Re: SMTP external authentication is not worjing
Bart Mortelmans via xmail <[email protected]> Tue, 5 Mar 2019 16:24:52 +0100
| Newsgroups | gmane.mail.xmail.general |
|---|---|
| Message-ID | <[email protected]> |
This is a cryptographically signed message in MIME format. --===============1929167339== Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms030404030802070205010409" This is a cryptographically signed message in MIME format. --------------ms030404030802070205010409 Content-Type: multipart/alternative; boundary="------------DE95E8D90AC89B816913FEB2" Content-Language: en-GB This is a multi-part message in MIME format. --------------DE95E8D90AC89B816913FEB2 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable I understand that you can be sure that your checkSmtpAuth.sh is indeed=20 being called, because you see that the RFILE is created, with the=20 contents you expect your script to put in there? In that case my guess is that XMail is having trouble accessing your=20 RFILE. If the exit code wasn't seen as "0", then you should either get=20 "451 Requested action aborted" or "503 Authentication failed". The error "550 Relay denied" most probably is based on the fact that it=20 isn't finding "R" (for relaying) in the RFILE. In theory, it should also delete the RFILE. So the fact that they're=20 still there, also seems to indicate a problem with the RFILE. - What would happen if you don't write this RFILE and don't specify the=20 @@RFILE parameter in smtpextauth.tab? In theory the default from=20 server.tab would be used. - Anything strange about permissions of the RFILE's that have not been=20 removed? - Could it be that your script has somehow not finished writing the file = yet by the time XMail tries to read it? Bart Op 5/03/19 om 07:41 schreef Spon Spon via xmail: > Hello, > > I have a mixed setup with DOVECAT for IMAP access, and XMAIl 1.27 for=20 > the rest. =C2=A0The relay is cosed until authentication is made In orde= r to=20 > have a centralized place for authentication I used in XMAIL external=20 > authentication. =C2=A0However seems it is not working as I receive 550 = > Relay Denied when I try to send an email using this XMAIL server. > > The setup is as following: > > In=C2=A0smtpextauth.tab I put following line: > > "LOGIN""/config/scripts/checkSmtpAuth.sh""@@AUTH""@@USER""@@PASS""@@RFI= LE" > In server tab I have: > "DefaultSmtpPerms""MRVZ" > > In checkSmtpAuth.sh I always exit with 0 for testing. =C2=A0However I=20 > received 550 Relay denied each time I tried to send an email. =C2=A0If = the=20 > script exits with 1 then the error is different, (Authentication error)= =2E > > I tried also populating RFILE with Perms=3DMR but without success. I=20 > tried also with Perms=3DMRVZ . No change. > > Also another issue is the fact that those RFILE files were never get=20 > deleted. =C2=A0For each email, that file is created and stays there for= ever=20 > (need external action to delete it) > > Is there any other settings that need to be made or is this a bug ? > > Using internal authentication (smtpauth.tab or mailuser.tab) emptying=20 > smtpextauth.tab =C2=A0there is no such error, and everything works as e= xpected. > > Unfortunately