Re: Relaying denied. Trying to do TLS+SMTP AUTH. Do I really need SASL?

2007-07-01 Thread Fredrik Staxeng
Lyndon Nerenberg [EMAIL PROTECTED] writes: Well, that is exactly what I want to do. I use the system passwords for imap anyway, so why not? Of course, the channel must be protected by SSL/TLS when you do that. Because there are a large number of IMAP clients that are not aware of

Relaying denied. Trying to do TLS+SMTP AUTH. Do I really need SASL?

2007-06-30 Thread Fredrik Staxeng
I have a server that runs OpenBSD 4.1, and a laptop running Windows. I want to use Thunderbird on the laptop to send mail via the server. The laptop connects from many different networks. I would like to use port 587, since some isps blocks port 25. I want to use my username/password to

Re: Relaying denied. Trying to do TLS+SMTP AUTH. Do I really need SASL?

2007-06-30 Thread Stuart Henderson
On 2007/06/30 12:46, Fredrik Staxeng wrote: Googling gives a lot of references to SASL. Do I really have to go down that road to do something as simple as this? for smtp auth, yes. but for a simple use like this, why not just ssh-tunnel instead?

Re: Relaying denied. Trying to do TLS+SMTP AUTH. Do I really need SASL?

2007-06-30 Thread Fredrik Staxeng
Stuart Henderson [EMAIL PROTECTED] writes: On 2007/06/30 12:46, Fredrik Staxeng wrote: Googling gives a lot of references to SASL. Do I really have to go down that road to do something as simple as this? for smtp auth, yes. OK. but for a simple use like this, why not just ssh-tunnel

Re: Relaying denied. Trying to do TLS+SMTP AUTH. Do I really need SASL?

2007-06-30 Thread Claus Assmann
On Sat, Jun 30, 2007, Fredrik Staxeng wrote: I get the dreaded 'Relaying denied. Proper authentication needed.' You don't need AUTH, STARTTLS is sufficient. See cf/README: Relaying SMTP STARTTLS can allow relaying for remote SMTP clients which have successfully authenticated

Re: Relaying denied. Trying to do TLS+SMTP AUTH. Do I really need SASL?

2007-06-30 Thread Fredrik Staxeng
Claus Assmann [EMAIL PROTECTED] writes: On Sat, Jun 30, 2007, Fredrik Staxeng wrote: I get the dreaded 'Relaying denied. Proper authentication needed.' You don't need AUTH, STARTTLS is sufficient. See cf/README: Relaying SMTP STARTTLS can allow relaying for remote SMTP clients which

Re: Relaying denied. Trying to do TLS+SMTP AUTH. Do I really need SASL?

2007-06-30 Thread Claus Assmann
On Sat, Jun 30, 2007, Fredrik Staxeng wrote: Claus Assmann [EMAIL PROTECTED] writes: I get the dreaded 'Relaying denied. Proper authentication needed.' You don't need AUTH, STARTTLS is sufficient. See cf/README: Then I would need client certificates, wouldn't I? Yes. As you have a cert

Re: Relaying denied. Trying to do TLS+SMTP AUTH. Do I really need SASL?

2007-06-30 Thread Fredrik Staxeng
Claus Assmann [EMAIL PROTECTED] writes: On Sat, Jun 30, 2007, Fredrik Staxeng wrote: Claus Assmann [EMAIL PROTECTED] writes: I get the dreaded 'Relaying denied. Proper authentication needed.' You don't need AUTH, STARTTLS is sufficient. See cf/README: Then I would need client

Re: Relaying denied. Trying to do TLS+SMTP AUTH. Do I really need SASL?

2007-06-30 Thread Claus Assmann
On Sat, Jun 30, 2007, Fredrik Staxeng wrote: I have a self-signed server cert that I created using commands that I barely understand. I have no idea where to start. By reading the fine instructions :-) man starttls sendmail operations guide: doc/op/op.* I guess I need a CA key, and CA cert.

Re: Relaying denied. Trying to do TLS+SMTP AUTH. Do I really need SASL?

2007-06-30 Thread Fredrik Staxeng
Claus Assmann [EMAIL PROTECTED] writes: On Sat, Jun 30, 2007, Fredrik Staxeng wrote: I have a self-signed server cert that I created using commands that I barely understand. I have no idea where to start. By reading the fine instructions :-) man starttls I have read that, done that. Nothing

Re: Relaying denied. Trying to do TLS+SMTP AUTH. Do I really need SASL?

2007-06-30 Thread Claus Assmann
On Sat, Jun 30, 2007, Fredrik Staxeng wrote: man starttls I have read that, done that. Nothing about client certs there. sendmail doesn't care as long as it is a cert. Anyway, you are the maintainer of the free version of sendmail? Yes. Would you consider putting in LOGIN/PLAIN

Re: Relaying denied. Trying to do TLS+SMTP AUTH. Do I really need SASL?

2007-06-30 Thread Lyndon Nerenberg
If someone sends a good patch: yes (see the website for the correct address where to sent patches). Note that this isn't as simple as it might seem: the problem is where you store the passwords for PLAIN. You certainly don't want to reuse the existing system passwords. Put the authentication

Re: Relaying denied. Trying to do TLS+SMTP AUTH. Do I really need SASL?

2007-06-30 Thread Fredrik Staxeng
Claus Assmann [EMAIL PROTECTED] writes: On Sat, Jun 30, 2007, Fredrik Staxeng wrote: man starttls I have read that, done that. Nothing about client certs there. sendmail doesn't care as long as it is a cert. Surely it has to be signed with some key trusted by the particular sendmail

Re: Relaying denied. Trying to do TLS+SMTP AUTH. Do I really need SASL?

2007-06-30 Thread Lyndon Nerenberg
Well, that is exactly what I want to do. I use the system passwords for imap anyway, so why not? Of course, the channel must be protected by SSL/TLS when you do that. Because there are a large number of IMAP clients that are not aware of LOGINDISABLED, and which will blindly attempt LOGIN or

Re: Relaying denied. Trying to do TLS+SMTP AUTH. Do I really need SASL?

2007-06-30 Thread a666
From: Fredrik Staxeng [EMAIL PROTECTED] I have a server that runs OpenBSD 4.1, and a laptop running Windows. I want to use Thunderbird on the laptop to send mail via the server. The laptop connects from many different networks. I would like to use port 587, since some isps blocks port 25. I want