From owner-freebsd-ports@freebsd.org Wed Jul 29 19:26:51 2015 Return-Path: Delivered-To: freebsd-ports@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 2D0C89AEE32 for ; Wed, 29 Jul 2015 19:26:51 +0000 (UTC) (envelope-from gahr@FreeBSD.org) Received: from mail.ptrcrt.ch (ptrcrt.ch [37.252.124.203]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 8C4AF1EAC for ; Wed, 29 Jul 2015 19:26:50 +0000 (UTC) (envelope-from gahr@FreeBSD.org) Received: from ptrcrt.ch (mail.ptrcrt.ch [192.168.1.1]) by mail.ptrcrt.ch (OpenSMTPD) with ESMTPSA id f6d9cd3a TLS version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO; Wed, 29 Jul 2015 19:26:39 +0000 (UTC) Date: Wed, 29 Jul 2015 21:26:38 +0200 From: Pietro Cerutti To: "Herbert J. Skuhra" Cc: freebsd-ports@FreeBSD.org Subject: Re: opensmtpd-5.7.1 - cannot authenticate Message-ID: <20150729192638.GG1490@ptrcrt.ch> Reply-To: gahr@FreeBSD.org References: <20150727184747.GK45849@ptrcrt.ch> <20150728132433.GB45930@oslo.ath.cx> <20150728192405.GQ45849@ptrcrt.ch> <20150729183736.GA16103@oslo.ath.cx> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="X3gaHHMYHkYqP6yf" Content-Disposition: inline In-Reply-To: <20150729183736.GA16103@oslo.ath.cx> X-PGP-Key: fp="DA6D E106 A5B8 54B8 5DD8 6D49 ADD0 D38E A192 089E"; id="0xA192089E"; get=; get=; User-Agent: Mutt/1.5.23 (2014-03-12) X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Jul 2015 19:26:51 -0000 --X3gaHHMYHkYqP6yf Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On 2015-Jul-29, 20:37, Herbert J. Skuhra wrote: > On Tue, Jul 28, 2015 at 09:24:05PM +0200, Pietro Cerutti wrote: > > On 2015-Jul-28, 15:24, Herbert J. Skuhra wrote: > > > On Mon, Jul 27, 2015 at 08:47:47PM +0200, Pietro Cerutti wrote: > > > > Hi, > > > >=20 > > > > I tried to upgrade from 5.4.6 to 5.7.1, and suddenly I am unable > > > > to authenticate. This is from the log file: > > > >=20 > > > > Jul 27 17:05:03 mail smtpd[12146]: smtp-in: Failed command on > > > > session a0516551dc7a4dc4: "AUTH PLAIN (...)" =3D> 501 5.5.2 Syntax > > > > error: Syntax error > > > >=20 > > > > Relevant config lines area > > > >=20 > > > > pki mydomain certificate > > > > "/usr/local/etc/mail-admin/tls/server.crt" pki mydomain key > > > > "/usr/local/etc/mail-admin/tls/server.key" table credentials > > > > file:/usr/local/etc/mail-admin/db/auth-smtp.db listen on > > > > 192.168.1.1 secure auth-optional pki mydomain > > >=20 > > > What's the output of 'file > > > /usr/local/etc/mail-admin/db/auth-smtp.db'? Maybe you need db: > > > not file:? > >=20 > > it's an ASCII file, as it was with 5.4.6. As I said, no config > > (including backend table files) has changed. > >=20 > > > > I am able to switch from the 5.4.6 to the 5.7.1 binary and > > > > reproduce that I can send mail with the former and cannot with > > > > the latter. No config has changed. > > >=20 > > > Have you tried to run 'smtpd -dv' or 'smtpd -dv -T all'? > >=20 > > Here's the output from smtpd -dv -T all. > >=20 > > Thank you! >=20 > Opensmtpd 5.7.1p1 obviously has a problem when the auth username > contains "@" (e.g: foo@example.com). As it turns out, the problem is not with the "@" char but rather with usernames longer than LOGIN_NAME_MAX. I worked around the issue by defining it to a large enough value in Makefile. As I've been told on FreeNode/#opensmtpd, this is not a real solution, though. --=20 Pietro Cerutti The FreeBSD Project gahr@FreeBSD.org PGP Public Key: http://gahr.ch/pgp --X3gaHHMYHkYqP6yf Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQJ8BAEBCgBmBQJVuSjuXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXREQTZERTEwNkE1Qjg1NEI4NUREODZENDlB REQwRDM4RUExOTIwODlFAAoJEK3Q046hkgiekcEP/2iiQGLfIgZ1bBqL1szJC2RX hUr7JwTMuTOS1U6aEBLv0m/o1Jv/YhEh3F0yaL8XMazlOa+nvU6C+5glSX3tanMe KNoB7kAdnZoXHA7ad9QgEX3Hr3xo3rlwljtuwKIhLA7F+g8uQiqeBL1MxLTBUhMu FKaRJz53KyLHqfMwY49qCC+9eRRkH0NPe93atpLenUuVvlifsg49G64e/th0qGI5 4u1Nz4/QIdMrxdyf2zbvCnZK5lwp9pryym+kbwm9mZ72dSbA9grEq7pKSjetBsSK hLJbAEjTcV0ntSFfnSwoD3t8mldmGRkgRN2O+5g6DPN9YzJh2zZgV8unQOhq2FoU WBCqTBcW2nIWOg67lKf5vNJQyRgsp7YIxmXPjcwFEq2/CmMCTNdCGaCzgKI97MPV r1GxZbTPvvRQZEdLEO0+jz4PmWU7G+7Tg5fVy/yjzpLPypjsi084k0yfaohwFCzC 270B3AlR1qWr+Ul6eIQB2JdIRtlrhZV2Ucza5CVZfrjFkD0XHmTJk733nsPYtsZ4 Yes/2FtiH0/aXlsh77WHUiT4i+omdZ1f1w+MEYJobcd9g2ZP4sLiu69dX+Ef1mtA 7v4/Wnc339tHuM3L2v7hAErnamNEwoDHQlzu7dsMBKRrY6dyJEj4RO8B2dNJfEhe tfSf42n8HsO/Da/ljEYg =tgcr -----END PGP SIGNATURE----- --X3gaHHMYHkYqP6yf--