Date: Tue, 21 Oct 2003 10:00:08 +0400 From: =?koi8-r?B?5MXK1MXSIOHMxcvTwc7E0iD3wczF0tjF18ne?= <tiamat@komi.mts.ru> To: "Scot W. Hetzel" <hetzelsw@westbend.net>, <freebsd-current@freebsd.org> Cc: "Jacques A. Vidrine" <nectar@freebsd.org> Subject: Re: bug in NSS ? Message-ID: <005001c39798$958ee920$b901320a@komi.mts.ru> References: <003801c396f6$6b00ed90$b901320a@komi.mts.ru><00d201c3972a$4b5f6730$13fd2fd8@Admin02><001a01c3972f$6d8892f0$1d01320a@komi.mts.ru> <000a01c3976c$6bfe35b0$13fd2fd8@Admin02> <001f01c39771$26840230$13fd2fd8@Admin02>
next in thread | previous in thread | raw e-mail | index | archive | help
> > > my /usr/local/lib/sasl2/Sendmail.conf:
> > > pwcheck_method: auxprop
> > > auxprop_plugin: sasldb
> > Is the Sendmail.conf file the same as the FreeBSD file on the Solaris 8
> > system?
yes of course. On Solaris8 box and FreeBSD box i have a identical
configuration.
> Does sasldblistusers2 on the Solaris 8 system list the test user in the
> sasldb file? If it does, is their a test user in the FreeBSD sasldb file?
yes.
# sasldblistusers2
smmsp@server.komi.mts.ru: userPassword
test@server.komi.mts.ru: userPassword
on FreeBSD and Solaris i can successfully authenticate any user from sasldb
via SMTP with sendmail:
# perl -e 'use MIME::Base64; print encode_base64("test\0test\0test");'
dGVzdAB0ZXN0AHRlc3Q=
$ telnet localhost 25
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
220 server.komi.mts.ru ESMTP Sendmail 8.12.10/8.12.10; Tue, 21 Oct 2003
13:29:41 +0400 (MSD)
ehlo test
250-server.komi.mts.ru Hello localhost [127.0.0.1], pleased to meet you
250-ENHANCEDSTATUSCODES
250-PIPELINING
250-8BITMIME
250-SIZE
250-DSN
250-ETRN
250-AUTH CRAM-MD5 DIGEST-MD5 NTLM LOGIN PLAIN
250-DELIVERBY
250 HELP
AUTH PLAIN dGVzdAB0ZXN0AHRlc3Q=
235 2.0.0 OK Authenticated
quit
221 2.0.0 server.komi.mts.ru closing connection
Connection closed by foreign host.
But, user test (from ldap) on FreeBSD cannot send mail from command line via
/usr/bin/mail or /usr/sbin/sendmail (if MSP use AUTH):
%id
uid=1000(test) gid=1000(test) groups=1000(test)
%date | /usr/sbin/sendmail -v root
root... Connecting to [127.0.0.1] via relay...
220 server.komi.mts.ru ESMTP Sendmail 8.12.10/8.12.10; Tue, 21 Oct 2003
13:44:57 +0400 (MSD)
>>> EHLO server.komi.mts.ru
250-server.komi.mts.ru Hello localhost [127.0.0.1], pleased to meet you
250-ENHANCEDSTATUSCODES
250-PIPELINING
250-8BITMIME
250-SIZE
250-DSN
250-ETRN
250-AUTH CRAM-MD5 DIGEST-MD5 NTLM LOGIN PLAIN
250-DELIVERBY
250 HELP
>>> QUIT
221 2.0.0 server.komi.mts.ru closing connection
root... Deferred: Temporary AUTH failure
Closing connection to [127.0.0.1]
On Solaris this work fine.
And any user from /etc/passwd can successfully send mail from command line
via /usr/bin/mail or /usr/sbin/sendmail (if MSP use AUTH) on Solaris and
FreeBSD:
$ id
uid=70(pgsql) gid=70(pgsql) groups=70(pgsql)
$ date|/usr/sbin/sendmail -v root
root... Connecting to [127.0.0.1] via relay...
220 server.komi.mts.ru ESMTP Sendmail 8.12.10/8.12.10; Tue, 21 Oct 2003
13:51:05 +0400 (MSD)
>>> EHLO server.komi.mts.ru
250-server.komi.mts.ru Hello localhost [127.0.0.1], pleased to meet you
250-ENHANCEDSTATUSCODES
250-PIPELINING
250-8BITMIME
250-SIZE
250-DSN
250-ETRN
250-AUTH CRAM-MD5 DIGEST-MD5 NTLM LOGIN PLAIN
250-DELIVERBY
250 HELP
>>> AUTH PLAIN c21tc3AAc21tc3AAc21tc3A=
235 2.0.0 OK Authenticated
>>> MAIL From:<pgsql@server.komi.mts.ru> SIZE=29
AUTH=pgsql@server.komi.mts.ru
250 2.1.0 <pgsql@server.komi.mts.ru>... Sender ok
>>> RCPT To:<root@server.komi.mts.ru>
>>> DATA
250 2.1.5 <root@server.komi.mts.ru>... Recipient ok
354 Enter mail, end with "." on a line by itself
>>> .
250 2.0.0 h9L9p5XM000790 Message accepted for delivery
root... Sent (h9L9p5XM000790 Message accepted for delivery)
Closing connection to [127.0.0.1]
>>> QUIT
221 2.0.0 server.komi.mts.ru closing connection
AUTH PLAIN c21tc3AAc21tc3AAc21tc3A= - is authinfo for user smmsp
(smmsp\0smmsp\0smmsp):
# perl -e 'use MIME::Base64;print decode_base64("c21tc3AAc21tc3AAc21tc3A=")
, "\n";'
smmspsmmspsmmsp
Why auth work for local users and don't work for nss_ldap users ?
Thanks!
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?005001c39798$958ee920$b901320a>