OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Marc G. Fournier (scrappyhub.org)
Date: Mon Mar 04 2002 - 18:52:21 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Okay, so if Im' reading this right, the '334 VXNlcm5hbWU6' looks like the
    Username prompt, and the '334 UGFzc3dvcmQ6' is the password, with the 'tx'
    lines following each being the test/testpass ...

    Looking at the session on the server end for Eudora, I'm seeing:

    [2658]: smtpd_sasl_authenticate: sasl_method LOGIN
    [2658]: smtpd_sasl_authenticate: uncoded challenge: Username:
    [2658]: > hlfx55-2a-239.ns.sympatico.ca[142.177.105.239]: 334 VXNlcm5hbWU6
    [2658]: < hlfx55-2a-239.ns.sympatico.ca[142.177.105.239]: *

    I'm passing back a '*' which is causing the failure ... but why?

    [2658]: warning: hlfx55-2a-239.ns.sympatico.ca[142.177.105.239]: SASL LOGIN authentication failed
    [2658]: > hlfx55-2a-239.ns.sympatico.ca[142.177.105.239]: 501 Authentication aborted
    [2658]: watchdog_pat: 0x8071bc8
    [2658]: < hlfx55-2a-239.ns.sympatico.ca[142.177.105.239]: dGVzdHBhc3M=
    [2658]: > hlfx55-2a-239.ns.sympatico.ca[142.177.105.239]: 502 Error: command not implemented
    [2658]: watchdog_pat: 0x8071bc8
    [2658]: < hlfx55-2a-239.ns.sympatico.ca[142.177.105.239]: RSET
    [2658]: > hlfx55-2a-239.ns.sympatico.ca[142.177.105.239]: 250 Ok
    [2658]: watchdog_pat: 0x8071bc8

    On Mon, 4 Mar 2002, Jason Hoos wrote:

    > Here's what I got; looks like it sort of worked. It authenticated but
    > relaying was still denied...
    >
    > Outlook Express 5.50.4807.1700
    > SMTP Log started at 03/04/2002 17:03:40
    > SMTP: 17:03:43 [rx] 220 sales.org ESMTP Postfix
    > SMTP: 17:03:43 [tx] EHLO jhooslt
    > SMTP: 17:03:43 [rx] 250-sales.org
    > SMTP: 17:03:43 [rx] 250-PIPELINING
    > SMTP: 17:03:43 [rx] 250-SIZE 10240000
    > SMTP: 17:03:43 [rx] 250-VRFY
    > SMTP: 17:03:43 [rx] 250-ETRN
    > SMTP: 17:03:43 [rx] 250-AUTH LOGIN
    > SMTP: 17:03:43 [rx] 250-AUTH=LOGIN
    > SMTP: 17:03:43 [rx] 250-XVERP
    > SMTP: 17:03:43 [rx] 250 8BITMIME
    > SMTP: 17:03:43 [tx] AUTH LOGIN
    > SMTP: 17:03:43 [rx] 334 VXNlcm5hbWU6
    > SMTP: 17:03:43 [tx] dGVzdA==
    > SMTP: 17:03:43 [rx] 334 UGFzc3dvcmQ6
    > SMTP: 17:03:43 [tx] dGVzdHBhc3M=
    > SMTP: 17:03:43 [rx] 235 Authentication successful
    > SMTP: 17:03:43 [tx] MAIL FROM: <testsales.org>
    > SMTP: 17:03:43 [rx] 250 Ok
    > SMTP: 17:03:43 [tx] RCPT TO: <scrappyhub.org>
    > SMTP: 17:03:48 [rx] 554 <scrappyhub.org>: Recipient address rejected: Relay
    > access denied
    > SMTP: 17:03:48 [tx] QUIT
    > SMTP: 17:03:48 [rx] 221 Bye
    >
    > Jason
    >
    > ----- Original Message -----
    > From: "Marc G. Fournier" <scrappyhub.org>
    > To: "Jason Hoos" <jhoosthwack.net>
    > Cc: "Alexander Skwar" <ASkwarDigitalProjects.com>
    > Sent: Monday, March 04, 2002 4:20 PM
    > Subject: Re: SMTP AUTH (was: Re: Allowing relay for certain sender domains)
    >
    >
    > >
    > >
    > > Hi Jason ...
    > >
    > > For testing, could you connect to mail.sales.org and send an email
    > > with a userid of test, passwd of testpass, and see if your Outlook will
    > > work? I just disabled everything except for LOGIN, and Eudora still fails
    > > ...
    > >
    > >
    > > On Mon, 4 Mar 2002, Jason Hoos wrote:
    > >
    > > > Out of curiousity - do you have SASL compiled with support for the LOGIN
    > > > method (I think you need '--with-login' on the configure line when you
    > build
    > > > it)? If so, have you tried authenticating against SMTP using Outlook
    > > > Express 5.0 or better?
    > > >
    > > > Just wondering... that's what I've been using and it works as long as
    > you
    > > > have support for that method built in. I don't have Eudora here to play
    > > > with.
    > > >
    > > > Also, if you want I could create a test account on my machine for you to
    > try
    > > > Eudora against, just to try to narrow down whether Cyrus SASL or Eudora
    > is
    > > > the culprit...
    > > >
    > > > Jason
    > > >
    > > >
    > > > ----- Original Message -----
    > > > From: "Alexander Skwar" <ASkwarDigitalProjects.com>
    > > > To: "Jason Hoos" <jhoosthwack.net>
    > > > Cc: "Marc G. Fournier" <scrappyhub.org>; <postfix-userspostfix.org>
    > > > Sent: Sunday, March 03, 2002 3:19 AM
    > > > Subject: Re: SMTP AUTH (was: Re: Allowing relay for certain sender
    > domains)
    > > >
    > > >
    > > > »Jason Hoos« sagte am 2002-03-02 um 19:30:52 -0600 :
    > > > > Yes, sorry I forgot that little detail. You need an /etc/pam.d/smtp
    > file
    > > > > with the usual stuff in it.
    > > >
    > > > Like this one?
    > > >
    > > > [rootdevel conf]# cat /etc/pam.d/smtp
    > > > #%PAM-1.0
    > > > auth required /lib/security/pam_stack.so service=system-auth
    > > > account required /lib/security/pam_stack.so service=system-auth
    > > >
    > > > Alexander Skwar
    > > > --
    > > > How to quote: http://learn.to/quote (german) http://quote.6x.to
    > (english)
    > > > Homepage: http://www.iso-top.de | Jabber: askwarcharente.de
    > > > iso-top.de - Die günstige Art an Linux Distributionen zu kommen
    > > > Uptime: 1 day 0 hours 30 minutes
    > > >
    > > >
    > > >
    > > >
    > >
    > >
    > >
    >
    >
    >

    -
    To unsubscribe, send mail to majordomopostfix.org with content
    (not subject): unsubscribe postfix-users