New submission from Milan Oberkirch:

I implemented message processing for LOGIN and PLAIN authentication in smtpd. I 
also patched test_smtplib to make use of this functionality.

The goal for the API is to provide decryption and message processing in the 
smtpd library and call a externally provided or overwritten function(user, 
password) to verify credentials.

The patch provided is missing documentation and a proper API to use/activate 
this feature (and API specific tests of cause). Things which need to be 
discussed:
a) how shoud AUTH be activated? (when should MAIL etc. require AUTH? when 
should 'AUTH' be announced in the EHLO response?)
b) how should the programmer change the _verify_user_credentials method?

My idea to solve a and b at once would be to set the verification function by a 
keyword argument and require/activate AUTH if this kwarg is set.

I didn't implement CRAM-MD5 because it requires the correct password to be 
available in plain text.

----------
components: email
files: smtpd_AUTH.patch
keywords: patch
messages: 222516
nosy: barry, jesstess, pitrou, r.david.murray, zvyn
priority: normal
severity: normal
status: open
title: Implement AUTH command in smtpd.
type: enhancement
versions: Python 3.5
Added file: http://bugs.python.org/file35895/smtpd_AUTH.patch

_______________________________________
Python tracker <rep...@bugs.python.org>
<http://bugs.python.org/issue21935>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Reply via email to