SASL AUTH LOGIN became mad !

This is a discussion on SASL AUTH LOGIN became mad ! within the alt.comp.mail.postfix forums, part of the Mail Servers and Related category; Hello, I have à big problem with cyrus and libsasl2-login on Mandrake 9.2. We tried to use SMTP with ...


Go Back   Usenet Forums > Mail Servers and Related > alt.comp.mail.postfix

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 01-28-2005
COLLADO Samuel
 
Posts: n/a
Default SASL AUTH LOGIN became mad !

Hello,

I have à big problem with cyrus and libsasl2-login on Mandrake 9.2.
We tried to use SMTP with sasl authentication. We installed
libbsasl2-plain and libsasl2-login (for outlook).
All was ok until we found some LARGE mail queue.

In fact, it's very simple to bypass authentication and create an open
relay. Strange :-(

Example :

[scollado@zeus scollado]$ telnet myserveur 25
Trying XXX.XXX.XXX.XXX...
Connected to myserveur
Escape character is \'^]\'.
220 myserver
EHLO toto.com
250-myserveur
250-PIPELINING
250-SIZE 10240000
250-ETRN
250-AUTH DIGEST-MD5 CRAM-MD5 LOGIN PLAIN
250-AUTH=DIGEST-MD5 CRAM-MD5 LOGIN PLAIN
250 8BITMIME
AUTH LOGIN
334 VXNlcm5hbWU6
hello
334 UGFzc3dvcmQ6
UGFzc3dvcmQ6
235 Authentication successful

We tried to rebuild your own library but nothing changed !
Could you help me?

Thank you
Reply With Quote
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 07:06 AM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0