Hi Gokhan,

> Based on my analysis on a reported issue, it is looking that curl does not
> handle AUTH LOGIN as cleverly as it could.

That's correct... Libcurl always sends the initial response in the AUTH command 
when in fact this is optional.

> I searched a bit but could not find an RFC corresponding to "AUTH LOGIN"
> method although there are RFCs for AUTH PLAIN, AUTH CRAM-MD5 and
> AUTH DIGEST-MD5.

I think it is mentioned in RFC-2554 but it is also described here for AUTH NTLM 
as well:

http://curl.haxx.se/rfc/ntlm.html#ntlmSmtpAuthentication

As a side note, this page states "However, this did not appear to work properly 
when tested against Exchange.", I can verify that the AUTH NTLM command may be 
sent with or without the initial response in Exchange Server 2010.

Daniel: Are you able to update this page to reflect the change in later 
versions of Exchange? I appreciate that the page is currently a mirror of 
what's on: http://davenport.sourceforge.net

> So, how do you see this picture? My experience with the "another SMTP client"
> (above) seemed a better approach to me if there is no RFC describing what is
> good for all of us.

I implemented a fix for this as part of the AUTH NTLM work I did last summer, 
unfortunately, that part never made it into the SMTP module as a new CURLOPT 
couldn't be warranted at the time.

I am open to suggestions of ways to implement a "Send AUTH command with initial 
response" flag and then I can implement the fix - as it is a really simple one 
or two line change ;-)

Kind Regards

Steve



-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette:  http://curl.haxx.se/mail/etiquette.html

Reply via email to