I'm having a strange issue with getting vchkpw to accept cram-md5
authentications via SMTP and I was wondering if anyone knows where I'm
going wrong or if anyone has a similar issue.

I'm running vpopmail 5.4.0 and qmail patched with qmail-smtpd-auth-0.31.
Login and Plain auths are working fine, but Cram-Md5 auths aren't, and
here's why.

I enabled verbose logging for vchkpw and upon testing an auth with a valid
user/pass over Cram-Md5, the log shows this:

  vchkpw-smtp: password fail (pass:   \
  '<[EMAIL PROTECTED]>') \
  [EMAIL PROTECTED]:**ip-address**

Clearly this is showing that vchkpw is reading the challenge string in
place of the password string, so thus authentication fails.  Does anyone
know what I'm doing incorrectly?

I've tested using cmd5checkpw in place of vchkpw in some tests and
authentication was successful against a clear password file.

Here is my invokation of qmail-smtpd:

  exec env - PATH="/usr/local/bin:/usr/local/sbin:$PATH" \
  tcpserver -v -R -c 120 -x /var/vpopmail/etc/tcp.smtp.cdb -u 89 -g 89 0 \
  smtp /usr/local/bin/rblsmtpd -r sbl.spamhaus.org \
  /var/qmail/bin/qmail-smtpd **server-hostname** \
  /var/vpopmail/bin/vchkpw /usr/bin/true 2>&1

Thanks for any help anyone has!

--
Jared

Reply via email to