[exim] Re: How to tell which authentication is failing when doing authenticated binds

[Johnnie W Adams via Exim-users]

I don't know how much of the configuration you want to see, but here's the
lookup:

       user=${lookup
ldapdn{user="CN=svc_domainjoin,OU=SVCAccounts,OU=ITS,OU=Organizations,DC=ad,DC=example,DC=com"
pass="password" ldaps://
auth.example.com/OU=Service%20Accounts,DC=ad,DC=example,DC=com?dn?sub?(uid=${quote_ldap_dn:$auth1})}}
\

       pass=${quote:$auth2} \

       ldaps://auth.example.com/ \

What I mean by bind auth is the authorization to bind to the Active
Directory domain; what I mean by 'real' auth is the authorization to send
email.

Thanks,

     John A



On Thu, Apr 10, 2025 at 5:21 AM Jeremy Harris via Exim-users <
exim-users@lists.exim.org> wrote:

> On 2025/04/09 9:49 PM, Johnnie W Adams via Exim-users wrote:
> >       What is strange is that I have made this work; however, I get 235
> > Authentication succeeded when I put in bad account information. It's
> almost
> > as though Exim is seeing the bind authentication as successful and not
> > caring about the account authentication. What could explain this?
>
> Without your config, we have no way of telling.  Also, what do you mean
> by "bind auth" versus "real auth"?
>
> --
> Cheers,
>    Jeremy
>
> --
> ## subscription configuration (requires account):
> ##
> https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
> ## unsubscribe (doesn't require an account):
> ##   exim-users-unsubscr...@lists.exim.org
> ## Exim details at http://www.exim.org/
> ## Please use the Wiki with this list - http://wiki.exim.org/
>


-- 
John Adams
Senior Linux/Middleware Administrator  | Information Technology Services
+1-501-916-3010 | jxad...@ualr.edu | http://ualr.edu/itservices
*UA Little Rock*

Reminder:  IT Services will never ask for your password over the phone or
in an email. Always be suspicious of requests for personal information that
come via email, even from known contacts.  For more information or to
report suspicious email, visit IT Security
<http://ualr.edu/itservices/security/>.

-- 
## subscription configuration (requires account):
##   https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
##   exim-users-unsubscr...@lists.exim.org
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/