On Sep 8, 2004, at 10:20 AM, Jeff Koch wrote:
I have been trying to figure out why we're having trouble getting the 'mail' program on OSX Mac's to smtp authenticate with the newer netqmail-1.05 versions of the Toaster. When the Mac's mail program is able to authenticate with a mailserver built in Fall 2003.

Make sure you're running vpopmail 5.4.0 or later. The older qmail-smtpd patches and vchkpw programs used the wrong parameter order form CRAM-MD5 authentication. We fixed vpopmail during the 5.4.0 release candidates, and now include an updated AUTH patch in the contrib directory.


We inspected the code in qmail.smtp.c and found in the earlier versions the smtp code outputs two forms of AUTH information - one with an equal sign (=) and one without.

#ifdef AUTHCRAM
  out("\r\n250-AUTH LOGIN CRAM-MD5 PLAIN");
  out("\r\n250-AUTH=LOGIN CRAM-MD5 PLAIN");
#else
  out("\r\n250-AUTH LOGIN PLAIN");
  out("\r\n250-AUTH=LOGIN PLAIN");
#endif

The '=' is wrong and doesn't match the spec in the RFC. It may have been included to support broken email clients that have since been fixed. Apple's Mail program (which I use) does not look for the '='.


but the current netqmail 1.05 version only outputs one form of AUTH.

#ifdef CRAM_MD5
  out("250 AUTH LOGIN PLAIN CRAM-MD5\r\n");
#else
  out("250 AUTH LOGIN PLAIN\r\n");
#endif

Can anyone explain what the difference is and whether it could affect the ability of the Mac's mail program to authenticate?

The problem is that the AUTH patch to qmail-smtpd doesn't match the vchkpw program so CRAM-MD5 authentications fail. Update vpopmail on the netqmail box and you should be fine.


--
Tom Collins  -  [EMAIL PROTECTED]
QmailAdmin: http://qmailadmin.sf.net/  Vpopmail: http://vpopmail.sf.net/
Info on the Sniffter hand-held Network Tester: http://sniffter.com/



Reply via email to