OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
client smtp auth using SASL

alexkwanicare.com.hk
Date: Sun Apr 13 2003 - 09:01:11 CDT


Hi,

I found out that I cannot do the SASL smtp auth to the SMTP of my ISP. My
ISP is using M$ exchange server.

I do a testing by telnet smtp.icare.com.hk 25 (my isp's smtp server) (List
1). Note that there are 2 "AUTH" and the "250-smtpi01.icare.priv Hello" is
not the server name i am telneting to. I do further test and able to send a
email through the telnet session.

List 2 is my maillog. You can see the warnings "offered AUTH option
multiple times". Moreover, the SASL framework seems able to 'detect'
"LOGIN" mechanism, and sustainly warned "SASL authentication failure: No
worthy mechs found". Finally, no auth is done and give me error "cannot
SASL authenticate to server smtp.icare.com.hk[203.78.64.145]: no
mechanism available)"

List 3 is the postconf -n

Thanks and Regards,
Alex Kwan

List 1
======
ehlo
250-smtpi01.icare.priv Hello [203.78.94.127]
250-TURN
250-ATRN
250-SIZE
250-ETRN
250-PIPELINING
250-DSN
250-ENHANCEDSTATUSCODES
250-8bitmime
250-BINARYMIME
250-CHUNKING
250-VRFY
250-X-EXPS GSSAPI NTLM LOGIN
250-X-EXPS=LOGIN
250-AUTH GSSAPI NTLM LOGIN
250-AUTH=LOGIN
250-X-LINK2STATE
250-XEXCH50
250 OK