there is no debug log in application, so only way to=20 > figure out is DEBUG, and currently it is installed on an embedded=20 > router so no way to debug. > > Thanks, > Spon > > > _______________________________________________ > xmail mailing list > [email protected] > http://xmailserver.org/mailman/listinfo/xmail --------------DE95E8D90AC89B816913FEB2 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable <html> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3DUTF= -8"> </head> <body text=3D"#000000" bgcolor=3D"#FFFFFF"> <div class=3D"moz-cite-prefix">I understand that you can be sure that= your checkSmtpAuth.sh is indeed being called, because you see that the RFILE is created, with the contents you expect your script to put in there?</div> <div class=3D"moz-cite-prefix"><br> </div> <div class=3D"moz-cite-prefix">In that case my guess is that XMail is= having trouble accessing your RFILE. If the exit code wasn't seen as "0", then you should either get "451 Requested action aborted" or "503 Authentication failed". <br> </div> <div class=3D"moz-cite-prefix">The error "550 Relay denied" most probably is based on the fact that it isn't finding "R" (for relaying) in the RFILE.</div> <div class=3D"moz-cite-prefix">In theory, it should also delete the RFILE. So the fact that they're still there, also seems to indicate a problem with the RFILE.</div> <div class=3D"moz-cite-prefix"><br> </div> <div class=3D"moz-cite-prefix">- What would happen if you don't write= this RFILE and don't specify the @@RFILE parameter in smtpextauth.tab? In theory the default from server.tab would be used.<br> </div> <div class=3D"moz-cite-prefix">- Anything strange about permissions o= f the RFILE's that have not been removed?</div> <div class=3D"moz-cite-prefix">- Could it be that your script has somehow not finished writing the file yet by the time XMail tries to read it?</div> <div class=3D"moz-cite-prefix"><br> </div> <div class=3D"moz-cite-prefix"><br> </div> <div class=3D"moz-cite-prefix"><br> </div> <div class=3D"moz-cite-prefix">Bart</div> <div class=3D"moz-cite-prefix"><br> </div> <div class=3D"moz-cite-prefix"><br> </div> <div class=3D"moz-cite-prefix"><br> </div> <div class=3D"moz-cite-prefix">Op 5/03/19 om 07:41 schreef Spon Spon via xmail:<br> </div> <blockquote type=3D"cite" cite=3D"mid:[email protected]"> <meta http-equiv=3D"content-type" content=3D"text/html; charset=3DU= TF-8"> <div style=3D"color:#000; background-color:#fff; font-family:Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px"> <div id=3D"yui_3_16_0_ym19_1_1551766825845_5605">Hello,</div> <div id=3D"yui_3_16_0_ym19_1_1551766825845_5606"><br> </div> <div dir=3D"ltr" id=3D"yui_3_16_0_ym19_1_1551766825845_5607">I ha= ve a mixed setup with DOVECAT for IMAP access, and XMAIl 1.27 for the rest. =C2=A0The relay is cosed until authentication is made= In order to have a centralized place for authentication I used in XMAIL external authentication. =C2=A0However seems it is not working as I receive 550 Relay Denied when I try to send an email using this XMAIL server.