Re: [vchkpw] about smtp auth

2004-10-16 Thread Andrea Riela
Andrea Riela wrote:
Oct 16 19:16:39 observe vpopmail[34852]: vchkpw-smtps: password fail 
[EMAIL PROTECTED]:192.168.17.23
telnet 127.0.0.1 25
EHLO
250-nesys.it
250-PIPELINING
250-8BITMIME
250-SIZE 0
250 AUTH LOGIN PLAIN CRAM-MD5
AUTH CRAM-MD5
503 auth not available (#5.3.3)
AUTH PLAIN
503 auth not available (#5.3.3)
...
Andrea


Re: [vchkpw] about smtp auth

2004-10-16 Thread Andrea Riela
Andrea Riela wrote:
I've installed vpopmail with
make WITH_QMAIL_EXT=yes WITH_DOMAIN_QUOTAS=yes WITH_SPAMASSASSIN=yes
SPAM_THRESHOLD=15 RELAYCLEAR=15 WITH_CLEAR_PASSWD=yes
I've tryed it.
Now in my maillog I see that:
Oct 16 19:01:54 observe vpopmail[33600]: vchkpw-smtps: vpopmail user not 
found [EMAIL PROTECTED]:192.168.17.23
partial solution:
I've changed my runscript (as Jeremy says):
/usr/local/bin/sslserver -e -v -R -h -l 0 -x 
/usr/local/vpopmail/etc/tcp.smtp.cdb -c "$MAXSMTPD" \
-u 89 -g 89 0 465 /var/qmail/bin/qmail-smtpd 
/usr/local/vpopmail/bin/vchkpw-noroaming /bin/true 2>&1

Now my log is:
Oct 16 19:16:39 observe vpopmail[34852]: vchkpw-smtps: password fail 
[EMAIL PROTECTED]:192.168.17.23

What about this?
Regards
Andrea


Re: [vchkpw] about smtp auth

2004-10-16 Thread Andrea Riela
I've installed vpopmail with
make WITH_QMAIL_EXT=yes WITH_DOMAIN_QUOTAS=yes WITH_SPAMASSASSIN=yes
SPAM_THRESHOLD=15 RELAYCLEAR=15 WITH_CLEAR_PASSWD=yes
I've tryed it.
Now in my maillog I see that:
Oct 16 19:01:54 observe vpopmail[33600]: vchkpw-smtps: vpopmail user not 
found [EMAIL PROTECTED]:192.168.17.23

normally when I try to connect with bincimap I see:
Oct 16 19:02:01 observe vpopmail[33603]: vchkpw-imaps: (PLAIN) login 
success [EMAIL PROTECTED]:192.168.17.23

What I've to check?
Regards
Andrea


Re: [vchkpw] about smtp auth

2004-10-16 Thread Andrea Riela
Jeremy Kitchen wrote:
try authenticating right there.  http://fehcom.de/qmail/smtpauth.html
I need tls support too.
the patch is that?
http://shupp.org/patches/netqmail-1.05-tls-smtpauth-20040927.patch
thanks for any suggestion
Andrea


Re: [vchkpw] Re: chkuser and SSL with stunnel

2004-10-16 Thread tonix (Antonio Nati)


At 16/10/2004 16/10/2004 +0200, you wrote:
I think the problem is, that
qmail-smtpd is called by a wrapper program
(stunnel here) and chkuser sends log-messages to stdout when called
directly (logging enabled in this example):

chkuser sends log messages using qmail routines (that should use stderr),
but you have to route qmail-smtpd errors to right channels.
My working configuration with stunnel (I had a lot of problems with
logging and stunnel, but of different kind) is:
/usr/local/sbin/stunnel -f . -- \
qmail-smtpd /vpopmail/bin/vchkpw /usr/bin/true
2>&1 | splogger sslsmtp
&
Please note:
-f forces stunnel to stay in foreground and display error messages normally
2>&1 | splogger sslsmtp pipes all ERR output to splogger, using sslsmtp as name of the logged service
This should avoid any problem, and you have logging routed to usual log files.
Regards,
Tonino

thanks,
Florian 


    [EMAIL PROTECTED]    Interazioni di Antonio Nati 
   http://www.interazioni.it  [EMAIL PROTECTED]   





[vchkpw] Re: chkuser and SSL with stunnel

2004-10-16 Thread Florian Munz
Jeremy Kitchen <[EMAIL PROTECTED]> wrote:

> can you provide recordio [1] output of the session? (hopefully you're using
> something like sslserver from the ucspi-ssl package [2] to run this ssl
> service and not some patch to qmail-smtpd)

Stunnel wraps the non-patched qmail-smtpd to do SSL (I think the same
can be done with sslserver).

For now I've got it working by disabling CHKUSER_LOG_VALID_RCPT and
CHKUSER_LOG_VALID_SENDER in chkuser, which are repsonsible for the
output message I've seen in Thunderbird.

I think the problem is, that qmail-smtpd is called by a wrapper program
(stunnel here) and chkuser sends log-messages to stdout when called
directly (logging enabled in this example):

brain:/var/qmail/bin# ./qmail-smtpd
220 myhosting.de ESMTP
rcpt to: <[EMAIL PROTECTED]>
CHKUSER accepted rcpt: from <[EMAIL PROTECTED]::> remote <:unknown:unknown>
rcpt <[EMAIL PROTECTED]> : found existing recipient
250 ok

brain:/var/qmail/bin# telnet localhost 25
Trying 127.0.0.1...
Connected to localhost.myhosting.de.
Escape character is '^]'.
220 myhosting.de ESMTP
rcpt to: <[EMAIL PROTECTED]>
250 ok

brain:/var/qmail/bin# openssl s_client -connect localhost:465 -state
[snipped SSL output]
220 myhosting.de ESMTP
rcpt to: <[EMAIL PROTECTED]>
CHKUSER accepted rcpt: from <[EMAIL PROTECTED]::> remote <:unknown:unknown>
rcpt <[EMAIL PROTECTED]> : found existing recipient
250 ok


thanks,
Florian


Re: [vchkpw] about smtp auth

2004-10-16 Thread Andrea Riela
Jeremy Kitchen wrote:
Do you have clear password
support in vpopmail?
I've installed vpopmail with
make WITH_QMAIL_EXT=yes WITH_DOMAIN_QUOTAS=yes WITH_SPAMASSASSIN=yes 
SPAM_THRESHOLD=15 RELAYCLEAR=15

I need WITH_CLEAR_PASSWD=yes too?
Regards
Andrea