Date: Tue, 05 Oct 2004 15:14:28 +0200 From: Andreas =?iso-8859-1?Q?Wider=F8e?= Andersen <andreas@wideroe.net> To: Ed Budd <ebudd@grokking.org> Cc: freebsd-questions@freebsd.org Subject: Re: Mail auth and FreeBSD/Sendmail Message-ID: <6.1.2.0.2.20041005151009.022c7ec0@malibu.wideroe.net> In-Reply-To: <416291F4.5040005@grokking.org> References: <6.1.2.0.2.20041005133806.02180e20@malibu.wideroe.net> <416291F4.5040005@grokking.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Thanks! However, could you please give me some more specific directions?=20 Today my sendmail.mc file looks like this: divert(0) VERSIONID(`$FreeBSD: src/etc/sendmail/freebsd.mc,v 1.10.2.18 2003/04/24=20 16:57:30 gshapiro Exp $') OSTYPE(freebsd4) DOMAIN(generic) FEATURE(access_db, `hash -o -T<TMPF> /etc/mail/access') FEATURE(blacklist_recipients) FEATURE(local_lmtp) FEATURE(mailertable, `hash -o /etc/mail/mailertable') FEATURE(virtusertable, `hash -o /etc/mail/virtusertable') INPUT_MAIL_FILTER(`spamassassin', `S=3Dlocal:/var/run/spamass-milter.sock,= =20 F=3D, T=3DC:15m;S:4m;R:4m;E:10m') dnl set SASL options TRUST_AUTH_MECH(`GSSAPI DIGEST-MD5 CRAM-MD5 LOGIN')dnl define(`confAUTH_MECHANISMS', `GSSAPI DIGEST-MD5 CRAM-MD5 LOGIN')dnl define(`confDEF_AUTH_INFO', `/etc/mail/auth-info')dnl define(`confBIND_OPTS', `WorkAroundBrokenAAAA') define(`confNO_RCPT_ACTION', `add-to-undisclosed') define(`confPRIVACY_FLAGS', `authwarnings,noexpn,novrfy') MAILER(local) MAILER(smtp) Should I just replace the TRUST/SASL lines with: TRUST_AUTH_MECH(`LOGIN PLAIN')dnl define(`confAUTH_MECHANISMS', `LOGIN PLAIN')dnl Don't want to try it at the moment without knowing more since it is a live= =20 system. Thanks for your help! Andreas --- At 14:22 05.10.2004, you wrote: >Andreas Wider=F8e Andersen wrote: >>Hi all, >>I'm running FreeBSD 4.7 Stable on one of my servers and Sendmail 8.12.10.= =20 >>I'm trying to get mail auth to work so that my users can send mail (smtp= =20 >>port 25) through this server no matter which net they are connected to. I= =20 >>have installed cyrus-sasl-1.5.28_3 and followed the description given on= =20 >>this page=20 >>http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/smtp-auth.html.= =20 >>Everything seems to work and all tests give the expected results. >>I have also looked at this page=20 >>http://www.sendmail.org/~ca/email/auth.html and done the initial test: >>#telnet localhost 25 >>Trying ::1... >>Trying 127.0.0.1... >>Connected to localhost. >>Escape character is '^]'. >>220 my.server.com ESMTP Sendmail 8.12.10/8.12.10; Tue, 5 Oct 2004=20 >>13:31:13 +0200 (CEST) >>ehlo localhost >>250-my.server.com Hello localhost [127.0.0.1], pleased to meet you >>250-ENHANCEDSTATUSCODES >>250-PIPELINING >>250-8BITMIME >>250-SIZE >>250-DSN >>250-ETRN >>250-AUTH DIGEST-MD5 CRAM-MD5 LOGIN >>250-DELIVERBY >>250 HELP >>When I'm testing sending mail through this server (as smtp server) I use= =20 >>Eudora 6.1 from my WinXP PC. I always get relaying denied and it doesn't= =20 >>seem to check username/password. >>Here's what my logfile and Eudora log says: >>Oct 5 13:35:18 myserver sendmail[59394]: i95BZIow059394:=20 >>ruleset=3Dcheck_rcpt, arg1=3D<andreas@xxxxx.no>,=20 >>relay=3Dmy.ip.address.domain.com [x.x.x.x], reject=3D550 5.7.1=20 >><andreas@xxxxx.no>... Relaying denied. Proper authentication required. >>I would be very grateful for any help here. I'm stuck and I don't know=20 >>what to check next. > >Try adding 'PLAIN' to the list of allowed authentications in your sendmail= =20 >*.mc file, rebuild, and restart sendmail. Then test to see that it's=20 >advertised like you did above... > >Hope that helps, > > >EB >_______________________________________________ >freebsd-questions@freebsd.org mailing list >http://lists.freebsd.org/mailman/listinfo/freebsd-questions >To unsubscribe, send any mail to= "freebsd-questions-unsubscribe@freebsd.org" --- Andreas Wideroe Andersen <andreas@wideroe.net> Mobile: (+47) 90 92 61 21 http://www.filmshooting.com=20
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?6.1.2.0.2.20041005151009.022c7ec0>