Package: msmtp
Version: 1.6.3-1
Severity: wishlist

My company's mail server is normally accessed through a round-robin DNS
alias; but, for gssapi (krb5) authentication to work, I had to put one
of the actual hostnames in .msmtprc (and set dns_canonicalize_hostname
to false in krb5.conf because reverse-DNS is broken).

The server greeting ("220" line) includes the canonical hostname:
  220 HOSTNAME.example Microsoft ESMTP MAIL Service ready at Mon, 11 Jan 2016 
11:21:25 -0500
Please consider using this value, instead of the configured hostname,
for gssapi authentication.  I'd do this by default, with an option to
disable it.  It should be safe--RFC 5321 states:
  "all the greeting-type replies have the official name (the fully-
   qualified primary domain name) of the server host as the first word
   following the reply code."
(Passing that hostname to passwordeval somehow might be useful too.)

- Michael


-- System Information:
Debian Release: stretch/sid
  APT prefers testing
  APT policy: (500, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.3.0-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages msmtp depends on:
ii  debconf [debconf-2.0]  1.5.58
ii  libc6                  2.21-6
ii  libgnutls-deb0-28      3.3.19-1
ii  libgsasl7              1.8.0-8
ii  libidn11               1.32-3
ii  ucf                    3.0031

Versions of packages msmtp recommends:
ii  ca-certificates  20160104

Versions of packages msmtp suggests:
pn  msmtp-mta  <none>

-- debconf information:
  msmtp/tls: false
  msmtp/sysconfig: false
  msmtp/port: 25
  msmtp/auto_from: true
  msmtp/maildomain:
  msmtp/host:

Attachment: signature.asc
Description: PGP signature

---------------------------------------------------------------------
This transmission (including any attachments) may contain confidential 
information, privileged material (including material protected by the 
solicitor-client or other applicable privileges), or constitute non-public 
information. Any use of this information by anyone other than the intended 
recipient is prohibited. If you have received this transmission in error, 
please immediately reply to the sender and delete this information from your 
system. Use, dissemination, distribution, or reproduction of this transmission 
by unintended recipients is not authorized and may be unlawful.

Reply via email to