List 2
======
Apr 13 22:31:16 avatar postfix/postfix-script: starting the Postfix mail
system
Apr 13 22:31:16 avatar postfix/master[16383]: daemon started -- version
2.0.7
Apr 13 22:31:20 avatar postfix/pickup[16384]: D6DA81B9D1: uid=1000
from=<alex>
Apr 13 22:31:20 avatar postfix/cleanup[16390]: D6DA81B9D1:
message-id=<20030413143120.D6DA81B9D1avatar.hongkong.dnsalias.c
om>
Apr 13 22:31:20 avatar postfix/qmgr[16385]: D6DA81B9D1:
from=<alexhongkong.dnsalias.com>, size=331, nrcpt=1 (queue active)
Apr 13 22:31:21 avatar postfix/smtp[16392]: <
smtp.icare.com.hk[203.78.64.145]: 220 smtpi02.icare.priv Microsoft ESMTP
MAIL
 Service, Version: 5.0.2195.4905 ready at Sun, 13 Apr 2003 21:45:47 +0800
Apr 13 22:31:21 avatar postfix/smtp[16392]: >
smtp.icare.com.hk[203.78.64.145]: EHLO avatar.hongkong.dnsalias.com
Apr 13 22:31:21 avatar postfix/smtp[16392]: vstream_fflush_some: fd 13
flush 35
Apr 13 22:31:21 avatar postfix/smtp[16392]: vstream_buf_get_ready: fd 13
got 321
Apr 13 22:31:21 avatar postfix/smtp[16392]: <
smtp.icare.com.hk[203.78.64.145]: 250-smtpi02.icare.priv Hello
[203.78.94.127
]
Apr 13 22:31:21 avatar postfix/smtp[16392]: <
smtp.icare.com.hk[203.78.64.145]: 250-TURN
Apr 13 22:31:21 avatar postfix/smtp[16392]: <
smtp.icare.com.hk[203.78.64.145]: 250-ATRN
Apr 13 22:31:21 avatar postfix/smtp[16392]: <
smtp.icare.com.hk[203.78.64.145]: 250-SIZE
Apr 13 22:31:21 avatar postfix/smtp[16392]: <
smtp.icare.com.hk[203.78.64.145]: 250-ETRN
Apr 13 22:31:21 avatar postfix/smtp[16392]: <
smtp.icare.com.hk[203.78.64.145]: 250-PIPELINING
Apr 13 22:31:21 avatar postfix/smtp[16392]: <
smtp.icare.com.hk[203.78.64.145]: 250-DSN
Apr 13 22:31:21 avatar postfix/smtp[16392]: <
smtp.icare.com.hk[203.78.64.145]: 250-ENHANCEDSTATUSCODES
Apr 13 22:31:21 avatar postfix/smtp[16392]: <
smtp.icare.com.hk[203.78.64.145]: 250-8bitmime
Apr 13 22:31:21 avatar postfix/smtp[16392]: <
smtp.icare.com.hk[203.78.64.145]: 250-BINARYMIME
Apr 13 22:31:21 avatar postfix/smtp[16392]: <
smtp.icare.com.hk[203.78.64.145]: 250-CHUNKING
Apr 13 22:31:21 avatar postfix/smtp[16392]: <
smtp.icare.com.hk[203.78.64.145]: 250-VRFY
Apr 13 22:31:21 avatar postfix/smtp[16392]: <
smtp.icare.com.hk[203.78.64.145]: 250-X-EXPS GSSAPI NTLM LOGIN
Apr 13 22:31:21 avatar postfix/smtp[16392]: <
smtp.icare.com.hk[203.78.64.145]: 250-X-EXPS=LOGIN
Apr 13 22:31:21 avatar postfix/smtp[16392]: <
smtp.icare.com.hk[203.78.64.145]: 250-AUTH GSSAPI NTLM LOGIN
Apr 13 22:31:21 avatar postfix/smtp[16392]: <
smtp.icare.com.hk[203.78.64.145]: 250-AUTH=LOGIN
Apr 13 22:31:21 avatar postfix/smtp[16392]: <
smtp.icare.com.hk[203.78.64.145]: 250-X-LINK2STATE
Apr 13 22:31:21 avatar postfix/smtp[16392]: <
smtp.icare.com.hk[203.78.64.145]: 250-XEXCH50
Apr 13 22:31:21 avatar postfix/smtp[16392]: <
smtp.icare.com.hk[203.78.64.145]: 250 OK
Apr 13 22:31:21 avatar postfix/smtp[16392]: warning:
smtp.icare.com.hk[203.78.64.145] offered AUTH option multiple times
Apr 13 22:31:21 avatar postfix/smtp[16392]: server features: 0x2f size 0
Apr 13 22:31:21 avatar postfix/smtp[16392]: maps_find: smtp_sasl_passwd:
hash:/etc/postfix/sasl_passwd: smtp.icare.com.hk =
 xxxx:xxxxxx
Apr 13 22:31:21 avatar postfix/smtp[16392]: smtp_sasl_passwd_lookup: host
`smtp.icare.com.hk' user `XXXXX' pass `XXXXXXX'
Apr 13 22:31:21 avatar postfix/smtp[16392]: starting new SASL client
Apr 13 22:31:21 avatar postfix/smtp[16392]: smtp_sasl_authenticate:
smtp.icare.com.hk[203.78.64.145]: SASL mechanisms LOGIN
Apr 13 22:31:21 avatar postfix/smtp[16392]: warning: SASL authentication
failure: No worthy mechs found
Apr 13 22:31:21 avatar postfix/smtp[16392]: connect to subsystem