</div> <div dir=3D"ltr" id=3D"yui_3_16_0_ym19_1_1551766825845_5608"><br>= </div> <div dir=3D"ltr" id=3D"yui_3_16_0_ym19_1_1551766825845_5609">The setup is as following:</div> <div dir=3D"ltr" id=3D"yui_3_16_0_ym19_1_1551766825845_5610"><br>= </div> <div dir=3D"ltr" id=3D"yui_3_16_0_ym19_1_1551766825845_5611">In=C2= =A0smtpextauth.tab I put following line:</div> <div dir=3D"ltr" id=3D"yui_3_16_0_ym19_1_1551766825845_5612"><br>= </div> <div dir=3D"ltr" id=3D"yui_3_16_0_ym19_1_1551766825845_5613">"LOG= IN"<span style=3D"white-space:pre-wrap;" id=3D"yui_3_16_0_ym19_1_15517668= 25845_5588"> </span>"/config/scripts/checkSmtpAuth.sh"<span style=3D"whit= e-space:pre-wrap;" id=3D"yui_3_16_0_ym19_1_1551766825845_5589"> </span>"@= @AUTH"<span style=3D"white-space:pre-wrap;" id=3D"yui_3_16_0_ym19_1_15517= 66825845_5590"> </span>"@@USER"<span style=3D"white-space:pre-wrap;" id=3D= "yui_3_16_0_ym19_1_1551766825845_5591"> </span>"@@PASS"<span style=3D"whi= te-space:pre-wrap;" id=3D"yui_3_16_0_ym19_1_1551766825845_5592"> </span>"= @@RFILE"<br> </div> <div dir=3D"ltr" id=3D"yui_3_16_0_ym19_1_1551766825845_5613">In server tab I have:</div> <div dir=3D"ltr" id=3D"yui_3_16_0_ym19_1_1551766825845_5613">"Def= aultSmtpPerms"<span style=3D"white-space:pre-wrap;" id=3D"yui_3_16_0_ym19= _1_1551766825845_5921"> </span>"MRVZ"<br> </div> <div dir=3D"ltr" id=3D"yui_3_16_0_ym19_1_1551766825845_5615"><br>= </div> <div dir=3D"ltr" id=3D"yui_3_16_0_ym19_1_1551766825845_5616">In checkSmtpAuth.sh I always exit with 0 for testing. =C2=A0Howeve= r I received 550 Relay denied each time I tried to send an email. =C2=A0If the script exits with 1 then the error is different, (Authentication error).=C2=A0<br> </div> <div dir=3D"ltr" id=3D"yui_3_16_0_ym19_1_1551766825845_5616"><br>= </div> <div dir=3D"ltr" id=3D"yui_3_16_0_ym19_1_1551766825845_5616">I tr= ied also populating RFILE with Perms=3DMR but without success. I tried also with Perms=3DMRVZ . No change.</div> <div dir=3D"ltr" id=3D"yui_3_16_0_ym19_1_1551766825845_5616"><br>= </div> <div dir=3D"ltr" id=3D"yui_3_16_0_ym19_1_1551766825845_5616">Also= another issue is the fact that those RFILE files were never get deleted. =C2=A0For each email, that file is created and sta= ys there forever (need external action to delete it)</div> <div dir=3D"ltr" id=3D"yui_3_16_0_ym19_1_1551766825845_5616"><br>= </div> <div dir=3D"ltr" id=3D"yui_3_16_0_ym19_1_1551766825845_5616">Is there any other settings that need to be made or is this a bug ?</div> <div dir=3D"ltr" id=3D"yui_3_16_0_ym19_1_1551766825845_5616"><br>= </div> <div dir=3D"ltr" id=3D"yui_3_16_0_ym19_1_1551766825845_5616">Usin= g internal authentication (smtpauth.tab or mailuser.tab) emptying smtpextauth.tab =C2=A0there is no such error, and everything works as expected.</div> <div dir=3D"ltr" id=3D"yui_3_16_0_ym19_1_1551766825845_5616"><br>= </div> <div dir=3D"ltr" id=3D"yui_3_16_0_ym19_1_1551766825845_5616">Unfo= rtunately there is no debug log in application, so only way to figure out is DEBUG, and currently it is installed on an embedded router so no way to debug. =C2=A0</div> <div dir=3D"ltr" id=3D"yui_3_16_0_ym19_1_1551766825845_5616"><br>= </div> <div dir=3D"ltr" id=3D"yui_3_16_0_ym19_1_1551766825845_5616">Than= ks,</div> <div dir=3D"ltr" id=3D"yui_3_16_0_ym19_1_1551766825845_5616">Spon= </div> <div