From: Alona Rossen
Sent: July-19-12 10:26 AM
To: 'libcurl development'
Subject: curl 7.21.0 SMTP - duplication of login credentials
Hello,
We observed duplication of user name when sending emails via SMTP protocol with
curl 7.21.0.
What is interesting is that this duplication is observed when connecting to
some smtp servers and not observed when connecting to other servers. The
duplication takes place when connecting to hMail and gmail and does not take
place when connecting to <Another> server.
Notably, this duplication does not interfere with authentication on gmail.
Authentication is required on gmail and failure to provide correct
authentication credentials results in failure of SendMail action. However,
SendMail action consistently fails with hMail server.
Gmail:
INFO_HEADER_IN:
250-AUTH LOGIN PLAIN XOAUTH
INFO_HEADER_IN:
250-ENHANCEDSTATUSCODES
INFO_HEADER_IN:
250 PIPELINING
INFO_HEADER_OUT:
AUTH PLAIN YWxvbmEXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
INFO_HEADER_IN:
235 2.7.0 Accepted
INFO_HEADER_OUT:
MAIL FROM:[email protected]<mailto:[email protected]>
YWxvbmEXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX translates to
alona.rossenalona.rossenmypassword
<Another> server :
INFO_HEADER_IN:
250-AUTH NTLM LOGIN
INFO_HEADER_IN:
250-X-EXPS GSSAPI NTLM
INFO_HEADER_IN:
250-8BITMIME
INFO_HEADER_IN:
250-BINARYMIME
INFO_HEADER_IN:
250-CHUNKING
INFO_HEADER_IN:
250-XEXCH50
INFO_HEADER_IN:
250-XRDST
INFO_HEADER_IN:
250 XSHADOW
INFO_HEADER_OUT:
AUTH LOGIN XXXXXXXXXXXXXXXXXXXXXXXXX
INFO_HEADER_IN:
334 UGFzc3dvcmQ6
INFO_HEADER_OUT:
XXXXXXXXXXXXXXXXXXXXXXXX==
INFO_HEADER_IN:
235 2.7.0 Authentication successful
INFO_HEADER_OUT:
MAIL FROM:[email protected]<mailto:[email protected]>
Please notice that in this case USR and PWD are submitted separately,
unduplicated.
hMail:
INFO_HEADER_IN:
250-arossen0011
INFO_HEADER_IN:
250-SIZE 20480000
INFO_HEADER_IN:
250 AUTH LOGIN PLAIN
INFO_HEADER_OUT:
AUTH PLAIN YWxvbmEAYWxvbmEAYWxvbmFobWFpbA==
INFO_HEADER_IN:
535 Authentication failed. Restarting authentication process.
INFO_TEXT:
Authentication failed: 535
INFO_TEXT:
Expire cleared
INFO_HEADER_OUT:
QUIT
PLAIN YWxvbmEAYWxvbmEAYWxvbmFobWFpbA== translates to alonaalonaalonahmail (my
credentials are alona/alonahmail). This format is identical to gmail.
The duplication disappeared when I submitted hMail url in the form of
"smtp://usr:pwd@server:port/hostname", instead of "smtp://
server:port/hostname" and submitting login credentials separately. However,
even without the duplication authentication fails on hMail server:
INFO_HEADER_IN:
250-arossen0011
INFO_HEADER_IN:
250-SIZE 20480000
INFO_HEADER_IN:
250 AUTH LOGIN
INFO_HEADER_OUT:
AUTH LOGIN YWxvbmE=
INFO_HEADER_IN:
334 UGFzc3dvcmQ6
INFO_HEADER_OUT:
YWxvbmFobWFpbA==
INFO_HEADER_IN:
535 Authentication failed. Restarting authentication process.
"YWxvbmE=" decodes to "alona"
"YWxvbmFobWFpbA==" decodes to "alonahmail"
Regards,
Alona
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
