Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm running into a problem with Sendmail trying to implement SMTP- auth. I"m running 8.14.5 and have saslauthd running under FreeBSD 7.0-R.

I don't believe I have starttls enabled (but I also compiled a version with it and have been testing it too - same problem) - just looking for basic auth, but am wondering if my configuration is not compatible with modern mail clients? I don't think I have any certs set up.

It seems an older version of Microsoft Outlook Express works fine with SMTP-auth with no problems, but Outlook 2010 won't work, and neither will Eudora (basic settings to not use encryption and use same uid/pw as pop3 account name)

When trying to send mail the server reports: "550 571 Relaying Denied. Proper authentication required."

Is there some config that I am missing? Why does it work with Outlook Express but not other e-mail clients?

my site.config.m4 has:

APPENDDEF(confENVDEF',-DSASL=2') APPENDDEF(conf_sendmail_LIBS',-lsasl2') dnl APPENDDEF(confLIBDIRS',-L/usr/local/lib/sasl2') APPENDDEF(confLIBDIRS',-L/usr/local/lib') APPENDDEF(confINCDIRS',-I/usr/local/include')

My sendmail.mc has:

define(ConfAUTH_OPTIONS',A') TRUST_AUTH_MECH(LOGIN PLAIN')dnl define(ConfAUTH_MECHANISMS',`LOGIN PLAIN')dnl

My /usr/local/lib/sasl2/Sendmail.conf has:

pwcheck_method: saslauthd

When I restart sendmail this shows up in the logs:

Jun 16 12:36:24 x sm-mta[79090]: restarting /usr/sbin/sendmail due to signal
Jun 16 12:36:24 x sm-mta[81145]: starting daemon (8.14.5): SMTP+queueing@00:30:00
Jun 16 12:36:24 x sm-mta[81147]: STARTTLS=client, relay=mxgw1.mail.nationalnet.com., version=TLSv1/SSLv3, verify=FAIL, cipher=DHE-RSA-AES256-SHA, bits=256/256
Jun 16 12:36:24 x sm-mta[81148]: STARTTLS=client, relay=mxgw1.mail.nationalnet.com., version=TLSv1/SSLv3, verify=FAIL, cipher=DHE-RSA-AES256-SHA, bits=256/256

testing on the cmd line:

telnet localhost 587

Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. 220 xxxt ESMTP Sendmail 8.14.5/8.14.5; Fri, 15 Jun 2012 18:28:03 -0500 (CDT)

ehlo localhost

250-xxxx Hello localhost [127.0.0.1], pleased to meet you 250-ENHANCEDSTATUSCODES 250-PIPELINING 250-8BITMIME 250-SIZE 250-DSN 250-AUTH GSSAPI DIGEST-MD5 CRAM-MD5 LOGIN PLAIN 250-DELIVERBY 250 HELP

I am not using any certs or ssl right now - just trying to get basic auth to work. Anyone have any ideas?

share|improve this question

migrated from stackoverflow.com Jun 17 '12 at 14:06

This question came from our site for professional and enthusiast programmers.

    
Here's what's weird.. I can test the auth this way: # telnet localhost 587 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. 220 xxxx ESMTP Sendmail 8.14.5/8.14.5; Sat, 16 Jun 2012 14:58:59 -0500 (CDT) ehlo localhost 250-xx Hello localhost [127.0.0.1], pleased to meet you 250-ENHANCEDSTATUSCODES 250-PIPELINING 250-8BITMIME 250-SIZE 250-DSN 250-AUTH GSSAPI DIGEST-MD5 CRAM-MD5 LOGIN 250-DELIVERBY 250 HELP AUTH LOGIN (base64uid) 334 xxxxx (base64 password) 235 2.0.0 OK Authenticated quit 221 2.0.0 xx closing connection Connection closed by foreign host. –  SlackO Jun 16 '12 at 20:05
    
What do you see in the logs for a successful/failed connection (post the entire transaction, not only the fail line) –  Alien Life Form Jun 25 '12 at 14:37
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.