Hi, I am unable to auth users using only spamdyke auth (i.e. qmail is
NOT patched).

This is my setup:

/usr/local/etc/spamdyke.conf:
log-level=excessive
access-file=/etc/tcp.smtp
local-domains-file=/var/qmail/control/rcpthosts
smtp-auth-command=/usr/local/vpopmail/bin/vchkpw /usr/bin/true
smtp-auth-level=always-encrypted
tls-level=none
rejection-text-auth-failure=Utente sconosciuto

If I test my config, I have:

spamdyke 4.0.4+TLS+CONFIGTEST (C)2008 Sam Clippinger, samc (at)
silence (dot) org
http://www.spamdyke.org/

Use -h for an option summary or see README.html for complete option details.

Testing configuration...
WARNING: Running tests as superuser root(0), group wheel(0). These
test results may not be valid if the mail server runs as another user.
SUCCESS: spamdyke binary (/usr/local/vbin/spamdyke) is not owned by
root and/or is not marked setuid.
INFO: Running command to test capabilities: /var/qmail/bin/qmail-smtpd
WARNING: /var/qmail/bin/qmail-smtpd does not appear to offer TLS
support. Please use (or change) the "tls-type" and
"tls-certificate-file" options so spamdyke can offer, intercept or
decrypt TLS traffic.
SUCCESS: /var/qmail/bin/qmail-smtpd does not appear to offer SMTP AUTH
support. spamdyke will offer and process all authentication itself.
INFO(access-file): Testing file read: /etc/tcp.smtp
SUCCESS(access-file): Opened for reading: /etc/tcp.smtp
INFO(config-file): Testing file read: /usr/local/etc/spamdyke.conf
SUCCESS(config-file): Opened for reading: /usr/local/etc/spamdyke.conf
INFO(local-domains-file): Testing file read: /var/qmail/control/rcpthosts
SUCCESS(local-domains-file): Opened for reading: /var/qmail/control/rcpthosts
INFO(smtp-auth-level): Examining authentication command:
/usr/local/vpopmail/bin/vchkpw /usr/bin/true
SUCCESS(smtp-auth-level): File is executable: /usr/local/vpopmail/bin/vchkpw
WARNING(smtp-auth-level): Authentication command is not owned by root.
Some require being setuid root to read system passwords:
/usr/local/vpopmail/bin/vchkpw: owned by vpopmail(89)
SUCCESS: Tests complete. No errors detected.

This is my qmail-smtpd/run:
#!/bin/sh

QMAILDUID=`id -u qmaild`
NOFILESGID=`id -g qmaild`
MAXSMTPD=`cat /var/qmail/control/concurrencyincoming`
LOCAL=`head -1 /var/qmail/control/me`

if [ -z "$QMAILDUID" -o -z "$NOFILESGID" -o -z "$MAXSMTPD" -o -z
"$LOCAL" ]; then
echo QMAILDUID, NOFILESGID, MAXSMTPD, or LOCAL is unset in
echo /var/qmail/supervise/qmail-smtpd/run
exit 1
fi

if [ ! -f /var/qmail/control/rcpthosts ]; then
echo "No /var/qmail/control/rcpthosts!"
echo "Refusing to start SMTP listener because it'll create an open relay"
exit 1
fi

exec /usr/local/bin/softlimit -m 40000000 \
    /usr/local/bin/tcpserver -v -R -l "$LOCAL" -x /etc/tcp.smtp.cdb -c
"$MAXSMTPD" -u "$QMAILDUID" -g "$NOFILESGID" 0 smtp \
        /usr/local/vbin/spamdyke -f /usr/local/etc/spamdyke.conf \
        /var/qmail/bin/qmail-smtpd 2>&1

/etc/tcp.smtp:
:allow,RELAYCLIENT=""

/var/qmail/control/rcpthosts:
dflybsd.local
localhost
dflybsd.sede.televas.it
sede.televas.it

This is a telnet session output:
[EMAIL PROTECTED]:~$ telnet 10.0.0.242 25
Trying 10.0.0.242...
Connected to 10.0.0.242.
Escape character is '^]'.
220 dflybsd.sede.televas.it ESMTP
ehlo davide.damico
250-dflybsd.sede.televas.it
250-PIPELINING
250-8BITMIME
250 AUTH LOGIN PLAIN CRAM-MD5
auth login
334 VXNlcm5hbWU6
ZGF2ZUBzZWRlLnRlbGV2YXMuaXQ=
334 UGFzc3dvcmQ6
d29ya2luMQ==
535 Utente sconosciuto

Thanks for your help,
d.
_______________________________________________
spamdyke-users mailing list
[email protected]
http://www.spamdyke.org/mailman/listinfo/spamdyke-users

Reply via email to