[exim] Problems with TLS and SMTP authentication

Top Page
Delete this message
Reply to this message
Author: Wayne Pascoe
Date:  
To: exim-users
Subject: [exim] Problems with TLS and SMTP authentication
Hi all,

I am trying to migrate my server from gentoo to Centos, and as part
of this, I am resetting up Exim. I have a working Exim solution on
Gentoo that does authenticated SMTP with TLS. This has only ever been
tested with Mail.App on OS X, but that is all I need :)

When I try and send a mail using authentication (to the new server),
I get the following error:
2006-07-09 11:54:36 plain authenticator failed for
core.penguinpowered.org ([192.168.10.42]) [212.18.250.170]: 535
Incorrect authentication data (set_id=waynep)


I originally got the following error in my logs with or without
authentication, when using SSL:
2006-07-09 11:54:31 TLS error on connection from
core.penguinpowered.org ([192.168.10.42]) [212.18.250.170]
(SSL_accept): error:00000000:lib(0):func(0):reason(0)
When I imported my self-signed certificate into mail.app, this
stopped. I'm posting the error anyway as I don't know if it is
related to my real problem...


The parts of my exim.conf that I believe are relevant are as follows:

[MAIN]
tls_advertise_hosts = *
tls_certificate = /etc/exim/smtp.pem

[AUTHENTICATION]
plain:
driver = plaintext
public_name = PLAIN
server_advertise_condition = "${if eq{$tls_cipher}{}{no}{yes}}"
server_condition = "${if pam{$2:$3}{1}{0}}"
server_set_id = $2

login:
driver = plaintext
public_name = LOGIN
server_advertise_condition = "${if eq{$tls_cipher}{}{no}{yes}}"
server_prompts = "Username:: : Password::"
server_condition = "${if pam{$1:$2}{1}{0}}"
server_set_id = $1

I have tried both of the following in /etc/pam.d/exim, but neither  
seemed to change anything:
auth           required        pam_stack.so service=system-auth
account                required        pam_stack.so service=system-auth
and
auth            required        pam_unix.so shadow md5
account         required        pam_unix.so


If anyone has any advice as to how I can fix this, I would be very
grateful!

Thanks in advance,

-- 
Wayne Pascoe    (gpg --keyserver www.co.uk.pgp.net --recv-keys 79A7C870)
Give me enough medals, and I'll win any war.
- Napolean