dir=3D"ltr" id=3D"yui_3_16_0_ym19_1_1551766825845_5616"><br>= </div> </div> <br> <fieldset class=3D"mimeAttachmentHeader"></fieldset> <pre class=3D"moz-quote-pre" wrap=3D"">____________________________= ___________________ xmail mailing list <a class=3D"moz-txt-link-abbreviated" href=3D"mailto:[email protected]= g">[email protected]</a> <a class=3D"moz-txt-link-freetext" href=3D"http://xmailserver.org/mailman= /listinfo/xmail">http://xmailserver.org/mailman/listinfo/xmail</a> </pre> </blockquote> <p><br> </p> </body> </html> --------------DE95E8D90AC89B816913FEB2-- --------------ms030404030802070205010409 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME-cryptografische ondertekening MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC Cw8wggUhMIIECaADAgECAhBecgDGkLpXTrnxc2aO8iEnMA0GCSqGSIb3DQEBCwUAMIGXMQsw CQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxm b3JkMRowGAYDVQQKExFDT01PRE8gQ0EgTGltaXRlZDE9MDsGA1UEAxM0Q09NT0RPIFJTQSBD bGllbnQgQXV0aGVudGljYXRpb24gYW5kIFNlY3VyZSBFbWFpbCBDQTAeFw0xODEyMTIwMDAw MDBaFw0xOTEyMTIyMzU5NTlaMBwxGjAYBgkqhkiG9w0BCQEWC2JhcnRAYmltLmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6VD+1uEnRwgejIB0xYE1QKcTrklT3dOXQqH D4F7SgY+eroa3tYN5m7gTnTNRln+auaU6c209dfvdBL7RzNu7TEhsPhI19tVY6gpGNRRt1dP ecKHjAQ4qOUx0AothR30t4zI4BO4fikEWg/xb1b7/eDoaintOQvtiWkc7cu0JDSspww+VdjB c3Tooo2k6fHrvSaT0WxumRVhRKSVAa1yyPSE67sI8BvmC3y34XIaon+TbBIptyzd4CZZV9Ph 70STucAeNhNFtM17TgUlWqO0e47b5moXF0T5EKWXdGxL8Uy27UKmF3s5iZCFWG/h5GzthYzR zwzC4l/pygRXdP3kYQIDAQABo4IB4TCCAd0wHwYDVR0jBBgwFoAUgq9sjPjF/pZhfOgfPStx SF7Ei8AwHQYDVR0OBBYEFNF9RvPYM0CEcZA+SB/M7HRULHLYMA4GA1UdDwEB/wQEAwIFoDAM BgNVHRMBAf8EAjAAMCAGA1UdJQQZMBcGCCsGAQUFBwMEBgsrBgEEAbIxAQMFAjARBglghkgB hvhCAQEEBAMCBSAwRgYDVR0gBD8wPTA7BgwrBgEEAbIxAQIBAQEwKzApBggrBgEFBQcCARYd aHR0cHM6Ly9zZWN1cmUuY29tb2RvLm5ldC9DUFMwWgYDVR0fBFMwUTBPoE2gS4ZJaHR0cDov L2NybC5jb21vZG9jYS5jb20vQ09NT0RPUlNBQ2xpZW50QXV0aGVudGljYXRpb25hbmRTZWN1 cmVFbWFpbENBLmNybDCBiwYIKwYBBQUHAQEEfzB9MFUGCCsGAQUFBzAChklodHRwOi8vY3J0 LmNvbW9kb2NhLmNvbS9DT01PRE9SU0FDbGllbnRBdXRoZW50aWNhdGlvbmFuZFNlY3VyZUVt YWlsQ0EuY3J0MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5jb21vZG9jYS5jb20wFgYDVR0R BA8wDYELYmFydEBiaW0uYmUwDQYJKoZIhvcNAQELBQADggEBAAM5zPVmv0mTeezTldmwi2Ns w6yHxlPzdDd+G5mkN+KXZfqeR6RRAijqlaztj553m0Zkm1kr1lvKV8u+MCh6KFD13QiFk96r iDQ4wiNHKrxTSC9vWp66Raux9ENWQBxA9afHCS2jaxnfp+gtXy81qSZM6j07XZINfnLSF0ua iiCFuGGAop8qikmobtkkmqkqJXDhfzwXNA3WHITiKeVm2Txv9cYMi3e7MDQkQ+WOACxvLAf8 hltmVZCLdT9DfZlmRyxBrm4O+wTTtihS1dLziFsZPI4uHc0Ft1G0sNKnaJ4TvCdw56WxlMr+ OcL5pmBm0ZJTrDVuMfwL2qyCxVImgbgwggXmMIIDzqADAgECAhBqm+E4O/8ra58B1dm4p1JW MA0GCSqGSIb3DQEBDAUAMIGFMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5j aGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRowGAYDVQQKExFDT01PRE8gQ0EgTGltaXRlZDEr MCkGA1UEAxMiQ09NT0RPIFJTQSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0xMzAxMTAw MDAwMDBaFw0yODAxMDkyMzU5NTlaMIGXMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRl ciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRowGAYDVQQKExFDT01PRE8gQ0EgTGlt aXRlZDE9MDsGA1UEAxM0Q09NT0RPIFJTQSBDbGllbnQgQXV0aGVudGljYXRpb24gYW5kIFNl Y3VyZSBFbWFpbCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL6znlesKHZ1 