SMTP_AUTH

["Ayitey Bulley" <abulley at ghana.com>]

Hi ,

I am trying to configure smtp_auth in Exim. Exim version is 4.10 running on
linux 4.7. The problem I am trying to solve is as follows.

* I don't want anyone else apart from my dial-in subscribers to relay thru
my smtp server.

----------------
hostlist relay_from_hosts = 127.0.0.1 : 196.3.64.0/24
----------------

* I have subscribers who use some roaming service to pickup their mail when
they travel.

* I would like to provide relaying services for those subscribers who use
the
ipass roaming service i.e. smtp_auth (passing encrypted data over smtp
connection the  will be very cool).  Currently I have the ff in my exim
config file

--------------------
begin authenticators

fixed_login:
  driver = plaintext
   public_name = LOGIN
   server_prompts = "Username:: : Password::"
   server_condition = ${if and{{eq{$1}{bulley}}{eq{$2}{password}}}{yes}{no}}
   server_set_id = $1
----------------------

And this seems to work with my outlook express MUA, however it does not
scale well. How do I get it to use the /etc/passwd file to authenticate or
some other file (/usr/exim/smtp_auth_users). I have tried the following
config

---------------------
begin authenticators

fixed_login:
   driver = plaintext
   public_name = LOGIN
   server_prompts = "Username:: : Password::"
   server_condition = ${if crypteq{$3}\

{${extract{1}{:}{${lookup{$2}lsearch{/usr/exim/smtp_auth_users}{$value}}}}\
       }{yes}{no}}
   server_set_id = $1     # NOTE: I have tried $2 and $3 here with no
success
----------------

I have also tried

-------------
fixed_plain:
   driver = plaintext
   public_name = PLAIN
   server_prompts = :
   server_condition = ${if crypteq{$3}\

{${extract{1}{:}{${lookup{$2}lsearch{/usr/exim/smtp_auth_users}{$value}}}}\
         }{yes}{no}}
    server_set_id = $2
-----------------

with no success. I read that outlook express work only with the plaintext
(LOGIN) and
not the PLAIN type of authenticator

The transcript I get when I run exim to debug auth (-bd -d-all+auth -q15m)

---------------debug transcript---------------------------------
Connection request from 213.172.132.46 port 1373
1 SMTP accept process running
Listening...
Process 3773 is handling incoming connection from [213.172.132.46]
LOG: smtp_connection MAIN
  SMTP connection from [213.172.132.46] (TCP/IP connection count = 1)
Process 3773 is ready for new message
crypteq: using crypt()
  subject=
  crypted=
fixed_login authenticator:
  $1 = bulley
  $2 = password
expanded string: no
LOG: MAIN REJECT
  Authentication failed for (aklonto) [213.172.132.46]: 535 Incorrect
authentication data (set_id=bulley)
LOG: smtp_connection MAIN
  SMTP connection from (aklonto) [213.172.132.46] lost
child 3773 ended: status=0x100
0 SMTP accept processes now running
----------------------------------------------------------------

I have been banging my head and searching for a solution for a while. Can
anyone out ther help??? I can provide more information if need be.


--Ayitey Bulley


-----
This is the afnog mailing list, managed by Majordomo 1.94.5

To send a message to this list, e-mail afnog at afnog.org
To send a request to majordomo, e-mail majordomo at afnog.org and put
your request in the body of the message (i.e use "help" for help)

This list is maintained by owner-afnog at afnog.org