Subject: Re: Sendmail SMTP auth w/ SASL2
To: Chris Ross <cross+netbsd@distal.com>
From: Adrian Portelli <adrianp@stindustries.net>
List: tech-pkg
Date: 11/17/2004 15:57:39
Sorry, I should probably explain myself a little better:

When you do an "EHLO foo.bar" the server should respond with the auth 
mechanisims it supports e.g. PLAIN, LOGIN etc

 From http://www.sendmail.org/~ca/email/auth.html#AUTH

% telnet localhost 25
Trying 127.0.0.1...
Connected to localhost
Escape character is '^]'.
220 local.sendmail.ORG ESMTP Sendmail 8.10.0/8.10.0; Thu, 9 Sep 1999 
10:48:44 -0700 (PDT)
ehlo localhost
250-local.sendmail.ORG Hello localhost [127.0.0.1], pleased to meet you
250-ENHANCEDSTATUSCODES
250-DSN
250-AUTH DIGEST-MD5 CRAM-MD5
250 HELP
quit

Each of the modes supported has a corresponding security/cy2-* package.
So if for example you wanted to allow the PLAIN and LOGIN methods you 
would need to install cy2-plain and cy2-login. (Of course this is a "bad 
idea" (tm) unless you are implementing TLS as well).  This would then 
use saslauthd to auth the users against /etc/passwd.

In addition to this there are cf (mc) directives as to what mechanisms 
set advertised so I'd check your cf (mc) files as well. Specifically 
look for confAUTH_MECHANISMS and I'm pretty sure there are others as well.

So my questions to you should really have been what cy2-* packages do 
you have installed and what AUTH mechanisms is sendmail actually 
advertising ?

Also have a look at http://www.sendmail.org/~ca/email/auth.html

adrian.


Chris Ross wrote:

> 
>   Hi there.  I have a 2.0_RC4 machine that I'm trying to get SMTP
> AUTH working on.
> 
>   I've built the pkgsrc sendmail 8.12.11 and replaced the system
> sendmail with it.  It seems to work alright, and "AUTH ..." is
> listed in response to EHLO.
> 
>   However, when prompted for a password, I give it only to be
> prompted again by my client.  The /var/log/authlog on the server
> says:
> 
> Nov 17 09:55:08 harmony sm-mta[19007]: could not find auxprop plugin, 
> was searching for [all]
> Nov 17 09:55:08 harmony sm-mta[19007]: OTP: auxprop backend can't store 
> properties
> 
>   I'm not sure why it's trying to use auxprop, nor do I know
> how to have it find it, if that is what I want to do.
> 
>   I've installed saslauthd, and it's running (-a getpwent).  But,
> I don't think it's being used.  I've created a 
> /usr/pkg/lib/sasl2/Sendmail.conf,
> which contains only the line:
> 
> pwcheck_method: saslauthd
> 
>   Does anyone see anything obvious I've done wrong?  Thanks...
> 
>                             - Chris
> 
>