QBbHOAOY08YYdiFQ8yV5C0y1oNF9Olg+nKcxLqf2NHbZhGra0D00SOTq9bus3/mxgUsg/Wh/ eXQ0pnp8tZ8XZWAnlyKMpjL+qUByRjXCA6RQyDMqVaVUkbIr5SU0RDX/kSsKwer3H1pT/HUr BN0X8sKtPTdGX8XAWt/VdMLBrZBlgvnkCos+KQWWCo63OTTqRvaq8aWccm+KOMjTcE6s2mj6 RkalweyDI7X+7U5lNo6jzC8RTXtVV4/Vwdax720YpMPJQaDaElmOupyTf1Qib+cpukNJnQmw ygjD8m046DQkLnpXNCAGjuJy1F5NATksUsbfJAr7FLUCAwEAAaOCATwwggE4MB8GA1UdIwQY MBaAFLuvfgI9+qbxPISOre44mOzZMjLUMB0GA1UdDgQWBBSCr2yM+MX+lmF86B89K3FIXsSL wDAOBgNVHQ8BAf8EBAMCAYYwEgYDVR0TAQH/BAgwBgEB/wIBADARBgNVHSAECjAIMAYGBFUd IAAwTAYDVR0fBEUwQzBBoD+gPYY7aHR0cDovL2NybC5jb21vZG9jYS5jb20vQ09NT0RPUlNB Q2VydGlmaWNhdGlvbkF1dGhvcml0eS5jcmwwcQYIKwYBBQUHAQEEZTBjMDsGCCsGAQUFBzAC hi9odHRwOi8vY3J0LmNvbW9kb2NhLmNvbS9DT01PRE9SU0FBZGRUcnVzdENBLmNydDAkBggr BgEFBQcwAYYYaHR0cDovL29jc3AuY29tb2RvY2EuY29tMA0GCSqGSIb3DQEBDAUAA4ICAQB4 XLKBKDRPPO5fVs6fl1bsj6JrF/bz9kkIBtTYLzXN30D+03Hj6OxCDBEaIeNmsBhrJmuubvyE 7HtoSmR809AgcYboW+rcTNZ/8u/Hv+GTrNI/AhqX2/kiQNxmgUPt/eJPs92Qclj0HnVyy9Tn SvGkSDU7I5Px+TbO+88G4zipA2psZaWeEykgzClZlPz1FjTCkk77ZXp5cQYYexE6zeeN4/0O qqoAloFrjAF4o50YJafX8mnahjp3I2Y2mkjhk0xQfhNqbzlLWPoT3m7j7U26u7zg6swjOq8h ITYc3/np5tM5aVyu6t99p17bTbY7+1RTWBviN9YJzK8HxzObXYWBf/L+VGOYNsQDTxAk0Hbv b1j6KjUhg7fO294F29QIhhmiNOr84JHoy+fNLpfvYc/Q9EtFOI5ISYgOxLk3nD/whbUe9rmE QXLp8MB933Ij474gwwCPUpwv9mj2PMnXoc7mbrS22XUSeTwxCTP9bcmUdp4jmIoWfhQm7X9w /Zgddg+JZ/YnIHOwsGsaTUgj7fIvxqith7DoJC91WJ8Lce3CVJqb1XWeKIJ84F7YLXZN0oa7 TktYgDdmQVxYkZo1c5noaDKH9Oq9cbm/vOYRUM1cWcef20Wkyk5S/GFyyPJwG0fR1nRas3Dq Af4cXxMiEKcff7PNa4M3RGTqH0pWR8p6EjGCBDUwggQxAgEBMIGsMIGXMQswCQYDVQQGEwJH QjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRowGAYD VQQKExFDT01PRE8gQ0EgTGltaXRlZDE9MDsGA1UEAxM0Q09NT0RPIFJTQSBDbGllbnQgQXV0 aGVudGljYXRpb24gYW5kIFNlY3VyZSBFbWFpbCBDQQIQXnIAxpC6V0658XNmjvIhJzANBglg hkgBZQMEAgEFAKCCAlkwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUx DxcNMTkwMzA1MTUyNDUyWjAvBgkqhkiG9w0BCQQxIgQgRZUKk5FmPjegZ172D0/Ly9Gu3M5c kJRJngD0pBpY3sIwbAYJKoZIhvcNAQkPMV8wXTALBglghkgBZQMEASowCwYJYIZIAWUDBAEC MAoGCCqGSIb3DQMHMA4GCCqGSIb3DQMCAgIAgDANBggqhkiG9w0DAgIBQDAHBgUrDgMCBzAN BggqhkiG9w0DAgIBKDCBvQYJKwYBBAGCNxAEMYGvMIGsMIGXMQswCQYDVQQGEwJHQjEbMBkG A1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRowGAYDVQQKExFD T01PRE8gQ0EgTGltaXRlZDE9MDsGA1UEAxM0Q09NT0RPIFJTQSBDbGllbnQgQXV0aGVudGlj YXRpb24gYW5kIFNlY3VyZSBFbWFpbCBDQQIQXnIAxpC6V0658XNmjvIhJzCBvwYLKoZIhvcN AQkQAgsxga+ggawwgZcxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0 ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBDQSBMaW1pdGVkMT0wOwYD VQQDEzRDT01PRE8gUlNBIENsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQgU2VjdXJlIEVtYWls IENBAhBecgDGkLpXTrnxc2aO8iEnMA0GCSqGSIb3DQEBAQUABIIBAHBi0n02fTbe6wEambu9 85Ww/3PZ8StnXg/czkza8n4pKimouSasMnxwoWzrjGavNGmEX1+13sae6BBjCkioNTxWdQnG nRREyVMZPZWQSEllGgCBwS0HPs40aoix25yHk/ACseaLxLLfYYIuktWLw3CJUhVoWBYDi382 izzHpdA3mDYVxoF+IYWZ6V31+khI2molZHA8hCmUrSzN3kzrClqDcru2a4+1mcVWWWehBFoj iz/57lHQ7F8tWkFNBN38U9lC1QWvompLYj2oYQZU4U/+Q6f+VVRiGNdB7ibUd+5J6rOerrva JTl2ltS9LqW44pSL+gcmFDn2nt8e4AjnEecAAAAAAAA= --------------ms030404030802070205010409-- --===============1929167339== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ xmail mailing list [email protected] http://xmailserver.org/mailman/listinfo/xmail --===============1929167339==--