Package: libc-client2007
Version: 7:2007~dfsg-1
Severity: normal

certain SMTP "smarthost" servers (incl. some maintained by yahoo) give a 
non-rfc-compliant response to AUTH LOGIN (RFC2554,sec 4,"Discussion")
(the message after '235' is not valid base-64 code)
which makes them hard to send mail through.  this patch causes the garbage 
to be ignored, resulting in a successful session rather than a failed one.

I have prepared a pathc which "fixes" c-client so that interaction with
yahoo is successfull.

  ------------------ here's a diff -------------------
*** uw-imap-2007b~dfsg/src/c-client/smtp.c      2008-08-05 10:26:42.486179652 
+1200
--- old/uw-imap-2007b~dfsg/src/c-client/smtp.c  2008-01-29 11:55:14.000000000 
+1300
***************
*** 350,369 ****
    if ((stream->replycode == SMTPAUTHREADY) &&
        !(ret = rfc822_base64 ((unsigned char *) stream->reply + 4,
                             strlen (stream->reply + 4),len))) {
      sprintf (tmp,"SMTP SERVER BUG (invalid challenge): 
%.80s",stream->reply+4);
      mm_log (tmp,ERROR);
-     /* 
-      * Xtra/yahoo have a broken server 
(send.xtra.co.nz/smtp1.tnz.mail.vip.aue.yahoo.com)
-      * I have pointed them to RFC2554 but they have ignored me. 
-      * 
-      * this tranlates a garbled response to an empty one thus allowing SMTP 
to progress 
-      * where the response content is unimportant
-      */
-     ret = rfc822_base64("",0,len); 
-     if (len) *len=0 ;
-     
    }
    return ret;
  }
  ------------------ end of diff  -------------------

to see this misbehavior for yourself do

openssl s_client -connect send.xtra.co.nz:465
helo localhost 
auth plain


-- System Information:
Debian Release: lenny/sid
  APT prefers testing
  APT policy: (500, 'testing'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.24-1-686 (SMP w/2 CPU cores)
Locale: LANG=en_NZ.UTF-8, LC_CTYPE=en_NZ.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages libc-client2007 depends on:
ii  libpam-modules             0.99.7.1-6    Pluggable Authentication Modules f
ii  mlock                      7:2007~dfsg-1 Mailbox locking program from UW

libc-client2007 recommends no packages.

-- no debconf information



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to