Pantek Library
Hosting Provided By
CybrHost
High Speed Hosting

NEWBIE: Sendmail and SMTP AUTH on OpenBSD 3.2

From: Albert Weinert <albert.weinert(at)awn-design.biz>
Date: Sun Mar 23 2003 - 19:42:42 EST


Hi Folks,

I have a little problem with sendmail and OpenBSD 3.2.

My ISP will drop down his current smtp server (which is an open one and using for spams) and will use in the near future an smtp server which needs SMTP AUTH, so that i must change my mailserver, with sendmail, to act as a SMTP AUTH client. Currently i use an old SUSE-Linux (7.3, also no SMTP AUTH possible), but i would like to switch to the secure and stable OpenBSD!

The machine i used is a clean one, with only OpenBSD 3.2 installed (FTP-installation, no X, cause it should be a mail and fileserver). Currently using it on VMWare for testing purposes.

The preinstalled sendmail does not support SMTP AUTH .. (Message that i must use -DSASL during start) .. I googled arround and found that this was a compile option. Ok, Sendmail has also a big bug, so that es new compile is even neccesary.

First, i read many information ... Then i get the cyrus-sasl-1.5.27p1 Package (via pkg_add), download the current sources (2.12.8) from sendmail.org. Doing the need changes in the .m4 files ... Doing "sh Build -c" (after some problems with the include and libs, i get i work (via site.config.m4)) ... Hey, an actual sendmail 2.12.8 with SASL support compiled (size over 620k, the preinstalled was 12k!) is running on my virtual machine (after i do a "sh Build install").

The Problem ist, i does not work. I get directly a response from my MAILER-DAEMON. Also it makes no difference using a mail-client from another computer, or using the mail command direct from sh-shell.

Here an extract of the Message.

Do you need help?X

[---]

  • Transcript of session follows ----- ... while talking to smtp.1und1.com:
    >>> MAIL From:<aweinert@awn-design.biz> SIZE=670
    <<< 530 Authentication required 554 5.0.0 Service unavailable [...] --h2NFp5du002960.1048434665/anke.awn-design.biz Content-Type: message/delivery-status

Reporting-MTA: dns; anke.awn-design.biz
Received-From-MTA: DNS; [192.168.2.100]
Arrival-Date: Sun, 23 Mar 2003 16:51:04 +0100 (CET)

Final-Recipient: RFC822; info@der-albert.com Action: failed
Status: 5.0.0
Diagnostic-Code: SMTP; 530 Authentication required Last-Attempt-Date: Sun, 23 Mar 2003 16:51:05 +0100 (CET) [----]

That say to me that SMTP AUTH does not realy work.

This is my, current, M4 Source for creating a sendmail.cf (sendmail.cf is used, the rc.conf.local is changed to do that, so that not localhost.cf would be used)

---
divert(0)dnl
VERSIONID(`@(#)openbsd-awn.mc $Revision: 1.6 $')
OSTYPE(openbsd)
LOCAL_CONFIG
define(`SMART_HOST', `esmtp:smtp.1und1.com')
FEATURE(`use_cw_file')dnl
FEATURE(`access_db')dnl
MASQUERADE_AS(`awn-design.biz')dnl
FEATURE(`masquerade_envelope')dnl
FEATURE(`nouucp',`reject')
define(`confAUTH_MECHANISMS', `PLAIN')dnl
dnl FEATURE(`authinfo')dnl
dnl TRUST_AUTH_MECH(`PLAIN')dnl
MAILER(local)
MAILER(smtp)
---

--- /etc/rc.conf.local
sendmail_flags="-L sm-mta -C/etc/mail/sendmail.cf -bd -q1m"
httpd_flags="-DSSL"

--- /etc/mail/access (hashed to access.db)
192.168 RELAY
awn-design.biz  RELAY
AuthInfo:smtp.1und1.com "U:mypersonal" "P:secret"

Also using the feature "authinfo" and putting the AuthInfo: Line in the
files /etc/mail/authinfo (and of course hashing that to authinfo.db)
doesn't helps. For the restart of sendmail i used es scipt which
automaticly hash all needed files and using the flags from rc.conf.local
for starting sendmail.

Using an other smarthost which doesn't requires SMTP AUTH, the mail
server works.

I read many many internetpages, faq and docs, googled around and i found
that my isp used PLAIN as authentification code, and that my
configuration should work (i the given examples with Debian and Linux)
... But it doesn't work on my OpenBSD installation, so there must be a
problem ... 

Please help me!

Best Regards

Albert Weinert
Received on Sun Mar 23 19:43:45 2003

This archive was generated by hypermail 2.1.8 : Wed Aug 23 2006 - 13:33:44 EDT


Contact Us  Legal Notices  Order Services Online 
Pantek Home  Privacy Policy  IT news  Site Map  Pantek Library