sys: Fedora core3, manually compiled vpopmail 3.4.10, RPM Mysql 3.23.59?,
compiled courier imap 4.0.2, compiled qmail-1.03, patched
qmail-ej-cocktail-14.tar.gz, manually patched Tonix' chkuser 2.0.

I have installed vpopmail with roaming/SMTP-AUTH before, again using
Michael Bowe's webmail guide.  SMTP-AUTH is failing authentication and I
cannot tell why.

I had created the qmail install with Tonix' chkuser patch and saved that
qmail-smtpd binary.  Substituting between the original and the Tonix
patched qmail-smtpd binaries does not seem to change the behavior.

compiled vpopmail as:

./configure \
  --enable-roaming-users \
  --enable-logging=p \
  --disable-passwd \
  --enable-clear-passwd \
  --disable-domain-quotas \
  --enable-auth-module=mysql \
  --disable-many-domains \
  --enable-auth-logging \
  --enable-sql-logging \
  --enable-valias \
  --disable-mysql-limits

/home/vpopmail/etc:
qmail]# ls -l ~vpopmail/etc/
total 16
-rw-r--r--  1 root     root     25 Jun  8 19:47 inc_deps
-rw-r--r--  1 root     root     81 Jun  8 19:47 lib_deps
-rw-r--r--  1 vpopmail vchkpw 1107 Jun  8 19:47 vlimits.default
-rw-r-----  1 vpopmail vchkpw   43 Jun  8 19:43 vpopmail.mysql


/var/qmail/supervise/qmail-smtpd/run:
#!/bin/sh
QMAILQUEUE="/var/qmail/bin/qmail-scanner-queue.pl" export QMAILQUEUE
VPOPMAILUID=`id -u vpopmail`
VPOPMAILGID=`id -g vpopmail`
MAXSMTPD=`cat /var/qmail/control/concurrencyincoming`
LOCAL=`head -1 /var/qmail/control/me`
QMAILDUID=`id -u qmaild`
NOFILESGID=`id -g qmaild`
if [ -z "$QMAILDUID" -o -z "$NOFILESGID" -o -z "$MAXSMTPD" -o -z "$LOCAL"
]; then
    echo QMAILDUID, NOFILESGID, MAXSMTPD, or LOCAL is unset in
        echo /var/qmail/supervise/qmail-smtpd/run
            exit 1
fi
exec /usr/local/bin/softlimit -m 17000000 \
/usr/local/bin/tcpserver \
  -H -l [[[my.host.name]]] \
    -v -x /etc/tcp.smtp.cdb \
      -c 30 -R -u "$VPOPMAILUID" -g "$VPOPMAILGID" 0 smtp \
      /usr/local/bin/rblsmtpd -b -C \
 -r 'sbl-xbl.spamhaus.org:Your message was rejected ' \
          /var/qmail/bin/qmail-smtpd $LOCAL /home/vpopmail/bin/vchkpw \
          /usr/bin/true 2>&1


mysql's vpopmail database table vlog contains:
| id | user  | passwd                           | domain    | logon       
   | remoteip | message                                                   
                             | timestamp  | error |
+----+-------+----------------------------------+-----------+-----------------+--------------+-----------------------------------------------------------------------------------------+------------+-------+
|  1 | daver | <[EMAIL PROTECTED] | example.net |
[EMAIL PROTECTED] | MYIP | vchkpw-25: password fail (pass:
'<[EMAIL PROTECTED]>') [EMAIL PROTECTED]:MYIP | 1119024854 |  
  3 |
|  2 | daver | <[EMAIL PROTECTED] | example.net |
[EMAIL PROTECTED] | MYIP | vchkpw-25: password fail (pass:
'<[EMAIL PROTECTED]>') [EMAIL PROTECTED]:MYIP | 1119025751 |  
  3 |


THIS IMPLIES that some element of the hostname and a timestamp(?) are
being forwarded instead of the submitted password??????

I'm at a loss here, help appreciated!

BTW, all incoming SMTP delivery works to all accounts.  All POP3 pickup
and authentication works too.  Just SMTP-AUTH to send is broken.









Reply via email to