1.1.1.1]

250-SIZE 52428800
250-PIPELINING
250-AUTH PLAIN LOGIN
250 HELP
AUTH LOGIN
SMTP<< AUTH LOGIN
SMTP>> 334 VXNlcm5hbWU6

334 VXNlcm5hbWU6

Auth appears to work just fine, here...
However: when telnetting into port 25, it doesn't tell me AUTH is there,
and in fact when I try to use it, it comes back saying that I'm using
something not advertised...

Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
220 rhyn.phaseburn.net ESMTP Exim 4.12 Fri, 28 Feb 2003 12:01:23 -0800
EHLO rhyn.phaseburn.net
250-rhyn.phaseburn.net Hello localhost [127.0.0.1]
250-SIZE 52428800
250-PIPELINING
250 HELP
AUTH LOGIN
503 AUTH command used when not advertised

Any ideas on where to go from here? I know it's compiled in, just not
sure why it isn't enabled for the rest of the world...

> Nico

--

-David Bauman
dbauman@???

"This is Linux Country. On a quiet night, you can hear Windows reboot..."

Network Security/Operations - Infostations
     888.216.0707 x 204 (Toll-Free)
     916.276.6667       (Cellular)
     916.630.7457       (Fax)