private/defer
Apr 13 22:31:21 avatar postfix/smtp[16392]: send attr nrequest = 0
Apr 13 22:31:21 avatar postfix/smtp[16392]: send attr flags = 0
Apr 13 22:31:21 avatar postfix/smtp[16392]: send attr queue_id = D6DA81B9D1
Apr 13 22:31:21 avatar postfix/smtp[16392]: send attr original_recipient =
hkustvampireyahoo.com
Apr 13 22:31:21 avatar postfix/smtp[16392]: send attr recipient =
hkustvampireyahoo.com
Apr 13 22:31:21 avatar postfix/smtp[16392]: send attr reason =
Authentication failed: cannot SASL authenticate to server sm
tp.icare.com.hk[203.78.64.145]: no mechanism available
Apr 13 22:31:21 avatar postfix/smtp[16392]: private/defer socket: wanted
attribute: status
Apr 13 22:31:21 avatar postfix/smtp[16392]: vstream_fflush_some: fd 14
flush 237
Apr 13 22:31:21 avatar postfix/smtp[16392]: vstream_buf_get_ready: fd 14
got 10
Apr 13 22:31:21 avatar postfix/smtp[16392]: input attribute name: status
Apr 13 22:31:21 avatar postfix/smtp[16392]: input attribute value: 0
Apr 13 22:31:21 avatar postfix/smtp[16392]: private/defer socket: wanted
attribute: (list terminator)
Apr 13 22:31:21 avatar postfix/smtp[16392]: input attribute name: (end)
Apr 13 22:31:21 avatar postfix/smtp[16392]: D6DA81B9D1:
to=<hkustvampireyahoo.com>, relay=smtp.icare.com.hk[203.78.64.145]
, delay=1, status=deferred (Authentication failed: cannot SASL authenticate
to server smtp.icare.com.hk[203.78.64.145]: no
mechanism available)
Apr 13 22:31:21 avatar postfix/smtp[16392]: flush_add: site yahoo.com id
D6DA81B9D1
Apr 13 22:31:21 avatar postfix/smtp[16392]: connect to subsystem
public/flush
Apr 13 22:31:21 avatar postfix/smtp[16392]: send attr request = add
Apr 13 22:31:21 avatar postfix/smtp[16392]: send attr site = yahoo.com
Apr 13 22:31:21 avatar postfix/smtp[16392]: send attr queue_id = D6DA81B9D1
Apr 13 22:31:21 avatar postfix/smtp[16392]: public/flush socket: wanted
attribute: status
Apr 13 22:31:21 avatar postfix/smtp[16392]: vstream_fflush_some: fd 14
flush 48
Apr 13 22:31:21 avatar postfix/smtp[16392]: vstream_buf_get_ready: fd 14
got 10
Apr 13 22:31:21 avatar postfix/smtp[16392]: input attribute name: status
Apr 13 22:31:21 avatar postfix/smtp[16392]: input attribute value: 4
Apr 13 22:31:21 avatar postfix/smtp[16392]: public/flush socket: wanted
attribute: (list terminator)
Apr 13 22:31:21 avatar postfix/smtp[16392]: input attribute name: (end)
Apr 13 22:31:21 avatar postfix/smtp[16392]: flush_add: site yahoo.com id
D6DA81B9D1 status 4
Apr 13 22:31:21 avatar postfix/smtp[16392]: name_mask: resource
Apr 13 22:31:21 avatar postfix/smtp[16392]: name_mask: software

List 3
======
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/libexec/postfix
debug_peer_level = 5
debug_peer_list = smtp.icare.com.hk
inet_interfaces = all
mail_owner = postfix
mail_spool_directory = /var/spool/mail
mailq_path = /usr/bin/mailq
manpage_directory = /usr/local/man
mydestination = $myhostname, localhost.$mydomain, $mydomain
mydomain = hongkong.dnsalias.com
myhostname = avatar.hongkong.dnsalias.com
myorigin = $mydomain
newaliases_path = /usr/bin/newaliases
queue_directory = /var/spool/postfix
readme_directory = /tmp/postfix
relayhost = smtp.icare.com.hk
sample_directory = /etc/postfix
sendmail_path = /usr/sbin/sendmail
setgid_group = postdrop
smtp_always_send_ehlo = yes
smtp_sasl_auth_enable = yes
smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
smtp_sasl_security_options =
unknown_local_recipient_reject_code = 450

<hr>iCare 3M unlimited broadband service at just $151/month with 4 multiple
logons.
¨C¤ë$151 §Y¥i4 ¤H¦P¨É¦W®ð¨Î3M¼eÀWµL­­¤WºôªA°È¡C
Link: http://www.icare.com.hk/broadband/index.html