Re: Help qmail-smtpauth

well,  I'm using the same jms patch and qmail-smtpauth (with checkpasswd 
etc) in another linux install, but 32 bitis (opensuse 10.1) the 
difference now is that I'm installing a new server using the same 
installation of qmail and same patches and everything works ok except 
qmail-smtp-auth. I think it may be related to something because it is 64 
bits, as you mentioned ... it is difficult to find out what. I will try 
to upgrade to a newer version of the jms patch (although the changelog 
of the new version has nothing to do with changing the code relative to 
qmai-smptauth)



Em 17-07-2017 11:22, Erwin Hoffmann escreveu:
> Hi Rejaine,
>
> without any logs, things get difficult ....
>
> But from what I can see, I guess:
>
>
>> Am 17.07.2017 um 14:22 schrieb Rejaine Monteiro <[email protected]>:
>>
>>
>> Hi,
>>
>> I have a server running smtpauth for many years and it works fine, however I am reinstalling/upgrading to another qmail server (another version of OS etc). I am basically using the same settings as the current server and everything is working fine except for qmail-smtp-auth . Could anyone give a hint of what might be wrong?
>>
>> # telnet 192.168.0.1 587
>> Trying 192.168.0.1
>> Connected to 192.168.0.1
>> Escape character is '^]'.
>> 220 192.168.0.1 ESMTP
>> ehlo host
>> 250-192.168.0.1
>> 250-AUTH LOGIN PLAIN
>> 250-AUTH=LOGIN PLAIN
>> 250-STARTTLS
>> 250-SIZE 10000000
>> 250-PIPELINING
>> 250 8BITMIME
>> AUTH PLAIN <crypt-auth>
>> Connection closed by foreign host.
> a) This is an ancient version of the SMTP Auth patch. Maybe some parts are not 64 bit save.
>
>
>> #openssl s_client -connect 192.168.0.1:587 -starttls smtp
>> <cut>
>> <cut>
>>   Start Time: 1496784102
>>     Timeout   : 300 (sec)
>>     Verify return code: 18 (self signed certificate)
>> ---
>> 250 8BITMIME
>> ehlo host
>> 250-192.168.0.1
>> 250-AUTH LOGIN PLAIN
>> 250-AUTH=LOGIN PLAIN
>> 250-SIZE 10000000
>> 250-PIPELINING
>> 250 8BITMIME
>> AUTH PLAIN <crypt-auth>
>> read:errno=0
>>
>> ps: cryp-auth generate by command: echo -ne "user@mydomain\0user@mydomain\0userpasswd" | openssl base64
> b) Old version of the SMTP Auth patch don't follow the checkpasword interface (see: http://www.fehcom.de/qmail/smtpauth.html)
>
> Maybe you are using now version which are different.
>
>> Some parameters for file /var/qmail/qmail-smtp-auth/run :
>> <cut>
>> SSL_CERT="/var/qmail/control/servercert.pem"
>> CDBF="/var/qmail/tcpcontrol/smtpauth.cdb"
>> SSL=0
>> FORCE_TLS=1
>> DENY_TLS=0
>> AUTH=1
>> REQUIRE_AUTH=1
>> ALLOW_INSECURE_AUTH=1
>> AUTH_CDB="/var/qmail/tcpcontrol/auth.cdb"
>> CERTFILE="/var/qmail/control/server.crt.pem"
>> KEYFILE="/var/qmail/control/server.key.pem"
>> DHFILE="/var/qmail/control/server_dhparam.pem"
>> <cut>
>>
>> My /var/qmail/tcpcontrol/smtpauth.rules is:
>> :allow,DATABYTES="10000000",LOGLEVEL="3",QMAILQUEUE="/var/qmail/bin/qmail-queue"
>>
>> Permissions files for cdb are OK:
>>
>> # l /var/qmail//tcpcontrol/smtpauth.cdb
>> -r--r--r-- 1 root root 2143 Jun  6 17:10 /var/qmail//tcpcontrol/smtpauth.cdb
>>
>> My /var/qmail/tcpcontrol/auth.rules format is:
>> user@mydomain  <cript-password>
>>
>> # l /var/qmail/tcpcontrol/auth.cdb
>> -rw-r----- 1 root nofiles 2130 Jun  6 17:09 /var/qmail/tcpcontrol/auth.cdb
> c) You should ask the creator(s) of the patches you are using. This is a heavily  tweaked qmail.
>
> Better move to a more recent version (like my s/qmail).
>
> Regards.
> --eh.
>
>
>> Thanks any tips.
>>
> Dr. Erwin Hoffmann | FEHCom | http://www.fehcom.de | PGP Key-Id: EE00CF65
>
>
>
>
>

-- 
Rejaine da Silveira Monteiro
Suporte - Tecnologia Digital
Tel: (31) 2102-8854
Jamef Encomendas Urgentes - Matriz - Belo Horizonte/MG
www.jamef.com.br