I don't see anything wrong with your configuration.  What happens when 
you use the "config-test" feature with the 
"config-test-smtpauth-username" and "config-test-smtpauth-password" 
options?  Also, when you run the test, you should probably add 
"--run-as-user qmaild:qmaild" so the permissions can be checked properly.

If that doesn't show anything useful, take a look at your system logs to 
see if spamdyke is logging any errors when authentication is attempted.

-- Sam Clippinger

Davide D'Amico wrote:
> Hi, I am unable to auth users using only spamdyke auth (i.e. qmail is
> NOT patched).
>
> This is my setup:
>
> /usr/local/etc/spamdyke.conf:
> log-level=excessive
> access-file=/etc/tcp.smtp
> local-domains-file=/var/qmail/control/rcpthosts
> smtp-auth-command=/usr/local/vpopmail/bin/vchkpw /usr/bin/true
> smtp-auth-level=always-encrypted
> tls-level=none
> rejection-text-auth-failure=Utente sconosciuto
>
> If I test my config, I have:
>
> spamdyke 4.0.4+TLS+CONFIGTEST (C)2008 Sam Clippinger, samc (at)
> silence (dot) org
> http://www.spamdyke.org/
>
> Use -h for an option summary or see README.html for complete option details.
>
> Testing configuration...
> WARNING: Running tests as superuser root(0), group wheel(0). These
> test results may not be valid if the mail server runs as another user.
> SUCCESS: spamdyke binary (/usr/local/vbin/spamdyke) is not owned by
> root and/or is not marked setuid.
> INFO: Running command to test capabilities: /var/qmail/bin/qmail-smtpd
> WARNING: /var/qmail/bin/qmail-smtpd does not appear to offer TLS
> support. Please use (or change) the "tls-type" and
> "tls-certificate-file" options so spamdyke can offer, intercept or
> decrypt TLS traffic.
> SUCCESS: /var/qmail/bin/qmail-smtpd does not appear to offer SMTP AUTH
> support. spamdyke will offer and process all authentication itself.
> INFO(access-file): Testing file read: /etc/tcp.smtp
> SUCCESS(access-file): Opened for reading: /etc/tcp.smtp
> INFO(config-file): Testing file read: /usr/local/etc/spamdyke.conf
> SUCCESS(config-file): Opened for reading: /usr/local/etc/spamdyke.conf
> INFO(local-domains-file): Testing file read: /var/qmail/control/rcpthosts
> SUCCESS(local-domains-file): Opened for reading: /var/qmail/control/rcpthosts
> INFO(smtp-auth-level): Examining authentication command:
> /usr/local/vpopmail/bin/vchkpw /usr/bin/true
> SUCCESS(smtp-auth-level): File is executable: /usr/local/vpopmail/bin/vchkpw
> WARNING(smtp-auth-level): Authentication command is not owned by root.
> Some require being setuid root to read system passwords:
> /usr/local/vpopmail/bin/vchkpw: owned by vpopmail(89)
> SUCCESS: Tests complete. No errors detected.
>
> This is my qmail-smtpd/run:
> #!/bin/sh
>
> QMAILDUID=`id -u qmaild`
> NOFILESGID=`id -g qmaild`
> MAXSMTPD=`cat /var/qmail/control/concurrencyincoming`
> LOCAL=`head -1 /var/qmail/control/me`
>
> if [ -z "$QMAILDUID" -o -z "$NOFILESGID" -o -z "$MAXSMTPD" -o -z
> "$LOCAL" ]; then
> echo QMAILDUID, NOFILESGID, MAXSMTPD, or LOCAL is unset in
> echo /var/qmail/supervise/qmail-smtpd/run
> exit 1
> fi
>
> if [ ! -f /var/qmail/control/rcpthosts ]; then
> echo "No /var/qmail/control/rcpthosts!"
> echo "Refusing to start SMTP listener because it'll create an open relay"
> exit 1
> fi
>
> exec /usr/local/bin/softlimit -m 40000000 \
>     /usr/local/bin/tcpserver -v -R -l "$LOCAL" -x /etc/tcp.smtp.cdb -c
> "$MAXSMTPD" -u "$QMAILDUID" -g "$NOFILESGID" 0 smtp \
>         /usr/local/vbin/spamdyke -f /usr/local/etc/spamdyke.conf \
>         /var/qmail/bin/qmail-smtpd 2>&1
>
> /etc/tcp.smtp:
> :allow,RELAYCLIENT=""
>
> /var/qmail/control/rcpthosts:
> dflybsd.local
> localhost
> dflybsd.sede.televas.it
> sede.televas.it
>
> This is a telnet session output:
> [EMAIL PROTECTED]:~$ telnet 10.0.0.242 25
> Trying 10.0.0.242...
> Connected to 10.0.0.242.
> Escape character is '^]'.
> 220 dflybsd.sede.televas.it ESMTP
> ehlo davide.damico
> 250-dflybsd.sede.televas.it
> 250-PIPELINING
> 250-8BITMIME
> 250 AUTH LOGIN PLAIN CRAM-MD5
> auth login
> 334 VXNlcm5hbWU6
> ZGF2ZUBzZWRlLnRlbGV2YXMuaXQ=
> 334 UGFzc3dvcmQ6
> d29ya2luMQ==
> 535 Utente sconosciuto
>
> Thanks for your help,
> d.
> _______________________________________________
> spamdyke-users mailing list
> [email protected]
> http://www.spamdyke.org/mailman/listinfo/spamdyke-users
>   
_______________________________________________
spamdyke-users mailing list
[email protected]
http://www.spamdyke.org/mailman/listinfo/spamdyke-users

Reply via email to