Re: [vchkpw] SMTP-AUTH works POP3 not SMTPd?

2005-06-17 Thread ISP Lists
> On Jun 17, 2005, at 11:21 AM, ISP Lists wrote:
>> Built as netqmail-1.05, patched SMTP-AUTH from vpopmail contrib, then
>> manually added Tonix' chkuser 2.0
>>
>> Everything is VERY happy now.
>
> Did you remember to remove $LOCAL from your qmail-smtpd/run file?  If
> not, you can now auth with any username/password.
>
> --
> Tom Collins  -  [EMAIL PROTECTED]
> QmailAdmin: http://qmailadmin.sf.net/  Vpopmail: http://vpopmail.sf.net/
> You don't need a laptop to troubleshoot high-speed Internet:
> sniffter.com
>
>
Yes, I did and I tried using nonsense/invalid combos to ensure that I
wasn't "AUTH'ing" the world.  Appreciate your concern!  Thanks again!



Re: [vchkpw] SMTP-AUTH works POP3 not SMTPd?

2005-06-17 Thread Tom Collins

On Jun 17, 2005, at 11:21 AM, ISP Lists wrote:

Built as netqmail-1.05, patched SMTP-AUTH from vpopmail contrib, then
manually added Tonix' chkuser 2.0

Everything is VERY happy now.


Did you remember to remove $LOCAL from your qmail-smtpd/run file?  If 
not, you can now auth with any username/password.


--
Tom Collins  -  [EMAIL PROTECTED]
QmailAdmin: http://qmailadmin.sf.net/  Vpopmail: http://vpopmail.sf.net/
You don't need a laptop to troubleshoot high-speed Internet: 
sniffter.com




Re: [vchkpw] SMTP-AUTH works POP3 not SMTPd?

2005-06-17 Thread ISP Lists
>>
>> You've got an old SMTP AUTH patch that sends the MD5 challenge and
>> response in the wrong order.
>>
>> Use the patch from the contrib directory of vpopmail, and then remove
>> the $LOCAL from your run file, as the newer SMTP AUTH patch does not
>> use it.
>>
>> --
>> Tom Collins  -  [EMAIL PROTECTED]
>> QmailAdmin: http://qmailadmin.sf.net/  Vpopmail: http://vpopmail.sf.net/
>> You don't need a laptop to troubleshoot high-speed Internet:
>> sniffter.com
>>
>>
>
> Tom, thanks.  I didn't realize there had been a "change" in patches that
> did this...  Wilco.
>
>
Follow-up

Built as netqmail-1.05, patched SMTP-AUTH from vpopmail contrib, then
manually added Tonix' chkuser 2.0

Everything is VERY happy now.

Thanks for the help!
Dave.






Re: [vchkpw] SMTP-AUTH works POP3 not SMTPd?

2005-06-17 Thread ISP Lists
>
> You've got an old SMTP AUTH patch that sends the MD5 challenge and
> response in the wrong order.
>
> Use the patch from the contrib directory of vpopmail, and then remove
> the $LOCAL from your run file, as the newer SMTP AUTH patch does not
> use it.
>
> --
> Tom Collins  -  [EMAIL PROTECTED]
> QmailAdmin: http://qmailadmin.sf.net/  Vpopmail: http://vpopmail.sf.net/
> You don't need a laptop to troubleshoot high-speed Internet:
> sniffter.com
>
>

Tom, thanks.  I didn't realize there had been a "change" in patches that
did this...  Wilco.



Re: [vchkpw] SMTP-AUTH works POP3 not SMTPd?

2005-06-17 Thread Tom Collins

On Jun 17, 2005, at 9:43 AM, ISP Lists wrote:

/usr/local/bin/tcpserver \
  -H -l [[[my.host.name]]] \
-v -x /etc/tcp.smtp.cdb \
  -c 30 -R -u "$VPOPMAILUID" -g "$VPOPMAILGID" 0 smtp \
  /usr/local/bin/rblsmtpd -b -C \
 -r 'sbl-xbl.spamhaus.org:Your message was rejected ' \
  /var/qmail/bin/qmail-smtpd $LOCAL /home/vpopmail/bin/vchkpw \
  /usr/bin/true 2>&1


mysql's vpopmail database table vlog contains:
| id | user  | passwd   | domain| logon
   | remoteip | message
 | timestamp  | error |
++---+--+--- 
+-+-- 
+-- 
---++---+

|  1 | daver | <[EMAIL PROTECTED] | example.net |
[EMAIL PROTECTED] | MYIP | vchkpw-25: password fail (pass:
'<[EMAIL PROTECTED]>') [EMAIL PROTECTED]:MYIP | 1119024854  
|


You've got an old SMTP AUTH patch that sends the MD5 challenge and  
response in the wrong order.


