Re: Help qmail-smtpauth

Well, I tried again today to solve the problem, but it seems to me that 
maybe the error is occurring not related to openssl or password file 
(auth.cdb), but to something in qmail-smtp.

Just after passing the AUTH PLAIN passwod, qmail-smtp gives segmentation 
error.

2017-07-28T12:18:57.170144-03:00 server kernel: [ 2998.641480] 
qmail-smtpd[2805]: segfault at c3e140 ip 000000000040e450 sp 
00007ffcf2aea628 error 4 in qmail-smtpd[400000+16000]
2017-07-28T12:18:57.526793-03:00 server systemd-coredump[2807]: Process 
2805 (qmail-smtpd) of user 365 dumped core.

I need to insist on this jms patch, since I already use it in other 
installations successfully .. all the features are ok in this new 
installation, except  for qmail-smtp-auth, but I would like to continue 
using qmail with this combined   jms-patch , because it is very 
effective in my environment and always worked very well.




Em 17-07-2017 11:22, Erwin Hoffmann escreveu:
> Hi Rejaine,
>
> without any logs, things get difficult ....
>
> But from what I can see, I guess:
>
>
>> Am 17.07.2017 um 14:22 schrieb Rejaine Monteiro <[email protected]>:
>>
>>
>> Hi,
>>
>> I have a server running smtpauth for many years and it works fine, however I am reinstalling/upgrading to another qmail server (another version of OS etc). I am basically using the same settings as the current server and everything is working fine except for qmail-smtp-auth . Could anyone give a hint of what might be wrong?
>>
>> # telnet 192.168.0.1 587
>> Trying 192.168.0.1
>> Connected to 192.168.0.1
>> Escape character is '^]'.
>> 220 192.168.0.1 ESMTP
>> ehlo host
>> 250-192.168.0.1
>> 250-AUTH LOGIN PLAIN
>> 250-AUTH=LOGIN PLAIN
>> 250-STARTTLS
>> 250-SIZE 10000000
>> 250-PIPELINING
>> 250 8BITMIME
>> AUTH PLAIN <crypt-auth>
>> Connection closed by foreign host.
> a) This is an ancient version of the SMTP Auth patch. Maybe some parts are not 64 bit save.
>
>
>> #openssl s_client -connect 192.168.0.1:587 -starttls smtp
>> <cut>
>> <cut>
>>   Start Time: 1496784102
>>     Timeout   : 300 (sec)
>>     Verify return code: 18 (self signed certificate)
>> ---
>> 250 8BITMIME
>> ehlo host
>> 250-192.168.0.1
>> 250-AUTH LOGIN PLAIN
>> 250-AUTH=LOGIN PLAIN
>> 250-SIZE 10000000
>> 250-PIPELINING
>> 250 8BITMIME
>> AUTH PLAIN <crypt-auth>
>> read:errno=0
>>
>> ps: cryp-auth generate by command: echo -ne "user@mydomain\0user@mydomain\0userpasswd" | openssl base64
> b) Old version of the SMTP Auth patch don't follow the checkpasword interface (see: http://www.fehcom.de/qmail/smtpauth.html)
>
> Maybe you are using now version which are different.
>
>> Some parameters for file /var/qmail/qmail-smtp-auth/run :
>> <cut>
>> SSL_CERT="/var/qmail/control/servercert.pem"
>> CDBF="/var/qmail/tcpcontrol/smtpauth.cdb"
>> SSL=0
>> FORCE_TLS=1
>> DENY_TLS=0
>> AUTH=1
>> REQUIRE_AUTH=1
>> ALLOW_INSECURE_AUTH=1
>> AUTH_CDB="/var/qmail/tcpcontrol/auth.cdb"
>> CERTFILE="/var/qmail/control/server.crt.pem"
>> KEYFILE="/var/qmail/control/server.key.pem"
>> DHFILE="/var/qmail/control/server_dhparam.pem"
>> <cut>
>>
>> My /var/qmail/tcpcontrol/smtpauth.rules is:
>> :allow,DATABYTES="10000000",LOGLEVEL="3",QMAILQUEUE="/var/qmail/bin/qmail-queue"
>>
>> Permissions files for cdb are OK:
>>
>> # l /var/qmail//tcpcontrol/smtpauth.cdb
>> -r--r--r-- 1 root root 2143 Jun  6 17:10 /var/qmail//tcpcontrol/smtpauth.cdb
>>
>> My /var/qmail/tcpcontrol/auth.rules format is:
>> user@mydomain  <cript-password>
>>
>> # l /var/qmail/tcpcontrol/auth.cdb
>> -rw-r----- 1 root nofiles 2130 Jun  6 17:09 /var/qmail/tcpcontrol/auth.cdb
> c) You should ask the creator(s) of the patches you are using. This is a heavily  tweaked qmail.
>
> Better move to a more recent version (like my s/qmail).
>
> Regards.
> --eh.
>
>
>> Thanks any tips.
>>
> Dr. Erwin Hoffmann | FEHCom | http://www.fehcom.de | PGP Key-Id: EE00CF65
>
>
>
>
>

-- 
Rejaine da Silveira Monteiro
Suporte - Tecnologia Digital
Tel: (31) 2102-8854
Jamef Encomendas Urgentes - Matriz - Belo Horizonte/MG
www.jamef.com.br