On 2008-01-14 at 20:23 -0500, Daniel Aquino wrote:
> How come when I turn off the advertising, does authentication always pass.

It doesn't.

> Even though the AUTH command doesn't work cause its not advertised???
> 
> Here is my output of smtptest without advertising:

smtptest is a program which ships with Cyrus IMAP and which speaks imap,
pop3, nttp, lmtp, smtp, mupdate, sieve or csync depending upon how it
was invoked.  Somehow, I find myself lacking confidence that it is
always the most solid indicator of protocol compliance.

Indeed, reading the code xmtp_do_auth() returns IMTEST_OK unless there's
a mechanism or mechanism list to authenticate with.  "If the server
doesn't ask for authentication, we're anonymous and have passed
authentication".

Try Tony Finch's "smtpc" from:
  http://www-uxsup.csx.cam.ac.uk/~fanf2/hermes/src/smtpc/
or John Jetmore's "swaks" from:
  http://jetmore.org/john/code/#swaks

> S: 220 mockingbird.bayshorenetworks.com ESMTP Exim 4.68 Mon, 14 Jan
> 2008 19:36:18 -0500
> C: EHLO example.com
> S: 250-mockingbird.bayshorenetworks.com Hello localhost [127.0.0.1]
> S: 250-SIZE 52428800
> S: 250-PIPELINING
> S: 250-STARTTLS
> S: 250 HELP
> Authenticated.

Clearly, either there was no authentication or the diagnostic tool you
chose suddently decided to stop showing what was going on for the
duration of the authentication.

> Is that just a smtptest oddity ?

"Oddity", that word covers so many meanings.  Yes, I believe that you
are seeing an smtptest oddity.

-Phil

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Reply via email to