Use the patch from the contrib directory of vpopmail, and then remove  
the $LOCAL from your run file, as the newer SMTP AUTH patch does not  
use it.


--
Tom Collins  -  [EMAIL PROTECTED]
QmailAdmin: http://qmailadmin.sf.net/  Vpopmail: http://vpopmail.sf.net/
You don't need a laptop to troubleshoot high-speed Internet:  
sniffter.com




Re: [vchkpw] SMTP-AUTH works POP3 not SMTPd?

2005-06-17 Thread Rick Macdougall

ISP Lists wrote:


sys: Fedora core3, manually compiled vpopmail 3.4.10, RPM Mysql 3.23.59?,
compiled courier imap 4.0.2, compiled qmail-1.03, patched
qmail-ej-cocktail-14.tar.gz, manually patched Tonix' chkuser 2.0.

I have installed vpopmail with roaming/SMTP-AUTH before, again using
Michael Bowe's webmail guide.  SMTP-AUTH is failing authentication and I
cannot tell why.

I had created the qmail install with Tonix' chkuser patch and saved that
qmail-smtpd binary.  Substituting between the original and the Tonix
patched qmail-smtpd binaries does not seem to change the behavior.

compiled vpopmail as:

./configure \
 --enable-roaming-users \
 --enable-logging=p \
 --disable-passwd \
 --enable-clear-passwd \
 --disable-domain-quotas \
 --enable-auth-module=mysql \
 --disable-many-domains \
 --enable-auth-logging \
 --enable-sql-logging \
 --enable-valias \
 --disable-mysql-limits

/home/vpopmail/etc:
qmail]# ls -l ~vpopmail/etc/
total 16
-rw-r--r--  1 root root 25 Jun  8 19:47 inc_deps
-rw-r--r--  1 root root 81 Jun  8 19:47 lib_deps
-rw-r--r--  1 vpopmail vchkpw 1107 Jun  8 19:47 vlimits.default
-rw-r-  1 vpopmail vchkpw   43 Jun  8 19:43 vpopmail.mysql


/var/qmail/supervise/qmail-smtpd/run:
#!/bin/sh
QMAILQUEUE="/var/qmail/bin/qmail-scanner-queue.pl" export QMAILQUEUE
VPOPMAILUID=`id -u vpopmail`
VPOPMAILGID=`id -g vpopmail`
MAXSMTPD=`cat /var/qmail/control/concurrencyincoming`
LOCAL=`head -1 /var/qmail/control/me`
QMAILDUID=`id -u qmaild`
NOFILESGID=`id -g qmaild`
if [ -z "$QMAILDUID" -o -z "$NOFILESGID" -o -z "$MAXSMTPD" -o -z "$LOCAL"
]; then
   echo QMAILDUID, NOFILESGID, MAXSMTPD, or LOCAL is unset in
   echo /var/qmail/supervise/qmail-smtpd/run
   exit 1
fi
exec /usr/local/bin/softlimit -m 1700 \
/usr/local/bin/tcpserver \
 -H -l [[[my.host.name]]] \
   -v -x /etc/tcp.smtp.cdb \
 -c 30 -R -u "$VPOPMAILUID" -g "$VPOPMAILGID" 0 smtp \
 /usr/local/bin/rblsmtpd -b -C \
-r 'sbl-xbl.spamhaus.org:Your message was rejected ' \
 /var/qmail/bin/qmail-smtpd $LOCAL /home/vpopmail/bin/vchkpw \
 /usr/bin/true 2>&1


mysql's vpopmail database table vlog contains:
| id | user  | passwd   | domain| logon   
  | remoteip | message   
| timestamp  | error |

++---+--+---+-+--+-++---+
|  1 | daver | <[EMAIL PROTECTED] | example.net |
[EMAIL PROTECTED] | MYIP | vchkpw-25: password fail (pass:
'<[EMAIL PROTECTED]>') [EMAIL PROTECTED]:MYIP | 1119024854 |  
 3 |

|  2 | daver | <[EMAIL PROTECTED] | example.net |
[EMAIL PROTECTED] | MYIP | vchkpw-25: password fail (pass:
'<[EMAIL PROTECTED]>') [EMAIL PROTECTED]:MYIP | 1119025751 |  
 3 |



THIS IMPLIES that some element of the hostname and a timestamp(?) are
being forwarded instead of the submitted password??

I'm at a loss here, help appreciated!

