-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
The Tuesday 2007-04-17 at 17:27 +0200, Sandy Drobic wrote:
> >
> > Per G.T.Smith sugestion, I tried:
> >
> > smtp_sasl_security_options = cram-md5
> > smtp_sasl_tls_security_options = $smtp_sasl_security_options
>
> No, you should only set
> smtp_sasl_security_option = noanonymous
Eum... :-? No, I don't think I need going that far - I just read that one
up :-)
>
> If possible, you could add "noplaintext"
> This would demand, that only digest-md5 or cram-md5 will be used.
>
> In the meantime, I had a closer look at the conversation. digest-md5 is
> not a keyword in the capabilities, so we can't use it to discard that option.
>
> Please try:
> smtp_sasl_mechanism_filter = cram-md5, login
Ok, I tried that one and it worked! Which proves what I said that
login/password was correctly entered but not accepted. Either there is
something wrong in the postfix implementation of digest-md5, or my ISP, or
between both. Or something in my configuration impedes it.
Meanwhile, it works. :-))
:38:24 : < smtp.telefonica.net[213.4.149.66]: 220 ctsmtpout4.frontal.correo
ESMTP Service (7.2.056.6) ready
:38:24 : > smtp.telefonica.net[213.4.149.66]: EHLO nimrodel.valinor
:38:24 : < smtp.telefonica.net[213.4.149.66]: 250-ctsmtpout4.frontal.correo
:38:24 : < smtp.telefonica.net[213.4.149.66]: 250-DSN
:38:24 : < smtp.telefonica.net[213.4.149.66]: 250-8BITMIME
:38:24 : < smtp.telefonica.net[213.4.149.66]: 250-PIPELINING
:38:24 : < smtp.telefonica.net[213.4.149.66]: 250-HELP
:38:24 : < smtp.telefonica.net[213.4.149.66]: 250-AUTH=LOGIN
:38:24 : < smtp.telefonica.net[213.4.149.66]: 250-AUTH LOGIN CRAM-MD5 DIGEST-MD5
:38:24 : < smtp.telefonica.net[213.4.149.66]: 250-X-CP-DELIVER-AFTER
:38:24 : < smtp.telefonica.net[213.4.149.66]: 250-DELIVERBY 300
:38:24 : < smtp.telefonica.net[213.4.149.66]: 250 SIZE 52428800
:38:24 : maps_find: smtpd_discard_ehlo_keyword_address_maps:
hash:/etc/postfix/ehlo_discard_words(0,lock): 213.4.149.66 = DIGEST-MD5
:38:24 : match_string: LOGIN ~? cram-md5
:38:24 : match_string: LOGIN ~? login
:38:24 : match_string: LOGIN ~? cram-md5
:38:24 : match_string: LOGIN ~? login
:38:24 : match_string: CRAM-MD5 ~? cram-md5
:38:24 : match_string: DIGEST-MD5 ~? cram-md5
:38:24 : match_string: DIGEST-MD5 ~? login
:38:24 : match_list_match: DIGEST-MD5: no match
:38:24 : server features: 0x902f size 52428800
:38:24 : Using ESMTP PIPELINING, TCP send buffer size is 4096
:38:24 : maps_find: smtp_sasl_passwd:
hash:/etc/postfix/sasl_passwd(0,lock|fold_fix): smtp.telefonica.net =
MyLogin:MyPasswd
:38:24 : smtp_sasl_passwd_lookup: host `smtp.telefonica.net' user `MyLogin'
pass `MyPasswd'
:38:24 : starting new SASL client
:38:24 : starting new SASL client
:38:24 : smtp_sasl_authenticate: smtp.telefonica.net[213.4.149.66]: SASL
mechanisms LOGIN LOGIN CRAM-MD5
:38:24 : > smtp.telefonica.net[213.4.149.66]: AUTH LOGIN
:38:24 : < smtp.telefonica.net[213.4.149.66]: 334 VXNlcm5hbWU6
:38:24 : xsasl_cyrus_client_next: decoded challenge: Username:
:38:24 : xsasl_cyrus_get_user: MyLogin
:38:24 : xsasl_cyrus_get_passwd: MyPasswd
:38:24 : xsasl_cyrus_client_next: uncoded client response MyLogin
:38:24 : > smtp.telefonica.net[213.4.149.66]: Y2Vyb2Jpbi5qb2Jz
:38:24 : < smtp.telefonica.net[213.4.149.66]: 334 UGFzc3dvcmQ6
:38:24 : xsasl_cyrus_client_next: decoded challenge: Password:
:38:24 : xsasl_cyrus_client_next: uncoded client response MyPasswd
:38:24 : > smtp.telefonica.net[213.4.149.66]: ZW04YmEzbGE=
:38:25 : < smtp.telefonica.net[213.4.149.66]: 235 LOGIN authentication
successful
...
:38:25 : < smtp.telefonica.net[213.4.149.66]: 250 <4623E95A000392AF> Mail
accepted
> > now I get:
> >
> > postfix/smtp[12774]: starting new SASL client
> > postfix/smtp[12774]: warning: unknown SASL security options value
> > "cram-md5" in "cram-md5"
>
> Yepp, that isn't an allowed option.
It was a wild try, anyway.
- --
Cheers,
Carlos E. R.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Made with pgp4pine 1.76
iD8DBQFGJQ0ItTMYHG2NR9URArW/AJ4yjsB24JFJTVcYLiQxl3N0B2YuDwCgiIEX
d6n6vnf98tdi93FPiUx/y2M=
=svGU
-----END PGP SIGNATURE-----
--
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
