Hi

I have two questions, the more important first:

I use MySQL for authentification of esmtp connections.
On both sides is LOGIN the mechanism, (not CRAM-MD5, not PLAIN)

If the password is correct the mail passes through very quickly.
If the password is not correct it takes 8 seconds and then the mails
passes through, too.
Why isn't the mail rejected?

Protocol of my mail user agent:

>>> Connecting to "lynx.16" <<<
220 lynx.16 ESMTP
EHLO [192.168.32.2]
250-lynx.16 Ok.
250-AUTH LOGIN CRAM-MD5
250-AUTH=LOGIN CRAM-MD5 X-NETSCAPE-HAS-BUGS
250-XVERP=Courier
250-XEXDATA
250-XSECURITY=NONE,STARTTLS
250-PIPELINING
250-8BITMIME
250-SIZE
250 DSN
AUTH LOGIN
334 VXNlcm5hbWU6
535 Authentication failed.
RSET
250 Ok
MAIL FROM:<[EMAIL PROTECTED]>
250 Ok.
RCPT TO:<[EMAIL PROTECTED]>
250 Ok.
DATA
354 Ok.
.
250 Ok. 40294E9A.000005BE
QUIT
221 Bye.


mail.log of courier

Feb 10 22:35:14 localhost courieresmtpd: 
started,ip=[::ffff:192.168.32.2]

Feb 10 22:35:14 localhost courieresmtpd: 
error,relay=::ffff:192.168.32.2,msg="535 Authentication failed.",cmd: 
AUTH LOGIN

Feb 10 22:35:22 localhost courierd: 
newmsg,id=0005821D.40294E9A.000005BE: dns; [192.168.32.2] (irbis.16 
[::ffff:192.168.32.2])

Feb 10 22:35:22 localhost courierd: 
started,id=0005821D.40294E9A.000005BE,from=<[EMAIL PROTECTED]>,module=local,h
[EMAIL PROTECTED]/tmp/test!!,addr=<test>

Feb 10 22:35:22 localhost courierd: Waiting.  shutdown time=none, wakeup 
time=none, queuedelivering=1, inprogress=1

Feb 10 22:35:22 localhost courierlocal: 
id=0005821D.40294E9A.000005BE,from=<[EMAIL PROTECTED]>,addr=<[EMAIL PROTECTED]>,si
ze=400,success: Message delivered.

Feb 10 22:35:22 localhost courierd: 
completed,id=0005821D.40294E9A.000005BE

Feb 10 22:35:22 localhost courierd: Waiting.  shutdown time=Tue Feb 10 
23:25:48 2004, wakeup time=Tue Feb 10 23:25:48 2004, queuedelivering=0, 
inprogress=0



-------------------
2nd question

Is there a way to authenticate esmtp- users via a mysql database AND
CRAM-MD5?
From what I've seen CRAM-MD5 is handled by a separate module and the
CRAM-MD5 module then uses not the mysql database.

If there is a way to use the mysql database, how ist it done?

I'm thinking of something like:
a) create CRAM-MD5 encrypted passwords in the
crypt field of the mysql table and
b) use authdaemon to authenticate incoming CRAM-MD5 requests from MUAs
against that mysql database.



Thank you and greetings from Berlin
Peter



-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
courier-users mailing list
[EMAIL PROTECTED]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

Reply via email to