Am Wed, 29 Dec 2010 10:08:24 +0100
schrieb Rob van Dam <r...@wieskamp.nl>:

> > The client is not properly encoding the credentials, what SASL
> > Mechanism is selected?
> >
> > -Dieter
> Hello Dieter,
> 
> Thanks for the reply.
> 
> The output of postconf -A is cyrus. I tried to login with Tls and in 
> auth plain (here I was able to retrieve the password).
> 
> If you need more info please let me know.

So your login is based on cyrus-sasl libraries and mechanism PLAIN, the
mechanism PLAIN requires three arguments, <authz>\0<authc>\0<passwd>,
if no authorization is requested, the authentication string has to be
set twice and the whole string has to be base64 hashed. something like
this one:
  Zm9vAGZvbwBiYXI=
just decode it, it is a proper PLAIN credentials string.
If you see a corrupted decoded string this is probably due to passing
only a fraction of the base64 string to the decoding software or the
characters are not UTF-8 based (which is a SHALL in RFC-4616). There is 
a limitation of 255 octets to each of the three arguments, but your
string is not hitting this limitation.
Please check carefully smtp_sasl_password_maps file 

-Dieter

-- 
Dieter Klünter | Systemberatung
http://dkluenter.de
GPG Key ID:DA147B05
53°37'09,95"N
10°08'02,42"E

Reply via email to