BTW, all incoming SMTP delivery works to all accounts.  All POP3 pickup
and authentication works too.  Just SMTP-AUTH to send is broken.
 


Hi,

I use Bill Shupp's toaster (www.shupp.org) and I don't know which 
smtp-auth patch you are using, but the newer patch does NOT use the 
localhost name


ie

/var/qmail/bin/qmail-smtpd $LOCAL /home/vpopmail/bin/vchkpw \

should be

/var/qmail/bin/qmail-smtpd /home/vpopmail/bin/vchkpw \

with a recent patch.

HTH,

Rick




[vchkpw] SMTP-AUTH works POP3 not SMTPd?

2005-06-17 Thread ISP Lists
sys: Fedora core3, manually compiled vpopmail 3.4.10, RPM Mysql 3.23.59?,
compiled courier imap 4.0.2, compiled qmail-1.03, patched
qmail-ej-cocktail-14.tar.gz, manually patched Tonix' chkuser 2.0.

I have installed vpopmail with roaming/SMTP-AUTH before, again using
Michael Bowe's webmail guide.  SMTP-AUTH is failing authentication and I
cannot tell why.

I had created the qmail install with Tonix' chkuser patch and saved that
qmail-smtpd binary.  Substituting between the original and the Tonix
patched qmail-smtpd binaries does not seem to change the behavior.

compiled vpopmail as:

./configure \
  --enable-roaming-users \
  --enable-logging=p \
  --disable-passwd \
  --enable-clear-passwd \
  --disable-domain-quotas \
  --enable-auth-module=mysql \
  --disable-many-domains \
  --enable-auth-logging \
  --enable-sql-logging \
  --enable-valias \
  --disable-mysql-limits

/home/vpopmail/etc:
qmail]# ls -l ~vpopmail/etc/
total 16
-rw-r--r--  1 root root 25 Jun  8 19:47 inc_deps
-rw-r--r--  1 root root 81 Jun  8 19:47 lib_deps
-rw-r--r--  1 vpopmail vchkpw 1107 Jun  8 19:47 vlimits.default
-rw-r-  1 vpopmail vchkpw   43 Jun  8 19:43 vpopmail.mysql


/var/qmail/supervise/qmail-smtpd/run:
#!/bin/sh
QMAILQUEUE="/var/qmail/bin/qmail-scanner-queue.pl" export QMAILQUEUE
VPOPMAILUID=`id -u vpopmail`
VPOPMAILGID=`id -g vpopmail`
MAXSMTPD=`cat /var/qmail/control/concurrencyincoming`
LOCAL=`head -1 /var/qmail/control/me`
QMAILDUID=`id -u qmaild`
NOFILESGID=`id -g qmaild`
if [ -z "$QMAILDUID" -o -z "$NOFILESGID" -o -z "$MAXSMTPD" -o -z "$LOCAL"
]; then
echo QMAILDUID, NOFILESGID, MAXSMTPD, or LOCAL is unset in
echo /var/qmail/supervise/qmail-smtpd/run
exit 1
fi
exec /usr/local/bin/softlimit -m 1700 \
/usr/local/bin/tcpserver \
  -H -l [[[my.host.name]]] \
-v -x /etc/tcp.smtp.cdb \
  -c 30 -R -u "$VPOPMAILUID" -g "$VPOPMAILGID" 0 smtp \
  /usr/local/bin/rblsmtpd -b -C \
 -r 'sbl-xbl.spamhaus.org:Your message was rejected ' \
  /var/qmail/bin/qmail-smtpd $LOCAL /home/vpopmail/bin/vchkpw \
  /usr/bin/true 2>&1


mysql's vpopmail database table vlog contains:
| id | user  | passwd   | domain| logon   
   | remoteip | message   
 | timestamp  | error |
++---+--+---+-+--+-++---+
|  1 | daver | <[EMAIL PROTECTED] | example.net |
[EMAIL PROTECTED] | MYIP | vchkpw-25: password fail (pass:
'<[EMAIL PROTECTED]>') [EMAIL PROTECTED]:MYIP | 1119024854 |  
  3 |
|  2 | daver | <[EMAIL PROTECTED] | example.net |
[EMAIL PROTECTED] | MYIP | vchkpw-25: password fail (pass:
'<[EMAIL PROTECTED]>') [EMAIL PROTECTED]:MYIP | 1119025751 |  
  3 |


THIS IMPLIES that some element of the hostname and a timestamp(?) are
being forwarded instead of the submitted password??

I'm at a loss here, help appreciated!

BTW, all incoming SMTP delivery works to all accounts.  All POP3 pickup
and authentication works too.  Just SMTP-AUTH to send is broken.