Hello, 

this is a "I have a problem with a client" report. This is *not* to say
"hey, OpenSMTPd is doing something wrong!".

The client uses Microsofts .net System.Net.Mail class. 

OpenSMTPd ignores the "initial-response" in the AUTH LOGIN command. 
(Which is often used to save one round trip by supplying the username.)

client: AUTH LOGIN username            # username in base64
OpenSMTPd:  Username:                  # in base64
OtherSMTPd: Password:                  # in base64

The lazy client then chooses to (incorrectly?) ignore the Username:
challenge (and passes the Password!). 

I do not know (and I tried to find out via RFCs 4422+4954 plus www
searching) what is the right behaviour. But since initial-response is
optional I doubt one should rely on it. 

Opinions?
(Or has this been discussed and I missed it?)

There's this web page describing the problem:
https://blogs.msdn.microsoft.com/akashb/2009/09/16/system-net-mail-unable-to-authenticate-against-some-third-party-smtp-servers/

Marcus

-- 
You received this mail because you are subscribed to [email protected]
To unsubscribe, send a mail to: [email protected]

Reply via email to